last executing test programs: 28m51.236063531s ago: executing program 4 (id=338): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) listen(r0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000033b52266000000000600000018010000786c6c25000000000020200f0000000000000000bda100000008000026010000f8ffffff0000000008000000b70300000000000085000000ca00000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095000000000000007c796090186c0fef1759d3986e278138333bebcb"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) 28m50.717056041s ago: executing program 4 (id=341): openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2025, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x11e, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000400)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f0000000540)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 28m47.563691845s ago: executing program 4 (id=345): socket$nl_route(0x10, 0x3, 0x0) sync_file_range(0xffffffffffffffff, 0x100000003, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x140, 0xc1, 0x4, 0xffffffff, 0x4, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x200b, 0x8, 0x4ce, 0x80000000, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x200000, 0xaf, 0x0, 0x9, 0x1, 0x4]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000019d00)='asymmetric\x00', &(0x7f0000019d40)=@chain) add_key(&(0x7f0000019d80)='asymmetric\x00', 0x0, &(0x7f0000019dc0)="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", 0x559, r4) 28m46.471575879s ago: executing program 4 (id=347): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000001080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xaa401, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) r1 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2da802, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001300)={r1, &(0x7f0000001200)='LVM-syz', 0x480c0, &(0x7f0000001240)={@align=0xfffffffffffffff9, {0x7900, 0x3, 0x8, 0x80000001}}, 0x7, &(0x7f0000001280), &(0x7f00000012c0)=0x100}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001580)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x4c0, 0x590, 0x2b8, 0x4c0, 0x3a8, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@rand_addr=0x64010101, 0x18, 0xfc, 0x7ff}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0xff, 0x2, 0x0, 0x28}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) pipe(&(0x7f0000001b40)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002500)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000002540)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000002580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000002680), 0x651, 0x0) recvmmsg(r4, &(0x7f00000026c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002700)=0x6) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000002740)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000002780)={0xa, 0x4e20, 0xfffffff7, @mcast2}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000027c0), 0x400000000000284, 0x2, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000001e80)={&(0x7f0000001ec0)=@in6={0xa, 0x4e23, 0xfe, @loopback, 0x1}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001f40)="e6", 0x1}], 0x1, &(0x7f0000001f80)=ANY=[@ANYBLOB="20000000000000008400b686000000080000", @ANYRES32=0x0], 0x20, 0x4855}, 0x24000052) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x9, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) gettid() r8 = signalfd4(0xffffffffffffffff, &(0x7f0000001c40)={[0x1003ffffffc]}, 0x8, 0x800) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001fc0)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) poll(&(0x7f0000001c80)=[{r8, 0x5}, {r8, 0x210}], 0x2, 0x90) 28m36.204064281s ago: executing program 4 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) sync_file_range(0xffffffffffffffff, 0x100000003, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000019680)={@local, 0x4, 0x0, 0x2, 0x0, 0x9}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000196c0)='net/anycast6\x00') r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000019d00)='asymmetric\x00', &(0x7f0000019d40)=@chain={'key_or_keyring:', r7}) add_key(&(0x7f0000019d80)='asymmetric\x00', 0x0, &(0x7f0000019dc0)="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", 0x559, r6) preadv(r5, &(0x7f0000019700)=[{&(0x7f0000019740)=""/63, 0x3f}], 0x1, 0x9, 0xd) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r0, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 28m35.283141366s ago: executing program 4 (id=366): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) dup(0xffffffffffffffff) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x6) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x50, 0x1038, 0x12b6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x71, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7ae6, 0x0, 0x1, {0x22, 0xed8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xfe, 0x2}}}}}]}}]}}, 0x0) write(r0, &(0x7f0000000500)='100', 0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffff7d, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x8, 0x2}, {0xa, 0x10}, {0xfff1, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x1d, &(0x7f0000000300)=';', 0x0, 0xd7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd9a9}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000440)={'wlan1\x00', @random="000500000020"}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) 28m19.343946042s ago: executing program 32 (id=366): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) dup(0xffffffffffffffff) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x6) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x50, 0x1038, 0x12b6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x71, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7ae6, 0x0, 0x1, {0x22, 0xed8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xfe, 0x2}}}}}]}}]}}, 0x0) write(r0, &(0x7f0000000500)='100', 0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffff7d, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x8, 0x2}, {0xa, 0x10}, {0xfff1, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x1d, &(0x7f0000000300)=';', 0x0, 0xd7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd9a9}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000440)={'wlan1\x00', @random="000500000020"}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) 17.304958929s ago: executing program 1 (id=3912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xffff}}}]}, 0x3c}}, 0x40) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000540)='\x00', 0x1, 0x0, &(0x7f0000000580)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 17.094971767s ago: executing program 2 (id=3913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040f20c506200f3010203010902240001010080fa09040000020806"], 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r6 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000000)={0x0, 0x14, 0xeb, "ffc3053235bdefba17e6de128f6c9d66ff3a4a95f829879b9694e3afb619532e5e5b787d233c0dc60a5110b1840b68404917f59ec67dcec787b6cacd245cddc748594f06b59b69e3d9fd5fdb72deaf6f563f5c004caa510ca2cc818c0c7d2a34b13b8c8ecd2cd20f79a4c7e9eb01c65df7035cdeec73b42845a94c6ff02dd42fe960a674e3804739412f0a1a3fb36ab263e05c34ec1825464371a982da27cd9c4ea3dcd0e04363c30c99c863a859847762236745e0545d03000000000000006fc981e27d5794e3cfd390f95a9efd2cb19b987da77087b51eec03a8546490573d78295c4800000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) 17.063768594s ago: executing program 1 (id=3914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800"], 0x2c}}, 0x0) 16.430866951s ago: executing program 1 (id=3916): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) syz_usb_connect$midi(0x0, 0x111, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x1, 0x1, 0x25, 0x60, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x7f, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xe, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf1, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x6, 0x2, [{0x4, 0x5}, {0x5, 0x1}]}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x1, 0x7, [{0x1, 0x5}, {0xcf, 0x2}, {0x0, 0x2}, {0x3, 0x81}, {0x6, 0x3}, {0x2}, {0x1}], 0x9}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x2, 0x3, [{0xb, 0xc8}, {0x9, 0x4}, {0x9, 0x8}], 0x4}], [{{0x9, 0x5, 0x1, 0x8, 0x10, 0x9, 0x1, 0x8, {0xf, 0x25, 0x1, 0xb, "8943527f32bb98571b7b2b"}}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x43, 0x6, 0x80, {0xa, 0x25, 0x1, 0x6, "def8ea3dbf67"}}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x41, 0x7f, 0x9, {0xc, 0x25, 0x1, 0x8, "d7c64fd481b18e71"}}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x5b, 0x1e, 0x9, {0x14, 0x25, 0x1, 0x10, "e08f82c23f90e14f5e873735aad43255"}}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x0, 0xe, 0x2e, {0x14, 0x25, 0x1, 0x10, "6511e27f37dd1570a2833c86efa156aa"}}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x3, 0x7, 0x40, {0x4}}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x4, 0x35, 0x1, {0x8, 0x25, 0x1, 0x4, "d33d5847"}}}]}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x5, 0x5, 0x3, 0x20, 0x5}, 0x18, &(0x7f00000002c0)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x1, 0xf00, 0x1, [0xff0000]}, @ptm_cap={0x3}]}, 0x9, [{0x44, &(0x7f0000000300)=@string={0x44, 0x3, "e6a677852cd1dbc2804ef4338839b44f9079699026537619380623bcdd9f40f802b942a85eddc9d1bd345946b6a9592d0655f78b27ac099f04b0c4f893907a4f03b7"}}, {0xcb, &(0x7f0000000500)=@string={0xcb, 0x3, "2c9f3ccf364617351d9c0566477e827b99a501e79b26c4b3b717737e2c7e03ce552deba0a3640a15bbaf177c204e687ebdae360962ec8f16c9187542803977181fa02a211cc2f5a79375f3ac65c56b6ab6017a624f2083839bd18f2e92833affe8a577275529d6898789bc0000633d355e9e2a0694bd5c14fe49925c24badec64275ed59d0da6874784b23e20c5787031b349a5bcb5dc28b38d5a43770f3ad533a7aecfb86872c92c2153094f9117fcd7eaff7d141840fe8b8d9e37cd8df0e33872a3085095e5394e2"}}, {0x3b, &(0x7f0000000600)=@string={0x3b, 0x3, "2aa8a83700e5f8bccc8c34814c11c0aba27e0e7d34fe7468758b56e6ec41a3c2c1791a825ecf15682225988e1d5f9a6b8fb6e898efed835f98"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42a}}, {0xa2, &(0x7f0000000680)=@string={0xa2, 0x3, "a8f8c4526c9379e37fd0a735a2c0cea59be083e5fd8b028c99250c9e1b6cdb10a3af61d14b605a81ffe669b36e1b7c791cdf3a0389f3601afcc797ff5110f9af22ec61aca344061aad295739f7c0ade374c823775a6c165e9d7b86db237daa2f46517e23ed08f8dc71fba6a2e1a346411d62e4aa2eff973ad081fe7b64ce8d130492ed608be3502c0963d52c59c281387f37b24d92c30479deca44ea619ed6f0"}}, {0x28, &(0x7f0000000740)=@string={0x28, 0x3, "158fd37d1bb5651f7b5f72821838ef88432d13e968ef8261baf15a6888cc600c9a91cf5b101d"}}, {0x66, &(0x7f0000000780)=@string={0x66, 0x3, "92edf765d26e0f4c465e16bd29711b66946f750115a35f3e1c899d9bd86a0ed79c25f3c5e58bad5760f3140f2a853189e39fb2da4c51873bbd06d5e0c6ac12eccbdb81fd06bb24f24c0ff6faacbbf9d4c858be2226f68ebcce4284ea67ed291069ea650b"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x816}}]}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000940)=""/102392, 0x18ff8) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)="d67ef926", 0x4}], 0x1) 15.685880221s ago: executing program 3 (id=3919): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/fillfile\x00', 0x101042, 0x9d) write(r0, &(0x7f0000000180)="1f0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8014) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0xc42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x10, 0x70, &(0x7f00000005c0)="0000000005000000", &(0x7f0000000600)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write(r1, &(0x7f0000000580)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7bae4b9a, 0x2000007, 0x10, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000740), 0x0) io_uring_setup(0x2bd2, &(0x7f0000000780)={0x0, 0x661f, 0x0, 0x1, 0x194}) epoll_create(0x7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') 15.410344471s ago: executing program 3 (id=3920): pipe(&(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000340)=r1) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, 0x140f, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./sys\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='1', 0x1) 14.21501929s ago: executing program 1 (id=3922): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001000000100d4ef1184c921e3ad18a824000000fcd3df2500000000", @ANYRES32=0x0, @ANYBLOB="808c0200224400000a000100aaaaaaaaaaaa000008001e00feffffff"], 0x34}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000340)=@n={0x3, 0x9, @generic=0x9, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@union={0xa, 0x0, 0x0, 0x5, 0x1, 0x7}]}, {0x0, [0x61, 0x30, 0x2e, 0x61, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x30]}}, 0x0, 0x30, 0x0, 0x1, 0x6}, 0x28) r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x6, 0x8, 0x6, 0x800}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48801}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x1c3902, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000800)={0x1, @sliced={0x9e, [0x400, 0x2, 0xb196, 0x0, 0x4, 0x2, 0x8, 0x0, 0x0, 0x8, 0x5588, 0x6, 0x3, 0x100, 0x7, 0x4, 0xff9e, 0x5, 0xfffb, 0x1000, 0x49, 0x4, 0x4, 0xd, 0x0, 0xfc00, 0x4, 0xf3, 0x3, 0x7, 0x3, 0x3ff, 0xc, 0x7fff, 0x9, 0xc, 0x4, 0x0, 0x1, 0x0, 0x3, 0x7fff, 0xd8, 0x8000, 0x0, 0x7c7, 0x3ff, 0x4], 0x81}}) getsockopt(0xffffffffffffffff, 0x36ad, 0x800, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000900)={0x2, 0x15, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000940)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000980)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000a00)={0x2, 0x15, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000000a40)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000a80)={0x1, 'lo\x00'}, 0x18) 13.979253442s ago: executing program 3 (id=3923): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) writev(r0, &(0x7f0000000300), 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101341) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r3, 0x11c, 0x1, 0x0, &(0x7f0000000100)) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x1, &(0x7f0000000500)={0x1f, "4defa2fc7dc57cc3be4c22e0b7e80f45380154c4a59d05aff3675f949398567d06"}}) 13.412756274s ago: executing program 2 (id=3924): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/resume', 0xa82, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0xb, 0x7fffffff, 0x1, 0x7, 0xa4, "aa39771901e3edc50764713775212e5b39799e", 0x4001ff, 0x8}) write$UHID_INPUT(r0, &(0x7f0000000780)={0x9, {"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", 0x1000}}, 0x1006) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143003) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) getrlimit(0xa, &(0x7f0000000000)) mkdir(&(0x7f00000017c0)='./file0\x00', 0x0) chdir(&(0x7f00000018c0)='./file0\x00') setresuid(0x0, 0xee00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=ANY=[@ANYBLOB="0c1100003a0001032dbd7000fddbdf2510000000f6101f8004000a00319e33ac7ed07d6587546b009a11392de95a1d4004358af0f7050c000e8008002a00", @ANYRES32=0x0, @ANYBLOB='\b\x00b\x00', @ANYRES16, @ANYBLOB="c0106480a800e200e5c2faf3d65c3fb7d72a6b71a130cdaa1bf90ec20dcf06b9c5932be6ee6105a6ff8ec78e8f74c63e1ba3eeac7745b31e872d40c707fa00992accefd61626593ef470d1e22e5368771e4c389c5ad2e93371d886716a1f0a71f285bd30926f3c015f22a81dff7a2bb04432a8fbd541970b44c1da9cbae1e95d027aa05a12977cf0661805545e3f693f34d114eb70a0e945b251cfec3fb30e739b956eaf9d7fd280b1b3259b04005b803977622e2bebef4fb8f92b1e95e7abf1b58600b01debc4fcdb9efbd84f46625bd1c79fe142884bdfee9c028bd059c7ea5310d75481fd6b852899d39659f27438931b94232917f772ef8a7ff8d84439718d9f5670ca71d31b9d24515cf22685bcd0e831b136be51f7a314b376ea8fa4eec7b6377558b129da43eae2a86f0d82fa17f21461a21f7c4369ee18b2db150ade7ff1ab9bf450e1f7e55de5b385114bf94887c40a14f5c81ff1d17b5ee4379db4d32fd1eb0383245ca8d7f8adaa94b4283f4054721513fe80ef4b51b8bdbed4590785c765ffe57dd2e059345b5cfa350c6041ae3f7d06c930b0b4360862ea84f8c8a1202ccf7915586ba43d54db27aa144dd683d3e966f3c97ccbde3c3746b11059c4365c29322683660535bafbb1b268678b8481dd8b2fd07ee687e6d65ffa9ee5ecf83e15ef061b5c542457f7d1f4d92481f93172c101a10f1990d94ad808d61541a0174ba4844a3ef089565dcb3770d94f32b0a50c7b3a5dbbe760a8ac8ba7828435f60f7a97e972bf54c808f3193308a0bdd07f6c91a5f4a9fd0a91efe5286775310b0c08ea02ea070e53b6052d3653d420ba9fc64932d0fa01ca767f042255883e9b347f666a4fbe7c9658f3f9aa84d9e8977f2f6a13bead7ef73b7223449d057f701604c076c6a36ad9e5fd86dc53081ff232eebb93f9399729cb2ddd6360c8b8cc8cb6a224029ae8a7e1e85bee18d21213b28da9a8c8a7a59c778445a98f7986c7069261c80a14d723fd11e36cf2432238d6ca8c381ae3f69bd3000610a8d1cbb852f1769f71682c3938a64c3a52f35f94d4839ea49b2ed5d60b1c6cbf8203af135f02d4729c7ea1c09ef51e424e786fcc023af33c44690f1e3e08bdecf7da004f9c6a0957d9599436a60b075d6f2166787f5a598685754a2522d0dd6d44dff53fcdebf1ba3ec83f57fc06287944fc995b23047bda8c6900e698ef76bad6a945eb2b73e2e6572256f4f1fc3cd40a8739755a86760a7f02356626fce1c160bb4f4148a80aaefda156ed05be6d3a36b267218f92472965de5546eeefdc05ceffa4134314e6a1f1deed1d3b172726ea25d3ccc254d594f67ef9cddf7e9d2f1eeabe1696d7e95280c15550312cad84eae3ec9cdb051251145ccc94e1d16beaf2baa8211d549c6c914f3e5296090d6651571149be1c212753a8708e23bc9f14db72202f0deadc0a48d883b1fdb531ba9505d7987a52cb503d7bbad8075006780684d599fe28bd5a4279240ad0f07125787b5bdddbcb3a873d603f6b96a1a9ed4967607b678576b6dbaacc41f617a902ef3d106800ce8d00d3cfa1892f05dc3dbae413e4ffa84eb9cb16bf5db2cf60500a085aebf8a7ae40a23e82ffa17da3be58407e48f0f26fe8c9d3cb3e593f30e9621e8bceadda4efe57faabe8ddebe7d5b068be742a7a95313173320c4b1c262fdaeeb943da8d46b69bf2a9639c3f397dae29c0084b28be2553721452c0d829210906813d4501eaa800feb990c354704a8a695402a09b7bd9f47f36b29267adbff311acda0fd8e796a62979097f736c6e2f0a249eff614024c23c5051777fabb7e7ee85d3bdb792a5b1ed75fa35425fc0331ccddd2adb1bd665159eb8eaeabdf9bb28bcac638a60d83d3815f80bd60119f74333aece526aacf0699a7811e2dbfce0a9fb35ff062a11e5b080d75e62d62b069e51706bd540297f7590407f4e472ab62ab1151ef3e49323da35fe6670bc572a0a58f65501fe87993675290aa8db12e0beb8fda34979f55e13f8ed0e37ac74c9585d59ba9e948cc69652a8ee05642bd249c3e278a554229b315acbfbc2d7fcd81fdae5b7bc739dd9f2e79b5fd9134304e79e1b8ec2333e2888d93b4ea29a8adc5848cae650afe74956ecbe4f308ea6fdf28be395e8c4e1b84ac525a16e6d7bbe9725efeef679d8759346b420a799569303d7e6f2d5f536a2bb092fd014afc9a1a5041caaa7091266073ea626e2c749a420b8a8e23d2c2f3331a97f8a56d5afb3644ad90000f7f2287b8aab01183d5371088cf1cbf079be5461f8be35b1f6b76e01d8091fdb1072ea68617d8d8f1d6c30dd37cbc336267ea43a4e979085c64eae8bc3af3edc4d270d48e505efd79634d386e734c190893ce8d9a10bcab495247a403a20821900549f2a55ef05b7399bb2daffffffffffffffff2082adca431f10e52ec38ac75e20385b8f0d9b5c12e105320bd28c65fc16dc5cf1881803976c83822f8e0dfeabfc11f4c6327a7f8cfca86827f5a4344e07e2f43ec9a936063f0fbb67b55d2b1af654ea561141c79d476a78dbff7c35ac15cb1ef7e3f35a244780530b230fb1fb48a9b70dca08f935b8d023e34a1e954f0911209801fa962c52b3f82258435e1721af69e33be73815c9c15f3e5ab2e8969e1ca1850a1f6d866d5e95a68c530b143bfaa4b36f3de168dda6f4d595c0b281c2605f6396c0ec505188feba62a7de0d8b9343f239824e7e82776b3727399fb58b5f2240f0dcf0f18d780634b6862c3d79a68252b3eea6b076ce76753927ad2be6052002b352dbe3403a044a2b3368711fddeca89fd1f4f5f94ac1fb4db76f5b82fa6d59f57e58b43deb5e2961d48bed964d5285fb31f316772b3c7fd3d887f309100ae1d56a26f4565406c1e29439c1159d359c2ccf0e62d888d39ddf5ab24db527afb652d318c47667455d92bcf0d38607b3b956bc069d282f1e6f99e542f024d182f25c6da283121118eec99ace7c9860fddee732893d29453edcb841083fcf6b748e85a954b4d360e64f2d502bc10b316256a6b1b8c41a70357b99624842b6f704d48384edaa0a83aa117f3dcac4e7c99e0689788835f47141a69da0d40e41bc3dc27c8f58fd31e6c14438273191dd07eace42091a44629604f800a700ea91db9f408765e45e1f78a68095153820164e679e8f436f48141d71cf0d625ae716592c8439259842a4850d703a29049668cae07349cd148c87c3d392ebf25ec8d56fef5d50b0c71891b7655d02edd9db933365fae78da4c2a6301464e92934a11d7dbeb74af7122e73beb79627a7b9d28610b7bd51aee6facaa97218eaf7b907afe2f93bd25a537321ab5fad7d97903f011897b56cdbfa9e2c7b390e92fee9d55e8d9ec7881e38c84de5acf339e35bfe93bac186d04d479b1e4c3ce6cc63fd408d2a28454900d600456d7c588a4b5d91eb6e04cedc7dbaa67b2d67f530148cd4d60761a00020a5dbe8ed949ae9fbb7f5bdaaa078aab4a521be91251cf620bdcfad7e8cf5edb09088a2f83d904b0cbb3ce4368e0e7e69cdc204134d3c414796fa8076b2fd5e7b93c1d112d8d377ec6fe57b594b650787a31aba0fbd35aad9de90f68a0bd15039bfa1048ef88a18172fd76e57c1a34bf6603ee6072d9e85af18bfe1b335184cc270e4fcaa7a4098529b537f0a265d883fec0c7835ba044d97023bcdf46aac3baa6323e528d2d4ec76e54f540167f56dc570ca9e5e2b3285048b994f0cfa6d1f93d050f2333d1ba2ccc0ff73932acb969780115120828b4dec3011264370135ae811bd0263a9cfa2bd36834840e47f02509dff3063dd163dcd3b82626d60603c7e01cdb7931b3190fe912534d3e649d28a5ecf2027c94cdbf13a866032392522fe687882a5e1536c22e1c90110d432a7a674aaf9d773d7f3944e7233e80a11936b13d846af25cd790b0c7ec41f7c3c76e7b1883212b875734bfab0a2b81cc8f55f84d5007b53f55cdc6bbb97e0584dda6b7e22370986f8311801c1b30e98490830547fb68d88c3b4bdd02f0e4851c55bbc0b85016e7a87a2f239b1adab8e5f822181909286a6f42e522d6a06ad67b37a4f36eae6b9babdc64a3ebabf435fb7a534de018203bc2d1f5ee01ecdb507e1fac356768007972645d76edd7d314b74c3a9c5f4cf08b7aa3306beb721dd00c2c240e2dc66757b94c75cc4e666417cb6d955c3bfaa8f105aaece0c3d9afa22cd3c361c2d48f1a2ae2f7ad3efb2d29a6f670b53abb4cc1a033037f0ce4022b809736a9a87c4be8cadb66a636ff32a551e337da6b9187530fe2250253ae137b7e78e4d128f05ada456e206dfe28626bf7c5c1cc29a75c7aca2712b40b75b4231c67c9a80436726974a161aab193a23d645fd6bf3201a759ad204ed54e5f8411c16b2d5f3599304cac90b4ab750a5c046b040ef7ddc97da41f27412d8b40af81196e7263b3ca04fbb50cd0ce223f4117fb8ed39f13b79df44d3d4f622ad1280e6abae0572c409b0a241dd381dc1d203ce53a46ba85221fa473078e02bede8a38fd4b3b0b63e29890d054135428bab8c893c6c2564c8043949680aacab18e7cd36e97c4a20621dd6c1965e39685c4a946742610c870f60850c447bef794783dd9e3106e81ca4cc365867ef61481612b03512f284279ceb6e8d2e6aededabafd7aa586fd17cd71df58b6ecc5ed387a84198f4658f1aca2221de3554732b13b66d6f9207bbebe2c13f148894abb1a1e9956853c5e41302e94879046df8e3ad290f567dec7215ecf88d4c8d66536087ce0352af82c6ad3908b8d144d517c97c7021fcbd97f277b0ee504fb53d6ec37a6c27c006f56cfc3cb7f445182c38c879044d5f5a236b5b2944ffd776ebd5b7d5bbaac9eedc03842951917356fead672b0a23c82a10aff0aac09c82ea23b292d899760312f5354148c4cf7d3b586fa04939133f048ba3104b82bef60fb349666a5c4785db1e5a4ba265d903e1f43e58351151766206b7830717f8ac511ce9cdf678ce5161dbcbdcecad83e18b6eae186af31273f853d5618e126702548b2ed354ed2b8e83ad339027662e4f3a3cd89c6d81cb0fd52b82bd62bbc5d00eaf2863dee650dcd69d5a679fafdb4244bf847af1c3a19edbbd5f6cd8c075f5306ed067d6d77f2e89fa932c2e62298c6fde8b8d41bf86eae1fd9555b3e6ad0eb34ab4fa4fa2309e59d95a8ced779bf2c0e17e251ebd9eed3da175b063624f3e5b32d851039dda935dc5168c769edfd1dc6340bbaf16d8c17cc4cf5c172d1b5b7ea1b6fe0cec50d309198e8b8884028ef6fcfb669dd0ab0deb393071e19880204b473a92955bb8cb2d3d7cdf892ac791cb05d5f679eb43f334e0901f5453071be11912002a39dfa51acdae0aa5025f29243147d6b59a08a30511910a0576ba8923c1b13ac3f67d4edf1eb79e65c75bcf0d003747bb2223150bcdce95aefd28c4ae73a435e602e90d70e2b2921ee8c7094bfd296fe7bb8582e2beb9fe33d6074331a5079b8ca2f9b49160e5fc57474ea4601d5c7c16ae81d79e5b776a4923ee9758cdb1123682587a5071175f78d5c5e2632776c8b0bc11c2a514c53c4e2c8b23876c921f0fb426f1b222b47899abdb54ac5315857a12f4587fcfdb038503ea6c372fc3c88ab269884442720965d0fe5f30966a326f2ee80e6bfb903f7ad8d4b8cc65bf75d3c491b10257356d29d5dd984d8410b497e2ba12ee9899a62489023d7da1bdabb224b532cf3765b971e6c75e198f813e0a4e0109b6c9be59cb4285494cd7c41f702c9e1a983b52daced4f3f5e19262fa73d63681da832e022124be6b825667a2a402a7ff33661971fb880109b9ecccda4638784b142765baa91794182634cb20e8b50de65dae9aa5acb7b893b2dfbe718f9f15f10767c1730ebe49a32f8ff0b069423d0585d2ec9fd0777328d3316a1e9401922da5d22f7a1a3da5d3928c8b54af0199e85fff7c65eb296ed0e20ce684e2b15301af128e8d390fa10bc27cbaec5dfa417e5212fb0965ae90594ac3bc0587109c4a85d99726ef1204000080040052000400f18004004b800000"], 