last executing test programs: 2m41.419060033s ago: executing program 1 (id=496): socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$urandom(0xffffffffffffff9c, &(0x7f00000006c0), 0x101000, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0x9d, 0x80, 0x1, 0x30b, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5047, 0x2, 0x1, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x102b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4005, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 2m39.746758913s ago: executing program 1 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9a) 2m39.503207826s ago: executing program 1 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0e, &(0x7f0000000700)="040000000000000000000000380100") 2m39.337053759s ago: executing program 1 (id=507): open(&(0x7f0000000140)='./file0\x00', 0x60840, 0xa2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x100, 0x18, 0x1, 0x70bd28, 0x100, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x5, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd27, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0xc841}, 0x0) 2m37.103087778s ago: executing program 1 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) write(r4, &(0x7f0000000300)='1', 0x1) 2m35.826836519s ago: executing program 1 (id=512): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/mnt\x00') capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000300)={0x200002, 0x200003, 0x803, 0x4, 0x7}) setns(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa0401, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000200)={0x7ff, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1ff, 0x80402) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)="79109d5feaaf", &(0x7f0000000440), 0x1007, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=""/145, &(0x7f0000000580), &(0x7f00000005c0), 0x4, r3}, 0x38) r4 = dup(r2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x23, 0x3, 0x11, 0x1, 0x0, 0x5, 0x0}) 2m20.381162513s ago: executing program 32 (id=512): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/mnt\x00') capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000300)={0x200002, 0x200003, 0x803, 0x4, 0x7}) setns(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa0401, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000200)={0x7ff, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1ff, 0x80402) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)="79109d5feaaf", &(0x7f0000000440), 0x1007, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=""/145, &(0x7f0000000580), &(0x7f00000005c0), 0x4, r3}, 0x38) r4 = dup(r2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x23, 0x3, 0x11, 0x1, 0x0, 0x5, 0x0}) 18.953176202s ago: executing program 0 (id=857): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x0, 0x0, 0x0) userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000600)={'\x00', 0x23f5, 0xdd33, 0x1, 0xffffffffffffffff, 0x6}) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000740)=0x9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4c800}, 0x409f5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040801) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000900)) 15.477763957s ago: executing program 2 (id=859): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1e3002, 0x0) syz_open_dev$video(&(0x7f0000000500), 0x485, 0x40000) (async) set_mempolicy(0x3, &(0x7f0000000540)=0x2, 0x8) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40043d0d, 0x0) (async) r2 = syz_open_dev$dvb_demux(&(0x7f00000005c0), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000600)={0xfff, 0x0, 0x3, 0x5, 0x4}) (async) io_uring_setup(0x7f34, &(0x7f0000000640)={0x0, 0xc600, 0x100, 0xfffffdfa, 0x164}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x2d, 0x0}}, 0x10) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000a00), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000a40)='0', 0xfffffd2c) (async) pselect6(0x40, &(0x7f0000000a80)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000ac0)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) (async) syz_open_dev$audion(0x0, 0x3, 0x1) (async) close_range(0xffffffffffffffff, r0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x3, 0x101000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac2(0x0, 0xa4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', 0x40042, 0x1) close(r7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001b80), 0x101042, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 15.360961286s ago: executing program 0 (id=860): r0 = syz_create_resource$futex(&(0x7f00000003c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000700)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r1, 0xd, 0x2, 0x0, r0, 0x0) futex(r0, 0xc, 0x1, 0x0, r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc1}, &(0x7f0000000600)={0x0, "24d0fa2d95256f9ae2869c562b4daaf92a1fb89b37d9d6ddb71bd5ade463566d4f36a1b3f0d0d8f16561409aafcf3efdfa73aacefa7933d1c628b13abe18521c", 0x20}, 0x48, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x4c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40094}, 0x44000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 12.744258251s ago: executing program 3 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000240)='27', 0x2) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1fc7, &(0x7f0000000280)={0x0, 0x3c47, 0x2, 0x2, 0x389}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) 12.682014276s ago: executing program 0 (id=868): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 3) 11.507106833s ago: executing program 5 (id=869): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x40000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x2, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x1}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno', 0xa) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/132, 0x84, 0x10040, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r2, 0x72f9}, 0x8) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f00000003c0)={0x6, @loopback, 0x4e22, 0x1, 'sed\x00', 0x6, 0x5, 0x7d}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', r3, 0x1, 0x8000, 0x2, 0x81, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x67, 0x0, 0xa5, 0x29, 0x0, @multicast2, @multicast1, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x63, [@empty, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4, {0x119}}, './file0\x00'}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000006c0)={0x6, 0x80000, r1}) r8 = syz_open_dev$vcsn(&(0x7f0000000700), 0x10000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000400)=@raw=[@ldst={0x1, 0x1, 0x1, 0x4, 0x4, 0xffffffffffffffc0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4b}}, @call={0x85, 0x0, 0x0, 0xdde}], &(0x7f0000000480)='GPL\x00', 0xf, 0x87, &(0x7f00000004c0)=""/135, 0x41000, 0x5, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000680)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r7, r8], &(0x7f0000000780)=[{0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x3, 0x8}, {0x4, 0x4, 0x7, 0x3}, {0x5, 0x1, 0x2, 0xb}, {0x0, 0x4, 0x10, 0x1}, {0x1, 0x4, 0x3, 0x3}], 0x10, 0x9c1}, 0x94) recvmmsg(r8, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000940)=""/108, 0x6c}], 0x1, &(0x7f0000000a00)=""/176, 0xb0}, 0x4}, {{&(0x7f0000000ac0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/109, 0x6d}, {&(0x7f0000000bc0)=""/89, 0x59}, {&(0x7f0000000c40)=""/206, 0xce}], 0x3, &(0x7f0000000d80)=""/65, 0x41}, 0xd}], 0x2, 0x2, &(0x7f0000000e80)={0x77359400}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r7, 0x40086e81, &(0x7f0000000ec0)=0x7) r10 = syz_open_dev$vcsn(&(0x7f0000000f00), 0xd9, 0x220801) ioctl$BTRFS_IOC_RESIZE(r10, 0x50009403, &(0x7f0000000f40)={{r6}, {@val, @actul_num={@val=0x2b, 0x7fffffff, 0x67}}}) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000f80)={'ip6gre0\x00', 0x3ff}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000fc0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) openat$rnull_attr(0xffffffffffffff9c, &(0x7f0000001000)={'/sys/kernel/config/rnull/syzrnull', 0x0, '/power\x00'}, 0x2, 0x0) ioctl$UBLK_U_CMD_START_DEV(r6, 0xc0207506, &(0x7f0000001040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setscheduler(r11, 0x6, &(0x7f00000010c0)=0x27) syz_open_dev$ptys(0xc, 0x3, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140), &(0x7f0000001180)='./file0\x00', 0x8, 0x1) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x19) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000001200)={0x5fd, 0x80000000, 0xf, 0x0, 0xa15, 0x1, 0x0, &(0x7f00000011c0)=[{0x5, 0x101, 0x10000}]}) pselect6(0x40, &(0x7f0000001240)={0x8000000000000001, 0x7be, 0x5, 0x4, 0x401, 0xfffffffffffffff8, 0x4, 0x7}, &(0x7f0000001280)={0x6, 0x3, 0x1, 0x6, 0xffffffffffff8000, 0x7ff, 0x340000, 0x1000}, &(0x7f00000012c0)={0x45a, 0x3, 0x1, 0x800, 0x8, 0x7, 0x8, 0x1280000000000000}, &(0x7f0000001300)={0x77359400}, &(0x7f0000001380)={&(0x7f0000001340)={[0xe]}, 0x8}) syz_ublk_setup_io_uring(0x45b2, &(0x7f00000013c0)={0x0, 0x7e62, 0x1, 0x2, 0x13f}, &(0x7f0000001440)=0x0, &(0x7f0000001480), &(0x7f00000014c0)) syz_io_uring_submit(r12, 0x0, 0x0, &(0x7f0000002a00)=@IORING_OP_CLOSE={0x13, 0x9, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x6}}) 11.322659039s ago: executing program 2 (id=870): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x8, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa, 0x100000000000000, 0xffffffffffffd}, {0xffffffffffffffff, 0x0, 0xffffffffffdffffe, 0x2}, 0xa, 0x0, 0x1, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0xa, @in=@private=0xa010102, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffb}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000640), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000680), 0x10106, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000780)={&(0x7f00000007c0)={0x1d, r6}, 0x10, &(0x7f0000000800)={&(0x7f0000000840)=@can={{0x2}, 0x5, 0x2, 0x0, 0x0, "9dc72295efd895df"}, 0x10}, 0x1, 0x0, 0x0, 0x40095}, 0x48811) bind$bt_hci(r0, &(0x7f0000000580)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000002c0)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 11.220039208s ago: executing program 3 (id=871): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000180)={&(0x7f00000001c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={&(0x7f00000002c0)=""/124, 0x7c}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000040)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000140)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) sync_file_range(r1, 0x7, 0xff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x810, 0xffffffffffffffff, 0x4cf6d000) 10.765383574s ago: executing program 4 (id=872): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000200)=0x120008c) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="002145001f2c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0xf, 0x8001) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="002145000b2c000b0000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) (fail_nth: 3) 10.510521667s ago: executing program 3 (id=873): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x44}, 0x1, 0x2000000000000000}, 0x0) r5 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x733e, 0x539}, &(0x7f0000000000)=0x18) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000400)=""/249) shmat(r5, &(0x7f0000ffb000/0x3000)=nil, 0x7000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) 10.503343056s ago: executing program 0 (id=874): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019380)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000193c0)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.377436377s ago: executing program 2 (id=875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80000) eventfd2(0x42000004, 0x801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c6963793000080002eb000069cc629ae30000000000", 0x68}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f00000195c0)=""/102391, 0x18ff7) sched_setaffinity(r5, 0x8, &(0x7f0000019380)=0xf) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000193c0)='./proc\x00', &(0x7f0000019400)='proc\x00', 0x8028, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, &(0x7f0000019440)="18000000010003", 0x7) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000019480)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r8, &(0x7f00000194c0)={&(0x7f0000019500)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000019540)=[{&(0x7f0000019580)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) 10.133299321s ago: executing program 4 (id=876): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x8860) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700), 0x400000000000041, 0x0) timerfd_create(0x0, 0x400) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000740), 0x80002c1, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresgid(0x0, 0xee00, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x45145}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x0, 0x40, 0x80e, 0xff, {{0x10, 0x4, 0x0, 0x3, 0x40, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x13, 0x56, [@multicast1, @multicast2, @broadcast, @rand_addr=0x64010100]}, @end, @noop, @ssrr={0x89, 0xf, 0x8f, [@loopback, @empty, @loopback]}, @timestamp_addr={0x44, 0x4, 0x80, 0x1, 0x8}, @timestamp={0x44, 0x4, 0xc0, 0x0, 0x8}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x16, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 8.341982358s ago: executing program 4 (id=877): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000380)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000400)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) 7.612429977s ago: executing program 5 (id=878): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe1, 0x8b, 0xab, 0x20, 0x1199, 0x9005, 0xc5b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xa, 0x30, 0xf1, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0xff, 0x88, 0x22, 0xb, [], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0x3, 0x1, 0x61}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0x6f, 0x3}}]}}]}}]}}, 0x0) syz_usb_connect$midi(0x0, 0x95, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0xe, 0x20, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x28, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x9}, @ms_header={0x7, 0x24, 0x1, 0x16, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0xb}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x6, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0xf7, 0x0, [], 0x33}, @ms_header={0x7, 0x24, 0x1, 0xfffc, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x8, 0x4, [{0x2, 0x2}, {0x2, 0x1}, {0x8, 0x1}, {0x2}], 0xff}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x8, 0x6b, 0xfb, {0xd, 0x25, 0x1, 0x9, "7dfde8e5c05b5ab5c9"}}}, {{0x9, 0x5, 0xf, 0x1, 0x0, 0x6, 0x10, 0x80, {0xf, 0x25, 0x1, 0xb, "1111c32c7b99bf0f174693"}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0xf8, 0x43, 0x10, 0x1}, 0x87, &(0x7f0000000140)={0x5, 0xf, 0x87, 0x6, [@generic={0x30, 0x10, 0x3, "f01649fb600db24130d102852237238ac78ce2257a1e9f64f2e585ad05b861bd970a43acc9d40ad207c1212593"}, @ssp_cap={0x1c, 0x10, 0xa, 0x7a, 0x4, 0x5, 0xf00f, 0x2, [0x3f, 0xff0000, 0x0, 0x0]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x2, 0x1e0f, 0xe, [0xc030, 0x0, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d4a08272cc194412b374b6156f38f45e"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1409}}, {0xde, &(0x7f0000000280)=@string={0xde, 0x3, "96f68b1e41c8bfbd6517fddc1d9bcbf9845c9c54ebcfb257bfe3dddba7409f3697e14a5e60ea16eedad2ff4f95a65250526651b44b07da41a6fe50aa95e29d0a9325b52883b32ceec16fe633a9e9b1fe8f67b45ca7f8959aadc8a6746d7cd651e8aa066fa334d78c57618970d69408efac98e228f458ffcab5408cd1dd3e9369d30956f650314832ffdcc7b3716e1e0b9cf329ac88d0519b0d5203d179bfd1fac88666e6630d737720d987ef904ecd09b1e59fe89201f0f14c2376329484d8b71d56341c6d671d167391fb1674d901653a1efc52b4a777e8088785b0"}}, {0xce, &(0x7f0000000380)=@string={0xce, 0x3, "c346d94dde12be6033768c50e294c0e0895cd0438ccde3894ca7917806d01c705ced7258b7a71b63ca1f377c7727db987fdb4c799b7e88b8facff593d95364bd19a217a56ee191e291534635f90dd2e4fee496ee2416d2ea05448a5595feb035b44c62c60e3356db650e68f028b016dbd253411b170afd075cf0e5af3dbe9c4866a2b700c210d427dc2116eac1e6912f865b8e0958d56f7c6dab84d0e4464a1f7e9a674b2c7c8a924123b24cfcddf85bb98f03fb099306c90920737c4578f1125e154f3f1583cf89091665d2"}}]}) 7.415455945s ago: executing program 4 (id=879): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000040)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/resume', 0xa82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 6.693325545s ago: executing program 0 (id=880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000300)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000200000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x0, @loopback, 0x84b6}, {0xa, 0x4e20, 0x80000007, @mcast2, 0x3}}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r5, @ANYBLOB="089805000750050008001300", @ANYRES32=r6, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000940)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x5, &(0x7f0000000a40)=@raw=[@generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @ldst={0x1, 0x1, 0x6, 0x1, 0x5, 0x80, 0x10}, @generic={0x95}], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@ifindex=r11, r12, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b00)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {}, {0x5, 