last executing test programs: 18.057697165s ago: executing program 3 (id=3016): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x189, &(0x7f0000000080)={0x0, 0x0, 0x11000, 0x10}, &(0x7f0000000100), &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000022004000000000000009000000da29abfc463c42a6ddffffff00"/40], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RGETLOCK(r4, &(0x7f0000000380)={0x1e, 0x37, 0x1, {0x1, 0x80, 0x84}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000900)={{0x5, 0x5, 0x81, 0x5, '\x00', 0xfffffff9}, 0x0, [0x6f0c, 0x6, 0xff, 0x3ff, 0x3, 0x8, 0x8000000080, 0x9, 0xbede, 0x93c3, 0xfff, 0x8, 0x3, 0xfffffffffffffffc, 0x8, 0x1, 0x5b, 0x2, 0x10000, 0x9, 0x1, 0x800, 0xfff, 0x6, 0x2, 0xfff, 0x9, 0x3, 0x46, 0x1, 0xc, 0x1, 0x3, 0xaa, 0x9, 0xf39, 0x2, 0x5, 0x1, 0x6, 0x5, 0x6, 0x1, 0xae28, 0x3, 0x6, 0x0, 0x40000000000000, 0x9, 0x4, 0x5, 0xe, 0x3, 0x400, 0x9, 0x10000, 0x2, 0x1, 0xfffffffffffffffd, 0x8, 0x0, 0x1ff, 0x4, 0x401, 0x3f, 0x3, 0xa, 0x40000000, 0xffffffffffffffff, 0x3, 0x10001, 0x2, 0x9, 0xfffffffffffffffc, 0xd8, 0x9, 0x4, 0x3, 0x0, 0x4, 0x5, 0x1ffe00000000, 0x3, 0x7, 0xc, 0x6, 0x4, 0xa1, 0x9, 0x2a, 0x10001, 0x9, 0x8, 0x2, 0x4, 0x6, 0x401, 0x81, 0x8, 0x7, 0x6, 0xc566, 0xd85c, 0x1, 0x7f, 0x2, 0x8, 0x2, 0x6, 0x3, 0x1, 0xfff, 0x1, 0x8000000, 0xffff, 0x3, 0x2d, 0x4557, 0x1c00000000000000, 0x4, 0x3, 0x6, 0x5, 0x5, 0x8, 0x7, 0xb21a, 0x18000000000]}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x3, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b0, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x10000, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x3, 0x3, 0x9, 0x0, 0x401}, {0x40d, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x6, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x10003, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x5, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x5d, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0xa, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 17.323270162s ago: executing program 3 (id=3019): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'X\vb\x8d\x03\x06\x10\xa0\xc5`\xcb\xe8\xe4\x8c\xd0\xf0\xe5\xcb\xae6\x99<\xef\xa0Wh^UqG\xeeKLj\xe1y\x99\xfb\xa5Y\xbd\x01PAE\az&\x03\xa6\x8d.G\x99\xd6\x83\x94Cjue\x84\xf7:A\x9a\xbd\xb1a\'a\x9e/\xaa\xaf\xda\xc3X0\x05\x95\xac\xaa\xbe^\xed\xc8_\xdb\xfb~\x14\xf5\xc2\xf8\xa5&\xfdn\xe3]\xa4\tp\x90&\x97x\xb2\xf4\xe8D9\xf8U\x1f\x82G\x82\b\x99r\xd0\xc8\x05p>x\xe6\x95X\b\xd4~\x14:\x85MJf\x88\xea\xcfb\x7fL\x16\x8d\xf9\xe5ag[\xceee\xde'}, 0xc4, 0xfffffffffffffffe) gettid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000007c0), 0x2, 0x410040) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000940)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) listen(0xffffffffffffffff, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x5, 0x50674a4e, 0x11ffffffffff, 0x2, 0x3, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x5, 0x0, 0x200000001, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x4000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000000040000000a0000004113039b", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000300"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)='%ps \x00'}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000005a0000018110000", @ANYRES32=r6, @ANYBLOB="0000000000aaeab0bfee3b28a5912a26000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000063030c00f0ffffffa535080000000000bf91000000000000b7020000000000008500000085000000b700000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0xe0, &(0x7f0000000500)=""/224, 0x41100, 0x60, '\x00', 0x0, @fallback=0x2b, r3, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x0, 0xffffff64, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000740), &(0x7f0000000780)=[{0x3, 0x1, 0xc, 0x7}], 0x10, 0x8}, 0x94) 16.208957038s ago: executing program 3 (id=3022): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prlimit64(r0, 0xf, &(0x7f0000000000)={0x5b06584, 0x7}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677269643d7647fe4679859866d685e1f0fc0478a7fa724b9aa664b8e1ac89e80d30bda875c9c5f53ecb8e0ffc01eb9c324e247148ebb41a41796f6d102a5c801b150ff4d01769f7f7b9664700548209fa6f07abe597cafeb09b39c9725e4f6544bf53e47e8874d327fcb707e71d57b2ce2f05555bb2c3cf76d9e300ea2619a430f82a6389a1d6bb8b7e397ee76fd1094e0d5fd00aa51abedc5818a8", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x101c802, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000640)=@base={0xa, 0x41, 0xb2, 0x7f, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000004c0)=0x2) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500540008005400000060"], 0xfdef) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000340), 0x8) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) read(r7, &(0x7f0000000200)=""/91, 0x5b) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) getdents64(r3, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r1, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) 15.524260264s ago: executing program 1 (id=3026): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 15.015473265s ago: executing program 1 (id=3028): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x0, @local, 0x1}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, {0xa, 0x4e20, 0x0, @loopback, 0x7}, r2, 0x3ff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x80000000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000000340)=0x4) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 12.698479318s ago: executing program 3 (id=3033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) read$msr(r0, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001c00010429bd7000fddbdf2507000000", @ANYRES32=r7, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e8005000100780000000600050001"], 0x44}, 0x1, 0x0, 0x0, 0xe144e469f031c35f}, 0x20040040) 11.510142345s ago: executing program 0 (id=3034): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 10.661441705s ago: executing program 0 (id=3037): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) socket$kcm(0x2, 0x4, 0x2) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x400001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x0, {}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffff4, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x200, 0x0, 0xf, 0x2}, 0x5}}]}, {0x6f, 0x6, "8888c532403a986c0a76a1ac652884b9ed0c2143f7045b8ac947ad45c854ea2bfdb45311923ff98386cc823cd81bce507ba4473d4b20a0c5085e7a502a74e3561c8985e7f712c6a479b7d92412b5c0ccc9e0af1dbe3ffe50f3f2d07d063fe52866944a0a64f163fb8fbb0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4006040}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003e00)=@newtfilter={0x1584, 0x2c, 0xd27, 0x870b528, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1520, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x10}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xfff3}}, @TCA_BPF_ACT={0x1504, 0x1, [@m_gact={0x60, 0x18, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x10000000, 0xc, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x17d4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd49, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ctinfo={0xb8, 0x11, 0x0, 0x0, {{0xb}, {0xfffffffffffffd12, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x7b, 0x6, "9670f5235df63af265985d692ad27d57291873b624bedb44b1575d577c8659ac27018218ba447dacbed4b741ba7dcf2fa404364b7649fb597755b1195a2b7897ce4a50825e41e0f71cc63752974eabd7255dec2411f5be857c33a8dfb7e3b6de2f766fb4669c0d36b5e86b03f635fae0a7f97e15b19840"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x174, 0x9, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x1, 0x3, 0xb8, 0x5}, {0x6, 0x10, 0x5b, 0x7b}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xb}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x6bf0, 0x9, 0x9, 0x3}, {0x5, 0x6, 0x5}, {0x4, 0x5, 0x9, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x10000000, 0x9, 0x40}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x3, 0x7, 0x8001, 0x8}}]}, {0xe3, 0x6, "78ef94c1c90ff62ec54bbfcce5be98e5536a790a068cb4651e14ac360d4f2d65e04bec0c0af0d613328cb5ecc4272e48abdd2ef9d7ac81bb7479995485c411c7767df76bdef6429e240fc817e834d0f6e31b41cf901bdfb7e0857424c39f601930e01477da63279eb70916ad7c1211fefe47ca88a78a722570a8c5cc86880d83bb0f13cf99bdbd69ed272d52c5bdd86ac3a4c0dc9629fb4dba4d6b4dbdda51b50ff678aa65acb897c67839d22877491fe3c251b839ff15b8195af66775ef6e6cf7fc7e076c934fcf7fc03e741d0b3bef3e90e32a45eca6c9bd73b25cb264dd"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xac, 0x5, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd0c, 0x7, 0x5, 0x6, 0xbfca}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xec}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd5a4, 0x0, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x101}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x2d, 0x6, "8b5fac97ce194b176e0f5e0845b1872b5e1552bd97c8a035993aa35c3420791fd897a048e1448f7e3b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x14c, 0x9, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xef, 0x2, 0x7, 0x10000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x20000, 0x3, 0xf43, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x10001, 0x4, 0x6c9, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x3, 0x8, 0x1, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1ee1, 0x9, 0x20000000, 0xfffffffd, 0x1000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x101, 0x1, 0x10001, 0x400004}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0x4, 0x4, 0x30548f49}}, @TCA_GACT_PARMS={0x18, 0x2, {0x68e, 0x5, 0x20000000, 0xc41, 0x3ff}}]}, {0x5e, 0x6, "ccee12f6a67c5711f3882f4cdaefc75fc2112b9f77648581bafcbd3f55e75801daa69075e59c399c54f2bcbcebec9c9075715f4bfcd5dec269d0483d39ef170b9541c0ed6fe37eeaf7234e4eb773ac5c7f8aad05c803ae06fab6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x107c, 0xc, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x10000000, 0xd8, 0xa4}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x1584}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 10.315703637s ago: executing program 3 (id=3040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(&(0x7f0000000300)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917k\x18\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2u\xf5\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00T\xcf\x8a\x9f\xdd\xcc6\x05\xfb\x10\xb4X\x8e79S\xa6\x8f\xac\x00\a\x10E\x11\xb6\xc1\x03\xf6\x9fj^0\x14\"\xdc\xbd2n\xa5E\xc5\x9a\x00\xf7\n\xb9\x90\x1d \xc5\xdcT\xd4O\x89\xb5:\xb1$D\xaa\x1f\x8b\x8d\x00<\xdc\x98\x00e~w\x8d\'\x9bm\x89O\x9b3lS\xe5\xcf\xce\x81\xdd\xbf\xe9\xfauK>\x8a\xc5\xe6\x81\x97<\x05_E\xd0\xf5+\xd9\xf0\xe1\xc4`\xa7\b\xd0\xe4\x8e\x93\xc1<\xa1|\xce\xaeD\x04\xa5\xb3\x1b\aI\xb9TK\x16', 0xc0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61783d30303030573e2b67ee3030303030"]) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3, 0x8) mount$cgroup(0x20, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioprio_set$pid(0x1, r2, 0x2004) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000180)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 9.249861371s ago: executing program 3 (id=3041): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r2) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 8.005820233s ago: executing program 0 (id=3044): socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=@setlink={0x40, 0x13, 0x5, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x408}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, &(0x7f0000000340)=""/70, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000ff8110a40000000000bc181000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.277645646s ago: executing program 2 (id=3046): socket(0xa, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003"], 0xa0}, 0x1, 0x0, 0x0, 0x404}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) 6.866914777s ago: executing program 0 (id=3047): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x4) getpgrp(0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x78dd, 0x4) sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0x7ff) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x1003, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xa0}], 0x1) 6.199007044s ago: executing program 4 (id=3048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf258c00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x93ddb44c57957314}, 0x810) 5.991352584s ago: executing program 4 (id=3049): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 5.965361897s ago: executing program 4 (id=3050): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40088d5}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x8}], 0x1, 0x10000, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000180)=@ng={0x4, 0x0, "31cd6c261f443a97a75ef913499ca404abff8cd2"}, 0x16, 0x3) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 5.536076295s ago: executing program 4 (id=3051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001c00010429bd7000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e8005000100780000000600050001"], 0x44}, 0x1, 0x0, 0x0, 0xe144e469f031c35f}, 0x20040040) 5.372490657s ago: executing program 2 (id=3052): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e00000004"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000000012e4632010400000000141a000002000000200001801400018008000100e000000108000200e0000001060003400003000013bcfc028000100000000000080000000000000000000000000000000114004f348033ace4155b81576db00400fc0200000000000000000000000000000c0002800500010000000000060003400001000008000000"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffff9c, &(0x7f00000000c0), 0x4580, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 5.277899575s ago: executing program 0 (id=3053): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001c8, 0x12) socket$netlink(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 4.444698874s ago: executing program 2 (id=3054): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf2504000000089ccc1b53173c42fd002f000000000008003a000900000008003400010000800800310002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0x4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = timerfd_create(0x0, 0x0) r6 = syz_io_uring_setup(0x58f7, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r5, 0x3, &(0x7f0000000840)={{}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r6, 0x1f82, 0x0, 0x0, 0x0, 0x0) r9 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x400000000105) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) syz_io_uring_setup(0x237, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) setitimer(0x0, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xc7, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8947e4e408004500007000000000000190786401b12849c4b8586f4190780300000045000000000000000089000000000000e0000001862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001e0000002000000"], 0x0) 4.316695308s ago: executing program 1 (id=3055): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000090) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getrlimit(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x24c00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x54}}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x80000020}, 0xc) 3.389806809s ago: executing program 1 (id=3056): socket$inet_smc(0x2b, 0x1, 0x0) memfd_secret(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140)) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x2334e, 0x1000, 0x3, 0x800}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) 