last executing test programs: 1m2.27306827s ago: executing program 4 (id=240): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getgroups(0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x8840) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x6, 0x0, '\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_WEIGHT={0x8, 0xf, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m2.244892484s ago: executing program 0 (id=241): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44080) r2 = openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) 1m1.152067223s ago: executing program 4 (id=243): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(0x0, 0x0) 1m0.668300504s ago: executing program 2 (id=245): socket$kcm(0xa, 0x5, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80001) close_range(r3, 0xffffffffffffffff, 0x0) 1m0.406987084s ago: executing program 0 (id=247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = io_uring_setup(0x2d75, &(0x7f0000000140)={0x0, 0xffffffff, 0x4, 0x0, 0xffffdffd}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @null}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = dup3(r5, r4, 0x0) syz_create_resource$binfmt(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e24, 0x7, @mcast2, 0x80000000}, {0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x40e}, 0x1, {[0xce8, 0x6, 0x6, 0x1, 0x10000, 0x3, 0xfffff258, 0xf85]}}, 0x5c) r9 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast2}, &(0x7f0000000200)=0xc) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000440)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)}, 0x4) 59.670245657s ago: executing program 2 (id=249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x3a62, &(0x7f00000000c0)={0x0, 0xe36e, 0x4, 0x1, 0xffffffff}, &(0x7f0000000000), 0x0) 59.202881587s ago: executing program 4 (id=250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="76657468315f6d61fd76746170323500be074933c0faed51e5902d22c1a981397f2a7a1d12376aaf1e41178bf64785f1e1605b34a7eabe845db0cd0f7a74d089b93ee70000008000000000ee67b9a5a1e241abbf1e45e81ea90301042e34376297a783b769dd0c757f2e59814e9204d98e897f83"], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 58.791095404s ago: executing program 1 (id=252): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) open_tree(r4, &(0x7f0000000580)='./file0\x00', 0x100) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa020800450000280000cab9aea98377f12e14bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 57.883645176s ago: executing program 2 (id=253): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x20002) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) madvise(&(0x7f00002c7000/0x4000)=nil, 0x4000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000003c0)) dup3(0xffffffffffffffff, r4, 0x0) 57.672795598s ago: executing program 1 (id=254): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getgroups(0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x8840) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x6, 0x0, '\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_WEIGHT={0x8, 0xf, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 57.655618574s ago: executing program 3 (id=255): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x64, @private1, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) 57.562789752s ago: executing program 4 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 57.56231461s ago: executing program 0 (id=257): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113b69df8bea4cbc913f2c215bc12e941d", 0x16}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a4925ddf3dd14992612d22032093742f07fd8d9723bed7707077473de16c3f5820b5dc6f1c37dbaaba20c", 0xd9}, {&(0x7f0000000300)="47788f64ba10044b682c594fa485c04663ed58f30031ae1cff3613c3178c76ab0613419d80cf2ebb2efedf9237b34b3e925f7695a250556a4ff5e460bfdf593f20253f90740976f323c00df882e4285d5fa368cf147e38ee08ae4aa4fdfe618be117a5e45e516c6259b68e1b9cf170cc831498d2db68532fe3acf3cdef8e18488541cacfa624eecc49d9a853f4a7cc8c3d7d0ac7c271bcfc989591b98b6b1c93d818cf4c0ff77fd8bb4f83102c41ebee", 0xb0}], 0x3}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x10048095, 0x0, 0x0) 56.633335078s ago: executing program 3 (id=258): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20000811) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44080) r2 = openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) 56.532150627s ago: executing program 2 (id=259): syz_usbip_server_init(0x1) syz_io_uring_setup(0x476b, &(0x7f0000000040)={0x0, 0x7def, 0x2010, 0x3, 0x375}, &(0x7f00000000c0), 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffe4, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404f8b2750100d9ee5d9b950660735f91d2c7bae055c7fd2e105b7b373106000000000000"], 0xd) 56.514212899s ago: executing program 0 (id=260): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(0x0, 0x0) 56.440214441s ago: executing program 1 (id=261): socket$kcm(0xa, 0x5, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 55.805980045s ago: executing program 3 (id=262): socket$inet6(0xa, 0x3, 0x3) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xb, 0x6b}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4005405}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x100a, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000280)=@arm64_sys={0x603000000013804e, &(0x7f0000000240)=0x8000000000000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000003dfe000000020000000900020073797a32000000000900010073797a300000000028000480240001800b00010065787468647200001400028008000540000000010800064000000081"], 0x7c}}, 0x8050) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 55.390409562s ago: executing program 0 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r8}) r9 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r9, 0x5523, 0x0) 55.162791092s ago: executing program 2 (id=264): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x3a62, &(0x7f00000000c0)={0x0, 0xe36e, 0x4, 0x1, 0xffffffff}, &(0x7f0000000000), 0x0) 54.664876598s ago: executing program 1 (id=265): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) open_tree(r4, &(0x7f0000000580)='./file0\x00', 0x100) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa020800450000280000cab9aea98377f12e14bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 54.662982193s ago: executing program 4 (id=266): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="76657468315f6d61fd76746170323500be074933c0faed51e5902d22c1a981397f2a7a1d12376aaf1e41178bf64785f1e1605b34a7eabe845db0cd0f7a74d089b93ee70000008000000000ee67b9a5a1e241abbf1e45e81ea90301042e34376297a783b769dd0c757f2e59814e9204d98e897f83"], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 54.611426714s ago: executing program 3 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40800) 54.242527874s ago: executing program 0 (id=268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4008c2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 53.641922376s ago: executing program 2 (id=269): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x64, @private1, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) 53.530820088s ago: executing program 1 (id=270): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113b69df8bea4cbc913f2c215bc12e941d", 0x16}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a4925ddf3dd14992612d22032093742f07fd8d9723bed7707077473de16c3f5820b5dc6f1c37dbaaba20c", 0xd9}, {&(0x7f0000000300)="47788f64ba10044b682c594fa485c04663ed58f30031ae1cff3613c3178c76ab0613419d80cf2ebb2efedf9237b34b3e925f7695a250556a4ff5e460bfdf593f20253f90740976f323c00df882e4285d5fa368cf147e38ee08ae4aa4fdfe618be117a5e45e516c6259b68e1b9cf170cc831498d2db68532fe3acf3cdef8e18488541cacfa624eecc49d9a853f4a7cc8c3d7d0ac7c271bcfc989591b98b6b1c93d818cf4c0ff77fd8bb4f83102c41ebee", 0xb0}], 0x3}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x10048095, 0x0, 0x0) 53.446606474s ago: executing program 3 (id=271): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x20002) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) madvise(&(0x7f00002c7000/0x4000)=nil, 0x4000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000003c0)) dup3(0xffffffffffffffff, r4, 0x0) 53.421431211s ago: executing program 4 (id=272): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20000811) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44080) r2 = openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) 51.951316473s ago: executing program 3 (id=273): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getgroups(0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x8840) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x6, 0x0, '\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 27.936418357s ago: executing program 1 (id=274): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(0x0, 0x0) 0s ago: executing program 32 (id=268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4008c2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 55.682164][ T30] audit: type=1400 audit(1753334741.451:62): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.685390][ T5815] cgroup: Unknown subsys name 'net' [ 55.710244][ T30] audit: type=1400 audit(1753334741.451:63): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.733966][ T30] audit: type=1400 audit(1753334741.501:64): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.852701][ T5815] cgroup: Unknown subsys name 'cpuset' [ 55.860890][ T5815] cgroup: Unknown subsys name 'rlimit' [ 55.967216][ T30] audit: type=1400 audit(1753334741.731:65): avc: denied { setattr } for pid=5815 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.006793][ T30] audit: type=1400 audit(1753334741.731:66): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.027664][ T30] audit: type=1400 audit(1753334741.731:67): avc: denied { write } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 56.048220][ T30] audit: type=1400 audit(1753334741.731:68): avc: denied { read } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.068817][ T30] audit: type=1400 audit(1753334741.751:69): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.072604][ T5818] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.103666][ T30] audit: type=1400 audit(1753334741.751:70): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.126932][ T30] audit: type=1400 audit(1753334741.771:71): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 56.995880][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.173969][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.181890][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.190706][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.198442][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.205921][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.215495][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.224603][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.236176][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.243967][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.252681][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.260889][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.268256][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.276357][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.279232][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.291441][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.291476][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.311357][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.319335][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.327056][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.335196][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.346024][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.354090][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.361654][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.371231][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.380607][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.705679][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 59.737240][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 59.919719][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 59.929290][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 59.953632][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.963608][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.971063][ T5826] bridge_slave_0: entered allmulticast mode [ 59.977694][ T5826] bridge_slave_0: entered promiscuous mode [ 