last executing test programs: 10.935537771s ago: executing program 3 (id=80): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000140)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040)) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f00000000c0)) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/2, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, 0x0, 0x3ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x2, 0x3) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x40048c4) 9.891550208s ago: executing program 4 (id=83): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[], 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/112, 0x70) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r5 = openat$userio(0xffffff9c, &(0x7f0000000040), 0x401, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r5, 0x2, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) io_uring_enter(r2, 0x26c8, 0x0, 0x1, 0x0, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x59) (async) keyctl$setperm(0x5, r1, 0x8) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0xf, 0x2, {{0x1, 0x2, 0x8}, 0x1}}, 0x18) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan1\x00', {0x2}}) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCSMRU(r10, 0x40047452, 0x0) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xffffffffffffffff) (rerun: 32) openat$comedi(0xffffff9c, &(0x7f0000000780)='/dev/comedi0\x00', 0x101001, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) 9.30402246s ago: executing program 4 (id=86): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x11, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x125, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x6b, 0x0, 0x1, [@nested={0xc, 0xfd, 0x0, 0x1, [@typed={0x4, 0x13d}, @generic="fbf08a51"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'vxcan1\x00', 0x8000}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000100001082abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000"], 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x82880, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000100)=0x1) 8.933091937s ago: executing program 4 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) (fail_nth: 6) 8.46964131s ago: executing program 4 (id=89): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r1, 0x0, 0x6}, 0x18) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.959925403s ago: executing program 4 (id=95): socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 6.208375108s ago: executing program 3 (id=99): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044004}, 0x20044081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpgid(0x0, 0x0) (async) setpgid(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) (async) r6 = fanotify_init(0x200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1) 5.390607096s ago: executing program 1 (id=101): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket(0x2, 0x80805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000001580)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 4.425944413s ago: executing program 3 (id=104): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000002c0)={0x78, 0x49}, 0x20) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x18, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1}, 0x40040) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r4) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x7, 0x203, 0x0, 0x8, 0x80, 0xd}, {0x8, 0x9, 0xd, 0xd2f, 0xe}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 3.73472483s ago: executing program 4 (id=107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904cc50f109"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000003140)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x2, "68ae"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x20, 0xad, 0x16, 0x20, 0x7c0, 0x158b, 0xd096, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x7f, 0x0, 0x4, [{{0x9, 0x4, 0xb3, 0x1, 0x0, 0x4f, 0x7e, 0xc2, 0x2}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x22, 0x3788ddd56ac63d1f}, 0x14}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r4 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 3.734070227s ago: executing program 0 (id=108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x13, r0, 0xcc37d000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000040)=0x40) 3.318098791s ago: executing program 0 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), r0) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0], 0x0, 0x73, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000000c0), &(0x7f0000000280), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0], 0x0, 0x73, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000000c0), &(0x7f0000000280), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000540)=ANY=[@ANYRES8=r7, @ANYRES64=r7, @ANYRESOCT, @ANYBLOB="9a27bb39752502a39d6edb4ec8698f63cdb1914916ce596d0d911307967c80adb8e5d64ea55f0e4cf616251bb6d87ff0c879dbc9b00e05156db03475fd87f081846cabbbaee55973ddea7d1aebe847c39fa737414544e850e1f089988545c667094e769e6f9e1bde8adef0b532fa914d20318c210c9b8d45950eab5ef34c5ce5b65a2019f094185e0104877034e90830cc67d633255d63a927c2b057ec0f33a63bcebbf86095891fe41aa2835c09e2dfca66b8e39f318d28cbe9aad61d2ccc37a2ac501a78"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', r6, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) writev(r5, &(0x7f0000000980)=[{&(0x7f0000000640)="9df5d81963a77af48cf42997f40ad13c0af334b18ddec4b7755a81d62ff33ec2722370da9b385b586e82e470ea27991566fa30b15fc470d32e31f6c969b72427f22af36c8505e08f9a83b37a8f60f64a01681abd2bbefa67f28269bbbcd03135ef4aee", 0x63}, {&(0x7f00000006c0)="7c05dddcabfd19f478966231b8eac2b8ef077f4e0dc5f47b012a5c55de5fc4f1c6804ff7e80ccb2460a7abe7456570a15d18ae12ffab662fb93e222ef0657627562b51fb2396716356315e1ebfc717bf4191a49e360f31105589158e72120f94b0600d74089bf328a87ccb1ac528496387c407f2728bd1936e6a5f8a5b271c8b3e4cc92bcefad65f1a31e47fc46dfb133533bb5b667e5c227c813b3cdb3f3fa0a90f40fc2ccd765db443ac90601db833f90aff203b6c098f6f5a37fbe431ec771ece92bcee412d9162343e317f0e0af41aaa681a87", 0xd5}, {&(0x7f00000007c0)="c79d042401492a59e02da40dbb9c59eacb470ff04199dd724c7b492795bb88164e19867a2d4414581ccafdce4ad4a39a2e76b8a42cf51a8ffc383f5302ada0b66354e52b9a484d8f6a8150951c6732020c1432f2d15f0c7cd79ccef456f759c13a85c361bfc456381b38e25f2105c1d3e0edb420b5e1e7fb9401e6ffe17c094f4ed44b4a06068bb66678d2eae31f601301df229ad4397a19e226ff7c12247a7e069931fd1556766a9413e6148dffd166a11ac853d7b70dd2e65f66babfe659d763a2a11869cd9dc87b0b67e0b8ca2883e42cd9284c0ee67b6e6507a192b5ed5b7856c6099a42fc839ab1ed9f52c995d4791a305528", 0xf5}, {&(0x7f00000008c0)="236fe80a761a5400a748560678a77f8a151cc19fbc2d1564e20f9a648375e2ea059439fdaa9a18494e683ce70aa4405767d97073bf8ac65952580dbb2cbb22d81091257fa57ac7e25da099297fc82e76e86aba24c4ecd53acbc94e15dcfa0cbe6398b3475e851e562aff3f255f5765ec0c721f826fe657500c3ceedd1feb83509f0eba4b1bddd5f208cf38a275ab", 0x8e}, {&(0x7f0000000100)}], 0x5) 3.278421225s ago: executing program 1 (id=110): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 6) 3.074448869s ago: executing program 3 (id=111): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0xd, 0x8, 0x101, 0x1, 0x15e5}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xd, 0x2, &(0x7f00000009c0)="1600", 0x9, 0x41, 0x16c0, 0x5505, 0x8c, 0x1, 0x9, 'syz0\x00'}) 3.06478098s ago: executing program 2 (id=112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) 2.880754893s ago: executing program 1 (id=113): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socket$inet6(0xa, 0x3, 0x84) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000006c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x10000000000000}, 0x18) 2.864270427s ago: executing program 3 (id=114): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3, 0x80008000, 0x9, 0x2, 0x300, 0x0, 0x0, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1004, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x3, 0x3ff, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x1, 0x3, 0x7, 0x5, 0x5]}) 2.637812276s ago: executing program 0 (id=115): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) 2.573704116s ago: executing program 0 (id=116): close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) mknod(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x6) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0x0, 0x100000000000000, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001992247087b0603234e32010203010902340001a200003f090457010341af6403090500000000030004090502020002f7810609050303ff030840040705a6c6415a9fb44b8f0de0207f591f6bee5ae69c05c4be5a40972767bfd146ef8298336bdf81c56ef6f201f031a15192f0aae7cf3cefb4c1970d20151b5bf2310da4d76b55a39f2a0be6a4fab3f5784aa31b9ab8b90a4026c81ead7712833a503a1a1203e496920f3d3c4eb6de8f4482316beab375cc5d88601d52e6a3cf134ea4f9ffffff08bad510243e6595f172583d4dcee6251a8089ae42af395a5bc409b922"], 0x0) 2.497976458s ago: executing program 2 (id=117): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) kexec_load(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) set_robust_list(&(0x7f00000001c0)={0x0, 0x3}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x61) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2.460923106s ago: executing program 3 (id=118): socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.400477375s ago: executing program 1 (id=119): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}], {0x95, 0x0, 0x700}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000380)={0x2, 0x5e21, @local}, 0x10) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000180)={0xff, 0x3}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20440) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000100)) 2.189752047s ago: executing program 1 (id=120): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r2}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x5b, 0xc8, 0x53, 0x20, 0x17cc, 0x4711, 0xc8ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xff, 0xc0, 0x10, [{{0x9, 0x4, 0x83, 0x7f, 0x0, 0x18, 0x78, 0x46}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x40, 0x4e, 0x6, 0x0, 0x48}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}}) r4 = io_uring_setup(0xc90, &(0x7f00000002c0)) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000001580)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) close(0xffffffffffffffff) 1.439690753s ago: executing program 2 (id=121): creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) write$binfmt_script(r5, 0x0, 0x0) 615.888068ms ago: executing program 0 (id=122): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b000100627269646765000014000280080006"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 538.928485ms ago: executing program 0 (id=123): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) splice(r1, &(0x7f0000000000)=0x3, r3, &(0x7f0000000140)=0x8000000000000000, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r2, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) madvise(&(0x7f00002f8000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9519b30", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x40200, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000340)={0x3, 0x8, 0x7d, 0x7fffffff, 0x19, "db52da74f3036655fbc52a6e2fb0b4a511b9da"}) waitid(0x2, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r7, @ANYBLOB="030000000a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0xc0080}, 0x4008040) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000ffdbdf010000000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) 466.568498ms ago: executing program 2 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdffbdd61c660177aa98f00004c00000008000300030080c70089fe6d5185f63f01972361bf760d9e0181414108b83430be9c9a75e1b4436e38762c5cc5a31a3ca77bd4f926cf01b4bcec2fc4f4620d91b52c29a8e770788818e4e6ab2a552e2bbe74aec517fdced739a08fc00e15e41b4785fc7297b08eb1af7589011ceab38dfd538f2a773252c108d887b0528995ab688860952f06d8330ff083ed661dc7dcd04231cda98c125453e6572152ec535882d207808986d6f421c4cadfa2fc26672de98506c0195d26b0b7a0ee16561cec208766733d8c643401dd10b5c3985f844264e7761edf4e8239"], 