3.166659124s ago: executing program 0 (id=3057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) read$msr(r0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001c00010429bd7000fddbdf2507000000", @ANYRES32=r7, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e8005000100780000000600050001"], 0x44}, 0x1, 0x0, 0x0, 0xe144e469f031c35f}, 0x20040040) 1.515689176s ago: executing program 1 (id=3058): socket(0x11, 0x800000003, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.259251234s ago: executing program 4 (id=3059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf258c00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x93ddb44c57957314}, 0x810) 929.17278ms ago: executing program 4 (id=3060): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r2) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 849.399567ms ago: executing program 2 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x595}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffe00}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20044800}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) ioperm(0x1, 0x0, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0xf}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_EVENT={0x8, 0x2c, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/134, 0x86}}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r8, 0x40189206, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) 419.397388ms ago: executing program 2 (id=3062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r4, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x1f}, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4) 195.673419ms ago: executing program 1 (id=3063): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00), 0x0, 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xff08, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = socket(0x10, 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESOCT], 0x1c}}, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 0s ago: executing program 2 (id=3064): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x80, @multicast1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) syz_open_procfs$userns(0x0, &(0x7f0000000800)) socket$kcm(0x11, 0x3, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x1000, &(0x7f0000000340)=""/239) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000"], 0xa8}}, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): chr_file permissive=1 [ 883.486213][ T30] audit: type=1400 audit(1758079861.907:4564): avc: denied { setopt } for pid=15828 comm="syz.4.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 883.975955][ T5909] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 884.135565][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.222274][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 884.291593][ T5909] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 884.301416][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 884.377873][ T5909] usb 4-1: SerialNumber: syz [ 884.440380][ T5909] usb 4-1: 0:2 : does not exist [ 884.550197][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2654'. [ 884.663037][T15844] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2651'. [ 884.681502][T15857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=15857 comm=syz.0.2655 [ 885.121897][T15844] openvswitch: netlink: Missing key (keys=40, expected=80) [ 885.150684][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 885.199168][ T5909] usb 4-1: USB disconnect, device number 68 [ 885.305074][T15863] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2657'. [ 885.323193][T14829] udevd[14829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.343218][T15863] openvswitch: netlink: Missing key (keys=40, expected=80) [ 885.356830][T14189] udevd[14189]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 885.809702][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 886.016924][T15879] fuse: Unknown parameter 'grid' [ 886.199290][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 887.074459][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 887.153161][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 887.153178][ T30] audit: type=1400 audit(1758079865.991:4572): avc: denied { setopt } for pid=15892 comm="syz.3.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 887.875294][ T30] audit: type=1400 audit(1758079866.201:4573): avc: denied { ioctl } for pid=15892 comm="syz.3.2664" path="socket:[49503]" dev="sockfs" ino=49503 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 887.902721][ T30] audit: type=1400 audit(1758079866.201:4574): avc: denied { read write } for pid=15892 comm="syz.3.2664" dev="sockfs" ino=49064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 888.051733][T15894] veth0_to_bridge: entered promiscuous mode [ 888.058756][T15895] veth0_to_bridge: left promiscuous mode [ 888.174145][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 888.196960][ T30] audit: type=1400 audit(1758079867.083:4575): avc: denied { create } for pid=15901 comm="syz.1.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 888.487247][ T30] audit: type=1400 audit(1758079867.188:4576): avc: denied { ioctl } for pid=15901 comm="syz.1.2666" path="socket:[49510]" dev="sockfs" ino=49510 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 888.522239][T15909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2667'. [ 888.838546][T15909] netlink: 'syz.3.2667': attribute type 3 has an invalid length. [ 888.923346][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 888.995846][ T30] audit: type=1400 audit(1758079867.199:4577): avc: denied { write } for pid=15901 comm="syz.1.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 889.221449][T15917] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2671'. [ 889.236236][T15917] openvswitch: netlink: Missing key (keys=40, expected=80) [ 889.277831][ T30] audit: type=1400 audit(1758079867.199:4578): avc: denied { write } for pid=15901 comm="syz.1.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 889.334342][ T30] audit: type=1400 audit(1758079867.199:4579): avc: denied { create } for pid=15901 comm="syz.1.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 889.433800][ T30] audit: type=1400 audit(1758079867.199:4580): avc: denied { connect } for pid=15901 comm="syz.1.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 889.479647][ T30] audit: type=1400 audit(1758079867.682:4581): avc: denied { mac_admin } for pid=15905 comm="syz.4.2668" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 889.522650][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 890.452825][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 890.975504][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 891.444911][T15948] fuse: Unknown parameter 'grid' [ 892.290087][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 892.290123][ T30] audit: type=1400 audit(1758079870.936:4592): avc: denied { mounton } for pid=15952 comm="syz.1.2680" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 892.319314][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.417686][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 892.527936][ T30] audit: type=1400 audit(1758079870.936:4593): avc: denied { mount } for pid=15952 comm="syz.1.2680" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 892.777714][ T30] audit: type=1400 audit(1758079871.010:4594): avc: denied { audit_read } for pid=15952 comm="syz.1.2680" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 893.605467][T15969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=15969 comm=syz.1.2684 [ 893.626615][T15967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=15967 comm=syz.4.2683 [ 893.655257][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 893.968913][T15977] fuse: Unknown parameter 'user00000000000000000000' [ 894.447183][ T30] audit: type=1400 audit(1758079873.152:4595): avc: denied { mounton } for pid=15970 comm="syz.3.2685" path="/530/file0" dev="tmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 894.492252][ T30] audit: type=1400 audit(1758079873.698:4596): avc: denied { read write } for pid=5850 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 894.526505][ T30] audit: type=1400 audit(1758079873.698:4597): avc: denied { open } for pid=5850 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 894.551262][ T30] audit: type=1400 audit(1758079873.698:4598): avc: denied { ioctl } for pid=5850 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 894.650939][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 894.732694][ T30] audit: type=1400 audit(1758079873.729:4599): avc: denied { create } for pid=15972 comm="syz.4.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 895.153387][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 895.163696][ T30] audit: type=1400 audit(1758079873.750:4600): avc: denied { read write } for pid=15972 comm="syz.4.2687" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 895.306423][ T30] audit: type=1400 audit(1758079873.750:4601): avc: denied { open } for pid=15972 comm="syz.4.2687" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 895.337026][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 895.457959][ T1205] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 895.736787][ T1205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 895.770597][ T1205] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 895.826105][ T1205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 895.854978][ T1205] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 895.868979][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.879056][ T1205] usb 4-1: Product: syz [ 895.883375][ T1205] usb 4-1: Manufacturer: syz [ 895.895270][ T1205] usb 4-1: SerialNumber: syz [ 895.909252][ T1205] usb 4-1: config 0 descriptor?? [ 895.921269][T15987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 895.929387][T15987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 895.970645][ T1205] usb 4-1: ucan: probing device on interface #0 [ 896.021865][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 896.154439][ T5923] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 896.173165][ T1205] usb 4-1: ucan: device protocol version 262147 is not supported [ 896.182037][ T1205] usb 4-1: ucan: probe failed; try to update the device firmware [ 896.409062][ T5909] usb 4-1: USB disconnect, device number 69 [ 896.428438][ T5923] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 896.444875][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.498305][ T5923] usb 2-1: Product: syz [ 896.511872][ T5923] usb 2-1: Manufacturer: syz [ 896.747154][ T5923] usb 2-1: SerialNumber: syz [ 896.847054][ T5923] usb 2-1: config 0 descriptor?? [ 896.870482][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 896.876268][T16010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=16010 comm=syz.4.2697 [ 896.895596][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 896.920271][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 897.005217][T16012] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2698'. [ 897.016848][T16012] openvswitch: netlink: Missing key (keys=40, expected=80) [ 897.184186][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 897.184204][ T30] audit: type=1400 audit(1758079876.532:4640): avc: denied { read } for pid=16013 comm="syz.3.2699" dev="nsfs" ino=4026532861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 897.204102][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 897.251899][ T30] audit: type=1400 audit(1758079876.532:4641): avc: denied { open } for pid=16013 comm="syz.3.2699" path="mnt:[4026532861]" dev="nsfs" ino=4026532861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 897.724214][ T30] audit: type=1400 audit(1758079876.679:4642): avc: denied { create } for pid=15994 comm="syz.1.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 898.005911][T16024] fuse: Unknown parameter 'user_i00000000000000000000' [ 898.660302][T16025] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 898.660363][ T30] audit: type=1400 audit(1758079876.679:4643): avc: denied { module_request } for pid=15994 comm="syz.1.2692" kmod="net-pf-16-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 898.691750][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.818644][ T5980] usb 2-1: USB disconnect, device number 56 [ 899.820983][ T30] audit: type=1400 audit(1758079876.763:4644): avc: denied { create } for pid=15994 comm="syz.1.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 899.840584][ T30] audit: type=1400 audit(1758079876.763:4645): avc: denied { ioctl } for pid=15994 comm="syz.1.2692" path="socket:[50461]" dev="sockfs" ino=50461 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 899.867146][ T30] audit: type=1400 audit(1758079876.763:4646): avc: denied { connect } for pid=15994 comm="syz.1.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 899.887172][ T30] audit: type=1400 audit(1758079876.763:4647): avc: denied { read write } for pid=15994 comm="syz.1.2692" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 899.911416][ T30] audit: type=1400 audit(1758079876.763:4648): avc: denied { open } for pid=15994 comm="syz.1.2692" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 899.945305][ T30] audit: type=1400 audit(1758079876.763:4649): avc: denied { ioctl } for pid=15994 comm="syz.1.2692" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 900.036840][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 900.204936][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 900.741437][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2703'. [ 900.755182][T16033] netlink: 'syz.0.2703': attribute type 3 has an invalid length. [ 902.093304][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 902.131249][ T6372] Bluetooth: hci5: Frame reassembly failed (-84) [ 902.238645][T16054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=16054 comm=syz.4.2709 [ 902.258447][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 902.258462][ T30] audit: type=1400 audit(1758079881.845:4690): avc: denied { read write } for pid=16047 comm="syz.3.2707" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 902.651415][ T30] audit: type=1400 audit(1758079881.845:4691): avc: denied { open } for pid=16047 comm="syz.3.2707" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 902.688983][ T30] audit: type=1400 audit(1758079881.855:4692): avc: denied { ioctl } for pid=16047 comm="syz.3.2707" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 902.724719][ T30] audit: type=1400 audit(1758079882.233:4693): avc: denied { mount } for pid=16049 comm="syz.1.2708" name="/" dev="ramfs" ino=50519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 902.821952][ T30] audit: type=1400 audit(1758079882.296:4694): avc: denied { create } for pid=16052 comm="syz.4.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 902.846728][ T30] audit: type=1400 audit(1758079882.296:4695): avc: denied { create } for pid=16052 comm="syz.4.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 902.868163][ T30] audit: type=1400 audit(1758079882.296:4696): avc: denied { bind } for pid=16052 comm="syz.4.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 902.898094][ T30] audit: type=1400 audit(1758079882.296:4697): avc: denied { read } for pid=16052 comm="syz.4.