last executing test programs: 2m53.636508572s ago: executing program 2 (id=335): syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='7', 0x1, 0x4000800, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x1}, 0x10) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000480)={0x0, 0x18c2, 0x842, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x43}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x20000, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x2000, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r3, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) 2m51.405472711s ago: executing program 2 (id=339): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x13, 0x8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000001050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080008400000001008"], 0x64}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) sendmmsg$sock(r4, &(0x7f0000004100), 0x0, 0x0) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) 2m49.112605265s ago: executing program 2 (id=345): socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000008037000100ffffffff9500000000000000b595b6a813e1e431d34f5fd56ff072f30ddfcb20a24c7af4d99ba71b1fbfbd84c962e2c7db755c03f3436fc2bf269a35f81e6558c19e8a6f9e7268d95b321cc51e68703acd8dc78e5766d3fdcdebc4b6bc4c0d1f8712d39640c2bed64e7e0463c77171813a7c8319febb5e76c15160526fe4c93d1603a289c7ad59e7b00bc3a78e4bbd57ca15068ad560e203c80298b8e0dbb790fd780a18c42ae8c9586393e8faea665295ddaf54fc56c7670d9df628942d77bf6259d0786faa9baba2bab2207af7e63a06486069aa4deaaef99af2f5"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='@A', @ANYRES32=r4], 0xe) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000304000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000540)={0x3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f0000000180), &(0x7f00000002c0)=""/88}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=""/15, 0x2}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x3, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x20042000) 2m46.648519381s ago: executing program 2 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, 0x0, 0x58) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4000003e, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) 2m46.128080073s ago: executing program 2 (id=352): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x18, 0x5a, 0x1, 0x70bd2f, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 2m44.493726105s ago: executing program 2 (id=356): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000000) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000280), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x8ce}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000280)={0x17, 0x4, 0x9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) syz_usb_connect(0x2, 0x38, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x58}}, 0x4080) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 2m44.072754265s ago: executing program 32 (id=356): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000000) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000280), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x8ce}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000280)={0x17, 0x4, 0x9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) syz_usb_connect(0x2, 0x38, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x58}}, 0x4080) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 24.66563797s ago: executing program 0 (id=779): chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) eventfd2(0x6, 0x80000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x31, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1686dd6a010000004d1100fc020000000000000000000000000000ff0200000000000000000000000000014e214e20004d90782106000133b2a542051b74be3907979ce2879340100d1e387ca22f0815f193ccec51b9b64e39ba02a195f3b1d7b543b4c9a617f24abc490a71514028be4aaadea900000000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x38, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x5, 0xff20, 0x4, 0x7fff, 0x0, 0x8]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x50811}, 0x44002) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f0000000080)=ANY=[], 0x1001) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 19.091727216s ago: executing program 0 (id=798): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_emit_vhci(0x0, 0x7) write(0xffffffffffffffff, &(0x7f0000000000)="3210f83f5a51ebbd6ba159225a3d82631ccd03a69e7b", 0x16) 18.787547722s ago: executing program 0 (id=800): fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 17.933806455s ago: executing program 0 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 17.101266603s ago: executing program 0 (id=808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$loop(&(0x7f00000000c0), 0x592b, 0x8800) msgsnd(0x0, 0xfffffffffffffffd, 0x0, 0x800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2, 0x3, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) (fail_nth: 3) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x404, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) syz_open_dev$hidraw(0x0, 0x2, 0x4d8800) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000040)={0x1, 0x7}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="000186dd0610000100040000000000000000000000000003000000aaaabb20010000000000000000000000000002000000000000"], 0x34) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000000f00)=""/102400, 0x19000) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 9.145731248s ago: executing program 1 (id=816): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x102) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB]) 8.309063139s ago: executing program 0 (id=821): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) openat$ptp0(0xffffffffffffff9c, &(0x7f000000c2c0), 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) fstatfs(r7, 0x0) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ubifs\x00', 0x4, &(0x7f0000000340)='&?\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) read$FUSE(r8, &(0x7f00000041c0)={0x2020}, 0x2024) brk(0x9) 7.819431647s ago: executing program 33 (id=821): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) openat$ptp0(0xffffffffffffff9c, &(0x7f000000c2c0), 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) fstatfs(r7, 0x0) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ubifs\x00', 0x4, &(0x7f0000000340)='&?\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) read$FUSE(r8, &(0x7f00000041c0)={0x2020}, 0x2024) brk(0x9) 7.81354306s ago: executing program 1 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x3000) (async) socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 7.522941706s ago: executing program 5 (id=826): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8d06, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000000)={0x20, 0x5, 0x6}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x100000000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x110, r0, 0x46f28000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') getrandom(&(0x7f0000000740)=""/286, 0xae, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndpcmc(0x0, 0x1, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x80000000000003) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x100000000000000) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 6.594926342s ago: executing program 5 (id=827): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$packet(0x11, 0x3, 0x300) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x800) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0x78) fcntl$addseals(r2, 0x409, 0x8) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='udf\x00', 0x8000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) socket(0x8, 0x2, 0x5) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x90) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r5) socket$nl_generic(0x10, 0x3, 0x10) 5.482373773s ago: executing program 3 (id=830): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result={0x0, 0xfffffffe}}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x70) 5.320020577s ago: executing program 3 (id=831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000102000/0x4000)=nil, 0x3) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) sendmsg$inet6(r4, &(0x7f0000001280)={&(0x7f0000000140)={0xa, 0x4e23, 0x2, @private0, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="bb", 0x1}], 0x1}, 0x80) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000340)="1e4b8d298809dd12a9db95214e74b1e14dd393de5fca46c931fea12f6aa7dc55507bcd07b33413f2534f0bd4103e14e74b7270a7fca3dd2165304f127a2d5ffd16506167cfc95482fcf5d2124677632017d15af7c21a", 0x56}, {&(0x7f0000000400)="b2353a5da1c747f64e0200f8df338e04b26ada46d9eb175a391fc1d7c2b35199058404845a7e8125881e9f40fb9f837ddca2c075", 0x34}, {&(0x7f0000000480)="f0190efce78dd844a56a50b9", 0xc}, {&(0x7f00000004c0)="1fd6fb750100c19b54a5de3e69fc41891227291fdb682203e6c1b2e945a7a7b40b8ef1ab470257d4a75707cf37649eef586a814f120f0810147a78d29740eb", 0x3f}, {&(0x7f0000000500)="cdbb540730becc70dd9e439c94e3315e5d6b3bc978d80d8b34969ed6022604a02cfbc055134ff24308b0edf3950e4dd02d26d5b43170b6e3fa4b8195fe24b88f26d67775d21a5e12347dcfecb8c17d51ed062d5fba55c831e8c096f9ad3489ab53bedb59716ad553c291486b804df2", 0x6f}, {&(0x7f0000000600)}, {0x0}], 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl(r11, 0x40186f40, &(0x7f0000000300)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.082443874s ago: executing program 1 (id=832): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) connect$bt_l2cap(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x40, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x93, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xe0, 0x5, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x1, 0x2, {0x9, 0x21, 0x4334, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x81, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x9, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) fsopen(&(0x7f0000000100)='erofs\x00', 0x1) 4.650383301s ago: executing program 4 (id=833): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/83, 0x53}], 0x1, 0x401, 0xffff96f1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @alu={0x4, 0x1, 0x3, 0x0, 0x1, 0x7d59ec112afe8ac2, 0xffffffffffffffff}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 4.637903338s ago: executing program 3 (id=834): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) 4.353216228s ago: executing program 4 (id=835): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10122, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x20, r3, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x400, 0x9, 0x8, 0x6}) 4.266320135s ago: executing program 5 (id=836): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x13, 0x8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000001050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000140007800800084000000010080012"], 0x64}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) sendmmsg$sock(r4, &(0x7f0000004100), 0x0, 0x0) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x2a18005, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) 3.978271268s ago: executing program 4 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a010400000000000000000700000009"], 0xdc}}, 0x0) sendto$inet(r1, &(0x7f0000000200)="0008000000000102", 0x2c, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x1000000, 0x0, 0x0) 3.932561062s ago: executing program 3 (id=838): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0xa, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="0100fe0fff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e074f0220"], 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r5, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') 2.71663993s ago: executing program 4 (id=839): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000002c0)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x0, 0x10, @buffer={0x20, 0x0, 0x0}, 0x0, 0x0, 0x100004, 0xf5, 0x3, 0x0}) r3 = msgget$private(0x0, 0x1) msgsnd(r3, &(0x7f0000000000)={0x2, "be9b3222cbe5a8e9b078a860e72da9ccddd8440174d6d85561b2d6b1fe60fefab09d73c320b604989834b71105a0a250c581bafca34892e0d4f0a3bd36fd3799e5311d68ecbf31ef14de0ed6a37507c5ca37"}, 0x5a, 0x800) 2.576550603s ago: executing program 4 (id=840): socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='@A', @ANYRES32=r4], 0xe) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000540)={0x3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f0000000180), &(0x7f00000002c0)=""/88}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=""/15, 0x2}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x3, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x20042000) 2.345196486s ago: executing program 5 (id=841): capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result={0x0, 0xfffffffe}}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x70) 2.250621816s ago: executing program 5 (id=842): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000280)=""/3, 0x3}], 0x1, 0x9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 2.18165478s ago: executing program 3 (id=843): socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000008037000100ffffffff9500000000000000b595b6a813e1e431d34f5fd56ff072f30ddfcb20a24c7af4d99ba71b1fbfbd84c962e2c7db755c03f3436fc2bf269a35f81e6558c19e8a6f9e7268d95b321cc51e68703acd8dc78e5766d3fdcdebc4b6bc4c0d1f8712d39640c2bed64e7e0463c77171813a7c8319febb5e76c15160526fe4c93d1603a289c7ad59e7b00bc3a78e4bbd57ca15068ad560e203c80298b8e0dbb790fd780a18c42ae8c9586393e8faea665295ddaf54fc56c7670d9df628942d77bf6259d0786faa9baba2bab2207af7e63a06486069aa4deaaef99af2f5"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='@A', @ANYRES32=r4], 0xe) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000304000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000540)={0x3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f0000000180), &(0x7f00000002c0)=""/88}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=""/15, 0x2}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x3, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x20042000) 1.209970285s ago: executing program 1 (id=844): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000000) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000280), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x8ce}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000280)={0x17, 0x4, 0x9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) syz_usb_connect(0x2, 0x38, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x58}}, 0x4080) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 934.15372ms ago: executing program 5 (id=845): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1000) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, r4, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, 0x0) process_madvise(r3, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000300)="8cb4083cfae80d23150dcc32067acea70ae1a37e85", 0x15}, {&(0x7f0000000400)}, {&(0x7f0000000500)="dde9e2ab75ecab8c8577585d03c73fc1a0d01dfe10bc11a5f1b4da9c3e01364458e3dc22935598c62776db8cd71940c02f5dbcb9cfff35caeefe122c9d8b680b6cdb47c37f75bc58ff485c7544a2e51f9c03df644b", 0x55}, {&(0x7f00000005c0)="d76599f6f907c3c46292640e0a6067b8a34e733b95bf39549143959b40f2598bc3acb6289df71bd52b33392994373314ce61405e5e421d8298fde635dfa34898279b877e81802c0c01ac2b5deb9544cea09a7f857507b9b9f87baace8aa9cbd6c825bde0d950d43e89c963baa31ecbe3874dda2613a40d3f7b6947a79cb6f7b98014a66293afcd", 0x87}, {&(0x7f0000000680)}], 0x6, 0x13, 0x0) openat(0xffffffffffffffff, 0x0, 0x42, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000001c0)=0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) timer_settime(r7, 0x0, 0x0, &(0x7f0000000140)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 768.36419ms ago: executing program 4 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) (fail_nth: 8) 338.041935ms ago: executing program 1 (id=847): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') openat(r0, &(0x7f0000000180)='rpc/auth.unix.ip/channel\x00', 0xa802, 0x32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x80000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 197.397025ms ago: executing program 1 (id=848): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r9, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r12, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0xdd, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_connmark={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0xffff, 0xfffffff9, 0x4, 0x6, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x3, 0x8000, 0x6, 0x5, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x1, 0xe7, 0xffffffffeffffff9, 0x27, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x6, 0x3, 0xfffffffffffffff9, 0x7fff, 0x1be076de}, 0x4}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0xe, 0x245, 0x3, 0xffffff7f, 0x5}, 0x2}}]}, {0x0, 