60.006090][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.013574][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.020891][ T5826] bridge_slave_1: entered allmulticast mode [ 60.027487][ T5826] bridge_slave_1: entered promiscuous mode [ 60.057137][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.064367][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.071746][ T5834] bridge_slave_0: entered allmulticast mode [ 60.078700][ T5834] bridge_slave_0: entered promiscuous mode [ 60.117833][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.125046][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.132315][ T5834] bridge_slave_1: entered allmulticast mode [ 60.138953][ T5834] bridge_slave_1: entered promiscuous mode [ 60.152863][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 60.167336][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.179384][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.233940][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.264890][ T5826] team0: Port device team_slave_0 added [ 60.273458][ T5826] team0: Port device team_slave_1 added [ 60.283652][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.338985][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.346193][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.353571][ T5833] bridge_slave_0: entered allmulticast mode [ 60.361482][ T5833] bridge_slave_0: entered promiscuous mode [ 60.384089][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.391237][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.398402][ T5825] bridge_slave_0: entered allmulticast mode [ 60.405491][ T5825] bridge_slave_0: entered promiscuous mode [ 60.414453][ T5834] team0: Port device team_slave_0 added [ 60.422799][ T5834] team0: Port device team_slave_1 added [ 60.435144][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.443740][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.450877][ T5833] bridge_slave_1: entered allmulticast mode [ 60.457483][ T5833] bridge_slave_1: entered promiscuous mode [ 60.473742][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.480742][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.507318][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.518760][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.525868][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.533250][ T5825] bridge_slave_1: entered allmulticast mode [ 60.539867][ T5825] bridge_slave_1: entered promiscuous mode [ 60.569626][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.576702][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.602616][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.634789][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.642222][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.649301][ T5839] bridge_slave_0: entered allmulticast mode [ 60.656687][ T5839] bridge_slave_0: entered promiscuous mode [ 60.665839][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.678095][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.694933][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.706116][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.716210][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.723177][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.749198][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.766876][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.774095][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.781339][ T5839] bridge_slave_1: entered allmulticast mode [ 60.787950][ T5839] bridge_slave_1: entered promiscuous mode [ 60.812667][ T5833] team0: Port device team_slave_0 added [ 60.829570][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.836656][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.862820][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.887361][ T5833] team0: Port device team_slave_1 added [ 60.911482][ T5825] team0: Port device team_slave_0 added [ 60.934883][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.967034][ T5825] team0: Port device team_slave_1 added [ 60.982085][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.991823][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.998757][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.025124][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.037558][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.044580][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.070783][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.085019][ T5826] hsr_slave_0: entered promiscuous mode [ 61.091320][ T5826] hsr_slave_1: entered promiscuous mode [ 61.108888][ T5834] hsr_slave_0: entered promiscuous mode [ 61.115282][ T5834] hsr_slave_1: entered promiscuous mode [ 61.121698][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.129377][ T5834] Cannot create hsr debugfs directory [ 61.156085][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.163208][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.189283][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.210999][ T5839] team0: Port device team_slave_0 added [ 61.234082][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.242554][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.268807][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.280837][ T5839] team0: Port device team_slave_1 added [ 61.305090][ T5833] hsr_slave_0: entered promiscuous mode [ 61.311345][ T5833] hsr_slave_1: entered promiscuous mode [ 61.317182][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.324790][ T5833] Cannot create hsr debugfs directory [ 61.380845][ T5832] Bluetooth: hci0: command tx timeout [ 61.386359][ T5846] Bluetooth: hci1: command tx timeout [ 61.444019][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.452981][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.480408][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.480658][ T5846] Bluetooth: hci4: command tx timeout [ 61.490967][ T5832] Bluetooth: hci2: command tx timeout [ 61.491209][ T5832] Bluetooth: hci3: command tx timeout [ 61.522239][ T5825] hsr_slave_0: entered promiscuous mode [ 61.528209][ T5825] hsr_slave_1: entered promiscuous mode [ 61.534607][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.542563][ T5825] Cannot create hsr debugfs directory [ 61.554064][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.561155][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.587368][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.753987][ T5839] hsr_slave_0: entered promiscuous mode [ 61.760987][ T5839] hsr_slave_1: entered promiscuous mode [ 61.766857][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.774654][ T5839] Cannot create hsr debugfs directory [ 61.906401][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.917352][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.931304][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.947335][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.994587][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.004788][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.017338][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.033660][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.077733][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.102323][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.126163][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.146730][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.199470][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.222254][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.233724][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.242917][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.269274][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.332249][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.360696][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.371006][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.382936][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.397573][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.414572][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.421783][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.431836][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.438895][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.451940][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.484832][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.525064][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.532192][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.542669][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.549743][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.615760][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.635447][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.681200][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 62.681214][ T30] audit: type=1400 audit(1753334748.451:86): avc: denied { sys_module } for pid=5834 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.726343][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.757876][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.764996][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.779239][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.801389][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.808482][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.845429][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.869761][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.876897][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.934145][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.941277][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.989469][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.000918][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.024056][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.037216][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.069177][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.076368][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.095679][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.102849][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.195231][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.277525][ T5834] veth0_vlan: entered promiscuous mode [ 63.355885][ T5834] veth1_vlan: entered promiscuous mode [ 63.408997][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.423407][ T5833] veth0_vlan: entered promiscuous mode [ 63.463612][ T5832] Bluetooth: hci1: command tx timeout [ 63.463617][ T5846] Bluetooth: hci0: command tx timeout [ 63.493775][ T5833] veth1_vlan: entered promiscuous mode [ 63.510626][ T5834] veth0_macvtap: entered promiscuous mode [ 63.541044][ T5832] Bluetooth: hci4: command tx timeout [ 63.541647][ T5846] Bluetooth: hci2: command tx timeout [ 63.546447][ T5832] Bluetooth: hci3: command tx timeout [ 63.564585][ T5834] veth1_macvtap: entered promiscuous mode [ 63.578011][ T5833] veth0_macvtap: entered promiscuous mode [ 63.586134][ T5825] veth0_vlan: entered promiscuous mode [ 63.599942][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.608835][ T5833] veth1_macvtap: entered promiscuous mode [ 63.632758][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.646885][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.665158][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.674297][ T5825] veth1_vlan: entered promiscuous mode [ 63.698472][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.708961][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.720242][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.728950][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.775592][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.797222][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.829508][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.842985][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.852094][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.861067][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.879416][ T5826] veth0_vlan: entered promiscuous mode [ 63.911164][ T5825] veth0_macvtap: entered promiscuous mode [ 63.919006][ T5826] veth1_vlan: entered promiscuous mode [ 63.960008][ T5825] veth1_macvtap: entered promiscuous mode [ 63.988571][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.004247][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.023916][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.048297][ T5826] veth0_macvtap: entered promiscuous mode [ 64.068989][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.093895][ T5839] veth0_vlan: entered promiscuous mode [ 64.106728][ T5826] veth1_macvtap: entered promiscuous mode [ 64.115718][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.124125][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.134423][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.135011][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.143924][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.159716][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.172871][ T5839] veth1_vlan: entered promiscuous mode [ 64.195774][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.199955][ T30] audit: type=1400 audit(1753334749.961:87): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.3o0lAq/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.204789][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.248179][ T30] audit: type=1400 audit(1753334749.961:88): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.272713][ T30] audit: type=1400 audit(1753334749.961:89): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.3o0lAq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.298493][ T30] audit: type=1400 audit(1753334750.001:90): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.321516][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.328689][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.329817][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.342979][ T30] audit: type=1400 audit(1753334750.001:91): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.3o0lAq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.379611][ T30] audit: type=1400 audit(1753334750.001:92): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.3o0lAq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.411191][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.419010][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.421845][ T30] audit: type=1400 audit(1753334750.011:93): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.493541][ T30] audit: type=1400 audit(1753334750.041:94): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.500911][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.517552][ T30] audit: type=1400 audit(1753334750.041:95): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="gadgetfs" ino=6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.529279][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.557692][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.566424][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.580959][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.588759][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.602841][ T5839] veth0_macvtap: entered promiscuous mode [ 64.619430][ T5839] veth1_macvtap: entered promiscuous mode [ 64.687210][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.721043][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.759972][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.007036][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.354364][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.369031][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.369497][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.387090][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.397248][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.406411][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.407510][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.450781][ T5952] netlink: 'syz.2.3': attribute type 25 has an invalid length. [ 65.459410][ T5952] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 65.470685][ T5952] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 65.477542][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.497210][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.532457][ T5954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.542462][ T5832] Bluetooth: hci1: command tx timeout [ 65.548800][ T5846] Bluetooth: hci0: command tx timeout [ 65.574228][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 65.698035][ T5846] Bluetooth: hci2: command tx timeout [ 65.703851][ T5846] Bluetooth: hci3: command tx timeout [ 65.709245][ T5846] Bluetooth: hci4: command tx timeout [ 65.809032][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.827813][ T5956] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 65.837441][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.862139][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.886273][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.111542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.120209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 66.141517][ T5958] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 5441, magic 54 != 6b] [ 66.247479][ T5965] Zero length message leads to an empty skb [ 66.339905][ T5968] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 66.354832][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.401868][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.419324][ T5968] bond0: (slave team0): Enslaving as an active interface with an up link [ 66.595976][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.621090][ T5892] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 66.653606][ T5892] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.791656][ T5982] hub 2-0:1.0: USB hub found [ 66.801788][ T5982] hub 2-0:1.0: 1 port detected [ 66.865910][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 66.929906][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 67.055928][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 67.067245][ T5892] usb 3-1: Product: syz [ 67.097420][ T5892] usb 3-1: Manufacturer: syz [ 67.114666][ T5892] usb 3-1: SerialNumber: syz [ 67.160474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 67.207688][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 67.270889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 67.290846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 67.441152][ T5892] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 67.462762][ T5892] usb 3-1: USB disconnect, device number 2 [ 67.620354][ T5846] Bluetooth: hci0: command tx timeout [ 67.625973][ T5846] Bluetooth: hci1: command tx timeout [ 67.780184][ T5832] Bluetooth: hci4: command tx timeout [ 67.786125][ T5838] Bluetooth: hci2: command tx timeout [ 67.795040][ T5846] Bluetooth: hci3: command tx timeout [ 67.896760][ T5892] usblp0: removed [ 67.967360][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 67.967374][ T30] audit: type=1400 audit(1753334753.731:154): avc: denied { prog_run } for pid=5995 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.250258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.282393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.293556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.380300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.500894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.593150][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.580163][ T30] audit: type=1400 audit(1753334755.271:155): avc: denied { create } for pid=6008 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.006437][ T6029] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 70.170171][ T5892] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.210211][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 70.441898][ T5892] usb 1-1: config 0 has no interfaces? [ 70.447420][ T5892] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.460357][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.487565][ T5892] usb 1-1: config 0 descriptor?? [ 70.519270][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 70.582809][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.955094][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.961612][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.050399][ T10] usb 5-1: Product: syz [ 71.054636][ T10] usb 5-1: Manufacturer: syz [ 71.059249][ T10] usb 5-1: SerialNumber: syz [ 71.281783][ T6033] trusted_key: encrypted_key: insufficient parameters specified [ 71.292930][ T5939] usb 1-1: USB disconnect, device number 2 [ 71.308194][ T10] usb 5-1: config 0 descriptor?? [ 71.687604][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 71.777800][ T30] audit: type=1400 audit(1753334757.541:156): avc: denied { create } for pid=6043 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.779961][ T6044] Bluetooth: MGMT ver 1.23 [ 71.833843][ T30] audit: type=1400 audit(1753334757.541:157): avc: denied { bind } for pid=6043 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.853436][ T30] audit: type=1400 audit(1753334757.541:158): avc: denied { write } for pid=6043 comm="syz.1.32" path="socket:[8188]" dev="sockfs" ino=8188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.928338][ T30] audit: type=1400 audit(1753334757.691:159): avc: denied { open } for pid=6045 comm="syz.0.34" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 72.001024][ T30] audit: type=1400 audit(1753334757.731:160): avc: denied { ioctl } for pid=6045 comm="syz.0.34" path="/dev/ttyq4" dev="devtmpfs" ino=379 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 72.370220][ T5939] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.450860][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 72.567518][ T30] audit: type=1400 audit(1753334758.321:161): avc: denied { create } for pid=6061 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.644865][ T5939] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 72.644957][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.645011][ T5939] usb 2-1: Product: syz [ 72.645059][ T5939] usb 2-1: Manufacturer: syz [ 72.645108][ T5939] usb 2-1: SerialNumber: syz [ 72.731080][ T5939] usb 2-1: config 0 descriptor?? [ 73.088967][ T30] audit: type=1400 audit(1753334758.681:162): avc: denied { read } for pid=6026 comm="syz.4.27" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.118238][ T30] audit: type=1400 audit(1753334758.681:163): avc: denied { open } for pid=6026 comm="syz.4.27" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.310998][ T6069] FAULT_INJECTION: forcing a failure. [ 73.310998][ T6069] name failslab, interval 1, probability 0, space 0, times 1 [ 73.358649][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.0.40 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 73.358674][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.358684][ T6069] Call Trace: [ 73.358694][ T6069] [ 73.358701][ T6069] dump_stack_lvl+0x16c/0x1f0 [ 73.358723][ T6069] should_fail_ex+0x512/0x640 [ 73.358749][ T6069] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 73.358779][ T6069] should_failslab+0xc2/0x120 [ 73.358797][ T6069] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 73.358823][ T6069] ? alloc_inode+0xc3/0x240 [ 73.358848][ T6069] alloc_inode+0xc3/0x240 [ 73.358869][ T6069] iget_locked+0x2e4/0x830 [ 73.358894][ T6069] ? __pfx_iget_locked+0x10/0x10 [ 73.358917][ T6069] ? find_held_lock+0x2b/0x80 [ 73.358941][ T6069] ? kernfs_root+0xee/0x2a0 [ 73.358963][ T6069] kernfs_get_inode+0x48/0x460 [ 73.358981][ T6069] kernfs_iop_lookup+0x1a7/0x2d0 [ 73.359001][ T6069] __lookup_slow+0x251/0x460 [ 73.359025][ T6069] ? __pfx___lookup_slow+0x10/0x10 [ 73.359063][ T6069] ? lookup_fast+0x156/0x610 [ 73.359090][ T6069] walk_component+0x353/0x5b0 [ 73.359116][ T6069] path_lookupat+0x142/0x6d0 [ 73.359145][ T6069] filename_lookup+0x224/0x5f0 [ 73.359173][ T6069] ? __pfx_filename_lookup+0x10/0x10 [ 73.359222][ T6069] ? getname_flags.part.0+0x1c5/0x550 [ 73.359248][ T6069] user_path_at+0x3a/0x60 [ 73.359275][ T6069] __x64_sys_mount+0x1fc/0x310 [ 73.359300][ T6069] ? __pfx___x64_sys_mount+0x10/0x10 [ 73.359327][ T6069] do_syscall_64+0xcd/0x4c0 [ 73.359346][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.359364][ T6069] RIP: 0033:0x7fe25798e9a9 [ 73.359378][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.359394][ T6069] RSP: 002b:00007fe258734038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.359412][ T6069] RAX: ffffffffffffffda RBX: 00007fe257bb5fa0 RCX: 00007fe25798e9a9 [ 73.359423][ T6069] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 73.359433][ T6069] RBP: 00007fe258734090 R08: 0000200000000440 R09: 0000000000000000 [ 73.359444][ T6069] R10: 00000000020108c4 R11: 0000000000000246 R12: 0000000000000001 [ 73.359454][ T6069] R13: 0000000000000000 R14: 00007fe257bb5fa0 R15: 00007ffd4388f308 [ 73.359477][ T6069] [ 73.799444][ T30] audit: type=1400 audit(1753334759.561:164): avc: denied { write } for pid=6070 