0x110c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) symlink(&(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000001b00)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x80, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(r3, 0x0) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)) 13.146891465s ago: executing program 0 (id=3926): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) sched_setaffinity(r2, 0x47, &(0x7f00000195c0)=0x7) mkdir(&(0x7f0000019600)='dir0\x00', 0x80) mount(0x0, &(0x7f0000019640)='dir0\x00', &(0x7f0000019680)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000196c0)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000019700)=""/9, 0xffffff7a) 12.734865515s ago: executing program 5 (id=3929): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1}, 0x24048004) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd5000fddbdf252700000008000300", @ANYRES32=r5, @ANYBLOB="04003080"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf25140000000c000600030000000000000008000300", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x28181) writev(r6, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r7, &(0x7f0000000600)=[{0x0}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0xbf, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000006c00010027bd7200fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040000000000000000000000000000000000000000000000000000000000000074ec90c0bba9b070a3bae91fe6b42813c3d7da88c9d49c67fd4d37a39eaaddf9ce1f258e61d800d5c86418b1a39ad520552ca3359a4c5eed112cf9c02887e3821e2dae6b8f5ae12862f4800052ea1921eebb73e04e0aa7b5765c54e46eb47ff322731650"], 0x38}, 0x1, 0x0, 0x0, 0x4044064}, 0x44000) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) 9.506912856s ago: executing program 3 (id=3930): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e1f, 0x0, @mcast1, 0xfffffffd}, 0x1, {[0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x221a, 0xfffffffe]}}, 0x5c) socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000003c0)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 9.401216931s ago: executing program 0 (id=3931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x6ace83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x11, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x34, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r3, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7fff) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000500)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x43, 0x2000003, 0x4000010, 0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000380)) fchmod(r6, 0x20049549e2a2d659) write$FUSE_GETXATTR(r6, &(0x7f00000003c0)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000400)=0x3f, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz1\x00\x00'], 0x118) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi2\x00', 0x342, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r7, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000000500000004a30000"], 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/248, 0xf8, 0x0, &(0x7f0000000640)=""/52, 0x34}, &(0x7f00000006c0)=0x40) keyctl$clear(0x7, r5) r8 = openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000a40)={'ni_at_a2150\x00', [0x3700, 0x5, 0xd09a, 0xffffffff, 0x5, 0xfdffffff, 0x20000005, 0xffffff01, 0x1002, 0x7fffbfff, 0x1, 0x2, 0x404, 0x8, 0x2, 0x4, 0x4, 0x3, 0x100830, 0xe, 0x10000, 0x8, 0x0, 0x4, 0xde, 0x8001, 0x5, 0x2000151, 0x7fffffff, 0x4000002, 0x6]}) 9.314735318s ago: executing program 2 (id=3932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f00000196c0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001000010700000000000000000a0000000600010013"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r3) 9.303027833s ago: executing program 1 (id=3933): pipe(&(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000340)=r1) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, 0x140f, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./sys\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='1', 0x1) 9.298229257s ago: executing program 5 (id=3934): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0xb2e45000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000a00)=""/102368, 0x18fe0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) add_key$keyring(&(0x7f0000019a80), &(0x7f0000019ac0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r0, &(0x7f0000000080), 0x800001d, 0x810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f00000009c0)='syzkaller\x00', 0x2}, 0x94) (fail_nth: 2) 8.078808002s ago: executing program 5 (id=3935): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0xf00) 7.083271681s ago: executing program 2 (id=3936): socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102400, 0x19000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) signalfd(0xffffffffffffffff, &(0x7f0000019280)={[0x6ba]}, 0x8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r5 = socket(0x5, 0x3, 0xf3) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f00000000c0)={'geneve1\x00', 0x1}) write$rfkill(r4, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (fail_nth: 2) write$rfkill(r4, &(0x7f0000000080)={0x1, 0x8, 0x2, 0x0, 0x1}, 0x8) 6.817150308s ago: executing program 1 (id=3937): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdd2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200), &(0x7f0000000240)=""/5, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x128, 0x150, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff, 0xffffff00, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0xffffffff, 0xffffffff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xff, 0xff, 0xff], @ipv4=@local, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 0x3, 0xec1, 0x4, 0x4e24, 0x4e23, 0x4e20, 0x4e21, 0x942, 0x805}, 0x41, 0x80}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, 'veth1_to_bond\x00', 'bridge_slave_0\x00', {0xff}, {}, 0xfaaf6b7b8e3451b, 0x2, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x12, r2, 0x80000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./trace\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r6, &(0x7f00000008c0)='enable_event:sched:s', 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) 6.767146044s ago: executing program 5 (id=3938): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x28000) socket$inet(0x2, 0x80001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2982, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x60, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 5.56614716s ago: executing program 3 (id=3939): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xde, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000226d940f905ffffb70e0000000109021b0001000080000904"], 0x0) 5.398034936s ago: executing program 0 (id=3940): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/fillfile\x00', 0x101042, 0x9d) write(r0, &(0x7f0000000180)="1f0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8014) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0xc42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x10, 0x70, &(0x7f00000005c0)="0000000005000000", &(0x7f0000000600)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write(r1, &(0x7f0000000580)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7bae4b9a, 0x2000007, 0x10, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000740)='100', 0x3) io_uring_setup(0x2bd2, 0x0) epoll_create(0x7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') 4.73111019s ago: executing program 2 (id=3941): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) sched_setaffinity(r2, 0x47, &(0x7f00000195c0)=0x7) mkdir(&(0x7f0000019600)='dir0\x00', 0x80) mount(0x0, &(0x7f0000019640)='dir0\x00', &(0x7f0000019680)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000196c0)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000019700)=""/9, 0xffffff7a) 4.728945646s ago: executing program 0 (id=3942): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (rerun: 32) r2 = dup2(r0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 4.644249863s ago: executing program 5 (id=3943): syz_usb_connect(0x0, 0x51, 0x0, 0x0) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x1) syz_open_dev$hidraw(0x0, 0x15e, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000001640), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001680), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000018c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001900)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000001940), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_ext={0x1a, 0xf, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001ac0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001b00)={0x1, &(0x7f0000001b40)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x2000000000000) r8 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000500)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.514736642s ago: executing program 3 (id=3944): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000019240)={0x1, &(0x7f00000192c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000019300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019340)=@bpf_lsm={0x1e, 0x3, &(0x7f0000019440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000019480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000194c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) writev(r0, &(0x7f0000019540)=[{&(0x7f0000019580)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x80000, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r5 = syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f00000001c0)=""/102368, 0x18fe0) write(0xffffffffffffffff, &(0x7f0000019200), 0x11000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000019200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000191c0)={&(0x7f0000000180)={0x28, 0x2, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x40004) r7 = syz_open_dev$usbfs(&(0x7f0000019280), 0x75, 0xa8341) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000019400)) 3.388432568s ago: executing program 0 (id=3945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x10}) r1 = memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00002a8000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r4, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r6, &(0x7f0000000f00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setfsgid(0xee01) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x6dbc261392fecb9f) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x7}, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x8e40, 0x0) close(r8) socket$netlink(0x10, 0x3, 0xe) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 3.232728792s ago: executing program 5 (id=3946): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0xff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4008010) r4 = syz_usb_connect(0x0, 0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) preadv(r5, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0x8, 0x101) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000240)='\x00') r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f00000002c0)='1', 0x1) write$6lowpan_enable(r6, &(0x7f0000000300)='0', 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0xa8, 0x150, 0xffffffff, 0xa8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast, @port, @port=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @remote, @icmp_id, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000008c0)={'vxcan1\x00', 0x0}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000980)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f00000009c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @mcast2}, {0xa, 0xce22, 0x8000010, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, r10, 0x5}}, 0x48) bind$can_j1939(r2, &(0x7f0000000a40)={0x1d, r8, 0x0, {}, 0xfe}, 0x18) sendmmsg(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="0f01f30f0665f20f2d2bbaf80c66b88e16108b66efbafc0cec6690f30fc7b70000bad104b8feecef64807a0091d9eaba210066b83400000066ef", 0x3a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x3a, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x1800401, 0x0) 2.242815059s ago: executing program 0 (id=3947): openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 0s ago: executing program 2 (id=3948): openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80802) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./rpc_pipefs\x00', 0x1ff) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r0, 0x2799f5eec7981083, 0x170bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x2f4, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040815) mount(0x0, &(0x7f0000000080)='./rpc_pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x541b, 0x0) setuid(0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@jmp={0x7, 0x1, 0x5, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x5}, 0x94) kernel console output (not intermixed with test programs): er 90 [ 1838.875273][T19787] input input122: cannot allocate more than FF_MAX_EFFECTS effects [ 1839.925672][ T31] audit: type=1400 audit(1794212986.244:1303): avc: denied { getopt } for pid=19790 comm="syz.5.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1840.281274][ T5736] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1841.158681][ T5736] usb 2-1: device descriptor read/64, error -71 [ 1841.291367][T16193] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1841.411412][ T5736] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1841.441279][T16193] usb 3-1: Using ep0 maxpacket: 32 [ 1841.441779][T16193] usb 3-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1841.442876][T16193] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1841.442897][T16193] usb 3-1: config 0 has no interface number 0 [ 1841.444375][T16193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.444388][T16193] usb 3-1: Product: syz [ 1841.444396][T16193] usb 3-1: Manufacturer: syz [ 1841.444405][T16193] usb 3-1: SerialNumber: syz [ 1841.454811][T16193] usb 3-1: config 0 descriptor?? [ 1841.468139][T16193] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1841.468157][T16193] usb 3-1: selecting invalid altsetting 1 [ 1841.468170][T16193] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1841.478613][T16193] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1841.478821][T16193] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1841.478851][T16193] usb 3-1: media controller created [ 1841.510836][T16193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1841.565528][ T5736] usb 2-1: device descriptor read/64, error -71 [ 1841.703429][ T5736] usb usb2-port1: attempt power cycle [ 1842.718175][T16193] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1842.718216][T16193] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1842.718697][T16193] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1842.772935][T16193] usb 3-1: USB disconnect, device number 91 [ 1843.371255][ T5736] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1843.391536][ T5736] usb 2-1: device descriptor read/8, error -71 [ 1845.226139][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1846.737628][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3682'. [ 1847.947426][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1848.389506][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1848.389535][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.570759][T19847] FAULT_INJECTION: forcing a failure. [ 1848.570759][T19847] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.570788][T19847] CPU: 0 UID: 0 PID: 19847 Comm: syz.2.3689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1848.570814][T19847] Tainted: [L]=SOFTLOCKUP [ 1848.570821][T19847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1848.570832][T19847] Call Trace: [ 1848.570840][T19847] [ 1848.570847][T19847] dump_stack_lvl+0x100/0x190 [ 1848.570882][T19847] should_fail_ex.cold+0x5/0xa [ 1848.570911][T19847] should_failslab+0xc2/0x120 [ 1848.570933][T19847] __kmalloc_noprof+0xfc/0x840 [ 1848.570961][T19847] ? tomoyo_encode2+0xfb/0x3c0 [ 1848.570985][T19847] tomoyo_encode2+0xfb/0x3c0 [ 1848.571008][T19847] tomoyo_encode+0x29/0x50 [ 1848.571026][T19847] tomoyo_realpath_from_path+0x18c/0x690 [ 1848.571053][T19847] tomoyo_path_number_perm+0x23c/0x580 [ 1848.571084][T19847] ? tomoyo_path_number_perm+0x22e/0x580 [ 1848.571111][T19847] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1848.571148][T19847] ? __lock_acquire+0x5c0/0x1f40 [ 1848.571186][T19847] ? __fget_files+0x34/0x3d0 [ 1848.571209][T19847] ? find_held_lock+0x2b/0x80 [ 1848.571227][T19847] ? hook_file_ioctl_common+0x140/0x440 [ 1848.571254][T19847] ? __fget_files+0x21f/0x3d0 [ 1848.571281][T19847] security_file_ioctl+0xd3/0x230 [ 1848.571310][T19847] __x64_sys_ioctl+0xb7/0x210 [ 1848.571331][T19847] do_syscall_64+0x123/0x7b0 [ 1848.571356][T19847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1848.571375][T19847] RIP: 0033:0x7fc095b9fb19 [ 1848.571390][T19847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1848.571407][T19847] RSP: 002b:00007fc096a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.571426][T19847] RAX: ffffffffffffffda RBX: 00007fc095e25fa0 RCX: 00007fc095b9fb19 [ 1848.571438][T19847] RDX: 0000200000000600 RSI: 0000000040106f52 RDI: 0000000000000003 [ 1848.571449][T19847] RBP: 00007fc096a07090 R08: 0000000000000000 R09: 0000000000000000 [ 1848.571459][T19847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1848.571470][T19847] R13: 00007fc095e26038 R14: 00007fc095e25fa0 R15: 00007ffcf759f178 [ 1848.571495][T19847] [ 1848.571761][T19847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1848.777993][ T31] audit: type=1400 audit(1794212995.094:1304): avc: denied { ioctl } for pid=19856 comm="syz.0.3683" path="/dev/sg0" dev="devtmpfs" ino=845 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1848.815621][ T31] audit: type=1400 audit(1794212995.134:1305): avc: denied { create } for pid=19856 comm="syz.0.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1848.981600][ T5736] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1849.017991][T19863] cgroup: fork rejected by pids controller in /syz0 [ 1849.122377][ T5736] usb 6-1: device descriptor read/64, error -71 [ 1849.143998][T19876] overlay: filesystem on ./file0 is read-only [ 1849.361499][ T5736] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1849.401284][ T1578] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1849.491377][ T5736] usb 6-1: device descriptor read/64, error -71 [ 1849.613222][ T5736] usb usb6-port1: attempt power cycle [ 1849.613538][ T1578] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1849.617934][ T1578] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1849.617959][ T1578] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1849.617975][ T1578] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1849.618012][ T1578] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 1849.620121][ T1578] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1849.620143][ T1578] usb 2-1: Product: syz [ 1849.620156][ T1578] usb 2-1: Manufacturer: syz [ 1849.635407][ T1578] cdc_wdm 2-1:1.0: skipping garbage [ 1849.635423][ T1578] cdc_wdm 2-1:1.0: skipping garbage [ 1849.635477][ T1578] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1849.785020][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.033706][ T5736] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1850.091344][ T5736] usb 6-1: device descriptor read/8, error -71 [ 1850.179178][ T5712] usb 2-1: USB disconnect, device number 81 [ 1850.255281][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.331920][ T5736] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1850.355116][ T5736] usb 6-1: device descriptor read/8, error -71 [ 1850.414801][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.461592][ T5736] usb usb6-port1: unable to enumerate USB device [ 1850.508493][T19006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1850.513707][T19006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1850.514440][T19006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1850.516478][T19006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1850.516896][T19006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1851.051290][ T1578] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1851.141946][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.206465][ T1578] usb 4-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 1851.210129][ T1578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.317222][ T1578] usb 4-1: Firmware version (0.0) predates our first public release. [ 1852.317247][ T1578] usb 4-1: Please update to version 0.2 or newer [ 1852.318773][ T1578] usb 4-1: Firmware: build [ 1852.581261][T19006] Bluetooth: hci2: command tx timeout [ 1852.590208][T19930] fuse: Unknown parameter 'grou00000000000000000000' [ 1852.623273][ T1578] usb 4-1: USB disconnect, device number 66 [ 1853.765029][ T44] bridge_slave_1: left allmulticast mode [ 1853.765053][ T44] bridge_slave_1: left promiscuous mode [ 1853.765215][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.804830][ T44] bridge_slave_0: left allmulticast mode [ 1853.804852][ T44] bridge_slave_0: left promiscuous mode [ 1853.805011][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.172112][T19006] Bluetooth: hci2: command tx timeout [ 1855.493984][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1855.497418][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1855.502249][ T44] bond0 (unregistering): Released all slaves [ 1855.577846][ T5712] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1855.595507][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1855.608202][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1855.617946][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1856.016753][ T5712] usb 3-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1856.018748][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1856.018777][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1856.018797][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1856.018819][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1856.020529][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.020550][ T5712] usb 3-1: Product: syz [ 1856.020567][ T5712] usb 3-1: Manufacturer: syz [ 1856.020581][ T5712] usb 3-1: SerialNumber: syz [ 1856.084060][T19903] infiniband rxe0: set active [ 1856.084076][T19903] infiniband rxe0: added rxe_eth0 [ 1856.085015][T17597] rxe_eth0 speed is unknown, defaulting to 1000 [ 1856.117208][ T44] tipc: Left network mode [ 1856.119009][ T5712] usb 3-1: config 0 descriptor?? [ 1856.152879][ T31] audit: type=1400 audit(1794213002.464:1306): avc: denied { write } for pid=19941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1856.155713][T19903] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1856.155740][T19903] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1856.155769][T19903] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1856.185157][ T287] RDS/IB: rds_ib_setup_qp failed (-95) [ 1856.234126][T19903] RDS/IB: rxe0: added [ 1856.234163][T19903] smc: adding ib device rxe0 with port count 1 [ 1856.234177][T19903] smc: ib device rxe0 port 1 has no pnetid [ 1856.234227][T17597] rxe_eth0 speed is unknown, defaulting to 1000 [ 1856.234927][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1856.399660][ T5712] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1856.605102][ T31] audit: type=1400 audit(1794213002.914:1307): avc: denied { write } for pid=19968 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1856.745536][T19971] input input123: cannot allocate more than FF_MAX_EFFECTS effects [ 1856.981996][T19956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.982368][T19956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.148994][T19956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.177930][T19956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.232798][T19006] Bluetooth: hci2: command tx timeout [ 1858.209122][ T5736] usb 3-1: USB disconnect, device number 92 [ 1858.816423][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1858.914694][T19977] input input124: cannot allocate more than FF_MAX_EFFECTS effects [ 1859.313239][T19006] Bluetooth: hci2: command tx timeout [ 1859.852543][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1859.998722][ T31] audit: type=1326 audit(1794213006.314:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19978 comm="syz.1.