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 903.560732][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 904.008633][ T30] audit: type=1400 audit(1758079883.588:4698): avc: denied { write } for pid=16066 comm="syz.4.2712" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 904.169392][T15090] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 904.186368][ T30] audit: type=1400 audit(1758079883.598:4699): avc: denied { ioctl } for pid=16066 comm="syz.4.2712" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 904.364568][ T5980] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 904.460276][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 904.686957][ T5980] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 904.696385][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.240717][ T5980] usb 5-1: Product: syz [ 905.245581][ T5980] usb 5-1: Manufacturer: syz [ 905.817205][ T5980] usb 5-1: SerialNumber: syz [ 905.942777][ T5980] usb 5-1: config 0 descriptor?? [ 906.004248][ T5980] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 906.083116][T16093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2717'. [ 906.104382][T16093] geneve2: entered allmulticast mode [ 906.244038][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 906.327847][ T5980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 906.358301][ T5980] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 906.879927][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 907.069280][ T1205] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 908.306752][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 908.306770][ T30] audit: type=1400 audit(1758079886.885:4717): avc: denied { ioctl } for pid=16098 comm="syz.3.2719" path="socket:[50600]" dev="sockfs" ino=50600 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 908.441318][ T5923] usb 5-1: USB disconnect, device number 49 [ 908.467602][ T1205] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 908.477817][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.500668][ T1205] usb 1-1: Product: syz [ 908.504874][ T1205] usb 1-1: Manufacturer: syz [ 908.509785][ T1205] usb 1-1: SerialNumber: syz [ 908.534450][ T1205] usb 1-1: config 0 descriptor?? [ 908.550103][T14493] udevd[14493]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 908.572817][ T1205] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 908.606923][ T30] audit: type=1400 audit(1758079888.501:4718): avc: denied { create } for pid=16102 comm="syz.4.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 908.607209][ T1205] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 909.079322][T16106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=311 sclass=netlink_route_socket pid=16106 comm=syz.4.2721 [ 909.164212][ T30] audit: type=1400 audit(1758079888.732:4719): avc: denied { mac_admin } for pid=16104 comm="syz.3.2720" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 909.226186][ T30] audit: type=1400 audit(1758079888.732:4720): avc: denied { relabelto } for pid=16104 comm="syz.3.2720" name="file1" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 909.256442][ T1205] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 909.263893][ T30] audit: type=1400 audit(1758079888.732:4721): avc: denied { associate } for pid=16104 comm="syz.3.2720" name="file1" dev="tmpfs" ino=2823 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:userio_device_t:s0" [ 909.269837][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 909.384773][T16113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2722'. [ 909.399967][T16113] netlink: 'syz.2.2722': attribute type 3 has an invalid length. [ 909.408853][ T1205] usb 1-1: USB disconnect, device number 40 [ 909.578183][ T30] audit: type=1400 audit(1758079888.743:4722): avc: denied { prog_run } for pid=16104 comm="syz.3.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 909.597236][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.089846][ T30] audit: type=1400 audit(1758079888.764:4723): avc: denied { ioctl } for pid=16104 comm="syz.3.2720" path="socket:[49789]" dev="sockfs" ino=49789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 910.119473][ T30] audit: type=1400 audit(1758079888.764:4724): avc: denied { write } for pid=16104 comm="syz.3.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 910.140135][ T30] audit: type=1400 audit(1758079888.774:4725): avc: denied { read } for pid=16104 comm="syz.3.2720" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 910.163682][ T30] audit: type=1400 audit(1758079888.774:4726): avc: denied { open } for pid=16104 comm="syz.3.2720" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 910.187423][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.541538][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 911.231352][T16134] fuse: Unknown parameter 'grid' [ 911.780749][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 911.954736][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 912.641025][ T1205] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 912.700096][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 912.892250][ T1205] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 912.901456][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.920361][T16153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=311 sclass=netlink_route_socket pid=16153 comm=syz.0.2734 [ 913.358681][ T1205] usb 4-1: Product: syz [ 913.374271][ T1205] usb 4-1: Manufacturer: syz [ 913.393015][ T1205] usb 4-1: SerialNumber: syz [ 913.406477][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 913.406491][ T30] audit: type=1400 audit(1758079893.562:4744): avc: denied { ioctl } for pid=16152 comm="syz.0.2734" path="socket:[50747]" dev="sockfs" ino=50747 ioctlcmd=0x5513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 913.437295][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.438176][ T1205] usb 4-1: config 0 descriptor?? [ 913.470338][ T1205] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 913.506817][ T1205] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 913.537173][ T1205] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 913.759324][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 914.283739][ T30] audit: type=1400 audit(1758079894.475:4745): avc: denied { map_read map_write } for pid=16164 comm="syz.0.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 914.719737][ T30] audit: type=1400 audit(1758079894.496:4746): avc: denied { connect } for pid=16164 comm="syz.0.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 914.831496][ T5909] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 915.163169][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 915.291093][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 915.304886][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 915.573592][ T5909] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 915.594224][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.625005][ T5909] usb 1-1: Product: syz [ 915.629263][ T5909] usb 1-1: Manufacturer: syz [ 915.634767][ T5909] usb 1-1: SerialNumber: syz [ 915.644295][ T5909] usb 1-1: config 0 descriptor?? [ 915.655745][T16166] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 915.767910][T16166] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 915.857450][ T1800] usb 4-1: USB disconnect, device number 70 [ 915.874328][ T5909] usb 1-1: ucan: probing device on interface #0 [ 915.988292][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 916.105164][T16186] fuse: Unknown parameter 'user_id00000000000000000000' [ 916.641336][ T30] audit: type=1400 audit(1758079896.386:4747): avc: denied { mounton } for pid=16179 comm="syz.4.2739" path="/527/file0" dev="tmpfs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 916.690434][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 916.725852][ T5909] usb 1-1: ucan: could not read protocol version, ret=-71 [ 916.733359][ T30] audit: type=1400 audit(1758079897.037:4748): avc: denied { prog_load } for pid=16188 comm="syz.3.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 916.733404][ T30] audit: type=1400 audit(1758079897.037:4749): avc: denied { bpf } for pid=16188 comm="syz.3.2742" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 916.741283][ T30] audit: type=1400 audit(1758079897.058:4750): avc: denied { read } for pid=16188 comm="syz.3.2742" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 916.774562][ T5909] usb 1-1: ucan: probe failed; try to update the device firmware [ 916.876984][ T5909] usb 1-1: USB disconnect, device number 41 [ 916.980319][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 917.464267][ T30] audit: type=1400 audit(1758079897.058:4751): avc: denied { open } for pid=16188 comm="syz.3.2742" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 918.222533][ T30] audit: type=1400 audit(1758079897.216:4752): avc: denied { read write } for pid=5850 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 918.356095][ T30] audit: type=1400 audit(1758079897.216:4753): avc: denied { open } for pid=5850 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 918.384735][ T30] audit: type=1400 audit(1758079897.216:4754): avc: denied { ioctl } for pid=5850 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 918.410717][ T30] audit: type=1400 audit(1758079897.268:4755): avc: denied { mount } for pid=16188 comm="syz.3.2742" name="/" dev="ramfs" ino=49923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 918.433792][ T30] audit: type=1400 audit(1758079897.436:4756): avc: denied { create } for pid=16195 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 918.584170][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 918.606213][ T30] audit: type=1400 audit(1758079898.003:4757): avc: denied { create } for pid=16184 comm="syz.2.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 918.928022][ T30] audit: type=1400 audit(1758079898.245:4758): avc: denied { read } for pid=16195 comm="syz.0.2744" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 918.950860][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.021951][ T30] audit: type=1400 audit(1758079898.245:4759): avc: denied { open } for pid=16195 comm="syz.0.2744" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 919.045262][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.262758][ T30] audit: type=1400 audit(1758079898.497:4760): avc: denied { ioctl } for pid=16195 comm="syz.0.2744" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 919.475235][ T30] audit: type=1400 audit(1758079898.497:4761): avc: denied { mac_admin } for pid=16195 comm="syz.0.2744" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 919.631332][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 919.753607][ T2114] Bluetooth: hci5: Frame reassembly failed (-84) [ 920.305536][ T1205] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 920.465069][ T1205] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 920.482461][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.589166][ T1205] usb 3-1: Product: syz [ 921.192538][ T1205] usb 3-1: Manufacturer: syz [ 921.215901][ T1205] usb 3-1: SerialNumber: syz [ 921.239017][ T1205] usb 3-1: config 0 descriptor?? [ 921.264351][ T1205] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 921.268447][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 921.298346][ T1205] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 921.323894][ T1205] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 921.399127][T16234] veth0_to_bridge: entered promiscuous mode [ 922.097326][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 922.098047][T15090] Bluetooth: hci5: command 0x1003 tx timeout [ 922.115161][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 922.123717][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 922.169660][T16232] veth0_to_bridge: left promiscuous mode [ 922.367876][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 922.456936][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 922.601459][T16250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=311 sclass=netlink_route_socket pid=16250 comm=syz.0.2755 [ 922.678028][T16253] fuse: Unknown parameter 'user_id00000000000000000000' [ 923.175344][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 923.175356][ T30] audit: type=1400 audit(1758079903.284:4808): avc: denied { mounton } for pid=16246 comm="syz.1.2754" path="/515/file0" dev="tmpfs" ino=2692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 923.204145][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.299662][ T5909] usb 3-1: USB disconnect, device number 11 [ 923.342266][ T30] audit: type=1400 audit(1758079903.935:4809): avc: denied { ioctl } for pid=16249 comm="syz.0.2755" path="socket:[49999]" dev="sockfs" ino=49999 ioctlcmd=0x5513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 923.438171][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 923.731558][ T30] audit: type=1400 audit(1758079903.946:4810): avc: denied { read write } for pid=15158 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 923.775599][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2759'. [ 924.389614][ T30] audit: type=1400 audit(1758079903.946:4811): avc: denied { open } for pid=15158 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 924.395904][T16262] netlink: 'syz.0.2758': attribute type 21 has an invalid length. [ 924.421737][T16262] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2758'. [ 924.431154][T16262] netlink: 'syz.0.2758': attribute type 5 has an invalid length. [ 924.438999][T16262] netlink: 'syz.0.2758': attribute type 6 has an invalid length. [ 924.446812][T16262] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2758'. [ 924.512674][ T30] audit: type=1400 audit(1758079903.946:4812): avc: denied { ioctl } for pid=15158 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 924.640466][ T30] audit: type=1400 audit(1758079904.051:4813): avc: denied { sys_module } for pid=16249 comm="syz.0.2755" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 924.694902][ T30] audit: type=1400 audit(1758079904.051:4814): avc: denied { module_request } for pid=16249 comm="syz.0.2755" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 924.828317][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 925.006497][T16274] FAULT_INJECTION: forcing a failure. [ 925.006497][T16274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.019656][T16274] CPU: 1 UID: 0 PID: 16274 Comm: syz.1.2757 Not tainted syzkaller #0 PREEMPT(full) [ 925.019681][T16274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 925.019691][T16274] Call Trace: [ 925.019699][T16274] [ 925.019706][T16274] dump_stack_lvl+0x16c/0x1f0 [ 925.019735][T16274] should_fail_ex+0x512/0x640 [ 925.019762][T16274] _copy_from_user+0x2e/0xd0 [ 925.019788][T16274] video_usercopy+0xedd/0x1720 [ 925.019814][T16274] ? __pfx___video_do_ioctl+0x10/0x10 [ 925.019834][T16274] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 925.019862][T16274] ? __pfx_video_usercopy+0x10/0x10 [ 925.019899][T16274] v4l2_ioctl+0x1bd/0x250 [ 925.019918][T16274] ? __pfx_v4l2_ioctl+0x10/0x10 [ 925.019944][T16274] __x64_sys_ioctl+0x18b/0x210 [ 925.019974][T16274] do_syscall_64+0xcd/0x4e0 [ 925.019999][T16274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.020017][T16274] RIP: 0033:0x7fc69938eba9 [ 925.020031][T16274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.020048][T16274] RSP: 002b:00007fc69a29d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.020066][T16274] RAX: ffffffffffffffda RBX: 00007fc6995d6180 RCX: 00007fc69938eba9 [ 925.020079][T16274] RDX: 0000200000000140 RSI: 0000000040045612 RDI: 0000000000000005 [ 925.020090][T16274] RBP: 00007fc69a29d090 R08: 0000000000000000 R09: 0000000000000000 [ 925.020102][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.020113][T16274] R13: 00007fc6995d6218 R14: 00007fc6995d6180 R15: 00007fff48cd9f48 [ 925.020137][T16274] [ 925.198002][ T30] audit: type=1400 audit(1758079904.082:4815): avc: denied { execmem } for pid=16256 comm="syz.2.