0x6, "08145f8db41b418d1b3ea74f26bce4b96231e7422fccef06e4b24b6be18a7e58c6e9f09fa64c3c2856748c161d45158092f8df9ef3474e615cc324a4c0d6906eff34d9fda243aaece27087801c6be29ab3afccf517d5764148113d6391872220f23b07d383f3bbe5aa0225b08755905940805460bacf1f4c56f80f105f111365c41c1c4d5daa02d416bac5f51bce1a027b67b57b64b3a6cd605eb4a9e406ba1770770368c2ee295e032bc9b7988d351a05c1aba06364d126eafe51b90615476aba12228451322ab3c54bafb4882e8e8fccd549a03b0f239e3b7e8e9e0b2cda5367102b1e6e951857"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_connmark={0x0, 0x14, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x7ff, 0xa, 0x8, 0x94, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0xca7, 0x7, 0x10000000, 0x2, 0xb8}, 0x3}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x1, 0x6, 0x1, 0xfffffffb, 0x8b58}, 0x1}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x8, 0x9, 0x4, 0xe17, 0x9}, 0xf801}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x3883, 0xe, 0x7, 0x8, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x6, 0x1, 0x7, 0x4, 0x80}, 0x81}}]}, {0x0, 0x6, "1b7dd5c7888111409cecff13dbe3a7b08b2f2039d056c3656629edcd484a91fccb77ca405d9617fa4174a7a4358370105797309bf9ef8735003ddbec9d555b13f568e1e57405c18ee268179ea6c56430ce52cf5c4c3cfd918a394c946a9ca829978a7f3b5e4d0ad05539caab0f2b1aa614f0b70a2221e7cb37d1ce1ed8b8d21b44e0e7281e778e6baeeceecf"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x0, 0x12, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x0, 0x4, 0xd}]}, {0x0, 0x6, "d6a5b5c5b82124080e344449c73c79f27c22bccbd4cc030c1d655eb87e74efb6b8a738a0ba2939ffdc87c01d4293e1d700e46964253bbadf73809fe8b819b138f23510077b45dbd8f35138a9cdd10605d587830b155d560a37210fca7bad94a8df6acfe32ff62a8f8c0c4a9f29d003737a7f23ab1f7b366c19878e9362db9142fdc873caa90ec08389a01ac41344a35b5b75ff1bf6fded5438edcf8c2635d616c16dad9c073d821a07759b73c3160b8102854ab81b401bdc268a685049bf275f3877c6e4318e723144ac0ce1c016301ae933e170ab434928cd9c22dc676e6c7417d82de5ae69de2be409cf429b74c7a61c4149fbc50d5206f8c279b50b95"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_mpls={0x0, 0x20, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x0, 0x2, {{0x9, 0x9, 0xffffffffffffffff, 0x8, 0x4}, 0x4}}, @TCA_MPLS_TC={0x0, 0x6, 0x7}, @TCA_MPLS_TTL={0x0, 0x7, 0xd0}]}, {0x0, 0x6, "31c1ca82ac58908f70546d491f93227af6481817ec5a8d80c27e856932617bf0b8999f9101611e39ed2d2a56c2ea42548f477ed649049ae0b6b013587e3e03268b4b1736bdabfc5336b613021e61536a7813d27ee0b01f70dce76bbb40047296a24f4cdc14ccadc0688d24abc4b5948abc4d1273e737063aef4ad7b4d6e04d64b0c37aa09665cb2dad15b3"}, {}, {0x0, 0x8, {0x0, 0x2}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 0s ago: executing program 3 (id=849): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000540)="703a732f70202e2f66696c65303a300c24fed2849287cddd1218bf84bfffd25dd05a7c036beac8bce2c54fc7c1618e9d8e21fa8d119612ee2c553aa53d", 0x3d) (fail_nth: 8) kernel console output (not intermixed with test programs): USB device number 36 using dummy_hcd [ 278.661171][ T6953] usb 1-1: Using ep0 maxpacket: 32 [ 278.666769][ T6953] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 278.684859][ T6953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.684884][ T6953] usb 1-1: Product: syz [ 278.684912][ T6953] usb 1-1: Manufacturer: syz [ 278.684922][ T6953] usb 1-1: SerialNumber: syz [ 278.716361][ T6953] usb 1-1: config 0 descriptor?? [ 278.738878][ T6953] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 278.749789][ T6953] dvb-usb: bulk message failed: -22 (4/0) [ 278.769485][ T6953] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 278.769564][ T6953] dvb-usb: bulk message failed: -22 (5/0) [ 278.801638][ T6953] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 278.837471][ T6953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.850342][ T6953] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 278.909266][ T6953] usb 1-1: media controller created [ 278.984750][ T6953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.084955][ T6953] usb 1-1: selecting invalid altsetting 3 [ 279.091507][ T6953] ttusb2: set interface to alts=3 failed [ 279.126636][ T30] audit: type=1400 audit(1788396243.068:512): avc: denied { write } for pid=8318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.178382][ T8072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.239300][ T6953] DVB: Unable to find symbol tda10086_attach() [ 279.247188][ T6953] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 279.259474][ T6953] dvb-usb: bulk message failed: -22 (4/0) [ 279.259493][ T6953] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 279.259545][ T6953] dvb-usb: bulk message failed: -22 (5/0) [ 279.259554][ T6953] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 279.259582][ T6953] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 279.317082][ T6953] usb 1-1: USB disconnect, device number 36 [ 279.507046][ T6953] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 280.246328][ T8354] can0: slcan on ttyS3. [ 280.303955][ T30] audit: type=1400 audit(1788396244.248:513): avc: denied { write } for pid=8353 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.327235][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 280.434590][ T8350] can0 (unregistered): slcan off ttyS3. [ 280.507112][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.507148][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 280.529054][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.541752][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.541775][ T9] usb 4-1: Product: syz [ 280.541789][ T9] usb 4-1: Manufacturer: syz [ 280.541799][ T9] usb 4-1: SerialNumber: syz [ 280.568966][ T9] usb 4-1: config 0 descriptor?? [ 280.578552][ T9] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 281.195942][ T6953] usb 4-1: USB disconnect, device number 14 [ 281.277770][ T8360] Invalid logical block size (1792) [ 281.424259][ T30] audit: type=1400 audit(1788396245.368:514): avc: denied { getopt } for pid=8361 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 282.411649][ T8377] netlink: 156 bytes leftover after parsing attributes in process `syz.1.545'. [ 282.445262][ T8072] veth0_vlan: entered promiscuous mode [ 282.462605][ T6953] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 282.484127][ T8072] veth1_vlan: entered promiscuous mode [ 282.646665][ T8072] veth0_macvtap: entered promiscuous mode [ 282.657946][ T6953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.666118][ T6953] usb 5-1: not running at top speed; connect to a high speed hub [ 282.666137][ T6953] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 282.693921][ T6953] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.705388][ T8072] veth1_macvtap: entered promiscuous mode [ 282.717031][ T6953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.717055][ T6953] usb 5-1: Product: syz [ 282.717069][ T6953] usb 5-1: Manufacturer: syz [ 282.717079][ T6953] usb 5-1: SerialNumber: syz [ 283.280466][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.308808][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.385689][ T6953] peak_usb 5-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 283.396424][ T6953] peak_usb 5-1:1.0: unable to read PCAN-USB serial number (err -22) [ 283.404649][ T6279] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.404677][ T6279] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.404695][ T6279] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.404712][ T6279] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.522760][ T6953] peak_usb 5-1:1.0: probe with driver peak_usb failed with error -22 [ 283.546481][ T6953] usb 5-1: USB disconnect, device number 21 [ 283.646383][ T30] audit: type=1400 audit(1788396247.588:515): avc: denied { write } for pid=8364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.766207][ T6279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.766229][ T6279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.857754][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.857777][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.993112][ T30] audit: type=1400 audit(1788396247.938:516): avc: denied { write } for pid=8397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.245197][ T8402] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 284.245214][ T8402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.245268][ T8402] vhci_hcd vhci_hcd.0: Device attached [ 284.272523][ T8407] vhci_hcd: connection closed [ 284.279523][ T6288] vhci_hcd vhci_hcd.5: stop threads [ 284.279554][ T6288] vhci_hcd vhci_hcd.5: release socket [ 284.279567][ T6288] vhci_hcd vhci_hcd.5: disconnect device [ 284.320122][ T30] audit: type=1400 audit(1788396248.258:517): avc: denied { setopt } for pid=8404 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 284.515641][ T30] audit: type=1400 audit(1788396248.458:518): avc: denied { open } for pid=8393 comm="syz.3.550" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 284.839422][ T30] audit: type=1400 audit(1788396248.778:519): avc: denied { accept } for pid=8420 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 284.918427][ T8439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8439 comm=syz.1.549 [ 285.009880][ T30] audit: type=1400 audit(1788396248.948:520): avc: denied { write } for pid=8405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.080095][ T30] audit: type=1400 audit(1788396249.018:521): avc: denied { read } for pid=8420 comm="syz.1.549" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 285.080141][ T30] audit: type=1400 audit(1788396249.018:522): avc: denied { open } for pid=8420 comm="syz.1.549" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 285.201695][ T5713] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 285.290271][ T30] audit: type=1400 audit(1788396249.228:523): avc: denied { write } for pid=8450 comm="syz.4.559" name="sg0" dev="devtmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.290314][ T30] audit: type=1400 audit(1788396249.228:524): avc: denied { open } for pid=8450 comm="syz.4.559" path="/dev/sg0" dev="devtmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.340991][ T5713] usb 1-1: device descriptor read/64, error -71 [ 285.395146][ T8451] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 285.395177][ T8451] batman_adv: batadv0: Removing interface: ip6gretap1 [ 285.577211][ T5713] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 285.721231][ T5713] usb 1-1: device descriptor read/64, error -71 [ 285.833531][ T5713] usb usb1-port1: attempt power cycle [ 285.873955][ T8468] FAULT_INJECTION: forcing a failure. [ 285.873955][ T8468] name failslab, interval 1, probability 0, space 0, times 0 [ 285.873986][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.4.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.874002][ T8468] Tainted: [L]=SOFTLOCKUP [ 285.874006][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 285.874014][ T8468] Call Trace: [ 285.874018][ T8468] [ 285.874023][ T8468] dump_stack_lvl+0x100/0x190 [ 285.874043][ T8468] should_fail_ex.cold+0x5/0xa [ 285.874065][ T8468] should_failslab+0xc2/0x120 [ 285.874080][ T8468] __kmalloc_noprof+0xfc/0x840 [ 285.874091][ T8468] ? tomoyo_encode2+0xfb/0x3c0 [ 285.874107][ T8468] tomoyo_encode2+0xfb/0x3c0 [ 285.874125][ T8468] tomoyo_encode+0x29/0x50 [ 285.874136][ T8468] tomoyo_realpath_from_path+0x18c/0x690 [ 285.874152][ T8468] tomoyo_path_number_perm+0x23c/0x580 [ 285.874168][ T8468] ? tomoyo_path_number_perm+0x22e/0x580 [ 285.874185][ T8468] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.874205][ T8468] ? find_held_lock+0x2b/0x80 [ 285.874221][ T8468] ? d_splice_alias_ops+0x626/0x15b0 [ 285.874242][ T8468] ? current_check_access_path+0x262/0x420 [ 285.874257][ T8468] ? __pfx_current_check_access_path+0x10/0x10 [ 285.874270][ T8468] ? do_raw_spin_unlock+0x145/0x1e0 [ 285.874285][ T8468] ? simple_lookup+0xfc/0x1d0 [ 285.874297][ T8468] ? lookup_one_qstr_excl+0xaf/0x250 [ 285.874314][ T8468] tomoyo_path_mkdir+0x9b/0xe0 [ 285.874327][ T8468] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 285.874340][ T8468] ? lock_acquire+0x1d1/0x380 [ 285.874353][ T8468] security_path_mkdir+0x154/0x2e0 [ 285.874367][ T8468] filename_mkdirat+0x168/0x5e0 [ 285.874382][ T8468] ? __pfx_filename_mkdirat+0x10/0x10 [ 285.874396][ T8468] ? strncpy_from_user+0x19d/0x2d0 [ 285.874414][ T8468] ? do_getname+0x191/0x390 [ 285.874430][ T8468] __x64_sys_mkdirat+0x89/0xc0 [ 285.874444][ T8468] do_syscall_64+0x123/0x790 [ 285.874458][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.874469][ T8468] RIP: 0033:0x7f7c2db9e159 [ 285.874479][ T8468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.874489][ T8468] RSP: 002b:00007f7c2bdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 285.874501][ T8468] RAX: ffffffffffffffda RBX: 00007f7c2de25fa0 RCX: 00007f7c2db9e159 [ 285.874508][ T8468] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 285.874514][ T8468] RBP: 00007f7c2dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 285.874521][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.874527][ T8468] R13: 00007f7c2de26038 R14: 00007f7c2de25fa0 R15: 00007ffebb4e4af8 [ 285.874542][ T8468] [ 285.932965][ T8468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.204678][ T5713] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 286.231699][ T5713] usb 1-1: device descriptor read/8, error -71 [ 286.471665][ T5713] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 286.495040][ T5713] usb 1-1: device descriptor read/8, error -71 [ 286.606857][ T5713] usb usb1-port1: unable to enumerate USB device [ 287.624330][ T8493] FAULT_INJECTION: forcing a failure. [ 287.624330][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 287.624359][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.1.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.624375][ T8493] Tainted: [L]=SOFTLOCKUP [ 287.624379][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.624385][ T8493] Call Trace: [ 287.624389][ T8493] [ 287.624393][ T8493] dump_stack_lvl+0x100/0x190 [ 287.624413][ T8493] should_fail_ex.cold+0x5/0xa [ 287.624429][ T8493] should_failslab+0xc2/0x120 [ 287.624442][ T8493] __kmalloc_cache_noprof+0x91/0x6d0 [ 287.624457][ T8493] ? lock_acquire+0x1d1/0x380 [ 287.624468][ T8493] ? tty_alloc_file+0x3f/0xa0 [ 287.624481][ T8493] ? __pfx_ptmx_open+0x10/0x10 [ 287.624496][ T8493] tty_alloc_file+0x3f/0xa0 [ 287.624506][ T8493] ptmx_open+0x61/0x360 [ 287.624520][ T8493] ? __pfx_ptmx_open+0x10/0x10 [ 287.624534][ T8493] chrdev_open+0x234/0x6a0 [ 287.624547][ T8493] ? __pfx_chrdev_open+0x10/0x10 [ 287.624560][ T8493] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 287.624578][ T8493] do_dentry_open+0x6ab/0x14d0 [ 287.624588][ T8493] ? __pfx_chrdev_open+0x10/0x10 [ 287.624602][ T8493] vfs_open+0x82/0x3f0 [ 287.624617][ T8493] path_openat+0x19fa/0x2440 [ 287.624632][ T8493] ? __pfx_path_openat+0x10/0x10 [ 287.624647][ T8493] do_file_open+0x20e/0x430 [ 287.624661][ T8493] ? __pfx_do_file_open+0x10/0x10 [ 287.624682][ T8493] ? _raw_spin_unlock+0x28/0x50 [ 287.624699][ T8493] ? alloc_fd+0x471/0x7a0 [ 287.624715][ T8493] do_sys_openat2+0x10f/0x1e0 [ 287.624729][ T8493] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.624743][ T8493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.624756][ T8493] ? __fget_files+0x21f/0x3d0 [ 287.624770][ T8493] __x64_sys_openat+0x12d/0x210 [ 287.624784][ T8493] ? __pfx___x64_sys_openat+0x10/0x10 [ 287.624797][ T8493] ? ksys_write+0x1ac/0x250 [ 287.624811][ T8493] do_syscall_64+0x123/0x790 [ 287.624825][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.624836][ T8493] RIP: 0033:0x7fadce39e159 [ 287.624845][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.624856][ T8493] RSP: 002b:00007fadcf1b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.624867][ T8493] RAX: ffffffffffffffda RBX: 00007fadce625fa0 RCX: 00007fadce39e159 [ 287.624874][ T8493] RDX: 0000000000060680 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 287.624881][ T8493] RBP: 00007fadcf1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 287.624889][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.624895][ T8493] R13: 00007fadce626038 R14: 00007fadce625fa0 R15: 00007fffba9cd778 [ 287.624909][ T8493] [ 288.191348][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 288.235490][ T8504] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5608] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8504] [ 288.273386][ T8504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.571'. [ 288.324696][ T8509] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 288.345419][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 288.352191][ T9] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 288.369754][ T9] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 288.388500][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.388524][ T9] usb 6-1: Product: syz [ 288.388539][ T9] usb 6-1: Manufacturer: syz [ 288.388549][ T9] usb 6-1: SerialNumber: syz [ 288.421664][ T9] usb 6-1: config 0 descriptor?? [ 288.431944][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 288.443763][ T9] usb 6-1: setting power ON [ 288.469324][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 288.531879][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 288.542070][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 288.550771][ T9] usb 6-1: media controller created [ 288.667135][ T8498] dvb-usb: bulk message failed: -22 (3/0) [ 288.677660][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.424739][ T8498] cxusb: i2c wr: len=80 is too big! [ 289.424739][ T8498] [ 289.457243][ T9] usb 6-1: selecting invalid altsetting 6 [ 289.457266][ T9] usb 6-1: digital interface selection failed (-22) [ 289.457281][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 289.554155][ T9] usb 6-1: setting power OFF [ 289.554207][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 289.554224][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 289.554233][ T9] (NULL device *): no alternate interface [ 289.611574][ T8514] binder: 8511:8514 ioctl c018620c 200000000540 returned -1 [ 289.718133][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 289.718157][ T30] audit: type=1400 audit(1788396253.658:530): avc: denied { setopt } for pid=8528 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.849632][ T8514] team0: Port device xfrm0 removed [ 289.858823][ T8514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.884032][ T8527] team0: Port device xfrm0 added [ 289.889254][ T8531] tipc: Enabling of bearer rejected, failed to enable media [ 291.306719][ T8550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.572'. [ 292.383885][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 292.398961][ T2478] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 1 [ 292.435940][ T9] usb 6-1: USB disconnect, device number 2 [ 292.503992][ T30] audit: type=1400 audit(1788396256.448:531): avc: denied { write } for pid=8536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.542015][ T8566] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 292.829463][ T30] audit: type=1400 audit(1788396256.768:532): avc: denied { write } for pid=8577 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.874451][ T5601] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 293.026393][ T5601] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 293.039619][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 293.052875][ T8583] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8072] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8583] [ 293.116360][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.5.586'. [ 294.012511][ T8592] FAULT_INJECTION: forcing a failure. [ 294.012511][ T8592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.012544][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.0.588 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.012560][ T8592] Tainted: [L]=SOFTLOCKUP [ 294.012564][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 294.012570][ T8592] Call Trace: [ 294.012574][ T8592] [ 294.012578][ T8592] dump_stack_lvl+0x100/0x190 [ 294.012598][ T8592] should_fail_ex.cold+0x5/0xa [ 294.012614][ T8592] _copy_from_user+0x2e/0xd0 [ 294.012631][ T8592] ipip6_tunnel_siocdevprivate+0x2d7/0x16a0 [ 294.012646][ T8592] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 294.012661][ T8592] ? lock_acquire+0x1d1/0x380 [ 294.012671][ T8592] ? dev_ioctl+0x6fd/0x10e0 [ 294.012684][ T8592] ? full_name_hash+0xbc/0x100 [ 294.012701][ T8592] ? dev_ifsioc+0xc7a/0x1fc0 [ 294.012710][ T8592] dev_ifsioc+0xc7a/0x1fc0 [ 294.012722][ T8592] ? __pfx_dev_ifsioc+0x10/0x10 [ 294.012731][ T8592] ? __pfx___mutex_lock+0x10/0x10 [ 294.012746][ T8592] ? lock_acquire+0x1d1/0x380 [ 294.012758][ T8592] ? dev_load+0x8e/0x240 [ 294.012773][ T8592] ? dev_load+0x8e/0x240 [ 294.012792][ T8592] dev_ioctl+0x70e/0x10e0 [ 294.012804][ T8592] sock_ioctl+0x494/0x6b0 [ 294.012819][ T8592] ? __pfx_sock_ioctl+0x10/0x10 [ 294.012836][ T8592] ? selinux_file_ioctl+0x13b/0x290 [ 294.012853][ T8592] ? selinux_file_ioctl+0xb6/0x290 [ 294.012870][ T8592] ? __pfx_sock_ioctl+0x10/0x10 [ 294.012885][ T8592] __x64_sys_ioctl+0x18e/0x210 [ 294.012905][ T8592] do_syscall_64+0x123/0x790 [ 294.012918][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.012930][ T8592] RIP: 0033:0x7f248279e159 [ 294.012945][ T8592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.012956][ T8592] RSP: 002b:00007f248364f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.012967][ T8592] RAX: ffffffffffffffda RBX: 00007f2482a25fa0 RCX: 00007f248279e159 [ 294.012974][ T8592] RDX: 0000200000000240 RSI: 00000000000089f9 RDI: 0000000000000003 [ 294.012980][ T8592] RBP: 00007f248364f090 R08: 0000000000000000 R09: 0000000000000000 [ 294.012986][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.012993][ T8592] R13: 00007f2482a26038 R14: 00007f2482a25fa0 R15: 00007ffe94df2788 [ 294.013006][ T8592] [ 294.607577][ T30] audit: type=1400 audit(1788396258.528:533): avc: denied { sqpoll } for pid=8594 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 296.255140][ T8606] can0: slcan on ttyS3. [ 296.593032][ T8612] binder: 8611:8612 ioctl c018620c 200000000540 returned -1 [ 296.613740][ T8595] can0 (unregistered): slcan off ttyS3. [ 296.718644][ T8612] team0: Port device xfrm0 removed [ 296.732277][ T8612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 296.789752][ T8612] team0: Port device xfrm0 added [ 296.811332][ T8612] tipc: Enabling of bearer rejected, failed to enable media [ 296.840545][ T30] audit: type=1400 audit(1788396260.778:534): avc: denied { append } for pid=8623 comm="syz.4.596" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 296.889309][ T8624] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 296.905877][ T30] audit: type=1400 audit(1788396260.848:535): avc: denied { execute } for pid=8623 comm="syz.4.596" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 297.906158][ T8643] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 297.906362][ T8643] Error validating options; rc = [-22] [ 298.068818][ T30] audit: type=1400 audit(1788396262.008:536): avc: denied { write } for pid=8640 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 298.121702][ T5700] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 298.174658][ T30] audit: type=1400 audit(1788396262.118:537): avc: denied { write } for pid=8645 comm="syz.0.599" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 298.309152][ T8660] overlayfs: failed to resolve './file0': -2 [ 298.329302][ T30] audit: type=1400 audit(1788396262.268:538): avc: denied { write } for pid=8620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.355997][ T8663] PM: suspend entry (deep) [ 298.382422][ T5700] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 299.089044][ T5700] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 299.169008][ T8643] ceph: No mds server is up or the cluster is laggy [ 299.238869][ T30] audit: type=1400 audit(1788396263.178:539): avc: denied { write } for pid=8667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.374180][ T6303] Filesystems sync: 0.941 seconds [ 299.391070][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.603'. [ 299.458387][ T30] audit: type=1400 audit(1788396263.398:540): avc: denied { append } for pid=8672 comm="syz.0.604" name="sg0" dev="devtmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 299.483234][ T30] audit: type=1400 audit(1788396263.428:541): avc: denied { bind } for pid=8673 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 299.514698][ T30] audit: type=1400 audit(1788396263.458:542): avc: denied { ioctl } for pid=8672 comm="syz.0.604" path="/dev/sg0" dev="devtmpfs" ino=1243 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 299.664701][ T8663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.666025][ T8663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.080737][ T30] audit: type=1400 audit(1788396264.018:543): avc: denied { bind } for pid=8673 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 300.406446][ T8663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 300.406534][ T8663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.406613][ T8663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.406643][ T8663] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 300.443725][ T8663] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 300.467432][ T8663] Freezing user space processes [ 300.958276][ T8663] Freezing user space processes completed (elapsed 0.447 seconds) [ 300.968263][ T8663] OOM killer disabled. [ 300.972395][ T8663] Freezing remaining freezable tasks [ 300.979350][ T8663] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 300.988678][ T8663] printk: Suspending console(s) (use no_console_suspend to debug) [ 301.090372][ T8663] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 301.090421][ T8663] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 301.090460][ T8663] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 301.090496][ T8663] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 301.090532][ T8663] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 301.090570][ T8663] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 301.090608][ T8663] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 301.090646][ T8663] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 301.090683][ T8663] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 301.090719][ T8663] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 301.090755][ T8663] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 301.090791][ T8663] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 301.090827][ T8663] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 301.090865][ T8663] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 301.090919][ T8663] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 301.104851][ T6283] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 301.376880][ T8663] ACPI: PM: Preparing to enter system sleep state S3 [ 301.377145][ T8663] ACPI: PM: Saving platform NVS memory [ 301.378964][ T8663] Disabling non-boot CPUs ... [ 301.380740][ T8663] ACPI: PM: Low-level resume complete [ 301.380778][ T8663] ACPI: PM: Restoring platform NVS memory [ 301.394969][ T8663] ACPI: PM: Waking up from system sleep state S3 [ 301.475811][ T1344] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 301.677175][ T8663] OOM killer enabled. [ 301.677770][ T8663] Restarting tasks: Starting [ 301.747270][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 301.748203][ T5601] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.759867][ T8674] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 301.769129][ T8663] Restarting tasks: Done [ 301.769196][ T8663] random: crng reseeded on system resumption [ 301.769235][ T8663] hwrng_fill thread creation failed [ 301.769402][ T8663] PM: suspend exit [ 301.967824][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 301.967855][ T30] audit: type=1400 audit(1788396265.919:546): avc: denied { getopt } for pid=8716 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.196313][ T8722] ip_tables: iptables: counters copy to user failed while replacing table [ 302.202604][ T8718] FAULT_INJECTION: forcing a failure. [ 302.202604][ T8718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.202634][ T8718] CPU: 0 UID: 0 PID: 8718 Comm: syz.3.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.202652][ T8718] Tainted: [L]=SOFTLOCKUP [ 302.202656][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 302.202662][ T8718] Call Trace: [ 302.202668][ T8718] [ 302.202673][ T8718] dump_stack_lvl+0x100/0x190 [ 302.202692][ T8718] should_fail_ex.cold+0x5/0xa [ 302.202711][ T8718] _copy_from_user+0x2e/0xd0 [ 302.202729][ T8718] copy_msghdr_from_user+0x9f/0x4c0 [ 302.202744][ T8718] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 302.202762][ T8718] ? rcu_is_watching+0x13/0xc0 [ 302.202780][ T8718] ? ___sys_sendmsg+0x19d/0x1e0 [ 302.202795][ T8718] ? kfree+0x1e5/0x6d0 [ 302.202814][ T8718] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 302.202827][ T8718] ___sys_sendmsg+0x106/0x1e0 [ 302.202842][ T8718] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.202855][ T8718] ? do_user_addr_fault+0x7d7/0x12f0 [ 302.202874][ T8718] ? lockdep_hardirqs_on+0x7d/0x110 [ 302.202895][ T8718] ? __pfx___might_resched+0x10/0x10 [ 302.202908][ T8718] __sys_sendmmsg+0x20c/0x440 [ 302.202920][ T8718] ? __pfx___sys_sendmmsg+0x10/0x10 [ 302.202930][ T8718] ? __local_bh_enable_ip+0xa5/0x120 [ 302.202944][ T8718] ? __pfx_do_futex+0x10/0x10 [ 302.202965][ T8718] ? xfd_validate_state+0x129/0x190 [ 302.202987][ T8718] __x64_sys_sendmmsg+0x9c/0x100 [ 302.202997][ T8718] ? lockdep_hardirqs_on+0x7d/0x110 [ 302.203009][ T8718] do_syscall_64+0x123/0x790 [ 302.203022][ T8718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.203035][ T8718] RIP: 0033:0x7fc9b219e159 [ 302.203045][ T8718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.203056][ T8718] RSP: 002b:00007fc9b3000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.203068][ T8718] RAX: ffffffffffffffda RBX: 00007fc9b2425fa0 RCX: 00007fc9b219e159 [ 302.203076][ T8718] RDX: 0000000000264e33 RSI: 0000200000005240 RDI: 0000000000000007 [ 302.203083][ T8718] RBP: 00007fc9b2235024 R08: 0000000000000000 R09: 0000000000000000 [ 302.203090][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.203096][ T8718] R13: 00007fc9b2426038 R14: 00007fc9b2425fa0 R15: 00007ffcb56ca738 [ 302.203111][ T8718] [ 302.340664][ T30] audit: type=1400 audit(1788396266.289:547): avc: denied { mount } for pid=8726 comm="syz.0.610" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 302.426998][ T30] audit: type=1400 audit(1788396266.369:548): avc: denied { write } for pid=8678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.466926][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.469660][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 302.472779][ T5601] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.476774][ T5713] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 302.527746][ T6953] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.558644][ T30] audit: type=1400 audit(1788396266.509:549): avc: denied { write } for pid=8739 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.666851][ T5713] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 302.671409][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.698786][ T5713] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 302.773745][ T8729] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=8729 comm=syz.0.610 [ 302.817225][ T8746] overlayfs: failed to resolve './file0': -2 [ 303.135086][ T5713] gspca_sn9c20x: Write register 1001 failed -71 [ 303.135109][ T5713] gspca_sn9c20x: Device initialization failed [ 303.135151][ T5713] gspca_sn9c20x 4-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 303.152307][ T5713] usb 4-1: USB disconnect, device number 15 [ 303.252775][ T5700] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 303.818660][ T5700] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.822387][ T5700] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.822419][ T5700] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.826495][ T5700] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 303.826516][ T5700] usb 5-1: Product: syz [ 303.826531][ T5700] usb 5-1: Manufacturer: syz [ 303.840183][ T5700] hub 5-1:4.0: USB hub found [ 303.893285][ T8768] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5599] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8768] [ 303.902258][ T8768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.617'. [ 304.000998][ T30] audit: type=1400 audit(1788396267.949:550): avc: denied { write } for pid=8741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.017708][ T6953] usb 6-1: device descriptor read/64, error -71 [ 304.043078][ T5700] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 304.079529][ T5700] usb 5-1: USB disconnect, device number 22 [ 304.096959][ T30] audit: type=1400 audit(1788396268.039:551): avc: denied { mount } for pid=8769 comm="syz.1.618" name="/" dev="ramfs" ino=23397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.135882][ T30] audit: type=1400 audit(1788396268.079:552): avc: denied { watch watch_reads } for pid=8769 comm="syz.1.618" path="/" dev="ramfs" ino=23397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 304.172899][ T30] audit: type=1400 audit(1788396268.119:553): avc: denied { write } for pid=8774 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.256878][ T6953] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 304.283469][ T30] audit: type=1400 audit(1788396268.229:554): avc: denied { create } for pid=8777 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.293063][ T8778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 304.407336][ T6953] usb 6-1: Using ep0 maxpacket: 8 [ 304.409886][ T6953] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 304.411828][ T6953] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 304.411859][ T6953] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.411884][ T6953] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 304.411900][ T6953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 304.411916][ T6953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.423324][ T6953] usb 6-1: config 0 descriptor?? [ 304.547357][ T5601] Bluetooth: hci1: command 0x0c1a tx timeout [ 305.462093][ T6953] bigben 0003:146B:0902.0005: unexpected rdesc, please submit for review [ 305.462859][ T6953] bigben 0003:146B:0902.0005: missing HID_OUTPUT_REPORT 0 [ 305.473406][ T6953] bigben 0003:146B:0902.0005: no output report found [ 305.476361][ T6953] bigben 0003:146B:0902.0005: hidraw0: USB HID v0.00 Joystick [HID 146b:0902] on usb-dummy_hcd.5-1/input0 [ 305.519415][ T30] audit: type=1400 audit(1788396269.459:555): avc: denied { setopt } for pid=8785 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.614683][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.614882][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.621666][ T6953] usb 6-1: USB disconnect, device number 4 [ 305.676231][ T8787] fido_id[8787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 305.683123][ T8789] loop9: detected capacity change from 0 to 524287936 [ 305.737824][ T8791] overlayfs: failed to resolve './file0': -2 [ 306.973042][ T5601] Bluetooth: hci1: command 0x0c1a tx timeout [ 307.001319][ T30] audit: type=1800 audit(1788396270.939:556): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.618" name="bus" dev="ramfs" ino=23398 res=0 errno=0 [ 307.084044][ T8824] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 307.085515][ T8824] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 307.246481][ T8831] futex_wake_op: syz.5.633 tries to shift op by -1; fix this program [ 307.292292][ T30] audit: type=1400 audit(1788396271.239:557): avc: denied { write } for pid=8799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.300558][ T8831] FAULT_INJECTION: forcing a failure. [ 307.300558][ T8831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.300589][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.5.633 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.300607][ T8831] Tainted: [L]=SOFTLOCKUP [ 307.300611][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 307.300618][ T8831] Call Trace: [ 307.300623][ T8831] [ 307.300628][ T8831] dump_stack_lvl+0x100/0x190 [ 307.300648][ T8831] should_fail_ex.cold+0x5/0xa [ 307.300663][ T8831] _copy_from_iter+0x1f4/0x1690 [ 307.300685][ T8831] ? __pfx__copy_from_iter+0x10/0x10 [ 307.300702][ T8831] ? trace_kmalloc+0xeb/0x110 [ 307.300715][ T8831] ? __kasan_kmalloc+0xaa/0xb0 [ 307.300727][ T8831] ? __kmalloc_noprof+0x350/0x840 [ 307.300737][ T8831] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 307.300758][ T8831] kernfs_fop_write_iter+0x186/0x5f0 [ 307.300777][ T8831] vfs_write+0x6af/0x1050 [ 307.300800][ T8831] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 307.300819][ T8831] ? __pfx_vfs_write+0x10/0x10 [ 307.300834][ T8831] ? find_held_lock+0x2b/0x80 [ 307.300860][ T8831] ksys_write+0x12a/0x250 [ 307.300871][ T8831] ? __pfx_ksys_write+0x10/0x10 [ 307.300886][ T8831] do_syscall_64+0x123/0x790 [ 307.300900][ T8831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.300911][ T8831] RIP: 0033:0x7ff3e235e98e [ 307.300920][ T8831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.300931][ T8831] RSP: 002b:00007ff3e32f6a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.300942][ T8831] RAX: ffffffffffffffda RBX: 00007ff3e32f76c0 RCX: 00007ff3e235e98e [ 307.300949][ T8831] RDX: 0000000000000008 RSI: 00007ff3e32f6a90 RDI: 000000000000000b [ 307.300955][ T8831] RBP: 00007ff3e2409070 R08: 0000000000000000 R09: 0000000000000000 [ 307.300961][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 307.300967][ T8831] R13: 00007ff3e32f6a90 R14: 00007ff3e2625fa0 R15: 00007fff73d873a8 [ 307.300982][ T8831] [ 307.336759][ T5713] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 307.466141][ T30] audit: type=1400 audit(1788396271.409:558): avc: denied { write } for pid=8834 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.471537][ T5700] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 307.487766][ T5713] usb 4-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 307.489761][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 32768, setting to 1024 [ 307.489790][ T5713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 307.489817][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.508019][ T5713] usb-storage 4-1:1.0: USB Mass Storage device detected [ 307.640477][ T5700] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 307.740724][ T5700] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.740753][ T5700] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.871552][ T5700] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 307.871578][ T5700] usb 5-1: Product: syz [ 307.871594][ T5700] usb 5-1: Manufacturer: syz [ 308.297341][ T5700] hub 5-1:4.0: USB hub found [ 308.464131][ T5713] usb-storage 4-1:1.0: probe with driver usb-storage failed with error -5 [ 308.468309][ T5700] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 308.484433][ T5713] usb 4-1: USB disconnect, device number 16 [ 308.511841][ T5700] usb 5-1: USB disconnect, device number 23 [ 308.749838][ T8851] FAULT_INJECTION: forcing a failure. [ 308.749838][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 308.751583][ T8851] CPU: 0 UID: 0 PID: 8851 Comm: syz.1.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.751601][ T8851] Tainted: [L]=SOFTLOCKUP [ 308.751605][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 308.751612][ T8851] Call Trace: [ 308.751616][ T8851] [ 308.751620][ T8851] dump_stack_lvl+0x100/0x190 [ 308.751640][ T8851] should_fail_ex.cold+0x5/0xa [ 308.751658][ T8851] should_failslab+0xc2/0x120 [ 308.751671][ T8851] __kmalloc_noprof+0xfc/0x840 [ 308.751683][ T8851] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 308.751698][ T8851] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 308.751713][ T8851] genl_family_rcv_msg_doit+0xc7/0x300 [ 308.751726][ T8851] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 308.751741][ T8851] ? bpf_lsm_capable+0x9/0x10 [ 308.751756][ T8851] ? security_capable+0x80/0x260 [ 308.751772][ T8851] ? ns_capable+0xd2/0xf0 [ 308.751784][ T8851] genl_rcv_msg+0x560/0x800 [ 308.751796][ T8851] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.751807][ T8851] ? __lock_acquire+0x4c5/0x1ec0 [ 308.751818][ T8851] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 308.751839][ T8851] netlink_rcv_skb+0x159/0x420 [ 308.751855][ T8851] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.751867][ T8851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.751888][ T8851] ? netlink_deliver_tap+0x1ae/0xcc0 [ 308.751905][ T8851] genl_rcv+0x28/0x40 [ 308.751914][ T8851] netlink_unicast+0x585/0x850 [ 308.751932][ T8851] ? __pfx_netlink_unicast+0x10/0x10 [ 308.751948][ T8851] ? __pfx_sock_has_perm+0x10/0x10 [ 308.751973][ T8851] netlink_sendmsg+0x8b0/0xda0 [ 308.751992][ T8851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.752009][ T8851] ? selinux_socket_sendmsg+0x198/0x2f0 [ 308.752028][ T8851] ____sys_sendmsg+0xa4d/0xbe0 [ 308.752040][ T8851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.752057][ T8851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.752074][ T8851] ? lock_acquire+0x1d1/0x380 [ 308.752084][ T8851] ? get_pid_task+0x2a/0x250 [ 308.752100][ T8851] ___sys_sendmsg+0x190/0x1e0 [ 308.752115][ T8851] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.752129][ T8851] ? get_pid_task+0x106/0x250 [ 308.752148][ T8851] ? find_held_lock+0x2b/0x80 [ 308.752171][ T8851] __sys_sendmsg+0x160/0x210 [ 308.752182][ T8851] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.752200][ T8851] do_syscall_64+0x123/0x790 [ 308.752214][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.752225][ T8851] RIP: 0033:0x7fadce39e159 [ 308.752235][ T8851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.752246][ T8851] RSP: 002b:00007fadcf1b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.752258][ T8851] RAX: ffffffffffffffda RBX: 00007fadce625fa0 RCX: 00007fadce39e159 [ 308.752265][ T8851] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 308.752271][ T8851] RBP: 00007fadcf1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 308.752277][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.752284][ T8851] R13: 00007fadce626038 R14: 00007fadce625fa0 R15: 00007fffba9cd778 [ 308.752298][ T8851] [ 308.868088][ T189] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 308.996850][ T189] usb 6-1: device descriptor read/64, error -71 [ 309.083961][ T8862] netlink: 156 bytes leftover after parsing attributes in process `syz.4.641'. [ 309.113949][ T30] audit: type=1400 audit(1788396273.059:559): avc: denied { read } for pid=8861 comm="syz.4.641" dev="sockfs" ino=23677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.150165][ T30] audit: type=1400 audit(1788396273.099:560): avc: denied { write } for pid=8843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.227232][ T5700] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 309.234196][ T30] audit: type=1400 audit(1788396273.179:561): avc: denied { cmd } for pid=8867 comm="syz.4.642" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 309.237579][ T189] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 309.319610][ T5713] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 309.372630][ T30] audit: type=1400 audit(1788396273.319:562): avc: denied { write } for pid=8871 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.378705][ T189] usb 6-1: device descriptor read/64, error -71 [ 309.399419][ T5700] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 309.401339][ T5700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.401366][ T5700] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.401386][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.406996][ T5700] usb 2-1: config 0 descriptor?? [ 309.447244][ T5713] usb 4-1: device descriptor read/64, error -71 [ 309.488834][ T189] usb usb6-port1: attempt power cycle [ 309.627544][ T9] usb 2-1: USB disconnect, device number 24 [ 309.687529][ T5713] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 309.816942][ T5713] usb 4-1: device descriptor read/64, error -71 [ 309.828144][ T189] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 309.847939][ T189] usb 6-1: device descriptor read/8, error -71 [ 309.928721][ T5713] usb usb4-port1: attempt power cycle [ 309.931054][ T30] audit: type=1400 audit(1788396273.879:563): avc: denied { write } for pid=8879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.071979][ T30] audit: type=1400 audit(1788396274.019:564): avc: denied { write } for pid=8892 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.087523][ T189] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 310.108994][ T189] usb 6-1: device descriptor read/8, error -71 [ 310.218514][ T189] usb usb6-port1: unable to enumerate USB device [ 310.328527][ T5713] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 310.918538][ T5713] usb 4-1: device descriptor read/8, error -71 [ 311.050049][ T30] audit: type=1400 audit(1788396274.999:565): avc: denied { create } for pid=8900 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.064660][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 311.069725][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 311.158053][ T5713] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 311.177348][ T5713] usb 4-1: device descriptor read/8, error -71 [ 311.260921][ T8910] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 311.262366][ T8910] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 311.287279][ T5713] usb usb4-port1: unable to enumerate USB device [ 311.327444][ T8908] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 311.343512][ T8908] cramfs: wrong magic [ 312.261182][ T8913] can0: slcan on ttyS3. [ 312.266595][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.267639][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.269361][ T189] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 312.434895][ T189] usb 1-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 312.442342][ T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 32768, setting to 1024 [ 312.442372][ T189] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 312.442400][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.447909][ T8911] can0 (unregistered): slcan off ttyS3. [ 312.504763][ T189] usb-storage 1-1:1.0: USB Mass Storage device detected [ 312.518687][ T8920] 9pnet_virtio: no channels available for device 127.0.0.1 [ 312.535587][ T8920] PM: suspend entry (deep) [ 312.737920][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 312.790040][ T6304] Filesystems sync: 0.253 seconds [ 312.816928][ T5700] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 312.888427][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 312.889786][ T9] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 312.892144][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.892165][ T9] usb 6-1: config 0 has no interface number 0 [ 312.892191][ T9] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 312.892205][ T9] usb 6-1: config 0 interface 1 has no altsetting 0 [ 312.902381][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.902415][ T9] usb 6-1: Product: syz [ 312.902430][ T9] usb 6-1: Manufacturer: syz [ 312.902441][ T9] usb 6-1: SerialNumber: syz [ 312.911771][ T9] usb 6-1: config 0 descriptor?? [ 312.945451][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 312.945487][ T30] audit: type=1400 audit(1788396276.889:570): avc: denied { write } for pid=8924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.950694][ T5700] usb 5-1: device descriptor read/64, error -71 [ 312.962241][ T189] usb-storage 1-1:1.0: probe with driver usb-storage failed with error -5 [ 312.970820][ T189] usb 1-1: USB disconnect, device number 41 [ 313.093921][ T30] audit: type=1400 audit(1788396277.039:571): avc: denied { write } for pid=8940 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.124842][ T9] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 313.146334][ T9] cx231xx 6-1:0.1: Failed to read PCB config [ 313.146379][ T9] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 313.157403][ T9] usb 6-1: USB disconnect, device number 9 [ 313.187351][ T5700] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 313.241131][ T8920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 313.241244][ T8920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 313.241317][ T8920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.241382][ T8920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 313.241447][ T8920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 313.241966][ T8920] Freezing user space processes [ 313.258491][ T8920] Freezing user space processes completed (elapsed 0.016 seconds) [ 313.260039][ T8920] OOM killer disabled. [ 313.260051][ T8920] Freezing remaining freezable tasks [ 313.316765][ T5700] usb 5-1: device descriptor read/64, error -71 [ 313.427319][ T5700] usb usb5-port1: attempt power cycle [ 313.766752][ T5700] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 314.866732][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 315.266864][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 315.266898][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 315.268716][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 315.269568][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.868243][ T5700] usb 5-1: device descriptor read/8, error -110 [ 319.116821][ T5700] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 319.146978][ T5700] usb 5-1: device descriptor read/8, error -32 [ 319.259935][ T5700] usb usb5-port1: unable to enumerate USB device [ 319.277210][ T8920] Freezing remaining freezable tasks completed (elapsed 6.017 seconds) [ 319.285659][ T8920] printk: Suspending console(s) (use no_console_suspend to debug) [ 319.389184][ T6290] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 319.389735][ T8920] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 319.389783][ T8920] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 319.389826][ T8920] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 319.389870][ T8920] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 319.389914][ T8920] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 319.389957][ T8920] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 319.390000][ T8920] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 319.390041][ T8920] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 319.390084][ T8920] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 319.390125][ T8920] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 319.390174][ T8920] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 319.390217][ T8920] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 319.390260][ T8920] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 319.390302][ T8920] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 319.390344][ T8920] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 319.667911][ T8920] ACPI: PM: Preparing to enter system sleep state S3 [ 319.668154][ T8920] ACPI: PM: Saving platform NVS memory [ 319.668193][ T8920] Disabling non-boot CPUs ... [ 319.669945][ T8920] ACPI: PM: Low-level resume complete [ 319.669983][ T8920] ACPI: PM: Restoring platform NVS memory [ 319.685318][ T8920] ACPI: PM: Waking up from system sleep state S3 [ 319.756270][ T8973] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 319.953899][ T8920] OOM killer enabled. [ 319.954555][ T8920] Restarting tasks: Starting [ 319.990125][ T8920] Restarting tasks: Done [ 320.008284][ T8920] random: crng reseeded on system resumption [ 320.008337][ T8920] hwrng_fill thread creation failed [ 320.008527][ T8920] PM: suspend exit [ 320.874272][ T5713] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 320.934432][ T30] audit: type=1400 audit(1788396284.879:572): avc: denied { ioctl } for pid=9009 comm="syz.4.660" path="socket:[24222]" dev="sockfs" ino=24222 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 320.938059][ T30] audit: type=1400 audit(1788396284.879:573): avc: denied { setopt } for pid=9009 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 320.941309][ T30] audit: type=1400 audit(1788396284.879:574): avc: denied { write } for pid=9009 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.026463][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 321.045395][ T30] audit: type=1400 audit(1788396284.979:575): avc: denied { write } for pid=9009 comm="syz.4.660" name="subsystems" dev="configfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.060262][ T30] audit: type=1400 audit(1788396284.999:576): avc: denied { add_name } for pid=9009 comm="syz.4.660" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.065070][ T30] audit: type=1400 audit(1788396285.009:577): avc: denied { create } for pid=9009 comm="syz.4.660" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 321.071970][ T30] audit: type=1400 audit(1788396285.009:578): avc: denied { write } for pid=9009 comm="syz.4.660" name="ports" dev="configfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.384427][ T5700] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 321.441356][ T9028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.448833][ T8968] IPVS: starting estimator thread 0... [ 321.451012][ T9030] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 321.509626][ T9031] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 321.533577][ T9032] IPVS: using max 77 ests per chain, 184800 per kthread [ 321.535506][ T5700] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 321.538113][ T5700] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 321.538143][ T5700] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 321.538176][ T5700] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.538194][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.548021][ T5700] usb 5-1: config 0 descriptor?? [ 321.557636][ T30] audit: type=1400 audit(1788396285.499:579): avc: denied { write } for pid=8942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.758683][ T9039] FAULT_INJECTION: forcing a failure. [ 321.758683][ T9039] name failslab, interval 1, probability 0, space 0, times 0 [ 321.771721][ T9039] CPU: 0 UID: 0 PID: 9039 Comm: syz.1.665 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.771744][ T9039] Tainted: [L]=SOFTLOCKUP [ 321.771753][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 321.771760][ T9039] Call Trace: [ 321.771765][ T9039] [ 321.771770][ T9039] dump_stack_lvl+0x100/0x190 [ 321.771795][ T9039] should_fail_ex.cold+0x5/0xa [ 321.771811][ T9039] should_failslab+0xc2/0x120 [ 321.771825][ T9039] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 321.771840][ T9039] ? kstrdup_const+0x63/0x80 [ 321.771859][ T9039] kstrdup+0x51/0xe0 [ 321.771875][ T9039] kstrdup_const+0x63/0x80 [ 321.771890][ T9039] __kernfs_new_node+0x9b/0xa10 [ 321.771908][ T9039] ? __pfx___kernfs_new_node+0x10/0x10 [ 321.771925][ T9039] ? lock_acquire+0x1d1/0x380 [ 321.771936][ T9039] ? kernfs_root+0x23/0x2a0 [ 321.771949][ T9039] ? find_held_lock+0x2b/0x80 [ 321.771963][ T9039] ? kernfs_root+0xee/0x2a0 [ 321.771976][ T9039] ? kernfs_root+0xee/0x2a0 [ 321.771992][ T9039] kernfs_new_node+0x117/0x150 [ 321.772009][ T9039] kernfs_create_link+0xcc/0x240 [ 321.772022][ T9039] sysfs_do_create_link_sd+0x90/0x140 [ 321.772036][ T9039] sysfs_create_link+0x61/0xc0 [ 321.772050][ T9039] device_add+0xb62/0x1970 [ 321.772064][ T9039] ? __pfx_device_add+0x10/0x10 [ 321.772075][ T9039] ? kfree_const+0x5a/0x70 [ 321.772089][ T9039] ? kfree+0x1e5/0x6d0 [ 321.772107][ T9039] device_create_groups_vargs+0x1f8/0x270 [ 321.772122][ T9039] device_create+0xed/0x130 [ 321.772135][ T9039] ? __pfx_device_create+0x10/0x10 [ 321.772148][ T9039] ? is_console_locked+0x9/0x20 [ 321.772158][ T9039] ? con_is_visible+0x65/0x150 [ 321.772173][ T9039] ? csi_J+0x57e/0xad0 [ 321.772192][ T9039] vcs_make_sysfs+0x32/0x80 [ 321.772206][ T9039] vc_allocate+0x539/0x880 [ 321.772223][ T9039] ? __pfx_vc_allocate+0x10/0x10 [ 321.772244][ T9039] con_install+0xa1/0x620 [ 321.772256][ T9039] ? __pfx_con_install+0x10/0x10 [ 321.772276][ T9039] ? __pfx_con_install+0x10/0x10 [ 321.772293][ T9039] tty_init_dev.part.0+0x9e/0x470 [ 321.772306][ T9039] tty_open+0x953/0xe20 [ 321.772319][ T9039] ? __pfx_tty_open+0x10/0x10 [ 321.772329][ T9039] ? chrdev_open+0x589/0x6a0 [ 321.772341][ T9039] ? chrdev_open+0x589/0x6a0 [ 321.772355][ T9039] ? __pfx_tty_open+0x10/0x10 [ 321.772365][ T9039] chrdev_open+0x234/0x6a0 [ 321.772378][ T9039] ? __pfx_chrdev_open+0x10/0x10 [ 321.772390][ T9039] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 321.772409][ T9039] do_dentry_open+0x6ab/0x14d0 [ 321.772419][ T9039] ? __pfx_chrdev_open+0x10/0x10 [ 321.772434][ T9039] vfs_open+0x82/0x3f0 [ 321.772449][ T9039] path_openat+0x19fa/0x2440 [ 321.772464][ T9039] ? __pfx_path_openat+0x10/0x10 [ 321.772480][ T9039] do_file_open+0x20e/0x430 [ 321.772493][ T9039] ? __pfx_do_file_open+0x10/0x10 [ 321.772516][ T9039] ? _raw_spin_unlock+0x28/0x50 [ 321.772532][ T9039] ? alloc_fd+0x471/0x7a0 [ 321.772553][ T9039] do_sys_openat2+0x10f/0x1e0 [ 321.772568][ T9039] ? __pfx_do_sys_openat2+0x10/0x10 [ 321.772588][ T9039] __x64_sys_openat+0x12d/0x210 [ 321.772602][ T9039] ? __pfx___x64_sys_openat+0x10/0x10 [ 321.772622][ T9039] do_syscall_64+0x123/0x790 [ 321.772636][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.772649][ T9039] RIP: 0033:0x7fadce35e98e [ 321.772660][ T9039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 321.772670][ T9039] RSP: 002b:00007fadcf1afb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.772681][ T9039] RAX: ffffffffffffffda RBX: 00007fadcf1b06c0 RCX: 00007fadce35e98e [ 321.772688][ T9039] RDX: 0000000000000002 RSI: 00007fadcf1afc00 RDI: ffffffffffffff9c [ 321.772694][ T9039] RBP: 00007fadce435024 R08: 0000000000000000 R09: 0000000000000000 [ 321.772701][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.772707][ T9039] R13: 00007fadce626038 R14: 00007fadce625fa0 R15: 00007fffba9cd778 [ 321.772721][ T9039] [ 321.931511][ T30] audit: type=1400 audit(1788396285.869:580): avc: denied { write } for pid=9040 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.938471][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 321.938506][ T5713] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 321.941388][ T5713] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 321.941413][ T5713] usb 1-1: can't read configurations, error -71 [ 321.970334][ T5700] dragonrise 0003:0079:0011.0006: item fetching failed at offset 30/40 [ 321.970655][ T5700] dragonrise 0003:0079:0011.0006: probe with driver dragonrise failed with error -22 [ 321.974287][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 322.126583][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 322.131811][ T9] usb 6-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 322.131846][ T9] usb 6-1: config 2 interface 0 altsetting 178 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 322.131862][ T9] usb 6-1: config 2 interface 0 altsetting 178 endpoint 0x88 has invalid wMaxPacketSize 0 [ 322.131876][ T9] usb 6-1: config 2 interface 0 has no altsetting 0 [ 322.139522][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.139547][ T9] usb 6-1: Product: syz [ 322.139561][ T9] usb 6-1: Manufacturer: syz [ 322.139571][ T9] usb 6-1: SerialNumber: syz [ 322.185107][ T30] audit: type=1400 audit(1788396286.129:581): avc: denied { read write } for pid=9009 comm="syz.4.660" name="addr_traddr" dev="configfs" ino=24376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 322.231964][ T9046] syzkaller1: entered promiscuous mode [ 322.231986][ T9046] syzkaller1: entered allmulticast mode [ 322.498722][ T9038] could not allocate digest TFM handle sha512-ssse3 [ 322.521198][ T9] ims_pcu 6-1:2.0: Incorrect number of endpoints on data interface (1) [ 322.523192][ T9] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22 [ 322.539756][ T9] usb 6-1: USB disconnect, device number 10 [ 322.564831][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 322.608648][ T9053] netlink: 36 bytes leftover after parsing attributes in process `syz.3.663'. [ 322.659258][ T9055] kvm: kvm [9054]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 322.666488][ T9055] capability: warning: `syz.0.669' uses deprecated v2 capabilities in a way that may be insecure [ 322.730142][ T5700] usb 5-1: USB disconnect, device number 28 [ 324.789965][ T52] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 324.826683][ T9080] 9pnet_fd: Insufficient options for proto=fd [ 324.834195][ T9080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'. [ 325.325537][ T9081] binder: 9079:9081 ioctl c018620c 200000000540 returned -1 [ 325.631805][ T9081] tipc: Enabling of bearer rejected, failed to enable media [ 325.918663][ T9105] xt_cgroup: invalid path, errno=-2 [ 327.725203][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 327.725237][ T30] audit: type=1400 audit(1788396291.669:599): avc: denied { lock } for pid=9116 comm="syz.1.683" path="socket:[24759]" dev="sockfs" ino=24759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 328.011500][ T30] audit: type=1326 audit(1788396291.949:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadce39e159 code=0x7ffc0000 [ 328.017400][ T30] audit: type=1326 audit(1788396291.969:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadce39e159 code=0x7ffc0000 [ 328.023586][ T30] audit: type=1326 audit(1788396291.969:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fadce39e159 code=0x7ffc0000 [ 328.023620][ T30] audit: type=1326 audit(1788396291.969:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadce39e159 code=0x7ffc0000 [ 328.033055][ T30] audit: type=1326 audit(1788396291.969:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fadce39e159 code=0x7ffc0000 [ 328.039998][ T30] audit: type=1326 audit(1788396291.989:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadce39e159 code=0x7ffc0000 [ 328.040037][ T30] audit: type=1326 audit(1788396291.989:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fadce39e159 code=0x7ffc0000 [ 328.040073][ T30] audit: type=1400 audit(1788396291.989:607): avc: denied { bind } for pid=9125 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.057275][ T30] audit: type=1326 audit(1788396291.989:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadce39e159 code=0x7ffc0000 [ 328.194590][ T52] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 331.213261][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.215132][ T9134] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 331.221461][ T9134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 331.222184][ T9134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.222263][ T9134] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 331.222328][ T9134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.201543][ T9155] netlink: 156 bytes leftover after parsing attributes in process `syz.5.680'. [ 332.703405][ T5700] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 333.133472][ T5700] usb 2-1: device descriptor read/64, error -71 [ 333.284256][ T5601] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.284290][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 333.284312][ T5601] Bluetooth: hci3: command 0x0c1a tx timeout [ 333.284327][ T5601] Bluetooth: hci2: command 0x0c1a tx timeout [ 333.458374][ T5700] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 333.489340][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 333.490504][ T30] audit: type=1326 audit(1788396297.429:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.0.698" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248279e159 code=0x7ffc0000 [ 333.585703][ T5700] usb 2-1: device descriptor read/64, error -71 [ 333.695946][ T5700] usb usb2-port1: attempt power cycle [ 334.253487][ T5700] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 334.281250][ T5700] usb 2-1: device descriptor read/8, error -71 [ 334.613475][ T5700] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 334.858574][ T5700] usb 2-1: device descriptor read/8, error -71 [ 335.047415][ T5700] usb usb2-port1: unable to enumerate USB device [ 335.681757][ T2478] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 1 [ 335.801223][ T9202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.831666][ T30] audit: type=1400 audit(1788396299.769:625): avc: denied { append } for pid=9204 comm="syz.5.701" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 335.900197][ T30] audit: type=1400 audit(1788396299.839:626): avc: denied { write } for pid=9204 comm="syz.5.701" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 336.011532][ T9196] bridge0: port 1(veth0) entered blocking state [ 336.011592][ T9196] bridge0: port 1(veth0) entered disabled state [ 336.011695][ T9196] veth0: entered allmulticast mode [ 336.012513][ T9196] veth0: entered promiscuous mode [ 336.012800][ T9196] bridge0: port 1(veth0) entered blocking state [ 336.012845][ T9196] bridge0: port 1(veth0) entered forwarding state [ 336.242160][ T30] audit: type=1400 audit(1788396300.179:627): avc: denied { accept } for pid=9211 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.360104][ T30] audit: type=1400 audit(1788396300.299:628): avc: denied { ioctl } for pid=9226 comm="syz.4.706" path="mnt:[4026533662]" dev="nsfs" ino=4026533662 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 336.457979][ T30] audit: type=1400 audit(1788396300.399:629): avc: denied { write } for pid=9230 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.550166][ T30] audit: type=1400 audit(1788396300.489:630): avc: denied { connect } for pid=9233 comm="syz.5.709" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.839288][ T30] audit: type=1400 audit(1788396300.779:631): avc: denied { read } for pid=9238 comm="syz.5.710" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 336.839331][ T30] audit: type=1400 audit(1788396300.779:632): avc: denied { open } for pid=9238 comm="syz.5.710" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 336.897442][ T30] audit: type=1400 audit(1788396300.839:633): avc: denied { ioctl } for pid=9238 comm="syz.5.710" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 337.075786][ T9243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.105609][ T9243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.225056][ T9253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42254 sclass=netlink_route_socket pid=9253 comm=syz.1.714 [ 337.330987][ T189] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 337.399839][ T9260] nvmet: adding nsid 1 to subsystem testsubsys [ 337.451820][ T9260] nvmet: failed to open block device ./file0: (-2) [ 337.487309][ T189] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 337.497297][ T189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.510063][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.510088][ T189] usb 1-1: Product: syz [ 337.510102][ T189] usb 1-1: Manufacturer: syz [ 337.510113][ T189] usb 1-1: SerialNumber: syz [ 337.534433][ T189] usb 1-1: config 0 descriptor?? [ 337.542591][ T189] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 337.734643][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.720'. [ 337.748799][ T189] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 337.748853][ T189] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 337.774700][ T189] usb 1-1: USB disconnect, device number 44 [ 337.805428][ T9271] rtl2832 0-0001: probe with driver rtl2832 failed with error -5 [ 337.805534][ T9271] i2c i2c-0: new_device: Instantiated device rtl2832 at 0x01 [ 337.967715][ T9277] netlink: 52 bytes leftover after parsing attributes in process `syz.1.723'. [ 339.002540][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 339.002575][ T30] audit: type=1400 audit(1788396302.939:637): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 339.128200][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 339.400840][ T30] audit: type=1400 audit(1788396303.339:638): avc: denied { bind } for pid=9284 comm="syz.4.