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9901d9fb19 code=0x7ffc0000 [ 1860.038957][ T31] audit: type=1326 audit(1794213006.354:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19978 comm="syz.1.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9901d9fb19 code=0x7ffc0000 [ 1860.039065][ T31] audit: type=1326 audit(1794213006.354:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19978 comm="syz.1.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9901d9fb19 code=0x7ffc0000 [ 1860.039180][ T31] audit: type=1326 audit(1794213006.354:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19978 comm="syz.1.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9901d9fb19 code=0x7ffc0000 [ 1860.040747][ T31] audit: type=1326 audit(1794213006.354:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19978 comm="syz.1.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9901d9fb19 code=0x7ffc0000 [ 1860.040789][ T31] audit: type=1326 audit(1794213006.354:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19978 comm="syz.1.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9901d9fb19 code=0x7ffc0000 [ 1860.040914][ T31] audit: type=1326 audit(1794213006.354:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19978 comm="syz.1.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9901d9fb19 code=0x7ffc0000 [ 1860.069226][ T31] audit: type=1326 audit(1794213006.394:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19978 comm="syz.1.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9901d9fb19 code=0x7ffc0000 [ 1860.413062][T19987] input input125: cannot allocate more than FF_MAX_EFFECTS effects [ 1860.475475][T19981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1860.475546][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1860.713127][T19979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1861.454386][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1861.514069][T19993] FAULT_INJECTION: forcing a failure. [ 1861.514069][T19993] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.514089][T19993] CPU: 1 UID: 0 PID: 19993 Comm: syz.5.3713 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.514104][T19993] Tainted: [L]=SOFTLOCKUP [ 1861.514109][T19993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1861.514115][T19993] Call Trace: [ 1861.514119][T19993] [ 1861.514123][T19993] dump_stack_lvl+0x100/0x190 [ 1861.514144][T19993] should_fail_ex.cold+0x5/0xa [ 1861.514161][T19993] should_failslab+0xc2/0x120 [ 1861.514175][T19993] __kmalloc_noprof+0xfc/0x840 [ 1861.514192][T19993] ? tomoyo_encode2+0xfb/0x3c0 [ 1861.514209][T19993] tomoyo_encode2+0xfb/0x3c0 [ 1861.514222][T19993] tomoyo_encode+0x29/0x50 [ 1861.514233][T19993] tomoyo_realpath_from_path+0x18c/0x690 [ 1861.514249][T19993] tomoyo_path_number_perm+0x23c/0x580 [ 1861.514264][T19993] ? tomoyo_path_number_perm+0x22e/0x580 [ 1861.514281][T19993] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1861.514303][T19993] ? __lock_acquire+0x5c0/0x1f40 [ 1861.514325][T19993] ? __fget_files+0x34/0x3d0 [ 1861.514344][T19993] ? find_held_lock+0x2b/0x80 [ 1861.514356][T19993] ? hook_file_ioctl_common+0x140/0x440 [ 1861.514373][T19993] ? __fget_files+0x21f/0x3d0 [ 1861.514388][T19993] security_file_ioctl+0xd3/0x230 [ 1861.514406][T19993] __x64_sys_ioctl+0xb7/0x210 [ 1861.514419][T19993] do_syscall_64+0x123/0x7b0 [ 1861.514434][T19993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.514445][T19993] RIP: 0033:0x7f76a0b9fb19 [ 1861.514455][T19993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.514465][T19993] RSP: 002b:00007f76a1a3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.514476][T19993] RAX: ffffffffffffffda RBX: 00007f76a0e25fa0 RCX: 00007f76a0b9fb19 [ 1861.514483][T19993] RDX: 00002000000002c0 RSI: 00000000c008561c RDI: 0000000000000005 [ 1861.514490][T19993] RBP: 00007f76a1a3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.514496][T19993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.514503][T19993] R13: 00007f76a0e26038 R14: 00007f76a0e25fa0 R15: 00007ffda764e0d8 [ 1861.514517][T19993] [ 1861.521219][T19993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1861.645488][T19993] vivid-000: disconnect [ 1861.675279][T19993] vivid-000: reconnect [ 1861.956566][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 1861.956583][ T31] audit: type=1400 audit(1794213008.274:1341): avc: denied { write } for pid=19986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1862.327507][ T31] audit: type=1400 audit(1794213008.644:1342): avc: denied { write } for pid=20017 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1862.338962][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1862.968925][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1863.617441][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1863.835103][ T1578] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1864.064008][ T1578] usb 4-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1864.086149][ T1578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1864.086211][ T1578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1864.086262][ T1578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1864.086299][ T1578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1864.214128][ T1578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.214153][ T1578] usb 4-1: Product: syz [ 1864.214166][ T1578] usb 4-1: Manufacturer: syz [ 1864.214180][ T1578] usb 4-1: SerialNumber: syz [ 1864.244887][ T1578] usb 4-1: config 0 descriptor?? [ 1864.697075][ T1578] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1865.181585][T20032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.181778][T20032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.187406][T20032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.187746][T20032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.074789][ T1578] usb 4-1: USB disconnect, device number 67 [ 1866.101560][T20046] syzkaller0: entered promiscuous mode [ 1866.101582][T20046] syzkaller0: entered allmulticast mode [ 1867.164233][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1867.805447][ T31] audit: type=1400 audit(1794213014.124:1343): avc: denied { write } for pid=20029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1868.021297][T16255] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1868.171494][T16255] usb 3-1: Using ep0 maxpacket: 32 [ 1868.172074][T16255] usb 3-1: New USB device found: idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1868.175349][T16255] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 1868.175373][T16255] usb 3-1: config 0 has no interface number 1 [ 1868.179068][T16255] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1868.179090][T16255] usb 3-1: Product: syz [ 1868.179103][T16255] usb 3-1: Manufacturer: syz [ 1868.179117][T16255] usb 3-1: SerialNumber: syz [ 1868.253354][T16255] usb 3-1: config 0 descriptor?? [ 1868.258127][ T31] audit: type=1400 audit(1794213014.574:1344): avc: denied { write } for pid=20070 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1868.321023][ T44] hsr_slave_0: left promiscuous mode [ 1868.336518][ T44] hsr_slave_1: left promiscuous mode [ 1868.337004][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1868.337019][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1868.350865][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1868.350881][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1868.398910][ T44] veth1_macvtap: left promiscuous mode [ 1868.398939][ T44] veth0_macvtap: left promiscuous mode [ 1868.398982][ T44] veth1_vlan: left promiscuous mode [ 1868.399022][ T44] veth0_vlan: left promiscuous mode [ 1868.544379][T16255] usb 3-1: Could not set interface, error -71 [ 1868.614101][T16255] usb 3-1: USB disconnect, device number 93 [ 1869.416664][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1869.438851][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1870.425740][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1870.469351][T20078] FAULT_INJECTION: forcing a failure. [ 1870.469351][T20078] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.469372][T20078] CPU: 1 UID: 0 PID: 20078 Comm: syz.5.3731 Tainted: G L syzkaller #0 PREEMPT(full) [ 1870.469389][T20078] Tainted: [L]=SOFTLOCKUP [ 1870.469393][T20078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1870.469399][T20078] Call Trace: [ 1870.469403][T20078] [ 1870.469408][T20078] dump_stack_lvl+0x100/0x190 [ 1870.469430][T20078] should_fail_ex.cold+0x5/0xa [ 1870.469447][T20078] should_failslab+0xc2/0x120 [ 1870.469460][T20078] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1870.469477][T20078] ? __kernfs_new_node+0xd2/0xa10 [ 1870.469491][T20078] __kernfs_new_node+0xd2/0xa10 [ 1870.469504][T20078] ? __pfx___kernfs_new_node+0x10/0x10 [ 1870.469516][T20078] ? lock_acquire+0x1d1/0x380 [ 1870.469532][T20078] ? kernfs_root+0x23/0x2a0 [ 1870.469548][T20078] ? find_held_lock+0x2b/0x80 [ 1870.469559][T20078] ? kernfs_root+0xee/0x2a0 [ 1870.469573][T20078] ? kernfs_root+0xee/0x2a0 [ 1870.469592][T20078] kernfs_new_node+0x194/0x200 [ 1870.469604][T20078] ? __pfx_kernfs_new_node+0x10/0x10 [ 1870.469616][T20078] ? kernfs_add_one+0x213/0xb40 [ 1870.469630][T20078] __kernfs_create_file+0x53/0x350 [ 1870.469646][T20078] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1870.469665][T20078] sysfs_merge_group+0x194/0x340 [ 1870.469676][T20078] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1870.469692][T20078] ? bus_add_device+0x2e2/0x6c0 [ 1870.469705][T20078] ? __pfx_bus_add_device+0x10/0x10 [ 1870.469722][T20078] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1870.469742][T20078] dpm_sysfs_add+0x237/0x280 [ 1870.469758][T20078] device_add+0x9f4/0x1970 [ 1870.469775][T20078] ? __pfx_device_add+0x10/0x10 [ 1870.469790][T20078] ? lockdep_init_map_type+0x5c/0x250 [ 1870.469806][T20078] ? __init_waitqueue_head+0xca/0x150 [ 1870.469827][T20078] netdev_register_kobject+0x1df/0x410 [ 1870.469842][T20078] register_netdevice+0x1313/0x26b0 [ 1870.469859][T20078] ? __pfx_register_netdevice+0x10/0x10 [ 1870.469873][T20078] ? net_generic+0xea/0x2a0 [ 1870.469888][T20078] ppp_dev_configure+0x8e6/0xbc0 [ 1870.469901][T20078] ppp_ioctl+0x9ef/0x27b0 [ 1870.469912][T20078] ? __fget_files+0x34/0x3d0 [ 1870.469927][T20078] ? __pfx_ppp_ioctl+0x10/0x10 [ 1870.469946][T20078] ? selinux_file_ioctl+0x1e7/0x290 [ 1870.469958][T20078] ? __pfx_ppp_ioctl+0x10/0x10 [ 1870.469969][T20078] __x64_sys_ioctl+0x18e/0x210 [ 1870.469982][T20078] do_syscall_64+0x123/0x7b0 [ 1870.469997][T20078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.470008][T20078] RIP: 0033:0x7f76a0b9fb19 [ 1870.470018][T20078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.470028][T20078] RSP: 002b:00007f76a1a3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1870.470040][T20078] RAX: ffffffffffffffda RBX: 00007f76a0e25fa0 RCX: 00007f76a0b9fb19 [ 1870.470048][T20078] RDX: 0000200000000300 RSI: 00000000c004743e RDI: 0000000000000008 [ 1870.470055][T20078] RBP: 00007f76a0c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1870.470063][T20078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1870.470070][T20078] R13: 00007f76a0e26038 R14: 00007f76a0e25fa0 R15: 00007ffda764e0d8 [ 1870.470085][T20078] [ 1870.727756][T20090] jffs2: notice: (20090) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1870.761582][ T31] audit: type=1400 audit(1794213017.074:1345): avc: denied { write } for pid=20089 comm="syz.3.3733" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1871.017061][T20090] FAULT_INJECTION: forcing a failure. [ 1871.017061][T20090] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.017081][T20090] CPU: 1 UID: 0 PID: 20090 Comm: syz.3.3733 Tainted: G L syzkaller #0 PREEMPT(full) [ 1871.017097][T20090] Tainted: [L]=SOFTLOCKUP [ 1871.017101][T20090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1871.017109][T20090] Call Trace: [ 1871.017113][T20090] [ 1871.017119][T20090] dump_stack_lvl+0x100/0x190 [ 1871.017142][T20090] should_fail_ex.cold+0x5/0xa [ 1871.017157][T20090] ? __pfx_batadv_mcast_tvlv_ogm_handler+0x10/0x10 [ 1871.017176][T20090] should_failslab+0xc2/0x120 [ 1871.017189][T20090] __kmalloc_cache_noprof+0x91/0x6d0 [ 1871.017207][T20090] ? batadv_tvlv_handler_register+0x10d/0x530 [ 1871.017228][T20090] ? __pfx_batadv_mcast_tvlv_ogm_handler+0x10/0x10 [ 1871.017251][T20090] batadv_tvlv_handler_register+0x10d/0x530 [ 1871.017269][T20090] batadv_mcast_init+0x38/0x1d0 [ 1871.017285][T20090] batadv_mesh_init+0x5be/0x8f0 [ 1871.017299][T20090] batadv_meshif_init_late+0xb26/0xe60 [ 1871.017314][T20090] ? __kasan_kmalloc+0xaa/0xb0 [ 1871.017325][T20090] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 1871.017339][T20090] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1871.017354][T20090] ? register_netdevice+0x507/0x26b0 [ 1871.017371][T20090] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 1871.017385][T20090] register_netdevice+0x680/0x26b0 [ 1871.017401][T20090] ? alloc_netdev_mqs+0x11a7/0x1540 [ 1871.017415][T20090] ? __pfx_register_netdevice+0x10/0x10 [ 1871.017433][T20090] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 1871.017447][T20090] batadv_meshif_newlink+0x8f/0xc0 [ 1871.017461][T20090] rtnl_newlink+0x1697/0x2620 [ 1871.017481][T20090] ? __pfx_rtnl_newlink+0x10/0x10 [ 1871.017494][T20090] ? avc_has_perm_noaudit+0x56/0x470 [ 1871.017508][T20090] ? find_held_lock+0x2b/0x80 [ 1871.017519][T20090] ? avc_has_perm_noaudit+0x11e/0x470 [ 1871.017532][T20090] ? avc_has_perm_noaudit+0x11e/0x470 [ 1871.017558][T20090] ? lock_acquire+0x1d1/0x380 [ 1871.017572][T20090] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1871.017587][T20090] ? find_held_lock+0x2b/0x80 [ 1871.017598][T20090] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1871.017612][T20090] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1871.017628][T20090] ? __pfx_rtnl_newlink+0x10/0x10 [ 1871.017643][T20090] rtnetlink_rcv_msg+0x95e/0xe90 [ 1871.017659][T20090] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1871.017680][T20090] netlink_rcv_skb+0x159/0x420 [ 1871.017694][T20090] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1871.017716][T20090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1871.017729][T20090] ? __asan_memcpy+0x3c/0x60 [ 1871.017749][T20090] ? netlink_deliver_tap+0x1ae/0xb50 [ 1871.017767][T20090] netlink_unicast+0x668/0x950 [ 1871.017785][T20090] ? __pfx_netlink_unicast+0x10/0x10 [ 1871.017803][T20090] netlink_sendmsg+0x9ac/0x10c0 [ 1871.017821][T20090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1871.017839][T20090] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1871.017859][T20090] ? ____sys_sendmsg+0xa99/0xc30 [ 1871.017874][T20090] ____sys_sendmsg+0xa99/0xc30 [ 1871.017889][T20090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1871.017904][T20090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1871.017926][T20090] ___sys_sendmsg+0x190/0x1e0 [ 1871.017943][T20090] ? __pfx____sys_sendmsg+0x10/0x10 [ 1871.017960][T20090] ? futex_wait+0x11e/0x370 [ 1871.017980][T20090] ? find_held_lock+0x2b/0x80 [ 1871.018000][T20090] __sys_sendmsg+0x160/0x210 [ 1871.018013][T20090] ? __pfx___sys_sendmsg+0x10/0x10 [ 1871.018034][T20090] do_syscall_64+0x123/0x7b0 [ 1871.018048][T20090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.018059][T20090] RIP: 0033:0x7f5151b9fb19 [ 1871.018070][T20090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.018081][T20090] RSP: 002b:00007f5152a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1871.018093][T20090] RAX: ffffffffffffffda RBX: 00007f5151e25fa0 RCX: 00007f5151b9fb19 [ 1871.018100][T20090] RDX: 0000000020000840 RSI: 0000200000000800 RDI: 0000000000000009 [ 1871.018107][T20090] RBP: 00007f5151c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1871.018113][T20090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.018119][T20090] R13: 00007f5151e26038 R14: 00007f5151e25fa0 R15: 00007ffd66b10c28 [ 1871.018133][T20090] [ 1871.086940][T20092] FAULT_INJECTION: forcing a failure. [ 1871.086940][T20092] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.086967][T20092] CPU: 1 UID: 0 PID: 20092 Comm: syz.3.3733 Tainted: G L syzkaller #0 PREEMPT(full) [ 1871.086991][T20092] Tainted: [L]=SOFTLOCKUP [ 1871.086998][T20092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1871.087011][T20092] Call Trace: [ 1871.087017][T20092] [ 1871.087025][T20092] dump_stack_lvl+0x100/0x190 [ 1871.087055][T20092] should_fail_ex.cold+0x5/0xa [ 1871.087082][T20092] should_failslab+0xc2/0x120 [ 1871.087104][T20092] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1871.087129][T20092] ? security_file_alloc+0x34/0x2c0 [ 1871.087150][T20092] security_file_alloc+0x34/0x2c0 [ 1871.087167][T20092] init_file+0x95/0x480 [ 1871.087188][T20092] alloc_empty_file+0x79/0x1c0 [ 1871.087211][T20092] path_openat+0xd6/0x23f0 [ 1871.087236][T20092] ? __pfx_path_openat+0x10/0x10 [ 1871.087262][T20092] do_file_open+0x20e/0x430 [ 1871.087284][T20092] ? __pfx_do_file_open+0x10/0x10 [ 1871.087319][T20092] ? _raw_spin_unlock+0x28/0x50 [ 1871.087336][T20092] ? alloc_fd+0x471/0x7a0 [ 1871.087362][T20092] do_sys_openat2+0x163/0x1d0 [ 1871.087384][T20092] ? __pfx_do_sys_openat2+0x10/0x10 [ 1871.087414][T20092] __x64_sys_openat+0x12d/0x210 [ 1871.087436][T20092] ? __pfx___x64_sys_openat+0x10/0x10 [ 1871.087467][T20092] do_syscall_64+0x123/0x7b0 [ 1871.087488][T20092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.087505][T20092] RIP: 0033:0x7f5151b6034e [ 1871.087518][T20092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1871.087533][T20092] RSP: 002b:00007f5152a45ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1871.087549][T20092] RAX: ffffffffffffffda RBX: 00007f5152a466c0 RCX: 00007f5151b6034e [ 1871.087560][T20092] RDX: 0000000000000000 RSI: 00007f5152a45f90 RDI: ffffffffffffff9c [ 1871.087570][T20092] RBP: 00007f5151c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1871.087579][T20092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.087589][T20092] R13: 00007f5151e26128 R14: 00007f5151e26090 R15: 00007ffd66b10c28 [ 1871.087611][T20092] [ 1871.142078][T20090] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1871.613422][T20100] FAULT_INJECTION: forcing a failure. [ 1871.613422][T20100] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.613446][T20100] CPU: 1 UID: 0 PID: 20100 Comm: syz.1.3735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1871.613468][T20100] Tainted: [L]=SOFTLOCKUP [ 1871.613474][T20100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1871.613483][T20100] Call Trace: [ 1871.613489][T20100] [ 1871.613495][T20100] dump_stack_lvl+0x100/0x190 [ 1871.613524][T20100] should_fail_ex.cold+0x5/0xa [ 1871.613548][T20100] should_failslab+0xc2/0x120 [ 1871.613566][T20100] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1871.613590][T20100] ? __alloc_skb+0x5b7/0x710 [ 1871.613607][T20100] ? __alloc_skb+0x140/0x710 [ 1871.613628][T20100] __alloc_skb+0x140/0x710 [ 1871.613645][T20100] ? __alloc_skb+0x5b7/0x710 [ 1871.613662][T20100] ? __pfx___alloc_skb+0x10/0x10 [ 1871.613686][T20100] netlink_alloc_large_skb+0x69/0x150 [ 1871.613713][T20100] netlink_sendmsg+0x755/0x10c0 [ 1871.613737][T20100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1871.613763][T20100] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1871.613788][T20100] ? ____sys_sendmsg+0xa99/0xc30 [ 1871.613809][T20100] ____sys_sendmsg+0xa99/0xc30 [ 1871.613830][T20100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1871.613852][T20100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1871.613880][T20100] ? lock_acquire+0x1d1/0x380 [ 1871.613900][T20100] ? get_pid_task+0x2a/0x250 [ 1871.613918][T20100] ___sys_sendmsg+0x190/0x1e0 [ 1871.613943][T20100] ? __pfx____sys_sendmsg+0x10/0x10 [ 1871.613965][T20100] ? get_pid_task+0x106/0x250 [ 1871.613989][T20100] ? find_held_lock+0x2b/0x80 [ 1871.614020][T20100] __sys_sendmsg+0x160/0x210 [ 1871.614039][T20100] ? __pfx___sys_sendmsg+0x10/0x10 [ 1871.614070][T20100] do_syscall_64+0x123/0x7b0 [ 1871.614090][T20100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.614106][T20100] RIP: 0033:0x7f9901d9fb19 [ 1871.614120][T20100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.614135][T20100] RSP: 002b:00007f9902c5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1871.614150][T20100] RAX: ffffffffffffffda RBX: 00007f9902025fa0 RCX: 00007f9901d9fb19 [ 1871.614161][T20100] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1871.614170][T20100] RBP: 00007f9902c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.614180][T20100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.614189][T20100] R13: 00007f9902026038 R14: 00007f9902025fa0 R15: 00007ffe195fec88 [ 1871.614211][T20100] [ 1873.662108][T16193] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1873.689459][T20122] /dev/nullb0: Can't open blockdev [ 1873.689988][T20123] /dev/nullb0: Can't open blockdev [ 1873.814825][T16193] usb 6-1: New USB device found: idVendor=1b96, idProduct=0006, bcdDevice=0.00 [ 1873.815721][T16193] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1873.815750][T16193] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1873.815772][T16193] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1873.815797][T16193] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1873.815825][T16193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.820086][T16193] usb 6-1: config 0 descriptor?? [ 1873.832511][T19903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.834134][T19903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.834218][T19903] bridge_slave_0: entered allmulticast mode [ 1873.835457][T19903] bridge_slave_0: entered promiscuous mode [ 1873.841641][T19903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.841711][T19903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.841804][T19903] bridge_slave_1: entered allmulticast mode [ 1873.843061][T19903] bridge_slave_1: entered promiscuous mode [ 1873.978395][T19903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1873.996049][T19903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1874.126280][T19903] team0: Port device team_slave_0 added [ 1874.138636][ T31] audit: type=1400 audit(1794213020.454:1346): avc: denied { cmd } for pid=20107 comm="syz.5.3737" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1874.147344][T19903] team0: Port device team_slave_1 added [ 1874.193465][T20108] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3737'. [ 1874.270433][T19903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.270444][T19903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1874.270457][T19903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.275141][T19903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1874.275153][T19903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1874.275171][T19903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1874.370800][ T31] audit: type=1400 audit(1794213020.684:1347): avc: denied { write } for pid=20096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.527738][T19903] hsr_slave_0: entered promiscuous mode [ 1874.528147][T19903] hsr_slave_1: entered promiscuous mode [ 1874.528418][T19903] debugfs: 'hsr0' already exists in 'hsr' [ 1874.528427][T19903] Cannot create hsr debugfs directory [ 1874.537907][T16193] input: HID 1b96:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1B96:0006.003E/input/input126 [ 1874.734561][ T31] audit: type=1400 audit(1794213021.054:1348): avc: denied { write } for pid=20135 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.741058][T16193] ntrig 0003:1B96:0006.