comm="syz.0.41" name="wireless" dev="proc" ino=4026533099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.825442][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.834396][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.846529][ T5939] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 73.860473][ T5832] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 73.868372][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 73.905796][ T5939] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 73.921231][ T5939] asix 2-1:0.0: probe with driver asix failed with error -71 [ 73.937520][ T5939] usb 2-1: USB disconnect, device number 2 [ 73.943654][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 73.966853][ T6014] Set syz1 is full, maxelem 65536 reached [ 74.018218][ T6074] netlink: 'syz.2.43': attribute type 3 has an invalid length. [ 74.048018][ T30] audit: type=1400 audit(1753334759.811:165): avc: denied { setopt } for pid=6073 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.077106][ T30] audit: type=1400 audit(1753334759.841:166): avc: denied { create } for pid=6073 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.408647][ T30] audit: type=1400 audit(1753334759.871:167): avc: denied { bind } for pid=6073 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.582533][ T30] audit: type=1400 audit(1753334759.871:168): avc: denied { accept } for pid=6073 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.671222][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.695171][ T5835] usb 5-1: USB disconnect, device number 2 [ 74.703008][ T30] audit: type=1400 audit(1753334759.871:169): avc: denied { write } for pid=6073 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.726016][ T30] audit: type=1400 audit(1753334760.381:170): avc: denied { write } for pid=6080 comm="syz.1.46" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 74.748857][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.798353][ T30] audit: type=1400 audit(1753334760.471:171): avc: denied { map_read map_write } for pid=6081 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.859292][ T6087] FAULT_INJECTION: forcing a failure. [ 74.859292][ T6087] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.877437][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.1.47 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 74.877463][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.877473][ T6087] Call Trace: [ 74.877479][ T6087] [ 74.877486][ T6087] dump_stack_lvl+0x16c/0x1f0 [ 74.877508][ T6087] should_fail_ex+0x512/0x640 [ 74.877545][ T6087] strncpy_from_user+0x3b/0x2e0 [ 74.877573][ T6087] getname_flags.part.0+0x8f/0x550 [ 74.877599][ T6087] getname_flags+0x93/0xf0 [ 74.877625][ T6087] __x64_sys_renameat2+0xc7/0x130 [ 74.877646][ T6087] do_syscall_64+0xcd/0x4c0 [ 74.877665][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.877683][ T6087] RIP: 0033:0x7febf3b8e9a9 [ 74.877697][ T6087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.877714][ T6087] RSP: 002b:00007febf4ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 74.877731][ T6087] RAX: ffffffffffffffda RBX: 00007febf3db5fa0 RCX: 00007febf3b8e9a9 [ 74.877742][ T6087] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: ffffffffffffff9c [ 74.877753][ T6087] RBP: 00007febf4ad0090 R08: 0000000000000002 R09: 0000000000000000 [ 74.877763][ T6087] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 74.877773][ T6087] R13: 0000000000000000 R14: 00007febf3db5fa0 R15: 00007ffd7f04b378 [ 74.877796][ T6087] [ 75.052126][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 75.063696][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.070476][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 75.518241][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.543284][ T10] usb 1-1: config 0 descriptor?? [ 75.599231][ T6096] x_tables: duplicate underflow at hook 1 [ 75.795972][ T6103] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 75.865064][ T6106] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20004 [ 75.967964][ T6109] hub 2-0:1.0: USB hub found [ 75.977927][ T6109] hub 2-0:1.0: 1 port detected [ 76.064991][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 76.262047][ T10] corsair-psu 0003:1B1C:1C0D.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.0-1/input0 [ 76.536296][ T6118] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 76.550389][ T6118] netlink: 56 bytes leftover after parsing attributes in process `syz.4.59'. [ 76.614549][ T10] corsair-psu 0003:1B1C:1C0D.0001: unable to initialize device (-71) [ 76.639571][ T10] corsair-psu 0003:1B1C:1C0D.0001: probe with driver corsair-psu failed with error -71 [ 76.666513][ T6122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6122 comm=syz.2.58 [ 76.694848][ T10] usb 1-1: USB disconnect, device number 3 [ 77.613816][ T6127] ceph: No mds server is up or the cluster is laggy [ 77.781537][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 77.801990][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 78.147223][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 78.147239][ T30] audit: type=1400 audit(1753334763.911:201): avc: denied { ioctl } for pid=6138 comm="syz.2.63" path="socket:[8424]" dev="sockfs" ino=8424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.274297][ T30] audit: type=1400 audit(1753334763.951:202): avc: denied { setopt } for pid=6138 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.457142][ T30] audit: type=1400 audit(1753334763.951:203): avc: denied { write } for pid=6138 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.479296][ T30] audit: type=1400 audit(1753334763.951:204): avc: denied { read } for pid=6138 comm="syz.2.63" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.503298][ T30] audit: type=1400 audit(1753334763.951:205): avc: denied { open } for pid=6138 comm="syz.2.63" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.527368][ T30] audit: type=1400 audit(1753334763.971:206): avc: denied { ioctl } for pid=6138 comm="syz.2.63" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.994437][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.130129][ T5892] usb 3-1: device descriptor read/64, error -71 [ 79.257075][ T6154] hub 2-0:1.0: USB hub found [ 79.265344][ T6154] hub 2-0:1.0: 1 port detected [ 79.330118][ T5835] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.357503][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 79.521087][ T30] audit: type=1400 audit(1753334765.231:207): avc: denied { mounton } for pid=6152 comm="syz.4.70" path="/11/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.560243][ T5892] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.570171][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 79.577009][ T5835] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 79.591839][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.602462][ T5835] usb 4-1: config 0 has no interface number 0 [ 79.610720][ T5835] usb 4-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.625354][ T5835] usb 4-1: config 0 interface 120 has no altsetting 0 [ 79.635725][ T5835] usb 4-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 79.645097][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.654214][ T5835] usb 4-1: Product: syz [ 79.658502][ T5835] usb 4-1: Manufacturer: syz [ 79.663402][ T5835] usb 4-1: SerialNumber: syz [ 79.679229][ T5835] usb 4-1: config 0 descriptor?? [ 79.686829][ T5835] rndis_host 4-1:0.120: skipping garbage [ 79.699411][ T5835] usb 4-1: bad CDC descriptors [ 79.700343][ T5892] usb 3-1: device descriptor read/64, error -71 [ 79.705613][ T5835] cdc_acm 4-1:0.120: Zero length descriptor references [ 79.720165][ T5835] cdc_acm 4-1:0.120: probe with driver cdc_acm failed with error -22 [ 79.793928][ T30] audit: type=1400 audit(1753334765.561:208): avc: denied { bind } for pid=6159 comm="syz.1.71" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.822515][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.851060][ T5892] usb usb3-port1: attempt power cycle [ 79.857530][ T30] audit: type=1400 audit(1753334765.561:209): avc: denied { name_bind } for pid=6159 comm="syz.1.71" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 79.904756][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.905091][ T30] audit: type=1400 audit(1753334765.561:210): avc: denied { node_bind } for pid=6159 comm="syz.1.71" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 79.918655][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.944478][ T6166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.954979][ T5914] usb 4-1: USB disconnect, device number 2 [ 80.014987][ T5885] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 80.026707][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.047628][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 80.059373][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 80.072005][ T6169] ======================================================= [ 80.072005][ T6169] WARNING: The mand mount option has been deprecated and [ 80.072005][ T6169] and is ignored by this kernel. Remove the mand [ 80.072005][ T6169] option from the mount to silence this warning. [ 80.072005][ T6169] ======================================================= [ 80.113913][ T5885] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 80.115169][ T5835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5835 comm=kworker/1:3 [ 80.136073][ T5885] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 80.148005][ T5885] usb 1-1: Manufacturer: syz [ 80.291945][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.356417][ T6172] FAULT_INJECTION: forcing a failure. [ 80.356417][ T6172] name failslab, interval 1, probability 0, space 0, times 0 [ 80.369730][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.1.77 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 80.369754][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.369764][ T6172] Call Trace: [ 80.369769][ T6172] [ 80.369775][ T6172] dump_stack_lvl+0x16c/0x1f0 [ 80.369799][ T6172] should_fail_ex+0x512/0x640 [ 80.369824][ T6172] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 80.369850][ T6172] should_failslab+0xc2/0x120 [ 80.369867][ T6172] __kmalloc_cache_noprof+0x6a/0x3e0 [ 80.369886][ T6172] ? rtnl_newlink+0x11b/0x2000 [ 80.369897][ T6172] ? __lock_acquire+0x622/0x1c90 [ 80.369909][ T6172] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.369918][ T6172] rtnl_newlink+0x11b/0x2000 [ 80.369933][ T6172] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.369943][ T6172] ? find_held_lock+0x2b/0x80 [ 80.369956][ T6172] ? avc_has_perm_noaudit+0x117/0x3b0 [ 80.369972][ T6172] ? avc_has_perm_noaudit+0x149/0x3b0 [ 80.369988][ T6172] ? __lock_acquire+0x622/0x1c90 [ 80.370005][ T6172] ? find_held_lock+0x2b/0x80 [ 80.370017][ T6172] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.370027][ T6172] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.370038][ T6172] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 80.370056][ T6172] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.370072][ T6172] rtnetlink_rcv_msg+0x95e/0xe90 [ 80.370089][ T6172] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.370112][ T6172] ? ref_tracker_free+0x37c/0x830 [ 80.370130][ T6172] netlink_rcv_skb+0x158/0x420 [ 80.370151][ T6172] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.370171][ T6172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.370200][ T6172] ? netlink_deliver_tap+0x1ae/0xd30 [ 80.370223][ T6172] netlink_unicast+0x58a/0x850 [ 80.370254][ T6172] ? __pfx_netlink_unicast+0x10/0x10 [ 80.370281][ T6172] netlink_sendmsg+0x8d1/0xdd0 [ 80.370305][ T6172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.370334][ T6172] ____sys_sendmsg+0xa95/0xc70 [ 80.370357][ T6172] ? copy_msghdr_from_user+0x10a/0x160 [ 80.370373][ T6172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.370406][ T6172] ___sys_sendmsg+0x134/0x1d0 [ 80.370424][ T6172] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.370438][ T6172] ? __lock_acquire+0x622/0x1c90 [ 80.370482][ T6172] __sys_sendmsg+0x16d/0x220 [ 80.370499][ T6172] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.370529][ T6172] do_syscall_64+0xcd/0x4c0 [ 80.370546][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.370563][ T6172] RIP: 0033:0x7febf3b8e9a9 [ 80.370576][ T6172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.370591][ T6172] RSP: 002b:00007febf4aaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.370607][ T6172] RAX: ffffffffffffffda RBX: 00007febf3db6080 RCX: 00007febf3b8e9a9 [ 80.370617][ T6172] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000006 [ 80.370627][ T6172] RBP: 00007febf4aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.370637][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.370646][ T6172] R13: 0000000000000000 R14: 00007febf3db6080 R15: 00007ffd7f04b378 [ 80.370668][ T6172] [ 80.684550][ T5885] usb 1-1: config 0 descriptor?? [ 80.693029][ T5892] usb 3-1: device descriptor read/8, error -71 [ 80.703438][ T6157] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 80.982420][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.012138][ T5892] usb 3-1: device descriptor read/8, error -71 [ 81.087552][ T6181] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.529121][ T5892] usb usb3-port1: unable to enumerate USB device [ 81.538627][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 81.547989][ T43] cfg80211: failed to load regulatory.db [ 81.579158][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.602578][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.619635][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.629165][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.660383][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 82.378857][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 82.385099][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 82.424336][ T5885] usb 1-1: USB disconnect, device number 4 [ 82.574767][ T6198] hub 2-0:1.0: USB hub found [ 82.580378][ T6198] hub 2-0:1.0: 1 port detected [ 82.608567][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 83.290510][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 83.290525][ T30] audit: type=1400 audit(1753334769.051:226): avc: denied { ioctl } for pid=6202 comm="syz.3.87" path="socket:[8544]" dev="sockfs" ino=8544 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.404090][ T6211] FAULT_INJECTION: forcing a failure. [ 83.404090][ T6211] name failslab, interval 1, probability 0, space 0, times 0 [ 83.416853][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.0.89 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 83.416877][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.416887][ T6211] Call Trace: [ 83.416893][ T6211] [ 83.416900][ T6211] dump_stack_lvl+0x16c/0x1f0 [ 83.416923][ T6211] should_fail_ex+0x512/0x640 [ 83.416949][ T6211] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 83.416979][ T6211] should_failslab+0xc2/0x120 [ 83.416997][ T6211] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 83.417023][ T6211] ? __alloc_skb+0x2b2/0x380 [ 83.417053][ T6211] __alloc_skb+0x2b2/0x380 [ 83.417078][ T6211] ? __pfx___alloc_skb+0x10/0x10 [ 83.417104][ T6211] ? genl_rcv_msg+0x550/0x800 [ 83.417125][ T6211] ? genl_rcv_msg+0x4bb/0x800 [ 83.417154][ T6211] netlink_ack+0x15d/0xb80 [ 83.417183][ T6211] netlink_rcv_skb+0x332/0x420 [ 83.417202][ T6211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.417227][ T6211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.417270][ T6211] genl_rcv+0x28/0x40 [ 83.417289][ T6211] netlink_unicast+0x58a/0x850 [ 83.417313][ T6211] ? __pfx_netlink_unicast+0x10/0x10 [ 83.417341][ T6211] netlink_sendmsg+0x8d1/0xdd0 [ 83.417366][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.417396][ T6211] ____sys_sendmsg+0xa95/0xc70 [ 83.417418][ T6211] ? copy_msghdr_from_user+0x10a/0x160 [ 83.417435][ T6211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.417469][ T6211] ___sys_sendmsg+0x134/0x1d0 [ 83.417487][ T6211] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.417502][ T6211] ? __lock_acquire+0x622/0x1c90 [ 83.417551][ T6211] __sys_sendmsg+0x16d/0x220 [ 83.417569][ T6211] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.417603][ T6211] do_syscall_64+0xcd/0x4c0 [ 83.417623][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.417640][ T6211] RIP: 0033:0x7fe25798e9a9 [ 83.417655][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.417671][ T6211] RSP: 002b:00007fe2557f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.417688][ T6211] RAX: ffffffffffffffda RBX: 00007fe257bb6160 RCX: 00007fe25798e9a9 [ 83.417699][ T6211] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 000000000000000b [ 83.417709][ T6211] RBP: 00007fe2557f6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.417719][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.417729][ T6211] R13: 0000000000000000 R14: 00007fe257bb6160 R15: 00007ffd4388f308 [ 83.417753][ T6211] [ 83.670233][ T30] audit: type=1400 audit(1753334769.091:227): avc: denied { read write } for pid=6202 comm="syz.3.87" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.702914][ T30] audit: type=1400 audit(1753334769.091:228): avc: denied { open } for pid=6202 comm="syz.3.87" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.729020][ T30] audit: type=1400 audit(1753334769.151:229): avc: denied { create } for pid=6203 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.793984][ T30] audit: type=1400 audit(1753334769.161:230): avc: denied { create } for pid=6203 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.820324][ T6213] FAULT_INJECTION: forcing a failure. [ 83.820324][ T6213] name failslab, interval 1, probability 0, space 0, times 0 [ 83.890374][ T6213] CPU: 0 UID: 0 PID: 6213 Comm: syz.3.90 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 83.890401][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.890411][ T6213] Call Trace: [ 83.890417][ T6213] [ 83.890423][ T6213] dump_stack_lvl+0x16c/0x1f0 [ 83.890446][ T6213] should_fail_ex+0x512/0x640 [ 83.890478][ T6213] ? fs_reclaim_acquire+0xae/0x150 [ 83.890501][ T6213] ? tomoyo_encode2+0x100/0x3e0 [ 83.890517][ T6213] should_failslab+0xc2/0x120 [ 83.890535][ T6213] __kmalloc_noprof+0xd2/0x510 [ 83.890560][ T6213] ? d_absolute_path+0x136/0x1a0 [ 83.890586][ T6213] tomoyo_encode2+0x100/0x3e0 [ 83.890607][ T6213] tomoyo_encode+0x29/0x50 [ 83.890622][ T6213] tomoyo_realpath_from_path+0x18f/0x6e0 [ 83.890648][ T6213] tomoyo_path_number_perm+0x245/0x580 [ 83.890671][ T6213] ? tomoyo_path_number_perm+0x237/0x580 [ 83.890698][ T6213] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.890724][ T6213] ? find_held_lock+0x2b/0x80 [ 83.890770][ T6213] ? find_held_lock+0x2b/0x80 [ 83.890790][ T6213] ? hook_file_ioctl_common+0x145/0x410 [ 83.890817][ T6213] ? __fget_files+0x20e/0x3c0 [ 83.890838][ T6213] security_file_ioctl+0x9b/0x240 [ 83.890857][ T6213] __x64_sys_ioctl+0xb7/0x210 [ 83.890882][ T6213] do_syscall_64+0xcd/0x4c0 [ 83.890901][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.890918][ T6213] RIP: 0033:0x7f13dfb8e9a9 [ 83.890932][ T6213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.890948][ T6213] RSP: 002b:00007f13e0921038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.890965][ T6213] RAX: ffffffffffffffda RBX: 00007f13dfdb5fa0 RCX: 00007f13dfb8e9a9 [ 83.890977][ T6213] RDX: 0000200000000040 RSI: 000000008028640c RDI: 0000000000000003 [ 83.890986][ T6213] RBP: 00007f13e0921090 R08: 0000000000000000 R09: 0000000000000000 [ 83.890996][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.891005][ T6213] R13: 0000000000000000 R14: 00007f13dfdb5fa0 R15: 00007ffcad4a1698 [ 83.891029][ T6213] [ 83.891045][ T6213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.114734][ T30] audit: type=1326 audit(1753334769.881:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.0.93" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe25798e9a9 code=0x0 [ 84.329464][ T6229] tipc: Started in network mode [ 84.354287][ T6229] tipc: Node identity ac14140f, cluster identity 4711 [ 84.364695][ T6231] comedi: No check for data length of config insn id 256 is implemented [ 84.373661][ T6229] tipc: New replicast peer: 255.255.255.255 [ 84.381065][ T6232] sctp: [Deprecated]: syz.4.96 (pid 6232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.381065][ T6232] Use struct sctp_sack_info instead [ 84.400173][ T6231] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 84.414437][ T6231] comedi: Assuming n=56097 is correct [ 84.425575][ T6229] tipc: Enabled bearer , priority 10 [ 84.441332][ T30] audit: type=1400 audit(1753334770.191:232): avc: denied { read } for pid=6228 comm="syz.4.96" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.073805][ T30] audit: type=1400 audit(1753334770.191:233): avc: denied { open } for pid=6228 comm="syz.4.96" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.174816][ T30] audit: type=1400 audit(1753334770.211:234): avc: denied { create } for pid=6233 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.256998][ T30] audit: type=1400 audit(1753334770.241:235): avc: denied { getopt } for pid=6233 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.470158][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.550610][ T5914] tipc: Node number set to 2886997007 [ 85.650465][ T43] usb 4-1: device descriptor read/64, error -71 [ 85.762607][ T5835] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.778435][ T6255] hub 2-0:1.0: USB hub found [ 85.787853][ T6255] hub 2-0:1.0: 1 port detected [ 85.906011][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 85.910258][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.990157][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 86.000853][ T5835] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.018354][ T5835] usb 1-1: config 179 has no interface number 0 [ 86.867686][ T5835] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 86.889630][ T5835] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 86.902773][ T43] usb 4-1: device descriptor read/64, error -71 [ 86.979965][ T5835] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.993210][ T6265] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 86.999912][ T6265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.012488][ T6265] vhci_hcd vhci_hcd.0: Device attached [ 87.150569][ T43] usb usb4-port1: attempt power cycle [ 87.158045][ T5835] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.169313][ T5835] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.183141][ T5835] usb 1-1: config 179 interface 65 has no altsetting 0 [ 87.190090][ T5835] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 87.199184][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.207465][ T6276] FAULT_INJECTION: forcing a failure. [ 87.207465][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 87.217779][ T5835] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 87.242572][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.2.109 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 87.242597][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.242607][ T6276] Call Trace: [ 87.242613][ T6276] [ 87.242623][ T6276] dump_stack_lvl+0x16c/0x1f0 [ 87.242644][ T6276] should_fail_ex+0x512/0x640 [ 87.242694][ T6276] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 87.242723][ T6276] should_failslab+0xc2/0x120 [ 87.242740][ T6276] __kmalloc_cache_noprof+0x6a/0x3e0 [ 87.242761][ T6276] ? __xa_alloc_cyclic+0x1f3/0x340 [ 87.242781][ T6276] ? __xdp_reg_mem_model+0x134/0x680 [ 87.242804][ T6276] __xdp_reg_mem_model+0x134/0x680 [ 87.242824][ T6276] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 87.242846][ T6276] ? page_pool_list+0x1ca/0x240 [ 87.242873][ T6276] xdp_reg_mem_model+0x22/0x70 [ 87.242891][ T6276] bpf_test_run_xdp_live+0x1c7/0x500 [ 87.242912][ T6276] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.242929][ T6276] ? preempt_schedule_common+0x44/0xc0 [ 87.242956][ T6276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 87.242978][ T6276] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.242995][ T6276] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.243035][ T6276] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.243055][ T6276] ? 0xffffffffa0205480 [ 87.243071][ T6276] ? 0xffffffffa0205480 [ 87.243085][ T6276] ? 