0x8}, {0xfff3}}}, 0x24}}, 0x0) 6.638679553s ago: executing program 2 (id=881): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019380)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000193c0)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.95499226s ago: executing program 2 (id=882): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 4.858919556s ago: executing program 5 (id=883): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_disconnect(r0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3, 0x101000) 4.775313901s ago: executing program 3 (id=884): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f00000001c0)="030b06e4bfaa295f13aef5b0984aa524e4c71bdf99df803c93e5a4e9ce4539c7a2935933d888fbb30fde4d4fe19c63aceafb79ea01cbd4b088312e61112e9479d2ae2ed5decb82451b5ab70974d8d09f92e7d6ce9d463ba1598542caed9dbcece0d1f2e4af38ac6c6ff4907a69bc62400b8272ca28ce020000002a96d088b78d48af47af29fda42f77eed243e74ca65d45ae0d3045d7736eb7543161a8a2d9f7134fed06510855223f05d6fc50ca93ae5773b040bd26d38a79387a9fba96ce3d659ad9e55ad0", 0xffffffffffffff94, 0x91, 0x0, 0xfffffffffffffe6a) recvfrom$inet(r0, &(0x7f00000002c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 4.377405936s ago: executing program 3 (id=885): socket(0xa, 0x3, 0xff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0xfffffffd, 0x3, 0x3}, 0x10) pipe2$watch_queue(&(0x7f00000002c0), 0x80) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.625640618s ago: executing program 3 (id=886): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}}, 0x4042000) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000010d422031500000000000109022400010000308f090400b70203000200092107000901222afa0805810340"], 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=""/147, 0x93}], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='fd\x00') fchdir(r2) io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c, 0x0, r0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfffffff8, @private1, 0x17, 0xffffffff}, 0x80, 0x0}}], 0x1, 0x40408c1) 3.408353572s ago: executing program 5 (id=887): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x8860) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700), 0x400000000000041, 0x0) timerfd_create(0x0, 0x400) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000740), 0x80002c1, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresgid(0x0, 0xee00, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x45145}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x0, 0x40, 0x80e, 0xff, {{0x10, 0x4, 0x0, 0x3, 0x40, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x13, 0x56, [@multicast1, @multicast2, @broadcast, @rand_addr=0x64010100]}, @end, @noop, @ssrr={0x89, 0xf, 0x8f, [@loopback, @empty, @loopback]}, @timestamp_addr={0x44, 0x4, 0x80, 0x1, 0x8}, @timestamp={0x44, 0x4, 0xc0, 0x0, 0x8}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x16, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.804428889s ago: executing program 5 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x4000040) 1.745352495s ago: executing program 0 (id=889): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000102030109021200010704c003090427080018c877067b2af24a4ba467e828c2c9845bbb41bfbfa6c742fd"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x11}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfffffffffffffffd, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000007c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x80, &(0x7f0000000900)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000029c0)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', 0x0, 0x2d) 1.741152043s ago: executing program 2 (id=890): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) socket$alg(0x26, 0x5, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0xfffffdfc) r2 = syz_open_dev$evdev(&(0x7f0000002200), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000002240)=""/95) (fail_nth: 3) 1.61672627s ago: executing program 5 (id=891): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x10}, 'port1\x00', 0xa2, 0x0, 0x7ffb, 0x1, 0x10001, 0x6935, 0x8, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000380)={{0x80, 0x10}, 'port0\x00', 0x20, 0x50000, 0x7fff, 0x0, 0x5, 0x9, 0x90, 0x0, 0x1, 0xb7}) r5 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r6 = dup2(r5, r5) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000440)={@private=0xa010100, @multicast2, 0x1, "822fae6e6f6a5c07871a935c160087ab7d7cb2cd309844201641ee569e68692c", 0x3ff, 0x5, 0x8, 0x3}, 0x3c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) syz_ublk_setup_queues(r6, r7, &(0x7f0000000180)={0x0, 0x8d57, 0x1, 0x8, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800001, 0x2000, 0x2000, 0x10000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x40, 0x3, 0x30a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe562, 0x0, 0x2, 0x1c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x82, 0x800345}}], 0x1, 0x0, 0x0) 1.47668731s ago: executing program 4 (id=892): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019380)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000193c0)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000019440)=0x79, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) listen(r0, 0x5) r5 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) 0s ago: executing program 4 (id=893): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7fffffff]}, 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000019580), 0x4eb34, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000195c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000194c0)='mountinfo\x00') setns(r5, 0x24020000) umount2(&(0x7f0000019540)='.\x00', 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000019b00)={0x0, 0x0, &(0x7f0000019b40)={&(0x7f0000019b80)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8082) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000019c40)={&(0x7f0000019500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000019c00)={&(0x7f0000019bc0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019640), r6) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000019a80)={&(0x7f0000019600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000019680)={&(0x7f0000019c80)=ANY=[@ANYRESOCT=r6, @ANYRES16=r7, @ANYRESHEX], 0x39c}, 0x1, 0x0, 0x0, 0x8041}, 0x80) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) r8 = syz_open_dev$usbfs(&(0x7f00000193c0), 0x203, 0x2581) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000019400)=@urb_type_control={0x2, {}, 0x0, 0x84, &(0x7f0000019440)={0x60, 0x5, 0x0, 0x0, 0x7996}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0xd6, 0x0}) r10 = socket$inet6(0xa, 0x3, 0xff) openat(r9, &(0x7f0000019480)='./proc\x00', 0x400040, 0x10) sendto$inet6(r10, &(0x7f0000000080)="600000040014334000000000000000000000000000000001000000000000000000000200a52af834", 0x28, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002f000d0027bd9f00000000000b"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) kernel console output (not intermixed with test programs): T7506] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 252.676821][ T7506] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 252.676844][ T7506] pci 0000:00:05.0: vgaarb: bridge control possible [ 252.676857][ T7506] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 252.680263][ T7506] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 252.834455][ T7499] block device autoloading is deprecated and will be removed. [ 252.881811][ T29] usb 4-1: USB disconnect, device number 9 [ 252.920445][ T29] usblp0: removed [ 253.393139][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 253.393157][ T30] audit: type=1400 audit(1792549733.160:1249): avc: denied { append } for pid=7515 comm="syz.1.394" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 253.996808][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 255.090158][ T30] audit: type=1400 audit(1792549734.850:1250): avc: denied { bind } for pid=7549 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.421524][ T30] audit: type=1400 audit(1792549735.180:1251): avc: denied { setopt } for pid=7556 comm="syz.2.410" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.576523][ T7566] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.416'. [ 255.762805][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 256.130276][ T30] audit: type=1400 audit(1792549735.590:1252): avc: denied { firmware_load } for pid=7560 comm="syz.0.413" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 256.299687][ T7568] mmap: syz.0.413 (7568) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 256.373314][ T29] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 256.374228][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 256.374300][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 256.376221][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.376243][ T29] usb 2-1: Product: syz [ 256.376257][ T29] usb 2-1: Manufacturer: syz [ 256.376271][ T29] usb 2-1: SerialNumber: syz [ 256.387654][ T29] usb 2-1: config 0 descriptor?? [ 256.388354][ T7555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.388429][ T7555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.565948][ T30] audit: type=1400 audit(1792549736.330:1253): avc: denied { bind } for pid=7584 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.609546][ T7555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.609641][ T7555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.636907][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 256.698955][ T30] audit: type=1400 audit(1792549736.460:1254): avc: denied { connect } for pid=7586 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.722553][ T30] audit: type=1400 audit(1792549736.470:1255): avc: denied { accept } for pid=7586 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.914034][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 257.079976][ T7599] gre1: entered promiscuous mode [ 257.211075][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.425'. [ 257.728378][ T29] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 257.771479][ T29] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 257.795549][ T29] usb 2-1: USB disconnect, device number 10 [ 257.812303][ T29] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 257.965725][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 257.966575][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.966601][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.966637][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.971569][ T9] usb 3-1: config 0 descriptor?? [ 258.487930][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 258.487959][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 258.487979][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 258.488000][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 258.488020][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 258.498689][ T9] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 258.687881][ T9] playstation 0003:054C:0DF2.0003: Invalid reportID received, expected 9 got 0 [ 258.687908][ T9] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 258.687948][ T9] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 258.687962][ T9] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 258.706635][ T9] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -22 [ 258.731445][ T30] audit: type=1400 audit(1792549738.490:1256): avc: denied { read } for pid=7613 comm="syz.1.431" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.739310][ T30] audit: type=1400 audit(1792549738.500:1257): avc: denied { open } for pid=7613 comm="syz.1.431" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.752943][ T30] audit: type=1400 audit(1792549738.520:1258): avc: denied { ioctl } for pid=7613 comm="syz.1.431" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.910722][ T9] usb 3-1: USB disconnect, device number 8 [ 259.918518][ T30] audit: type=1400 audit(1792549739.680:1259): avc: denied { map } for pid=7639 comm="syz.2.441" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 260.635577][ T30] audit: type=1400 audit(1792549740.400:1260): avc: denied { listen } for pid=7647 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.963734][ T30] audit: type=1400 audit(1792549740.730:1261): avc: denied { wake_alarm } for pid=7659 comm="syz.3.446" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.320078][ T7669] netlink: 'syz.3.450': attribute type 3 has an invalid length. [ 261.611106][ T7678] futex_wake_op: syz.3.452 tries to shift op by 144; fix this program [ 261.678200][ T30] audit: type=1400 audit(1792549741.440:1262): avc: denied { write } for pid=7649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.791973][ T30] audit: type=1400 audit(1792549741.550:1263): avc: denied { mounton } for pid=7679 comm="syz.4.453" path="/89/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 262.172971][ T30] audit: type=1400 audit(1792549741.900:1264): avc: denied { cmd } for pid=7687 comm="iou-wrk-7690" path="socket:[14907]" dev="sockfs" ino=14907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 262.452530][ T30] audit: type=1400 audit(1792549742.210:1265): avc: denied { write } for pid=7688 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.070535][ T7709] gre1: entered promiscuous mode [ 263.172804][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'. [ 265.105168][ T30] audit: type=1400 audit(1792549744.850:1266): avc: denied { map } for pid=7735 comm="syz.2.468" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 265.105353][ T30] audit: type=1400 audit(1792549744.860:1267): avc: denied { set_context_mgr } for pid=7735 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 265.849573][ T30] audit: type=1400 audit(1792549745.610:1268): avc: denied { write } for pid=7757 comm="syz.2.472" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 265.852513][ T30] audit: type=1400 audit(1792549745.610:1269): avc: denied { add_name } for pid=7757 comm="syz.2.472" name="synthetic_events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 265.859226][ T30] audit: type=1400 audit(1792549745.620:1270): avc: denied { create } for pid=7757 comm="syz.2.472" name="synthetic_events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 266.036227][ T30] audit: type=1400 audit(1792549745.800:1271): avc: denied { write } for pid=7734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.112176][ T30] audit: type=1400 audit(1792549745.870:1272): avc: denied { setopt } for pid=7761 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.342202][ T30] audit: type=1400 audit(1792549746.100:1273): avc: denied { write } for pid=7767 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.041715][ T30] audit: type=1400 audit(1792549746.800:1274): avc: denied { name_bind } for pid=7790 comm="syz.3.486" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 268.064471][ T30] audit: type=1400 audit(1792549747.830:1275): avc: denied { create } for pid=7813 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.482948][ T4970] udevd[4970]: worker [5615] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it [ 268.484300][ T4970] udevd[4970]: seq 10632 '/devices/platform/dummy_hcd.0/usb1/1-1' killed [ 268.576037][ T4970] udevd[4970]: worker [5615] terminated by signal 9 (Killed) [ 268.576078][ T4970] udevd[4970]: worker [5615] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 269.375612][ T7837] netlink: 76 bytes leftover after parsing attributes in process `syz.3.501'. [ 269.375639][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 269.375653][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.501'. [ 269.969001][ T7847] rxe_eth0 speed is unknown, defaulting to 1000 [ 270.985702][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 270.985733][ T30] audit: type=1400 audit(1792549750.750:1280): avc: denied { create } for pid=7839 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 271.443612][ T30] audit: type=1400 audit(1792549750.800:1281): avc: denied { checkpoint_restore } for pid=7839 comm="syz.0.504" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.751833][ T30] audit: type=1400 audit(1792549751.510:1282): avc: denied { nlmsg_write } for pid=7857 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.770446][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 272.266370][ T7867] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 272.718429][ T30] audit: type=1800 audit(1792549752.450:1283): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.510" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 273.310742][ T30] audit: type=1400 audit(1792549753.070:1284): avc: denied { append } for pid=7873 comm="syz.1.512" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 276.378218][ T7916] input: syz0 as /devices/virtual/input/input24 [ 276.535787][ T30] audit: type=1400 audit(1792549756.290:1285): avc: denied { create } for pid=7910 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.535842][ T30] audit: type=1400 audit(1792549756.300:1286): avc: denied { connect } for pid=7910 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.937280][ T30] audit: type=1326 audit(1792549756.700:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.3.530" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4330d9f559 