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1b96:0006] on usb-dummy_hcd.5-1/input0 [ 1875.940453][T16193] usb 6-1: USB disconnect, device number 71 [ 1875.951664][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1879.182889][ T31] audit: type=1400 audit(1794213025.494:1349): avc: denied { write } for pid=20152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1879.312830][T16255] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 1879.412937][ T31] audit: type=1400 audit(1794213025.734:1350): avc: denied { write } for pid=20174 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1879.463498][T16255] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1879.464371][T16255] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1879.464395][T16255] usb 6-1: config 0 has no interface number 0 [ 1879.464419][T16255] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1879.464431][T16255] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1879.464445][T16255] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1879.464458][T16255] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1879.464472][T16255] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1879.464485][T16255] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1879.464504][T16255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.490551][T16255] usb 6-1: config 0 descriptor?? [ 1879.497254][T20171] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1879.497365][T20171] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1880.171713][T16255] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1880.348139][ T5729] usb 6-1: USB disconnect, device number 72 [ 1880.348293][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1880.410694][ T5729] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1880.748906][T20183] ldusb: No device or device unplugged -19 [ 1880.842674][T19903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1880.873988][T19903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1880.876679][T19903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1880.899351][T19903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1880.910836][T19903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1880.937158][T19903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1880.938702][T19903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1880.983483][T19903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1881.885678][T19903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1881.941161][T19903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1881.956966][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.957040][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1881.980439][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.980484][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1882.168301][T20202] syzkaller0: entered promiscuous mode [ 1882.168323][T20202] syzkaller0: entered allmulticast mode [ 1882.209746][T20207] overlayfs: missing 'lowerdir' [ 1882.265601][T20207] CacheFiles: Failed to register: -95 [ 1882.399053][T20207] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10632] was attempted by ""[20207] [ 1883.396531][ T31] audit: type=1400 audit(1794213029.714:1351): avc: denied { write } for pid=20185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1883.952346][ T31] audit: type=1400 audit(1794213030.274:1352): avc: denied { write } for pid=20223 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1885.121757][T20243] FAULT_INJECTION: forcing a failure. [ 1885.121757][T20243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.121785][T20243] CPU: 1 UID: 0 PID: 20243 Comm: syz.1.3750 Tainted: G L syzkaller #0 PREEMPT(full) [ 1885.121810][T20243] Tainted: [L]=SOFTLOCKUP [ 1885.121817][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1885.121828][T20243] Call Trace: [ 1885.121836][T20243] [ 1885.121843][T20243] dump_stack_lvl+0x100/0x190 [ 1885.121878][T20243] should_fail_ex.cold+0x5/0xa [ 1885.121907][T20243] _copy_to_user+0x32/0xd0 [ 1885.121935][T20243] simple_read_from_buffer+0xcb/0x170 [ 1885.121962][T20243] proc_fail_nth_read+0x1af/0x230 [ 1885.121989][T20243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1885.122014][T20243] ? rw_verify_area+0xce/0x6d0 [ 1885.122041][T20243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1885.122065][T20243] vfs_read+0x1e4/0xb30 [ 1885.122084][T20243] ? lock_acquire+0x1d1/0x380 [ 1885.122109][T20243] ? __fget_files+0x34/0x3d0 [ 1885.122131][T20243] ? __pfx_vfs_read+0x10/0x10 [ 1885.122147][T20243] ? find_held_lock+0x2b/0x80 [ 1885.122167][T20243] ? __fget_files+0x215/0x3d0 [ 1885.122193][T20243] ? __fget_files+0x21f/0x3d0 [ 1885.122222][T20243] ksys_read+0x12a/0x250 [ 1885.122240][T20243] ? __pfx_ksys_read+0x10/0x10 [ 1885.122266][T20243] do_syscall_64+0x123/0x7b0 [ 1885.122290][T20243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.122309][T20243] RIP: 0033:0x7f9901d6034e [ 1885.122325][T20243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1885.122342][T20243] RSP: 002b:00007f9902c3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1885.122360][T20243] RAX: ffffffffffffffda RBX: 00007f9902c3b6c0 RCX: 00007f9901d6034e [ 1885.122372][T20243] RDX: 000000000000000f RSI: 00007f9902c3b0a0 RDI: 0000000000000004 [ 1885.122383][T20243] RBP: 00007f9902c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.122394][T20243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.122404][T20243] R13: 00007f9902026128 R14: 00007f9902026090 R15: 00007ffe195fec88 [ 1885.122429][T20243] [ 1885.356426][T19903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1885.530840][T19903] veth0_vlan: entered promiscuous mode [ 1885.580490][T19903] veth1_vlan: entered promiscuous mode [ 1885.635290][ T31] audit: type=1400 audit(1794213031.954:1353): avc: denied { write } for pid=20235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1885.736706][T19903] veth0_macvtap: entered promiscuous mode [ 1885.743840][ T31] audit: type=1400 audit(1794213032.054:1354): avc: denied { setcurrent } for pid=20254 comm="syz.2.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1885.767626][T19903] veth1_macvtap: entered promiscuous mode [ 1885.782913][ T31] audit: type=1401 audit(1794213032.094:1355): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1885.867776][T19903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1885.903300][T19903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1885.969244][ T31] audit: type=1400 audit(1794213032.284:1356): avc: denied { write } for pid=20255 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.021392][ T287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.021768][ T287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.021799][ T287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.025642][T20256] device-mapper: table: 248:9: ram5 too small for target: start=0, len=12296, dev_size=8192 [ 1886.025657][T20256] device-mapper: core: Cannot calculate initial queue limits [ 1886.025662][T20256] device-mapper: ioctl: unable to set up device queue for new table. [ 1886.031522][ T5736] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1886.064489][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.111552][ T31] audit: type=1400 audit(1794213032.424:1357): avc: denied { write } for pid=20254 comm="syz.2.3755" path="socket:[63644]" dev="sockfs" ino=63644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1886.193404][ T5736] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1886.221528][ T5736] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.221576][ T5736] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1886.221597][ T5736] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1886.221619][ T5736] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1886.221651][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.425942][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1886.425956][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1886.507895][ T31] audit: type=1400 audit(1794213032.824:1358): avc: denied { search } for pid=20270 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.507925][ T31] audit: type=1400 audit(1794213032.824:1359): avc: denied { search } for pid=20270 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.507947][ T31] audit: type=1400 audit(1794213032.824:1360): avc: denied { search } for pid=20270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.507966][ T31] audit: type=1400 audit(1794213032.824:1361): avc: denied { search } for pid=20270 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.563765][ T31] audit: type=1400 audit(1794213032.864:1362): avc: denied { read } for pid=20272 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.717398][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1886.717417][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1887.162265][T20279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3761'. [ 1887.361365][ T5736] gud 2-1:1.0: Failed to get connectors (error=-5) [ 1887.361394][ T5736] gud 2-1:1.0: probe with driver gud failed with error -5 [ 1887.451089][T20285] jffs2: notice: (20285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1888.061867][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3694'. [ 1888.289354][T20282] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1888.299094][T20294] FAULT_INJECTION: forcing a failure. [ 1888.299094][T20294] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.299122][T20294] CPU: 1 UID: 0 PID: 20294 Comm: syz.5.3762 Tainted: G L syzkaller #0 PREEMPT(full) [ 1888.299149][T20294] Tainted: [L]=SOFTLOCKUP [ 1888.299156][T20294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1888.299166][T20294] Call Trace: [ 1888.299173][T20294] [ 1888.299180][T20294] dump_stack_lvl+0x100/0x190 [ 1888.299215][T20294] should_fail_ex.cold+0x5/0xa [ 1888.299248][T20294] should_failslab+0xc2/0x120 [ 1888.299272][T20294] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1888.299300][T20294] ? __pfx_stack_trace_save+0x10/0x10 [ 1888.299327][T20294] ? alloc_empty_file+0x5b/0x1c0 [ 1888.299359][T20294] alloc_empty_file+0x5b/0x1c0 [ 1888.299387][T20294] path_openat+0xd6/0x23f0 [ 1888.299415][T20294] ? __pfx_path_openat+0x10/0x10 [ 1888.299448][T20294] do_file_open+0x20e/0x430 [ 1888.299474][T20294] ? __pfx_do_file_open+0x10/0x10 [ 1888.299529][T20294] ? _raw_spin_unlock+0x28/0x50 [ 1888.299550][T20294] ? alloc_fd+0x471/0x7a0 [ 1888.299584][T20294] do_sys_openat2+0x163/0x1d0 [ 1888.299612][T20294] ? __pfx_do_sys_openat2+0x10/0x10 [ 1888.299652][T20294] __x64_sys_openat+0x12d/0x210 [ 1888.299679][T20294] ? __pfx___x64_sys_openat+0x10/0x10 [ 1888.299716][T20294] do_syscall_64+0x123/0x7b0 [ 1888.299741][T20294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.299761][T20294] RIP: 0033:0x7f76a0b6034e [ 1888.299778][T20294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1888.299797][T20294] RSP: 002b:00007f76a1a1cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1888.299816][T20294] RAX: ffffffffffffffda RBX: 00007f76a1a1d6c0 RCX: 00007f76a0b6034e [ 1888.299829][T20294] RDX: 0000000000000000 RSI: 00007f76a1a1cf90 RDI: ffffffffffffff9c [ 1888.299841][T20294] RBP: 00007f76a0c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1888.299853][T20294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1888.299864][T20294] R13: 00007f76a0e26128 R14: 00007f76a0e26090 R15: 00007ffda764e0d8 [ 1888.299892][T20294] [ 1888.414782][T20297] FAULT_INJECTION: forcing a failure. [ 1888.414782][T20297] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.414807][T20297] CPU: 1 UID: 0 PID: 20297 Comm: syz.2.3763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1888.414831][T20297] Tainted: [L]=SOFTLOCKUP [ 1888.414840][T20297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1888.414849][T20297] Call Trace: [ 1888.414855][T20297] [ 1888.414862][T20297] dump_stack_lvl+0x100/0x190 [ 1888.414892][T20297] should_fail_ex.cold+0x5/0xa [ 1888.414917][T20297] ? __pfx_batadv_gw_tvlv_ogm_handler_v1+0x10/0x10 [ 1888.414938][T20297] should_failslab+0xc2/0x120 [ 1888.414958][T20297] __kmalloc_cache_noprof+0x91/0x6d0 [ 1888.414981][T20297] ? batadv_tvlv_handler_register+0x10d/0x530 [ 1888.415004][T20297] ? __pfx_batadv_gw_tvlv_ogm_handler_v1+0x10/0x10 [ 1888.415029][T20297] batadv_tvlv_handler_register+0x10d/0x530 [ 1888.415050][T20297] ? __pfx_batadv_iv_init_sel_class+0x10/0x10 [ 1888.415070][T20297] batadv_gw_init+0x92/0x100 [ 1888.415088][T20297] batadv_mesh_init+0x5b6/0x8f0 [ 1888.415109][T20297] batadv_meshif_init_late+0xb26/0xe60 [ 1888.415133][T20297] ? __kasan_kmalloc+0xaa/0xb0 [ 1888.415151][T20297] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 1888.415174][T20297] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1888.415197][T20297] ? register_netdevice+0x507/0x26b0 [ 1888.415225][T20297] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 1888.415246][T20297] register_netdevice+0x680/0x26b0 [ 1888.415271][T20297] ? alloc_netdev_mqs+0x11a7/0x1540 [ 1888.415293][T20297] ? __pfx_register_netdevice+0x10/0x10 [ 1888.415320][T20297] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 1888.415341][T20297] batadv_meshif_newlink+0x8f/0xc0 [ 1888.415362][T20297] rtnl_newlink+0x1697/0x2620 [ 1888.415394][T20297] ? __pfx_rtnl_newlink+0x10/0x10 [ 1888.415415][T20297] ? avc_has_perm_noaudit+0x56/0x470 [ 1888.415436][T20297] ? find_held_lock+0x2b/0x80 [ 1888.415453][T20297] ? avc_has_perm_noaudit+0x11e/0x470 [ 1888.415472][T20297] ? avc_has_perm_noaudit+0x11e/0x470 [ 1888.415515][T20297] ? lock_acquire+0x1d1/0x380 [ 1888.415535][T20297] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1888.415558][T20297] ? find_held_lock+0x2b/0x80 [ 1888.415574][T20297] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1888.415595][T20297] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1888.415619][T20297] ? __pfx_rtnl_newlink+0x10/0x10 [ 1888.415641][T20297] rtnetlink_rcv_msg+0x95e/0xe90 [ 1888.415666][T20297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1888.415700][T20297] netlink_rcv_skb+0x159/0x420 [ 1888.415722][T20297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1888.415746][T20297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1888.415765][T20297] ? __asan_memcpy+0x3c/0x60 [ 1888.415796][T20297] ? netlink_deliver_tap+0x1ae/0xb50 [ 1888.415821][T20297] netlink_unicast+0x668/0x950 [ 1888.415846][T20297] ? __pfx_netlink_unicast+0x10/0x10 [ 1888.415874][T20297] netlink_sendmsg+0x9ac/0x10c0 [ 1888.415899][T20297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1888.415926][T20297] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1888.415951][T20297] ? ____sys_sendmsg+0xa99/0xc30 [ 1888.415974][T20297] ____sys_sendmsg+0xa99/0xc30 [ 1888.415995][T20297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1888.416023][T20297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1888.416058][T20297] ___sys_sendmsg+0x190/0x1e0 [ 1888.416084][T20297] ? __pfx____sys_sendmsg+0x10/0x10 [ 1888.416108][T20297] ? futex_wait+0x11e/0x370 [ 1888.416141][T20297] ? find_held_lock+0x2b/0x80 [ 1888.416176][T20297] __sys_sendmsg+0x160/0x210 [ 1888.416197][T20297] ? __pfx___sys_sendmsg+0x10/0x10 [ 1888.416230][T20297] do_syscall_64+0x123/0x7b0 [ 1888.416252][T20297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.416269][T20297] RIP: 0033:0x7fc095b9fb19 [ 1888.416284][T20297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.416300][T20297] RSP: 002b:00007fc0969e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1888.416317][T20297] RAX: ffffffffffffffda RBX: 00007fc095e26090 RCX: 00007fc095b9fb19 [ 1888.416329][T20297] RDX: 0000000020000840 RSI: 0000200000000800 RDI: 0000000000000009 [ 1888.416341][T20297] RBP: 00007fc095c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1888.416350][T20297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1888.416360][T20297] R13: 00007fc095e26128 R14: 00007fc095e26090 R15: 00007ffcf759f178 [ 1888.416384][T20297] [ 1888.529576][T20297] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1889.252053][T20304] syzkaller0: entered promiscuous mode [ 1889.252068][T20304] syzkaller0: entered allmulticast mode [ 1890.791321][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 1890.791335][ T31] audit: type=1400 audit(1794213036.924:1422): avc: denied { write } for pid=20309 comm="syz.2.3768" name="anycast6" dev="proc" ino=4026533576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1890.820007][T20301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3765'. [ 1890.865625][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3765'. [ 1891.046619][T16255] usb 2-1: USB disconnect, device number 82 [ 1891.801326][ T31] audit: type=1400 audit(1794213038.084:1423): avc: denied { write } for pid=20326 comm="syz.1.3771" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1891.801585][ T31] audit: type=1400 audit(1794213038.084:1424): avc: denied { open } for pid=20326 comm="syz.1.3771" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1892.505763][ T31] audit: type=1400 audit(1794213038.824:1425): avc: denied { write } for pid=20308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1893.663140][ T31] audit: type=1400 audit(1794213039.984:1426): avc: denied { prog_run } for pid=20340 comm="syz.0.