0xffffffffa0205480 [ 87.243104][ T6276] bpf_prog_test_run_xdp+0x824/0x1590 [ 87.243132][ T6276] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.243153][ T6276] ? __might_fault+0x40/0x190 [ 87.243183][ T6276] ? fput+0x70/0xf0 [ 87.243201][ T6276] ? __bpf_prog_get+0x97/0x2a0 [ 87.243220][ T6276] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.243239][ T6276] __sys_bpf+0x1707/0x4ea0 [ 87.243266][ T6276] ? __pfx___sys_bpf+0x10/0x10 [ 87.243290][ T6276] ? ksys_write+0x190/0x250 [ 87.243319][ T6276] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 87.243351][ T6276] ? fput+0x70/0xf0 [ 87.243368][ T6276] ? ksys_write+0x1ac/0x250 [ 87.243392][ T6276] ? __pfx_ksys_write+0x10/0x10 [ 87.243421][ T6276] __x64_sys_bpf+0x78/0xc0 [ 87.243451][ T6276] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.243477][ T6276] do_syscall_64+0xcd/0x4c0 [ 87.243496][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.243513][ T6276] RIP: 0033:0x7fcecef8e9a9 [ 87.243527][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.243542][ T6276] RSP: 002b:00007fcecfe37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.243560][ T6276] RAX: ffffffffffffffda RBX: 00007fcecf1b5fa0 RCX: 00007fcecef8e9a9 [ 87.243571][ T6276] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 87.243581][ T6276] RBP: 00007fcecfe37090 R08: 0000000000000000 R09: 0000000000000000 [ 87.243591][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.243601][ T6276] R13: 0000000000000000 R14: 00007fcecf1b5fa0 R15: 00007ffe3a30bc68 [ 87.243624][ T6276] [ 87.435111][ T5885] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 87.438503][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.442992][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 87.492140][ T5835] usb 1-1: USB disconnect, device number 5 [ 87.573274][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.601048][ T43] usb 4-1: device descriptor read/8, error -71 [ 87.682692][ T5885] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 87.693917][ T5885] usb 5-1: config 0 has no interface number 0 [ 87.702218][ T5885] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 87.716859][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.847979][ T6283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48182 sclass=netlink_route_socket pid=6283 comm=syz.3.111 [ 88.005278][ T5885] usb 5-1: config 0 descriptor?? [ 88.071190][ T5885] usb 5-1: selecting invalid altsetting 3 [ 88.150183][ T5885] comedi comedi5: could not set alternate setting 3 in high speed [ 88.196174][ T5885] usbdux 5-1:0.207: driver 'usbdux' failed to auto-configure device. [ 88.246998][ T6266] vhci_hcd: connection reset by peer [ 88.257196][ T5885] usbdux 5-1:0.207: probe with driver usbdux failed with error -22 [ 88.272051][ T13] vhci_hcd: stop threads [ 88.484023][ T13] vhci_hcd: release socket [ 89.264844][ T5885] usb 5-1: USB disconnect, device number 3 [ 89.379988][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 89.380018][ T30] audit: type=1400 audit(1753334775.141:247): avc: denied { write } for pid=6286 comm="syz.3.112" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.645499][ T13] vhci_hcd: disconnect device [ 89.650477][ T30] audit: type=1400 audit(1753334775.141:248): avc: denied { ioctl } for pid=6289 comm="syz.1.114" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.679334][ T30] audit: type=1400 audit(1753334775.141:249): avc: denied { append } for pid=6289 comm="syz.1.114" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.770552][ T30] audit: type=1400 audit(1753334775.531:250): avc: denied { mount } for pid=6299 comm="syz.3.117" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 89.817666][ T30] audit: type=1400 audit(1753334775.581:251): avc: denied { ioctl } for pid=6298 comm="syz.2.116" path="socket:[8797]" dev="sockfs" ino=8797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.895752][ T30] audit: type=1400 audit(1753334775.581:252): avc: denied { write } for pid=6298 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.424818][ T6312] lo speed is unknown, defaulting to 1000 [ 90.432811][ T6312] lo speed is unknown, defaulting to 1000 [ 90.470081][ T6312] lo speed is unknown, defaulting to 1000 [ 90.564509][ T6312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.590208][ T30] audit: type=1400 audit(1753334776.161:253): avc: denied { setopt } for pid=6305 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.616851][ T6312] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 91.090822][ T30] audit: type=1400 audit(1753334776.371:254): avc: denied { connect } for pid=6305 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.098205][ T6312] lo speed is unknown, defaulting to 1000 [ 91.117595][ T6312] lo speed is unknown, defaulting to 1000 [ 91.124816][ T6312] lo speed is unknown, defaulting to 1000 [ 91.131962][ T6312] lo speed is unknown, defaulting to 1000 [ 91.139048][ T6312] lo speed is unknown, defaulting to 1000 [ 91.644899][ T30] audit: type=1400 audit(1753334777.401:255): avc: denied { read } for pid=6299 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.926928][ T43] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 92.125783][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.142062][ T43] usb 5-1: config 0 has no interface number 0 [ 92.146406][ T30] audit: type=1400 audit(1753334777.891:256): avc: denied { create } for pid=6310 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.160698][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 92.235172][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 9, setting to 8 [ 92.267638][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.288193][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.329239][ T43] usb 5-1: config 0 descriptor?? [ 92.382259][ T6308] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.397023][ T43] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 93.260164][ T10] vhci_hcd: vhci_device speed not set [ 93.721005][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 93.802493][ T43] usb 5-1: USB disconnect, device number 4 [ 94.634631][ T6349] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 94.675111][ T6349] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.128'. [ 94.716906][ T6351] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[6351] [ 95.100318][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 95.100357][ T30] audit: type=1400 audit(1753334780.861:259): avc: denied { read } for pid=6358 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.374376][ T30] audit: type=1400 audit(1753334780.911:260): avc: denied { write } for pid=6358 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.398946][ T6368] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 95.405537][ T6368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.456779][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.464438][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.509584][ T6368] vhci_hcd vhci_hcd.0: Device attached [ 95.760530][ T43] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 95.837183][ T6375] netlink: 'syz.2.134': attribute type 5 has an invalid length. [ 95.886030][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 95.910410][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.952493][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.287892][ T5846] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 96.296158][ T5846] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 96.759983][ T6361] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.797086][ T6361] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.806641][ T6361] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.818411][ T6361] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.898730][ T5885] lo speed is unknown, defaulting to 1000 [ 96.915089][ T6390] syz_tun: entered allmulticast mode [ 96.923645][ T5885] syz0: Port: 1 Link DOWN [ 96.970317][ T6369] vhci_hcd: connection reset by peer [ 97.013024][ T3532] vhci_hcd: stop threads [ 97.017623][ T3532] vhci_hcd: release socket [ 97.046149][ T3532] vhci_hcd: disconnect device [ 97.117753][ T30] audit: type=1400 audit(1753334782.881:261): avc: denied { append } for pid=6393 comm="syz.3.140" name="qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.205658][ T6399] hub 2-0:1.0: USB hub found [ 97.209523][ T6399] hub 2-0:1.0: 1 port detected [ 97.354435][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 97.661471][ T6403] FAULT_INJECTION: forcing a failure. [ 97.661471][ T6403] name failslab, interval 1, probability 0, space 0, times 0 [ 97.661590][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.3.142 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 97.661612][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.661621][ T6403] Call Trace: [ 97.661627][ T6403] [ 97.661634][ T6403] dump_stack_lvl+0x16c/0x1f0 [ 97.661652][ T6403] should_fail_ex+0x512/0x640 [ 97.661668][ T6403] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 97.661685][ T6403] should_failslab+0xc2/0x120 [ 97.661696][ T6403] __kmalloc_cache_noprof+0x6a/0x3e0 [ 97.661711][ T6403] ? tcf_chain_create+0x98/0x370 [ 97.661730][ T6403] tcf_chain_create+0x98/0x370 [ 97.661747][ T6403] __tcf_chain_get+0x153/0x1b0 [ 97.661760][ T6403] tc_new_tfilter+0x6ed/0x2340 [ 97.661778][ T6403] ? avc_has_perm_noaudit+0x117/0x3b0 [ 97.661793][ T6403] ? __pfx_tc_new_tfilter+0x10/0x10 [ 97.661820][ T6403] ? find_held_lock+0x2b/0x80 [ 97.661834][ T6403] ? __pfx_tc_new_tfilter+0x10/0x10 [ 97.661846][ T6403] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 97.661857][ T6403] ? __pfx_tc_new_tfilter+0x10/0x10 [ 97.661870][ T6403] rtnetlink_rcv_msg+0x95e/0xe90 [ 97.661883][ T6403] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.661893][ T6403] ? __lock_acquire+0xb8a/0x1c90 [ 97.661905][ T6403] ? irqentry_exit+0x3b/0x90 [ 97.661918][ T6403] netlink_rcv_skb+0x158/0x420 [ 97.661931][ T6403] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.661942][ T6403] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.661954][ T6403] ? rcu_is_watching+0x12/0xc0 [ 97.661977][ T6403] netlink_unicast+0x58a/0x850 [ 97.661991][ T6403] ? __pfx_netlink_unicast+0x10/0x10 [ 97.662008][ T6403] netlink_sendmsg+0x8d1/0xdd0 [ 97.662022][ T6403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.662040][ T6403] ____sys_sendmsg+0xa95/0xc70 [ 97.662054][ T6403] ? copy_msghdr_from_user+0x10a/0x160 [ 97.662064][ T6403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.662079][ T6403] ? sched_clock_cpu+0x6c/0x530 [ 97.662098][ T6403] ___sys_sendmsg+0x134/0x1d0 [ 97.662114][ T6403] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.662123][ T6403] ? __lock_acquire+0x622/0x1c90 [ 97.662145][ T6403] ? warn_bogus_irq_restore+0x20/0x30 [ 97.662166][ T6403] __sys_sendmsg+0x16d/0x220 [ 97.662176][ T6403] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.662185][ T6403] ? rcu_is_watching+0x12/0xc0 [ 97.662202][ T6403] ? syscall_user_dispatch+0x78/0x140 [ 97.662216][ T6403] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 97.662231][ T6403] do_syscall_64+0xcd/0x4c0 [ 97.662243][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.662254][ T6403] RIP: 0033:0x7f13dfb8e9a9 [ 97.662263][ T6403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.662273][ T6403] RSP: 002b:00007f13dd9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.662283][ T6403] RAX: ffffffffffffffda RBX: 00007f13dfdb6080 RCX: 00007f13dfb8e9a9 [ 97.662290][ T6403] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 97.662296][ T6403] RBP: 00007f13dd9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.662302][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.662308][ T6403] R13: 0000000000000000 R14: 00007f13dfdb6080 R15: 00007ffcad4a1698 [ 97.662321][ T6403] [ 97.862353][ T6389] syz_tun: left allmulticast mode [ 98.089760][ T6409] netlink: 32 bytes leftover after parsing attributes in process `syz.3.146'. [ 99.439646][ T6427] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.342353][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 100.342418][ T5846] Bluetooth: hci2: Injecting HCI hardware error event [ 100.343201][ T5832] Bluetooth: hci2: hardware error 0x00 [ 100.645787][ T30] audit: type=1400 audit(1753334786.411:262): avc: denied { read } for pid=6444 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.156723][ T43] vhci_hcd: vhci_device speed not set [ 101.380230][ T5899] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.468795][ T6460] hub 2-0:1.0: USB hub found [ 101.469011][ T6460] hub 2-0:1.0: 1 port detected [ 101.484761][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 101.539985][ T5899] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.540254][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.540280][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.540300][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.554460][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.554489][ T5899] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.554503][ T5899] usb 4-1: Manufacturer: syz [ 101.561882][ T5899] usb 4-1: config 0 descriptor?? [ 101.673330][ T30] audit: type=1400 audit(1753334787.431:263): avc: denied { ioctl } for pid=6466 comm="syz.4.158" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.716932][ T30] audit: type=1400 audit(1753334787.471:264): avc: denied { write } for