0x24}}, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000500)={r3, 0x7, 0xcf9f}) read$FUSE(r4, &(0x7f0000000c00)={0x2020}, 0x2020) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000840)="f50e5342", 0x4}], 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r5, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r7 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x0, 0x47}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x37, 0x14, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xef9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r11 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r11, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r11, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r11, 0x41, 0x1ff) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) io_uring_enter(r7, 0x44fd, 0x3, 0x1, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x703, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r12, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x100, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf5}, {0x6, 0x11, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}]}, 0x100}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') mlock(&(0x7f000028d000/0x2000)=nil, 0x2000) 235.004007ms ago: executing program 2 (id=125): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0x7, {0x0}, {0xffffffffffffffff}, 0x80000001, 0x6ea9ca07}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1228, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x1210, 0x800, 0x0, 0x1, [@nested={0x11f4, 0x29, 0x0, 0x1, [@nested={0xc, 0x5f, 0x0, 0x1, [@nested={0x4, 0x4a}, @nested={0x4, 0xc8}]}, @generic="b557a060400a33b843bc6f82efdedf6c166eeaf5080372c42f06f0a520be5494813535032a24d9a22d04068b574a43d750a7352fba", @typed={0x14, 0x133, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, @typed={0x8, 0x80, 0x0, 0x0, @pid=r1}, @typed={0xc, 0x14e, 0x0, 0x0, @u64=0x7}, @generic="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", @generic="2325c42a5746f34e9fa1dfb79db0ac139043a2de0cd2d99bfafe5ae7da56849070255d85d5be97588d59c404ec5b8a64115f29bf654f05e2a2c9e948cacec6f56e60c981ceab349c948f90ee3edac92549d824b56127b0de73d6a024365ac3a6cbcd0cde226c594633c2294bcac32540cc043625e52e34e17a56d18c552ee83d3657f0a274f531cffcdcade0511800140aa3cf72cf80aea9dd41c7bf7169ccbcaa98b5ede34e64d0cc9d93207461dc", @nested={0x4c, 0xb5, 0x0, 0x1, [@typed={0x4, 0x68}, @nested={0x4, 0xaf}, @typed={0x8, 0xd, 0x0, 0x0, @pid=r2}, @generic="6e26efe5af38fb4ea08c933522aa406445de460797a7469321a893346ea78f3920019e3fc1109f66b908e2332016cebfb39175132bf31782"]}, @generic="f901f4f96248a8564602ac60c8ef7e9733ff5c78574edacb0664861066ac5a74f57b9fe25d563483d43f39d45b6c7f55089db6d97251f1961e9a27fcab9b732fcf60801a8d83a48ccc63d21895a4e7393a8cb6b09964876513729428f523fd74ef5e2c5e1935385011072eb52c2e7d8ad99c2ca8cb839b75dca2eb9519f74126b3abb879fa3d2fd7fa67b945"]}, @typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x10, 0xa7, 0x0, 0x1, [@typed={0xc, 0xf5, 0x0, 0x0, @u64=0x8b5}]}]}, @nested={0x5, 0x10, 0x0, 0x1, [@generic='/']}]}, 0x1228}], 0x1}, 0x0) 155.129065ms ago: executing program 1 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r2}, 0x38) socket(0x3, 0xa, 0x8001) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000001600)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001080)="b3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f000001f5c0)={0x0, @in6={{0xa, 0x4e23, 0x80000000, @empty, 0xc08}}, 0x6b, 0x800}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4012031, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xa400) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, 0x0, &(0x7f0000000200), 0x1, r2}, 0x38) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000325bd7000fedbdf25170000000c009900f9ffffff640000000a001a0008021100000100000a00060008021100000000000ac79c51ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x44) 0s ago: executing program 2 (id=127): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1a02, 0x1, 0x3}, 0x1b, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) socket$igmp6(0xa, 0x3, 0x2) accept4$llc(r2, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000400)=0x10, 0x800) bind(r2, &(0x7f0000000440)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffffffffff35) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3, 0x8, 0x9, 0xfffffffffffffffc, 0x2}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x208000) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) dup3(r5, r6, 0x80000) creat(0x0, 0xecf86c37d53049cc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 60.883425][ T30] audit: type=1400 audit(1752296954.261:62): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.886786][ T5814] cgroup: Unknown subsys name 'net' [ 60.906187][ T30] audit: type=1400 audit(1752296954.261:63): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.935906][ T30] audit: type=1400 audit(1752296954.311:64): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.053618][ T5814] cgroup: Unknown subsys name 'cpuset' [ 61.062057][ T5814] cgroup: Unknown subsys name 'rlimit' [ 61.186759][ T30] audit: type=1400 audit(1752296954.561:65): avc: denied { setattr } for pid=5814 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.210377][ T30] audit: type=1400 audit(1752296954.561:66): avc: denied { create } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.247572][ T30] audit: type=1400 audit(1752296954.561:67): avc: denied { write } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.268062][ T30] audit: type=1400 audit(1752296954.561:68): avc: denied { read } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.286865][ T5816] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 61.288895][ T30] audit: type=1400 audit(1752296954.591:69): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 61.321787][ T30] audit: type=1400 audit(1752296954.591:70): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 61.345038][ T30] audit: type=1400 audit(1752296954.611:71): avc: denied { read } for pid=5496 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 62.206690][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.502836][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.510991][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.518890][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.530983][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.561001][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.569484][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.577607][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.585944][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.593615][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.599219][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.601792][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.615339][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.621529][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.630890][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.638900][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.645041][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.647583][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.652902][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.660902][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.667677][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.683454][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.690616][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.698018][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.712850][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.721716][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.143244][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 65.207640][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 65.227428][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 65.292585][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 65.325409][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 65.403462][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.410635][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.418937][ T5830] bridge_slave_0: entered allmulticast mode [ 65.426027][ T5830] bridge_slave_0: entered promiscuous mode [ 65.460258][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.467456][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.475059][ T5830] bridge_slave_1: entered allmulticast mode [ 65.481775][ T5830] bridge_slave_1: entered promiscuous mode [ 65.488586][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.495847][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.503152][ T5824] bridge_slave_0: entered allmulticast mode [ 65.509764][ T5824] bridge_slave_0: entered promiscuous mode [ 65.542267][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.549365][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.556788][ T5824] bridge_slave_1: entered allmulticast mode [ 65.563859][ T5824] bridge_slave_1: entered promiscuous mode [ 65.587341][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.594576][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.603092][ T5829] bridge_slave_0: entered allmulticast mode [ 65.609681][ T5829] bridge_slave_0: entered promiscuous mode [ 65.632482][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.639573][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.646875][ T5834] bridge_slave_0: entered allmulticast mode [ 65.653540][ T5834] bridge_slave_0: entered promiscuous mode [ 65.668327][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.675632][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.682891][ T5829] bridge_slave_1: entered allmulticast mode [ 65.689561][ T5829] bridge_slave_1: entered promiscuous mode [ 65.697930][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.714614][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.722220][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.729327][ T5834] bridge_slave_1: entered allmulticast mode [ 65.736170][ T5834] bridge_slave_1: entered promiscuous mode [ 65.742886][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.749953][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.757287][ T5828] bridge_slave_0: entered allmulticast mode [ 65.764681][ T5828] bridge_slave_0: entered promiscuous mode [ 65.779479][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.790386][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.808093][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.815718][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.823452][ T5828] bridge_slave_1: entered allmulticast mode [ 65.830130][ T5828] bridge_slave_1: entered promiscuous mode [ 65.853474][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.875252][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.894211][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.913182][ T5830] team0: Port device team_slave_0 added [ 65.928342][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.948393][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.958802][ T5830] team0: Port device team_slave_1 added [ 65.975462][ T5824] team0: Port device team_slave_0 added [ 65.990004][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.002548][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.028838][ T5824] team0: Port device team_slave_1 added [ 66.094137][ T5834] team0: Port device team_slave_0 added [ 66.102863][ T5828] team0: Port device team_slave_0 added [ 66.110445][ T5829] team0: Port device team_slave_0 added [ 66.117542][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.124618][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.150539][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.163301][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.170251][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.196233][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.207504][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.214876][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.240796][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.253122][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.260087][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.286911][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.299958][ T5834] team0: Port device team_slave_1 added [ 66.307094][ T5828] team0: Port device team_slave_1 added [ 66.314140][ T5829] team0: Port device team_slave_1 added [ 66.408483][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.416182][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.442271][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.455195][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.462187][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.488367][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.504176][ T5824] hsr_slave_0: entered promiscuous mode [ 66.510322][ T5824] hsr_slave_1: entered promiscuous mode [ 66.521847][ T5830] hsr_slave_0: entered promiscuous mode [ 66.527832][ T5830] hsr_slave_1: entered promiscuous mode [ 66.534182][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.541950][ T5830] Cannot create hsr debugfs directory [ 66.547975][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.555077][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.581184][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.593237][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.600188][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.626434][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.637714][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.644861][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.670899][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.686643][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.693706][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.719792][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.741696][ T5838] Bluetooth: hci1: command tx timeout [ 66.747319][ T5838] Bluetooth: hci0: command tx timeout [ 66.747371][ T51] Bluetooth: hci2: command tx timeout [ 66.752983][ T5832] Bluetooth: hci3: command tx timeout [ 66.815476][ T5829] hsr_slave_0: entered promiscuous mode [ 66.821058][ T5832] Bluetooth: hci4: command tx timeout [ 66.827787][ T5829] hsr_slave_1: entered promiscuous mode [ 66.833879][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.841648][ T5829] Cannot create hsr debugfs directory [ 66.875601][ T5834] hsr_slave_0: entered promiscuous mode [ 66.881699][ T5834] hsr_slave_1: entered promiscuous mode [ 66.887896][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.896278][ T5834] Cannot create hsr debugfs directory [ 66.943825][ T5828] hsr_slave_0: entered promiscuous mode [ 66.949843][ T5828] hsr_slave_1: entered promiscuous mode [ 66.956204][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.965527][ T5828] Cannot create hsr debugfs directory [ 67.278595][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.292443][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.304657][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.313921][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.374223][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.395970][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.407297][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.423782][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.481594][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.503526][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.514020][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.528232][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.587762][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.616346][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.639956][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.648958][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.663249][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.673762][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.722079][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.729263][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.753395][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.760680][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.771888][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.809377][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.818324][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.829824][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.840186][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.883342][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.903614][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.910683][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.928183][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.935331][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.026497][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 68.026512][ T30] audit: type=1400 audit(1752296961.391:86): avc: denied { sys_module } for pid=5824 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.038143][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.098506][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.125039][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.145843][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.175304][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.182479][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.226588][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.233756][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.258720][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.273243][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.296455][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.303621][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.326758][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.333892][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.369073][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.376277][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.395673][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.402787][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.428304][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.487440][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.582482][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.636899][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.649786][ T5824] veth0_vlan: entered promiscuous mode [ 68.684127][ T5824] veth1_vlan: entered promiscuous mode [ 68.693788][ T5828] veth0_vlan: entered promiscuous mode [ 68.749254][ T5828] veth1_vlan: entered promiscuous mode [ 68.767892][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.804318][ T5824] veth0_macvtap: entered promiscuous mode [ 68.825133][ T5832] Bluetooth: hci2: command tx timeout [ 68.825145][ T51] Bluetooth: hci3: command tx timeout [ 68.825173][ T51] Bluetooth: hci0: command tx timeout [ 68.830541][ T5832] Bluetooth: hci1: command tx timeout [ 68.874297][ T5824] veth1_macvtap: entered promiscuous mode [ 68.901435][ T5832] Bluetooth: hci4: command tx timeout [ 68.947682][ T5828] veth0_macvtap: entered promiscuous mode [ 68.960238][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.989260][ T5828] veth1_macvtap: entered promiscuous mode [ 69.007689][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.036678][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.046984][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.056444][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.065384][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.077395][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.108444][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.123734][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.143650][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.153383][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.162108][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.170764][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.218200][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.236622][ T5834] veth0_vlan: entered promiscuous mode [ 69.318090][ T5834] veth1_vlan: entered promiscuous mode [ 69.339889][ T5830] veth0_vlan: entered promiscuous mode [ 69.341859][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.355984][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.385760][ T5829] veth0_vlan: entered promiscuous mode [ 69.407731][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.416392][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.429031][ T5830] veth1_vlan: entered promiscuous mode [ 69.483531][ T5834] veth0_macvtap: entered promiscuous mode [ 69.492433][ T5829] veth1_vlan: entered promiscuous mode [ 69.504793][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.506268][ T5834] veth1_macvtap: entered promiscuous mode [ 69.516150][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.527758][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.536511][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.556945][ T30] audit: type=1400 audit(1752296962.931:87): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.GN1lEW/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.582286][ T30] audit: type=1400 audit(1752296962.931:88): avc: denied { mount } for pid=5824 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.606988][ T30] audit: type=1400 audit(1752296962.931:89): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.GN1lEW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.638647][ T30] audit: type=1400 audit(1752296962.931:90): avc: denied { mount } for pid=5824 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.645623][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.668632][ T30] audit: type=1400 audit(1752296962.941:91): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.GN1lEW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.697427][ T30] audit: type=1400 audit(1752296962.941:92): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.GN1lEW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.707545][ T5830] veth0_macvtap: entered promiscuous mode [ 69.738145][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.759422][ T30] audit: type=1400 audit(1752296962.951:93): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.762658][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.786790][ T30] audit: type=1400 audit(1752296962.961:94): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.815023][ T30] audit: type=1400 audit(1752296962.961:95): avc: denied { mount } for pid=5824 comm="syz-executor" name="/" dev="gadgetfs" ino=6853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.829473][ T5829] veth0_macvtap: entered promiscuous mode [ 69.847335][ T5830] veth1_macvtap: entered promiscuous mode [ 69.856886][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.866137][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.875923][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.884730][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.922043][ T5829] veth1_macvtap: entered promiscuous mode [ 69.938204][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.106700][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.126030][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.135758][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.145112][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.153904][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.364758][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.626850][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.684666][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 70.700662][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.717418][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.767693][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.806340][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.816609][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.828035][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.905624][ T5832] Bluetooth: hci1: command tx timeout [ 70.912116][ T5838] Bluetooth: hci0: command tx timeout [ 70.912147][ T51] Bluetooth: hci2: command tx timeout [ 70.918010][ T5838] Bluetooth: hci3: command tx timeout [ 70.925331][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.939927][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.982363][ T51] Bluetooth: hci4: command tx timeout [ 71.013938][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.016817][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.051062][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.077515][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.503483][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.531173][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.720195][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.766328][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.976813][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.246330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.348709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.400080][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.963110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.983712][ T5838] Bluetooth: hci3: command tx timeout [ 73.096640][ T51] Bluetooth: hci2: command tx timeout [ 73.102644][ T51] Bluetooth: hci1: command tx timeout [ 73.107500][ T5827] Bluetooth: hci0: command tx timeout [ 73.113120][ T5832] Bluetooth: hci4: command tx timeout [ 73.232955][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 73.232969][ T30] audit: type=1400 audit(1752296966.611:135): avc: denied { create } for pid=5974 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.301724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.411387][ T5987] FAULT_INJECTION: forcing a failure. [ 73.411387][ T5987] name failslab, interval 1, probability 0, space 0, times 1 [ 73.424185][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.3.8 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 73.424208][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.424218][ T5987] Call Trace: [ 73.424224][ T5987] [ 73.424230][ T5987] dump_stack_lvl+0x16c/0x1f0 [ 73.424264][ T5987] should_fail_ex+0x512/0x640 [ 73.424286][ T5987] ? fs_reclaim_acquire+0xae/0x150 [ 73.424306][ T5987] ? tomoyo_encode2+0x100/0x3e0 [ 73.424327][ T5987] should_failslab+0xc2/0x120 [ 73.424352][ T5987] __kmalloc_noprof+0xd2/0x510 [ 73.424381][ T5987] tomoyo_encode2+0x100/0x3e0 [ 73.424407][ T5987] tomoyo_encode+0x29/0x50 [ 73.424429][ T5987] tomoyo_realpath_from_path+0x18f/0x6e0 [ 73.424460][ T5987] tomoyo_check_open_permission+0x2ab/0x3c0 [ 73.424482][ T5987] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 73.424527][ T5987] ? preempt_schedule_thunk+0x16/0x30 [ 73.424558][ T5987] tomoyo_file_open+0x6b/0x90 [ 73.424574][ T5987] security_file_open+0x84/0x1e0 [ 73.424599][ T5987] do_dentry_open+0x596/0x1c10 [ 73.424624][ T5987] ? lockdep_init_map_type+0x5c/0x280 [ 73.424645][ T5987] vfs_open+0x82/0x3f0 [ 73.424664][ T5987] dentry_open+0x71/0xd0 [ 73.424680][ T5987] ovl_path_open+0x198/0x1f0 [ 73.424706][ T5987] ovl_dir_read_merged+0x175/0x5c0 [ 73.424730][ T5987] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 73.424758][ T5987] ? __pfx_ovl_fill_merge+0x10/0x10 [ 73.424795][ T5987] ovl_iterate+0x86c/0xe40 [ 73.424820][ T5987] ? __pfx_down_read_killable+0x10/0x10 [ 73.424850][ T5987] ? __pfx_ovl_iterate+0x10/0x10 [ 73.424873][ T5987] wrap_directory_iterator+0x9f/0xe0 [ 73.424896][ T5987] iterate_dir+0x296/0xb40 [ 73.424919][ T5987] __x64_sys_getdents+0x13c/0x2b0 [ 73.424939][ T5987] ? __pfx___x64_sys_getdents+0x10/0x10 [ 73.424959][ T5987] ? __pfx_filldir+0x10/0x10 [ 73.424988][ T5987] do_syscall_64+0xcd/0x4c0 [ 73.425014][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.425030][ T5987] RIP: 0033:0x7f95d9d8e929 [ 73.425044][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.425059][ T5987] RSP: 002b:00007f95dac13038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 73.425076][ T5987] RAX: ffffffffffffffda RBX: 00007f95d9fb6160 RCX: 00007f95d9d8e929 [ 73.425086][ T5987] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000006 [ 73.425096][ T5987] RBP: 00007f95dac13090 R08: 0000000000000000 R09: 0000000000000000 [ 73.425105][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.425114][ T5987] R13: 0000000000000000 R14: 00007f95d9fb6160 R15: 00007ffc044af968 [ 73.425137][ T5987] [ 73.425274][ T5987] ERROR: Out of memory at tomoyo_realpath_from_path. [ 73.578006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.791503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.851102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.859385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.894725][ T30] audit: type=1400 audit(1752296966.661:136): avc: denied { read write } for pid=5970 comm="syz.4.5" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.941851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.021392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.091180][ T5992] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.211152][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.304461][ T5996] netlink: 'syz.3.11': attribute type 4 has an invalid length. [ 74.333385][ T30] audit: type=1400 audit(1752296966.661:137): avc: denied { open } for pid=5970 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.362282][ T24] usb 3-1: device descriptor read/64, error -71 [ 74.413868][ T5997] netlink: 'syz.0.9': attribute type 9 has an invalid length. [ 74.454387][ T30] audit: type=1400 audit(1752296966.661:138): avc: denied { ioctl } for pid=5970 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.611128][ T30] audit: type=1400 audit(1752296966.761:139): avc: denied { unlink } for pid=5977 comm="syz.3.8" name="#1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.636185][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.700022][ T6004] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 74.727752][ T6004] CIFS: Unable to determine destination address [ 74.728445][ T30] audit: type=1400 audit(1752296966.771:140): avc: denied { mount } for pid=5977 comm="syz.3.8" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.979889][ T24] usb 3-1: device descriptor read/64, error -71 [ 75.024261][ T30] audit: type=1400 audit(1752296967.461:141): avc: denied { create } for pid=5991 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.045420][ T6005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=6005 comm=syz.3.13 [ 75.057904][ T30] audit: type=1400 audit(1752296967.471:142): avc: denied { ioctl } for pid=5991 comm="syz.0.9" path="socket:[7456]" dev="sockfs" ino=7456 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.091986][ T24] usb usb3-port1: attempt power cycle [ 75.104995][ T30] audit: type=1400 audit(1752296967.581:143): avc: denied { bind } for pid=5991 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.128983][ T30] audit: type=1400 audit(1752296967.581:144): avc: denied { node_bind } for pid=5991 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 75.441013][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.535733][ T24] usb 3-1: device descriptor read/8, error -71 [ 75.831051][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.838991][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.907942][ T6015] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 76.060244][ T43] cfg80211: failed to load regulatory.db [ 76.131099][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 76.262892][ T24] usb 3-1: device descriptor read/8, error -71 [ 76.270633][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.295769][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.316936][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 76.368409][ T5915] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 76.392461][ T24] usb usb3-port1: unable to enumerate USB device [ 76.407325][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.435124][ T5915] usb 2-1: config 0 descriptor?? [ 76.552318][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 76.611846][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 77.019789][ T5915] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 77.043663][ T5915] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 77.085511][ T5915] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 77.178513][ T5915] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 77.529696][ T5915] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 77.552000][ T5915] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 77.573322][ T6011] netlink: 'syz.1.16': attribute type 2 has an invalid length. [ 77.600266][ T5915] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 77.624426][ T5915] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 77.630476][ T6011] netlink: 244 bytes leftover after parsing attributes in process `syz.1.16'. [ 78.343410][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 78.343426][ T30] audit: type=1400 audit(1752296971.351:175): avc: denied { nlmsg_read } for pid=6036 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.384381][ T9] usb 2-1: USB disconnect, device number 2 [ 78.408691][ T5915] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 78.436703][ T5915] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.450062][ T5915] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.480888][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.713896][ T30] audit: type=1400 audit(1752296972.081:176): avc: denied { bind } for pid=6040 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.750780][ T5915] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.790616][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 78.818243][ T30] audit: type=1400 audit(1752296972.081:177): avc: denied { write } for pid=6040 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.947970][ T10] usb 1-1: device descriptor read/64, error -71 [ 78.987726][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 79.033299][ T30] audit: type=1400 audit(1752296972.411:178): avc: denied { create } for pid=6025 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.200925][ T30] audit: type=1400 audit(1752296972.411:179): avc: denied { bind } for pid=6025 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.260994][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 79.493072][ T30] audit: type=1400 audit(1752296972.411:180): avc: denied { name_bind } for pid=6025 comm="syz.4.21" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 79.553911][ T6059] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 79.560605][ T6059] dummy0: entered promiscuous mode [ 79.565925][ T6059] dummy0: entered allmulticast mode [ 79.910982][ T10] usb 1-1: device descriptor read/64, error -71 [ 80.029699][ T30] audit: type=1400 audit(1752296972.411:181): avc: denied { node_bind } for pid=6025 comm="syz.4.21" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 80.066393][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 80.087236][ T10] usb usb1-port1: attempt power cycle [ 80.102850][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 80.133087][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31'. [ 80.173736][ T6066] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.182621][ T6066] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.191356][ T6066] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.200015][ T6066] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.243897][ T30] audit: type=1400 audit(1752296972.931:182): avc: denied { ioctl } for pid=6051 comm="syz.2.27" path="socket:[8577]" dev="sockfs" ino=8577 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.280902][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 80.414288][ T6068] FAULT_INJECTION: forcing a failure. [ 80.414288][ T6068] name failslab, interval 1, probability 0, space 0, times 0 [ 80.463520][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.3.32 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 80.463538][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.463544][ T6068] Call Trace: [ 80.463549][ T6068] [ 80.463553][ T6068] dump_stack_lvl+0x16c/0x1f0 [ 80.463572][ T6068] should_fail_ex+0x512/0x640 [ 80.463585][ T6068] ? fs_reclaim_acquire+0xae/0x150 [ 80.463597][ T6068] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 80.463611][ T6068] should_failslab+0xc2/0x120 [ 80.463626][ T6068] __kmalloc_noprof+0xd2/0x510 [ 80.463643][ T6068] tomoyo_realpath_from_path+0xc2/0x6e0 [ 80.463659][ T6068] ? tomoyo_profile+0x47/0x60 [ 80.463675][ T6068] tomoyo_path_number_perm+0x245/0x580 [ 80.463687][ T6068] ? tomoyo_path_number_perm+0x237/0x580 [ 80.463700][ T6068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.463713][ T6068] ? find_held_lock+0x2b/0x80 [ 80.463737][ T6068] ? find_held_lock+0x2b/0x80 [ 80.463749][ T6068] ? hook_file_ioctl_common+0x145/0x410 [ 80.463761][ T6068] ? __fget_files+0x20e/0x3c0 [ 80.463778][ T6068] security_file_ioctl+0x9b/0x240 [ 80.463794][ T6068] __x64_sys_ioctl+0xb7/0x210 [ 80.463806][ T6068] do_syscall_64+0xcd/0x4c0 [ 80.463822][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.463833][ T6068] RIP: 0033:0x7f95d9d8e929 [ 80.463841][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.463851][ T6068] RSP: 002b:00007f95dac55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.463861][ T6068] RAX: ffffffffffffffda RBX: 00007f95d9fb5fa0 RCX: 00007f95d9d8e929 [ 80.463867][ T6068] RDX: 0000200000000000 RSI: 0000000000008927 RDI: 0000000000000003 [ 80.463872][ T6068] RBP: 00007f95dac55090 R08: 0000000000000000 R09: 0000000000000000 [ 80.463878][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.463883][ T6068] R13: 0000000000000000 R14: 00007f95d9fb5fa0 R15: 00007ffc044af968 [ 80.463896][ T6068] [ 80.463900][ T6068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.688695][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 80.737807][ T10] usb 1-1: device descriptor read/8, error -71 [ 80.740340][ T30] audit: type=1400 audit(1752296974.101:183): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 80.772681][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 80.793843][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 81.355934][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 81.366356][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.381083][ T30] audit: type=1400 audit(1752296974.381:184): avc: denied { setopt } for pid=6069 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.401494][ T9] usb 2-1: config 0 descriptor?? [ 81.412854][ T6065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 82.140156][ T6081] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 82.285520][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.36'. [ 82.318382][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 82.333744][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 82.333770][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.333783][ T51] Workqueue: hci4 hci_rx_work [ 82.333815][ T51] Call Trace: [ 82.333821][ T51] [ 82.333829][ T51] dump_stack_lvl+0x16c/0x1f0 [ 82.333855][ T51] sysfs_warn_dup+0x7f/0xa0 [ 82.333882][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 82.333906][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 82.333929][ T51] ? find_held_lock+0x2b/0x80 [ 82.333958][ T51] ? do_raw_spin_unlock+0x172/0x230 [ 82.333980][ T51] kobject_add_internal+0x2c4/0x9b0 [ 82.334012][ T51] kobject_add+0x16e/0x240 [ 82.334039][ T51] ? __pfx_kobject_add+0x10/0x10 [ 82.334068][ T51] ? do_raw_spin_unlock+0x172/0x230 [ 82.334088][ T51] ? kobject_put+0xab/0x5a0 [ 82.334119][ T51] device_add+0x288/0x1a70 [ 82.334137][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 82.334156][ T51] ? __pfx_device_add+0x10/0x10 [ 82.334173][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 82.334231][ T51] hci_conn_add_sysfs+0x17e/0x230 [ 82.334259][ T51] le_conn_complete_evt+0x1075/0x1d70 [ 82.334291][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 82.334316][ T51] ? hci_event_packet+0x459/0x11c0 [ 82.334349][ T51] hci_le_conn_complete_evt+0x23c/0x370 [ 82.334380][ T51] hci_le_meta_evt+0x357/0x5e0 [ 82.334403][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 82.334428][ T51] hci_event_packet+0x685/0x11c0 [ 82.334449][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 82.334472][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 82.334497][ T51] ? kcov_remote_start+0x3c9/0x6d0 [ 82.334516][ T51] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.334543][ T51] hci_rx_work+0x2c5/0x16b0 [ 82.334569][ T51] ? rcu_is_watching+0x12/0xc0 [ 82.334594][ T51] process_one_work+0x9cf/0x1b70 [ 82.334622][ T51] ? __pfx_process_one_work+0x10/0x10 [ 82.334647][ T51] ? assign_work+0x1a0/0x250 [ 82.334666][ T51] worker_thread+0x6c8/0xf10 [ 82.334695][ T51] ? __pfx_worker_thread+0x10/0x10 [ 82.334713][ T51] kthread+0x3c5/0x780 [ 82.334730][ T51] ? __pfx_kthread+0x10/0x10 [ 82.334749][ T51] ? rcu_is_watching+0x12/0xc0 [ 82.334768][ T51] ? __pfx_kthread+0x10/0x10 [ 82.334785][ T51] ret_from_fork+0x5d7/0x6f0 [ 82.334809][ T51] ? __pfx_kthread+0x10/0x10 [ 82.334826][ T51] ret_from_fork_asm+0x1a/0x30 [ 82.334856][ T51] [ 82.578934][ T51] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.594007][ T51] Bluetooth: hci4: failed to register connection device [ 82.873054][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 82.887544][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 82.914691][ T9] usb 2-1: USB disconnect, device number 3 [ 82.982807][ T6089] Illegal XDP return value 2281863411 on prog (id 10) dev N/A, expect packet loss! [ 83.368233][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 83.377346][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 83.560936][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 83.560951][ T30] audit: type=1400 audit(1752296976.931:204): avc: denied { setopt } for pid=6093 comm="syz.2.39" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.791961][ T30] audit: type=1400 audit(1752296976.991:205): avc: denied { write } for pid=6093 comm="syz.2.39" laddr=fe80::ccf4:34ff:fe35:bf8e lport=60 faddr=ff02::1 fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.082144][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 84.091391][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 84.533491][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 84.560946][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 85.714128][ T5842] Bluetooth: Unexpected start frame (len 18) [ 86.020993][ T6135] netlink: 44 bytes leftover after parsing attributes in process `syz.3.50'. [ 86.074695][ T6138] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 86.109232][ T6138] audit: out of memory in audit_log_start [ 86.575609][ T30] audit: type=1400 audit(1752296979.951:206): avc: denied { create } for pid=6145 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.642466][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.766102][ T6148] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 86.792651][ T6148] overlayfs: missing 'lowerdir' [ 86.808172][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.839584][ T6153] FAULT_INJECTION: forcing a failure. [ 86.839584][ T6153] name failslab, interval 1, probability 0, space 0, times 0 [ 86.855141][ T6153] CPU: 0 UID: 0 PID: 6153 Comm: syz.0.56 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 86.855171][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.855181][ T6153] Call Trace: [ 86.855187][ T6153] [ 86.855194][ T6153] dump_stack_lvl+0x16c/0x1f0 [ 86.855221][ T6153] should_fail_ex+0x512/0x640 [ 86.855243][ T6153] ? __kmalloc_noprof+0xbf/0x510 [ 86.855268][ T6153] ? comedi_alloc_devpriv+0x22/0x60 [ 86.855287][ T6153] should_failslab+0xc2/0x120 [ 86.855312][ T6153] __kmalloc_noprof+0xd2/0x510 [ 86.855331][ T6153] ? _raw_write_unlock+0x28/0x50 [ 86.855352][ T6153] ? __request_region+0xb0/0xf0 [ 86.855381][ T6153] comedi_alloc_devpriv+0x22/0x60 [ 86.855402][ T6153] pcmmio_attach+0x91/0xe10 [ 86.855422][ T6153] comedi_device_attach+0x3b0/0x900 [ 86.855451][ T6153] do_devconfig_ioctl+0x1a7/0x580 [ 86.855477][ T6153] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 86.855519][ T6153] ? find_held_lock+0x2b/0x80 [ 86.855544][ T6153] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 86.855569][ T6153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.855589][ T6153] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 86.855607][ T6153] ? do_vfs_ioctl+0x523/0x1a60 [ 86.855626][ T6153] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 86.855650][ T6153] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 86.855675][ T6153] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 86.855701][ T6153] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 86.855734][ T6153] ? hook_file_ioctl_common+0x145/0x410 [ 86.855758][ T6153] ? selinux_file_ioctl+0x180/0x270 [ 86.855780][ T6153] ? selinux_file_ioctl+0xb4/0x270 [ 86.855804][ T6153] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 86.855824][ T6153] __x64_sys_ioctl+0x18b/0x210 [ 86.855844][ T6153] do_syscall_64+0xcd/0x4c0 [ 86.855870][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.855887][ T6153] RIP: 0033:0x7f118f78e929 [ 86.855901][ T6153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.855916][ T6153] RSP: 002b:00007f1190577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.855933][ T6153] RAX: ffffffffffffffda RBX: 00007f118f9b5fa0 RCX: 00007f118f78e929 [ 86.855943][ T6153] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 86.855953][ T6153] RBP: 00007f1190577090 R08: 0000000000000000 R09: 0000000000000000 [ 86.855962][ T6153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.855971][ T6153] R13: 0000000000000000 R14: 00007f118f9b5fa0 R15: 00007fff4dc9a108 [ 86.855995][ T6153] [ 87.133043][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 87.152903][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 87.162194][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.170192][ T9] usb 5-1: Product: syz [ 87.174404][ T9] usb 5-1: Manufacturer: syz [ 87.175465][ T6155] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 87.178980][ T9] usb 5-1: SerialNumber: syz [ 87.187164][ T6155] audit: out of memory in audit_log_start [ 87.193403][ T9] usb 5-1: config 0 descriptor?? [ 87.209487][ T9] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 87.218828][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 87.226054][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 87.234199][ T10] usb 2-1: config 0 has no interface number 0 [ 87.240319][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 87.253668][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 87.260884][ T5915] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 87.262768][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.278238][ T10] usb 2-1: Product: syz [ 87.282451][ T10] usb 2-1: Manufacturer: syz [ 87.287070][ T10] usb 2-1: SerialNumber: syz [ 87.294267][ T10] usb 2-1: config 0 descriptor?? [ 87.892959][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.919297][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 88.042223][ T5915] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 88.067071][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.084402][ T5915] usb 4-1: Product: syz [ 88.089406][ T5915] usb 4-1: Manufacturer: syz [ 88.098823][ T5915] usb 4-1: SerialNumber: syz [ 88.223890][ T9] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 88.319663][ T5915] usb 4-1: config 0 descriptor?? [ 88.345322][ T9] usb 5-1: USB disconnect, device number 2 [ 88.350900][ T5915] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 88.512371][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 88.521157][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 88.567493][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 88.576814][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input6 [ 88.579547][ T30] audit: type=1400 audit(1752296981.951:207): avc: denied { ioctl } for pid=6144 comm="syz.3.55" path="socket:[7698]" dev="sockfs" ino=7698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.618868][ T6148] ipvlan2: entered promiscuous mode [ 88.624886][ T6148] ipvlan2: entered allmulticast mode [ 88.641946][ T6148] bridge0: entered allmulticast mode [ 88.657340][ T6148] batman_adv: batadv0: Adding interface: ipvlan2 [ 88.671153][ T30] audit: type=1400 