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1893.730748][ T31] audit: type=1400 audit(1794213040.044:1427): avc: denied { read write } for pid=20340 comm="syz.0.3764" name="vbi2" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1893.754670][ T31] audit: type=1400 audit(1794213040.054:1428): avc: denied { open } for pid=20340 comm="syz.0.3764" path="/dev/vbi2" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1893.818738][ T31] audit: type=1400 audit(1794213040.134:1429): avc: denied { mounton } for pid=20340 comm="syz.0.3764" path="/1/file1" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1893.878542][ T31] audit: type=1400 audit(1794213040.194:1430): avc: denied { write } for pid=20342 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1894.415409][T20349] FAULT_INJECTION: forcing a failure. [ 1894.415409][T20349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1894.415439][T20349] CPU: 1 UID: 0 PID: 20349 Comm: syz.0.3776 Tainted: G L syzkaller #0 PREEMPT(full) [ 1894.415468][T20349] Tainted: [L]=SOFTLOCKUP [ 1894.415476][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1894.415487][T20349] Call Trace: [ 1894.415493][T20349] [ 1894.415501][T20349] dump_stack_lvl+0x100/0x190 [ 1894.415536][T20349] should_fail_ex.cold+0x5/0xa [ 1894.415565][T20349] _copy_from_user+0x2e/0xd0 [ 1894.415590][T20349] copy_mount_options+0x76/0x190 [ 1894.415612][T20349] __x64_sys_mount+0x1ab/0x310 [ 1894.415639][T20349] ? __pfx___x64_sys_mount+0x10/0x10 [ 1894.415673][T20349] do_syscall_64+0x123/0x7b0 [ 1894.415699][T20349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1894.415717][T20349] RIP: 0033:0x7f815d79fb19 [ 1894.415733][T20349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1894.415749][T20349] RSP: 002b:00007f815e716028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1894.415768][T20349] RAX: ffffffffffffffda RBX: 00007f815da25fa0 RCX: 00007f815d79fb19 [ 1894.415780][T20349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1894.415790][T20349] RBP: 00007f815e716090 R08: 0000200000000080 R09: 0000000000000000 [ 1894.415801][T20349] R10: 0000000000b0b800 R11: 0000000000000246 R12: 0000000000000001 [ 1894.415812][T20349] R13: 00007f815da26038 R14: 00007f815da25fa0 R15: 00007ffff4a15c38 [ 1894.415838][T20349] [ 1894.707421][ T31] audit: type=1400 audit(1794213041.024:1431): avc: denied { read } for pid=20352 comm="syz.1.3772" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1894.746330][T20351] jffs2: notice: (20351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1894.943511][T16193] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1895.093747][T20351] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1895.094227][T16193] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1895.096598][T16193] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.096622][T16193] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1895.096634][T16193] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1895.096647][T16193] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1895.096668][T16193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.469073][T20374] fuse: Unknown parameter 'group_id00000000000000000000' [ 1895.511907][T20375] FAULT_INJECTION: forcing a failure. [ 1895.511907][T20375] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.511949][T20375] CPU: 1 UID: 0 PID: 20375 Comm: syz.0.3778 Tainted: G L syzkaller #0 PREEMPT(full) [ 1895.511977][T20375] Tainted: [L]=SOFTLOCKUP [ 1895.511986][T20375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1895.511998][T20375] Call Trace: [ 1895.512004][T20375] [ 1895.512013][T20375] dump_stack_lvl+0x100/0x190 [ 1895.512050][T20375] should_fail_ex.cold+0x5/0xa [ 1895.512078][T20375] ? __pfx_batadv_gw_tvlv_ogm_handler_v1+0x10/0x10 [ 1895.512101][T20375] should_failslab+0xc2/0x120 [ 1895.512126][T20375] __kmalloc_cache_noprof+0x91/0x6d0 [ 1895.512156][T20375] ? batadv_tvlv_handler_register+0x10d/0x530 [ 1895.512183][T20375] ? __pfx_batadv_gw_tvlv_ogm_handler_v1+0x10/0x10 [ 1895.512205][T20375] batadv_tvlv_handler_register+0x10d/0x530 [ 1895.512229][T20375] ? __pfx_batadv_iv_init_sel_class+0x10/0x10 [ 1895.512252][T20375] batadv_gw_init+0x92/0x100 [ 1895.512273][T20375] batadv_mesh_init+0x5b6/0x8f0 [ 1895.512297][T20375] batadv_meshif_init_late+0xb26/0xe60 [ 1895.512325][T20375] ? __kasan_kmalloc+0xaa/0xb0 [ 1895.512346][T20375] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 1895.512371][T20375] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1895.512398][T20375] ? register_netdevice+0x507/0x26b0 [ 1895.512430][T20375] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 1895.512462][T20375] register_netdevice+0x680/0x26b0 [ 1895.512493][T20375] ? alloc_netdev_mqs+0x11a7/0x1540 [ 1895.512520][T20375] ? __pfx_register_netdevice+0x10/0x10 [ 1895.512553][T20375] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 1895.512578][T20375] batadv_meshif_newlink+0x8f/0xc0 [ 1895.512603][T20375] rtnl_newlink+0x1697/0x2620 [ 1895.512640][T20375] ? __pfx_rtnl_newlink+0x10/0x10 [ 1895.512665][T20375] ? avc_has_perm_noaudit+0x56/0x470 [ 1895.512690][T20375] ? find_held_lock+0x2b/0x80 [ 1895.512710][T20375] ? avc_has_perm_noaudit+0x11e/0x470 [ 1895.512732][T20375] ? avc_has_perm_noaudit+0x11e/0x470 [ 1895.512777][T20375] ? lock_acquire+0x1d1/0x380 [ 1895.512793][T20375] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1895.512808][T20375] ? find_held_lock+0x2b/0x80 [ 1895.512819][T20375] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1895.512834][T20375] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1895.512850][T20375] ? __pfx_rtnl_newlink+0x10/0x10 [ 1895.512866][T20375] rtnetlink_rcv_msg+0x95e/0xe90 [ 1895.512882][T20375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1895.512903][T20375] netlink_rcv_skb+0x159/0x420 [ 1895.512918][T20375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1895.512934][T20375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1895.512947][T20375] ? __asan_memcpy+0x3c/0x60 [ 1895.512967][T20375] ? netlink_deliver_tap+0x1ae/0xb50 [ 1895.512983][T20375] netlink_unicast+0x668/0x950 [ 1895.512999][T20375] ? __pfx_netlink_unicast+0x10/0x10 [ 1895.513017][T20375] netlink_sendmsg+0x9ac/0x10c0 [ 1895.513034][T20375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1895.513051][T20375] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1895.513068][T20375] ? ____sys_sendmsg+0xa99/0xc30 [ 1895.513083][T20375] ____sys_sendmsg+0xa99/0xc30 [ 1895.513098][T20375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1895.513113][T20375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1895.513136][T20375] ___sys_sendmsg+0x190/0x1e0 [ 1895.513153][T20375] ? __pfx____sys_sendmsg+0x10/0x10 [ 1895.513169][T20375] ? futex_wait+0x11e/0x370 [ 1895.513189][T20375] ? find_held_lock+0x2b/0x80 [ 1895.513209][T20375] __sys_sendmsg+0x160/0x210 [ 1895.513222][T20375] ? __pfx___sys_sendmsg+0x10/0x10 [ 1895.513243][T20375] do_syscall_64+0x123/0x7b0 [ 1895.513257][T20375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1895.513269][T20375] RIP: 0033:0x7f815d79fb19 [ 1895.513279][T20375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1895.513290][T20375] RSP: 002b:00007f815e6f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1895.513302][T20375] RAX: ffffffffffffffda RBX: 00007f815da26090 RCX: 00007f815d79fb19 [ 1895.513309][T20375] RDX: 0000000020000840 RSI: 0000200000000800 RDI: 0000000000000009 [ 1895.513316][T20375] RBP: 00007f815d837b70 R08: 0000000000000000 R09: 0000000000000000 [ 1895.513322][T20375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1895.513328][T20375] R13: 00007f815da26128 R14: 00007f815da26090 R15: 00007ffff4a15c38 [ 1895.513342][T20375] [ 1895.776384][T20375] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1895.983970][T16255] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1896.093509][T16193] gud 2-1:1.0: Failed to get connectors (error=-5) [ 1896.093530][T16193] gud 2-1:1.0: probe with driver gud failed with error -5 [ 1896.154430][T16255] usb 4-1: Using ep0 maxpacket: 32 [ 1896.158263][T16255] usb 4-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 1896.167566][T16255] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.167602][T16255] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1896.167649][T16255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.188804][T16255] usb 4-1: config 0 descriptor?? [ 1896.265525][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 1896.265561][ T31] audit: type=1400 audit(1794213042.584:1439): avc: denied { create } for pid=20380 comm="syz.5.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1896.277285][ T31] audit: type=1400 audit(1794213042.594:1440): avc: denied { connect } for pid=20380 comm="syz.5.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1896.331604][ T31] audit: type=1400 audit(1794213042.634:1441): avc: denied { shutdown } for pid=20380 comm="syz.5.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1896.560976][T16255] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1896.668924][ T31] audit: type=1400 audit(1794213042.984:1442): avc: denied { create } for pid=20393 comm="syz.2.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1896.691607][ T31] audit: type=1400 audit(1794213043.014:1443): avc: denied { setopt } for pid=20393 comm="syz.2.3774" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1896.718519][T16193] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1896.758290][ T31] audit: type=1400 audit(1794213043.074:1444): avc: denied { read write } for pid=20393 comm="syz.2.3774" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1896.758506][ T31] audit: type=1400 audit(1794213043.074:1445): avc: denied { open } for pid=20393 comm="syz.2.3774" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1896.778427][T20394] FAULT_INJECTION: forcing a failure. [ 1896.778427][T20394] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.778452][T20394] CPU: 0 UID: 0 PID: 20394 Comm: syz.2.3774 Tainted: G L syzkaller #0 PREEMPT(full) [ 1896.778476][T20394] Tainted: [L]=SOFTLOCKUP [ 1896.778483][T20394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1896.778493][T20394] Call Trace: [ 1896.778500][T20394] [ 1896.778507][T20394] dump_stack_lvl+0x100/0x190 [ 1896.778538][T20394] should_fail_ex.cold+0x5/0xa [ 1896.778562][T20394] should_failslab+0xc2/0x120 [ 1896.778583][T20394] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1896.778608][T20394] ? __kernfs_new_node+0xd2/0xa10 [ 1896.778630][T20394] __kernfs_new_node+0xd2/0xa10 [ 1896.778650][T20394] ? __pfx___kernfs_new_node+0x10/0x10 [ 1896.778669][T20394] ? lock_acquire+0x1d1/0x380 [ 1896.778690][T20394] ? kernfs_root+0x23/0x2a0 [ 1896.778714][T20394] ? find_held_lock+0x2b/0x80 [ 1896.778730][T20394] ? kernfs_root+0xee/0x2a0 [ 1896.778752][T20394] ? kernfs_root+0xee/0x2a0 [ 1896.778781][T20394] kernfs_new_node+0x194/0x200 [ 1896.778800][T20394] ? __pfx_kernfs_new_node+0x10/0x10 [ 1896.778818][T20394] ? kernfs_add_one+0x213/0xb40 [ 1896.778839][T20394] __kernfs_create_file+0x53/0x350 [ 1896.778862][T20394] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1896.778890][T20394] internal_create_group+0x593/0xfb0 [ 1896.778923][T20394] ? __pfx_internal_create_group+0x10/0x10 [ 1896.778955][T20394] ? kernfs_create_link+0x1f1/0x280 [ 1896.778979][T20394] internal_create_groups+0x9d/0x150 [ 1896.779005][T20394] device_add+0x7c8/0x1970 [ 1896.779031][T20394] ? __pfx_device_add+0x10/0x10 [ 1896.779053][T20394] ? lockdep_init_map_type+0x5c/0x250 [ 1896.779076][T20394] ? __init_waitqueue_head+0xca/0x150 [ 1896.779105][T20394] netdev_register_kobject+0x1df/0x410 [ 1896.779127][T20394] register_netdevice+0x1313/0x26b0 [ 1896.779154][T20394] ? __pfx_register_netdevice+0x10/0x10 [ 1896.779175][T20394] ? net_generic+0xea/0x2a0 [ 1896.779197][T20394] ppp_dev_configure+0x8e6/0xbc0 [ 1896.779218][T20394] ppp_ioctl+0x9ef/0x27b0 [ 1896.779234][T20394] ? __fget_files+0x34/0x3d0 [ 1896.779257][T20394] ? __pfx_ppp_ioctl+0x10/0x10 [ 1896.779281][T20394] ? selinux_file_ioctl+0x1e7/0x290 [ 1896.779299][T20394] ? __pfx_ppp_ioctl+0x10/0x10 [ 1896.779316][T20394] __x64_sys_ioctl+0x18e/0x210 [ 1896.779335][T20394] do_syscall_64+0x123/0x7b0 [ 1896.779357][T20394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.779374][T20394] RIP: 0033:0x7fc095b9fb19 [ 1896.779389][T20394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1896.779405][T20394] RSP: 002b:00007fc096a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1896.779421][T20394] RAX: ffffffffffffffda RBX: 00007fc095e25fa0 RCX: 00007fc095b9fb19 [ 1896.779444][T20394] RDX: 0000200000000300 RSI: 00000000c004743e RDI: 0000000000000008 [ 1896.779454][T20394] RBP: 00007fc095c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1896.779464][T20394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1896.779473][T20394] R13: 00007fc095e26038 R14: 00007fc095e25fa0 R15: 00007ffcf759f178 [ 1896.779497][T20394] [ 1896.786218][ T31] audit: type=1400 audit(1794213043.084:1446): avc: denied { ioctl } for pid=20393 comm="syz.2.3774" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1896.989383][T16193] usb 1-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1897.004165][T16193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1897.004193][T16193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1897.004212][T16193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1897.004233][T16193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1897.006006][T16193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.006027][T16193] usb 1-1: Product: syz [ 1897.006036][T16193] usb 1-1: Manufacturer: syz [ 1897.006044][T16193] usb 1-1: SerialNumber: syz [ 1897.008617][T16193] usb 1-1: config 0 descriptor?? [ 1897.265556][T16193] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1897.369290][ T31] audit: type=1400 audit(1794213043.684:1447): avc: denied { ioctl } for pid=20400 comm="syz.2.3783" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64032 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1897.369337][ T31] audit: type=1400 audit(1794213043.684:1448): avc: denied { create } for pid=20400 comm="syz.2.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1897.503309][T20383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.505165][T20383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.513736][T20383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.514026][T20383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.739948][T20405] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 1898.382032][ T5736] usb 1-1: USB disconnect, device number 72 [ 1899.450657][ T1578] usb 2-1: USB disconnect, device number 83 [ 1899.531136][ T5729] usb 4-1: USB disconnect, device number 68 [ 1899.781528][T20416] fuse: Bad value for 'user_id' [ 1899.781547][T20416] fuse: Bad value for 'user_id' [ 1900.951577][ T5729] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1901.156039][ T5729] usb 4-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 1901.161589][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.161604][ T5729] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1901.161621][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.182862][ T5729] usb 4-1: config 0 descriptor?? [ 1901.251449][T20435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3793'. [ 1901.941506][ T5712] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1902.286168][ T5712] usb 6-1: New USB device found: idVendor=04d8, idProduct=f002, bcdDevice=0.00 [ 1902.286956][ T5712] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.286974][ T5712] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1902.286988][ T5712] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1902.287005][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.288099][ T5712] usb 6-1: config 0 descriptor?? [ 1903.253030][ T5729] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1903.268888][ T5712] hid-picolcd 0003:04D8:F002.003F: No report with id 0xf4 found [ 1903.268902][ T5712] hid-picolcd 0003:04D8:F002.003F: No report with id 0xf3 found [ 1903.401373][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 1903.405894][ T5729] usb 3-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1903.428243][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.428268][ T5729] usb 3-1: config 0 has no interfaces? [ 1903.488872][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1903.488907][ T31] audit: type=1400 audit(1794213049.804:1472): avc: denied { read } for pid=20446 comm="syz.0.3798" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=63287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1903.527744][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.527815][ T5729] usb 3-1: Product: syz [ 1903.527876][ T5729] usb 3-1: Manufacturer: syz [ 1903.527916][ T5729] usb 3-1: SerialNumber: syz [ 1903.573752][ T5729] usb 3-1: config 0 descriptor?? [ 1903.826254][ C1] hid-picolcd 0003:04D8:F002.003F: invalid size value (89) for picolcd raw event (0) [ 1903.898844][ T5809] usb 4-1: USB disconnect, device number 69 [ 1904.004666][ T31] audit: type=1400 audit(1794213050.324:1473): avc: denied { read } for pid=20450 comm="syz.3.3799" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1904.027966][ T31] audit: type=1400 audit(1794213050.354:1474): avc: denied { open } for pid=20450 comm="syz.3.3799" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1904.071559][ T31] audit: type=1400 audit(1794213050.394:1475): avc: denied { ioctl } for pid=20450 comm="syz.3.3799" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1904.107585][ T31] audit: type=1400 audit(1794213050.404:1476): avc: denied { write } for pid=20428 comm="syz.5.3786" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1904.112554][ T5809] usb 6-1: USB disconnect, device number 73 [ 1904.242686][ T31] audit: type=1400 audit(1794213050.564:1477): avc: denied { ioctl } for pid=20450 comm="syz.3.3799" path="socket:[64087]" dev="sockfs" ino=64087 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1904.455722][ T31] audit: type=1400 audit(1794213050.774:1478): avc: denied { node_bind } for pid=20440 comm="syz.2.3795" saddr=127.0.0.1 src=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1904.582311][ T5729] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1904.781296][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 1904.782675][ T5729] usb 1-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 1904.785745][ T5729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.785783][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1904.785818][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.788688][ T5729] usb 1-1: config 0 descriptor?? [ 1904.852202][ T5729] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1906.001649][ T5736] usb 3-1: USB disconnect, device number 94 [ 1906.393115][ T31] audit: type=1400 audit(1794213052.714:1479): avc: denied { read write } for pid=20467 comm="syz.1.3797" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1906.419757][ T31] audit: type=1400 audit(1794213052.734:1480): avc: denied { open } for pid=20467 comm="syz.1.3797" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1906.453870][ T31] audit: type=1400 audit(1794213052.764:1481): avc: denied { ioctl } for pid=20467 comm="syz.1.3797" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x405c5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1906.460284][T20469] input input127: cannot allocate more than FF_MAX_EFFECTS effects [ 1906.909728][ T5736] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1906.909823][T16350] usb 1-1: USB disconnect, device number 73 [ 1907.269800][ T5736] usb 3-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1907.329750][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1907.329782][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1907.329803][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1907.329826][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1907.344221][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.344244][ T5736] usb 3-1: Product: syz [ 1907.344257][ T5736] usb 3-1: Manufacturer: syz [ 1907.344269][ T5736] usb 3-1: SerialNumber: syz [ 1907.399604][ T5736] usb 3-1: config 0 descriptor?? [ 1907.610614][ T5736] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1907.813551][T20466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.814401][T20466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.815472][T20466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.815795][T20466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.957858][T20466] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 1908.416546][ T5736] usb 3-1: USB disconnect, device number 95 [ 1909.078146][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.078198][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1909.222806][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1909.222823][ T31] audit: type=1400 audit(1794213055.544:1490): avc: denied { map } for pid=20485 comm="syz.5.3803" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1909.254658][ T31] audit: type=1400 audit(1794213055.574:1491): avc: denied { write } for pid=20485 comm="syz.5.3803" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1909.259679][T20486] FAULT_INJECTION: forcing a failure. [ 1909.259679][T20486] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.259707][T20486] CPU: 1 UID: 0 PID: 20486 Comm: syz.5.3803 Tainted: G L syzkaller #0 PREEMPT(full) [ 1909.259732][T20486] Tainted: [L]=SOFTLOCKUP [ 1909.259739][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1909.259750][T20486] Call Trace: [ 1909.259757][T20486] [ 1909.259764][T20486] dump_stack_lvl+0x100/0x190 [ 1909.259799][T20486] should_fail_ex.cold+0x5/0xa [ 1909.259828][T20486] should_failslab+0xc2/0x120 [ 1909.259850][T20486] __kmalloc_cache_noprof+0x91/0x6d0 [ 1909.259875][T20486] ? io_uring_setup.cold+0x6c/0x1c7e [ 1909.259901][T20486] io_uring_setup.cold+0x6c/0x1c7e [ 1909.259923][T20486] ? lock_acquire+0x1d1/0x380 [ 1909.259947][T20486] ? avc_has_perm_noaudit+0x56/0x470 [ 1909.259970][T20486] ? __pfx_io_uring_setup+0x10/0x10 [ 1909.259992][T20486] ? find_held_lock+0x2b/0x80 [ 1909.260011][T20486] ? avc_has_perm_noaudit+0x11e/0x470 [ 1909.260032][T20486] ? avc_has_perm_noaudit+0x11e/0x470 [ 1909.260071][T20486] ? ksys_write+0x1ac/0x250 [ 1909.260091][T20486] ? __pfx_ksys_write+0x10/0x10 [ 1909.260116][T20486] __x64_sys_io_uring_setup+0xc2/0x170 [ 1909.260141][T20486] do_syscall_64+0x123/0x7b0 [ 1909.260167][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.260185][T20486] RIP: 0033:0x7f76a0b9fb19 [ 1909.260201][T20486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1909.260218][T20486] RSP: 002b:00007f76a1a3dee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1909.260236][T20486] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f76a0b9fb19 [ 1909.260248][T20486] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000a22 [ 1909.260259][T20486] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 1909.260270][T20486] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1909.260282][T20486] R13: 0000200000000890 R14: 00007f76a1a3dfd8 R15: 0000000000000000 [ 1909.260314][T20486] [ 1909.315675][ T31] audit: type=1400 audit(1794213055.634:1492): avc: denied { map } for pid=20485 comm="syz.5.3803" path="socket:[63414]" dev="sockfs" ino=63414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1909.891487][T16350] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1910.069687][ T31] audit: type=1400 audit(1794213056.384:1493): avc: denied { create } for pid=20494 comm="syz.1.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1910.288067][T16350] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1910.298755][T16350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.298797][T16350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.325891][T16350] usb 6-1: config 0 descriptor?? [ 1910.452115][ T31] audit: type=1400 audit(1794213056.774:1494): avc: denied { write } for pid=20494 comm="syz.1.3812" path="socket:[64129]" dev="sockfs" ino=64129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1910.490527][ T31] audit: type=1400 audit(1794213056.774:1495): avc: denied { bind } for pid=20494 comm="syz.1.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1910.580371][ T31] audit: type=1326 audit(1794213056.894:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a0b9fb19 code=0x0 [ 1910.646399][T16350] usbhid 6-1:0.0: can't add hid device: -71 [ 1910.646492][T16350] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1910.654402][T16350] usb 6-1: USB disconnect, device number 74 [ 1910.867115][ T31] audit: type=1400 audit(1794213057.184:1497): avc: denied { read write } for pid=20504 comm="syz.1.3815" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1910.868692][ T31] audit: type=1400 audit(1794213057.184:1498): avc: denied { open } for pid=20504 comm="syz.1.3815" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1911.004937][ T31] audit: type=1400 audit(1794213057.324:1499): avc: denied { create } for pid=20504 comm="syz.1.