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.400883][ T30] audit: type=1400 audit(1788396303.339:639): avc: denied { write } for pid=9284 comm="syz.4.725" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.543652][ T9303] netlink: 2 bytes leftover after parsing attributes in process `syz.3.730'. [ 340.751326][ T30] audit: type=1400 audit(1788396304.689:640): avc: denied { create } for pid=9314 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 340.773188][ T30] audit: type=1400 audit(1788396304.719:641): avc: denied { ioctl } for pid=9314 comm="syz.3.735" path="socket:[25682]" dev="sockfs" ino=25682 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 340.972717][ T189] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 341.081804][ T6953] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 341.193790][ T189] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 341.268918][ T189] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 341.268947][ T189] usb 5-1: config 0 has no interface number 0 [ 341.451253][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.451279][ T189] usb 5-1: Product: syz [ 341.451308][ T189] usb 5-1: Manufacturer: syz [ 341.451318][ T189] usb 5-1: SerialNumber: syz [ 341.532821][ T189] usb 5-1: config 0 descriptor?? [ 341.564186][ T6953] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 341.651476][ T6953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.651502][ T6953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 341.651534][ T6953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.751715][ T6953] usb 2-1: config 0 descriptor?? [ 341.774730][ T6953] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 341.783072][ T6953] dvb-usb: bulk message failed: -22 (3/0) [ 341.814442][ T6953] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 341.826676][ T6953] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 341.826711][ T6953] usb 2-1: media controller created [ 341.827611][ T6953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.920415][ T6953] dvb-usb: bulk message failed: -22 (6/0) [ 341.920491][ T6953] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 341.937189][ T6953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 341.987956][ T9313] tmpfs: Unknown parameter 'mX0pol' [ 342.062905][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.063134][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.244343][ T30] audit: type=1400 audit(1788396306.189:642): avc: denied { read } for pid=4954 comm="acpid" name="event4" dev="devtmpfs" ino=3121 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.244392][ T30] audit: type=1400 audit(1788396306.189:643): avc: denied { open } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3121 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.244420][ T30] audit: type=1400 audit(1788396306.189:644): avc: denied { ioctl } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3121 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.962100][ T6953] dvb-usb: schedule remote query interval to 150 msecs. [ 342.962125][ T6953] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 342.984365][ T6953] usb 2-1: USB disconnect, device number 29 [ 343.184511][ T6953] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 343.267602][ T189] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 343.267631][ T189] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 343.267746][ T189] asix 5-1:0.251: probe with driver asix failed with error -71 [ 343.326085][ T189] usb 5-1: USB disconnect, device number 29 [ 344.545779][ T30] audit: type=1400 audit(1788396308.489:645): avc: denied { append } for pid=9350 comm="syz.5.745" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.663617][ T189] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 344.688176][ T9355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.748'. [ 344.699982][ T9355] fuse: Bad value for 'rootmode' [ 344.730866][ T30] audit: type=1400 audit(1788396308.669:646): avc: denied { create } for pid=9354 comm="syz.1.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 344.754197][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.745'. [ 344.784333][ T9352] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 344.784355][ T9352] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 344.832920][ T30] audit: type=1400 audit(1788396308.769:647): avc: denied { ioctl } for pid=9344 comm="syz.0.742" path="socket:[25811]" dev="sockfs" ino=25811 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 344.914245][ T189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.925025][ T189] usb 1-1: New USB device found, idVendor=cde9, idProduct=a349, bcdDevice=33.bf [ 344.936287][ T189] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 344.936314][ T189] usb 1-1: can't read configurations, error -71 [ 344.953397][ T6953] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 345.061652][ T30] audit: type=1400 audit(1788396308.999:648): avc: denied { connect } for pid=9367 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.087554][ T30] audit: type=1400 audit(1788396309.029:649): avc: denied { shutdown } for pid=9367 comm="syz.1.750" lport=35720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.109280][ T6953] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 345.119199][ T6953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.119230][ T6953] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.143974][ T6953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.143996][ T6953] usb 4-1: Product: syz [ 345.144011][ T6953] usb 4-1: Manufacturer: syz [ 345.144021][ T6953] usb 4-1: SerialNumber: syz [ 345.297475][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.751'. [ 345.309660][ T9372] netlink: 75 bytes leftover after parsing attributes in process `syz.5.751'. [ 345.361878][ T9374] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5599] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9374] [ 345.381334][ T5700] usb 4-1: USB disconnect, device number 21 [ 345.392736][ T9374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.752'. [ 345.552580][ T9379] /dev/nullb0: Can't open blockdev [ 346.682449][ T52] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 346.768973][ T30] audit: type=1400 audit(1788396310.709:650): avc: denied { read } for pid=9401 comm="syz.4.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 347.906445][ T9418] FAULT_INJECTION: forcing a failure. [ 347.906445][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 347.932173][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.4.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.932193][ T9418] Tainted: [L]=SOFTLOCKUP [ 347.932197][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 347.932203][ T9418] Call Trace: [ 347.932207][ T9418] [ 347.932211][ T9418] dump_stack_lvl+0x100/0x190 [ 347.932232][ T9418] should_fail_ex.cold+0x5/0xa [ 347.932246][ T9418] ? __netlink_lookup+0x652/0x900 [ 347.932262][ T9418] should_failslab+0xc2/0x120 [ 347.932276][ T9418] kmem_cache_alloc_noprof+0x92/0x6a0 [ 347.932288][ T9418] ? skb_clone+0x190/0x400 [ 347.932301][ T9418] skb_clone+0x190/0x400 [ 347.932312][ T9418] netlink_deliver_tap+0xaed/0xcc0 [ 347.932330][ T9418] netlink_unicast+0x62b/0x850 [ 347.932348][ T9418] ? __pfx_netlink_unicast+0x10/0x10 [ 347.932368][ T9418] netlink_sendmsg+0x8b0/0xda0 [ 347.932386][ T9418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.932403][ T9418] ? selinux_socket_sendmsg+0x198/0x2f0 [ 347.932422][ T9418] ____sys_sendmsg+0xa4d/0xbe0 [ 347.932435][ T9418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.932452][ T9418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.932468][ T9418] ? lock_acquire+0x1d1/0x380 [ 347.932479][ T9418] ? get_pid_task+0x2a/0x250 [ 347.932495][ T9418] ___sys_sendmsg+0x190/0x1e0 [ 347.932510][ T9418] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.932524][ T9418] ? get_pid_task+0x106/0x250 [ 347.932543][ T9418] ? find_held_lock+0x2b/0x80 [ 347.932569][ T9418] __sys_sendmsg+0x160/0x210 [ 347.932580][ T9418] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.932598][ T9418] do_syscall_64+0x123/0x790 [ 347.932612][ T9418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.932623][ T9418] RIP: 0033:0x7f7c2db9e159 [ 347.932633][ T9418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.932643][ T9418] RSP: 002b:00007f7c2bdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.932654][ T9418] RAX: ffffffffffffffda RBX: 00007f7c2de25fa0 RCX: 00007f7c2db9e159 [ 347.932661][ T9418] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 347.932668][ T9418] RBP: 00007f7c2bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.932674][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.932680][ T9418] R13: 00007f7c2de26038 R14: 00007f7c2de25fa0 R15: 00007ffebb4e4af8 [ 347.932694][ T9418] [ 348.551422][ T30] audit: type=1400 audit(1788396312.449:651): avc: denied { read } for pid=9422 comm="syz.3.771" name="sg0" dev="devtmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 349.473555][ T5700] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 349.604257][ T5700] usb 4-1: device descriptor read/64, error -71 [ 349.699041][ T9437] FAULT_INJECTION: forcing a failure. [ 349.699041][ T9437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.715534][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.0.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.715554][ T9437] Tainted: [L]=SOFTLOCKUP [ 349.715558][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 349.715564][ T9437] Call Trace: [ 349.715568][ T9437] [ 349.715572][ T9437] dump_stack_lvl+0x100/0x190 [ 349.715592][ T9437] should_fail_ex.cold+0x5/0xa [ 349.715605][ T9437] ? prepare_alloc_pages+0x16d/0x5b0 [ 349.715619][ T9437] should_fail_alloc_page+0xeb/0x140 [ 349.715633][ T9437] prepare_alloc_pages+0x1f0/0x5b0 [ 349.715649][ T9437] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 349.715668][ T9437] ? lock_acquire+0x1d1/0x380 [ 349.715680][ T9437] ? is_bpf_text_address+0x25/0x1a0 [ 349.715694][ T9437] ? find_held_lock+0x2b/0x80 [ 349.715708][ T9437] ? is_bpf_text_address+0x8a/0x1a0 [ 349.715721][ T9437] ? is_bpf_text_address+0x8a/0x1a0 [ 349.715734][ T9437] ? bpf_ksym_find+0x128/0x1c0 [ 349.715749][ T9437] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 349.715767][ T9437] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.715783][ T9437] ? is_bpf_text_address+0x94/0x1a0 [ 349.715797][ T9437] ? __kernel_text_address+0xd/0x30 [ 349.715814][ T9437] ? unwind_get_return_address+0x59/0xa0 [ 349.715829][ T9437] ? arch_stack_walk+0xa6/0xf0 [ 349.715849][ T9437] ? __pfx_stack_trace_save+0x10/0x10 [ 349.715864][ T9437] ? lock_acquire+0x1d1/0x380 [ 349.715875][ T9437] ? stack_depot_save_flags+0x27/0x9f0 [ 349.715887][ T9437] ? find_held_lock+0x2b/0x80 [ 349.715902][ T9437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.715915][ T9437] ? policy_nodemask+0xed/0x4f0 [ 349.715929][ T9437] alloc_pages_mpol+0x201/0x550 [ 349.715944][ T9437] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 349.715961][ T9437] alloc_pages_noprof+0x1a/0x160 [ 349.715976][ T9437] get_free_pages_noprof+0x10/0xb0 [ 349.715988][ T9437] __kasan_populate_vmalloc+0xa0/0x210 [ 349.716002][ T9437] alloc_vmap_area+0x95d/0x2bb0 [ 349.716018][ T9437] ? kasan_save_track+0x14/0x30 [ 349.716029][ T9437] ? __kasan_kmalloc+0xaa/0xb0 [ 349.716040][ T9437] ? __pfx_alloc_vmap_area+0x10/0x10 [ 349.716052][ T9437] ? __get_vm_area_node+0x124/0x350 [ 349.716066][ T9437] __get_vm_area_node+0x1ed/0x350 [ 349.716081][ T9437] __vmalloc_node_range_noprof+0x268/0x1420 [ 349.716095][ T9437] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 349.716110][ T9437] ? up_write+0x2dc/0x5b0 [ 349.716124][ T9437] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 349.716139][ T9437] ? lock_acquire+0x1d1/0x380 [ 349.716150][ T9437] ? find_held_lock+0x2b/0x80 [ 349.716165][ T9437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.716178][ T9437] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 349.716194][ T9437] ? avc_has_perm_noaudit+0x145/0x3b0 [ 349.716208][ T9437] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 349.716220][ T9437] __vmalloc_node_noprof+0xad/0xf0 [ 349.716233][ T9437] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 349.716248][ T9437] __vmalloc_noprof+0xa3/0x120 [ 349.716261][ T9437] ? __pfx___vmalloc_noprof+0x10/0x10 [ 349.716276][ T9437] ? rcu_is_watching+0x13/0xc0 [ 349.716290][ T9437] ? cap_capable+0x107/0x430 [ 349.716305][ T9437] bpf_prog_alloc_no_stats+0x59/0x690 [ 349.716317][ T9437] ? security_capable+0x80/0x260 [ 349.716338][ T9437] bpf_prog_alloc+0x3b/0x200 [ 349.716350][ T9437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.716362][ T9437] bpf_prog_load+0x49e/0x2a80 [ 349.716379][ T9437] ? __pfx_bpf_prog_load+0x10/0x10 [ 349.716407][ T9437] __sys_bpf+0x1f46/0x4a30 [ 349.716421][ T9437] ? __pfx___sys_bpf+0x10/0x10 [ 349.716430][ T9437] ? find_held_lock+0x2b/0x80 [ 349.716444][ T9437] ? get_pid_task+0xfc/0x250 [ 349.716457][ T9437] ? get_pid_task+0xfc/0x250 [ 349.716475][ T9437] ? find_held_lock+0x2b/0x80 [ 349.716492][ T9437] ? rcu_read_lock_any_held+0x6a/0x90 [ 349.716507][ T9437] ? find_held_lock+0x2b/0x80 [ 349.716521][ T9437] ? ksys_write+0x190/0x250 [ 349.716531][ T9437] ? ksys_write+0x190/0x250 [ 349.716540][ T9437] ? lock_acquire+0x1d1/0x380 [ 349.716559][ T9437] ? fput+0x7c/0x100 [ 349.716571][ T9437] ? ksys_write+0x1ac/0x250 [ 349.716582][ T9437] ? __x64_sys_bpf+0xce/0x140 [ 349.716592][ T9437] __x64_sys_bpf+0xce/0x140 [ 349.716602][ T9437] ? do_syscall_64+0xae/0x790 [ 349.716615][ T9437] do_syscall_64+0x123/0x790 [ 349.716628][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.716639][ T9437] RIP: 0033:0x7f248279e159 [ 349.716649][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.716659][ T9437] RSP: 002b:00007f248364f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.716671][ T9437] RAX: ffffffffffffffda RBX: 00007f2482a25fa0 RCX: 00007f248279e159 [ 349.716678][ T9437] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 349.716684][ T9437] RBP: 00007f248364f090 R08: 0000000000000000 R09: 0000000000000000 [ 349.716690][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.716696][ T9437] R13: 00007f2482a26038 R14: 00007f2482a25fa0 R15: 00007ffe94df2788 [ 349.716710][ T9437] [ 349.816745][ T9437] syz.0.768: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 349.816792][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.0.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.816807][ T9437] Tainted: [L]=SOFTLOCKUP [ 349.816812][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 349.816818][ T9437] Call Trace: [ 349.816822][ T9437] [ 349.816826][ T9437] dump_stack_lvl+0x100/0x190 [ 349.816846][ T9437] warn_alloc.cold+0x9e/0xb2 [ 349.816859][ T9437] ? __pfx_warn_alloc+0x10/0x10 [ 349.816875][ T9437] ? lockdep_hardirqs_on+0x7d/0x110 [ 349.816888][ T9437] ? __get_vm_area_node+0x2f0/0x350 [ 349.816903][ T9437] ? __get_vm_area_node+0x22b/0x350 [ 349.816918][ T9437] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 349.816933][ T9437] ? up_write+0x2dc/0x5b0 [ 349.816947][ T9437] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 349.816961][ T9437] ? lock_acquire+0x1d1/0x380 [ 349.816972][ T9437] ? find_held_lock+0x2b/0x80 [ 349.816987][ T9437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.817000][ T9437] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 349.817016][ T9437] ? avc_has_perm_noaudit+0x145/0x3b0 [ 349.817029][ T9437] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 349.817041][ T9437] __vmalloc_node_noprof+0xad/0xf0 [ 349.817054][ T9437] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 349.817069][ T9437] __vmalloc_noprof+0xa3/0x120 [ 349.817082][ T9437] ? __pfx___vmalloc_noprof+0x10/0x10 [ 349.817096][ T9437] ? rcu_is_watching+0x13/0xc0 [ 349.817110][ T9437] ? cap_capable+0x107/0x430 [ 349.817125][ T9437] bpf_prog_alloc_no_stats+0x59/0x690 [ 349.817141][ T9437] ? security_capable+0x80/0x260 [ 349.817156][ T9437] bpf_prog_alloc+0x3b/0x200 [ 349.817168][ T9437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.817180][ T9437] bpf_prog_load+0x49e/0x2a80 [ 349.817197][ T9437] ? __pfx_bpf_prog_load+0x10/0x10 [ 349.817221][ T9437] __sys_bpf+0x1f46/0x4a30 [ 349.817235][ T9437] ? __pfx___sys_bpf+0x10/0x10 [ 349.817244][ T9437] ? find_held_lock+0x2b/0x80 [ 349.817258][ T9437] ? get_pid_task+0xfc/0x250 [ 349.817272][ T9437] ? get_pid_task+0xfc/0x250 [ 349.817290][ T9437] ? find_held_lock+0x2b/0x80 [ 349.817307][ T9437] ? rcu_read_lock_any_held+0x6a/0x90 [ 349.817323][ T9437] ? find_held_lock+0x2b/0x80 [ 349.817336][ T9437] ? ksys_write+0x190/0x250 [ 349.817346][ T9437] ? ksys_write+0x190/0x250 [ 349.817355][ T9437] ? lock_acquire+0x1d1/0x380 [ 349.817375][ T9437] ? fput+0x7c/0x100 [ 349.817387][ T9437] ? ksys_write+0x1ac/0x250 [ 349.817404][ T9437] ? __x64_sys_bpf+0xce/0x140 [ 349.817413][ T9437] __x64_sys_bpf+0xce/0x140 [ 349.817424][ T9437] ? do_syscall_64+0xae/0x790 [ 349.817436][ T9437] do_syscall_64+0x123/0x790 [ 349.817449][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.817460][ T9437] RIP: 0033:0x7f248279e159 [ 349.817470][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.817480][ T9437] RSP: 002b:00007f248364f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.817490][ T9437] RAX: ffffffffffffffda RBX: 00007f2482a25fa0 RCX: 00007f248279e159 [ 349.817497][ T9437] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 349.817503][ T9437] RBP: 00007f248364f090 R08: 0000000000000000 R09: 0000000000000000 [ 349.817510][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.817516][ T9437] R13: 00007f2482a26038 R14: 00007f2482a25fa0 R15: 00007ffe94df2788 [ 349.817529][ T9437] [ 349.847488][ T5700] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 349.904014][ T9437] Mem-Info: [ 349.904024][ T9437] active_anon:18307 