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 925.218038][ T30] audit: type=1400 audit(1758079904.187:4816): avc: denied { create } for pid=16259 comm="syz.0.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 925.237826][ T30] audit: type=1400 audit(1758079904.198:4817): avc: denied { ioctl } for pid=16259 comm="syz.0.2758" path="socket:[50005]" dev="sockfs" ino=50005 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 925.265035][T16274] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 925.871963][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 926.224650][T16287] comedi comedi3: comedi_config --init_data is deprecated [ 926.420165][T16288] fuse: Unknown parameter 'grid' [ 926.430507][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 927.167605][T16303] overlayfs: failed to resolve './file0': -2 [ 927.744579][T16307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=311 sclass=netlink_route_socket pid=16307 comm=syz.3.2768 [ 927.794612][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 927.961987][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 928.140467][T16312] netlink: 'syz.0.2769': attribute type 21 has an invalid length. [ 928.148521][T16312] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2769'. [ 928.158362][T16312] netlink: 'syz.0.2769': attribute type 5 has an invalid length. [ 928.166201][T16312] netlink: 'syz.0.2769': attribute type 6 has an invalid length. [ 928.174742][T16312] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2769'. [ 928.436732][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 929.049573][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 929.102624][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 929.102639][ T30] audit: type=1400 audit(1758079910.035:4874): avc: denied { name_bind } for pid=16318 comm="syz.3.2771" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 929.298767][ T30] audit: type=1400 audit(1758079910.035:4875): avc: denied { node_bind } for pid=16318 comm="syz.3.2771" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 929.702072][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 930.554118][ T30] audit: type=1400 audit(1758079911.054:4876): avc: denied { prog_run } for pid=16324 comm="syz.0.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 930.939202][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 930.982612][T14189] udevd[14189]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 931.037050][ T30] audit: type=1400 audit(1758079912.072:4877): avc: denied { create } for pid=16333 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 931.104177][ T30] audit: type=1400 audit(1758079912.104:4878): avc: denied { ioctl } for pid=16333 comm="syz.0.2776" path="socket:[50141]" dev="sockfs" ino=50141 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 931.117273][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 931.198932][T16342] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2780'. [ 931.208265][ T30] audit: type=1400 audit(1758079912.104:4879): avc: denied { write } for pid=16333 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 931.218123][T16342] openvswitch: netlink: Missing key (keys=40, expected=80) [ 931.328443][ T30] audit: type=1400 audit(1758079912.167:4880): avc: denied { create } for pid=16333 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 931.334407][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 931.381543][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 931.433482][ T30] audit: type=1400 audit(1758079912.167:4881): avc: denied { create } for pid=16333 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 931.534904][T16346] vxcan1 speed is unknown, defaulting to 1000 [ 931.543045][ T30] audit: type=1400 audit(1758079912.177:4882): avc: denied { connect } for pid=16333 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 931.595746][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 931.690718][ T30] audit: type=1400 audit(1758079912.209:4883): avc: denied { write } for pid=16333 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 932.279411][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 932.281876][T16357] comedi comedi3: comedi_config --init_data is deprecated [ 932.604835][ T1800] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 932.864304][ T1800] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 932.881080][ T1800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.895324][ T1800] usb 4-1: Product: syz [ 932.917916][ T1800] usb 4-1: Manufacturer: syz [ 932.928757][ T1800] usb 4-1: SerialNumber: syz [ 932.951736][ T1800] usb 4-1: config 0 descriptor?? [ 932.967241][ T1800] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 932.996961][ T1800] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 933.848180][ T1800] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 934.206276][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 934.207319][ T30] audit: type=1400 audit(1758079915.327:4890): avc: denied { read write } for pid=16372 comm="syz.1.2787" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 934.246938][ T30] audit: type=1400 audit(1758079915.327:4891): avc: denied { open } for pid=16372 comm="syz.1.2787" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 934.557116][ T30] audit: type=1400 audit(1758079915.327:4892): avc: denied { ioctl } for pid=16372 comm="syz.1.2787" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 935.436983][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 935.466715][T16365] bridge_slave_0: default FDB implementation only supports local addresses [ 935.676717][ T1205] usb 4-1: USB disconnect, device number 71 [ 935.730971][T14493] udevd[14493]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 935.754969][T14189] udevd[14189]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 935.858507][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 935.943891][T16397] fuse: Unknown parameter 'grid' [ 936.955993][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 937.041653][ T30] audit: type=1400 audit(1758079918.372:4893): avc: denied { read } for pid=16418 comm="syz.1.2798" name="binder0" dev="binder" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 937.146795][ T30] audit: type=1400 audit(1758079918.403:4894): avc: denied { open } for pid=16418 comm="syz.1.2798" path="/dev/binderfs/binder0" dev="binder" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 937.218605][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 937.920775][ T30] audit: type=1400 audit(1758079918.403:4895): avc: denied { ioctl } for pid=16418 comm="syz.1.2798" path="/dev/binderfs/binder0" dev="binder" ino=124 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 937.951950][ T30] audit: type=1400 audit(1758079918.403:4896): avc: denied { set_context_mgr } for pid=16418 comm="syz.1.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 938.010710][ T30] audit: type=1400 audit(1758079918.624:4897): avc: denied { ioctl } for pid=16418 comm="syz.1.2798" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=51357 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 938.124425][T16430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2799'. [ 938.137308][T16430] netlink: 'syz.2.2799': attribute type 3 has an invalid length. [ 938.398134][ T30] audit: type=1400 audit(1758079918.624:4898): avc: denied { wake_alarm } for pid=16418 comm="syz.1.2798" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 938.435964][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 938.452603][ T5859] Bluetooth: hci2: command 0x0405 tx timeout [ 938.501184][ T30] audit: type=1400 audit(1758079919.432:4899): avc: denied { getopt } for pid=16428 comm="syz.2.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 938.601135][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 939.479449][ T30] audit: type=1400 audit(1758079920.891:4900): avc: denied { create } for pid=16443 comm="syz.0.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 939.664309][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 939.850772][T16454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 939.856738][T16454] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 940.175219][ T30] audit: type=1400 audit(1758079921.059:4901): avc: denied { create } for pid=16443 comm="syz.0.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 940.732342][T16465] fuse: Unknown parameter 'grid' [ 941.070414][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 941.186693][T16468] overlay: Unknown parameter '/dev/fuse' [ 941.192785][ T30] audit: type=1400 audit(1758079922.729:4902): avc: denied { mount } for pid=16467 comm="syz.0.2809" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 941.286914][ T30] audit: type=1400 audit(1758079922.823:4903): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 941.343709][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 941.449092][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 942.751533][ T30] audit: type=1400 audit(1758079923.180:4904): avc: denied { read write } for pid=16479 comm="syz.3.2812" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 942.807804][ T30] audit: type=1400 audit(1758079923.180:4905): avc: denied { open } for pid=16479 comm="syz.3.2812" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 942.843496][ T30] audit: type=1400 audit(1758079923.506:4906): avc: denied { ioctl } for pid=16479 comm="syz.3.2812" path="socket:[51434]" dev="sockfs" ino=51434 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 943.049772][T16486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2813'. [ 943.067067][T16486] netlink: 'syz.2.2813': attribute type 3 has an invalid length. [ 943.257066][ T30] audit: type=1400 audit(1758079923.663:4907): avc: denied { execute } for pid=16479 comm="syz.3.2812" path="/555/cpu.stat" dev="tmpfs" ino=2916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 943.367335][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 945.310118][ T1205] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 945.477162][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 945.507056][ T1205] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 945.541390][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.543177][T16500] openvswitch: netlink: Missing key (keys=40, expected=100) [ 945.556462][ T1205] usb 3-1: Product: syz [ 945.557529][ T30] audit: type=1400 audit(1758079927.296:4908): avc: denied { create } for pid=16499 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 945.561177][ T1205] usb 3-1: Manufacturer: syz [ 945.561195][ T1205] usb 3-1: SerialNumber: syz [ 945.568394][ T1205] usb 3-1: config 0 descriptor?? [ 945.619493][ T1205] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 945.637910][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 945.658421][ T30] audit: type=1400 audit(1758079927.296:4909): avc: denied { bind } for pid=16499 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 945.796940][ T1205] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 945.814103][ T1205] usb 3-1: media controller created [ 946.405485][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.419367][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.419567][ T30] audit: type=1400 audit(1758079927.296:4910): avc: denied { accept } for pid=16499 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 946.430774][T16505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2815'. [ 946.556127][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.571997][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 946.595944][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2820'. [ 946.598014][T14493] udevd[14493]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 946.674539][T16510] veth0_to_bridge: entered promiscuous mode [ 947.354905][T16506] veth0_to_bridge: left promiscuous mode [ 947.572982][ T30] audit: type=1400 audit(1758079927.296:4911): avc: denied { read } for pid=16499 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 947.911214][ T30] audit: type=1400 audit(1758079927.296:4912): avc: denied { write } for pid=16499 comm="syz.0.2817" path="socket:[52381]" dev="sockfs" ino=52381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 947.944938][ T1205] DVB: Unable to find symbol mt352_attach() [ 947.992507][T14189] udevd[14189]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 948.002009][ T30] audit: type=1400 audit(1758079927.443:4913): avc: denied { read write } for pid=16499 comm="syz.0.2817" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 948.079924][ T1205] DVB: Unable to find symbol nxt6000_attach() [ 948.131944][ T30] audit: type=1400 audit(1758079927.443:4914): avc: denied { open } for pid=16499 comm="syz.0.2817" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 948.139454][ T1205] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 948.169938][ T30] audit: type=1400 audit(1758079927.443:4915): avc: denied { create } for pid=16499 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 948.267224][ T30] audit: type=1400 audit(1758079927.443:4916): avc: denied { write } for pid=16499 comm="syz.0.2817" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 948.410980][T16531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2825'. [ 948.420967][T16531] netlink: 'syz.1.2825': attribute type 3 has an invalid length. [ 948.578331][ T30] audit: type=1400 audit(1758079927.443:4917): avc: denied { map } for pid=16499 comm="syz.0.2817" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 948.620502][ T1205] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 948.674605][ T1205] dvb-usb: schedule remote query interval to 1000 msecs. [ 948.806491][ T1205] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 949.249204][ T1205] dvb-usb: bulk message failed: -22 (7/0) [ 949.264085][ T1205] dvb-usb: bulk message failed: -22 (7/0) [ 949.320335][ T1205] usb 3-1: USB disconnect, device number 12 [ 949.423182][ T1205] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 949.801410][T16544] FAULT_INJECTION: forcing a failure. [ 949.801410][T16544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.882080][T16544] CPU: 1 UID: 0 PID: 16544 Comm: syz.1.2828 Not tainted syzkaller #0 PREEMPT(full) [ 949.882099][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 949.882106][T16544] Call Trace: [ 949.882110][T16544] [ 949.882115][T16544] dump_stack_lvl+0x16c/0x1f0 [ 949.882134][T16544] should_fail_ex+0x512/0x640 [ 949.882151][T16544] _copy_from_user+0x2e/0xd0 [ 949.882168][T16544] do_handle_open+0xee/0xc50 [ 949.882182][T16544] ? __pfx_do_handle_open+0x10/0x10 [ 949.882196][T16544] ? ksys_write+0x1ac/0x250 [ 949.882213][T16544] ? do_syscall_64+0xcd/0x4e0 [ 949.882230][T16544] do_syscall_64+0xcd/0x4e0 [ 949.882251][T16544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.882267][T16544] RIP: 0033:0x7fc69938eba9 [ 949.882282][T16544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.882299][T16544] RSP: 002b:00007fc69a2df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 949.882314][T16544] RAX: ffffffffffffffda RBX: 00007fc6995d5fa0 RCX: 00007fc69938eba9 [ 949.882325][T16544] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 949.882335][T16544] RBP: 00007fc69a2df090 R08: 0000000000000000 R09: 0000000000000000 [ 949.882344][T16544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.882354][T16544] R13: 00007fc6995d6038 R14: 00007fc6995d5fa0 R15: 00007fff48cd9f48 [ 949.882375][T16544] [ 950.220772][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 950.323841][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 950.323855][ T30] audit: type=1400 audit(1758079932.314:4926): avc: denied { create } for pid=16548 comm="syz.1.