pid=6466 comm="syz.4.158" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.741322][ T30] audit: type=1400 audit(1753334787.511:265): avc: denied { map } for pid=6466 comm="syz.4.158" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.743194][ T30] audit: type=1400 audit(1753334787.511:266): avc: denied { set_context_mgr } for pid=6466 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.019667][ T5899] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 102.044906][ T6473] overlay: filesystem on ./bus not supported as upperdir [ 102.060144][ T30] audit: type=1400 audit(1753334787.811:267): avc: denied { unlink } for pid=6472 comm="syz.1.162" name="#1" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.060198][ T30] audit: type=1400 audit(1753334787.811:268): avc: denied { mount } for pid=6472 comm="syz.1.162" name="/" dev="overlay" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.124604][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.136501][ T5899] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 102.298143][ T5899] usb 4-1: USB disconnect, device number 7 [ 102.480246][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 102.660789][ T30] audit: type=1400 audit(1753334788.431:269): avc: denied { watch } for pid=6479 comm="syz.1.163" path="" dev="anon_inodefs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 102.769850][ T6481] fido_id[6481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.848222][ T30] audit: type=1400 audit(1753334788.611:270): avc: denied { write } for pid=6482 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.924392][ T6500] FAULT_INJECTION: forcing a failure. [ 103.924392][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.939021][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.2.167 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 103.939049][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.939058][ T6500] Call Trace: [ 103.939064][ T6500] [ 103.939069][ T6500] dump_stack_lvl+0x16c/0x1f0 [ 103.939091][ T6500] should_fail_ex+0x512/0x640 [ 103.939120][ T6500] _copy_to_user+0x32/0xd0 [ 103.939139][ T6500] vivid_radio_rx_read+0x7ce/0xb90 [ 103.939170][ T6500] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 103.939196][ T6500] vivid_radio_read+0x86/0xc0 [ 103.939224][ T6500] v4l2_read+0x229/0x360 [ 103.939250][ T6500] ? __pfx_v4l2_read+0x10/0x10 [ 103.939276][ T6500] vfs_read+0x1e1/0xc60 [ 103.939307][ T6500] ? __pfx_vfs_read+0x10/0x10 [ 103.939329][ T6500] ? find_held_lock+0x2b/0x80 [ 103.939352][ T6500] ? __fget_files+0x204/0x3c0 [ 103.939373][ T6500] ? __fget_files+0x20e/0x3c0 [ 103.939395][ T6500] ksys_read+0x12a/0x250 [ 103.939418][ T6500] ? __pfx_ksys_read+0x10/0x10 [ 103.939449][ T6500] do_syscall_64+0xcd/0x4c0 [ 103.939466][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.939482][ T6500] RIP: 0033:0x7fcecef8e9a9 [ 103.939495][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.939510][ T6500] RSP: 002b:00007fcecfe37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.939525][ T6500] RAX: ffffffffffffffda RBX: 00007fcecf1b5fa0 RCX: 00007fcecef8e9a9 [ 103.939536][ T6500] RDX: 00000000fffffeb2 RSI: 0000200000000080 RDI: 0000000000000004 [ 103.939545][ T6500] RBP: 00007fcecfe37090 R08: 0000000000000000 R09: 0000000000000000 [ 103.939555][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.939563][ T6500] R13: 0000000000000000 R14: 00007fcecf1b5fa0 R15: 00007ffe3a30bc68 [ 103.939586][ T6500] [ 104.122761][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.255319][ T30] audit: type=1400 audit(1753334790.021:271): avc: denied { create } for pid=6501 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.421254][ T6511] hub 2-0:1.0: USB hub found [ 104.430752][ T6511] hub 2-0:1.0: 1 port detected [ 104.540621][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 106.331479][ T6548] FAULT_INJECTION: forcing a failure. [ 106.331479][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 106.344476][ T6548] CPU: 1 UID: 0 PID: 6548 Comm: syz.4.181 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 106.344500][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.344510][ T6548] Call Trace: [ 106.344516][ T6548] [ 106.344522][ T6548] dump_stack_lvl+0x16c/0x1f0 [ 106.344543][ T6548] should_fail_ex+0x512/0x640 [ 106.344570][ T6548] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 106.344600][ T6548] should_failslab+0xc2/0x120 [ 106.344618][ T6548] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 106.344645][ T6548] ? lockdep_init_map_type+0x5c/0x280 [ 106.344661][ T6548] ? xfrm_add_sa+0x1848/0x5c00 [ 106.344688][ T6548] kmemdup_noprof+0x29/0x60 [ 106.344714][ T6548] xfrm_add_sa+0x1848/0x5c00 [ 106.344744][ T6548] ? cap_capable+0xb3/0x250 [ 106.344767][ T6548] ? __pfx_xfrm_add_sa+0x10/0x10 [ 106.344792][ T6548] ? __nla_parse+0x40/0x60 [ 106.344812][ T6548] ? __pfx_xfrm_add_sa+0x10/0x10 [ 106.344836][ T6548] xfrm_user_rcv_msg+0x58b/0xc00 [ 106.344864][ T6548] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 106.344885][ T6548] ? stack_trace_save+0x8e/0xc0 [ 106.344908][ T6548] ? __pfx_stack_trace_save+0x10/0x10 [ 106.344931][ T6548] ? stack_depot_save_flags+0x28/0xa40 [ 106.344960][ T6548] ? look_up_lock_class+0x59/0x150 [ 106.345015][ T6548] ? __pfx___might_resched+0x10/0x10 [ 106.345039][ T6548] ? rcu_is_watching+0x12/0xc0 [ 106.345064][ T6548] netlink_rcv_skb+0x158/0x420 [ 106.345086][ T6548] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 106.345109][ T6548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.345127][ T6548] ? __pfx___mutex_lock+0x10/0x10 [ 106.345161][ T6548] xfrm_netlink_rcv+0x71/0x90 [ 106.345181][ T6548] netlink_unicast+0x58a/0x850 [ 106.345204][ T6548] ? __pfx_netlink_unicast+0x10/0x10 [ 106.345232][ T6548] netlink_sendmsg+0x8d1/0xdd0 [ 106.345256][ T6548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.345286][ T6548] ____sys_sendmsg+0xa95/0xc70 [ 106.345314][ T6548] ? copy_msghdr_from_user+0x10a/0x160 [ 106.345329][ T6548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.345363][ T6548] ___sys_sendmsg+0x134/0x1d0 [ 106.345381][ T6548] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.345395][ T6548] ? __lock_acquire+0x622/0x1c90 [ 106.345447][ T6548] __sys_sendmsg+0x16d/0x220 [ 106.345464][ T6548] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.345498][ T6548] do_syscall_64+0xcd/0x4c0 [ 106.345517][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.345534][ T6548] RIP: 0033:0x7f2afed8e9a9 [ 106.345547][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.345563][ T6548] RSP: 002b:00007f2affb6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.345579][ T6548] RAX: ffffffffffffffda RBX: 00007f2afefb5fa0 RCX: 00007f2afed8e9a9 [ 106.345590][ T6548] RDX: 0000000000000804 RSI: 0000200000000000 RDI: 0000000000000003 [ 106.345600][ T6548] RBP: 00007f2affb6b090 R08: 0000000000000000 R09: 0000000000000000 [ 106.345610][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.345620][ T6548] R13: 0000000000000000 R14: 00007f2afefb5fa0 R15: 00007ffc8d555528 [ 106.345644][ T6548] [ 106.759537][ T6552] FAULT_INJECTION: forcing a failure. [ 106.759537][ T6552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.803014][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.0.182 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 106.803040][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.803058][ T6552] Call Trace: [ 106.803065][ T6552] [ 106.803071][ T6552] dump_stack_lvl+0x16c/0x1f0 [ 106.803093][ T6552] should_fail_ex+0x512/0x640 [ 106.803123][ T6552] _copy_to_user+0x32/0xd0 [ 106.803142][ T6552] video_usercopy+0xf3e/0x1720 [ 106.803169][ T6552] ? __pfx___video_do_ioctl+0x10/0x10 [ 106.803193][ T6552] ? selinux_kernel_read_file+0xf0/0x130 [ 106.803210][ T6552] ? __pfx_video_usercopy+0x10/0x10 [ 106.803251][ T6552] v4l2_ioctl+0x1bd/0x250 [ 106.803275][ T6552] ? __pfx_v4l2_ioctl+0x10/0x10 [ 106.803301][ T6552] __x64_sys_ioctl+0x18e/0x210 [ 106.803326][ T6552] do_syscall_64+0xcd/0x4c0 [ 106.803345][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.803361][ T6552] RIP: 0033:0x7fe25798e9a9 [ 106.803375][ T6552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.803390][ T6552] RSP: 002b:00007fe258734038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.803405][ T6552] RAX: ffffffffffffffda RBX: 00007fe257bb5fa0 RCX: 00007fe25798e9a9 [ 106.803416][ T6552] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 106.803426][ T6552] RBP: 00007fe258734090 R08: 0000000000000000 R09: 0000000000000000 [ 106.803436][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.803445][ T6552] R13: 0000000000000000 R14: 00007fe257bb5fa0 R15: 00007ffd4388f308 [ 106.803467][ T6552] [ 106.806209][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 106.806222][ T30] audit: type=1400 audit(1753334792.571:281): avc: denied { write } for pid=6553 comm="syz.2.183" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.054938][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.084831][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.102429][ T5939] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.372296][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 107.453740][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 107.807912][ T6574] netlink: 'syz.3.187': attribute type 8 has an invalid length. [ 108.199565][ T5939] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.292798][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.303384][ T5939] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.815566][ T6582] hub 2-0:1.0: USB hub found [ 108.821036][ T6582] hub 2-0:1.0: 1 port detected [ 108.865573][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.050075][ T5939] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33279, setting to 1024 [ 109.345414][ T5939] usb 3-1: config 1 interface 1 has no altsetting 0 [ 109.709197][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.720780][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.728970][ T5939] usb 3-1: Product: syz [ 109.733747][ T5939] usb 3-1: Manufacturer: syz [ 109.738406][ T5939] usb 3-1: SerialNumber: syz [ 109.784410][ T5939] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 109.806359][ T5939] usb 3-1: 2:1 : unknown format tag 0x1009 is detected. processed as MPEG. [ 109.829114][ T5939] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 109.846581][ T5939] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 109.856340][ T5939] usb 3-1: 2:1 : unknown format tag 0x1009 is detected. processed as MPEG. [ 109.867338][ T5939] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 109.956050][ T5939] usb 3-1: USB disconnect, device number 7 [ 110.702833][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.387926][ T6610] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 111.394475][ T6610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.498819][ T30] audit: type=1400 audit(1753334797.251:282): avc: denied { create } for pid=6608 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.519107][ T6610] vhci_hcd vhci_hcd.0: Device attached [ 111.553761][ T6611] vhci_hcd: connection closed [ 111.637773][ T3532] vhci_hcd: stop threads [ 111.667795][ T3532] vhci_hcd: release socket [ 111.810118][ T5885] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 111.851793][ T3532] vhci_hcd: disconnect device [ 112.015756][ T6627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.074948][ T30] audit: type=1400 audit(1753334797.821:283): avc: denied { search } for pid=6626 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.169509][ T30] audit: type=1400 audit(1753334797.821:284): avc: denied { search } for pid=6626 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.193213][ T30] audit: type=1400 audit(1753334797.821:285): avc: denied { search } for pid=6626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.446656][ T6638] hub 2-0:1.0: USB hub found [ 112.453159][ T6638] hub 2-0:1.0: 1 port detected [ 112.647220][ T6640] fuse: Bad value for 'fd' [ 112.668180][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 112.687535][ T30] audit: type=1400 audit(1753334797.821:286): avc: denied { search } for pid=6626 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.903387][ T30] audit: type=1400 audit(1753334797.841:287): avc: denied { read open } for pid=6628 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.990988][ T6646] FAULT_INJECTION: forcing a failure. [ 112.990988][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 113.003659][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.0.205 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 