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1911.101814][T16350] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1911.277444][T16350] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1911.279868][T16350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.279903][T16350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.294322][T16350] usb 6-1: config 0 descriptor?? [ 1911.348592][T20511] FAULT_INJECTION: forcing a failure. [ 1911.348592][T20511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1911.348641][T20511] CPU: 1 UID: 0 PID: 20511 Comm: syz.1.3816 Tainted: G L syzkaller #0 PREEMPT(full) [ 1911.348666][T20511] Tainted: [L]=SOFTLOCKUP [ 1911.348673][T20511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1911.348683][T20511] Call Trace: [ 1911.348689][T20511] [ 1911.348697][T20511] dump_stack_lvl+0x100/0x190 [ 1911.348731][T20511] should_fail_ex.cold+0x5/0xa [ 1911.348763][T20511] _copy_from_user+0x2e/0xd0 [ 1911.348788][T20511] sctp_getsockopt+0x2ab5/0x7160 [ 1911.348818][T20511] ? avc_has_perm_noaudit+0x56/0x470 [ 1911.348842][T20511] ? find_held_lock+0x2b/0x80 [ 1911.348861][T20511] ? avc_has_perm_noaudit+0x11e/0x470 [ 1911.348883][T20511] ? avc_has_perm_noaudit+0x11e/0x470 [ 1911.348906][T20511] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1911.348936][T20511] ? avc_has_perm+0x135/0x1e0 [ 1911.348959][T20511] ? __pfx_avc_has_perm+0x10/0x10 [ 1911.348978][T20511] ? __might_fault+0xc5/0x140 [ 1911.349005][T20511] ? lock_acquire+0x1d1/0x380 [ 1911.349030][T20511] ? __might_fault+0xc5/0x140 [ 1911.349052][T20511] ? find_held_lock+0x2b/0x80 [ 1911.349071][T20511] ? __might_fault+0xc5/0x140 [ 1911.349092][T20511] ? __might_fault+0xc5/0x140 [ 1911.349122][T20511] ? _copy_from_user+0x59/0xd0 [ 1911.349144][T20511] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 1911.349174][T20511] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1911.349207][T20511] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1911.349234][T20511] do_sock_getsockopt+0x415/0x570 [ 1911.349258][T20511] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1911.349285][T20511] ? __fget_files+0x34/0x3d0 [ 1911.349308][T20511] ? find_held_lock+0x2b/0x80 [ 1911.349334][T20511] ? __fget_files+0x21f/0x3d0 [ 1911.349363][T20511] __sys_getsockopt+0x148/0x260 [ 1911.349393][T20511] ? __x64_sys_getsockopt+0xbd/0x160 [ 1911.349413][T20511] __x64_sys_getsockopt+0xbd/0x160 [ 1911.349434][T20511] ? do_syscall_64+0xae/0x7b0 [ 1911.349455][T20511] ? lockdep_hardirqs_on+0x7d/0x110 [ 1911.349475][T20511] do_syscall_64+0x123/0x7b0 [ 1911.349499][T20511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.349518][T20511] RIP: 0033:0x7f9901d9fb19 [ 1911.349534][T20511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1911.349551][T20511] RSP: 002b:00007f9902c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1911.349570][T20511] RAX: ffffffffffffffda RBX: 00007f9902026090 RCX: 00007f9901d9fb19 [ 1911.349583][T20511] RDX: 0000000000000082 RSI: 0000000000000084 RDI: 0000000000000003 [ 1911.349594][T20511] RBP: 00007f9902c3b090 R08: 0000200000001800 R09: 0000000000000000 [ 1911.349606][T20511] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 1911.349617][T20511] R13: 00007f9902026128 R14: 00007f9902026090 R15: 00007ffe195fec88 [ 1911.349644][T20511] [ 1911.531546][ T5729] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1911.701776][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 1911.702432][ T5729] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1911.711574][ T5729] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1911.711616][ T5729] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1911.711635][ T5729] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1911.721385][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.721408][ T5729] usb 3-1: Product: syz [ 1911.721420][ T5729] usb 3-1: Manufacturer: syz [ 1911.721433][ T5729] usb 3-1: SerialNumber: syz [ 1911.750658][ T5729] usb 3-1: config 0 descriptor?? [ 1911.794105][T16350] usbhid 6-1:0.0: can't add hid device: -71 [ 1911.794192][T16350] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1911.809334][T16350] usb 6-1: USB disconnect, device number 75 [ 1912.941813][ T5729] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 1912.941845][ T5729] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 1913.144896][ T5729] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1913.277816][T20533] overlayfs: missing 'lowerdir' [ 1913.280505][T20533] CacheFiles: Failed to register: -95 [ 1913.306549][T20533] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10632] was attempted by ""[20533] [ 1913.313536][ T5729] usb 2-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1913.330739][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1913.330761][ T5729] usb 2-1: Product: syz [ 1913.330802][ T5729] usb 2-1: SerialNumber: syz [ 1913.348722][ T5729] usb 2-1: config 0 descriptor?? [ 1913.455186][T20535] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3821'. [ 1913.552206][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.553073][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.557637][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.557961][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.558676][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.568850][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.569580][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.569894][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.579071][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.579438][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.667568][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.668286][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.668392][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.668486][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.675344][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.675511][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.698328][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.698517][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.698673][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.698841][T20537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20537 comm=syz.5.3821 [ 1913.895782][T20544] kAFS: unparsable volume name [ 1914.400148][ T5736] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1915.309886][ T5712] usb 3-1: USB disconnect, device number 96 [ 1915.364309][ T5729] usb 2-1: USB disconnect, device number 84 [ 1915.380081][ T5736] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1915.381728][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.381769][ T5736] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1915.381787][ T5736] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1915.381806][ T5736] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1915.381837][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.558519][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1915.558537][ T31] audit: type=1400 audit(1794213061.874:1518): avc: denied { ioctl } for pid=20556 comm="syz.1.3826" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x802c542a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1917.201432][T16350] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1917.258116][ T5736] usb 1-1: USB disconnect, device number 74 [ 1917.361573][T16350] usb 6-1: Using ep0 maxpacket: 32 [ 1917.362157][T16350] usb 6-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1917.364970][T16350] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.364992][T16350] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1917.368900][T16350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.368923][T16350] usb 6-1: Product: syz [ 1917.368937][T16350] usb 6-1: Manufacturer: syz [ 1917.368951][T16350] usb 6-1: SerialNumber: syz [ 1917.434423][T16350] usb 6-1: config 0 descriptor?? [ 1917.445748][ T5729] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1918.328905][ T5712] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1918.411757][ T5729] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1918.412734][ T5729] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1918.412777][ T5729] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1918.412790][ T5729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1918.446750][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1918.446768][ T5729] usb 2-1: Product: syz [ 1918.446776][ T5729] usb 2-1: Manufacturer: syz [ 1918.446784][ T5729] usb 2-1: SerialNumber: syz [ 1918.479341][ T5729] usb 2-1: config 0 descriptor?? [ 1918.486979][ T5729] hub 2-1:0.0: bad descriptor, ignoring hub [ 1918.486999][ T5729] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1918.491273][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 1918.498374][ T5729] usb 2-1: selecting invalid altsetting 0 [ 1918.522070][ T5712] usb 3-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1918.523110][ T5712] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1918.523129][ T5712] usb 3-1: config 0 has no interface number 0 [ 1918.674699][ T5729] usb 2-1: USB disconnect, device number 85 [ 1918.720553][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.720579][ T5712] usb 3-1: Product: syz [ 1918.720593][ T5712] usb 3-1: Manufacturer: syz [ 1918.770289][ T5712] usb 3-1: config 0 descriptor?? [ 1918.770643][ T5712] usb 3-1: can't set config #0, error -71 [ 1918.786237][T20384] udevd[20384]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1918.808772][ T5712] usb 3-1: USB disconnect, device number 97 [ 1919.676299][T20579] overlayfs: missing 'lowerdir' [ 1919.682425][ T5712] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1919.693727][T20579] CacheFiles: Failed to register: -95 [ 1919.715598][T20579] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[17933] was attempted by ""[20579] [ 1919.831738][ T5712] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1919.832616][ T5712] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.832653][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1919.832672][ T5712] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1919.832698][ T5712] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1919.832733][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.892554][ T5745] usb 6-1: USB disconnect, device number 76 [ 1920.922778][T17597] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1922.055432][T17597] usb 2-1: New USB device found: idVendor=04d8, idProduct=f002, bcdDevice=0.00 [ 1922.067364][T17597] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1922.067397][T17597] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1922.067420][T17597] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1922.067446][T17597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.095128][T17597] usb 2-1: config 0 descriptor?? [ 1922.189533][T20591] syz.2.3836 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1922.189569][T20591] CPU: 0 UID: 0 PID: 20591 Comm: syz.2.3836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1922.189596][T20591] Tainted: [L]=SOFTLOCKUP [ 1922.189603][T20591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1922.189614][T20591] Call Trace: [ 1922.189621][T20591] [ 1922.189630][T20591] dump_stack_lvl+0x100/0x190 [ 1922.189666][T20591] dump_header+0xfb/0x606 [ 1922.189688][T20591] oom_kill_process.cold+0xd/0x380 [ 1922.189711][T20591] out_of_memory+0x343/0x14c0 [ 1922.189744][T20591] ? __pfx_out_of_memory+0x10/0x10 [ 1922.189778][T20591] mem_cgroup_out_of_memory+0xc6/0x130 [ 1922.189798][T20591] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1922.189815][T20591] ? find_held_lock+0x2b/0x80 [ 1922.189839][T20591] ? do_raw_spin_unlock+0x145/0x1e0 [ 1922.189858][T20591] ? _raw_spin_unlock+0x28/0x50 [ 1922.189880][T20591] try_charge_memcg+0x779/0xf30 [ 1922.189911][T20591] ? __pfx_try_charge_memcg+0x10/0x10 [ 1922.189934][T20591] ? find_held_lock+0x2b/0x80 [ 1922.189953][T20591] ? rcu_read_unlock+0x17/0x60 [ 1922.189975][T20591] ? rcu_read_unlock+0x17/0x60 [ 1922.190008][T20591] obj_cgroup_charge_pages+0x2b/0x1f0 [ 1922.190034][T20591] __memcg_slab_post_alloc_hook+0x476/0x10b0 [ 1922.190075][T20591] ? kasan_save_track+0x14/0x30 [ 1922.190096][T20591] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 1922.190124][T20591] ? alloc_empty_file+0x5b/0x1c0 [ 1922.190154][T20591] alloc_empty_file+0x5b/0x1c0 [ 1922.190187][T20591] path_openat+0xd6/0x23f0 [ 1922.190216][T20591] ? __pfx_path_openat+0x10/0x10 [ 1922.190246][T20591] do_file_open+0x20e/0x430 [ 1922.190271][T20591] ? __pfx_do_file_open+0x10/0x10 [ 1922.190314][T20591] ? _raw_spin_unlock+0x28/0x50 [ 1922.190331][T20591] ? alloc_fd+0x471/0x7a0 [ 1922.190364][T20591] do_sys_openat2+0x163/0x1d0 [ 1922.190388][T20591] ? __pfx_do_sys_openat2+0x10/0x10 [ 1922.190414][T20591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1922.190444][T20591] __x64_sys_openat+0x12d/0x210 [ 1922.190469][T20591] ? __pfx___x64_sys_openat+0x10/0x10 [ 1922.190505][T20591] do_syscall_64+0x123/0x7b0 [ 1922.190527][T20591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.190546][T20591] RIP: 0033:0x7fc095b6034e [ 1922.190562][T20591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1922.190579][T20591] RSP: 002b:00007fc096a06f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1922.190597][T20591] RAX: ffffffffffffffda RBX: 00007fc096a076c0 RCX: 00007fc095b6034e [ 1922.190609][T20591] RDX: 0000000000000002 RSI: 00007fc095c3746a RDI: ffffffffffffff9c [ 1922.190621][T20591] RBP: 00007fc095c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1922.190631][T20591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1922.190642][T20591] R13: 00007fc095e26038 R14: 00007fc095e25fa0 R15: 00007ffcf759f178 [ 1922.190667][T20591] [ 1922.207428][T20591] memory: usage 0kB, limit 0kB, failcnt 55 [ 1922.207443][T20591] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1922.207454][T20591] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1922.207463][T20591] Memory cgroup stats for /syz2/test: [ 1922.207570][T20591] cache 0 [ 1922.207578][T20591] rss 0 [ 1922.207583][T20591] rss_huge 0 [ 1922.207588][T20591] shmem 0 [ 1922.207594][T20591] mapped_file 0 [ 1922.207599][T20591] dirty 0 [ 1922.207605][T20591] writeback 0 [ 1922.207610][T20591] workingset_refault_anon 0 [ 1922.207616][T20591] workingset_refault_file 0 [ 1922.207622][T20591] swap 0 [ 1922.207628][T20591] swapcached 0 [ 1922.207633][T20591] pgpgin 0 [ 1922.207639][T20591] pgpgout 0 [ 1922.207644][T20591] pgfault 0 [ 1922.207650][T20591] pgmajfault 0 [ 1922.207655][T20591] inactive_anon 0 [ 1922.207661][T20591] active_anon 0 [ 1922.207667][T20591] inactive_file 0 [ 1922.207672][T20591] active_file 0 [ 1922.207678][T20591] unevictable 0 [ 1922.207699][T20591] hierarchical_memory_limit 0 [ 1922.207706][T20591] hierarchical_memsw_limit 9223372036854771712 [ 1922.207713][T20591] total_cache 0 [ 1922.207718][T20591] total_rss 0 [ 1922.207724][T20591] total_rss_huge 0 [ 1922.207729][T20591] total_shmem 0 [ 1922.207735][T20591] total_mapped_file 0 [ 1922.207741][T20591] total_dirty 0 [ 1922.207746][T20591] total_writeback 0 [ 1922.207752][T20591] total_workingset_refault_anon 0 [ 1922.207758][T20591] total_workingset_refault_file 0 [ 1922.207764][T20591] total_swap 0 [ 1922.207770][T20591] total_swapcached 0 [ 1922.207775][T20591] total_pgpgin 0 [ 1922.207781][T20591] total_pgpgout 0 [ 1922.207786][T20591] total_pgfault 0 [ 1922.207792][T20591] total_pgmajfault 0 [ 1922.207798][T20591] total_inactive_anon 0 [ 1922.207804][T20591] total_active_anon 0 [ 1922.207810][T20591] total_inactive_file 0 [ 1922.207816][T20591] total_active_file 0 [ 1922.207838][T20591] total_unevictable 0 [ 1922.207844][T20591] anon_cost 0 [ 1922.207850][T20591] file_cost 0 [ 1922.207856][T20591] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.3836,pid=20590,uid=0 [ 1922.208872][T20591] Memory cgroup out of memory: Killed process 20590 (syz.2.3836) total-vm:98444kB, anon-rss:1368kB, file-rss:21648kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1922.546364][ T31] audit: type=1400 audit(1794213068.864:1519): avc: denied { sqpoll } for pid=20581 comm="syz.1.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1922.753033][T17597] hid-picolcd 0003:04D8:F002.0040: No report with id 0xf4 found [ 1922.753078][T17597] hid-picolcd 0003:04D8:F002.0040: No report with id 0xf3 found [ 1922.777612][ T5712] gud 4-1:1.0: Failed to get connectors (error=-5) [ 1922.777641][ T5712] gud 4-1:1.0: probe with driver gud failed with error -5 [ 1922.787472][ C0] hid-picolcd 0003:04D8:F002.0040: invalid size value (89) for picolcd raw event (0) [ 1922.804180][ T5729] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1922.971859][ T5729] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1922.978554][ T5729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.978596][ T5729] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1922.978617][ T5729] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1922.978637][ T5729] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1922.978672][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.004783][ T5712] usb 2-1: USB disconnect, device number 86 [ 1924.929460][ T5729] gud 3-1:1.0: Failed to get connectors (error=-5) [ 1924.929491][ T5729] gud 3-1:1.0: probe with driver gud failed with error -5 [ 1924.967493][ T5729] usb 4-1: USB disconnect, device number 70 [ 1925.077416][T20607] jffs2: notice: (20607) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1925.096413][ T31] audit: type=1400 audit(1794213071.414:1520): avc: denied { read write } for pid=20610 comm="syz.1.3843" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1925.112536][ T31] audit: type=1400 audit(1794213071.414:1521): avc: denied { open } for pid=20610 comm="syz.1.3843" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1925.115489][ T31] audit: type=1400 audit(1794213071.414:1522): avc: denied { write } for pid=20606 comm="syz.0.3841" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1925.211074][T20613] input input128: cannot allocate more than FF_MAX_EFFECTS effects [ 1925.671398][T20607] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1927.102608][T16350] usb 3-1: USB disconnect, device number 98 [ 1927.171320][T17597] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1927.334862][T17597] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1927.337229][T17597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1927.337246][T17597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1927.337258][T17597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1927.337272][T17597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1927.350844][T17597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.350860][T17597] usb 2-1: Product: syz [ 1927.350868][T17597] usb 2-1: Manufacturer: syz [ 1927.350876][T17597] usb 2-1: SerialNumber: syz [ 1927.421705][T17597] usb 2-1: config 0 descriptor?? [ 1927.665301][T17597] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1927.880680][T20619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.881036][T20619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.914074][T20619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.914282][T20619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.040028][T20619] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 1928.482807][ T5745] usb 2-1: USB disconnect, device number 87 [ 1928.790412][T20633] jffs2: notice: (20633) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1928.817583][ T31] audit: type=1400 audit(1794213075.114:1523): avc: denied { write } for pid=20632 comm="syz.5.3840" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1928.883277][T20633] FAULT_INJECTION: forcing a failure. [ 1928.883277][T20633] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.883309][T20633] CPU: 0 UID: 0 PID: 20633 Comm: syz.5.3840 Tainted: G L syzkaller #0 PREEMPT(full) [ 1928.883336][T20633] Tainted: [L]=SOFTLOCKUP [ 1928.883344][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1928.883356][T20633] Call Trace: [ 1928.883364][T20633] [ 1928.883372][T20633] dump_stack_lvl+0x100/0x190 [ 1928.883411][T20633] should_fail_ex.cold+0x5/0xa [ 1928.883443][T20633] should_failslab+0xc2/0x120 [ 1928.883468][T20633] __kmalloc_noprof+0xfc/0x840 [ 1928.883499][T20633] ? __memcg_list_lru_alloc+0x429/0x6a0 [ 1928.883525][T20633] __memcg_list_lru_alloc+0x429/0x6a0 [ 1928.883545][T20633] ? xa_load+0x149/0x2c0 [ 1928.883578][T20633] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 1928.883613][T20633] ? rcu_read_unlock+0x17/0x60 [ 1928.883646][T20633] memcg_list_lru_alloc+0xdc/0x110 [ 1928.883671][T20633] __memcg_slab_post_alloc_hook+0x277/0x10b0 [ 1928.883712][T20633] ? kasan_save_track+0x14/0x30 [ 1928.883735][T20633] kmem_cache_alloc_lru_noprof+0x4f1/0x6a0 [ 1928.883766][T20633] ? __d_alloc+0x34/0xad0 [ 1928.883797][T20633] __d_alloc+0x34/0xad0 [ 1928.883821][T20633] ? set_nlink+0xb4/0x190 [ 1928.883850][T20633] d_make_root+0x3e/0x90 [ 1928.883874][T20633] proc_fill_super+0x58c/0x880 [ 1928.883897][T20633] ? __pfx_proc_fill_super+0x10/0x10 [ 1928.883917][T20633] get_tree_nodev+0xe3/0x190 [ 1928.883938][T20633] vfs_get_tree+0x92/0x320 [ 1928.883963][T20633] path_mount+0x7d0/0x2850 [ 1928.883994][T20633] ? __pfx_path_mount+0x10/0x10 [ 1928.884017][T20633] ? lockdep_hardirqs_on+0x7d/0x110 [ 1928.884033][T20633] ? putname+0xb1/0x110 [ 1928.884046][T20633] ? kmem_cache_free+0x127/0x6c0 [ 1928.884065][T20633] ? __x64_sys_mount+0x293/0x310 [ 1928.884081][T20633] __x64_sys_mount+0x293/0x310 [ 1928.884099][T20633] ? __pfx___x64_sys_mount+0x10/0x10 [ 1928.884121][T20633] do_syscall_64+0x123/0x7b0 [ 1928.884135][T20633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.884146][T20633] RIP: 0033:0x7f76a0b9fb19 [ 1928.884157][T20633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1928.884167][T20633] RSP: 002b:00007f76a1a3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1928.884179][T20633] RAX: ffffffffffffffda RBX: 00007f76a0e25fa0 RCX: 00007f76a0b9fb19 [ 1928.884186][T20633] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 1928.884193][T20633] RBP: 00007f76a0c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1928.884199][T20633] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 1928.884206][T20633] R13: 00007f76a0e26038 R14: 00007f76a0e25fa0 R15: 00007ffda764e0d8 [ 1928.884221][T20633] [ 1928.890152][T20633] proc_fill_super: allocate dentry failed [ 1929.025359][T20633] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1929.226046][ T31] audit: type=1400 audit(1794213075.544:1524): avc: denied { mount } for pid=20625 comm="syz.2.3848" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1929.230802][ T31] audit: type=1400 audit(1794213075.544:1525): avc: denied { write } for pid=20625 comm="syz.2.3848" name="sda" dev="devtmpfs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1930.488102][ T5745] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1930.571967][ T31] audit: type=1400 audit(1794213076.884:1526): avc: denied { unmount } for pid=16925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1930.661529][ T5745] usb 6-1: Using ep0 maxpacket: 32 [ 1930.662409][ T5745] usb 6-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1930.663351][ T5745] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1930.663374][ T5745] usb 6-1: config 0 has no interface number 0 [ 1930.664937][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.664957][ T5745] usb 6-1: Product: syz [ 1930.664969][ T5745] usb 6-1: Manufacturer: syz [ 1930.664981][ T5745] usb 6-1: SerialNumber: syz [ 1930.750623][T20648] input input129: cannot allocate more than FF_MAX_EFFECTS effects [ 1930.766735][ T5745] usb 6-1: config 0 descriptor?? [ 1931.816351][ T5745] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1931.816377][ T5745] usb 6-1: selecting invalid altsetting 1 [ 1931.816393][ T5745] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1932.065551][T20650] FAULT_INJECTION: forcing a failure. [ 1932.065551][T20650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1932.065635][T20650] CPU: 1 UID: 0 PID: 20650 Comm: syz.2.3853 Tainted: G L syzkaller #0 PREEMPT(full) [ 1932.065660][T20650] Tainted: [L]=SOFTLOCKUP [ 1932.065667][T20650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1932.065679][T20650] Call Trace: [ 1932.065686][T20650] [ 1932.065694][T20650] dump_stack_lvl+0x100/0x190 [ 1932.065728][T20650] should_fail_ex.cold+0x5/0xa [ 1932.065757][T20650] strncpy_from_user+0x3b/0x2d0 [ 1932.065788][T20650] do_getname+0x78/0x390 [ 1932.065818][T20650] __x64_sys_execve+0x76/0xd0 [ 1932.065840][T20650] do_syscall_64+0x123/0x7b0 [ 1932.065867][T20650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.065887][T20650] RIP: 0033:0x7fc095b9fb19 [ 1932.065902][T20650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1932.065920][T20650] RSP: 002b:00007fc096a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1932.065938][T20650] RAX: ffffffffffffffda RBX: 00007fc095e25fa0 RCX: 00007fc095b9fb19 [ 1932.065951][T20650] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000200000000040 [ 1932.065963][T20650] RBP: 00007fc096a07090 R08: 0000000000000000 R09: 0000000000000000 [ 1932.065974][T20650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1932.065985][T20650] R13: 00007fc095e26038 R14: 00007fc095e25fa0 R15: 00007ffcf759f178 [ 1932.066011][T20650] [ 1932.083711][ T5745] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1932.083955][ T5745] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1932.083990][ T5745] usb 6-1: media controller created [ 1932.862588][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1932.891611][ T5745] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1932.891656][ T5745] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1932.891979][ T5745] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1932.921318][ T5745] usb 6-1: USB disconnect, device number 77 [ 1934.121304][T20666] fuse: Bad value for 'fd' [ 1934.310439][ T31] audit: type=1400 audit(1794213080.014:1527): avc: denied { read write } for pid=20661 comm="syz.1.3849" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1934.310493][ T31] audit: type=1400 audit(1794213080.014:1528): avc: denied { open } for pid=20661 comm="syz.1.3849" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1934.310531][ T31] audit: type=1400 audit(1794213080.374:1529): avc: denied { create } for pid=20661 comm="syz.1.