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 950.376084][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 950.458752][T16566] veth0_to_bridge: entered promiscuous mode [ 950.499669][ T30] audit: type=1400 audit(1758079932.472:4927): avc: denied { create } for pid=16548 comm="syz.1.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 951.253567][T16559] veth0_to_bridge: left promiscuous mode [ 951.888347][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 951.904628][ T30] audit: type=1400 audit(1758079932.472:4928): avc: denied { write } for pid=16548 comm="syz.1.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 952.036897][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 952.380891][ T30] audit: type=1400 audit(1758079934.477:4929): avc: denied { create } for pid=16581 comm="syz.2.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 952.931102][T16585] program syz.0.2840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.978378][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 953.145394][ T30] audit: type=1400 audit(1758079935.076:4930): avc: denied { connect } for pid=16583 comm="syz.0.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 953.366433][ T30] audit: type=1400 audit(1758079935.317:4931): avc: denied { mac_admin } for pid=16581 comm="syz.2.2839" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 953.412540][ T30] audit: type=1400 audit(1758079935.317:4932): avc: denied { relabelto } for pid=16581 comm="syz.2.2839" name="file1" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 953.439303][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.495373][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 953.598569][ T5923] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 953.740136][ T30] audit: type=1400 audit(1758079935.317:4933): avc: denied { associate } for pid=16581 comm="syz.2.2839" name="file1" dev="tmpfs" ino=319 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:userio_device_t:s0" [ 953.767699][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.870993][ T30] audit: type=1400 audit(1758079935.338:4934): avc: denied { ioctl } for pid=16581 comm="syz.2.2839" path="socket:[52535]" dev="sockfs" ino=52535 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 953.896080][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.964331][ T30] audit: type=1400 audit(1758079935.338:4935): avc: denied { write } for pid=16581 comm="syz.2.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 954.023326][ T5923] usb 5-1: config 0 has no interfaces? [ 954.042815][ T5923] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 954.095604][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 954.131241][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.266214][ T5923] usb 5-1: config 0 descriptor?? [ 955.088123][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2845'. [ 955.239799][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 955.401251][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 955.468607][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 955.468618][ T30] audit: type=1400 audit(1758079937.721:4941): avc: denied { read write } for pid=16615 comm="syz.3.2848" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 955.516524][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 955.654237][ T30] audit: type=1400 audit(1758079937.753:4942): avc: denied { open } for pid=16615 comm="syz.3.2848" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 956.057022][ T5963] usb 5-1: USB disconnect, device number 50 [ 956.409520][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 957.628481][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 958.605590][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 958.846687][ T30] audit: type=1400 audit(1758079941.270:4943): avc: denied { create } for pid=16646 comm="syz.3.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 959.481430][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 959.783614][T16663] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2859'. [ 959.792827][T16663] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2859'. [ 959.952169][T16654] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2858'. [ 959.979464][T16654] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2858'. [ 960.075483][T16667] capability: warning: `syz.1.2860' uses 32-bit capabilities (legacy support in use) [ 960.085367][T16667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2860'. [ 960.105832][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 960.173482][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 961.018578][T16680] fuse: Unknown parameter 'grid' [ 961.260761][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 961.342165][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 962.088008][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 963.023865][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 963.178340][T16705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2867'. [ 963.190241][T16705] netlink: 'syz.2.2867': attribute type 3 has an invalid length. [ 963.478988][ T30] audit: type=1400 audit(1758079946.100:4944): avc: denied { create } for pid=16701 comm="syz.3.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 963.697219][ T30] audit: type=1400 audit(1758079946.110:4945): avc: denied { append } for pid=16701 comm="syz.3.2868" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 963.797753][ T30] audit: type=1400 audit(1758079946.110:4946): avc: denied { write } for pid=16701 comm="syz.3.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 963.880035][T16713] binder: BINDER_SET_CONTEXT_MGR already set [ 963.957360][T16716] afs: Unknown parameter 'žh'7Ü' [ 964.370233][T16713] binder: 16709:16713 ioctl 4018620d 200000000100 returned -16 [ 964.608181][T16718] FAULT_INJECTION: forcing a failure. [ 964.608181][T16718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.621794][T16718] CPU: 1 UID: 0 PID: 16718 Comm: syz.1.2869 Not tainted syzkaller #0 PREEMPT(full) [ 964.621819][T16718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 964.621830][T16718] Call Trace: [ 964.621837][T16718] [ 964.621845][T16718] dump_stack_lvl+0x16c/0x1f0 [ 964.621873][T16718] should_fail_ex+0x512/0x640 [ 964.621901][T16718] _copy_from_iter+0x29f/0x1720 [ 964.621933][T16718] ? __pfx__copy_from_iter+0x10/0x10 [ 964.621961][T16718] ? rcu_is_watching+0x12/0xc0 [ 964.621984][T16718] ? trace_kmalloc+0x2b/0xd0 [ 964.622006][T16718] ? __kmalloc_noprof+0x242/0x510 [ 964.622031][T16718] kernfs_fop_write_iter+0x19a/0x570 [ 964.622055][T16718] vfs_write+0x7d0/0x11d0 [ 964.622075][T16718] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 964.622095][T16718] ? __pfx___mutex_lock+0x10/0x10 [ 964.622119][T16718] ? __pfx_vfs_write+0x10/0x10 [ 964.622156][T16718] ksys_write+0x12a/0x250 [ 964.622175][T16718] ? __pfx_ksys_write+0x10/0x10 [ 964.622201][T16718] do_syscall_64+0xcd/0x4e0 [ 964.622228][T16718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.622247][T16718] RIP: 0033:0x7fc69938eba9 [ 964.622262][T16718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.622279][T16718] RSP: 002b:00007fc69a2be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 964.622296][T16718] RAX: ffffffffffffffda RBX: 00007fc6995d6090 RCX: 00007fc69938eba9 [ 964.622309][T16718] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000006 [ 964.622321][T16718] RBP: 00007fc69a2be090 R08: 0000000000000000 R09: 0000000000000000 [ 964.622332][T16718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.622343][T16718] R13: 00007fc6995d6128 R14: 00007fc6995d6090 R15: 00007fff48cd9f48 [ 964.622369][T16718] [ 964.910471][T16718] afs: Unknown parameter 'žh'7Ü' [ 965.049070][T16713] binder: BINDER_SET_CONTEXT_MGR already set [ 965.092732][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 965.104211][T16713] binder: 16709:16713 ioctl 4018620d 2000000002c0 returned -16 [ 965.140983][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'. [ 965.608468][T16728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2874'. [ 965.645174][T16728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2874'. [ 965.727206][ T30] audit: type=1400 audit(1758079948.221:4947): avc: denied { create } for pid=16721 comm="syz.4.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 965.728252][T16731] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2875'. [ 965.747213][ T30] audit: type=1400 audit(1758079948.231:4948): avc: denied { map } for pid=16721 comm="syz.4.2874" path="socket:[51932]" dev="sockfs" ino=51932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 965.747261][ T30] audit: type=1400 audit(1758079948.231:4949): avc: denied { read } for pid=16721 comm="syz.4.2874" path="socket:[51932]" dev="sockfs" ino=51932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 965.996685][T16731] openvswitch: netlink: Missing key (keys=40, expected=80) [ 966.067035][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 966.136021][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 966.340228][T16738] fuse: Unknown parameter 'grid' [ 967.633639][T16761] veth0_to_bridge: entered promiscuous mode [ 968.083915][T16753] veth0_to_bridge: left promiscuous mode [ 968.267528][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 968.784216][T16776] FAULT_INJECTION: forcing a failure. [ 968.784216][T16776] name failslab, interval 1, probability 0, space 0, times 0 [ 969.000212][T14189] udevd[14189]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 969.026205][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 969.055200][T16776] CPU: 0 UID: 0 PID: 16776 Comm: syz.3.2885 Not tainted syzkaller #0 PREEMPT(full) [ 969.055224][T16776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 969.055235][T16776] Call Trace: [ 969.055242][T16776] [ 969.055249][T16776] dump_stack_lvl+0x16c/0x1f0 [ 969.055276][T16776] should_fail_ex+0x512/0x640 [ 969.055298][T16776] ? __kmalloc_noprof+0xbf/0x510 [ 969.055320][T16776] ? nla_strdup+0xc6/0x150 [ 969.055341][T16776] should_failslab+0xc2/0x120 [ 969.055361][T16776] __kmalloc_noprof+0xd2/0x510 [ 969.055383][T16776] nla_strdup+0xc6/0x150 [ 969.055409][T16776] nf_tables_newtable+0xe03/0x1b60 [ 969.055431][T16776] ? __pfx___nla_validate_parse+0x10/0x10 [ 969.055461][T16776] ? __pfx_nf_tables_newtable+0x10/0x10 [ 969.055485][T16776] ? __nla_parse+0x40/0x60 [ 969.055514][T16776] nfnetlink_rcv_batch+0x18ed/0x2330 [ 969.055546][T16776] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 969.055581][T16776] ? avc_has_perm_noaudit+0x149/0x3b0 [ 969.055625][T16776] ? __nla_parse+0x40/0x60 [ 969.055654][T16776] nfnetlink_rcv+0x3c1/0x430 [ 969.055672][T16776] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 969.055696][T16776] netlink_unicast+0x5a7/0x870 [ 969.055723][T16776] ? __pfx_netlink_unicast+0x10/0x10 [ 969.055747][T16776] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 969.055778][T16776] netlink_sendmsg+0x8d1/0xdd0 [ 969.055805][T16776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 969.055838][T16776] ____sys_sendmsg+0xa95/0xc70 [ 969.055866][T16776] ? copy_msghdr_from_user+0x10a/0x160 [ 969.055887][T16776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 969.055932][T16776] ___sys_sendmsg+0x134/0x1d0 [ 969.055956][T16776] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.056010][T16776] __sys_sendmsg+0x16d/0x220 [ 969.056032][T16776] ? __pfx___sys_sendmsg+0x10/0x10 [ 969.056070][T16776] do_syscall_64+0xcd/0x4e0 [ 969.056095][T16776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.056114][T16776] RIP: 0033:0x7f800718eba9 [ 969.056128][T16776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.056145][T16776] RSP: 002b:00007f8007f7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.056163][T16776] RAX: ffffffffffffffda RBX: 00007f80073d5fa0 RCX: 00007f800718eba9 [ 969.056174][T16776] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 969.056185][T16776] RBP: 00007f8007f7d090 R08: 0000000000000000 R09: 0000000000000000 [ 969.056196][T16776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.056206][T16776] R13: 00007f80073d6038 R14: 00007f80073d5fa0 R15: 00007fff939aee18 [ 969.056231][T16776] [ 969.378571][T16784] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2888'. [ 969.492625][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 969.543579][T16784] openvswitch: netlink: Missing key (keys=40, expected=80) [ 969.706290][ T30] audit: type=1400 audit(1758079952.672:4950): avc: denied { append } for pid=16786 comm="syz.3.2889" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 969.764576][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 970.015562][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2890'. [ 970.701434][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 970.774230][T16799] 9pnet_fd: Insufficient options for proto=fd [ 970.780635][ T30] audit: type=1400 audit(1758079953.785:4951): avc: denied { read write } for pid=16798 comm="syz.3.2891" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 970.853674][ T30] audit: type=1400 audit(1758079953.785:4952): avc: denied { open } for pid=16798 comm="syz.3.2891" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 971.372872][T16812] afs: Unknown parameter 'žh'7Ü' [ 972.096047][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 972.135258][T16816] fuse: Unknown parameter 'grid' [ 972.224087][ T30] audit: type=1400 audit(1758079955.308:4953): avc: denied { mounton } for pid=16814 comm="syz.4.2895" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 972.250718][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 972.470671][T16827] 9pnet_fd: Insufficient options for proto=fd [ 972.874701][T16836] binder: BINDER_SET_CONTEXT_MGR already set [ 972.880716][T16836] binder: 16834:16836 ioctl 4018620d 200000000100 returned -16 [ 973.157289][ T30] audit: type=1400 audit(1758079956.273:4954): avc: denied { mounton } for pid=16834 comm="syz.2.2900" path="/syzcgroup/unified/syz2" dev="hugetlbfs" ino=49117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 973.250255][T16837] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 973.579633][ T30] audit: type=1400 audit(1758079956.336:4955): avc: denied { create } for pid=16834 comm="syz.2.2900" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 973.715983][ T30] audit: type=1400 audit(1758079956.336:4956): avc: denied { ioctl } for pid=16834 comm="syz.2.2900" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52222 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 973.903109][ T30] audit: type=1400 audit(1758079956.336:4957): avc: denied { wake_alarm } for pid=16834 comm="syz.2.2900" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 973.932589][ T30] audit: type=1400 audit(1758079956.515:4958): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 974.005565][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2901'. [ 974.311314][ T30] audit: type=1400 audit(1758079956.515:4959): avc: denied { open } for pid=5844 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 974.605322][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 974.691868][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 974.691884][ T30] audit: type=1400 audit(1758079957.901:4967): avc: denied { create } for pid=16849 comm="syz.4.