113.003684][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.003693][ T6646] Call Trace: [ 113.003699][ T6646] [ 113.003706][ T6646] dump_stack_lvl+0x16c/0x1f0 [ 113.003726][ T6646] should_fail_ex+0x512/0x640 [ 113.003753][ T6646] ? fs_reclaim_acquire+0xae/0x150 [ 113.003776][ T6646] ? tomoyo_encode2+0x100/0x3e0 [ 113.003792][ T6646] should_failslab+0xc2/0x120 [ 113.003809][ T6646] __kmalloc_noprof+0xd2/0x510 [ 113.003842][ T6646] tomoyo_encode2+0x100/0x3e0 [ 113.003862][ T6646] tomoyo_encode+0x29/0x50 [ 113.003877][ T6646] tomoyo_realpath_from_path+0x18f/0x6e0 [ 113.003898][ T6646] ? tomoyo_profile+0x47/0x60 [ 113.003920][ T6646] tomoyo_path_number_perm+0x245/0x580 [ 113.003943][ T6646] ? tomoyo_path_number_perm+0x237/0x580 [ 113.003968][ T6646] ? finish_task_switch.isra.0+0x1d4/0xc10 [ 113.003992][ T6646] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.004015][ T6646] ? rcu_is_watching+0x12/0xc0 [ 113.004043][ T6646] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.004094][ T6646] ? find_held_lock+0x2b/0x80 [ 113.004115][ T6646] ? hook_file_ioctl_common+0x145/0x410 [ 113.004142][ T6646] ? __fget_files+0x20e/0x3c0 [ 113.004162][ T6646] security_file_ioctl+0x9b/0x240 [ 113.004181][ T6646] __x64_sys_ioctl+0xb7/0x210 [ 113.004207][ T6646] do_syscall_64+0xcd/0x4c0 [ 113.004227][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.004245][ T6646] RIP: 0033:0x7fe25798e9a9 [ 113.004259][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.004275][ T6646] RSP: 002b:00007fe2557f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.004291][ T6646] RAX: ffffffffffffffda RBX: 00007fe257bb6160 RCX: 00007fe25798e9a9 [ 113.004302][ T6646] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000005 [ 113.004313][ T6646] RBP: 00007fe2557f6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.004323][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.004332][ T6646] R13: 0000000000000000 R14: 00007fe257bb6160 R15: 00007ffd4388f308 [ 113.004356][ T6646] [ 113.004411][ T6646] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.238419][ T30] audit: type=1400 audit(1753334797.841:288): avc: denied { getattr } for pid=6628 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.264102][ T30] audit: type=1400 audit(1753334797.841:289): avc: denied { getattr } for pid=6628 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1891 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.377492][ T30] audit: type=1400 audit(1753334798.551:290): avc: denied { read } for pid=6635 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1891 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.416179][ T30] audit: type=1400 audit(1753334798.551:291): avc: denied { open } for pid=6635 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1891 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.988572][ T30] audit: type=1400 audit(1753334799.751:292): avc: denied { add_name } for pid=6626 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.130107][ T5899] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.137717][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.709348][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 116.976437][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 117.107547][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.121131][ T5899] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 117.129225][ T5899] usb 1-1: config 0 has no interface number 0 [ 117.138122][ T10] usb 2-1: config 0 descriptor?? [ 117.145228][ T5899] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 117.155689][ T10] cp210x 2-1:0.0: cp210x converter detected [ 117.162857][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.170971][ T5885] vhci_hcd: vhci_device speed not set [ 117.177167][ T5899] usb 1-1: Product: syz [ 117.187691][ T5899] usb 1-1: Manufacturer: syz [ 117.200069][ T5899] usb 1-1: SerialNumber: syz [ 117.207858][ T5899] usb 1-1: config 0 descriptor?? [ 117.224265][ T5899] smsc95xx v2.0.0 [ 117.826075][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 117.836685][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 118.114814][ T5899] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 118.129363][ T5899] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.220566][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 118.372362][ T5899] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 118.399972][ T5899] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 119.589482][ T5899] usb 2-1: USB disconnect, device number 3 [ 119.625881][ T5885] usb 1-1: USB disconnect, device number 6 [ 119.634357][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.735960][ T5899] cp210x 2-1:0.0: device disconnected [ 122.145583][ T6790] hub 2-0:1.0: USB hub found [ 122.151119][ T6790] hub 2-0:1.0: 1 port detected [ 122.175878][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 123.472885][ T6808] sit1: entered allmulticast mode [ 123.677849][ T6812] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 123.684393][ T6812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.752460][ T6812] vhci_hcd vhci_hcd.0: Device attached [ 124.011567][ T5899] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 124.071220][ T6813] vhci_hcd: connection closed [ 124.072226][ T13] vhci_hcd: stop threads [ 124.089683][ T13] vhci_hcd: release socket [ 124.094566][ T13] vhci_hcd: disconnect device [ 124.110352][ T5899] usb 35-1: enqueue for inactive port 0 [ 124.180203][ T5899] vhci_hcd: vhci_device speed not set [ 125.666591][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 125.666607][ T30] audit: type=1400 audit(1753334811.431:305): avc: denied { connect } for pid=6847 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 126.324807][ T30] audit: type=1400 audit(1753334812.091:306): avc: denied { create } for pid=6847 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.438073][ T6877] hub 2-0:1.0: USB hub found [ 127.446819][ T6877] hub 2-0:1.0: 1 port detected [ 127.514573][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 127.813321][ T6886] sit1: entered allmulticast mode [ 128.548829][ T6894] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 128.555399][ T6894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.800914][ T6894] vhci_hcd vhci_hcd.0: Device attached [ 129.040361][ T5899] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 129.056530][ T5832] Bluetooth: unknown link type 6 [ 129.061639][ T5832] Bluetooth: hci1: connection err: -111 [ 129.067445][ T6898] vhci_hcd: connection closed [ 129.069700][ T3532] vhci_hcd: stop threads [ 129.099082][ T3532] vhci_hcd: release socket [ 129.134773][ T3532] vhci_hcd: disconnect device [ 131.595585][ T6952] hub 2-0:1.0: USB hub found [ 131.607898][ T6952] hub 2-0:1.0: 1 port detected [ 131.620957][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 132.810331][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.816660][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.815886][ T5899] vhci_hcd: vhci_device speed not set [ 155.750044][ C0] sched: DL replenish lagged too much [ 193.510778][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 193.516828][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 193.642862][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 193.648911][ T5152] Bluetooth: hci3: command 0x0405 tx timeout [ 194.034035][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.053389][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.373350][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.393720][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.040485][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.056412][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 422.479953][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 422.486928][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5202/1:b..l [ 422.495169][ C1] rcu: (detected by 1, t=10502 jiffies, g=12309, q=1562826 ncpus=2) [ 422.503230][ C1] task:udevd state:R running task stack:24664 pid:5202 tgid:5202 ppid:1 task_flags:0x400140 flags:0x00004002 [ 422.517428][ C1] Call Trace: [ 422.520705][ C1] [ 422.523637][ C1] __schedule+0x116a/0x5dd0 [ 422.528149][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 422.533094][ C1] ? __pfx___schedule+0x10/0x10 [ 422.537948][ C1] ? __lock_acquire+0x622/0x1c90 [ 422.542888][ C1] ? mark_held_locks+0x49/0x80 [ 422.547663][ C1] preempt_schedule_irq+0x51/0x90 [ 422.552705][ C1] irqentry_exit+0x36/0x90 [ 422.557127][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.563110][ C1] RIP: 0010:unwind_next_frame+0x1613/0x20a0 [ 422.569005][ C1] Code: 48 c1 ea 03 80 3c 02 00 0f 84 4a f8 ff ff e8 74 50 b6 00 e9 40 f8 ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 <80> 3c 02 00 0f 85 5b 05 00 00 49 8d 7d 08 49 8b 5d 38 48 b8 00 00 [ 422.588618][ C1] RSP: 0018:ffffc9000489f2b0 EFLAGS: 00000a02 [ 422.594688][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc900048a0000 [ 422.602662][ C1] RDX: 1ffff92000913e6b RSI: ffffc9000489fa60 RDI: ffffc9000489f360 [ 422.610630][ C1] RBP: ffffc9000489fad0 R08: 0000000000000001 R09: 0000000000000000 [ 422.618594][ C1] R10: 0000000000000000 R11: 0000000000013168 R12: ffffc9000489f370 [ 422.626563][ C1] R13: ffffc9000489f320 R14: ffffc9000489fa90 R15: ffffc9000489f354 [ 422.634548][ C1] ? do_dentry_open+0x596/0x1c10 [ 422.639496][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 422.645656][ C1] arch_stack_walk+0x94/0x100 [ 422.650346][ C1] ? vfs_open+0x82/0x3f0 [ 422.654592][ C1] stack_trace_save+0x8e/0xc0 [ 422.659270][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 422.664654][ C1] ? __lock_acquire+0x622/0x1c90 [ 422.669592][ C1] save_stack+0x160/0x1f0 [ 422.673924][ C1] ? __pfx_save_stack+0x10/0x10 [ 422.678778][ C1] ? __free_frozen_pages+0x7fe/0x1180 [ 422.684152][ C1] ? __put_partials+0x16d/0x1c0 [ 422.689004][ C1] ? qlist_free_all+0x4d/0x120 [ 422.693770][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 422.699412][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 422.704440][ C1] ? __kmalloc_noprof+0x1d4/0x510 [ 422.709466][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 422.715180][ C1] ? tomoyo_check_open_permission+0x2ab/0x3c0 [ 422.721247][ C1] ? tomoyo_file_open+0x6b/0x90 [ 422.726096][ C1] ? security_file_open+0x84/0x1e0 [ 422.731206][ C1] ? do_dentry_open+0x596/0x1c10 [ 422.736151][ C1] ? page_ext_put+0x3e/0xd0 [ 422.740740][ C1] __reset_page_owner+0x84/0x1a0 [ 422.745689][ C1] __free_frozen_pages+0x7fe/0x1180 [ 422.750897][ C1] __put_partials+0x16d/0x1c0 [ 422.755578][ C1] qlist_free_all+0x4d/0x120 [ 422.760173][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 422.765887][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 422.771354][ C1] __kasan_slab_alloc+0x69/0x90 [ 422.776213][ C1] __kmalloc_noprof+0x1d4/0x510 [ 422.781079][ C1] tomoyo_realpath_from_path+0xc2/0x6e0 [ 422.786630][ C1] tomoyo_check_open_permission+0x2ab/0x3c0 [ 422.792528][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 422.798971][ C1] ? find_held_lock+0x2b/0x80 [ 422.803656][ C1] tomoyo_file_open+0x6b/0x90 [ 422.808332][ C1] security_file_open+0x84/0x1e0 [ 422.813265][ C1] do_dentry_open+0x596/0x1c10 [ 422.818044][ C1] vfs_open+0x82/0x3f0 [ 422.822111][ C1] path_openat+0x1de4/0x2cb0 [ 422.826713][ C1] ? __pfx_path_openat+0x10/0x10 [ 422.831657][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 422.836591][ C1] do_filp_open+0x20b/0x470 [ 422.841103][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 422.846148][ C1] ? alloc_fd+0x471/0x7d0 [ 422.850493][ C1] do_sys_openat2+0x11b/0x1d0 [ 422.855171][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.860369][ C1] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 422.866438][ C1] __x64_sys_openat+0x174/0x210 [ 422.871292][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 422.876672][ C1] do_syscall_64+0xcd/0x4c0 [ 422.881171][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.887077][ C1] RIP: 0033:0x7fba0d4a7407 [ 422.891486][ C1] RSP: 002b:00007ffc0d3e50a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 422.899898][ C1] RAX: ffffffffffffffda RBX: 00007fba0dca5880 RCX: 00007fba0d4a7407 [ 422.907863][ C1] RDX: 0000000000080141 RSI: 000055cad4b6402e RDI: ffffffffffffff9c [ 422.915828][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.923790][ C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 422.931754][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 422.939738][ C1] [ 423.370879][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.387663][ T1298] ieee802154 phy1 wpan1: encryption failed: -22