audit(1752296981.991:208): avc: denied { search } for pid=6165 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.696010][ T6148] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.757102][ T30] audit: type=1400 audit(1752296981.991:209): avc: denied { search } for pid=6165 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.820305][ T6148] batman_adv: batadv0: Interface activated: ipvlan2 [ 88.877196][ T30] audit: type=1400 audit(1752296981.991:210): avc: denied { search } for pid=6165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.941486][ T30] audit: type=1400 audit(1752296981.991:211): avc: denied { search } for pid=6165 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.972307][ T10] IPVS: starting estimator thread 0... [ 89.006645][ T30] audit: type=1400 audit(1752296982.021:212): avc: denied { read open } for pid=6170 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.064002][ T30] audit: type=1400 audit(1752296982.021:213): avc: denied { getattr } for pid=6170 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.100972][ T6178] IPVS: using max 77 ests per chain, 184800 per kthread [ 89.174498][ T30] audit: type=1400 audit(1752296982.021:214): avc: denied { getattr } for pid=6170 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.227801][ T5915] usb 4-1: USB disconnect, device number 2 [ 89.266417][ T6186] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 89.311038][ T30] audit: type=1400 audit(1752296982.231:215): avc: denied { read } for pid=6172 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.395381][ T30] audit: type=1400 audit(1752296982.231:216): avc: denied { open } for pid=6172 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.476924][ T6194] overlayfs: unescaped trailing colons in lowerdir mount option. [ 89.665893][ T6198] dummy0: entered promiscuous mode [ 89.672365][ T6198] dummy0: entered allmulticast mode [ 89.889047][ T5915] usb 2-1: USB disconnect, device number 4 [ 89.946876][ T5915] appletouch 2-1:0.85: input: appletouch disconnected [ 91.847878][ T6251] FAULT_INJECTION: forcing a failure. [ 91.847878][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 92.004610][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz.3.72 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 92.004636][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.004646][ T6251] Call Trace: [ 92.004651][ T6251] [ 92.004658][ T6251] dump_stack_lvl+0x16c/0x1f0 [ 92.004687][ T6251] should_fail_ex+0x512/0x640 [ 92.004713][ T6251] should_failslab+0xc2/0x120 [ 92.004739][ T6251] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 92.004763][ T6251] ? skb_clone+0x190/0x3f0 [ 92.004792][ T6251] skb_clone+0x190/0x3f0 [ 92.004816][ T6251] netlink_deliver_tap+0xabd/0xd30 [ 92.004848][ T6251] netlink_unicast+0x62f/0x850 [ 92.004868][ T6251] ? __pfx_netlink_unicast+0x10/0x10 [ 92.004893][ T6251] netlink_sendmsg+0x8d1/0xdd0 [ 92.004913][ T6251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.004941][ T6251] ____sys_sendmsg+0xa98/0xc70 [ 92.004960][ T6251] ? copy_msghdr_from_user+0x10a/0x160 [ 92.004983][ T6251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.005013][ T6251] ___sys_sendmsg+0x134/0x1d0 [ 92.005034][ T6251] ? irqentry_exit+0x3b/0x90 [ 92.005059][ T6251] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.005080][ T6251] ? __lock_acquire+0x622/0x1c90 [ 92.005128][ T6251] __sys_sendmsg+0x16d/0x220 [ 92.005152][ T6251] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.005193][ T6251] do_syscall_64+0xcd/0x4c0 [ 92.005225][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.005242][ T6251] RIP: 0033:0x7f95d9d8e929 [ 92.005256][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.005272][ T6251] RSP: 002b:00007f95dac55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.005289][ T6251] RAX: ffffffffffffffda RBX: 00007f95d9fb5fa0 RCX: 00007f95d9d8e929 [ 92.005300][ T6251] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 92.005310][ T6251] RBP: 00007f95dac55090 R08: 0000000000000000 R09: 0000000000000000 [ 92.005319][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.005329][ T6251] R13: 0000000000000000 R14: 00007f95d9fb5fa0 R15: 00007ffc044af968 [ 92.005358][ T6251] [ 92.361352][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 93.524817][ T6265] FAULT_INJECTION: forcing a failure. [ 93.524817][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 93.583469][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.3.77 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 93.583496][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.583505][ T6265] Call Trace: [ 93.583510][ T6265] [ 93.583517][ T6265] dump_stack_lvl+0x16c/0x1f0 [ 93.583546][ T6265] should_fail_ex+0x512/0x640 [ 93.583572][ T6265] should_failslab+0xc2/0x120 [ 93.583598][ T6265] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 93.583624][ T6265] ? sidtab_sid2str_get+0x17a/0x680 [ 93.583653][ T6265] kmemdup_noprof+0x29/0x60 [ 93.583677][ T6265] sidtab_sid2str_get+0x17a/0x680 [ 93.583705][ T6265] sidtab_entry_to_string+0x33/0x110 [ 93.583731][ T6265] security_sid_to_context_core+0x35c/0x640 [ 93.583757][ T6265] avc_audit_post_callback+0x109/0x8f0 [ 93.583784][ T6265] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 93.583806][ T6265] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 93.583830][ T6265] ? skb_put+0x138/0x1b0 [ 93.583847][ T6265] ? audit_log_n_string+0x253/0x540 [ 93.583873][ T6265] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 93.583898][ T6265] common_lsm_audit+0x24e/0x300 [ 93.583922][ T6265] ? __pfx_common_lsm_audit+0x10/0x10 [ 93.583946][ T6265] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.583968][ T6265] ? avc_update_node.isra.0+0x4c0/0xb60 [ 93.583998][ T6265] slow_avc_audit+0x186/0x210 [ 93.584014][ T6265] ? __pfx_slow_avc_audit+0x10/0x10 [ 93.584033][ T6265] ? avc_denied+0x14a/0x190 [ 93.584060][ T6265] ? avc_has_perm_noaudit+0x306/0x3b0 [ 93.584080][ T6265] avc_has_perm+0x18b/0x1c0 [ 93.584097][ T6265] ? __pfx_avc_has_perm+0x10/0x10 [ 93.584112][ T6265] ? find_held_lock+0x2b/0x80 [ 93.584133][ T6265] ? get_pid_task+0xfc/0x250 [ 93.584153][ T6265] inode_has_perm+0x168/0x1d0 [ 93.584173][ T6265] selinux_mmap_file+0x10a/0x1b0 [ 93.584191][ T6265] ? __pfx_selinux_mmap_file+0x10/0x10 [ 93.584210][ T6265] ? __lock_acquire+0x622/0x1c90 [ 93.584232][ T6265] security_mmap_file+0x82a/0x990 [ 93.584257][ T6265] vm_mmap_pgoff+0xec/0x450 [ 93.584282][ T6265] ? find_held_lock+0x2b/0x80 [ 93.584302][ T6265] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 93.584331][ T6265] ? __fget_files+0x20e/0x3c0 [ 93.584364][ T6265] ksys_mmap_pgoff+0x32c/0x5c0 [ 93.584391][ T6265] ? __pfx_ksys_write+0x10/0x10 [ 93.584413][ T6265] __x64_sys_mmap+0x125/0x190 [ 93.584442][ T6265] do_syscall_64+0xcd/0x4c0 [ 93.584467][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.584484][ T6265] RIP: 0033:0x7f95d9d8e929 [ 93.584498][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.584513][ T6265] RSP: 002b:00007f95dac55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 93.584529][ T6265] RAX: ffffffffffffffda RBX: 00007f95d9fb5fa0 RCX: 00007f95d9d8e929 [ 93.584539][ T6265] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 93.584548][ T6265] RBP: 00007f95dac55090 R08: 0000000000000003 R09: 0000000042401000 [ 93.584557][ T6265] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 93.584566][ T6265] R13: 0000000000000000 R14: 00007f95d9fb5fa0 R15: 00007ffc044af968 [ 93.584589][ T6265] [ 93.584676][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 93.584687][ T30] audit: type=1400 audit(1752296986.901:263): avc: denied { map } for pid=6263 comm="syz.3.77" path="/dev/comedi4" dev="devtmpfs" ino=1280 ssid=148 tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.961777][ T30] audit: type=1400 audit(1752296986.961:268): avc: denied { execmem } for pid=6263 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.981075][ T30] audit: type=1400 audit(1752296986.961:269): avc: denied { execute } for pid=6263 comm="syz.3.77" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.005454][ T6276] netlink: zone id is out of range [ 94.013496][ T6276] netlink: del zone limit has 4 unknown bytes [ 94.025539][ T30] audit: type=1400 audit(1752296986.961:270): avc: denied { read } for pid=6267 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.031459][ T6270] block nbd0: shutting down sockets [ 94.048257][ T30] audit: type=1400 audit(1752296986.961:271): avc: denied { open } for pid=6267 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.079519][ T30] audit: type=1400 audit(1752296986.991:272): avc: denied { ioctl } for pid=6256 comm="syz.4.75" path="socket:[7960]" dev="sockfs" ino=7960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.106881][ T30] audit: type=1400 audit(1752296987.011:273): avc: denied { allowed } for pid=6269 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.126143][ T30] audit: type=1400 audit(1752296987.011:274): avc: denied { create } for pid=6269 comm="syz.0.79" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.150464][ T30] audit: type=1400 audit(1752296987.011:275): avc: denied { map } for pid=6269 comm="syz.0.79" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.176838][ T30] audit: type=1400 audit(1752296987.011:276): avc: denied { read write } for pid=6269 comm="syz.0.79" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.430910][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.636543][ T6297] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 94.802286][ T9] usb 1-1: device descriptor read/64, error -71 [ 95.103269][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 95.241519][ T6295] 8021q: VLANs not supported on ipvlan1 [ 95.272228][ T9] usb 1-1: device descriptor read/64, error -71 [ 95.505128][ T5842] Bluetooth: Unexpected start frame (len 18) [ 95.534263][ T9] usb usb1-port1: attempt power cycle [ 95.744463][ T6312] FAULT_INJECTION: forcing a failure. [ 95.744463][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 95.757622][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.4.87 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 95.757645][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.757655][ T6312] Call Trace: [ 95.757660][ T6312] [ 95.757667][ T6312] dump_stack_lvl+0x16c/0x1f0 [ 95.757694][ T6312] should_fail_ex+0x512/0x640 [ 95.757715][ T6312] ? __kmalloc_noprof+0xbf/0x510 [ 95.757738][ T6312] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 95.757759][ T6312] should_failslab+0xc2/0x120 [ 95.757783][ T6312] __kmalloc_noprof+0xd2/0x510 [ 95.757811][ T6312] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 95.757836][ T6312] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 95.757858][ T6312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.757886][ T6312] ? bpf_lsm_capable+0x9/0x10 [ 95.757903][ T6312] ? security_capable+0x7e/0x260 [ 95.757924][ T6312] ? ns_capable+0xd7/0x110 [ 95.757946][ T6312] genl_rcv_msg+0x55c/0x800 [ 95.757968][ T6312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.757987][ T6312] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 95.758009][ T6312] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 95.758027][ T6312] ? __pfx_nl80211_post_doit+0x10/0x10 [ 95.758060][ T6312] netlink_rcv_skb+0x155/0x420 [ 95.758075][ T6312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.758095][ T6312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.758123][ T6312] ? netlink_deliver_tap+0x1ae/0xd30 [ 95.758151][ T6312] genl_rcv+0x28/0x40 [ 95.758173][ T6312] netlink_unicast+0x58d/0x850 [ 95.758194][ T6312] ? __pfx_netlink_unicast+0x10/0x10 [ 95.758217][ T6312] netlink_sendmsg+0x8d1/0xdd0 [ 95.758238][ T6312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.758264][ T6312] ____sys_sendmsg+0xa98/0xc70 [ 95.758283][ T6312] ? copy_msghdr_from_user+0x10a/0x160 [ 95.758306][ T6312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.758335][ T6312] ___sys_sendmsg+0x134/0x1d0 [ 95.758359][ T6312] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.758378][ T6312] ? __lock_acquire+0x622/0x1c90 [ 95.758425][ T6312] __sys_sendmsg+0x16d/0x220 [ 95.758449][ T6312] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.758488][ T6312] do_syscall_64+0xcd/0x4c0 [ 95.758513][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.758530][ T6312] RIP: 0033:0x7feb6cb8e929 [ 95.758544][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.758560][ T6312] RSP: 002b:00007feb6d9fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.758576][ T6312] RAX: ffffffffffffffda RBX: 00007feb6cdb5fa0 RCX: 00007feb6cb8e929 [ 95.758587][ T6312] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 95.758597][ T6312] RBP: 00007feb6d9fc090 R08: 0000000000000000 R09: 0000000000000000 [ 95.758606][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.758616][ T6312] R13: 0000000000000000 R14: 00007feb6cdb5fa0 R15: 00007ffdd2aaae98 [ 95.758639][ T6312] [ 96.181213][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.227563][ T6320] FAULT_INJECTION: forcing a failure. [ 96.227563][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.247824][ T9] usb 1-1: device descriptor read/8, error -71 [ 96.289637][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.2.90 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 96.289663][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.289673][ T6320] Call Trace: [ 96.289678][ T6320] [ 96.289685][ T6320] dump_stack_lvl+0x16c/0x1f0 [ 96.289712][ T6320] should_fail_ex+0x512/0x640 [ 96.289738][ T6320] strncpy_from_user+0x3b/0x2e0 [ 96.289762][ T6320] getname_flags.part.0+0x8f/0x550 [ 96.289783][ T6320] getname_flags+0x93/0xf0 [ 96.289804][ T6320] path_setxattrat+0x27a/0x2a0 [ 96.289829][ T6320] ? __pfx_path_setxattrat+0x10/0x10 [ 96.289856][ T6320] ? ksys_write+0x190/0x250 [ 96.289897][ T6320] ? fput+0x70/0xf0 [ 96.289911][ T6320] ? ksys_write+0x1ac/0x250 [ 96.289932][ T6320] ? __pfx_ksys_write+0x10/0x10 [ 96.289956][ T6320] __x64_sys_lsetxattr+0xc9/0x140 [ 96.289980][ T6320] ? do_syscall_64+0x91/0x4c0 [ 96.290002][ T6320] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.290023][ T6320] do_syscall_64+0xcd/0x4c0 [ 96.290046][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.290063][ T6320] RIP: 0033:0x7f9cf1d8e929 [ 96.290074][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.290088][ T6320] RSP: 002b:00007f9cf2bfd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 96.290103][ T6320] RAX: ffffffffffffffda RBX: 00007f9cf1fb5fa0 RCX: 00007f9cf1d8e929 [ 96.290113][ T6320] RDX: 0000200000000600 RSI: 0000200000000100 RDI: 0000200000000040 [ 96.290123][ T6320] RBP: 00007f9cf2bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 96.290131][ T6320] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 96.290139][ T6320] R13: 0000000000000000 R14: 00007f9cf1fb5fa0 R15: 00007ffc91d11028 [ 96.290159][ T6320] [ 96.645902][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 96.762332][ T9] usb 1-1: device descriptor read/8, error -71 [ 96.972418][ T9] usb usb1-port1: unable to enumerate USB device [ 97.706543][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 97.742951][ T6346] bridge0: entered promiscuous mode [ 97.748863][ T6346] macsec1: entered promiscuous mode [ 97.929791][ T6346] bridge0: port 3(macsec1) entered blocking state [ 97.964650][ T6346] bridge0: port 3(macsec1) entered disabled state [ 98.016314][ T6346] macsec1: entered allmulticast mode [ 98.058583][ T6346] bridge0: entered allmulticast mode [ 98.127801][ T6346] macsec1: left allmulticast mode [ 98.158280][ T6346] bridge0: left allmulticast mode [ 98.416011][ T6346] bridge0: left promiscuous mode [ 98.544356][ T6367] overlayfs: failed to resolve './file0': -2 [ 98.818814][ T6372] FAULT_INJECTION: forcing a failure. [ 98.818814][ T6372] name failslab, interval 1, probability 0, space 0, times 0 [ 98.860687][ T6372] CPU: 0 UID: 0 PID: 6372 Comm: syz.0.100 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 98.860712][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.860721][ T6372] Call Trace: [ 98.860727][ T6372] [ 98.860733][ T6372] dump_stack_lvl+0x16c/0x1f0 [ 98.860761][ T6372] should_fail_ex+0x512/0x640 [ 98.860781][ T6372] ? __kmalloc_noprof+0xbf/0x510 [ 98.860807][ T6372] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 98.860826][ T6372] should_failslab+0xc2/0x120 [ 98.860850][ T6372] __kmalloc_noprof+0xd2/0x510 [ 98.860877][ T6372] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 98.860898][ T6372] ? cred_has_capability.isra.0+0x193/0x2f0 [ 98.860925][ T6372] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 98.860946][ T6372] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 98.860975][ T6372] ? bpf_lsm_capable+0x9/0x10 [ 98.860992][ T6372] ? security_capable+0x7e/0x260 [ 98.861016][ T6372] genl_rcv_msg+0x55c/0x800 [ 98.861038][ T6372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.861057][ T6372] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 98.861086][ T6372] netlink_rcv_skb+0x155/0x420 [ 98.861108][ T6372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.861126][ T6372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.861152][ T6372] ? netlink_deliver_tap+0x1ae/0xd30 [ 98.861182][ T6372] genl_rcv+0x28/0x40 [ 98.861197][ T6372] netlink_unicast+0x58d/0x850 [ 98.861217][ T6372] ? __pfx_netlink_unicast+0x10/0x10 [ 98.861241][ T6372] netlink_sendmsg+0x8d1/0xdd0 [ 98.861261][ T6372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.861287][ T6372] ____sys_sendmsg+0xa98/0xc70 [ 98.861305][ T6372] ? copy_msghdr_from_user+0x10a/0x160 [ 98.861326][ T6372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.861355][ T6372] ___sys_sendmsg+0x134/0x1d0 [ 98.861379][ T6372] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.861399][ T6372] ? __lock_acquire+0x622/0x1c90 [ 98.861448][ T6372] __sys_sendmsg+0x16d/0x220 [ 98.861472][ T6372] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.861511][ T6372] do_syscall_64+0xcd/0x4c0 [ 98.861537][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.861554][ T6372] RIP: 0033:0x7f118f78e929 [ 98.861568][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.861584][ T6372] RSP: 002b:00007f1190577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.861601][ T6372] RAX: ffffffffffffffda RBX: 00007f118f9b5fa0 RCX: 00007f118f78e929 [ 98.861612][ T6372] RDX: 0000000024040014 RSI: 00002000000004c0 RDI: 0000000000000003 [ 98.861623][ T6372] RBP: 00007f1190577090 R08: 0000000000000000 R09: 0000000000000000 [ 98.861633][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.861642][ T6372] R13: 0000000000000000 R14: 00007f118f9b5fa0 R15: 00007fff4dc9a108 [ 98.861665][ T6372] [ 99.524086][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 99.524101][ T30] audit: type=1400 audit(1752296992.901:339): avc: denied { name_bind } for pid=6382 comm="syz.2.103" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 99.551681][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.678076][ T30] audit: type=1400 audit(1752296992.941:340): avc: denied { node_bind } for pid=6382 comm="syz.2.103" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 100.800045][ T30] audit: type=1400 audit(1752296994.171:341): avc: denied { create } for pid=6395 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 100.820339][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.971191][ T6400] Zero length message leads to an empty skb [ 101.238118][ T30] audit: type=1400 audit(1752296994.611:342): avc: denied { write } for pid=6395 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 101.293670][ T30] audit: type=1400 audit(1752296994.641:343): avc: denied { map } for pid=6403 comm="syz.0.108" path="socket:[9174]" dev="sockfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 101.362252][ T30] audit: type=1400 audit(1752296994.661:344): avc: denied { ioctl } for pid=6395 comm="syz.3.104" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 101.386749][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.536683][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.549626][ T6413] FAULT_INJECTION: forcing a failure. [ 101.549626][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 101.603539][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.1.110 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 101.603563][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.603571][ T6413] Call Trace: [ 101.603576][ T6413] [ 101.603582][ T6413] dump_stack_lvl+0x16c/0x1f0 [ 101.603609][ T6413] should_fail_ex+0x512/0x640 [ 101.603628][ T6413] ? __kmalloc_noprof+0xbf/0x510 [ 101.603649][ T6413] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 101.603668][ T6413] should_failslab+0xc2/0x120 [ 101.603691][ T6413] __kmalloc_noprof+0xd2/0x510 [ 101.603716][ T6413] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 101.603741][ T6413] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 101.603760][ T6413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 101.603784][ T6413] ? bpf_lsm_capable+0x9/0x10 [ 101.603800][ T6413] ? security_capable+0x7e/0x260 [ 101.603820][ T6413] ? ns_capable+0xd7/0x110 [ 101.603840][ T6413] genl_rcv_msg+0x55c/0x800 [ 101.603863][ T6413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.603881][ T6413] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 101.603902][ T6413] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 101.603918][ T6413] ? __pfx_nl80211_post_doit+0x10/0x10 [ 101.603948][ T6413] netlink_rcv_skb+0x155/0x420 [ 101.603964][ T6413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.603983][ T6413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.604010][ T6413] ? netlink_deliver_tap+0x1ae/0xd30 [ 101.604036][ T6413] genl_rcv+0x28/0x40 [ 101.604051][ T6413] netlink_unicast+0x58d/0x850 [ 101.604069][ T6413] ? __pfx_netlink_unicast+0x10/0x10 [ 101.604092][ T6413] netlink_sendmsg+0x8d1/0xdd0 [ 101.604112][ T6413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.604137][ T6413] ____sys_sendmsg+0xa98/0xc70 [ 101.604155][ T6413] ? copy_msghdr_from_user+0x10a/0x160 [ 101.604176][ T6413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.604205][ T6413] ___sys_sendmsg+0x134/0x1d0 [ 101.604226][ T6413] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.604246][ T6413] ? __lock_acquire+0x622/0x1c90 [ 101.604294][ T6413] __sys_sendmsg+0x16d/0x220 [ 101.604315][ T6413] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.604352][ T6413] do_syscall_64+0xcd/0x4c0 [ 101.604377][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.604395][ T6413] RIP: 0033:0x7f437fd8e929 [ 101.604410][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.604425][ T6413] RSP: 002b:00007f4380b31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.604440][ T6413] RAX: ffffffffffffffda RBX: 00007f437ffb5fa0 RCX: 00007f437fd8e929 [ 101.604450][ T6413] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 101.604460][ T6413] RBP: 00007f4380b31090 R08: 0000000000000000 R09: 0000000000000000 [ 101.604469][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.604478][ T6413] R13: 0000000000000000 R14: 00007f437ffb5fa0 R15: 00007ffe4733cff8 [ 101.604500][ T6413] [ 101.608535][ T30] audit: type=1400 audit(1752296994.981:345): avc: denied { connect } for pid=6414 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.615731][ T24] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/2 [ 101.694688][ T30] audit: type=1400 audit(1752296995.041:346): avc: denied { ioctl } for pid=6416 comm="syz.2.112" path="socket:[9189]" dev="sockfs" ino=9189 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.707134][ T24] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 101.807087][ T30] audit: type=1400 audit(1752296995.181:347): avc: denied { setopt } for pid=6421 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.812301][ T6424] comedi comedi1: dt2817: I/O port conflict (0x3,5) [ 102.001171][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 102.002446][ T30] audit: type=1400 audit(1752296995.381:348): avc: denied { getopt } for pid=6421 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.003926][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.004819][ T43] usb 5-1: config 7 has an invalid interface number: 204 but max is 0 [ 102.064707][ T43] usb 5-1: config 7 has no interface number 0 [ 102.073397][ T43] usb 