code=0x7ffc0000 [ 276.937329][ T30] audit: type=1326 audit(1792549756.700:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.3.530" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4330d9f559 code=0x7ffc0000 [ 276.940543][ T30] audit: type=1326 audit(1792549756.700:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.3.530" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4330d9f559 code=0x7ffc0000 [ 276.940979][ T30] audit: type=1326 audit(1792549756.700:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.3.530" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4330d9f559 code=0x7ffc0000 [ 276.941060][ T30] audit: type=1326 audit(1792549756.700:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.3.530" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4330d9f559 code=0x7ffc0000 [ 276.949602][ T7924] netlink: 'syz.2.529': attribute type 3 has an invalid length. [ 277.067194][ T30] audit: type=1400 audit(1792549756.820:1292): avc: denied { read write } for pid=7927 comm="syz.2.532" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.067237][ T30] audit: type=1400 audit(1792549756.820:1293): avc: denied { open } for pid=7927 comm="syz.2.532" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.067268][ T30] audit: type=1400 audit(1792549756.830:1294): avc: denied { bind } for pid=7925 comm="syz.3.531" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.164039][ T7928] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.176936][ T7928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.177128][ T7928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.177791][ T7928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.177940][ T7928] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.432669][ T5698] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 278.583342][ T5698] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 278.584373][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.612870][ T5698] usb-storage 5-1:1.0: USB Mass Storage device detected [ 278.924180][ T5698] scsi host1: usb-storage 5-1:1.0 [ 279.203057][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.371927][ T7970] overlay: Unknown parameter '/' [ 279.404869][ T7961] Process accounting resumed [ 279.454983][ T5698] usb 5-1: USB disconnect, device number 13 [ 279.649320][ T7979] futex_wake_op: syz.3.549 tries to shift op by -1; fix this program [ 280.243783][ T4921] Bluetooth: hci3: command 0x0c1a tx timeout [ 280.243821][ T4921] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.243844][ T4921] Bluetooth: hci1: command 0x0c1a tx timeout [ 280.243892][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.072697][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 282.072714][ T30] audit: type=1400 audit(1792549761.830:1304): avc: denied { associate } for pid=8022 comm="syz.3.564" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 283.359102][ T30] audit: type=1400 audit(1792549763.120:1305): avc: denied { bind } for pid=8033 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.791264][ T30] audit: type=1326 audit(1792549763.550:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9df39f559 code=0x7ffc0000 [ 283.791315][ T30] audit: type=1326 audit(1792549763.550:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9df39f559 code=0x7ffc0000 [ 283.856272][ T30] audit: type=1326 audit(1792549763.620:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fc9df39f559 code=0x7ffc0000 [ 283.856363][ T30] audit: type=1326 audit(1792549763.620:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9df39f559 code=0x7ffc0000 [ 283.856480][ T30] audit: type=1326 audit(1792549763.620:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9df39f559 code=0x7ffc0000 [ 284.007965][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.575'. [ 284.222852][ T30] audit: type=1400 audit(1792549763.970:1311): avc: denied { read } for pid=8044 comm="syz.3.572" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 284.225687][ T30] audit: type=1400 audit(1792549763.980:1312): avc: denied { open } for pid=8044 comm="syz.3.572" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 284.498019][ T30] audit: type=1400 audit(1792549764.260:1313): avc: denied { ioctl } for pid=8044 comm="syz.3.572" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 285.839518][ T8065] jffs2: notice: (8065) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 4 orphan) found. [ 286.134758][ T8065] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 287.991544][ T8077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8077 comm=syz.2.579 [ 287.991581][ T8077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8077 comm=syz.2.579 [ 288.672691][ T5696] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 288.721167][ T30] audit: type=1400 audit(1792549768.480:1314): avc: denied { read write } for pid=8084 comm="syz.0.583" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 288.721741][ T30] audit: type=1400 audit(1792549768.480:1315): avc: denied { open } for pid=8084 comm="syz.0.583" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 288.778486][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 288.781354][ T30] audit: type=1400 audit(1792549768.540:1316): avc: denied { ioctl } for pid=8084 comm="syz.0.583" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 288.842663][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 288.843356][ T5696] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 288.844270][ T5696] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.844297][ T5696] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.844320][ T5696] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 288.844346][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 288.844378][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.887735][ T8086] netlink: 1492 bytes leftover after parsing attributes in process `syz.0.583'. [ 288.887757][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 288.912360][ T5696] usb 4-1: config 0 descriptor?? [ 288.937610][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'. [ 288.943514][ T30] audit: type=1400 audit(1792549768.700:1317): avc: denied { read } for pid=8084 comm="syz.0.583" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 288.943554][ T30] audit: type=1400 audit(1792549768.700:1318): avc: denied { open } for pid=8084 comm="syz.0.583" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 290.786650][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.787543][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.788145][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.801199][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.835894][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.880603][ T30] audit: type=1400 audit(1792549770.640:1319): avc: denied { mounton } for pid=8089 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 290.992728][ T8096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8096 comm=syz.4.578 [ 290.992766][ T8096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8096 comm=syz.4.578 [ 291.404034][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.432360][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.782221][ T5696] hid (null): unknown global tag 0x10 [ 291.782469][ T5696] hid (null): report_id 262402 is invalid [ 291.782500][ T5696] hid (null): report_id 0 is invalid [ 291.782518][ T5696] hid (null): global environment stack underflow [ 292.237980][ T8099] jffs2: notice: (8099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 4 orphan) found. [ 292.360975][ T5696] usb 4-1: USB disconnect, device number 10 [ 293.282990][ T5604] Bluetooth: hci5: command tx timeout [ 293.829471][ T8089] rxe_eth0 speed is unknown, defaulting to 1000 [ 293.902682][ T5696] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 295.293716][ T5696] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 295.296118][ T5696] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 295.296142][ T5696] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.296161][ T5696] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.296201][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.310104][ T5696] gspca_main: spca501-2.14.0 probing 0000:0000 [ 295.362834][ T5604] Bluetooth: hci5: command tx timeout [ 295.527809][ T5696] gspca_spca501: reg write: error -71 [ 295.527829][ T5696] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 295.527894][ T5696] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 295.528315][ T5696] uvcvideo 4-1:1.0: Found multiple Units with ID 1 [ 295.528356][ T5696] uvcvideo 4-1:1.0: Found UVC 71.01 device (0000:0000) [ 295.528403][ T5696] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 295.584239][ T5696] usb 4-1: USB disconnect, device number 11 [ 297.222687][ T30] audit: type=1400 audit(1792549776.940:1320): avc: denied { search } for pid=8145 comm="syz.3.595" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 297.222741][ T30] audit: type=1400 audit(1792549776.940:1321): avc: denied { read } for pid=8145 comm="syz.3.595" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 297.222776][ T30] audit: type=1400 audit(1792549776.940:1322): avc: denied { open } for pid=8145 comm="syz.3.595" path="/134/nfsd/exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 297.462688][ T5604] Bluetooth: hci5: command tx timeout [ 297.712663][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.712805][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.712919][ T8089] bridge_slave_0: entered allmulticast mode [ 297.714293][ T8089] bridge_slave_0: entered promiscuous mode [ 297.770751][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.770836][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.770958][ T8089] bridge_slave_1: entered allmulticast mode [ 297.772354][ T8089] bridge_slave_1: entered promiscuous mode [ 297.885146][ T8163] binder: 8158:8163 ioctl 4018620d 0 returned -22 [ 298.292328][ T191] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 298.390560][ T8089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.453311][ T8089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.605319][ T8089] team0: Port device team_slave_0 added [ 298.606920][ T8089] team0: Port device team_slave_1 added [ 298.676898][ T191] usb 4-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 298.683079][ T191] usb 4-1: too many endpoints for config 0 interface 0 altsetting 76: 206, using maximum allowed: 30 [ 298.683117][ T191] usb 4-1: config 0 interface 0 altsetting 76 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.683150][ T191] usb 4-1: config 0 interface 0 altsetting 76 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.683170][ T191] usb 4-1: config 0 interface 0 altsetting 76 has 1 endpoint descriptor, different from the interface descriptor's value: 206 [ 298.683197][ T191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.683223][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.687362][ T191] usb 4-1: config 0 descriptor?? [ 299.785752][ T5604] Bluetooth: hci5: command tx timeout [ 299.798956][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.798973][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.798994][ T8089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.858370][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.858790][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.883634][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.883650][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.883672][ T8089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.556588][ T8171] jffs2: notice: (8171) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 4 orphan) found. [ 300.711872][ T8171] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 301.121794][ T191] usbhid 4-1:0.0: can't add hid device: -71 [ 301.121884][ T191] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 301.127135][ T8089] hsr_slave_0: entered promiscuous mode [ 301.127831][ T8089] hsr_slave_1: entered promiscuous mode [ 301.128280][ T8089] debugfs: 'hsr0' already exists in 'hsr' [ 301.128295][ T8089] Cannot create hsr debugfs directory [ 301.174338][ T191] usb 4-1: USB disconnect, device number 12 [ 301.380576][ T8176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.895368][ T8182] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 302.861149][ T8089] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.889875][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.891926][ T8089] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.401703][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.414342][ T8089] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.436502][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.439348][ T8089] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.473584][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.176134][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.254716][ T8089] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.388807][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.388882][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.564318][ T8217] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input25 [ 308.376727][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.376812][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.892988][ T30] audit: type=1400 audit(1792549788.660:1323): avc: denied { write } for pid=8225 comm="syz.2.610" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 308.907341][ T30] audit: type=1400 audit(1792549788.660:1324): avc: denied { open } for pid=8225 comm="syz.2.610" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 308.944516][ T30] audit: type=1400 audit(1792549788.710:1325): avc: denied { ioctl } for pid=8225 comm="syz.2.610" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 308.996707][ T5604] Bluetooth: hci3: unexpected event for opcode 0x041b [ 309.222132][ T30] audit: type=1400 audit(1792549788.980:1326): avc: denied { unlink } for pid=8225 comm="syz.2.610" name="#f" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.244749][ T5698] libceph: connect (1)[c::]:6789 error -22 [ 309.245594][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 309.249357][ T8239] overlayfs: overlapping lowerdir path [ 309.301851][ T5698] libceph: connect (1)[c::]:6789 error -22 [ 309.301960][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 309.564511][ T5698] libceph: connect (1)[c::]:6789 error -22 [ 309.565310][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 310.075643][ T29] libceph: connect (1)[c::]:6789 error -22 [ 310.076955][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 310.567102][ T8241] Process accounting paused [ 310.912851][ T8248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=8248 comm=syz.0.614 [ 311.113856][ T30] audit: type=1400 audit(1792549790.870:1327): avc: denied { create } for pid=8247 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.120090][ T30] audit: type=1400 audit(1792549790.880:1328): avc: denied { bind } for pid=8247 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.178016][ T30] audit: type=1400 audit(1792549790.940:1329): avc: denied { write } for pid=8247 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.268082][ T8236] ceph: No mds server is up or the cluster is laggy [ 311.308432][ T8256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8256 comm=syz.3.615 [ 311.308520][ T8256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8256 comm=syz.3.615 [ 311.424828][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 311.424988][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 311.533686][ T1652] libceph: connect (1)[c::]:6789 error -22 [ 311.533852][ T1652] libceph: mon0 (1)[c::]:6789 connect error [ 311.683695][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.683744][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.960101][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 311.960255][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 311.994000][ T8250] overlayfs: overlapping lowerdir path [ 312.666662][ T8267] FAULT_INJECTION: forcing a failure. [ 312.666662][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 312.666758][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.0.616 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.666784][ T8267] Tainted: [L]=SOFTLOCKUP [ 312.666791][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 312.666801][ T8267] Call Trace: [ 312.666808][ T8267] [ 312.666816][ T8267] dump_stack_lvl+0x100/0x190 [ 312.666848][ T8267] should_fail_ex.cold+0x5/0xa [ 312.666875][ T8267] should_failslab+0xc2/0x120 [ 312.666916][ T8267] __kmalloc_noprof+0xfc/0x840 [ 312.666941][ T8267] ? sk_prot_alloc+0x10b/0x2a0 [ 312.666971][ T8267] sk_prot_alloc+0x10b/0x2a0 [ 312.666997][ T8267] sk_alloc+0x36/0xe80 [ 312.667015][ T8267] can_create+0x1e5/0x630 [ 312.667043][ T8267] __sock_create+0x339/0x860 [ 312.667071][ T8267] __sys_socket+0x14d/0x260 [ 312.667097][ T8267] ? __pfx___sys_socket+0x10/0x10 [ 312.667130][ T8267] __x64_sys_socket+0x72/0xb0 [ 312.667156][ T8267] do_syscall_64+0x123/0x790 [ 312.667192][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.667211][ T8267] RIP: 0033:0x7fbe03b9f559 [ 312.667227][ T8267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.667244][ T8267] RSP: 002b:00007fbe04a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 312.667263][ T8267] RAX: ffffffffffffffda RBX: 00007fbe03e26180 RCX: 00007fbe03b9f559 [ 312.667275][ T8267] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 312.667286][ T8267] RBP: 00007fbe04a44090 R08: 0000000000000000 R09: 0000000000000000 [ 312.667296][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.667307][ T8267] R13: 00007fbe03e26218 R14: 00007fbe03e26180 R15: 00007fff8f3da8d8 [ 312.667332][ T8267] [ 313.229663][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 313.239003][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 313.294111][ T8246] ceph: No mds server is up or the cluster is laggy [ 313.352427][ T8271] jffs2: notice: (8271) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 4 orphan) found. [ 313.412511][ T30] audit: type=1400 audit(1792549793.170:1330): avc: denied { write } for pid=8270 comm="syz.2.617" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.412633][ T30] audit: type=1400 audit(1792549793.170:1331): avc: denied { add_name } for pid=8270 comm="syz.2.617" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.412662][ T30] audit: type=1400 audit(1792549793.170:1332): avc: denied { create } for pid=8270 comm="syz.2.617" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 313.429823][ T8271] overlayfs: failed to resolve './file2': -2 [ 315.973934][ T8089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.107621][ T8089] veth0_vlan: entered promiscuous mode [ 319.444197][ T8089] veth1_vlan: entered promiscuous mode [ 319.882027][ T8089] veth0_macvtap: entered promiscuous mode [ 319.910743][ T8089] veth1_macvtap: entered promiscuous mode [ 319.978317][ T8089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.004028][ T8089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.145333][ T7424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.146623][ T7424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.178592][ T7424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.216997][ T7424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.784433][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 320.784450][ T30] audit: type=1400 audit(1792549800.550:1334): avc: denied { read write } for pid=8334 comm="syz.2.628" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 320.784827][ T30] audit: type=1400 audit(1792549800.550:1335): avc: denied { open } for pid=8334 comm="syz.2.628" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 320.990147][ T7425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.990294][ T7425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.194002][ T30] audit: type=1400 audit(1792549800.850:1336): avc: denied { read write } for pid=8334 comm="syz.2.628" name="sg0" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 321.194060][ T30] audit: type=1400 audit(1792549800.900:1337): avc: denied { open } for pid=8334 comm="syz.2.628" path="/dev/sg0" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 321.385184][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.385206][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.491523][ T30] audit: type=1400 audit(1792549801.250:1338): avc: denied { mounton } for pid=8089 comm="syz-executor" path="/root/syzkaller.G2op1A/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 321.491646][ T30] audit: type=1400 audit(1792549801.250:1339): avc: denied { mount } for pid=8089 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 321.586001][ T30] audit: type=1400 audit(1792549801.350:1340): avc: denied { mounton } for pid=8089 comm="syz-executor" path="/root/syzkaller.G2op1A/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 321.589588][ T30] audit: type=1400 audit(1792549801.350:1341): avc: denied { mounton } for pid=8089 comm="syz-executor" path="/root/syzkaller.G2op1A/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 321.819247][ T30] audit: type=1400 audit(1792549801.580:1342): avc: denied { mounton } for pid=8089 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 322.497118][ T30] audit: type=1400 audit(1792549802.260:1343): avc: denied { mount } for pid=8089 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 324.064808][ T8348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2827 sclass=netlink_route_socket pid=8348 comm=syz.2.634 [ 324.788718][ T8366] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input26 [ 327.585748][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 327.585767][ T30] audit: type=1400 audit(1792549807.350:1359): avc: denied { ioctl } for pid=8389 comm="syz.5.642" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 328.062089][ T30] audit: type=1400 audit(1792549807.820:1360): avc: denied { getopt } for pid=8400 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 328.541324][ T8399] CUSE: unknown device info "nøŽ|’zQC*Æ" [ 328.541337][ T8399] CUSE: unknown device info "G2¢“‰a"ėī V­Ä|’#Śyļ€S—ioåLåĪą”¢8†9ŌI’čÜ„Ń®žĆ‡Å[„<^ĪQĪÓ>”nHw Ż×'0KVĘ,†¹${\d+" [ 328.541346][ T8399] CUSE: unknown device info "Ż’’’" [ 328.541352][ T8399] CUSE: unknown device info "ŁLŠP§ōæ’t|%Ķ€IŸøčžOŲŁäKu GģĀĻĒŖ|ÜQüUĖœDv…F‰Ż,*pį(o9Š{uįöŗ[§čµØ‘²égIĮPĢĶYV" [ 328.541360][ T8399] CUSE: DEVNAME unspecified [ 328.615255][ T30] audit: type=1400 audit(1792549808.380:1361): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 328.729942][ T30] audit: type=1326 audit(1792549808.490:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.3.636" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4330d9f559 code=0x0 [ 329.001065][ T8416] gre1: entered promiscuous mode [ 329.207799][ T8416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.644'. [ 331.638793][ T8425] jffs2: notice: (8425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 4 orphan) found. [ 331.818868][ T8426] FAULT_INJECTION: forcing a failure. [ 331.818868][ T8426] name failslab, interval 1, probability 0, space 0, times 0 [ 331.818892][ T8426] CPU: 0 UID: 0 PID: 8426 Comm: syz.3.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.818910][ T8426] Tainted: [L]=SOFTLOCKUP [ 331.818914][ T8426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 331.818922][ T8426] Call Trace: [ 331.818926][ T8426] [ 331.818932][ T8426] dump_stack_lvl+0x100/0x190 [ 331.818954][ T8426] should_fail_ex.cold+0x5/0xa [ 331.818970][ T8426] should_failslab+0xc2/0x120 [ 331.818989][ T8426] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 331.819004][ T8426] ? sock_alloc_inode+0x26/0x2c0 [ 331.819019][ T8426] ? __pfx_sock_alloc_inode+0x10/0x10 [ 331.819034][ T8426] sock_alloc_inode+0x26/0x2c0 [ 331.819048][ T8426] ? __pfx_sock_alloc_inode+0x10/0x10 [ 331.819062][ T8426] alloc_inode+0x68/0x250 [ 331.819076][ T8426] sock_alloc+0x44/0x280 [ 331.819088][ T8426] ? security_socket_create+0x7f/0x250 [ 331.819103][ T8426] __sock_create+0xc2/0x860 [ 331.819120][ T8426] __sys_socket+0x14d/0x260 [ 331.819138][ T8426] ? __pfx___sys_socket+0x10/0x10 [ 331.819157][ T8426] __x64_sys_socket+0x72/0xb0 [ 331.819174][ T8426] ? lockdep_hardirqs_on+0x7d/0x110 [ 331.819190][ T8426] do_syscall_64+0x123/0x790 [ 331.819208][ T8426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.819219][ T8426] RIP: 0033:0x7f4330d9f559 [ 331.819229][ T8426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.819239][ T8426] RSP: 002b:00007f4331c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 331.819250][ T8426] RAX: ffffffffffffffda RBX: 00007f4331025fa0 RCX: 00007f4330d9f559 [ 331.819257][ T8426] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 331.819263][ T8426] RBP: 00007f4330e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 331.819270][ T8426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.819276][ T8426] R13: 00007f4331026038 R14: 00007f4331025fa0 R15: 00007ffe4bd6c7c8 [ 331.819291][ T8426] [ 331.819298][ T8426] socket: no more sockets [ 332.012935][ T30] audit: type=1400 audit(1792549811.770:1363): avc: denied { read append } for pid=8421 comm="syz.4.647" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.724163][ T8428] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 332.743079][ T30] audit: type=1400 audit(1792549812.510:1364): avc: denied { map } for pid=8421 comm="syz.4.647" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.743129][ T30] audit: type=1400 audit(1792549812.510:1365): avc: denied { execute } for pid=8421 comm="syz.4.647" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.809945][ T5604] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 333.336139][ T8445] FAULT_INJECTION: forcing a failure. [ 333.336139][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 333.336192][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.5.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.336220][ T8445] Tainted: [L]=SOFTLOCKUP [ 333.336227][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.336238][ T8445] Call Trace: [ 333.336245][ T8445] [ 333.336254][ T8445] dump_stack_lvl+0x100/0x190 [ 333.336287][ T8445] should_fail_ex.cold+0x5/0xa [ 333.336316][ T8445] should_failslab+0xc2/0x120 [ 333.336345][ T8445] kmem_cache_alloc_noprof+0x92/0x6a0 [ 333.336371][ T8445] ? anon_vma_clone+0x2b3/0xca0 [ 333.336403][ T8445] anon_vma_clone+0x2b3/0xca0 [ 333.336437][ T8445] __split_vma+0x750/0x1de0 [ 333.336461][ T8445] ? __pfx___split_vma+0x10/0x10 [ 333.336495][ T8445] vms_gather_munmap_vmas+0x1d2/0x1720 [ 333.336523][ T8445] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 333.336541][ T8445] ? mtree_range_walk+0x72b/0xb70 [ 333.336579][ T8445] ? mas_walk+0x260/0x310 [ 333.336608][ T8445] __mmap_region+0x4cc/0x32e0 [ 333.336634][ T8445] ? __pfx___mmap_region+0x10/0x10 [ 333.336654][ T8445] ? rcu_is_watching+0x13/0xc0 [ 333.336681][ T8445] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 333.336709][ T8445] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 333.336754][ T8445] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 333.336783][ T8445] ? __ia32_sys_sched_getaffinity+0x1e0/0x1e0 [ 333.336813][ T8445] ? kvm_sched_clock_read+0x11/0x20 [ 333.336851][ T8445] ? find_held_lock+0x2b/0x80 [ 333.336882][ T8445] ? rcu_is_watching+0x13/0xc0 [ 333.336908][ T8445] ? trace_sched_exit_tp+0x120/0x160 [ 333.336933][ T8445] ? __schedule+0x126b/0x6980 [ 333.337007][ T8445] mmap_region+0x3db/0x6d0 [ 333.337031][ T8445] ? __pfx_mmap_region+0x10/0x10 [ 333.337052][ T8445] ? shmem_get_unmapped_area+0x141/0x960 [ 333.337082][ T8445] ? selinux_mmap_addr+0x2b/0x110 [ 333.337113][ T8445] ? bpf_lsm_mmap_addr+0x9/0x30 [ 333.337139][ T8445] ? security_mmap_addr+0x71/0x1e0 [ 333.337157][ T8445] ? __get_unmapped_area+0x255/0x3e0 [ 333.337187][ T8445] do_mmap+0x12c7/0x1c30 [ 333.337217][ T8445] ? lock_acquire+0x1d1/0x380 [ 333.337238][ T8445] ? __pfx_do_mmap+0x10/0x10 [ 333.337273][ T8445] ? __pfx_down_write_killable+0x10/0x10 [ 333.337291][ T8445] ? irqentry_exit+0x2c9/0xa90 [ 333.337322][ T8445] vm_mmap_pgoff+0x28d/0x470 [ 333.337351][ T8445] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 333.337380][ T8445] ? preempt_schedule_irq+0x79/0x90 [ 333.337411][ T8445] ksys_mmap_pgoff+0xe4/0x610 [ 333.337439][ T8445] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 333.337472][ T8445] __x64_sys_mmap+0x125/0x190 [ 333.337497][ T8445] do_syscall_64+0x123/0x790 [ 333.337528][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.337547][ T8445] RIP: 0033:0x7f844799f559 [ 333.337564][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.337580][ T8445] RSP: 002b:00007f8445bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 333.337599][ T8445] RAX: ffffffffffffffda RBX: 00007f8447c26090 RCX: 00007f844799f559 [ 333.337611][ T8445] RDX: 0000000001000003 RSI: 000000000000c000 RDI: 0000200000ff4000 [ 333.337622][ T8445] RBP: 00007f8445bd5090 R08: ffffffffffffffff R09: 00000000ffffe000 [ 333.337634][ T8445] R10: 0000000000020031 R11: 0000000000000246 R12: 0000000000000001 [ 333.337644][ T8445] R13: 00007f8447c26128 R14: 00007f8447c26090 R15: 00007ffc41c96538 [ 333.337671][ T8445] [ 334.732450][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 337.403176][ T8475] gre1: entered promiscuous mode [ 337.624050][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.655'. [ 338.751997][ T8471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.003909][ T8459] Process accounting resumed [ 341.133766][ T30] audit: type=1326 audit(1792549820.890:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9df39f559 code=0x0 [ 341.220527][ T8490] netlink: 64 bytes leftover after parsing attributes in process `syz.2.667'. [ 341.312760][ T5800] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 341.942648][ T5800] usb 6-1: Using ep0 maxpacket: 16 [ 341.944627][ T5800] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 341.947785][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.947816][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.947837][ T5800] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 341.947873][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.012929][ T5800] usb 6-1: config 0 descriptor?? [ 342.148690][ T8490] syzkaller1: entered promiscuous mode [ 342.148712][ T8490] syzkaller1: entered allmulticast mode [ 342.199630][ T30] audit: type=1400 audit(1792549821.950:1367): avc: denied { link } for pid=8487 comm="syz.2.667" name="file0" dev="fuse" ino=4503599627370496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 342.300700][ T8500] overlayfs: failed to resolve './debug': -2 [ 342.346918][ T8500] overlayfs: failed to resolve './debug': -2 [ 342.420087][ T30] audit: type=1400 audit(1792549822.180:1368): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 342.534683][ T5800] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input35 [ 342.661812][ T5800] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 343.274066][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.275827][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.310715][ T8513] netlink: 48 bytes leftover after parsing attributes in process `syz.5.666'. [ 343.379203][ T5598] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 343.535352][ T5598] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 343.536242][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.536262][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.536283][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.547507][ T5598] usb 5-1: config 0 descriptor?? [ 343.637407][ T8516] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 343.857107][ T5800] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 344.743652][ T8522] jffs2: notice: (8522) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 4 orphan) found. [ 344.891359][ T8522] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 345.816354][ T5598] usbhid 5-1:0.0: can't add hid device: -71 [ 345.816442][ T5598] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 345.821271][ T5598] usb 5-1: USB disconnect, device number 14 [ 346.101466][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 346.102066][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 346.123930][ T8535] overlayfs: failed to resolve './file1/file0': -2 [ 346.281458][ T8531] netlink: 'syz.3.677': attribute type 2 has an invalid length. [ 346.281529][ T8531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 346.315029][ T8530] netlink: 'syz.0.678': attribute type 2 has an invalid length. [ 346.315401][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.678'. [ 346.354661][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 346.355338][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 346.408109][ T8531] Uż: entered promiscuous mode [ 346.412872][ T9] usb 6-1: USB disconnect, device number 2 [ 346.565326][ T8530] Uż: entered promiscuous mode [ 346.867572][ T5800] libceph: connect (1)[c::]:6789 error -101 [ 346.867688][ T5800] libceph: mon0 (1)[c::]:6789 connect error [ 346.972130][ T30] audit: type=1400 audit(1792549826.720:1369): avc: denied { read } for pid=8540 comm="syz.4.679" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.154865][ T8532] ceph: No mds server is up or the cluster is laggy [ 347.397179][ T8544] WARNING! power/level is deprecated; use power/control instead [ 347.443516][ T30] audit: type=1400 audit(1792549827.210:1370): avc: denied { bind } for pid=8545 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 347.443722][ T30] audit: type=1400 audit(1792549827.210:1371): avc: denied { setopt } for pid=8545 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 347.452826][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 349.207109][ T8556] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 349.428469][ T8558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8558 comm=syz.0.685 [ 349.428509][ T8558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8558 comm=syz.0.685 [ 350.023446][ T5598] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 350.174405][ T5598] usb 3-1: Using ep0 maxpacket: 32 [ 350.176064][ T5598] usb 3-1: New USB device found, idVendor=06cb, idProduct=0013, bcdDevice=ec.ae [ 350.179759][ T5598] usb 3-1: config 15 has an invalid interface number: 151 but max is 0 [ 350.179785][ T5598] usb 3-1: config 15 has no interface number 0 [ 350.179810][ T5598] usb 3-1: config 15 interface 151 has no altsetting 0 [ 350.313277][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.313304][ T5598] usb 3-1: Product: syz [ 350.313317][ T5598] usb 3-1: Manufacturer: syz [ 350.313330][ T5598] usb 3-1: SerialNumber: syz [ 351.049205][ T5598] usb 3-1: selecting invalid altsetting 1 [ 351.049231][ T5598] usb 