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 974.793524][ T30] audit: type=1400 audit(1758079957.901:4968): avc: denied { allowed } for pid=16849 comm="syz.4.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 974.817200][ T30] audit: type=1400 audit(1758079957.901:4969): avc: denied { map } for pid=16849 comm="syz.4.2903" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 974.845952][ T30] audit: type=1400 audit(1758079957.901:4970): avc: denied { read write } for pid=16849 comm="syz.4.2903" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 975.007517][ T30] audit: type=1400 audit(1758079957.985:4971): avc: denied { create } for pid=16852 comm="syz.2.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 975.036496][ T5963] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 975.174166][ T30] audit: type=1400 audit(1758079957.995:4972): avc: denied { setopt } for pid=16852 comm="syz.2.2905" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 975.230725][ T30] audit: type=1400 audit(1758079957.995:4973): avc: denied { read } for pid=16852 comm="syz.2.2905" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 975.669904][ T30] audit: type=1400 audit(1758079957.995:4974): avc: denied { open } for pid=16852 comm="syz.2.2905" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 975.672680][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 975.735010][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.749531][ T5963] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 975.752719][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 975.769521][ T30] audit: type=1400 audit(1758079957.995:4975): avc: denied { read write } for pid=16854 comm="syz.3.2904" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 975.987648][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.010735][ T5963] usb 4-1: config 0 descriptor?? [ 976.041760][ T30] audit: type=1400 audit(1758079957.995:4976): avc: denied { open } for pid=16854 comm="syz.3.2904" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 976.097025][ T5963] pwc: Askey VC010 type 2 USB webcam detected. [ 976.161591][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 976.246361][ T1800] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 976.331283][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 976.390183][ T1800] usb 3-1: Using ep0 maxpacket: 16 [ 976.396988][ T1800] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 976.415316][ T1800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.469519][ T5963] pwc: recv_control_msg error -32 req 02 val 2b00 [ 976.532744][ T5963] pwc: recv_control_msg error -32 req 02 val 2700 [ 976.545755][ T5963] pwc: recv_control_msg error -32 req 02 val 2c00 [ 976.569448][ T1800] usb 3-1: config 0 has no interface number 0 [ 976.801886][ T1800] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 976.815338][ T1800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.860747][ T1800] usb 3-1: Product: syz [ 976.865013][ T1800] usb 3-1: Manufacturer: syz [ 976.871052][ T1800] usb 3-1: SerialNumber: syz [ 976.883145][ T1800] usb 3-1: config 0 descriptor?? [ 976.903676][ T1800] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 976.929537][ T1800] usb 3-1: No valid video chain found. [ 977.776782][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 978.012059][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 978.100070][T16896] random: crng reseeded on system resumption [ 978.544958][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 978.601513][ T5963] pwc: recv_control_msg error -71 req 04 val 1000 [ 978.608418][ T5963] pwc: recv_control_msg error -71 req 04 val 1300 [ 978.621560][ T5963] pwc: recv_control_msg error -71 req 04 val 1400 [ 978.648411][ T5963] pwc: recv_control_msg error -71 req 02 val 2000 [ 978.661317][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 978.678926][ T5963] pwc: recv_control_msg error -71 req 02 val 2100 [ 978.686438][ T5963] pwc: recv_control_msg error -71 req 04 val 1500 [ 978.767859][ T5963] pwc: recv_control_msg error -71 req 02 val 2500 [ 978.774907][ T5963] pwc: recv_control_msg error -71 req 02 val 2400 [ 978.785029][ T5963] pwc: recv_control_msg error -71 req 02 val 2600 [ 978.796463][ T5963] pwc: recv_control_msg error -71 req 02 val 2900 [ 978.837130][ T1205] usb 3-1: USB disconnect, device number 13 [ 978.844317][ T5963] pwc: recv_control_msg error -71 req 02 val 2800 [ 978.872964][ T5963] pwc: recv_control_msg error -71 req 04 val 1100 [ 978.970744][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2918'. [ 978.980103][T16906] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 979.270397][ T5963] pwc: recv_control_msg error -71 req 04 val 1200 [ 979.441351][ T5963] pwc: Registered as video103. [ 979.758381][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 979.782367][ T5963] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 979.820477][ T5963] usb 4-1: USB disconnect, device number 72 [ 979.878610][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 979.878625][ T30] audit: type=1400 audit(1758079963.350:5033): avc: denied { create } for pid=16910 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 980.033824][ T30] audit: type=1400 audit(1758079963.381:5034): avc: denied { create } for pid=16910 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.056012][ T30] audit: type=1400 audit(1758079963.381:5035): avc: denied { ioctl } for pid=16910 comm="syz.3.2920" path="socket:[53330]" dev="sockfs" ino=53330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.196961][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'. [ 980.321616][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 980.335617][ T30] audit: type=1400 audit(1758079963.381:5036): avc: denied { bind } for pid=16910 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.356662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 980.356710][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 980.517201][ T30] audit: type=1400 audit(1758079963.381:5037): avc: denied { connect } for pid=16910 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.581856][T16902] binder: 16898:16902 ioctl 89f1 200000000300 returned -22 [ 980.696010][ T30] audit: type=1400 audit(1758079963.381:5038): avc: denied { write } for pid=16910 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.851906][T16931] veth0_to_bridge: entered promiscuous mode [ 980.945562][ T30] audit: type=1400 audit(1758079964.085:5039): avc: denied { ioctl } for pid=16898 comm="syz.0.2916" path="/dev/binderfs/binder0" dev="binder" ino=94 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 981.663893][T16928] veth0_to_bridge: left promiscuous mode [ 981.726750][ T30] audit: type=1400 audit(1758079964.368:5040): avc: denied { ioctl } for pid=16928 comm="syz.2.2925" path="socket:[53353]" dev="sockfs" ino=53353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 981.752324][ T30] audit: type=1400 audit(1758079964.400:5041): avc: denied { mount } for pid=16928 comm="syz.2.2925" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 981.808807][ T30] audit: type=1400 audit(1758079964.494:5042): avc: denied { read write } for pid=16928 comm="syz.2.2925" dev="sockfs" ino=53049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 981.893959][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 982.949191][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 983.817127][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 984.083974][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 984.168100][T16963] fuse: Unknown parameter 'grid' [ 984.726103][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'. [ 984.832007][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 984.832021][ T30] audit: type=1400 audit(1758079968.547:5060): avc: denied { sys_module } for pid=16958 comm="syz.4.2931" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 985.098653][ T30] audit: type=1400 audit(1758079968.809:5061): avc: denied { read write } for pid=16968 comm="syz.2.2934" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 985.191886][T16984] random: crng reseeded on system resumption [ 985.197671][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 985.233751][ T30] audit: type=1400 audit(1758079968.967:5062): avc: denied { ioctl } for pid=16982 comm="syz.0.2936" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 985.279148][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 985.300688][T16985] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2937'. [ 985.346968][T16985] openvswitch: netlink: Missing key (keys=40, expected=80) [ 985.355323][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 985.366849][ T30] audit: type=1400 audit(1758079969.019:5063): avc: denied { setopt } for pid=16968 comm="syz.2.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 985.500968][T16988] overlay: ./bus is not a directory [ 985.507340][ T30] audit: type=1400 audit(1758079969.229:5064): avc: denied { unlink } for pid=16987 comm="syz.0.2938" name="#f" dev="tmpfs" ino=3011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 985.515355][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 985.674517][ T30] audit: type=1400 audit(1758079969.229:5065): avc: denied { mount } for pid=16987 comm="syz.0.2938" name="/" dev="overlay" ino=3006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 985.741876][ T30] audit: type=1400 audit(1758079969.250:5066): avc: denied { mounton } for pid=16987 comm="syz.0.2938" path="/561/bus/bus" dev="overlay" ino=3013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 985.862667][ T30] audit: type=1400 audit(1758079969.618:5067): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 986.081856][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 986.097769][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 986.514297][ T30] audit: type=1400 audit(1758079970.311:5068): avc: denied { append } for pid=16991 comm="syz.3.2939" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 986.538597][T17010] comedi comedi3: comedi_config --init_data is deprecated [ 986.701068][ T30] audit: type=1400 audit(1758079970.353:5069): avc: denied { create } for pid=16991 comm="syz.3.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 988.305852][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 989.398081][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 989.398226][T17035] vxcan1 speed is unknown, defaulting to 1000 [ 989.465042][T17039] binder: BINDER_SET_CONTEXT_MGR already set [ 989.485685][T17039] binder: 17038:17039 ioctl 4018620d 200000000100 returned -16 [ 989.518133][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 989.767495][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 990.283241][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2954'. [ 990.332775][ T5923] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 990.657246][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 990.947214][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 990.952706][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 991.014621][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.125711][T17056] veth0_to_bridge: entered promiscuous mode [ 991.500423][T17054] veth0_to_bridge: left promiscuous mode [ 993.602881][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 993.629346][ T5923] usb 2-1: can't set config #252, error -71 [ 993.661107][ T5923] usb 2-1: USB disconnect, device number 57 [ 993.755971][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 994.512974][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 994.512992][ T30] audit: type=1400 audit(1758079978.290:5073): avc: denied { mounton } for pid=17065 comm="syz.0.2958" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 994.580006][ T30] audit: type=1400 audit(1758079978.301:5074): avc: denied { mount } for pid=17065 comm="syz.0.2958" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 994.637779][ T30] audit: type=1400 audit(1758079978.416:5075): avc: denied { audit_read } for pid=17065 comm="syz.0.2958" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 994.862282][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2959'. [ 994.871419][T17076] netlink: 'syz.2.2959': attribute type 3 has an invalid length. [ 994.894753][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 995.032196][ T30] audit: type=1400 audit(1758079979.246:5076): avc: denied { ioctl } for pid=17079 comm="syz.0.2961" path="socket:[53721]" dev="sockfs" ino=53721 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 995.229062][ T30] audit: type=1400 audit(1758079979.246:5077): avc: denied { write } for pid=17079 comm="syz.0.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 995.242445][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 995.405497][ T30] audit: type=1400 audit(1758079979.319:5078): avc: denied { write } for pid=17079 comm="syz.0.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 995.900242][ T30] audit: type=1400 audit(1758079979.319:5079): avc: denied { create } for pid=17079 comm="syz.0.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 995.923876][ T30] audit: type=1400 audit(1758079979.319:5080): avc: denied { connect } for pid=17079 comm="syz.0.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 995.943942][ T30] audit: type=1400 audit(1758079979.424:5081): avc: denied { read } for pid=17062 comm="syz.1.2957" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 995.967414][ T30] audit: type=1400 audit(1758079979.424:5082): avc: denied { open } for pid=17062 comm="syz.1.2957" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 996.011193][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2963'. [ 996.246212][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 996.373792][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 996.547851][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 997.243240][T17105] veth0_to_bridge: entered promiscuous mode [ 997.557498][T17098] veth0_to_bridge: left promiscuous mode [ 1000.489841][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1000.511817][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2973'. [ 1000.521923][T17128] netlink: 'syz.3.2973': attribute type 3 has an invalid length. [ 1001.071163][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1001.094691][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1001.708625][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1001.894357][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1001.924766][ T1800] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1001.994479][ T13] bond1 (unregistering): Released all slaves [ 1002.012425][ T13] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1002.021566][ T13] bond0 (unregistering): Released all slaves [ 1002.144602][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'. [ 1002.211142][ T1800] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1002.649963][T17123] bridge_slave_0: default FDB implementation only supports local addresses [ 1003.220595][ T1800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.242000][ T1800] usb 1-1: Product: syz [ 1003.248938][T17163] veth0_to_bridge: entered promiscuous mode [ 1003.257874][T17164] veth0_to_bridge: left promiscuous mode [ 1003.271621][ T13] tipc: Left network mode [ 1003.340517][ T1800] usb 1-1: Manufacturer: syz [ 1003.365039][ T1800] usb 1-1: SerialNumber: syz [ 1003.381445][ T1800] usb 1-1: config 0 descriptor?? [ 1003.390137][ T1800] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1003.500973][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1003.523947][ T1800] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1003.548212][ T1800] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1003.839777][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1003.839794][ T30] audit: type=1400 audit(1758079988.390:5088): avc: denied { create } for pid=17143 comm="syz.0.