inactive_anon:13052 isolated_anon:0 [ 349.904024][ T9437] active_file:119 inactive_file:62749 isolated_file:0 [ 349.904024][ T9437] unevictable:0 dirty:181 writeback:0 [ 349.904024][ T9437] slab_reclaimable:11926 slab_unreclaimable:98840 [ 349.904024][ T9437] mapped:32469 shmem:18866 pagetables:1502 [ 349.904024][ T9437] sec_pagetables:0 bounce:0 [ 349.904024][ T9437] kernel_misc_reclaimable:0 [ 349.904024][ T9437] free:1256932 free_pcp:27866 free_cma:0 [ 349.904050][ T9437] Node 0 active_anon:73228kB inactive_anon:52208kB active_file:476kB inactive_file:250788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129876kB dirty:724kB writeback:0kB shmem:75464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:10240kB kernel_stack:17376kB pagetables:5860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 349.904078][ T9437] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 349.904103][ T9437] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.904132][ T9437] lowmem_reserve[]: 0 2470 2471 2471 2471 [ 349.904164][ T9437] Node 0 DMA32 free:1069080kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:73228kB inactive_anon:52208kB active_file:476kB inactive_file:250788kB unevictable:0kB writepending:724kB zspages:0kB present:3129332kB managed:2530264kB mlocked:0kB bounce:0kB free_pcp:111464kB local_pcp:111464kB free_cma:0kB [ 349.904194][ T9437] lowmem_reserve[]: 0 0 0 0 0 [ 349.904211][ T9437] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.904238][ T9437] lowmem_reserve[]: 0 0 0 0 0 [ 349.904254][ T9437] Node 1 Normal free:3943288kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.904282][ T9437] lowmem_reserve[]: 0 0 0 0 0 [ 349.904299][ T9437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 349.904357][ T9437] Node 0 DMA32: 2490*4kB (UME) 1182*8kB (UME) 162*16kB (UME) 838*32kB (UME) 144*64kB (UME) 183*128kB (UME) 212*256kB (UM) 53*512kB (UME) 9*1024kB (ME) 0*2048kB 219*4096kB (UM) = 1069112kB [ 349.948251][ T9437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 349.948304][ T9437] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 10*16kB (UM) 13*32kB (UM) 10*64kB (UM) 9*128kB (UM) 8*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 960*4096kB (UM) = 3943288kB [ 349.948383][ T9437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.948392][ T9437] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 349.948400][ T9437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.948408][ T9437] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 349.948415][ T9437] 81730 total pagecache pages [ 349.948424][ T9437] 0 pages in swap cache [ 349.948427][ T9437] Free swap = 124996kB [ 349.948431][ T9437] Total swap = 124996kB [ 349.948435][ T9437] 2097051 pages RAM [ 349.948439][ T9437] 0 pages HighMem/MovableOnly [ 349.948442][ T9437] 432850 pages reserved [ 349.948446][ T9437] 0 pages cma reserved [ 350.029070][ T5700] usb 4-1: device descriptor read/64, error -71 [ 350.137719][ T5700] usb usb4-port1: attempt power cycle [ 350.572225][ T5700] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 350.591164][ T5700] usb 4-1: device descriptor read/8, error -71 [ 350.882346][ T5700] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 350.922901][ T5700] usb 4-1: device descriptor read/8, error -71 [ 351.025434][ T5700] usb usb4-port1: unable to enumerate USB device [ 353.650324][ T30] audit: type=1400 audit(1788396317.589:652): avc: denied { mounton } for pid=9454 comm="syz.1.780" path="/163/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 353.744106][ T9460] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 353.891009][ T9473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.903823][ T9470] mmap: syz.3.782 (9470): VmData 37724160 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 354.220801][ T9483] FAULT_INJECTION: forcing a failure. [ 354.220801][ T9483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.243177][ T9483] CPU: 0 UID: 0 PID: 9483 Comm: syz.1.787 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.243198][ T9483] Tainted: [L]=SOFTLOCKUP [ 354.243202][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 354.243208][ T9483] Call Trace: [ 354.243212][ T9483] [ 354.243217][ T9483] dump_stack_lvl+0x100/0x190 [ 354.243237][ T9483] should_fail_ex.cold+0x5/0xa [ 354.243253][ T9483] _copy_to_user+0x32/0xd0 [ 354.243271][ T9483] simple_read_from_buffer+0xcb/0x170 [ 354.243286][ T9483] proc_fail_nth_read+0x1af/0x230 [ 354.243299][ T9483] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.243312][ T9483] ? rw_verify_area+0xce/0x6d0 [ 354.243330][ T9483] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.243342][ T9483] vfs_read+0x1e4/0xb40 [ 354.243358][ T9483] ? lock_acquire+0x1d1/0x380 [ 354.243370][ T9483] ? __fget_files+0x34/0x3d0 [ 354.243382][ T9483] ? __pfx_vfs_read+0x10/0x10 [ 354.243397][ T9483] ? find_held_lock+0x2b/0x80 [ 354.243412][ T9483] ? __fget_files+0x215/0x3d0 [ 354.243426][ T9483] ? __fget_files+0x21f/0x3d0 [ 354.243442][ T9483] ksys_read+0x12a/0x250 [ 354.243456][ T9483] ? __pfx_ksys_read+0x10/0x10 [ 354.243470][ T9483] do_syscall_64+0x123/0x790 [ 354.243484][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.243496][ T9483] RIP: 0033:0x7fadce35e98e [ 354.243506][ T9483] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.243516][ T9483] RSP: 002b:00007fadcf1affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.243528][ T9483] RAX: ffffffffffffffda RBX: 00007fadcf1b06c0 RCX: 00007fadce35e98e [ 354.243535][ T9483] RDX: 000000000000000f RSI: 00007fadcf1b00a0 RDI: 0000000000000003 [ 354.243541][ T9483] RBP: 00007fadcf1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 354.243548][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.243555][ T9483] R13: 00007fadce626038 R14: 00007fadce625fa0 R15: 00007fffba9cd778 [ 354.243569][ T9483] [ 354.489698][ T30] audit: type=1400 audit(1788396318.429:653): avc: denied { read } for pid=9477 comm="syz.3.786" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.594277][ T9482] FAT-fs (nullb0): bogus number of reserved sectors [ 354.594300][ T9482] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 354.665065][ T30] audit: type=1400 audit(1788396318.609:654): avc: denied { setattr } for pid=9481 comm="syz.4.788" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 356.659963][ T30] audit: type=1400 audit(1788396320.599:655): avc: denied { write } for pid=9497 comm="syz.3.792" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 357.073388][ T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 357.185377][ T30] audit: type=1400 audit(1788396321.119:656): avc: denied { connect } for pid=9504 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.301638][ T30] audit: type=1400 audit(1788396321.239:657): avc: denied { write } for pid=9504 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.581279][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.591292][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 357.591318][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 357.611972][ T9] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 357.611988][ T9] usb 2-1: config 0 has no interface number 0 [ 357.630990][ T9] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 357.638948][ T9] usb 2-1: config 0 interface 88 has no altsetting 0 [ 357.775583][ T9] usb 2-1: string descriptor 0 read error: -71 [ 357.775656][ T9] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 357.792577][ T9] usb 2-1: config 0 descriptor?? [ 357.804003][ T9] usb 2-1: can't set config #0, error -71 [ 357.813110][ T9] usb 2-1: USB disconnect, device number 30 [ 357.836886][ T9515] overlayfs: failed to resolve './file1/file0': -2 [ 357.874696][ T9506] db_root: cannot open: »»»»»»ªªªªª†Ýj [ 357.973017][ T9514] input: syz0 as /devices/virtual/input/input14 [ 358.455498][ T30] audit: type=1400 audit(1788396322.399:658): avc: denied { getattr } for pid=9534 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 358.562346][ T30] audit: type=1400 audit(1788396322.499:659): avc: denied { write } for pid=9538 comm="syz.5.784" path="socket:[26359]" dev="sockfs" ino=26359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.589895][ T30] audit: type=1400 audit(1788396322.539:660): avc: denied { setopt } for pid=9538 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.739512][ T30] audit: type=1400 audit(1788396322.679:661): avc: denied { read } for pid=9545 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 358.739552][ T30] audit: type=1400 audit(1788396322.679:662): avc: denied { open } for pid=9545 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.516275][ T9552] ip6gre1: entered promiscuous mode [ 359.524751][ T9552] ip6gre1: entered allmulticast mode [ 359.676273][ T30] audit: type=1400 audit(1788396323.619:663): avc: denied { getopt } for pid=9561 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 359.697096][ T30] audit: type=1400 audit(1788396323.649:664): avc: denied { setattr } for pid=9561 comm="syz.1.805" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 359.776722][ T5700] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 359.810504][ T9560] ipvlan2: entered allmulticast mode [ 359.810531][ T9560] ip6gretap0: entered allmulticast mode [ 359.811480][ T9568] kAFS: unparsable volume name [ 359.834473][ T30] audit: type=1400 audit(1788396323.769:665): avc: denied { block_suspend } for pid=9558 comm="syz.5.804" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 359.944480][ T5700] usb 5-1: Using ep0 maxpacket: 16 [ 359.950314][ T5700] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 359.964614][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.964643][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.964670][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.025074][ T5700] usb 5-1: config 0 descriptor?? [ 360.048127][ T30] audit: type=1400 audit(1788396323.989:666): avc: denied { write } for pid=9528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.048186][ T30] audit: type=1400 audit(1788396323.989:667): avc: denied { create } for pid=9528 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.048214][ T30] audit: type=1400 audit(1788396323.989:668): avc: denied { write } for pid=9528 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=5059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.048249][ T30] audit: type=1400 audit(1788396323.989:669): avc: denied { append } for pid=9528 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.445557][ T30] audit: type=1400 audit(1788396324.389:670): avc: denied { write } for pid=9575 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.782920][ T5700] usbhid 5-1:0.0: can't add hid device: -71 [ 360.782985][ T5700] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 360.805765][ T5700] usb 5-1: USB disconnect, device number 30 [ 361.059104][ T9595] binder: 9588:9595 ioctl c018620c 200000000540 returned -1 [ 361.163482][ T9598] tipc: Enabling of bearer rejected, failed to enable media [ 361.683963][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 361.695499][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 361.695520][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 361.719494][ T9610] tipc: Enabling of bearer rejected, failed to enable media [ 361.825589][ T9622] jffs2: notice: (9622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 363.739755][ T9636] netlink: 348 bytes leftover after parsing attributes in process `syz.5.813'. [ 363.739787][ T9636] netlink: 348 bytes leftover after parsing attributes in process `syz.5.813'. [ 363.843832][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.850355][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 363.850382][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 364.034190][ T9642] comedi comedi4: bad chanlist[1]=0x00000009 chan=9 range length=2 [ 364.166251][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 364.166279][ T30] audit: type=1400 audit(1788396328.109:676): avc: denied { write } for pid=9625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.326376][ T30] audit: type=1400 audit(1788396328.269:677): avc: denied { write } for pid=9647 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.858538][ T30] audit: type=1400 audit(1788396328.799:678): avc: denied { write } for pid=9652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.009170][ T30] audit: type=1400 audit(1788396328.949:679): avc: denied { write } for pid=9663 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.444760][ T30] audit: type=1400 audit(1788396329.379:680): avc: denied { write } for pid=9665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.555802][ T30] audit: type=1400 audit(1788396329.499:681): avc: denied { write } for pid=9676 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.756447][ T30] audit: type=1400 audit(1788396329.699:682): avc: denied { write } for pid=9678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.821931][ T30] audit: type=1400 audit(1788396329.759:683): avc: denied { write } for pid=9689 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.923564][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 365.929782][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 365.929796][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 368.086230][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.094662][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 368.094683][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 368.965894][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.817'. [ 369.035793][ T9695] 9p: Bad value for 'rfdno' [ 369.132242][ T9697] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 369.180544][ T9707] netlink: 44 bytes leftover after parsing attributes in process `syz.4.819'. [ 369.485254][ T9704] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 369.496276][ T9704] block device autoloading is deprecated and will be removed. [ 369.756141][ T1079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.980928][ T9719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.825'. [ 370.026396][ T30] audit: type=1400 audit(1788396333.969:684): avc: denied { map } for pid=9722 comm="syz.5.826" path="/dev/video2" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 370.026436][ T30] audit: type=1400 audit(1788396333.969:685): avc: denied { execute } for pid=9722 comm="syz.5.826" path="/dev/video2" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 370.932954][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.946352][ T5601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.955365][ T5601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.965922][ T5601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.973630][ T5601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.021852][ T1079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.051934][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.063611][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.074207][ T9730] FAULT_INJECTION: forcing a failure. [ 371.074207][ T9730] name failslab, interval 1, probability 0, space 0, times 0 [ 371.088877][ T9730] CPU: 0 UID: 0 PID: 9730 Comm: syz.4.