3-1: Can not set alternate setting to 1, error: -22 [ 351.049253][ T5598] synaptics_usb 3-1:15.151: probe with driver synaptics_usb failed with error -22 [ 351.093072][ T5598] usb 3-1: USB disconnect, device number 9 [ 354.714191][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'. [ 354.732721][ T5598] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 355.536078][ T8589] macsec1: entered promiscuous mode [ 355.578883][ T8598] gre1: entered promiscuous mode [ 355.761134][ T8604] netlink: 'syz.2.691': attribute type 2 has an invalid length. [ 355.761154][ T8604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 356.148840][ T8604] Uż: entered promiscuous mode [ 356.315350][ T8608] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 356.722367][ T30] audit: type=1400 audit(1792549836.480:1372): avc: denied { mounton } for pid=8617 comm="syz.2.699" path="/141/file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 356.826027][ T8616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8616 comm=syz.0.698 [ 356.826057][ T8616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8616 comm=syz.0.698 [ 357.786545][ T8637] overlayfs: failed to resolve './file1/file0': -2 [ 357.815765][ T5598] libceph: connect (1)[c::]:6789 error -101 [ 357.816449][ T5598] libceph: mon0 (1)[c::]:6789 connect error [ 358.073061][ T5598] libceph: connect (1)[c::]:6789 error -101 [ 358.073226][ T5598] libceph: mon0 (1)[c::]:6789 connect error [ 358.200979][ T30] audit: type=1400 audit(1792549837.960:1373): avc: denied { read } for pid=5265 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 358.229764][ T30] audit: type=1400 audit(1792549837.990:1374): avc: denied { search } for pid=5265 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.229982][ T30] audit: type=1400 audit(1792549837.990:1375): avc: denied { search } for pid=5265 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.232151][ T30] audit: type=1400 audit(1792549837.990:1376): avc: denied { search } for pid=5265 comm="dhcpcd" name="data" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.232193][ T30] audit: type=1400 audit(1792549837.990:1377): avc: denied { read } for pid=5265 comm="dhcpcd" name="n42" dev="tmpfs" ino=2378 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 358.232228][ T30] audit: type=1400 audit(1792549837.990:1378): avc: denied { open } for pid=5265 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=2378 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 358.232261][ T30] audit: type=1400 audit(1792549837.990:1379): avc: denied { getattr } for pid=5265 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=2378 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 358.234551][ T30] audit: type=1400 audit(1792549838.000:1380): avc: denied { prog_load } for pid=8640 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 358.234585][ T30] audit: type=1400 audit(1792549838.000:1381): avc: denied { bpf } for pid=8640 comm="syz.3.703" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 358.430484][ T8635] ceph: No mds server is up or the cluster is laggy [ 358.673742][ T8657] netlink: 'syz.3.706': attribute type 2 has an invalid length. [ 358.673765][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.706'. [ 359.347158][ T8667] jffs2: notice: (8667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 4 orphan) found. [ 359.625348][ T8667] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 360.507588][ T8680] jffs2: notice: (8680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 4 orphan) found. [ 360.799603][ T8680] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 360.930911][ T8686] FAULT_INJECTION: forcing a failure. [ 360.930911][ T8686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.930934][ T8686] CPU: 1 UID: 0 PID: 8686 Comm: syz.0.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.930949][ T8686] Tainted: [L]=SOFTLOCKUP [ 360.930953][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.930959][ T8686] Call Trace: [ 360.930964][ T8686] [ 360.930968][ T8686] dump_stack_lvl+0x100/0x190 [ 360.930988][ T8686] should_fail_ex.cold+0x5/0xa [ 360.931004][ T8686] _copy_from_user+0x2e/0xd0 [ 360.931024][ T8686] video_usercopy+0xe71/0x1730 [ 360.931040][ T8686] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 360.931054][ T8686] ? __pfx_video_usercopy+0x10/0x10 [ 360.931077][ T8686] v4l2_ioctl+0x1bd/0x250 [ 360.931091][ T8686] ? __pfx_v4l2_ioctl+0x10/0x10 [ 360.931106][ T8686] __x64_sys_ioctl+0x18e/0x210 [ 360.931122][ T8686] do_syscall_64+0x123/0x790 [ 360.931141][ T8686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.931152][ T8686] RIP: 0033:0x7fbe03b9f559 [ 360.931162][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.931173][ T8686] RSP: 002b:00007fbe04a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.931184][ T8686] RAX: ffffffffffffffda RBX: 00007fbe03e25fa0 RCX: 00007fbe03b9f559 [ 360.931191][ T8686] RDX: 0000200000000100 RSI: 00000000c0585605 RDI: 0000000000000003 [ 360.931198][ T8686] RBP: 00007fbe04a86090 R08: 0000000000000000 R09: 0000000000000000 [ 360.931204][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.931210][ T8686] R13: 00007fbe03e26038 R14: 00007fbe03e25fa0 R15: 00007fff8f3da8d8 [ 360.931224][ T8686] [ 361.111862][ T8687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8687 comm=syz.2.713 [ 361.111889][ T8687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8687 comm=syz.2.713 [ 361.857938][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 361.857955][ T30] audit: type=1400 audit(1792549841.610:1434): avc: denied { write } for pid=8692 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.857994][ T30] audit: type=1400 audit(1792549841.620:1435): avc: denied { remove_name } for pid=8692 comm="rm" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=2383 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.858031][ T30] audit: type=1400 audit(1792549841.620:1436): avc: denied { unlink } for pid=8692 comm="rm" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=2383 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 362.036078][ T30] audit: type=1400 audit(1792549841.800:1437): avc: denied { read write } for pid=8689 comm="syz.4.714" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 362.036350][ T30] audit: type=1400 audit(1792549841.800:1438): avc: denied { open } for pid=8689 comm="syz.4.714" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 362.090485][ T30] audit: type=1400 audit(1792549841.810:1439): avc: denied { allowed } for pid=8699 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 362.090535][ T30] audit: type=1400 audit(1792549841.840:1440): avc: denied { mounton } for pid=8689 comm="syz.4.714" path="/144/file0" dev="tmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 362.090575][ T30] audit: type=1400 audit(1792549841.840:1441): avc: denied { mount } for pid=8689 comm="syz.4.714" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 362.143540][ T30] audit: type=1400 audit(1792549841.900:1442): avc: denied { create } for pid=8699 comm="syz.2.717" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 362.229131][ T8703] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 362.286639][ T8705] netlink: 'syz.0.719': attribute type 2 has an invalid length. [ 362.286658][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 362.422619][ T8707] comedi: valid board names for 8255 driver are: [ 362.422633][ T8707] 8255 [ 362.422639][ T8707] comedi: valid board names for vmk80xx driver are: [ 362.422647][ T8707] vmk80xx [ 362.422653][ T8707] comedi: valid board names for usbduxsigma driver are: [ 362.422660][ T8707] usbduxsigma [ 362.422665][ T8707] comedi: valid board names for usbduxfast driver are: [ 362.422672][ T8707] usbduxfast [ 362.422678][ T8707] comedi: valid board names for usbdux driver are: [ 362.422685][ T8707] usbdux [ 362.422690][ T8707] comedi: valid board names for ni6501 driver are: [ 362.422697][ T8707] ni6501 [ 362.422702][ T8707] comedi: valid board names for dt9812 driver are: [ 362.422709][ T8707] dt9812 [ 362.422714][ T8707] comedi: valid board names for ni_labpc_cs driver are: [ 362.422721][ T8707] ni_labpc_cs [ 362.422727][ T8707] comedi: valid board names for ni_daq_700 driver are: [ 362.422734][ T8707] ni_daq_700 [ 362.422740][ T8707] comedi: valid board names for labpc_pci driver are: [ 362.422747][ T8707] labpc_pci [ 362.422752][ T8707] comedi: valid board names for adl_pci9118 driver are: [ 362.422760][ T8707] pci9118dg [ 362.422765][ T8707] pci9118hg [ 362.422770][ T8707] pci9118hr [ 362.422776][ T8707] comedi: valid board names for 8255_pci driver are: [ 362.422782][ T8707] 8255_pci [ 362.422787][ T8707] comedi: valid board names for s526 driver are: [ 362.422793][ T8707] s526 [ 362.422799][ T8707] comedi: valid board names for multiq3 driver are: [ 362.422806][ T8707] multiq3 [ 362.422811][ T8707] comedi: valid board names for pcmuio driver are: [ 362.422819][ T8707] pcmuio48 [ 362.422824][ T8707] pcmuio96 [ 362.422830][ T8707] comedi: valid board names for pcmmio driver are: [ 362.422836][ T8707] pcmmio [ 362.422847][ T8707] comedi: valid board names for pcmda12 driver are: [ 362.422854][ T8707] pcmda12 [ 362.422859][ T8707] comedi: valid board names for pcmad driver are: [ 362.422866][ T8707] pcmad12 [ 362.422872][ T8707] pcmad16 [ 362.422877][ T8707] comedi: valid board names for ni_labpc driver are: [ 362.422885][ T8707] lab-pc-1200 [ 362.422890][ T8707] lab-pc-1200ai [ 362.422896][ T8707] lab-pc+ [ 362.422902][ T8707] comedi: valid board names for atmio16 driver are: [ 362.422909][ T8707] atmio16 [ 362.422913][ T8707] atmio16d [ 362.422919][ T8707] comedi: valid board names for ni_at_ao driver are: [ 362.422926][ T8707] at-ao-6 [ 362.422932][ T8707] at-ao-10 [ 362.422937][ T8707] comedi: valid board names for ni_at_a2150 driver are: [ 362.422944][ T8707] ni_at_a2150 [ 362.422950][ T8707] comedi: valid board names for adq12b driver are: [ 362.422957][ T8707] adq12b [ 362.422962][ T8707] comedi: valid board names for mpc624 driver are: [ 362.422969][ T8707] mpc624 [ 362.422975][ T8707] comedi: valid board names for c6xdigio driver are: [ 362.422982][ T8707] c6xdigio [ 362.422987][ T8707] comedi: valid board names for aio_iiro_16 driver are: [ 362.422995][ T8707] aio_iiro_16 [ 362.423000][ T8707] comedi: valid board names for aio_aio12_8 driver are: [ 362.423008][ T8707] aio_aio12_8 [ 362.423013][ T8707] aio_ai12_8 [ 362.423019][ T8707] aio_ao12_4 [ 362.423025][ T8707] comedi: valid board names for fl512 driver are: [ 362.423032][ T8707] fl512 [ 362.423037][ T8707] comedi: valid board names for dmm32at driver are: [ 362.423044][ T8707] dmm32at [ 362.423050][ T8707] comedi: valid board names for dt282x driver are: [ 362.423057][ T8707] dt2821 [ 362.423062][ T8707] dt2821-f [ 362.423068][ T8707] dt2821-g [ 362.423073][ T8707] dt2823 [ 362.423078][ T8707] dt2824-pgh [ 362.423083][ T8707] dt2824-pgl [ 362.423089][ T8707] dt2825 [ 362.423094][ T8707] dt2827 [ 362.423100][ T8707] dt2828 [ 362.423105][ T8707] dt2829 [ 362.423111][ T8707] dt21-ez [ 362.423116][ T8707] dt23-ez [ 362.423122][ T8707] dt24-ez [ 362.423127][ T8707] dt24-ez-pgl [ 362.423133][ T8707] comedi: valid board names for dt2817 driver are: [ 362.423140][ T8707] dt2817 [ 362.423146][ T8707] comedi: valid board names for dt2815 driver are: [ 362.423153][ T8707] dt2815 [ 362.423162][ T8707] comedi: valid board names for dt2814 driver are: [ 362.423169][ T8707] dt2814 [ 362.423175][ T8707] comedi: valid board names for dt2811 driver are: [ 362.423182][ T8707] dt2811-pgh [ 362.423187][ T8707] dt2811-pgl [ 362.423192][ T8707] comedi: valid board names for dt2801 driver are: [ 362.423199][ T8707] dt2801 [ 362.423205][ T8707] comedi: valid board names for das6402 driver are: [ 362.423211][ T8707] das6402-12 [ 362.423217][ T8707] das6402-16 [ 362.423223][ T8707] comedi: valid board names for das1800 driver are: [ 362.423230][ T8707] das-1701st [ 362.423235][ T8707] das-1701st-da [ 362.423241][ T8707] das-1702st [ 362.423247][ T8707] das-1702st-da [ 362.423252][ T8707] das-1702hr [ 362.423258][ T8707] das-1702hr-da [ 362.423264][ T8707] das-1701ao [ 362.423270][ T8707] das-1702ao [ 362.423275][ T8707] das-1801st [ 362.423281][ T8707] das-1801st-da [ 362.423286][ T8707] das-1802st [ 362.423292][ T8707] das-1802st-da [ 362.423297][ T8707] das-1802hr [ 362.423303][ T8707] das-1802hr-da [ 362.423308][ T8707] das-1801hc [ 362.423314][ T8707] das-1802hc [ 362.423319][ T8707] das-1801ao [ 362.423325][ T8707] das-1802ao [ 362.423330][ T8707] comedi: valid board names for das800 driver are: [ 362.423337][ T8707] das-800 [ 362.423342][ T8707] cio-das800 [ 362.423347][ T8707] das-801 [ 362.423353][ T8707] cio-das801 [ 362.423358][ T8707] das-802 [ 362.423364][ T8707] cio-das802 [ 362.423369][ T8707] cio-das802/16 [ 362.423375][ T8707] comedi: valid board names for isa-das08 driver are: [ 362.423382][ T8707] isa-das08 [ 362.423387][ T8707] das08-pgm [ 362.423393][ T8707] das08-pgh [ 362.423399][ T8707] das08-pgl [ 362.423404][ T8707] das08-aoh [ 362.423410][ T8707] das08-aol [ 362.423416][ T8707] das08-aom [ 362.423421][ T8707] das08/jr-ao [ 362.423427][ T8707] das08jr-16-ao [ 362.423432][ T8707] pc104-das08 [ 362.423438][ T8707] das08jr/16 [ 362.423444][ T8707] comedi: valid board names for das16m1 driver are: [ 362.423451][ T8707] das16m1 [ 362.423457][ T8707] comedi: valid board names for dac02 driver are: [ 362.423464][ T8707] dac02 [ 362.423469][ T8707] comedi: valid board names for rti802 driver are: [ 362.423476][ T8707] rti802 [ 362.423482][ T8707] comedi: valid board names for rti800 driver are: [ 362.423489][ T8707] rti800 [ 362.423494][ T8707] rti815 [ 362.423500][ T8707] comedi: valid board names for pcm3724 driver are: [ 362.423507][ T8707] pcm3724 [ 362.423512][ T8707] comedi: valid board names for pcl818 driver are: [ 362.423519][ T8707] pcl818l [ 362.423525][ T8707] pcl818h [ 362.423530][ T8707] pcl818hd [ 362.423535][ T8707] pcl818hg [ 362.423541][ T8707] pcl818 [ 362.423546][ T8707] pcl718 [ 362.423552][ T8707] pcm3718 [ 362.423557][ T8707] comedi: valid board names for pcl816 driver are: [ 362.423564][ T8707] pcl816 [ 362.423570][ T8707] pcl814b [ 362.423575][ T8707] comedi: valid board names for pcl812 driver are: [ 362.423582][ T8707] pcl812 [ 362.423587][ T8707] pcl812pg [ 362.423593][ T8707] acl8112pg [ 362.423598][ T8707] acl8112dg [ 362.423604][ T8707] acl8112hg [ 362.423610][ T8707] a821pgl [ 362.423615][ T8707] a821pglnda [ 362.423621][ T8707] a821pgh [ 362.423626][ T8707] a822pgl [ 362.423632][ T8707] a822pgh [ 362.423637][ T8707] a823pgl [ 362.423642][ T8707] a823pgh [ 362.423648][ T8707] pcl813 [ 362.423653][ T8707] pcl813b [ 362.423658][ T8707] acl8113 [ 362.423664][ T8707] iso813 [ 362.423669][ T8707] acl8216 [ 362.423674][ T8707] a826pg [ 362.423679][ T8707] comedi: valid board names for pcl730 driver are: [ 362.423687][ T8707] pcl730 [ 362.423692][ T8707] iso730 [ 362.423697][ T8707] acl7130 [ 362.423702][ T8707] pcm3730 [ 362.423707][ T8707] pcl725 [ 362.423713][ T8707] p8r8dio [ 362.423718][ T8707] acl7225b [ 362.423724][ T8707] p16r16dio [ 362.423730][ T8707] pcl733 [ 362.423735][ T8707] pcl734 [ 362.423740][ T8707] opmm-1616-xt [ 362.423746][ T8707] pearl-mm-p [ 362.423751][ T8707] ir104-pbf [ 362.423757][ T8707] comedi: valid board names for pcl726 driver are: [ 362.423764][ T8707] pcl726 [ 362.423769][ T8707] pcl727 [ 362.423775][ T8707] pcl728 [ 362.423780][ T8707] acl6126 [ 362.423785][ T8707] acl6128 [ 362.423791][ T8707] comedi: valid board names for pcl724 driver are: [ 362.423798][ T8707] pcl724 [ 362.423803][ T8707] pcl722 [ 362.423808][ T8707] pcl731 [ 362.423814][ T8707] acl7122 [ 362.423819][ T8707] acl7124 [ 362.423825][ T8707] pet48dio [ 362.423830][ T8707] pcmio48 [ 362.423835][ T8707] onyx-mm-dio [ 362.423841][ T8707] comedi: valid board names for pcl711 driver are: [ 362.423853][ T8707] pcl711 [ 362.423858][ T8707] pcl711b [ 362.423864][ T8707] acl8112hg [ 362.423869][ T8707] acl8112dg [ 362.469460][ T8707] comedi: valid board names for amplc_pc263 driver are: [ 362.469473][ T8707] pc263 [ 362.469478][ T8707] comedi: valid board names for amplc_pc236 driver are: [ 362.469484][ T8707] pc36at [ 362.469490][ T8707] comedi: valid board names for amplc_dio200 driver are: [ 362.469496][ T8707] pc212e [ 362.469501][ T8707] pc214e [ 362.469506][ T8707] pc215e [ 362.469510][ T8707] pc218e [ 362.469515][ T8707] pc272e [ 362.469519][ T8707] comedi: valid board names for comedi_parport driver are: [ 362.469526][ T8707] comedi_parport [ 362.469532][ T8707] comedi: valid board names for comedi_test driver are: [ 362.469538][ T8707] comedi_test [ 362.469543][ T8707] comedi: valid board names for comedi_bond driver are: [ 362.469549][ T8707] comedi_bond [ 363.874035][ T8728] jffs2: notice: (8728) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 4 orphan) found. [ 364.124990][ T8728] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 364.858762][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.725'. [ 365.681810][ T8745] fuse: Bad value for 'user_id' [ 365.681831][ T8745] fuse: Bad value for 'user_id' [ 368.014308][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 368.014326][ T30] audit: type=1400 audit(1792549847.780:1469): avc: denied { create } for pid=8774 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.054329][ T30] audit: type=1400 audit(1792549847.820:1470): avc: denied { bind } for pid=8774 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 369.211258][ T30] audit: type=1400 audit(1792549848.690:1471): avc: denied { create } for pid=8772 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 369.211311][ T30] audit: type=1400 audit(1792549848.700:1472): avc: denied { getopt } for pid=8772 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 369.211343][ T30] audit: type=1400 audit(1792549848.720:1473): avc: denied { create } for pid=8772 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.610705][ T30] audit: type=1400 audit(1792549850.220:1474): avc: denied { setopt } for pid=8774 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.425505][ T8785] jffs2: notice: (8785) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 4 orphan) found. [ 371.774870][ T8785] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 371.897021][ T30] audit: type=1400 audit(1792549851.660:1475): avc: denied { create } for pid=8789 comm="syz.5.