5-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 102.089372][ T43] usb 5-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 102.105783][ T43] usb 5-1: config 7 interface 204 has no altsetting 0 [ 102.156014][ T43] usb 5-1: string descriptor 0 read error: -22 [ 102.162744][ T43] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 102.178775][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.220140][ T43] hub 5-1:7.204: bad descriptor, ignoring hub [ 102.241365][ T43] hub 5-1:7.204: probe with driver hub failed with error -5 [ 102.428960][ T43] asix 5-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 102.443447][ T5921] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 102.681418][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 102.954250][ T5921] usb 1-1: config 162 has an invalid interface number: 87 but max is 0 [ 102.970228][ T5921] usb 1-1: config 162 has no interface number 0 [ 102.979209][ T5921] usb 1-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 103.011635][ T5921] usb 1-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 103.038277][ T5921] usb 1-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 103.071643][ T5921] usb 1-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 103.082272][ T5921] usb 1-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.098656][ T5921] usb 1-1: config 162 interface 87 has no altsetting 0 [ 103.110085][ T5921] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 103.121691][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.130411][ T5921] usb 1-1: Product: syz [ 103.137178][ T5921] usb 1-1: Manufacturer: syz [ 103.143981][ T5921] usb 1-1: SerialNumber: syz [ 103.155566][ T43] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.156930][ T6430] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.186897][ T43] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 103.191106][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.361978][ T43] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.364914][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 103.372768][ T43] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 103.396282][ T9] usb 2-1: config 9 has an invalid interface number: 131 but max is 0 [ 103.408186][ T5921] pl2303 1-1:162.87: required interrupt-in endpoint missing [ 103.416207][ T9] usb 2-1: config 9 has no interface number 0 [ 103.424943][ T9] usb 2-1: config 9 interface 131 has no altsetting 0 [ 103.426239][ T5921] usb 1-1: USB disconnect, device number 10 [ 103.442947][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=c8.ec [ 103.457119][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.468055][ T9] usb 2-1: Product: syz [ 103.476289][ T9] usb 2-1: Manufacturer: syz [ 103.482179][ T9] usb 2-1: SerialNumber: syz [ 103.554424][ T43] asix 5-1:7.204 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 96:ba:c3:5f:8d:cc [ 103.783677][ T43] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 103.787394][ T9] snd-usb-caiaq 2-1:9.131: can't set alt interface. [ 103.812840][ T9] usb 2-1: unable to init card! (ret=-5) [ 103.820580][ T9] snd-usb-caiaq 2-1:9.131: probe with driver snd-usb-caiaq failed with error -5 [ 103.844925][ T9] usb 2-1: USB disconnect, device number 5 [ 103.973695][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.007366][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 104.032919][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.122'. [ 104.507955][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.546950][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.567899][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 104.567916][ T30] audit: type=1400 audit(1752296997.941:375): avc: denied { write } for pid=6477 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.669844][ T5496] asix 5-1:7.204 eth1: Failed to read reg index 0x0000: -71 [ 104.678393][ T6481] Cannot find set identified by id 0 to match [ 104.681657][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 104.823446][ T30] audit: type=1400 audit(1752296997.981:376): avc: denied { shutdown } for pid=6477 comm="syz.1.126" lport=49502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.020228][ T43] usb 5-1: USB disconnect, device number 3 [ 105.043624][ T43] asix 5-1:7.204 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 105.147124][ T43] ------------[ cut here ]------------ [ 105.152903][ T43] WARNING: CPU: 1 PID: 43 at net/sched/sch_generic.c:1498 dev_shutdown+0x3c1/0x430 [ 105.162855][ T43] Modules linked in: [ 105.162897][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 105.178787][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.188880][ T43] Workqueue: usb_hub_wq hub_event [ 105.193929][ T43] RIP: 0010:dev_shutdown+0x3c1/0x430 [ 105.199352][ T43] Code: 48 c7 c2 40 a1 e7 8c be a3 00 00 00 48 c7 c7 00 a6 e7 8c c6 05 b9 fe 0d 07 01 e8 4a 7d 14 f8 e9 8f fd ff ff e8 20 36 38 f8 90 <0f> 0b 90 e9 5f fe ff ff 4c 89 f7 e8 af 11 9f f8 e9 6c fc ff ff 4c [ 105.219818][ T43] RSP: 0018:ffffc90000b37430 EFLAGS: 00010287 [ 105.225915][ T43] RAX: 0000000000020d21 RBX: ffff888053a404c8 RCX: ffffc900194d8000 [ 105.234219][ T43] RDX: 0000000000100000 RSI: ffffffff8983c0f0 RDI: ffff888053a405a8 [ 105.242429][ T43] RBP: ffff888053a40000 R08: 0000000000000005 R09: 0000000000000000 [ 105.250430][ T43] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888053a40478 [ 105.258615][ T43] R13: ffffed100a748003 R14: ffff888053a404c0 R15: 0000000000000001 [ 105.266648][ T43] FS: 0000000000000000(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 105.275609][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.282295][ T43] CR2: 000020000001e000 CR3: 000000005b228000 CR4: 00000000003526f0 [ 105.290270][ T43] Call Trace: [ 105.293598][ T43] [ 105.296545][ T43] unregister_netdevice_many_notify+0xb3c/0x2700 [ 105.302914][ T43] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 105.309693][ T43] ? irqentry_exit+0x3b/0x90 [ 105.314305][ T43] ? unregister_netdevice_queue+0x89/0x3f0 [ 105.320118][ T43] unregister_netdevice_queue+0x305/0x3f0 [ 105.326216][ T43] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 105.332678][ T43] ? rtnl_net_dev_lock+0x28/0x360 [ 105.337715][ T43] ? rtnl_net_dev_lock+0x146/0x360 [ 105.342838][ T43] ? rtnl_lock+0x9/0x20 [ 105.347000][ T43] ? rtnl_net_dev_lock+0x146/0x360 [ 105.352138][ T43] unregister_netdev+0x1f/0x60 [ 105.356901][ T43] usbnet_disconnect+0x109/0x500 [ 105.361865][ T43] usb_unbind_interface+0x1dd/0x9a0 [ 105.367067][ T43] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 105.372713][ T43] ? __pfx_usb_unbind_interface+0x10/0x10 [ 105.378431][ T43] device_remove+0x125/0x170 [ 105.383305][ T43] device_release_driver_internal+0x44b/0x620 [ 105.389381][ T43] bus_remove_device+0x22f/0x420 [ 105.394337][ T43] device_del+0x396/0x9f0 [ 105.398669][ T43] ? __pfx_device_del+0x10/0x10 [ 105.403538][ T43] ? __pfx___mutex_lock+0x10/0x10 [ 105.408558][ T43] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 105.414288][ T43] ? do_raw_spin_lock+0x12c/0x2b0 [ 105.419310][ T43] usb_disable_device+0x355/0x7d0 [ 105.424682][ T43] usb_disconnect+0x2e1/0x9c0 [ 105.429603][ T43] hub_event+0x1c57/0x4fa0 [ 105.434056][ T43] ? __lock_acquire+0xb8a/0x1c90 [ 105.438993][ T43] ? __pfx_hub_event+0x10/0x10 [ 105.443787][ T43] ? ioread8+0xa0/0xa0 [ 105.447848][ T43] ? finish_task_switch.isra.0+0x221/0xc10 [ 105.453698][ T43] ? rcu_is_watching+0x12/0xc0 [ 105.458461][ T43] process_one_work+0x9cf/0x1b70 [ 105.463484][ T43] ? __pfx_process_one_work+0x10/0x10 [ 105.468863][ T43] ? assign_work+0x1a0/0x250 [ 105.473466][ T43] worker_thread+0x6c8/0xf10 [ 105.478052][ T43] ? __kthread_parkme+0x19e/0x250 [ 105.483096][ T43] ? __pfx_worker_thread+0x10/0x10 [ 105.488215][ T43] kthread+0x3c5/0x780 [ 105.492311][ T43] ? __pfx_kthread+0x10/0x10 [ 105.496902][ T43] ? rcu_is_watching+0x12/0xc0 [ 105.501698][ T43] ? __pfx_kthread+0x10/0x10 [ 105.506279][ T43] ret_from_fork+0x5d7/0x6f0 [ 105.510939][ T43] ? __pfx_kthread+0x10/0x10 [ 105.515555][ T43] ret_from_fork_asm+0x1a/0x30 [ 105.520312][ T43] [ 105.523333][ T43] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.530592][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 105.542460][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.552494][ T43] Workqueue: usb_hub_wq hub_event [ 105.557510][ T43] Call Trace: [ 105.560765][ T43] [ 105.563674][ T43] dump_stack_lvl+0x3d/0x1f0 [ 105.568245][ T43] panic+0x71c/0x800 [ 105.572126][ T43] ? __pfx_panic+0x10/0x10 [ 105.576525][ T43] ? show_trace_log_lvl+0x29b/0x3e0 [ 105.581710][ T43] ? dev_shutdown+0x3c1/0x430 [ 105.586378][ T43] check_panic_on_warn+0xab/0xb0 [ 105.591300][ T43] __warn+0xf6/0x3c0 [ 105.595171][ T43] ? dev_shutdown+0x3c1/0x430 [ 105.599829][ T43] report_bug+0x3c3/0x580 [ 105.604138][ T43] ? dev_shutdown+0x3c1/0x430 [ 105.608796][ T43] handle_bug+0x184/0x210 [ 105.613111][ T43] exc_invalid_op+0x17/0x50 [ 105.617590][ T43] asm_exc_invalid_op+0x1a/0x20 [ 105.622416][ T43] RIP: 0010:dev_shutdown+0x3c1/0x430 [ 105.627680][ T43] Code: 48 c7 c2 40 a1 e7 8c be a3 00 00 00 48 c7 c7 00 a6 e7 8c c6 05 b9 fe 0d 07 01 e8 4a 7d 14 f8 e9 8f fd ff ff e8 20 36 38 f8 90 <0f> 0b 90 e9 5f fe ff ff 4c 89 f7 e8 af 11 9f f8 e9 6c fc ff ff 4c [ 105.647276][ T43] RSP: 0018:ffffc90000b37430 EFLAGS: 00010287 [ 105.653334][ T43] RAX: 0000000000020d21 RBX: ffff888053a404c8 RCX: ffffc900194d8000 [ 105.661293][ T43] RDX: 0000000000100000 RSI: ffffffff8983c0f0 RDI: ffff888053a405a8 [ 105.669259][ T43] RBP: ffff888053a40000 R08: 0000000000000005 R09: 0000000000000000 [ 105.677216][ T43] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888053a40478 [ 105.685249][ T43] R13: ffffed100a748003 R14: ffff888053a404c0 R15: 0000000000000001 [ 105.693302][ T43] ? dev_shutdown+0x3c0/0x430 [ 105.697973][ T43] unregister_netdevice_many_notify+0xb3c/0x2700 [ 105.704295][ T43] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 105.711039][ T43] ? irqentry_exit+0x3b/0x90 [ 105.715617][ T43] ? unregister_netdevice_queue+0x89/0x3f0 [ 105.721412][ T43] unregister_netdevice_queue+0x305/0x3f0 [ 105.727118][ T43] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 105.733344][ T43] ? rtnl_net_dev_lock+0x28/0x360 [ 105.738361][ T43] ? rtnl_net_dev_lock+0x146/0x360 [ 105.743451][ T43] ? rtnl_lock+0x9/0x20 [ 105.747597][ T43] ? rtnl_net_dev_lock+0x146/0x360 [ 105.752697][ T43] unregister_netdev+0x1f/0x60 [ 105.757443][ T43] usbnet_disconnect+0x109/0x500 [ 105.762378][ T43] usb_unbind_interface+0x1dd/0x9a0 [ 105.767559][ T43] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 105.773166][ T43] ? __pfx_usb_unbind_interface+0x10/0x10 [ 105.778863][ T43] device_remove+0x125/0x170 [ 105.783435][ T43] device_release_driver_internal+0x44b/0x620 [ 105.789484][ T43] bus_remove_device+0x22f/0x420 [ 105.794400][ T43] device_del+0x396/0x9f0 [ 105.798712][ T43] ? __pfx_device_del+0x10/0x10 [ 105.803540][ T43] ? __pfx___mutex_lock+0x10/0x10 [ 105.808545][ T43] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 105.814246][ T43] ? do_raw_spin_lock+0x12c/0x2b0 [ 105.819250][ T43] usb_disable_device+0x355/0x7d0 [ 105.824256][ T43] usb_disconnect+0x2e1/0x9c0 [ 105.828926][ T43] hub_event+0x1c57/0x4fa0 [ 105.833359][ T43] ? __lock_acquire+0xb8a/0x1c90 [ 105.838298][ T43] ? __pfx_hub_event+0x10/0x10 [ 105.843039][ T43] ? ioread8+0xa0/0xa0 [ 105.847089][ T43] ? finish_task_switch.isra.0+0x221/0xc10 [ 105.852881][ T43] ? rcu_is_watching+0x12/0xc0 [ 105.857624][ T43] process_one_work+0x9cf/0x1b70 [ 105.862559][ T43] ? __pfx_process_one_work+0x10/0x10 [ 105.867919][ T43] ? assign_work+0x1a0/0x250 [ 105.872498][ T43] worker_thread+0x6c8/0xf10 [ 105.877086][ T43] ? __kthread_parkme+0x19e/0x250 [ 105.882125][ T43] ? __pfx_worker_thread+0x10/0x10 [ 105.887260][ T43] kthread+0x3c5/0x780 [ 105.891339][ T43] ? __pfx_kthread+0x10/0x10 [ 105.895910][ T43] ? rcu_is_watching+0x12/0xc0 [ 105.900659][ T43] ? __pfx_kthread+0x10/0x10 [ 105.905239][ T43] ret_from_fork+0x5d7/0x6f0 [ 105.909815][ T43] ? __pfx_kthread+0x10/0x10 [ 105.914466][ T43] ret_from_fork_asm+0x1a/0x30 [ 105.919215][ T43] [ 105.922425][ T43] Kernel Offset: disabled [ 105.926756][ T43] Rebooting in 86400 seconds..