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.088898][ T9730] Tainted: [L]=SOFTLOCKUP [ 371.088903][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 371.088909][ T9730] Call Trace: [ 371.088913][ T9730] [ 371.088918][ T9730] dump_stack_lvl+0x100/0x190 [ 371.088938][ T9730] should_fail_ex.cold+0x5/0xa [ 371.088954][ T9730] should_failslab+0xc2/0x120 [ 371.088968][ T9730] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 371.088980][ T9730] ? __alloc_skb+0x140/0x710 [ 371.088999][ T9730] __alloc_skb+0x140/0x710 [ 371.089014][ T9730] ? __alloc_skb+0x5b7/0x710 [ 371.089029][ T9730] ? __pfx___alloc_skb+0x10/0x10 [ 371.089044][ T9730] ? genl_rcv_msg+0x4be/0x800 [ 371.089061][ T9730] netlink_ack+0x117/0xb80 [ 371.089082][ T9730] netlink_rcv_skb+0x333/0x420 [ 371.089098][ T9730] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.089109][ T9730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.089133][ T9730] ? netlink_deliver_tap+0x1ae/0xcc0 [ 371.089150][ T9730] genl_rcv+0x28/0x40 [ 371.089159][ T9730] netlink_unicast+0x585/0x850 [ 371.089178][ T9730] ? __pfx_netlink_unicast+0x10/0x10 [ 371.089197][ T9730] netlink_sendmsg+0x8b0/0xda0 [ 371.089215][ T9730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.089233][ T9730] ? selinux_socket_sendmsg+0x198/0x2f0 [ 371.089252][ T9730] ____sys_sendmsg+0xa4d/0xbe0 [ 371.089264][ T9730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.089281][ T9730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.089297][ T9730] ? lock_acquire+0x1d1/0x380 [ 371.089309][ T9730] ? get_pid_task+0x2a/0x250 [ 371.089325][ T9730] ___sys_sendmsg+0x190/0x1e0 [ 371.089340][ T9730] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.089354][ T9730] ? get_pid_task+0x106/0x250 [ 371.089372][ T9730] ? find_held_lock+0x2b/0x80 [ 371.089396][ T9730] __sys_sendmsg+0x160/0x210 [ 371.089407][ T9730] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.089425][ T9730] do_syscall_64+0x123/0x790 [ 371.089439][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.089451][ T9730] RIP: 0033:0x7f7c2db9e159 [ 371.089460][ T9730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.089471][ T9730] RSP: 002b:00007f7c2bdd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.089482][ T9730] RAX: ffffffffffffffda RBX: 00007f7c2de26090 RCX: 00007f7c2db9e159 [ 371.089489][ T9730] RDX: 0000000020000884 RSI: 0000200000003140 RDI: 0000000000000005 [ 371.089495][ T9730] RBP: 00007f7c2bdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 371.089502][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.089508][ T9730] R13: 00007f7c2de26128 R14: 00007f7c2de26090 R15: 00007ffebb4e4af8 [ 371.089521][ T9730] [ 371.119082][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.138884][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.194948][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.660966][ T1079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.849202][ T9742] binder: 9734:9742 ioctl c018620c 200000000540 returned -1 [ 371.964897][ T1079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.021727][ T9742] tipc: Enabling of bearer rejected, failed to enable media [ 372.915222][ T9761] netlink: 'syz.5.827': attribute type 2 has an invalid length. [ 372.915242][ T9761] netlink: 224 bytes leftover after parsing attributes in process `syz.5.827'. [ 373.005990][ T9768] 9p: Bad value for 'wfdno' [ 373.205966][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.212341][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.222761][ T9773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9773 comm=syz.4.835 [ 373.266601][ T9764] syzkaller1: entered promiscuous mode [ 373.266625][ T9764] syzkaller1: entered allmulticast mode [ 373.284843][ T52] Bluetooth: hci2: command tx timeout [ 374.462419][ T9794] CIFS: Attempting to mount //::1/share [ 374.607372][ T30] audit: type=1400 audit(1788396338.549:686): avc: denied { write } for pid=9763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.671870][ T9794] CIFS: VFS: Error connecting to socket. Aborting operation. [ 374.680975][ T9794] CIFS: VFS: cifs_mount failed w/return code = -4 [ 374.805940][ T1079] team0: Port device xfrm0 removed [ 374.872088][ T30] audit: type=1400 audit(1788396338.809:687): avc: denied { write } for pid=9805 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.008169][ T9812] binder: 9806:9812 ioctl c018620c 200000000540 returned -1 [ 375.070753][ T1079] bond0 (unregistering): Released all slaves [ 375.088638][ T1079] bond1 (unregistering): Released all slaves [ 375.172035][ T9807] team0: Port device xfrm0 removed [ 375.172697][ T9807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.202219][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 375.227635][ T9812] team0: Port device xfrm0 added [ 375.242483][ T9815] tipc: Enabling of bearer rejected, failed to enable media [ 375.398926][ T52] Bluetooth: hci2: command tx timeout [ 376.345038][ T9832] binder: 9818:9832 ioctl c018620c 200000000540 returned -1 [ 376.477084][ T9832] tipc: Enabling of bearer rejected, failed to enable media [ 376.764036][ T1079] hsr_slave_0: left promiscuous mode [ 376.785257][ T1079] hsr_slave_1: left promiscuous mode [ 376.799527][ T9846] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 376.818568][ T1079] veth1_macvtap: left promiscuous mode [ 376.824891][ T1079] veth0_macvtap: left promiscuous mode [ 376.830440][ T1079] veth1_vlan: left promiscuous mode [ 376.836061][ T1079] veth0_vlan: left promiscuous mode [ 377.229149][ T30] audit: type=1400 audit(1788396341.169:688): avc: denied { write } for pid=9836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.168699][ T52] Bluetooth: hci2: command tx timeout [ 378.203054][ T9869] FAULT_INJECTION: forcing a failure. [ 378.203054][ T9869] name failslab, interval 1, probability 0, space 0, times 0 [ 378.227177][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.3.849 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.227203][ T9869] Tainted: [L]=SOFTLOCKUP [ 378.227207][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 378.227214][ T9869] Call Trace: [ 378.227219][ T9869] [ 378.227224][ T9869] dump_stack_lvl+0x100/0x190 [ 378.227244][ T9869] should_fail_ex.cold+0x5/0xa [ 378.227260][ T9869] should_failslab+0xc2/0x120 [ 378.227274][ T9869] __kmalloc_noprof+0xfc/0x840 [ 378.227285][ T9869] ? kasan_save_track+0x14/0x30 [ 378.227296][ T9869] ? alloc_trace_uprobe+0x86/0x370 [ 378.227311][ T9869] alloc_trace_uprobe+0x86/0x370 [ 378.227326][ T9869] __trace_uprobe_create+0x673/0x22f0 [ 378.227345][ T9869] ? __pfx___trace_uprobe_create+0x10/0x10 [ 378.227358][ T9869] ? trace_kmalloc+0xeb/0x110 [ 378.227370][ T9869] ? __kasan_kmalloc+0xaa/0xb0 [ 378.227381][ T9869] ? __kmalloc_noprof+0x350/0x840 [ 378.227392][ T9869] ? argv_split+0x173/0x420 [ 378.227406][ T9869] ? argv_split+0x359/0x420 [ 378.227417][ T9869] ? __pfx___trace_uprobe_create+0x10/0x10 [ 378.227431][ T9869] trace_probe_create+0xef/0x100 [ 378.227444][ T9869] ? __pfx_trace_probe_create+0x10/0x10 [ 378.227459][ T9869] dyn_event_create+0x50/0x90 [ 378.227476][ T9869] create_or_delete_trace_uprobe+0x5a/0xb0 [ 378.227489][ T9869] trace_parse_run_command+0x1ab/0x3b0 [ 378.227501][ T9869] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 378.227517][ T9869] vfs_write+0x2aa/0x1050 [ 378.227535][ T9869] ? __pfx_probes_write+0x10/0x10 [ 378.227547][ T9869] ? lock_acquire+0x1d1/0x380 [ 378.227557][ T9869] ? __fget_files+0x34/0x3d0 [ 378.227569][ T9869] ? __pfx_vfs_write+0x10/0x10 [ 378.227585][ T9869] ? find_held_lock+0x2b/0x80 [ 378.227599][ T9869] ? __fget_files+0x215/0x3d0 [ 378.227614][ T9869] ? __fget_files+0x21f/0x3d0 [ 378.227629][ T9869] ksys_write+0x12a/0x250 [ 378.227639][ T9869] ? __pfx_ksys_write+0x10/0x10 [ 378.227653][ T9869] do_syscall_64+0x123/0x790 [ 378.227667][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.227678][ T9869] RIP: 0033:0x7fc9b219e159 [ 378.227688][ T9869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.227698][ T9869] RSP: 002b:00007fc9b3000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.227710][ T9869] RAX: ffffffffffffffda RBX: 00007fc9b2425fa0 RCX: 00007fc9b219e159 [ 378.227717][ T9869] RDX: 000000000000003d RSI: 0000200000000540 RDI: 0000000000000004 [ 378.227723][ T9869] RBP: 00007fc9b3000090 R08: 0000000000000000 R09: 0000000000000000 [ 378.227729][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.227735][ T9869] R13: 00007fc9b2426038 R14: 00007fc9b2425fa0 R15: 00007ffcb56ca738 [ 378.227749][ T9869] [ 378.568865][ T9869] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 378.580927][ T9869] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 378.589314][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.3.849 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.600042][ T9869] Tainted: [L]=SOFTLOCKUP [ 378.604335][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 378.614369][ T9869] RIP: 0010:path_put+0x22/0x70 [ 378.619108][ T9869] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 03 ed 74 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 3f 9a 04 00 48 89 da 48 b8 00 00 [ 378.638689][ T9869] RSP: 0018:ffffc900036a7a70 EFLAGS: 00010203 [ 378.644725][ T9869] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 378.652664][ T9869] RDX: 0000000000000008 RSI: ffffffff8297030d RDI: 0000000000000044 [ 378.660605][ T9869] RBP: ffffc900036a7c00 R08: 0000000000000001 R09: 0000000000000000 [ 378.668545][ T9869] R10: ffffffff9b9a6d00 R11: 0000000000000001 R12: ffff888077571488 [ 378.676493][ T9869] R13: ffff8880742c3880 R14: ffff888077571580 R15: fffffffffffffff4 [ 378.684434][ T9869] FS: 00007fc9b30006c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 378.693341][ T9869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.699909][ T9869] CR2: 0000001b32cf4ff8 CR3: 000000005955c000 CR4: 00000000003526f0 [ 378.707869][ T9869] Call Trace: [ 378.711132][ T9869] [ 378.714038][ T9869] __trace_uprobe_create+0x96d/0x22f0 [ 378.719390][ T9869] ? __pfx___trace_uprobe_create+0x10/0x10 [ 378.725169][ T9869] ? trace_kmalloc+0xeb/0x110 [ 378.729834][ T9869] ? __kasan_kmalloc+0xaa/0xb0 [ 378.734574][ T9869] ? __kmalloc_noprof+0x350/0x840 [ 378.739573][ T9869] ? argv_split+0x173/0x420 [ 378.744052][ T9869] ? argv_split+0x359/0x420 [ 378.748611][ T9869] ? __pfx___trace_uprobe_create+0x10/0x10 [ 378.754388][ T9869] trace_probe_create+0xef/0x100 [ 378.759297][ T9869] ? __pfx_trace_probe_create+0x10/0x10 [ 378.764815][ T9869] dyn_event_create+0x50/0x90 [ 378.769469][ T9869] create_or_delete_trace_uprobe+0x5a/0xb0 [ 378.775246][ T9869] trace_parse_run_command+0x1ab/0x3b0 [ 378.780684][ T9869] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 378.787157][ T9869] vfs_write+0x2aa/0x1050 [ 378.791479][ T9869] ? __pfx_probes_write+0x10/0x10 [ 378.796485][ T9869] ? lock_acquire+0x1d1/0x380 [ 378.801143][ T9869] ? __fget_files+0x34/0x3d0 [ 378.805706][ T9869] ? __pfx_vfs_write+0x10/0x10 [ 378.810444][ T9869] ? find_held_lock+0x2b/0x80 [ 378.815092][ T9869] ? __fget_files+0x215/0x3d0 [ 378.819744][ T9869] ? __fget_files+0x21f/0x3d0 [ 378.824479][ T9869] ksys_write+0x12a/0x250 [ 378.828778][ T9869] ? __pfx_ksys_write+0x10/0x10 [ 378.833606][ T9869] do_syscall_64+0x123/0x790 [ 378.838183][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.844057][ T9869] RIP: 0033:0x7fc9b219e159 [ 378.848449][ T9869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.868027][ T9869] RSP: 002b:00007fc9b3000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.876411][ T9869] RAX: ffffffffffffffda RBX: 00007fc9b2425fa0 RCX: 00007fc9b219e159 [ 378.884352][ T9869] RDX: 000000000000003d RSI: 0000200000000540 RDI: 0000000000000004 [ 378.892305][ T9869] RBP: 00007fc9b3000090 R08: 0000000000000000 R09: 0000000000000000 [ 378.900245][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.908187][ T9869] R13: 00007fc9b2426038 R14: 00007fc9b2425fa0 R15: 00007ffcb56ca738 [ 378.916131][ T9869] [ 378.919127][ T9869] Modules linked in: [ 378.924186][ T9869] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 379.088971][ T30] audit: type=1400 audit(1788396342.979:689): avc: denied { write } for pid=9872 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.089006][ T30] audit: type=1400 audit(1788396343.029:690): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 379.089024][ T30] audit: type=1400 audit(1788396343.029:691): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.089040][ T30] audit: type=1400 audit(1788396343.029:692): avc: denied { write search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.089058][ T30] audit: type=1400 audit(1788396343.029:693): avc: denied { add_name } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.089075][ T30] audit: type=1400 audit(1788396343.029:694): avc: denied { create } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 379.089091][ T30] audit: type=1400 audit(1788396343.029:695): avc: denied { append open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 379.089109][ T30] audit: type=1400 audit(1788396343.029:696): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 379.436295][ T9846] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 379.456821][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 379.643092][ T9851] FAULT_INJECTION: forcing a failure. [ 379.643092][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 379.643121][ T9851] CPU: 0 UID: 0 PID: 9851 Comm: syz.4.846 Tainted: G D L syzkaller #0 PREEMPT(full) [ 379.643138][ T9851] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 379.643165][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 379.643171][ T9851] Call Trace: [ 379.643175][ T9851] [ 379.643179][ T9851] dump_stack_lvl+0x100/0x190 [ 379.643197][ T9851] should_fail_ex.cold+0x5/0xa [ 379.643210][ T9851] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 379.643221][ T9851] should_failslab+0xc2/0x120 [ 379.643234][ T9851] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 379.643244][ T9851] ? lock_release+0x24d/0x310 [ 379.643254][ T9851] ? __d_alloc+0x35/0xa50 [ 379.643268][ T9851] __d_alloc+0x35/0xa50 [ 379.643281][ T9851] d_alloc+0x4a/0x1e0 [ 379.643294][ T9851] lookup_one_qstr_excl+0x171/0x250 [ 379.643310][ T9851] start_dirop+0x59/0xb0 [ 379.643324][ T9851] simple_start_creating+0xf9/0x110 [ 379.643336][ T9851] ? __pfx_simple_start_creating+0x10/0x10 [ 379.643348][ T9851] ? mntput+0x70/0xa0 [ 379.643359][ T9851] ? simple_pin_fs+0xa3/0x190 [ 379.643369][ T9851] debugfs_start_creating.part.0+0x9f/0x180 [ 379.643384][ T9851] __debugfs_create_file+0x86/0x4d0 [ 379.643398][ T9851] debugfs_create_file_full+0x41/0x60 [ 379.643413][ T9851] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 379.643425][ T9851] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 379.643441][ T9851] ? lockdep_init_map_type+0x5c/0x250 [ 379.643453][ T9851] ? __pfx_macvlan_setup+0x10/0x10 [ 379.643465][ T9851] alloc_netdev_mqs+0x314/0x15c0 [ 379.643477][ T9851] rtnl_create_link+0xc13/0xf80 [ 379.643489][ T9851] rtnl_newlink+0x15bc/0x2620 [ 379.643501][ T9851] ? __pfx_rtnl_newlink+0x10/0x10 [ 379.643511][ T9851] ? avc_has_perm_noaudit+0x56/0x3b0 [ 379.643523][ T9851] ? find_held_lock+0x2b/0x80 [ 379.643538][ T9851] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 379.643549][ T9851] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 379.643566][ T9851] ? lock_acquire+0x1d1/0x380 [ 379.643576][ T9851] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 379.643587][ T9851] ? find_held_lock+0x2b/0x80 [ 379.643600][ T9851] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 379.643610][ T9851] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 379.643621][ T9851] ? __pfx_rtnl_newlink+0x10/0x10 [ 379.643632][ T9851] rtnetlink_rcv_msg+0x95e/0xe90 [ 379.643643][ T9851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.643655][ T9851] ? ref_tracker_free+0x37e/0x6c0 [ 379.643667][ T9851] netlink_rcv_skb+0x159/0x420 [ 379.643683][ T9851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.643694][ T9851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.643711][ T9851] ? netlink_deliver_tap+0x1ae/0xcc0 [ 379.643726][ T9851] netlink_unicast+0x585/0x850 [ 379.643742][ T9851] ? __pfx_netlink_unicast+0x10/0x10 [ 379.643758][ T9851] netlink_sendmsg+0x8b0/0xda0 [ 379.643774][ T9851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.643790][ T9851] ? selinux_socket_sendmsg+0x198/0x2f0 [ 379.643806][ T9851] ____sys_sendmsg+0xa4d/0xbe0 [ 379.643819][ T9851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.643834][ T9851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.643848][ T9851] ? lock_acquire+0x1d1/0x380 [ 379.643858][ T9851] ? get_pid_task+0x2a/0x250 [ 379.643872][ T9851] ___sys_sendmsg+0x190/0x1e0 [ 379.643885][ T9851] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.643898][ T9851] ? get_pid_task+0x106/0x250 [ 379.643913][ T9851] ? find_held_lock+0x2b/0x80 [ 379.643930][ T9851] __sys_sendmsg+0x160/0x210 [ 379.643940][ T9851] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.643952][ T9851] do_syscall_64+0x123/0x790 [ 379.643964][ T9851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.643975][ T9851] RIP: 0033:0x7f7c2db9e159 [ 379.643984][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.643994][ T9851] RSP: 002b:00007f7c2bd72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.644005][ T9851] RAX: ffffffffffffffda RBX: 00007f7c2de26360 RCX: 00007f7c2db9e159 [ 379.644012][ T9851] RDX: 0000000000000884 RSI: 0000200000000240 RDI: 0000000000000003 [ 379.644018][ T9851] RBP: 00007f7c2bd72090 R08: 0000000000000000 R09: 0000000000000000 [ 379.644024][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.644030][ T9851] R13: 00007f7c2de263f8 R14: 00007f7c2de26360 R15: 00007ffebb4e4af8 [ 379.644039][ T9851] [ 379.674102][ T9871] netlink: 156 bytes leftover after parsing attributes in process `syz.1.848'. [ 380.337638][ T1079] IPVS: stop unused estimator thread 0... [ 380.354460][ T1079] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.389970][ T1079] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.415492][ T1079] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.481404][ T1079] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.509468][ T9869] RIP: 0010:path_put+0x22/0x70 [ 380.526175][ T9869] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 03 ed 74 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 3f 9a 04 00 48 89 da 48 b8 00 00 [ 380.546603][ T9869] RSP: 0018:ffffc900036a7a70 EFLAGS: 00010203 [ 380.554354][ T9869] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 380.562398][ T9869] RDX: 0000000000000008 RSI: ffffffff8297030d RDI: 0000000000000044 [ 380.570647][ T9869] RBP: ffffc900036a7c00 R08: 0000000000000001 R09: 0000000000000000 [ 380.578806][ T9869] R10: ffffffff9b9a6d00 R11: 0000000000000001 R12: ffff888077571488 [ 380.586914][ T9869] R13: ffff8880742c3880 R14: ffff888077571580 R15: fffffffffffffff4 [ 380.595090][ T9869] FS: 00007fc9b30006c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 380.604643][ T9869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.611347][ T9869] CR2: 000055ad950baf68 CR3: 000000005955c000 CR4: 00000000003526f0 [ 380.619621][ T9869] Kernel panic - not syncing: Fatal exception [ 380.625708][ T9869] Kernel Offset: disabled [ 380.630013][ T9869] Rebooting in 86400 seconds..