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 371.911638][ T8791] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 371.911655][ T8791] audit: out of memory in audit_log_start [ 372.021987][ T30] audit: type=1400 audit(1792549851.780:1476): avc: denied { mount } for pid=8790 comm="syz.0.724" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 372.346454][ T8798] FAULT_INJECTION: forcing a failure. [ 372.346454][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 372.346486][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.5.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.346510][ T8798] Tainted: [L]=SOFTLOCKUP [ 372.346516][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.346527][ T8798] Call Trace: [ 372.346533][ T8798] [ 372.346540][ T8798] dump_stack_lvl+0x100/0x190 [ 372.346573][ T8798] should_fail_ex.cold+0x5/0xa [ 372.346598][ T8798] should_failslab+0xc2/0x120 [ 372.346625][ T8798] __kmalloc_noprof+0xfc/0x840 [ 372.346648][ T8798] ? video_usercopy+0x1a3/0x1730 [ 372.346676][ T8798] video_usercopy+0x1a3/0x1730 [ 372.346699][ T8798] ? __pfx___video_do_ioctl+0x10/0x10 [ 372.346719][ T8798] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 372.346752][ T8798] ? __pfx_video_usercopy+0x10/0x10 [ 372.346792][ T8798] v4l2_ioctl+0x1bd/0x250 [ 372.346814][ T8798] ? __pfx_v4l2_ioctl+0x10/0x10 [ 372.346838][ T8798] __x64_sys_ioctl+0x18e/0x210 [ 372.346862][ T8798] do_syscall_64+0x123/0x790 [ 372.346895][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.346913][ T8798] RIP: 0033:0x7f844799f559 [ 372.346929][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.346945][ T8798] RSP: 002b:00007f8445bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.346963][ T8798] RAX: ffffffffffffffda RBX: 00007f8447c25fa0 RCX: 00007f844799f559 [ 372.346974][ T8798] RDX: 0000200000000240 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 372.346985][ T8798] RBP: 00007f8445bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 372.346996][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.347006][ T8798] R13: 00007f8447c26038 R14: 00007f8447c25fa0 R15: 00007ffc41c96538 [ 372.347031][ T8798] [ 372.690919][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 373.134889][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.134957][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.809253][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 373.809288][ T30] audit: type=1400 audit(1792549853.570:1480): avc: denied { unmount } for pid=8808 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 373.884632][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.745'. [ 373.886554][ T30] audit: type=1400 audit(1792549853.640:1481): avc: denied { write } for pid=8808 comm="syz.5.745" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 377.335777][ T30] audit: type=1400 audit(1792549857.060:1482): avc: denied { listen } for pid=8816 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.046459][ T8831] Process accounting paused [ 379.101993][ T30] audit: type=1400 audit(1792549858.860:1483): avc: denied { module_request } for pid=8832 comm="syz.4.750" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.244550][ T30] audit: type=1400 audit(1792549859.010:1484): avc: denied { sys_module } for pid=8832 comm="syz.4.750" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 379.615552][ T30] audit: type=1400 audit(1792549859.380:1485): avc: denied { ioctl } for pid=8847 comm="syz.4.753" path="socket:[20980]" dev="sockfs" ino=20980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.898703][ T8853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8853 comm=syz.3.755 [ 379.898734][ T8853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8853 comm=syz.3.755 [ 380.090218][ T8859] Bluetooth: hci0: unsupported parameter 5135 [ 380.090238][ T8859] Bluetooth: hci0: unsupported parameter 8192 [ 380.090250][ T8859] Bluetooth: hci0: unsupported parameter 5135 [ 380.090264][ T8859] Bluetooth: hci0: unsupported parameter 8192 [ 380.090309][ T30] audit: type=1400 audit(1792549859.850:1486): avc: denied { write } for pid=8858 comm="syz.4.756" path="socket:[21012]" dev="sockfs" ino=21012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.142283][ T30] audit: type=1400 audit(1792549859.890:1487): avc: denied { write } for pid=8860 comm="syz.4.757" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 380.142329][ T30] audit: type=1400 audit(1792549859.890:1488): avc: denied { open } for pid=8860 comm="syz.4.757" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 380.144074][ T30] audit: type=1400 audit(1792549859.890:1489): avc: denied { map } for pid=8860 comm="syz.4.757" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 380.144114][ T30] audit: type=1400 audit(1792549859.890:1490): avc: denied { read } for pid=8860 comm="syz.4.757" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 380.238233][ T8862] netlink: 260 bytes leftover after parsing attributes in process `syz.2.748'. [ 380.378433][ T8866] netlink: 'syz.5.758': attribute type 2 has an invalid length. [ 380.378454][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.758'. [ 380.406975][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 380.413824][ T8866] Uż: entered promiscuous mode [ 380.781795][ T8883] FAULT_INJECTION: forcing a failure. [ 380.781795][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 380.781826][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.0.760 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.781850][ T8883] Tainted: [L]=SOFTLOCKUP [ 380.781857][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 380.781867][ T8883] Call Trace: [ 380.781874][ T8883] [ 380.781881][ T8883] dump_stack_lvl+0x100/0x190 [ 380.781913][ T8883] should_fail_ex.cold+0x5/0xa [ 380.781940][ T8883] should_failslab+0xc2/0x120 [ 380.781967][ T8883] kmem_cache_alloc_noprof+0x92/0x6a0 [ 380.781991][ T8883] ? alloc_empty_file+0x5b/0x1c0 [ 380.782014][ T8883] alloc_empty_file+0x5b/0x1c0 [ 380.782032][ T8883] path_openat+0xdb/0x2430 [ 380.782056][ T8883] ? stack_depot_save_flags+0x27/0x9f0 [ 380.782076][ T8883] ? register_lock_class+0x3f/0x7b0 [ 380.782102][ T8883] ? __pfx_path_openat+0x10/0x10 [ 380.782126][ T8883] ? kasan_save_stack+0x3f/0x50 [ 380.782147][ T8883] ? kasan_save_stack+0x30/0x50 [ 380.782169][ T8883] ? kasan_save_track+0x14/0x30 [ 380.782191][ T8883] ? __kasan_slab_alloc+0x89/0x90 [ 380.782214][ T8883] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 380.782235][ T8883] ? do_getname_kernel+0x5d/0x250 [ 380.782251][ T8883] ? split_huge_pages_write+0x1247/0x22b0 [ 380.782272][ T8883] ? full_proxy_write+0x135/0x1a0 [ 380.782293][ T8883] do_file_open+0x20e/0x430 [ 380.782321][ T8883] ? __pfx_do_file_open+0x10/0x10 [ 380.782372][ T8883] ? rcu_is_watching+0x13/0xc0 [ 380.782402][ T8883] file_open_name+0x1c3/0x3e0 [ 380.782420][ T8883] ? __pfx_file_open_name+0x10/0x10 [ 380.782435][ T8883] ? do_getname_kernel+0x5d/0x250 [ 380.782455][ T8883] ? __asan_memcpy+0x3c/0x60 [ 380.782476][ T8883] ? do_getname_kernel+0x1be/0x250 [ 380.782496][ T8883] split_huge_pages_write+0x1258/0x22b0 [ 380.782524][ T8883] ? lock_acquire+0x1d1/0x380 [ 380.782547][ T8883] ? is_bpf_text_address+0x25/0x1a0 [ 380.782598][ T8883] ? __pfx_split_huge_pages_write+0x10/0x10 [ 380.782618][ T8883] ? is_bpf_text_address+0x8a/0x1a0 [ 380.782643][ T8883] ? bpf_ksym_find+0x128/0x1c0 [ 380.782661][ T8883] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.782681][ T8883] ? is_bpf_text_address+0x94/0x1a0 [ 380.782706][ T8883] ? kernel_text_address+0x8d/0x100 [ 380.782722][ T8883] ? fast_dput+0x494/0x6f0 [ 380.782740][ T8883] ? __kernel_text_address+0xd/0x30 [ 380.782756][ T8883] ? unwind_get_return_address+0x59/0xa0 [ 380.782782][ T8883] ? arch_stack_walk+0xa6/0xf0 [ 380.782834][ T8883] ? register_lock_class+0x3f/0x7b0 [ 380.782854][ T8883] ? __lock_acquire+0x5c0/0x1f40 [ 380.782897][ T8883] ? __pfx___debugfs_file_get+0x10/0x10 [ 380.782914][ T8883] ? lock_acquire+0x1d1/0x380 [ 380.782933][ T8883] ? ksys_write+0x12a/0x250 [ 380.782959][ T8883] full_proxy_write+0x135/0x1a0 [ 380.782980][ T8883] vfs_write+0x2aa/0x1050 [ 380.783002][ T8883] ? __pfx_full_proxy_write+0x10/0x10 [ 380.783018][ T8883] ? lock_acquire+0x1d1/0x380 [ 380.783037][ T8883] ? __fget_files+0x34/0x3d0 [ 380.783062][ T8883] ? __pfx_vfs_write+0x10/0x10 [ 380.783081][ T8883] ? find_held_lock+0x2b/0x80 [ 380.783108][ T8883] ? __fget_files+0x215/0x3d0 [ 380.783139][ T8883] ? __fget_files+0x21f/0x3d0 [ 380.783172][ T8883] ksys_write+0x12a/0x250 [ 380.783193][ T8883] ? __pfx_ksys_write+0x10/0x10 [ 380.783223][ T8883] do_syscall_64+0x123/0x790 [ 380.783253][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.783272][ T8883] RIP: 0033:0x7fbe03b9f559 [ 380.783287][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.783304][ T8883] RSP: 002b:00007fbe04a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.783321][ T8883] RAX: ffffffffffffffda RBX: 00007fbe03e25fa0 RCX: 00007fbe03b9f559 [ 380.783333][ T8883] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000003 [ 380.783344][ T8883] RBP: 00007fbe04a86090 R08: 0000000000000000 R09: 0000000000000000 [ 380.783354][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.783364][ T8883] R13: 00007fbe03e26038 R14: 00007fbe03e25fa0 R15: 00007fff8f3da8d8 [ 380.783390][ T8883] [ 380.950223][ T30] audit: type=1400 audit(1792549860.710:1491): avc: denied { connect } for pid=8882 comm="syz.5.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 380.950270][ T30] audit: type=1400 audit(1792549860.710:1492): avc: denied { read } for pid=8882 comm="syz.5.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 381.848334][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.768'. [ 381.908535][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.768'. [ 382.085304][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 382.194469][ T8908] comedi comedi3: board detection failed [ 382.307318][ T8909] netlink: 'syz.0.765': attribute type 10 has an invalid length. [ 382.309269][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.309586][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.329364][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.329517][ T8909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.330862][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.330974][ T8909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.375967][ T8909] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 382.580162][ T8903] netlink: 1492 bytes leftover after parsing attributes in process `syz.5.768'. [ 382.580216][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.768'. [ 382.607521][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 382.665005][ T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 382.668437][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 382.668472][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 382.769235][ T191] libceph: connect (1)[c::]:6789 error -101 [ 382.769418][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 383.023727][ T8900] ceph: No mds server is up or the cluster is laggy [ 383.094641][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 383.094849][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 383.100754][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.100781][ T9] usb 4-1: Product: syz [ 383.100795][ T9] usb 4-1: Manufacturer: syz [ 383.100808][ T9] usb 4-1: SerialNumber: syz [ 383.104065][ T8901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 383.389294][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.389336][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 383.516644][ T29] libceph: connect (1)[c::]:6789 error -22 [ 383.517474][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 383.767510][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.772'. [ 383.774372][ T29] libceph: connect (1)[c::]:6789 error -22 [ 383.775066][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 384.275328][ T8917] ceph: No mds server is up or the cluster is laggy [ 384.283659][ T29] libceph: connect (1)[c::]:6789 error -22 [ 384.283828][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 384.405454][ T9] usb 4-1: USB disconnect, device number 13 [ 384.456272][ T8930] netlink: 'syz.4.771': attribute type 2 has an invalid length. [ 384.456290][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.771'. [ 384.687959][ T8937] udevd[8937]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.112926][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 385.113083][ T30] audit: type=1400 audit(1792549864.860:1504): avc: denied { ioctl } for pid=8942 comm="syz.0.778" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.381778][ T8948] input: syz0 as /devices/virtual/input/input36 [ 385.396320][ T8951] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 385.396338][ T8951] audit: out of memory in audit_log_start [ 385.578679][ T30] audit: type=1400 audit(1792549865.340:1505): avc: denied { read } for pid=4955 comm="acpid" name="event4" dev="devtmpfs" ino=2969 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.579098][ T30] audit: type=1400 audit(1792549865.340:1506): avc: denied { open } for pid=4955 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2969 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.579182][ T30] audit: type=1400 audit(1792549865.340:1507): avc: denied { ioctl } for pid=4955 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2969 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.816258][ T30] audit: type=1400 audit(1792549865.580:1508): avc: denied { mount } for pid=8956 comm="syz.5.782" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 387.073450][ T8964] input: syz0 as /devices/virtual/input/input37 [ 387.119604][ T9] libceph: connect (1)[c::]:6789 error -101 [ 387.119772][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 387.299095][ T30] audit: type=1400 audit(1792549867.060:1509): avc: denied { ioctl } for pid=8965 comm="syz.2.784" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21389 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 387.393724][ T9] libceph: connect (1)[c::]:6789 error -101 [ 387.393875][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 387.419046][ T30] audit: type=1400 audit(1792549867.180:1510): avc: denied { read } for pid=8974 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.419308][ T8971] ceph: No mds server is up or the cluster is laggy [ 387.479889][ T30] audit: type=1400 audit(1792549867.240:1511): avc: denied { search } for pid=8965 comm="syz.2.784" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 388.026823][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 388.189488][ T8991] xt_hashlimit: size too large, truncated to 1048576 [ 388.263603][ T8994] FAULT_INJECTION: forcing a failure. [ 388.263603][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 388.263633][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.3.789 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.263659][ T8994] Tainted: [L]=SOFTLOCKUP [ 388.263665][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 388.263675][ T8994] Call Trace: [ 388.263681][ T8994] [ 388.263689][ T8994] dump_stack_lvl+0x100/0x190 [ 388.263719][ T8994] should_fail_ex.cold+0x5/0xa [ 388.263749][ T8994] should_failslab+0xc2/0x120 [ 388.263777][ T8994] __kmalloc_cache_noprof+0x91/0x6d0 [ 388.263796][ T8994] ? rcu_is_watching+0x13/0xc0 [ 388.263822][ T8994] ? vhost_task_create+0xee/0x370 [ 388.263843][ T8994] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 388.263870][ T8994] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 388.263905][ T8994] vhost_task_create+0xee/0x370 [ 388.263922][ T8994] ? __pfx_vhost_task_create+0x10/0x10 [ 388.263947][ T8994] ? __pfx_vhost_task_fn+0x10/0x10 [ 388.263967][ T8994] ? register_lock_class+0x3f/0x7b0 [ 388.263988][ T8994] ? rcu_is_watching+0x13/0xc0 [ 388.264013][ T8994] ? trace_contention_end+0x126/0x160 [ 388.264041][ T8994] kvm_mmu_post_init_vm+0x1b3/0x360 [ 388.264066][ T8994] kvm_arch_vcpu_ioctl_run+0xb5/0x1e20 [ 388.264090][ T8994] ? __pfx___mutex_lock+0x10/0x10 [ 388.264107][ T8994] ? kasan_quarantine_put+0x104/0x240 [ 388.264132][ T8994] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 388.264155][ T8994] ? lock_acquire+0x1d1/0x380 [ 388.264176][ T8994] ? do_raw_write_lock+0x11e/0x260 [ 388.264199][ T8994] ? find_held_lock+0x2b/0x80 [ 388.264225][ T8994] ? kvm_vcpu_ioctl+0x1596/0x1770 [ 388.264250][ T8994] ? kvm_vcpu_ioctl+0x1596/0x1770 [ 388.264281][ T8994] kvm_vcpu_ioctl+0x730/0x1770 [ 388.264309][ T8994] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 388.264334][ T8994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 388.264358][ T8994] ? do_vfs_ioctl+0x226/0x13e0 [ 388.264397][ T8994] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 388.264417][ T8994] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 388.264449][ T8994] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 388.264480][ T8994] ? __fget_files+0x34/0x3d0 [ 388.264517][ T8994] ? selinux_file_ioctl+0x13b/0x290 [ 388.264541][ T8994] ? selinux_file_ioctl+0xb6/0x290 [ 388.264568][ T8994] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 388.264594][ T8994] __x64_sys_ioctl+0x18e/0x210 [ 388.264619][ T8994] do_syscall_64+0x123/0x790 [ 388.264649][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.264668][ T8994] RIP: 0033:0x7f4330d9f559 [ 388.264684][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.264700][ T8994] RSP: 002b:00007f4331c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.264718][ T8994] RAX: ffffffffffffffda RBX: 00007f4331025fa0 RCX: 00007f4330d9f559 [ 388.264730][ T8994] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 388.264740][ T8994] RBP: 00007f4331c26090 R08: 0000000000000000 R09: 0000000000000000 [ 388.264750][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.264761][ T8994] R13: 00007f4331026038 R14: 00007f4331025fa0 R15: 00007ffe4bd6c7c8 [ 388.264787][ T8994] [ 388.308437][ T8997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43894 sclass=netlink_route_socket pid=8997 comm=syz.4.788 [ 388.742709][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 388.893765][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 388.895568][ T9] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 388.895620][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 388.895644][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 388.897488][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 388.897511][ T9] usb 5-1: Product: syz [ 388.897525][ T9] usb 5-1: Manufacturer: syz [ 388.897540][ T9] usb 5-1: SerialNumber: syz [ 388.967881][ T9] usb 5-1: config 0 descriptor?? [ 388.971759][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 388.971784][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 388.993875][ T9] usb 5-1: selecting invalid altsetting 0 [ 389.182214][ T9024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 389.833898][ T9] usb 5-1: USB disconnect, device number 15 [ 390.340948][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 390.340966][ T30] audit: type=1400 audit(1792549870.100:1526): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 390.515045][ T8922] udevd[8922]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.522247][ T30] audit: type=1400 audit(1792549870.280:1527): avc: denied { create } for pid=9031 comm="syz.5.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 391.025323][ T30] audit: type=1400 audit(1792549870.610:1528): avc: denied { write } for pid=9035 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 391.511585][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 391.602967][ T30] audit: type=1400 audit(1792549871.340:1529): avc: denied { setopt } for pid=9049 comm="syz.5.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.718519][ T9052] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 391.718541][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.804'. [ 391.969397][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.805'. [ 393.198962][ T30] audit: type=1400 audit(1792549872.960:1530): avc: denied { read write } for pid=9071 comm="syz.2.812" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 393.199300][ T30] audit: type=1400 audit(1792549872.960:1531): avc: denied { open } for pid=9071 comm="syz.2.812" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 393.202192][ T30] audit: type=1400 audit(1792549872.960:1532): avc: denied { ioctl } for pid=9071 comm="syz.2.812" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 393.208216][ T30] audit: type=1400 audit(1792549872.970:1533): avc: denied { getopt } for pid=9071 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.208793][ T30] audit: type=1400 audit(1792549872.970:1534): avc: denied { connect } for pid=9071 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 393.210346][ T30] audit: type=1400 audit(1792549872.970:1535): avc: denied { shutdown } for pid=9071 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 393.249449][ T1652] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 393.527212][ T1652] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 393.547502][ T1652] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.548307][ T1652] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.549446][ T1652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.205165][ T1652] dvb_usb_af9035 5-1:1.0: command=00 checksum mismatch (0000 != fdfc) [ 394.205213][ T1652] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -5 [ 394.829465][ T5604] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 394.899420][ T29] usb 5-1: USB disconnect, device number 16 [ 394.979867][ T9094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9094 comm=syz.2.814 [ 395.251434][ T9098] fuse: Bad value for 'fd' [ 397.234631][ T30] kauditd_printk_skb: 1015 callbacks suppressed [ 397.234648][ T30] audit: type=1400 audit(1792549877.000:2551): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 398.244873][ T30] audit: type=1400 audit(1792549878.010:2552): avc: denied { getopt } for pid=9109 comm="syz.3.820" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.352434][ T9124] netlink: 'syz.4.822': attribute type 2 has an invalid length. [ 398.352454][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.822'. [ 398.354582][ T30] audit: type=1400 audit(1792549878.120:2553): avc: denied { setopt } for pid=9121 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 398.390093][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 399.004478][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.821'. [ 400.595234][ T29] libceph: connect (1)[c::]:6789 error -101 [ 400.608020][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 400.884934][ T1652] libceph: connect (1)[c::]:6789 error -101 [ 400.887230][ T1652] libceph: mon0 (1)[c::]:6789 connect error [ 400.961141][ T9144] ceph: No mds server is up or the cluster is laggy [ 401.003044][ T30] audit: type=1400 audit(1792549880.770:2554): avc: denied { wake_alarm } for pid=9151 comm="syz.4.832" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 401.055597][ T9155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=9155 comm=syz.2.831 [ 401.055626][ T9155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9155 comm=syz.2.831 [ 401.157043][ T30] audit: type=1400 audit(1792549880.920:2555): avc: denied { create } for pid=9151 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 401.502831][ T9166] FAULT_INJECTION: forcing a failure. [ 401.502831][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 401.502864][ T9166] CPU: 0 UID: 0 PID: 9166 Comm: syz.0.833 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.502888][ T9166] Tainted: [L]=SOFTLOCKUP [ 401.502894][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.502904][ T9166] Call Trace: [ 401.502910][ T9166] [ 401.502918][ T9166] dump_stack_lvl+0x100/0x190 [ 401.502949][ T9166] should_fail_ex.cold+0x5/0xa [ 401.502974][ T9166] should_failslab+0xc2/0x120 [ 401.503001][ T9166] __kmalloc_noprof+0xfc/0x840 [ 401.503024][ T9166] ? __might_fault+0xc5/0x140 [ 401.503041][ T9166] ? set_mcast_msfilter+0x3d/0x340 [ 401.503071][ T9166] set_mcast_msfilter+0x3d/0x340 [ 401.503098][ T9166] do_ip_setsockopt+0x1a6e/0x3310 [ 401.503128][ T9166] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 401.503156][ T9166] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 401.503189][ T9166] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 401.503224][ T9166] ip_setsockopt+0x5a/0xf0 [ 401.503254][ T9166] udp_setsockopt+0x64/0xb0 [ 401.503277][ T9166] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 401.503309][ T9166] do_sock_setsockopt+0xf3/0x1d0 [ 401.503336][ T9166] __sys_setsockopt+0x195/0x220 [ 401.503360][ T9166] __x64_sys_setsockopt+0xbd/0x160 [ 401.503377][ T9166] ? do_syscall_64+0xae/0x790 [ 401.503405][ T9166] ? lockdep_hardirqs_on+0x7d/0x110 [ 401.503431][ T9166] do_syscall_64+0x123/0x790 [ 401.503460][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.503478][ T9166] RIP: 0033:0x7fbe03b9f559 [ 401.503494][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.503510][ T9166] RSP: 002b:00007fbe04a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 401.503528][ T9166] RAX: ffffffffffffffda RBX: 00007fbe03e25fa0 RCX: 00007fbe03b9f559 [ 401.503539][ T9166] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 401.503550][ T9166] RBP: 00007fbe04a86090 R08: 0000000000000110 R09: 0000000000000000 [ 401.503561][ T9166] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 401.503572][ T9166] R13: 00007fbe03e26038 R14: 00007fbe03e25fa0 R15: 00007fff8f3da8d8 [ 401.503598][ T9166] [ 401.864082][ T9176] Illegal XDP return value 4294967294 on prog (id 95) dev N/A, expect packet loss! [ 403.629403][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.836'. [ 404.166470][ T30] audit: type=1400 audit(1792549883.930:2556): avc: denied { listen } for pid=9172 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.271350][ T9186] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 404.271371][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.838'. [ 404.368514][ T30] audit: type=1400 audit(1792549884.130:2557): avc: denied { bind } for pid=9172 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.369143][ T30] audit: type=1400 audit(1792549884.130:2558): avc: denied { node_bind } for pid=9172 comm="syz.4.835" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 406.209799][ T30] audit: type=1400 audit(1792549885.970:2559): avc: denied { read } for pid=9197 comm="syz.0.843" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.243463][ T30] audit: type=1400 audit(1792549885.970:2560): avc: denied { open } for pid=9197 comm="syz.0.843" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.646639][ T30] audit: type=1400 audit(1792549886.410:2561): avc: denied { node_bind } for pid=9208 comm="syz.4.845" saddr=127.0.0.1 src=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 407.034855][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 407.333706][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 407.392903][ T30] audit: type=1400 audit(1792549887.090:2562): avc: denied { write } for pid=9219 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.393184][ T30] audit: type=1400 audit(1792549887.100:2563): avc: denied { nlmsg_write } for pid=9219 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.779135][ T9231] overlay: ./file0 is not a directory [ 407.925504][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'. [ 409.959759][ T9231] Process accounting resumed [ 410.078365][ T30] audit: type=1400 audit(1792549889.840:2564): avc: denied { name_bind } for pid=9241 comm="syz.5.854" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 410.087571][ T30] audit: type=1400 audit(1792549889.850:2565): avc: denied { mount } for pid=9242 comm="syz.2.853" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 410.136094][ T30] audit: type=1400 audit(1792549889.900:2566): avc: denied { create } for pid=9245 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 410.237279][ T30] audit: type=1400 audit(1792549890.000:2567): avc: denied { name_bind } for pid=9247 comm="syz.3.856" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 410.376610][ T30] audit: type=1400 audit(1792549890.020:2568): avc: denied { mounton } for pid=9247 comm="syz.3.856" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 410.376752][ T30] audit: type=1400 audit(1792549890.090:2569): avc: denied { read } for pid=9245 comm="syz.0.857" name="sg0" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 410.376849][ T30] audit: type=1400 audit(1792549890.090:2570): avc: denied { open } for pid=9245 comm="syz.0.857" path="/dev/sg0" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 410.376920][ T30] audit: type=1400 audit(1792549890.100:2571): avc: denied { ioctl } for pid=9245 comm="syz.0.857" path="/dev/sg0" dev="devtmpfs" ino=875 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 410.586257][ T30] audit: type=1400 audit(1792549890.200:2572): avc: denied { setattr } for pid=9245 comm="syz.0.857" path="/dev/sg0" dev="devtmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.470013][ T30] audit: type=1400 audit(1792549893.230:2573): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 414.142760][ T191] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 414.293006][ T191] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 414.294353][ T191] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 414.294379][ T191] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 414.294391][ T191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 414.297824][ T191] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 414.297839][ T191] usb 4-1: Product: syz [ 414.297847][ T191] usb 4-1: Manufacturer: syz [ 414.297855][ T191] usb 4-1: SerialNumber: syz [ 414.301115][ T191] usb 4-1: config 0 descriptor?? [ 414.311506][ T191] hub 4-1:0.0: bad descriptor, ignoring hub [ 414.311528][ T191] hub 4-1:0.0: probe with driver hub failed with error -5 [ 414.327595][ T191] usb 4-1: selecting invalid altsetting 0 [ 414.403924][ T5696] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 414.411608][ T9283] fuse: Bad value for 'fd' [ 414.520141][ T9283] netlink: 'syz.5.863': attribute type 11 has an invalid length. [ 414.520164][ T9283] netlink: 36 bytes leftover after parsing attributes in process `syz.5.863'. [ 414.533941][ T5696] usb 3-1: device descriptor read/64, error -71 [ 414.725217][ T191] usb 4-1: USB disconnect, device number 14 [ 414.779115][ T5696] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 414.842918][ T9291] udevd[9291]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.922604][ T5696] usb 3-1: device descriptor read/64, error -71 [ 415.962678][ T5696] usb usb3-port1: attempt power cycle [ 417.443325][ T5696] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 417.537357][ T5696] usb 3-1: device descriptor read/8, error -71 [ 417.549978][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 417.549993][ T30] audit: type=1400 audit(1792549897.300:2581): avc: denied { bind } for pid=9310 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 417.550127][ T9309] FAULT_INJECTION: forcing a failure. [ 417.550127][ T9309] name failslab, interval 1, probability 0, space 0, times 0 [ 417.550160][ T9309] CPU: 0 UID: 0 PID: 9309 Comm: syz.3.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.550188][ T9309] Tainted: [L]=SOFTLOCKUP [ 417.550195][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.550206][ T9309] Call Trace: [ 417.550213][ T9309] [ 417.550221][ T9309] dump_stack_lvl+0x100/0x190 [ 417.550256][ T9309] should_fail_ex.cold+0x5/0xa [ 417.550289][ T9309] should_failslab+0xc2/0x120 [ 417.550320][ T9309] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 417.550347][ T9309] ? sidtab_sid2str_get+0x84/0x670 [ 417.550369][ T9309] ? sidtab_sid2str_get+0x17a/0x670 [ 417.550394][ T9309] kmemdup_noprof+0x29/0x60 [ 417.550417][ T9309] sidtab_sid2str_get+0x17a/0x670 [ 417.550441][ T9309] security_sid_to_context_core+0x373/0x700 [ 417.550478][ T9309] avc_audit_post_callback+0x1aa/0x910 [ 417.550502][ T9309] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 417.550541][ T9309] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 417.550566][ T9309] ? skb_put+0x138/0x180 [ 417.550598][ T9309] ? audit_log_n_string+0x2a3/0x5a0 [ 417.550630][ T9309] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 417.550651][ T9309] common_lsm_audit+0x23f/0x2b0 [ 417.550684][ T9309] ? __pfx_common_lsm_audit+0x10/0x10 [ 417.550716][ T9309] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.550747][ T9309] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 417.550779][ T9309] slow_avc_audit+0x186/0x210 [ 417.550803][ T9309] ? __pfx_slow_avc_audit+0x10/0x10 [ 417.550829][ T9309] ? avc_denied+0x14a/0x190 [ 417.550854][ T9309] ? avc_has_perm_noaudit+0x3a2/0x470 [ 417.550881][ T9309] avc_has_perm+0x1a6/0x1e0 [ 417.550906][ T9309] ? __pfx_avc_has_perm+0x10/0x10 [ 417.550940][ T9309] security_uring_sqpoll+0x7f/0x1c0 [ 417.550970][ T9309] io_sq_offload_create+0x187/0xf00 [ 417.550993][ T9309] ? __pfx_io_create_region+0x10/0x10 [ 417.551018][ T9309] ? rcu_is_watching+0x13/0xc0 [ 417.551048][ T9309] ? cap_capable+0x107/0x430 [ 417.551073][ T9309] ? __pfx_io_sq_offload_create+0x10/0x10 [ 417.551099][ T9309] ? bpf_lsm_capable+0x9/0x10 [ 417.551119][ T9309] ? security_capable+0x80/0x260 [ 417.551148][ T9309] io_uring_setup.cold+0x147f/0x1c7e [ 417.551175][ T9309] ? __pfx_io_uring_setup+0x10/0x10 [ 417.551205][ T9309] ? find_held_lock+0x2b/0x80 [ 417.551257][ T9309] ? xfd_validate_state+0x129/0x190 [ 417.551288][ T9309] __x64_sys_io_uring_setup+0xc2/0x170 [ 417.551323][ T9309] do_syscall_64+0x123/0x790 [ 417.551358][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.551380][ T9309] RIP: 0033:0x7f4330d9f559 [ 417.551398][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.551417][ T9309] RSP: 002b:00007f4331c25fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 417.551439][ T9309] RAX: ffffffffffffffda RBX: 0000200000000280 RCX: 00007f4330d9f559 [ 417.551453][ T9309] RDX: 00002000000003c0 RSI: 0000200000000280 RDI: 0000000000001fc7 [ 417.551465][ T9309] RBP: 00007f4330e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 417.551477][ T9309] R10: 0000200000000400 R11: 0000000000000206 R12: 00002000000003c0 [ 417.551491][ T9309] R13: 0000200000000400 R14: 0000200000000380 R15: 00007ffe4bd6c7c8 [ 417.551531][ T9309] [ 417.578170][ T30] audit: type=1400 audit(1792549897.310:2582): avc: denied { sqpoll } for pid=9305 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tsid=145 tclass=io_uring permissive=1 [ 417.616175][ T30] audit: type=1400 audit(1792549897.380:2583): avc: denied { listen } for pid=9310 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 417.725106][ T9311] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 417.725123][ T9311] audit: out of memory in audit_log_start [ 418.417983][ T9325] FAULT_INJECTION: forcing a failure. [ 418.417983][ T9325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.418015][ T9325] CPU: 0 UID: 0 PID: 9325 Comm: syz.4.