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1003.951614][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 1004.060892][ T30] audit: type=1400 audit(1758079988.726:5089): avc: denied { create } for pid=17187 comm="syz.4.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1004.090940][ T30] audit: type=1400 audit(1758079988.758:5090): avc: denied { write } for pid=17187 comm="syz.4.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1004.594091][ T30] audit: type=1400 audit(1758079988.758:5091): avc: denied { nlmsg_write } for pid=17187 comm="syz.4.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1004.708888][T17192] ntfs3(loop4): try to read out of volume at offset 0x0 [ 1005.186421][ T30] audit: type=1400 audit(1758079989.713:5092): avc: denied { read write } for pid=17187 comm="syz.4.2987" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1005.215461][ T30] audit: type=1400 audit(1758079989.713:5093): avc: denied { open } for pid=17187 comm="syz.4.2987" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1006.012181][ T5963] usb 1-1: USB disconnect, device number 42 [ 1006.216877][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1006.244888][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1007.571791][T17215] veth0_to_bridge: entered promiscuous mode [ 1007.592436][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1008.039616][T17216] veth0_to_bridge: left promiscuous mode [ 1008.535938][ T30] audit: type=1400 audit(1758079993.440:5094): avc: denied { bind } for pid=17234 comm="syz.4.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1008.562645][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1008.653040][ T30] audit: type=1400 audit(1758079993.440:5095): avc: denied { listen } for pid=17234 comm="syz.4.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1008.672683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.768228][T15453] udevd[15453]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1008.797414][ T30] audit: type=1400 audit(1758079993.703:5096): avc: denied { write } for pid=17241 comm="syz.3.3001" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1008.820699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.170209][ T30] audit: type=1400 audit(1758079993.787:5097): avc: denied { mount } for pid=17239 comm="syz.4.3000" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1009.204290][ T30] audit: type=1400 audit(1758079994.133:5098): avc: denied { load_policy } for pid=17241 comm="syz.3.3001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1009.293167][T17243] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1009.849352][T17243] SELinux: failed to load policy [ 1010.007822][ T5963] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1010.277723][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 1010.369119][ T5963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.430110][ T5963] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.569260][ T5859] Bluetooth: hci5: command 0x1003 tx timeout [ 1010.573013][T16238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1010.837827][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1010.930562][ T5963] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1010.971293][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.045758][ T5963] usb 5-1: Product: syz [ 1011.107916][ T5963] usb 5-1: Manufacturer: syz [ 1011.140059][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1011.156626][ T13] hsr_slave_0: left promiscuous mode [ 1011.195357][ T13] hsr_slave_1: left promiscuous mode [ 1011.231471][ T5963] usb 5-1: SerialNumber: syz [ 1011.260679][ T30] audit: type=1400 audit(1758079996.286:5099): avc: denied { append } for pid=17264 comm="syz.3.3006" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1011.389977][ T13] veth1_macvtap: left promiscuous mode [ 1011.397907][ T30] audit: type=1400 audit(1758079996.433:5100): avc: denied { map } for pid=17264 comm="syz.3.3006" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1011.404327][ T5963] usb 5-1: config 0 descriptor?? [ 1011.452563][ T13] veth0_macvtap: left promiscuous mode [ 1011.462591][ T13] veth1_vlan: left promiscuous mode [ 1011.479441][ T13] veth0_vlan: left promiscuous mode [ 1011.552022][ T30] audit: type=1400 audit(1758079996.601:5101): avc: denied { getopt } for pid=17264 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1011.819423][ T30] audit: type=1400 audit(1758079996.643:5102): avc: denied { create } for pid=17264 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1011.916573][ T30] audit: type=1400 audit(1758079996.643:5103): avc: denied { write } for pid=17264 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1012.082026][ T5963] usb 5-1: can't set config #0, error -71 [ 1012.182150][ T5909] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1012.488312][ T5963] usb 5-1: USB disconnect, device number 51 [ 1012.495967][ T30] audit: type=1400 audit(1758079997.588:5104): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1012.612181][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.625100][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1012.924377][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1012.938289][ T5909] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1012.938359][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.940990][ T5909] usb 2-1: config 0 descriptor?? [ 1012.955065][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1013.369416][ T13] pim6reg (unregistering): left allmulticast mode [ 1013.522907][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1013.522923][ T30] audit: type=1400 audit(1758079998.669:5107): avc: denied { ioctl } for pid=17285 comm="syz.0.3011" path="socket:[54207]" dev="sockfs" ino=54207 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1013.595848][T17291] netlink: 'syz.1.3007': attribute type 10 has an invalid length. [ 1014.427560][ T6376] smc: removing ib device syz2 [ 1014.751213][T17274] veth0_to_bridge: entered promiscuous mode [ 1014.757925][ T5923] vxcan1 speed is unknown, defaulting to 1000 [ 1014.765283][ T5923] syz2: Port: 1 Link DOWN [ 1014.793788][T17275] veth0_to_bridge: left promiscuous mode [ 1014.972650][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1015.024489][ T30] audit: type=1400 audit(1758080000.244:5108): avc: denied { bind } for pid=17306 comm="syz.3.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1015.049743][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1015.121885][T17308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=311 sclass=netlink_route_socket pid=17308 comm=syz.3.3016 [ 1015.387481][ T30] audit: type=1400 audit(1758080000.275:5109): avc: denied { name_bind } for pid=17306 comm="syz.3.3016" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1015.487546][ T30] audit: type=1400 audit(1758080000.275:5110): avc: denied { node_bind } for pid=17306 comm="syz.3.3016" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1015.658318][ T30] audit: type=1400 audit(1758080000.454:5111): avc: denied { ioctl } for pid=17306 comm="syz.3.3016" path="socket:[54986]" dev="sockfs" ino=54986 ioctlcmd=0x5513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1015.783676][ T5923] usb 2-1: USB disconnect, device number 58 [ 1015.807368][ T30] audit: type=1400 audit(1758080001.063:5112): avc: denied { bind } for pid=17317 comm="syz.3.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1015.926655][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1016.687710][ T30] audit: type=1400 audit(1758080001.094:5113): avc: denied { ioctl } for pid=17317 comm="syz.3.3019" path="socket:[55074]" dev="sockfs" ino=55074 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1016.712840][ T30] audit: type=1400 audit(1758080001.294:5114): avc: denied { append } for pid=17317 comm="syz.3.3019" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1016.736921][ T30] audit: type=1400 audit(1758080001.367:5115): avc: denied { write } for pid=17317 comm="syz.3.3019" dev="sockfs" ino=55072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1016.769038][T17324] binder: BINDER_SET_CONTEXT_MGR already set [ 1016.791456][T17324] binder: 17320:17324 ioctl 4018620d 200000004a80 returned -16 [ 1016.817202][T15453] udevd[15453]: symlink '../../loop6' '/dev/disk/by-diskseq/82.tmp-b7:6' failed: Read-only file system [ 1016.915904][T16238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1016.916234][ T5857] Bluetooth: hci5: command 0x1003 tx timeout [ 1016.972450][T14829] udevd[14829]: symlink '../../loop6' '/dev/disk/by-diskseq/82.tmp-b7:6' failed: Read-only file system [ 1016.981522][T14189] udevd[14189]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1017.014443][T17330] fuse: Unknown parameter 'grid' [ 1017.058013][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1017.121136][T14829] udevd[14829]: symlink '../../loop6' '/dev/disk/by-diskseq/82.tmp-b7:6' failed: Read-only file system [ 1017.446700][ T30] audit: type=1400 audit(1758080002.659:5116): avc: denied { write } for pid=17325 comm="syz.2.3021" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1018.045124][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1018.962706][T17355] veth0_to_bridge: entered promiscuous mode [ 1019.037568][T17357] veth0_to_bridge: left promiscuous mode [ 1019.174801][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1019.267670][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1019.267680][ T30] audit: type=1400 audit(1758080004.696:5119): avc: denied { name_bind } for pid=17365 comm="syz.0.3030" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1019.387261][T17367] kAFS: unable to lookup cell '/,' [ 1019.449460][ T5923] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1020.062836][T17370] overlayfs: failed to resolve './file1': -2 [ 1020.139783][ T30] audit: type=1400 audit(1758080004.727:5120): avc: denied { setopt } for pid=17365 comm="syz.0.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1020.262635][ T30] audit: type=1400 audit(1758080004.832:5121): avc: denied { bind } for pid=17365 comm="syz.0.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1020.357713][ T30] audit: type=1400 audit(1758080005.850:5122): avc: denied { bind } for pid=17372 comm="syz.0.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1020.377803][T17373] FAULT_INJECTION: forcing a failure. [ 1020.377803][T17373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.391012][T17373] CPU: 0 UID: 0 PID: 17373 Comm: syz.0.3032 Not tainted syzkaller #0 PREEMPT(full) [ 1020.391039][T17373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1020.391050][T17373] Call Trace: [ 1020.391057][T17373] [ 1020.391065][T17373] dump_stack_lvl+0x16c/0x1f0 [ 1020.391094][T17373] should_fail_ex+0x512/0x640 [ 1020.391121][T17373] _copy_from_user+0x2e/0xd0 [ 1020.391147][T17373] move_addr_to_kernel+0x65/0x170 [ 1020.391167][T17373] __sys_connect+0xb1/0x160 [ 1020.391185][T17373] ? __pfx___sys_connect+0x10/0x10 [ 1020.391213][T17373] ? __pfx_ksys_write+0x10/0x10 [ 1020.391238][T17373] __x64_sys_connect+0x72/0xb0 [ 1020.391256][T17373] ? lockdep_hardirqs_on+0x7c/0x110 [ 1020.391278][T17373] do_syscall_64+0xcd/0x4e0 [ 1020.391303][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.391322][T17373] RIP: 0033:0x7fc7f7d8eba9 [ 1020.391338][T17373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.391355][T17373] RSP: 002b:00007fc7f8b7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1020.391374][T17373] RAX: ffffffffffffffda RBX: 00007fc7f7fd5fa0 RCX: 00007fc7f7d8eba9 [ 1020.391387][T17373] RDX: 000000000000001e RSI: 0000200000000080 RDI: 0000000000000003 [ 1020.391397][T17373] RBP: 00007fc7f8b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.391408][T17373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.391418][T17373] R13: 00007fc7f7fd6038 R14: 00007fc7f7fd5fa0 R15: 00007ffe64688288 [ 1020.391443][T17373] [ 1020.546576][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.615793][ T30] audit: type=1400 audit(1758080006.081:5123): avc: denied { write } for pid=17372 comm="syz.0.3032" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1020.638667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.179705][ T30] audit: type=1400 audit(1758080006.081:5124): avc: denied { ioctl } for pid=17372 comm="syz.0.3032" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1021.189156][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1021.214531][ T30] audit: type=1400 audit(1758080006.092:5125): avc: denied { setopt } for pid=17372 comm="syz.0.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1021.604710][ T30] audit: type=1400 audit(1758080007.163:5126): avc: denied { read write } for pid=17384 comm="syz.0.3034" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1021.641207][T14493] udevd[14493]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1021.743477][T14189] udevd[14189]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1021.754688][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1021.773939][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1021.788638][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1022.244154][ T30] audit: type=1400 audit(1758080007.163:5127): avc: denied { open } for pid=17384 comm="syz.0.3034" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1022.298875][ T5923] usb 5-1: string descriptor 0 read error: -71 [ 1022.305997][ T5923] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1022.327608][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3033'. [ 1022.336803][T17383] bridge_slave_0: default FDB implementation only supports local addresses [ 1022.418949][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.472998][T17354] infiniband syz1: set active [ 1022.477685][T17354] infiniband syz1: added syz_tun [ 1022.488489][ T5923] usb 5-1: config 0 descriptor?? [ 1022.505072][T17354] syz1: rxe_create_cq: returned err = -12 [ 1022.524242][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1022.534014][ T5923] usb 5-1: can't set config #0, error -71 [ 1022.578527][T17354] infiniband syz1: Couldn't create ib_mad CQ [ 1022.589888][T17354] infiniband syz1: Couldn't open port 1 [ 1022.675749][ T5923] usb 5-1: USB disconnect, device number 52 [ 1022.711960][T17403] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3037'. [ 1022.721280][T17403] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3037'. [ 1022.759959][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1022.773926][T17354] RDS/IB: syz1: added [ 1022.843108][T17354] smc: adding ib device syz1 with port count 1 [ 1022.849260][T17354] smc: ib device syz1 port 1 has pnetid [ 1022.957752][ T30] audit: type=1400 audit(1758080008.580:5128): avc: denied { remount } for pid=17404 comm="syz.3.3040" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1022.978892][T17409] binder: Bad value for 'max' [ 1023.972315][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1024.369479][T17423] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 1024.386942][T17423] overlayfs: failed to resolve './file1': -2 [ 1024.718786][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1024.718796][ T30] audit: type=1400 audit(1758080010.040:5130): avc: denied { mount } for pid=17418 comm="syz.4.3042" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1025.026466][ T30] audit: type=1400 audit(1758080010.743:5131): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1025.139555][T15453] udevd[15453]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1025.719804][T17433] bridge_slave_1: left allmulticast mode [ 1025.725650][T17433] bridge_slave_1: left promiscuous mode [ 1025.796531][T17433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.834546][T14829] udevd[14829]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 1025.912418][T17433] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1026.072981][T17441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3046'. [ 1026.082907][T17441] netlink: 'syz.2.3046': attribute type 3 has an invalid length. [ 1026.176227][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1026.315868][ T30] audit: type=1400 audit(1758080012.097:5132): avc: denied { append } for pid=17442 comm="syz.0.3047" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1026.554156][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1026.566020][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1026.576093][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1026.604184][T17445] kvm: user requested TSC rate below hardware speed [ 1026.660145][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1026.667515][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1026.683446][T16238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1026.691958][T16238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1026.699310][T16238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1026.707244][T16238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1026.714823][T16238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1026.740640][ T30] audit: type=1400 audit(1758080012.097:5133): avc: denied { read } for pid=17442 comm="syz.0.3047" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1026.777688][ T30] audit: type=1400 audit(1758080012.097:5134): avc: denied { open } for pid=17442 comm="syz.0.3047" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1026.802021][ T30] audit: type=1400 audit(1758080012.234:5135): avc: denied { connect } for pid=17442 comm="syz.0.3047" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1026.831719][ T30] audit: type=1400 audit(1758080012.370:5136): avc: denied { ioctl } for pid=17446 comm="syz-executor" path="socket:[55619]" dev="sockfs" ino=55619 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1026.860266][ T30] audit: type=1400 audit(1758080012.538:5137): avc: denied { mounton } for pid=17446 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1027.358247][T17453] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1027.647108][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.895597][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1028.634407][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.646122][T17470] netlink: 'syz.2.3054': attribute type 13 has an invalid length. [ 1028.654041][ T5859] Bluetooth: hci1: command tx timeout [ 1029.476934][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.706179][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3051'. [ 1029.715957][T17458] bridge_slave_0: default FDB implementation only supports local addresses [ 1029.780420][T17477] mkiss: ax0: crc mode is auto. [ 1029.808730][ T30] audit: type=1400 audit(1758080015.762:5138): avc: denied { create } for pid=17478 comm="syz.1.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1029.831362][ T30] audit: type=1400 audit(1758080015.793:5139): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1029.856050][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.916475][T14829] udevd[14829]: symlink '../../loop0' '/dev/disk/by-diskseq/81.tmp-b7:0' failed: Read-only file system [ 1031.094793][ T30] audit: type=1400 audit(1758080016.203:5140): avc: denied { write } for pid=17478 comm="syz.1.3056" name="ip6_flowlabel" dev="proc" ino=4026533293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1031.502735][ T30] audit: type=1400 audit(1758080017.546:5141): avc: denied { search } for pid=5513 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.554595][ T5859] Bluetooth: hci1: command tx timeout [ 1031.554833][ T30] audit: type=1400 audit(1758080017.567:5142): avc: denied { search } for pid=5513 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.674701][ T30] audit: type=1400 audit(1758080017.567:5143): avc: denied { search } for pid=5513 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.726849][ T30] audit: type=1400 audit(1758080017.567:5144): avc: denied { read } for pid=5513 comm="dhcpcd" name="n104" dev="tmpfs" ino=10952 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1031.757281][ T30] audit: type=1400 audit(1758080017.567:5145): avc: denied { open } for pid=5513 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=10952 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1031.849592][ T30] audit: type=1400 audit(1758080017.567:5146): avc: denied { getattr } for pid=5513 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=10952 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1031.913840][T17446] chnl_net:caif_netlink_parms(): no params data found [ 1032.250765][T17502] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1033.051532][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 1033.224830][T17514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1033.230757][T17514] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1033.527139][ C0] ------------[ cut here ]------------ [ 1033.532830][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 1033.539514][ C0] WARNING: CPU: 0 PID: 17513 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160 [ 1033.548684][ C0] Modules linked in: [ 1033.552679][ C0] CPU: 0 UID: 0 PID: 17513 Comm: syz.1.3063 Not tainted syzkaller #0 PREEMPT(full) [ 1033.562018][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1033.572044][ C0] RIP: 0010:__queue_work+0xd03/0x1160 [ 1033.577389][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 ff 79 38 00 90 0f 0b 90 e9 b4 f5 ff [ 1033.596969][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 1033.603011][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 1033.610963][ C0] RDX: ffff888027792440 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 1033.618906][ C0] RBP: ffff888059a88970 R08: 0000000000000001 R09: 0000000000000000 [ 1033.626847][ C0] R10: 0000000000000000 R11: fffffffffffe6958 R12: 1ffff92000000f8f [ 1033.634790][ C0] R13: 0000000080000100 R14: ffffffff81833490 R15: ffff88807f277978 [ 1033.642825][ C0] FS: 00007fc69a2be6c0(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 1033.651754][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1033.658309][ C0] CR2: 00002000003fc030 CR3: 0000000057e25000 CR4: 00000000003526f0 [ 1033.666253][ C0] Call Trace: [ 1033.669504][ C0] [ 1033.672325][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1033.678111][ C0] call_timer_fn+0x197/0x620 [ 1033.682678][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1033.687767][ C0] ? __run_timers+0x559/0x960 [ 1033.692435][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1033.698243][ C0] __run_timers+0x569/0x960 [ 1033.702734][ C0] ? __pfx___run_timers+0x10/0x10 [ 1033.707752][ C0] run_timer_base+0x114/0x190 [ 1033.712406][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1033.717584][ C0] run_timer_softirq+0x1a/0x40 [ 1033.722328][ C0] handle_softirqs+0x219/0x8e0 [ 1033.727076][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1033.732341][ C0] __irq_exit_rcu+0x109/0x170 [ 1033.736996][ C0] irq_exit_rcu+0x9/0x30 [ 1033.741212][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1033.746831][ C0] [ 1033.749735][ C0] [ 1033.752639][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1033.758601][ C0] RIP: 0010:consume_skb+0x3b/0x100 [ 1033.763691][ C0] Code: 85 db 74 4d 4c 8d a3 e4 00 00 00 bd ff ff ff ff e8 fa 68 52 f8 be 04 00 00 00 4c 89 e7 e8 2d d0 b8 f8 f0 0f c1 ab e4 00 00 00 <31> ff 89 ee e8 1c 64 52 f8 85 ed 0f 8e 89 00 00 00 e8 cf 68 52 f8 [ 1033.783270][ C0] RSP: 0018:ffffc90011d2f850 EFLAGS: 00000213 [ 1033.789308][ C0] RAX: 0000000000000001 RBX: ffff88806ceb0b40 RCX: ffffffff89693453 [ 1033.797256][ C0] RDX: ffffed100d9d6185 RSI: 0000000000000004 RDI: ffff88806ceb0c24 [ 1033.805212][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: ffffed100d9d6184 [ 1033.813181][ C0] R10: ffff88806ceb0c27 R11: 0000000000000000 R12: ffff88806ceb0c24 [ 1033.821128][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806ceb0b40 [ 1033.829075][ C0] ? consume_skb+0x33/0x100 [ 1033.833563][ C0] __unix_dgram_recvmsg+0x779/0xc30 [ 1033.838739][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1033.844439][ C0] ? iovec_from_user+0xbb/0x140 [ 1033.849268][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 1033.854176][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 1033.858932][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1033.864196][ C0] ? kfree+0x24f/0x4d0 [ 1033.868238][ C0] ? rcu_is_watching+0x12/0xc0 [ 1033.873006][ C0] ___sys_recvmsg+0x114/0x1a0 [ 1033.877677][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1033.882881][ C0] ? rcu_is_watching+0x12/0xc0 [ 1033.887631][ C0] ? __pfx___might_resched+0x10/0x10 [ 1033.892891][ C0] do_recvmmsg+0x2fe/0x750 [ 1033.897284][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1033.902219][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 1033.907675][ C0] ? find_held_lock+0x2b/0x80 [ 1033.912335][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 1033.917341][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1033.922864][ C0] do_syscall_64+0xcd/0x4e0 [ 1033.927345][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.933207][ C0] RIP: 0033:0x7fc69938eba9 [ 1033.937592][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.957179][ C0] RSP: 002b:00007fc69a2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1033.965574][ C0] RAX: ffffffffffffffda RBX: 00007fc6995d6090 RCX: 00007fc69938eba9 [ 1033.973520][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1033.981461][ C0] RBP: 00007fc699411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1033.989407][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1033.997351][ C0] R13: 00007fc6995d6128 R14: 00007fc6995d6090 R15: 00007fff48cd9f48 [ 1034.005302][ C0] [ 1034.008294][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1034.015557][ C0] CPU: 0 UID: 0 PID: 17513 Comm: syz.1.3063 Not tainted syzkaller #0 PREEMPT(full) [ 1034.024894][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1034.034925][ C0] Call Trace: [ 1034.038183][ C0] [ 1034.041001][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1034.045572][ C0] vpanic+0x6e8/0x7a0 [ 1034.049533][ C0] ? __pfx_vpanic+0x10/0x10 [ 1034.054013][ C0] ? __queue_work+0xd03/0x1160 [ 1034.058749][ C0] panic+0xca/0xd0 [ 1034.062442][ C0] ? __pfx_panic+0x10/0x10 [ 1034.066831][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1034.071923][ C0] check_panic_on_warn+0xab/0xb0 [ 1034.076853][ C0] __warn+0xf6/0x3c0 [ 1034.080730][ C0] ? __queue_work+0xd03/0x1160 [ 1034.085472][ C0] report_bug+0x3c3/0x580 [ 1034.089781][ C0] ? __queue_work+0xd03/0x1160 [ 1034.094522][ C0] handle_bug+0x184/0x210 [ 1034.098832][ C0] exc_invalid_op+0x17/0x50 [ 1034.103309][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1034.108136][ C0] RIP: 0010:__queue_work+0xd03/0x1160 [ 1034.113493][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 ff 79 38 00 90 0f 0b 90 e9 b4 f5 ff [ 1034.133070][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 1034.139108][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 1034.147056][ C0] RDX: ffff888027792440 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 1034.155009][ C0] RBP: ffff888059a88970 R08: 0000000000000001 R09: 0000000000000000 [ 1034.162952][ C0] R10: 0000000000000000 R11: fffffffffffe6958 R12: 1ffff92000000f8f [ 1034.170893][ C0] R13: 0000000080000100 R14: ffffffff81833490 R15: ffff88807f277978 [ 1034.178849][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1034.184629][ C0] ? __warn_printk+0x198/0x350 [ 1034.189368][ C0] ? __warn_printk+0x1a5/0x350 [ 1034.194122][ C0] ? __queue_work+0xd02/0x1160 [ 1034.198877][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1034.204654][ C0] call_timer_fn+0x197/0x620 [ 1034.209236][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1034.214322][ C0] ? __run_timers+0x559/0x960 [ 1034.218972][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1034.224747][ C0] __run_timers+0x569/0x960 [ 1034.229237][ C0] ? __pfx___run_timers+0x10/0x10 [ 1034.234244][ C0] run_timer_base+0x114/0x190 [ 1034.238891][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1034.244057][ C0] run_timer_softirq+0x1a/0x40 [ 1034.248790][ C0] handle_softirqs+0x219/0x8e0 [ 1034.253530][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1034.258797][ C0] __irq_exit_rcu+0x109/0x170 [ 1034.263445][ C0] irq_exit_rcu+0x9/0x30 [ 1034.267660][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1034.273277][ C0] [ 1034.276179][ C0] [ 1034.279082][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1034.285041][ C0] RIP: 0010:consume_skb+0x3b/0x100 [ 1034.290126][ C0] Code: 85 db 74 4d 4c 8d a3 e4 00 00 00 bd ff ff ff ff e8 fa 68 52 f8 be 04 00 00 00 4c 89 e7 e8 2d d0 b8 f8 f0 0f c1 ab e4 00 00 00 <31> ff 89 ee e8 1c 64 52 f8 85 ed 0f 8e 89 00 00 00 e8 cf 68 52 f8 [ 1034.309712][ C0] RSP: 0018:ffffc90011d2f850 EFLAGS: 00000213 [ 1034.315749][ C0] RAX: 0000000000000001 RBX: ffff88806ceb0b40 RCX: ffffffff89693453 [ 1034.323690][ C0] RDX: ffffed100d9d6185 RSI: 0000000000000004 RDI: ffff88806ceb0c24 [ 1034.331645][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: ffffed100d9d6184 [ 1034.339585][ C0] R10: ffff88806ceb0c27 R11: 0000000000000000 R12: ffff88806ceb0c24 [ 1034.347524][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806ceb0b40 [ 1034.355479][ C0] ? consume_skb+0x33/0x100 [ 1034.359960][ C0] __unix_dgram_recvmsg+0x779/0xc30 [ 1034.365136][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1034.370831][ C0] ? iovec_from_user+0xbb/0x140 [ 1034.375661][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 1034.380569][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 1034.385309][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1034.390573][ C0] ? kfree+0x24f/0x4d0 [ 1034.394617][ C0] ? rcu_is_watching+0x12/0xc0 [ 1034.399356][ C0] ___sys_recvmsg+0x114/0x1a0 [ 1034.404005][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1034.409171][ C0] ? rcu_is_watching+0x12/0xc0 [ 1034.413925][ C0] ? __pfx___might_resched+0x10/0x10 [ 1034.419183][ C0] do_recvmmsg+0x2fe/0x750 [ 1034.423575][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1034.428502][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 1034.433964][ C0] ? find_held_lock+0x2b/0x80 [ 1034.438636][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 1034.443638][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1034.449159][ C0] do_syscall_64+0xcd/0x4e0 [ 1034.453635][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.459496][ C0] RIP: 0033:0x7fc69938eba9 [ 1034.463886][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.483470][ C0] RSP: 002b:00007fc69a2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1034.491856][ C0] RAX: ffffffffffffffda RBX: 00007fc6995d6090 RCX: 00007fc69938eba9 [ 1034.499800][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1034.507742][ C0] RBP: 00007fc699411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1034.515682][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1034.523624][ C0] R13: 00007fc6995d6128 R14: 00007fc6995d6090 R15: 00007fff48cd9f48 [ 1034.531575][ C0] [ 1034.534779][ C0] Kernel Offset: disabled [ 1034.539079][ C0] Rebooting in 86400 seconds..