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.418040][ T9325] Tainted: [L]=SOFTLOCKUP [ 418.418046][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 418.418057][ T9325] Call Trace: [ 418.418063][ T9325] [ 418.418070][ T9325] dump_stack_lvl+0x100/0x190 [ 418.418107][ T9325] should_fail_ex.cold+0x5/0xa [ 418.418131][ T9325] _copy_from_user+0x2e/0xd0 [ 418.418158][ T9325] ppp_write+0x1a0/0x400 [ 418.418180][ T9325] ? __pfx_ppp_write+0x10/0x10 [ 418.418197][ T9325] vfs_writev+0x5ed/0xdd0 [ 418.418225][ T9325] ? __pfx_vfs_writev+0x10/0x10 [ 418.418251][ T9325] ? lock_acquire+0x1d1/0x380 [ 418.418272][ T9325] ? __fget_files+0x34/0x3d0 [ 418.418307][ T9325] ? __fget_files+0x21f/0x3d0 [ 418.418338][ T9325] ? do_pwritev+0x1ac/0x270 [ 418.418357][ T9325] do_pwritev+0x1ac/0x270 [ 418.418379][ T9325] ? __pfx_do_pwritev+0x10/0x10 [ 418.418407][ T9325] do_syscall_64+0x123/0x790 [ 418.418437][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.418456][ T9325] RIP: 0033:0x7f619859f559 [ 418.418471][ T9325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.418488][ T9325] RSP: 002b:00007f619953f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 418.418506][ T9325] RAX: ffffffffffffffda RBX: 00007f6198825fa0 RCX: 00007f619859f559 [ 418.418518][ T9325] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 418.418529][ T9325] RBP: 00007f619953f090 R08: 0000000000000000 R09: 0000000000000000 [ 418.418539][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.418549][ T9325] R13: 00007f6198826038 R14: 00007f6198825fa0 R15: 00007ffc14858e98 [ 418.418573][ T9325] [ 418.755831][ T30] audit: type=1326 audit(1792549898.520:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4330d9f559 code=0x7ffc0000 [ 418.755879][ T30] audit: type=1326 audit(1792549898.520:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4330d9f559 code=0x7ffc0000 [ 418.758941][ T30] audit: type=1326 audit(1792549898.520:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4330d5fd8e code=0x7ffc0000 [ 418.759337][ T30] audit: type=1326 audit(1792549898.520:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4330d9f1eb code=0x7ffc0000 [ 418.759532][ T30] audit: type=1326 audit(1792549898.520:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4330d9f1eb code=0x7ffc0000 [ 418.943678][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 419.036968][ T1652] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 419.967143][ T1652] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 419.993163][ T1652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.993197][ T1652] usb 4-1: Product: syz [ 419.993210][ T1652] usb 4-1: Manufacturer: syz [ 419.993225][ T1652] usb 4-1: SerialNumber: syz [ 420.625284][ T1652] usb 4-1: USB2VGA dongle found at address 15 [ 420.658654][ T1652] usb 4-1: Allocated 8 output buffers [ 421.474424][ T9347] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 422.439046][ T1652] usb 4-1: Failed to early initialize device [ 422.460242][ T1652] usb 4-1: USB disconnect, device number 15 [ 422.513720][ T9289] udevd[9289]: setting mode of /dev/bus/usb/004/015 to 020664 failed: No such file or directory [ 422.513826][ T9289] udevd[9289]: setting owner of /dev/bus/usb/004/015 to uid=0, gid=0 failed: No such file or directory [ 425.440792][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 425.440810][ T30] audit: type=1400 audit(1792549905.200:2687): avc: denied { read } for pid=9375 comm="syz.3.886" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 425.440970][ T30] audit: type=1400 audit(1792549905.200:2688): avc: denied { open } for pid=9375 comm="syz.3.886" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 425.588250][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 425.752731][ T191] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 427.165167][ T191] usb 4-1: Using ep0 maxpacket: 16 [ 427.173056][ T191] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 427.174035][ T191] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 427.174068][ T191] usb 4-1: config 0 interface 0 altsetting 183 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.174089][ T191] usb 4-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.174111][ T191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 427.174135][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.230629][ T191] usb 4-1: config 0 descriptor?? [ 427.279387][ T191] usbhid 4-1:0.0: can't add hid device: -22 [ 427.279464][ T191] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 427.492296][ T191] usb 4-1: USB disconnect, device number 16 [ 428.947235][ T32] INFO: task syz.1.512:7874 blocked for more than 143 seconds. [ 428.947263][ T32] Tainted: G L syzkaller #0 [ 428.947273][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.947281][ T32] task:syz.1.512 state:D stack:27656 pid:7874 tgid:7873 ppid:5602 task_flags:0x400140 flags:0x00080002 [ 428.947340][ T32] Call Trace: [ 428.947347][ T32] [ 428.947356][ T32] __schedule+0x1259/0x6980 [ 428.947382][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.947407][ T32] ? do_raw_spin_lock+0x128/0x260 [ 428.947435][ T32] ? lock_acquire+0x1d1/0x380 [ 428.947455][ T32] ? __pfx___schedule+0x10/0x10 [ 428.947484][ T32] ? find_held_lock+0x2b/0x80 [ 428.947509][ T32] ? schedule+0x225/0x2c0 [ 428.947536][ T32] schedule+0xdd/0x2c0 [ 428.947559][ T32] schedule_preempt_disabled+0x13/0x30 [ 428.947584][ T32] __mutex_lock+0xccf/0x1c20 [ 428.947600][ T32] ? usbdev_open+0x1b6/0x870 [ 428.947625][ T32] ? klist_put+0xcb/0x1d0 [ 428.947646][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 428.947661][ T32] ? _raw_spin_unlock+0x28/0x50 [ 428.947685][ T32] ? kobject_put+0xb9/0x640 [ 428.947711][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 428.947734][ T32] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 428.947755][ T32] ? usbdev_open+0x9d/0x870 [ 428.947780][ T32] ? usbdev_open+0x1b6/0x870 ** replaying previous printk message ** [ 428.947804][ T32] usbdev_open+0x1b6/0x870 [ 428.947831][ T32] ? do_raw_spin_lock+0x128/0x260 [ 428.947852][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 428.947874][ T32] ? chrdev_open+0x589/0x6a0 [ 428.947898][ T32] ? chrdev_open+0x589/0x6a0 [ 428.947928][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 428.947954][ T32] chrdev_open+0x234/0x6a0 [ 428.947980][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 428.948008][ T32] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 428.948037][ T32] do_dentry_open+0x674/0x1470 [ 428.948061][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 428.948091][ T32] vfs_open_consume+0xcc/0x460 [ 428.948113][ T32] path_openat+0x1551/0x2430 [ 428.948144][ T32] ? __pfx_path_openat+0x10/0x10 [ 428.948178][ T32] do_file_open+0x20e/0x430 [ 428.948207][ T32] ? __pfx_do_file_open+0x10/0x10 [ 428.948252][ T32] ? _raw_spin_unlock+0x28/0x50 [ 428.948275][ T32] ? alloc_fd+0x471/0x7a0 [ 428.948311][ T32] do_sys_openat2+0x163/0x1d0 [ 428.948330][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.948346][ T32] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 428.948381][ T32] __x64_sys_openat+0x12d/0x210 [ 428.948400][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 428.948429][ T32] do_syscall_64+0x123/0x790 [ 428.948460][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.948486][ T32] RIP: 0033:0x7ff5cfb5fd8e [ 428.948501][ T32] RSP: 002b:00007ff5d0af2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.948579][ T32] RAX: ffffffffffffffda RBX: 00007ff5d0af36c0 RCX: 00007ff5cfb5fd8e [ 428.948590][ T32] RDX: 0000000000080402 RSI: 00007ff5d0af2c00 RDI: ffffffffffffff9c [ 428.948601][ T32] RBP: 00007ff5d0af2c00 R08: 0000000000000000 R09: 0000000000000000 [ 428.948611][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 428.948623][ T32] R13: 00007ff5cfe26038 R14: 00007ff5cfe25fa0 R15: 00007ffe880c87b8 [ 428.948650][ T32] [ 428.948671][ T32] [ 428.948671][ T32] Showing all locks held in the system: [ 428.948679][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 428.948692][ T32] #0: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 428.948750][ T32] locks held by kworker/0:2/191: 3, last CPU#0: [ 428.948762][ T32] #0: ffff8880232b1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 428.948804][ T32] #1: ffffc90002fcfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 428.948844][ T32] #2: ffff88802d5d61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 428.948893][ T32] locks held by kworker/1:2/1652: 3, last CPU#1: [ 428.948905][ T32] #0: ffff88801d05a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 428.948946][ T32] #1: ffffc900069d7d08 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 428.948986][ T32] #2: ffff88802d6f91d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x100 [ 428.949044][ T32] locks held by getty/5358: 2, on CPU#1: [ 428.949059][ T32] #0: ffff888038b8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 428.949108][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 428.949155][ T32] locks held by syz-executor/5597: 1, last CPU#0: [ 428.949167][ T32] #0: ffff88805611e460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 428.949215][ T32] locks held by kworker/1:5/5703: 6, last CPU#1: [ 428.949227][ T32] #0: ffff8880232b1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 428.949268][ T32] #1: ffffc9000470fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 428.949308][ T32] #2: ffff88802d5f01d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 428.949350][ T32] #3: ffff88802a05a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 428.949390][ T32] #4: ffff8880361511a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 428.949430][ T32] #5: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 428.949487][ T32] locks held by kworker/0:5/5800: 2, last CPU#0: [ 428.949499][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 428.949540][ T32] #1: ffffc90004b5fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 428.949582][ T32] locks held by syz.1.512/7874: 1, on CPU#1: [ 428.949593][ T32] #0: ffff88802d5f01d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 428.949642][ T32] locks held by syz.2.875/9343: 2, last CPU#0: [ 428.949654][ T32] #0: ffff88802c4ee460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 428.949702][ T32] #1: ffff8880298632c8 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 428.949753][ T32] locks held by syz.5.891/9398: 2, last CPU#0: [ 428.949764][ T32] #0: ffff888025790340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 428.949814][ T32] #1: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 428.949860][ T32] [ 428.949864][ T32] ============================================= [ 428.949864][ T32] [ 428.949872][ T32] NMI backtrace for cpu 1 [ 428.949886][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 428.949909][ T32] Tainted: [L]=SOFTLOCKUP [ 428.949916][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 428.949926][ T32] Call Trace: [ 428.949932][ T32] [ 428.949938][ T32] dump_stack_lvl+0x100/0x190 [ 428.949969][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 428.949998][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 428.950018][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 428.950042][ T32] sys_info+0x141/0x190 [ 428.950060][ T32] watchdog+0xcb6/0x1030 [ 428.950086][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 428.950108][ T32] ? __pfx_watchdog+0x10/0x10 [ 428.950128][ T32] ? __kthread_parkme+0x18f/0x230 [ 428.950151][ T32] ? kthread+0x13a/0x450 [ 428.950172][ T32] ? __pfx_watchdog+0x10/0x10 [ 428.950191][ T32] kthread+0x373/0x450 [ 428.950211][ T32] ? __pfx_kthread+0x10/0x10 [ 428.950234][ T32] ret_from_fork+0x730/0xd60 [ 428.950254][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 428.950273][ T32] ? __switch_to+0x800/0x10f0 [ 428.950296][ T32] ? __pfx_kthread+0x10/0x10 [ 428.950319][ T32] ret_from_fork_asm+0x1a/0x30 [ 428.950349][ T32] [ 428.950369][ T32] Sending NMI from CPU 1 to CPUs 0: [ 428.950392][ C0] NMI backtrace for cpu 0 [ 428.950405][ C0] CPU: 0 UID: 0 PID: 5587 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 428.950424][ C0] Tainted: [L]=SOFTLOCKUP [ 428.950429][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 428.950436][ C0] RIP: 0010:anon_pipe_buf_release+0xc0/0x320 [ 428.950458][ C0] Code: 03 38 d0 7c 08 84 d2 0f 85 e4 01 00 00 8b 5b 34 bf 01 00 00 00 89 de e8 4e e5 73 ff 83 fb 01 0f 85 a0 00 00 00 e8 d0 ea 73 ff <49> 8d bc 24 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 [ 428.950470][ C0] RSP: 0018:ffffc90003a97b78 EFLAGS: 00000293 [ 428.950482][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 428.950490][ C0] RDX: ffff88802fb98000 RSI: ffffffff82987880 RDI: ffff88802fb98000 [ 428.950499][ C0] RBP: ffffea0001d14000 R08: 0000000000000005 R09: 0000000000000001 [ 428.950508][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888036b7a800 [ 428.950516][ C0] R13: ffffea0001d14008 R14: ffffea0001d14034 R15: 0000000000000000 [ 428.950525][ C0] FS: 00005555671f3540(0000) GS:ffff888122940000(0000) knlGS:0000000000000000 [ 428.950540][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.950549][ C0] CR2: 00007f73e74d1380 CR3: 000000007c83d000 CR4: 00000000003526f0 [ 428.950558][ C0] Call Trace: [ 428.950562][ C0] [ 428.950568][ C0] anon_pipe_read+0x5cd/0x1200 [ 428.950590][ C0] ? __pfx_anon_pipe_read+0x10/0x10 [ 428.950609][ C0] ? selinux_file_permission+0x8f/0x6d0 [ 428.950630][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 428.950649][ C0] ? security_file_permission+0x76/0x210 [ 428.950670][ C0] ? rw_verify_area+0xce/0x6d0 [ 428.950684][ C0] ? __pfx_anon_pipe_read+0x10/0x10 [ 428.950702][ C0] vfs_read+0x960/0xb40 [ 428.950720][ C0] ? __pfx_vfs_read+0x10/0x10 [ 428.950736][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 428.950753][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 428.950771][ C0] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 428.950790][ C0] ksys_read+0x1f8/0x250 [ 428.950805][ C0] ? __pfx_ksys_read+0x10/0x10 [ 428.950823][ C0] do_syscall_64+0x123/0x790 [ 428.950843][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.950857][ C0] RIP: 0033:0x7f73e955a6d7 [ 428.950868][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 428.950880][ C0] RSP: 002b:00007ffdd910fad0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 428.950892][ C0] RAX: ffffffffffffffda RBX: 00005555671f3540 RCX: 00007f73e955a6d7 [ 428.950901][ C0] RDX: 0000000000000004 RSI: 00007ffdd910fb80 RDI: 0000000000000020 [ 428.950910][ C0] RBP: 00007ffdd9110020 R08: 0000000000000000 R09: 0000000000000000 [ 428.950918][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdd910fb80 [ 428.950927][ C0] R13: 00005555672069f0 R14: 000055556720c480 R15: 00007ffdd910fba0 [ 428.950941][ C0] [ 429.092611][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 430.010203][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 430.020874][ T32] Tainted: [L]=SOFTLOCKUP [ 430.025197][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 430.035253][ T32] Call Trace: [ 430.038531][ T32] [ 430.041457][ T32] dump_stack_lvl+0x100/0x190 [ 430.046145][ T32] vpanic+0x553/0x970 [ 430.050124][ T32] ? __pfx_vpanic+0x10/0x10 [ 430.054629][ T32] panic+0xd1/0xe0 [ 430.058348][ T32] ? __pfx_panic+0x10/0x10 [ 430.062768][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 430.068926][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 430.075081][ T32] ? watchdog.cold+0x1ec/0x234 [ 430.079844][ T32] watchdog.cold+0x1fd/0x234 [ 430.084438][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 430.090249][ T32] ? __pfx_watchdog+0x10/0x10 [ 430.094929][ T32] ? __kthread_parkme+0x18f/0x230 [ 430.099966][ T32] ? kthread+0x13a/0x450 [ 430.104212][ T32] ? __pfx_watchdog+0x10/0x10 [ 430.108889][ T32] kthread+0x373/0x450 [ 430.112962][ T32] ? __pfx_kthread+0x10/0x10 [ 430.117555][ T32] ret_from_fork+0x730/0xd60 [ 430.122147][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 430.127261][ T32] ? __switch_to+0x800/0x10f0 [ 430.131944][ T32] ? __pfx_kthread+0x10/0x10 [ 430.136543][ T32] ret_from_fork_asm+0x1a/0x30 [ 430.141316][ T32] [ 430.144539][ T32] Kernel Offset: disabled [ 430.148851][ T32] Rebooting in 86400 seconds..