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1935.655726][T20674] FAULT_INJECTION: forcing a failure. [ 1935.655726][T20674] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.655746][T20674] CPU: 0 UID: 0 PID: 20674 Comm: syz.2.3861 Tainted: G L syzkaller #0 PREEMPT(full) [ 1935.655762][T20674] Tainted: [L]=SOFTLOCKUP [ 1935.655766][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1935.655772][T20674] Call Trace: [ 1935.655777][T20674] [ 1935.655782][T20674] dump_stack_lvl+0x100/0x190 [ 1935.655803][T20674] should_fail_ex.cold+0x5/0xa [ 1935.655822][T20674] should_failslab+0xc2/0x120 [ 1935.655836][T20674] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1935.655849][T20674] ? arch_stack_walk+0xa6/0xf0 [ 1935.655867][T20674] ? kvasprintf_const+0x66/0x1a0 [ 1935.655885][T20674] kvasprintf+0xbc/0x150 [ 1935.655898][T20674] ? __pfx_kvasprintf+0x10/0x10 [ 1935.655914][T20674] ? mark_held_locks+0x40/0x70 [ 1935.655931][T20674] kvasprintf_const+0x66/0x1a0 [ 1935.655945][T20674] kobject_set_name_vargs+0x5a/0x140 [ 1935.655964][T20674] kobject_init_and_add+0xe7/0x180 [ 1935.655976][T20674] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1935.655986][T20674] ? __x64_sys_ioctl+0x18e/0x210 [ 1935.656000][T20674] ? dev_uevent_filter+0x3e/0xd0 [ 1935.656012][T20674] ? kobject_uevent_env+0x2e7/0x18b0 [ 1935.656032][T20674] net_rx_queue_update_kobjects+0x384/0x760 [ 1935.656049][T20674] ? kset_register+0x1bb/0x290 [ 1935.656066][T20674] netdev_register_kobject+0x2c6/0x410 [ 1935.656080][T20674] register_netdevice+0x1313/0x26b0 [ 1935.656099][T20674] ? __pfx_register_netdevice+0x10/0x10 [ 1935.656114][T20674] ? net_generic+0xea/0x2a0 [ 1935.656130][T20674] ppp_dev_configure+0x8e6/0xbc0 [ 1935.656145][T20674] ppp_ioctl+0x9ef/0x27b0 [ 1935.656156][T20674] ? __fget_files+0x34/0x3d0 [ 1935.656172][T20674] ? __pfx_ppp_ioctl+0x10/0x10 [ 1935.656187][T20674] ? selinux_file_ioctl+0x1e7/0x290 [ 1935.656199][T20674] ? __pfx_ppp_ioctl+0x10/0x10 [ 1935.656210][T20674] __x64_sys_ioctl+0x18e/0x210 [ 1935.656223][T20674] do_syscall_64+0x123/0x7b0 [ 1935.656236][T20674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.656248][T20674] RIP: 0033:0x7fc095b9fb19 [ 1935.656258][T20674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1935.656268][T20674] RSP: 002b:00007fc096a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1935.656280][T20674] RAX: ffffffffffffffda RBX: 00007fc095e25fa0 RCX: 00007fc095b9fb19 [ 1935.656287][T20674] RDX: 0000200000000300 RSI: 00000000c004743e RDI: 0000000000000008 [ 1935.656294][T20674] RBP: 00007fc095c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1935.656300][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1935.656306][T20674] R13: 00007fc095e26038 R14: 00007fc095e25fa0 R15: 00007ffcf759f178 [ 1935.656321][T20674] [ 1935.674146][T20674] kobject: can not set name properly! [ 1936.035295][ T31] audit: type=1400 audit(1794213082.354:1530): avc: denied { write } for pid=20675 comm="syz.2.3862" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1936.857528][T20684] input input130: cannot allocate more than FF_MAX_EFFECTS effects [ 1937.699888][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3864'. [ 1938.073672][ T31] audit: type=1400 audit(1794213084.394:1531): avc: denied { mount } for pid=20688 comm="syz.5.3854" name="/" dev="rpc_pipefs" ino=64774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1938.169691][ T31] audit: type=1400 audit(1794213084.484:1532): avc: denied { unmount } for pid=10632 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1938.250531][ T31] audit: type=1400 audit(1794213084.564:1533): avc: denied { create } for pid=20691 comm="syz.3.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1938.251106][ T31] audit: type=1400 audit(1794213084.564:1534): avc: denied { connect } for pid=20691 comm="syz.3.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1938.541642][T17597] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1938.694533][ T31] audit: type=1400 audit(1794213085.004:1535): avc: denied { mount } for pid=20704 comm="syz.0.3860" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1938.751368][ T5729] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1938.823179][T17597] usb 3-1: Using ep0 maxpacket: 32 [ 1938.825362][T17597] usb 3-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1938.847625][T17597] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1938.847647][T17597] usb 3-1: config 0 has no interface number 0 [ 1938.883970][T17597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.883995][T17597] usb 3-1: Product: syz [ 1938.884007][T17597] usb 3-1: Manufacturer: syz [ 1938.884021][T17597] usb 3-1: SerialNumber: syz [ 1938.888503][T17597] usb 3-1: config 0 descriptor?? [ 1938.916996][T17597] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1938.917018][T17597] usb 3-1: selecting invalid altsetting 1 [ 1938.917031][T17597] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1938.919001][T17597] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1938.919212][T17597] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1938.919242][T17597] usb 3-1: media controller created [ 1938.981357][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 1938.981848][ T5729] usb 4-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1938.982742][ T5729] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1938.982764][ T5729] usb 4-1: config 0 has no interface number 0 [ 1938.982790][ T5729] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1938.982802][ T5729] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1938.985144][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.985165][ T5729] usb 4-1: Product: syz [ 1938.985174][ T5729] usb 4-1: Manufacturer: syz [ 1938.985183][ T5729] usb 4-1: SerialNumber: syz [ 1938.986302][T17597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1939.071477][ T5729] usb 4-1: config 0 descriptor?? [ 1940.290822][T17597] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1940.290866][T17597] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1940.306055][T17597] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1940.332127][ T5729] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1940.364203][ T5729] cx231xx 4-1:0.1: Failed to read PCB config [ 1940.364258][ T5729] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1940.405105][ T5729] usb 4-1: USB disconnect, device number 71 [ 1940.842146][ T31] audit: type=1400 audit(1794213087.164:1536): avc: denied { unmount } for pid=19903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1940.851003][T17597] usb 3-1: USB disconnect, device number 99 [ 1941.061256][T16255] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1941.289732][ T31] audit: type=1400 audit(1794213087.594:1537): avc: denied { bind } for pid=20718 comm="syz.1.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1941.289935][ T31] audit: type=1400 audit(1794213087.594:1538): avc: denied { node_bind } for pid=20718 comm="syz.1.3873" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1941.651212][T16255] usb 4-1: Using ep0 maxpacket: 32 [ 1941.758302][T16255] usb 4-1: device descriptor read/all, error -71 [ 1942.000570][T20728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'. [ 1942.358535][ T31] audit: type=1400 audit(1794213088.674:1539): avc: denied { mount } for pid=20727 comm="syz.1.3876" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1942.470670][T20734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3876'. [ 1942.712837][ T31] audit: type=1400 audit(1794213089.034:1540): avc: denied { unmount } for pid=17933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1942.893195][T20745] FAULT_INJECTION: forcing a failure. [ 1942.893195][T20745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1942.893214][T20745] CPU: 1 UID: 0 PID: 20745 Comm: syz.1.3879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1942.893229][T20745] Tainted: [L]=SOFTLOCKUP [ 1942.893233][T20745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1942.893239][T20745] Call Trace: [ 1942.893243][T20745] [ 1942.893248][T20745] dump_stack_lvl+0x100/0x190 [ 1942.893270][T20745] should_fail_ex.cold+0x5/0xa [ 1942.893287][T20745] _copy_from_iter+0x1f4/0x16c0 [ 1942.893304][T20745] ? rcu_is_watching+0x13/0xc0 [ 1942.893317][T20745] ? __pfx__copy_from_iter+0x10/0x10 [ 1942.893330][T20745] ? __kasan_kmalloc+0xaa/0xb0 [ 1942.893341][T20745] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 1942.893352][T20745] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 1942.893364][T20745] ? rcu_is_watching+0x13/0xc0 [ 1942.893376][T20745] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 1942.893386][T20745] ? kfree+0x1e5/0x6d0 [ 1942.893402][T20745] file_tty_write.isra.0+0x453/0x8f0 [ 1942.893418][T20745] vfs_write+0x6af/0x1040 [ 1942.893430][T20745] ? __pfx_tty_write+0x10/0x10 [ 1942.893443][T20745] ? __pfx_vfs_write+0x10/0x10 [ 1942.893453][T20745] ? find_held_lock+0x2b/0x80 [ 1942.893474][T20745] ksys_write+0x12a/0x250 [ 1942.893485][T20745] ? __pfx_ksys_write+0x10/0x10 [ 1942.893501][T20745] do_syscall_64+0x123/0x7b0 [ 1942.893516][T20745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.893527][T20745] RIP: 0033:0x7f9901d9fb19 [ 1942.893536][T20745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.893547][T20745] RSP: 002b:00007f9902c5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1942.893558][T20745] RAX: ffffffffffffffda RBX: 00007f9902025fa0 RCX: 00007f9901d9fb19 [ 1942.893565][T20745] RDX: 000000000000ff2e RSI: 0000200000000440 RDI: 0000000000000003 [ 1942.893572][T20745] RBP: 00007f9902c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1942.893578][T20745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1942.893584][T20745] R13: 00007f9902026038 R14: 00007f9902025fa0 R15: 00007ffe195fec88 [ 1942.893604][T20745] [ 1946.037190][ T5729] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1946.091244][ T5712] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1946.192240][ T5729] usb 6-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1946.193097][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1946.193124][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1946.193144][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1946.193166][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1946.194853][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.194873][ T5729] usb 6-1: Product: syz [ 1946.194882][ T5729] usb 6-1: Manufacturer: syz [ 1946.194891][ T5729] usb 6-1: SerialNumber: syz [ 1946.196163][ T5729] usb 6-1: config 0 descriptor?? [ 1946.281233][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 1946.282463][ T5712] usb 1-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 1946.285279][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1946.285318][ T5712] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1946.285354][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.290149][ T5712] usb 1-1: config 0 descriptor?? [ 1946.299306][ T5712] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1946.434309][ T5729] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1946.482769][T20765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1946.637130][T20757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1946.637323][T20757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.662913][T20757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1946.663273][T20757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.854485][T20766] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 1947.458417][T17597] usb 6-1: USB disconnect, device number 78 [ 1947.672569][ T5729] usb 1-1: USB disconnect, device number 75 [ 1947.757305][T20772] jffs2: notice: (20772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1947.794552][ T31] audit: type=1400 audit(1794213094.114:1541): avc: denied { write } for pid=20770 comm="syz.3.3888" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1947.863263][ T31] audit: type=1400 audit(1794213094.184:1542): avc: denied { write } for pid=20775 comm="syz.1.3883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1947.888739][T20776] ip_tables: iptables: counters copy to user failed while replacing table [ 1948.014836][T20772] FAULT_INJECTION: forcing a failure. [ 1948.014836][T20772] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.014867][T20772] CPU: 0 UID: 0 PID: 20772 Comm: syz.3.3888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1948.014895][T20772] Tainted: [L]=SOFTLOCKUP [ 1948.014902][T20772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1948.014914][T20772] Call Trace: [ 1948.014921][T20772] [ 1948.014929][T20772] dump_stack_lvl+0x100/0x190 [ 1948.014962][T20772] should_fail_ex.cold+0x5/0xa [ 1948.014991][T20772] should_failslab+0xc2/0x120 [ 1948.015014][T20772] __kvmalloc_node_noprof+0x113/0x9b0 [ 1948.015032][T20772] ? __kmalloc_cache_noprof+0x281/0x6d0 [ 1948.015059][T20772] ? percpu_ref_init+0xec/0x3f0 [ 1948.015076][T20772] ? io_alloc_cache_init+0x38/0x170 [ 1948.015109][T20772] io_alloc_cache_init+0x38/0x170 [ 1948.015140][T20772] io_uring_setup.cold+0x4aa/0x1c7e [ 1948.015165][T20772] ? lock_acquire+0x1d1/0x380 [ 1948.015190][T20772] ? avc_has_perm_noaudit+0x56/0x470 [ 1948.015214][T20772] ? __pfx_io_uring_setup+0x10/0x10 [ 1948.015236][T20772] ? find_held_lock+0x2b/0x80 [ 1948.015255][T20772] ? avc_has_perm_noaudit+0x11e/0x470 [ 1948.015276][T20772] ? avc_has_perm_noaudit+0x11e/0x470 [ 1948.015316][T20772] ? xfd_validate_state+0x129/0x190 [ 1948.015349][T20772] __x64_sys_io_uring_setup+0xc2/0x170 [ 1948.015376][T20772] do_syscall_64+0x123/0x7b0 [ 1948.015402][T20772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.015423][T20772] RIP: 0033:0x7f5151b9fb19 [ 1948.015439][T20772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1948.015464][T20772] RSP: 002b:00007f5152a67028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1948.015482][T20772] RAX: ffffffffffffffda RBX: 00007f5151e25fa0 RCX: 00007f5151b9fb19 [ 1948.015495][T20772] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000002bd2 [ 1948.015506][T20772] RBP: 00007f5151c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1948.015519][T20772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1948.015531][T20772] R13: 00007f5151e26038 R14: 00007f5151e25fa0 R15: 00007ffd66b10c28 [ 1948.015558][T20772] [ 1948.279249][T20772] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1948.882783][ T5712] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1948.953242][ T5729] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1949.031545][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 1949.032184][ T5712] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1949.033534][ T5712] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1949.033559][ T5712] usb 3-1: config 179 has no interface number 0 [ 1949.033594][ T5712] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1949.033618][ T5712] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1949.033643][ T5712] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1949.033667][ T5712] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1949.033691][ T5712] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1949.033725][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.040560][T20780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1949.093432][ T5729] usb 4-1: device descriptor read/64, error -71 [ 1949.322840][ T5712] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input131 [ 1949.329571][ T31] audit: type=1400 audit(1794213095.644:1543): avc: denied { read } for pid=4974 comm="acpid" name="js0" dev="devtmpfs" ino=4269 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1949.329630][ T31] audit: type=1400 audit(1794213095.644:1544): avc: denied { open } for pid=4974 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4269 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1949.340318][ T31] audit: type=1400 audit(1794213095.654:1545): avc: denied { ioctl } for pid=4974 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4269 ioctlcmd=0x80604520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1949.386295][ T5729] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1949.551283][ T5729] usb 4-1: device descriptor read/64, error -71 [ 1949.661427][ T5729] usb usb4-port1: attempt power cycle [ 1949.790053][T16350] usb 3-1: USB disconnect, device number 100 [ 1949.790154][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1949.790177][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1949.953339][ T31] audit: type=1400 audit(1794213096.274:1546): avc: denied { mounton } for pid=20784 comm="syz.5.3889" path="/513/file0" dev="tmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1950.031221][ T5729] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1950.051947][ T5729] usb 4-1: device descriptor read/8, error -71 [ 1950.301330][ T5729] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1950.325040][ T5729] usb 4-1: device descriptor read/8, error -71 [ 1950.432457][ T5729] usb usb4-port1: unable to enumerate USB device [ 1950.516843][T20794] FAULT_INJECTION: forcing a failure. [ 1950.516843][T20794] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.516866][T20794] CPU: 0 UID: 0 PID: 20794 Comm: syz.0.3894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1950.516882][T20794] Tainted: [L]=SOFTLOCKUP [ 1950.516887][T20794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1950.516894][T20794] Call Trace: [ 1950.516898][T20794] [ 1950.516905][T20794] dump_stack_lvl+0x100/0x190 [ 1950.516929][T20794] should_fail_ex.cold+0x5/0xa [ 1950.516947][T20794] should_failslab+0xc2/0x120 [ 1950.516962][T20794] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1950.516979][T20794] ? __asan_memcpy+0x3c/0x60 [ 1950.516995][T20794] ? __kernfs_new_node+0xd2/0xa10 [ 1950.517009][T20794] __kernfs_new_node+0xd2/0xa10 [ 1950.517022][T20794] ? __pfx___kernfs_new_node+0x10/0x10 [ 1950.517034][T20794] ? lock_acquire+0x1d1/0x380 [ 1950.517049][T20794] ? kernfs_root+0x23/0x2a0 [ 1950.517064][T20794] ? find_held_lock+0x2b/0x80 [ 1950.517075][T20794] ? kernfs_root+0xee/0x2a0 [ 1950.517090][T20794] ? kernfs_root+0xee/0x2a0 [ 1950.517110][T20794] kernfs_create_dir_ns+0xa4/0x2b0 [ 1950.517125][T20794] sysfs_create_dir_ns+0x13a/0x2b0 [ 1950.517142][T20794] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1950.517157][T20794] ? find_held_lock+0x2b/0x80 [ 1950.517168][T20794] ? kobject_add_internal+0x25f/0x930 [ 1950.517186][T20794] ? kobject_add_internal+0x25f/0x930 [ 1950.517203][T20794] ? do_raw_spin_unlock+0x145/0x1e0 [ 1950.517214][T20794] kobject_add_internal+0x2c8/0x930 [ 1950.517234][T20794] kobject_init_and_add+0x121/0x180 [ 1950.517245][T20794] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1950.517255][T20794] ? __x64_sys_ioctl+0x18e/0x210 [ 1950.517271][T20794] ? dev_uevent_filter+0x3e/0xd0 [ 1950.517282][T20794] ? kobject_uevent_env+0x2e7/0x18b0 [ 1950.517296][T20794] net_rx_queue_update_kobjects+0x384/0x760 [ 1950.517311][T20794] ? kset_register+0x1bb/0x290 [ 1950.517329][T20794] netdev_register_kobject+0x2c6/0x410 [ 1950.517342][T20794] register_netdevice+0x1313/0x26b0 [ 1950.517361][T20794] ? __pfx_register_netdevice+0x10/0x10 [ 1950.517377][T20794] ? net_generic+0xea/0x2a0 [ 1950.517391][T20794] ppp_dev_configure+0x8e6/0xbc0 [ 1950.517410][T20794] ppp_ioctl+0x9ef/0x27b0 [ 1950.517421][T20794] ? __fget_files+0x34/0x3d0 [ 1950.517436][T20794] ? __pfx_ppp_ioctl+0x10/0x10 [ 1950.517452][T20794] ? selinux_file_ioctl+0x1e7/0x290 [ 1950.517465][T20794] ? __pfx_ppp_ioctl+0x10/0x10 [ 1950.517478][T20794] __x64_sys_ioctl+0x18e/0x210 [ 1950.517491][T20794] do_syscall_64+0x123/0x7b0 [ 1950.517506][T20794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.517519][T20794] RIP: 0033:0x7f815d79fb19 [ 1950.517528][T20794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.517539][T20794] RSP: 002b:00007f815e716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1950.517551][T20794] RAX: ffffffffffffffda RBX: 00007f815da25fa0 RCX: 00007f815d79fb19 [ 1950.517558][T20794] RDX: 0000200000000300 RSI: 00000000c004743e RDI: 0000000000000008 [ 1950.517564][T20794] RBP: 00007f815d837b70 R08: 0000000000000000 R09: 0000000000000000 [ 1950.517571][T20794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1950.517577][T20794] R13: 00007f815da26038 R14: 00007f815da25fa0 R15: 00007ffff4a15c38 [ 1950.517592][T20794] [ 1950.518698][T20794] kobject: kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 1950.772647][ T5809] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1950.981425][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 1950.992243][ T5809] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1950.993021][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1950.993038][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1950.994473][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.994486][ T5809] usb 3-1: Product: syz [ 1950.994499][ T5809] usb 3-1: Manufacturer: syz [ 1950.994507][ T5809] usb 3-1: SerialNumber: syz [ 1951.005501][ T5809] usb 3-1: config 0 descriptor?? [ 1951.062619][T20798] FAULT_INJECTION: forcing a failure. [ 1951.062619][T20798] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.062638][T20798] CPU: 1 UID: 0 PID: 20798 Comm: syz.0.3896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1951.062653][T20798] Tainted: [L]=SOFTLOCKUP [ 1951.062657][T20798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1951.062663][T20798] Call Trace: [ 1951.062667][T20798] [ 1951.062672][T20798] dump_stack_lvl+0x100/0x190 [ 1951.062693][T20798] should_fail_ex.cold+0x5/0xa [ 1951.062710][T20798] should_failslab+0xc2/0x120 [ 1951.062723][T20798] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1951.062741][T20798] ? __alloc_skb+0x5b7/0x710 [ 1951.062753][T20798] ? __alloc_skb+0x140/0x710 [ 1951.062768][T20798] __alloc_skb+0x140/0x710 [ 1951.062779][T20798] ? __alloc_skb+0x5b7/0x710 [ 1951.062791][T20798] ? __pfx___alloc_skb+0x10/0x10 [ 1951.062808][T20798] netlink_alloc_large_skb+0x69/0x150 [ 1951.062824][T20798] netlink_sendmsg+0x755/0x10c0 [ 1951.062841][T20798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1951.062858][T20798] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1951.062876][T20798] ? ____sys_sendmsg+0xa99/0xc30 [ 1951.062892][T20798] ____sys_sendmsg+0xa99/0xc30 [ 1951.062907][T20798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1951.062923][T20798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1951.062942][T20798] ? lock_acquire+0x1d1/0x380 [ 1951.062956][T20798] ? get_pid_task+0x2a/0x250 [ 1951.062968][T20798] ___sys_sendmsg+0x190/0x1e0 [ 1951.062985][T20798] ? __pfx____sys_sendmsg+0x10/0x10 [ 1951.063010][T20798] ? get_pid_task+0x106/0x250 [ 1951.063035][T20798] ? find_held_lock+0x2b/0x80 [ 1951.063058][T20798] __sys_sendmsg+0x160/0x210 [ 1951.063072][T20798] ? __pfx___sys_sendmsg+0x10/0x10 [ 1951.063093][T20798] do_syscall_64+0x123/0x7b0 [ 1951.063107][T20798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.063118][T20798] RIP: 0033:0x7f815d79fb19 [ 1951.063128][T20798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.063138][T20798] RSP: 002b:00007f815e716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1951.063148][T20798] RAX: ffffffffffffffda RBX: 00007f815da25fa0 RCX: 00007f815d79fb19 [ 1951.063155][T20798] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1951.063162][T20798] RBP: 00007f815e716090 R08: 0000000000000000 R09: 0000000000000000 [ 1951.063168][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.063174][T20798] R13: 00007f815da26038 R14: 00007f815da25fa0 R15: 00007ffff4a15c38 [ 1951.063191][T20798] [ 1951.314595][ T5809] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1951.314624][ T5809] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1951.751250][ T31] audit: type=1400 audit(1794213098.014:1547): avc: denied { read write } for pid=20799 comm="syz.0.3897" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1951.751306][ T31] audit: type=1400 audit(1794213098.014:1548): avc: denied { open } for pid=20799 comm="syz.0.3897" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1951.751344][ T31] audit: type=1400 audit(1794213098.014:1549): avc: denied { ioctl } for pid=20799 comm="syz.0.3897" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1952.310170][ T31] audit: type=1400 audit(1794213098.624:1550): avc: denied { read append } for pid=20808 comm="syz.3.3898" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1952.375114][ T5809] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1952.376122][ T5809] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1952.376600][ T5809] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1952.376617][ T5809] em28xx 3-1:0.0: No AC97 audio processor [ 1952.418646][ T5809] usb 3-1: USB disconnect, device number 101 [ 1952.419525][ T5809] em28xx 3-1:0.0: Disconnecting em28xx [ 1952.445369][ T5809] em28xx: Freeing device [ 1954.833372][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1954.833390][ T31] audit: type=1400 audit(1794213101.154:1555): avc: denied { unmount } for pid=10632 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1955.245968][T16255] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1955.401699][T16255] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1955.402597][T16255] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1955.402618][T16255] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.402636][T16255] usb 6-1: config 0 has no interface number 0 [ 1955.402668][T16255] usb 6-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1955.404339][T16255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.404362][T16255] usb 6-1: Product: syz [ 1955.404376][T16255] usb 6-1: Manufacturer: syz [ 1955.404391][T16255] usb 6-1: SerialNumber: syz [ 1955.409873][T16255] usb 6-1: config 0 descriptor?? [ 1955.492450][T16255] yurex 6-1:0.50: Could not find endpoints [ 1955.561231][ T5729] usb 4-1: new high-speed USB device number 78 using dummy_hcd                                                                                                                                                                                                                                                                                                                          [ 1957.605847][ T31] audit: type=1400 audit(1794213103.924:1560): avc: denied { read } for pid=20840 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1957.636122][ T31] audit: type=1400 audit(1794213103.944:1561): avc: denied { mount } for pid=20842 comm="syz.1.3906" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1957.651235][ T31] audit: type=1400 audit(1794213103.954:1562): avc: denied { search } for pid=20842 comm="syz.1.3906" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1957.651276][ T31] audit: type=1400 audit(1794213103.954:1563): avc: denied { search } for pid=20842 comm="syz.1.3906" name="usb_gadget" dev="configfs" ino=3750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1957.651308][ T31] audit: type=1400 audit(1794213103.954:1564): avc: denied { search } for pid=20842 comm="syz.1.3906" name="g1" dev="configfs" ino=18729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 syzkaller syzkaller login: [ 1958.485266][T20849] tipc: Enabled bearer , priority 10 [ 1958.739648][ T5712] usb 4-1: USB disconnect, device number 78 [ 1959.874462][ T5712] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1960.021482][T16255] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1960.043171][ T5712] usb 3-1: New USB device found: idVendor=0cf2, idProduct=6250, bcdDevice=f3.00 [ 1960.127890][T16350] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1960.142750][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.142787][ T5712] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1960.144389][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.144408][ T5712] usb 3-1: Product: syz [ 1960.144420][ T5712] usb 3-1: Manufacturer: syz [ 1960.144433][ T5712] usb 3-1: SerialNumber: syz [ 1960.161860][ T5712] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1960.271749][T16255] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1960.273577][T16255] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1960.273600][T16255] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.273618][T16255] usb 6-1: config 0 has no interface number 0 [ 1960.273650][T16255] usb 6-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1960.275381][T16255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.275402][T16255] usb 6-1: Product: syz [ 1960.275411][T16255] usb 6-1: Manufacturer: syz [ 1960.275419][T16255] usb 6-1: SerialNumber: syz [ 1960.276904][T16255] usb 6-1: config 0 descriptor?? [ 1960.278719][T16255] yurex 6-1:0.50: Could not find endpoints [ 1960.292347][T16350] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1960.293320][T16350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1960.293344][T16350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1960.293363][T16350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1960.293384][T16350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1960.303114][T16350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.303134][T16350] usb 2-1: Product: syz [ 1960.303147][T16350] usb 2-1: Manufacturer: syz [ 1960.303159][T16350] usb 2-1: SerialNumber: syz [ 1960.309496][T16350] usb 2-1: config 0 descriptor??                                                                                                                       [ 1961.928830][T20904] pimreg: entered allmulticast mode syzkaller syzkaller login: [ 1962.001661][T20905] lo: entered allmulticast mode [ 1962.027306][ T31] audit: type=1400 audit(1794213108.344:1579): avc: denied { create } for pid=20903 comm="syz.5.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1962.052440][ T31] audit: type=1400 audit(1794213108.354:1580): avc: denied { setopt } for pid=20903 comm="syz.5.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1962.072061][ T31] audit: type=1400 audit(1794213108.374:1581): avc: denied { create } for pid=20903 comm="syz.5.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1962.093225][ T31] audit: type=1400 audit(1794213108.394:1582): avc: denied { bind } for pid=20903 comm="syz.5.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1962.114477][ T31] audit: type=1400 audit(1794213108.414:1583): avc: denied { setopt } for pid=20903 comm="syz.5.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1962.114504][ T31] audit: type=1400 audit(1794213108.414:1584): avc: denied { accept } for pid=20903 comm="syz.5.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1962.156260][ T31] audit: type=1400 audit(1794213108.454:1585): avc: denied { write } for pid=20903 comm="syz.5.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1962.173930][T20905] netlink: 'syz.5.3921': attribute type 3 has an invalid length. [ 1962.173948][T20905] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3921'. [ 1962.691127][T16255] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1962.752852][T20903] lo: left allmulticast mode [ 1962.851273][T16255] usb 4-1: Using ep0 maxpacket: 16 [ 1962.851743][T16255] usb 4-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1962.854637][T16255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.854658][T16255] usb 4-1: Product: syz [ 1962.854670][T16255] usb 4-1: Manufacturer: syz [ 1962.854683][T16255] usb 4-1: SerialNumber: syz [ 1963.076135][T16255] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1963.077676][T16255] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1963.077952][T16255] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1963.081925][T16255] usb 4-1: media controller created [ 1963.144902][T16255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1963.431755][T16255] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1963.510436][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3929'. [ 1963.533433][T16255] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1963.557791][T16255] usb 4-1: USB disconnect, device number 79 [ 1966.739865][T20934] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1966.740020][T20932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3929'. [ 1967.241542][ T5736] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1967.307257][T20950] FAULT_INJECTION: forcing a failure. [ 1967.307257][T20950] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.307300][T20950] CPU: 0 UID: 0 PID: 20950 Comm: syz.5.3934 Tainted: G L syzkaller #0 PREEMPT(full) [ 1967.307326][T20950] Tainted: [L]=SOFTLOCKUP [ 1967.307333][T20950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1967.307344][T20950] Call Trace: [ 1967.307350][T20950] [ 1967.307357][T20950] dump_stack_lvl+0x100/0x190 [ 1967.307382][T20950] should_fail_ex.cold+0x5/0xa [ 1967.307400][T20950] should_failslab+0xc2/0x120 [ 1967.307413][T20950] __kmalloc_cache_node_noprof+0x94/0x710 [ 1967.307426][T20950] ? __get_vm_area_node+0x124/0x350 [ 1967.307440][T20950] __get_vm_area_node+0x124/0x350 [ 1967.307453][T20950] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 1967.307466][T20950] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.307478][T20950] ? __lock_acquire+0x5c0/0x1f40 [ 1967.307497][T20950] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.307510][T20950] ? lock_acquire+0x1d1/0x380 [ 1967.307525][T20950] ? find_held_lock+0x2b/0x80 [ 1967.307537][T20950] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1967.307549][T20950] ? avc_has_perm_noaudit+0x11e/0x470 [ 1967.307565][T20950] ? avc_has_perm_noaudit+0x145/0x470 [ 1967.307580][T20950] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.307592][T20950] __vmalloc_node_noprof+0xad/0xf0 [ 1967.307604][T20950] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.307618][T20950] __vmalloc_noprof+0xa3/0x120 [ 1967.307633][T20950] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1967.307646][T20950] ? rcu_is_watching+0x13/0xc0 [ 1967.307659][T20950] ? cap_capable+0x107/0x430 [ 1967.307674][T20950] bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.307687][T20950] ? security_capable+0x80/0x260 [ 1967.307706][T20950] bpf_prog_alloc+0x3b/0x200 [ 1967.307717][T20950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1967.307735][T20950] bpf_prog_load+0x4a3/0x2b20 [ 1967.307752][T20950] ? avc_has_perm_noaudit+0x11e/0x470 [ 1967.307768][T20950] ? __pfx_bpf_prog_load+0x10/0x10 [ 1967.307796][T20950] __sys_bpf+0x146f/0x4b60 [ 1967.307810][T20950] ? __pfx___sys_bpf+0x10/0x10 [ 1967.307820][T20950] ? __lock_acquire+0x5c0/0x1f40 [ 1967.307835][T20950] ? __schedule+0x30a9/0x6a40 [ 1967.307846][T20950] ? __schedule+0x30a9/0x6a40 [ 1967.307857][T20950] ? kvm_sched_clock_read+0x11/0x20 [ 1967.307868][T20950] ? sched_clock+0x3a/0x60 [ 1967.307883][T20950] ? __schedule+0x4dd0/0x6a40 [ 1967.307893][T20950] ? find_held_lock+0x2b/0x80 [ 1967.307906][T20950] ? __schedule+0x30a9/0x6a40 [ 1967.307916][T20950] ? __schedule+0x30a9/0x6a40 [ 1967.307928][T20950] ? rcu_is_watching+0x13/0xc0 [ 1967.307940][T20950] ? trace_sched_exit_tp+0x120/0x160 [ 1967.307951][T20950] ? __schedule+0x1270/0x6a40 [ 1967.307970][T20950] ? __pfx___schedule+0x10/0x10 [ 1967.307983][T20950] ? __x64_sys_bpf+0xce/0x140 [ 1967.307993][T20950] __x64_sys_bpf+0xce/0x140 [ 1967.308004][T20950] ? do_syscall_64+0xae/0x7b0 [ 1967.308018][T20950] do_syscall_64+0x123/0x7b0 [ 1967.308031][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.308043][T20950] RIP: 0033:0x7f76a0b9fb19 [ 1967.308052][T20950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1967.308063][T20950] RSP: 002b:00007f76a1a1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1967.308074][T20950] RAX: ffffffffffffffda RBX: 00007f76a0e26090 RCX: 00007f76a0b9fb19 [ 1967.308081][T20950] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1967.308088][T20950] RBP: 00007f76a1a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1967.308094][T20950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1967.308101][T20950] R13: 00007f76a0e26128 R14: 00007f76a0e26090 R15: 00007ffda764e0d8 [ 1967.308115][T20950] [ 1967.308175][T20950] syz.5.3934: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1967.308344][T20950] CPU: 0 UID: 0 PID: 20950 Comm: syz.5.3934 Tainted: G L syzkaller #0 PREEMPT(full) [ 1967.308368][T20950] Tainted: [L]=SOFTLOCKUP [ 1967.308374][T20950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1967.308383][T20950] Call Trace: [ 1967.308389][T20950] [ 1967.308393][T20950] dump_stack_lvl+0x100/0x190 [ 1967.308411][T20950] warn_alloc.cold+0x9e/0xb2 [ 1967.308424][T20950] ? __pfx_warn_alloc+0x10/0x10 [ 1967.308438][T20950] ? __kasan_kmalloc+0x8a/0xb0 [ 1967.308455][T20950] ? __get_vm_area_node+0x22b/0x350 [ 1967.308469][T20950] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 1967.308481][T20950] ? __lock_acquire+0x5c0/0x1f40 [ 1967.308499][T20950] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.308512][T20950] ? lock_acquire+0x1d1/0x380 [ 1967.308527][T20950] ? find_held_lock+0x2b/0x80 [ 1967.308539][T20950] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1967.308550][T20950] ? avc_has_perm_noaudit+0x11e/0x470 [ 1967.308566][T20950] ? avc_has_perm_noaudit+0x145/0x470 [ 1967.308580][T20950] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.308592][T20950] __vmalloc_node_noprof+0xad/0xf0 [ 1967.308604][T20950] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.308618][T20950] __vmalloc_noprof+0xa3/0x120 [ 1967.308630][T20950] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1967.308643][T20950] ? rcu_is_watching+0x13/0xc0 [ 1967.308654][T20950] ? cap_capable+0x107/0x430 [ 1967.308670][T20950] bpf_prog_alloc_no_stats+0x59/0x690 [ 1967.308682][T20950] ? security_capable+0x80/0x260 [ 1967.308697][T20950] bpf_prog_alloc+0x3b/0x200 [ 1967.308712][T20950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1967.308730][T20950] bpf_prog_load+0x4a3/0x2b20 [ 1967.308745][T20950] ? avc_has_perm_noaudit+0x11e/0x470 [ 1967.308762][T20950] ? __pfx_bpf_prog_load+0x10/0x10 [ 1967.308790][T20950] __sys_bpf+0x146f/0x4b60 [ 1967.308803][T20950] ? __pfx___sys_bpf+0x10/0x10 [ 1967.308813][T20950] ? __lock_acquire+0x5c0/0x1f40 [ 1967.308827][T20950] ? __schedule+0x30a9/0x6a40 [ 1967.308838][T20950] ? __schedule+0x30a9/0x6a40 [ 1967.308849][T20950] ? kvm_sched_clock_read+0x11/0x20 [ 1967.308860][T20950] ? sched_clock+0x3a/0x60 [ 1967.308874][T20950] ? __schedule+0x4dd0/0x6a40 [ 1967.308885][T20950] ? find_held_lock+0x2b/0x80 [ 1967.308898][T20950] ? __schedule+0x30a9/0x6a40 [ 1967.308908][T20950] ? __schedule+0x30a9/0x6a40 [ 1967.308919][T20950] ? rcu_is_watching+0x13/0xc0 [ 1967.308931][T20950] ? trace_sched_exit_tp+0x120/0x160 [ 1967.308942][T20950] ? __schedule+0x1270/0x6a40 [ 1967.308960][T20950] ? __pfx___schedule+0x10/0x10 [ 1967.308974][T20950] ? __x64_sys_bpf+0xce/0x140 [ 1967.308984][T20950] __x64_sys_bpf+0xce/0x140 [ 1967.308994][T20950] ? do_syscall_64+0xae/0x7b0 [ 1967.309007][T20950] do_syscall_64+0x123/0x7b0 [ 1967.309021][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.309032][T20950] RIP: 0033:0x7f76a0b9fb19 [ 1967.309040][T20950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1967.309050][T20950] RSP: 002b:00007f76a1a1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1967.309059][T20950] RAX: ffffffffffffffda RBX: 00007f76a0e26090 RCX: 00007f76a0b9fb19 [ 1967.309066][T20950] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1967.309073][T20950] RBP: 00007f76a1a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1967.309079][T20950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1967.309085][T20950] R13: 00007f76a0e26128 R14: 00007f76a0e26090 R15: 00007ffda764e0d8 [ 1967.309099][T20950] [ 1967.309122][T20950] Mem-Info: [ 1967.309151][T20950] active_anon:36778 inactive_anon:61 isolated_anon:0 [ 1967.309151][T20950] active_file:1786 inactive_file:68252 isolated_file:0 [ 1967.309151][T20950] unevictable:0 dirty:451 writeback:0 [ 1967.309151][T20950] slab_reclaimable:13673 slab_unreclaimable:106199 [ 1967.309151][T20950] mapped:47633 shmem:28100 pagetables:1735 [ 1967.309151][T20950] sec_pagetables:0 bounce:0 [ 1967.309151][T20950] kernel_misc_reclaimable:0 [ 1967.309151][T20950] free:1226340 free_pcp:21262 free_cma:0 [ 1967.309202][T20950] Node 0 active_anon:147112kB inactive_anon:244kB active_file:7144kB inactive_file:272804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:190532kB dirty:1804kB writeback:0kB shmem:112400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13520kB pagetables:6796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1967.309261][T20950] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1967.309315][T20950] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1967.309392][T20950] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 1967.310610][T20950] Node 0 DMA32 free:940912kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:147112kB inactive_anon:244kB active_file:7144kB inactive_file:272804kB unevictable:0kB writepending:1804kB zspages:800kB present:3129332kB managed:2506148kB mlocked:0kB bounce:0kB free_pcp:85124kB local_pcp:75276kB free_cma:0kB [ 1967.310691][T20950] lowmem_reserve[]: 0 0 1 1 1 [ 1967.310794][T20950] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1748kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1967.310869][T20950] lowmem_reserve[]: 0 0 0 0 0 [ 1967.310970][T20950] Node 1 Normal free:3949100kB boost:0kB min:56092kB low:70112kB high:84132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1967.311047][T20950] lowmem_reserve[]: 0 0 0 0 0 [ 1967.311221][T20950] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1967.311376][T20950] Node 0 DMA32: 498*4kB (UME) 986*8kB (UM) 1669*16kB (UME) 2378*32kB (UME) 1573*64kB (UME) 725*128kB (UME) 455*256kB (UME) 134*512kB (UME) 33*1024kB (ME) 13*2048kB (UM) 95*4096kB (UM) = 940776kB [ 1967.311491][T20950] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1967.311569][T20950] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 12*16kB (UM) 10*32kB (UM) 6*64kB (UM) 7*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 961*4096kB (M) = 3949100kB [ 1967.311680][T20950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1967.311692][T20950] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1967.311709][T20950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1967.311720][T20950] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1967.311731][T20950] 98139 total pagecache pages [ 1967.311737][T20950] 5 pages in swap cache [ 1967.311742][T20950] Free swap = 124636kB [ 1967.311747][T20950] Total swap = 124996kB [ 1967.311753][T20950] 2097051 pages RAM [ 1967.311758][T20950] 0 pages HighMem/MovableOnly [ 1967.311763][T20950] 438461 pages reserved [ 1967.311768][T20950] 0 pages cma reserved [ 1968.136015][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1968.136029][ T31] audit: type=1400 audit(1794213114.454:1589): avc: denied { write } for pid=20935 comm="syz.3.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1968.165996][ T5736] usb 1-1: New USB device found: idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1968.255253][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.255270][ T5736] usb 1-1: Product: syz [ 1968.255279][ T5736] usb 1-1: Manufacturer: syz [ 1968.255287][ T5736] usb 1-1: SerialNumber: syz [ 1968.443327][ T5736] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1968.443350][ T5736] r8152-cfgselector 1-1: config 0 descriptor?? [ 1968.494836][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1969.197257][ T31] audit: type=1400 audit(1794213115.514:1590): avc: denied { map } for pid=20938 comm="syz.0.3931" path="/dev/comedi2" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1969.197418][ T31] audit: type=1400 audit(1794213115.514:1591): avc: denied { execute } for pid=20938 comm="syz.0.3931" path="/dev/comedi2" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1969.221959][ T31] audit: type=1400 audit(1794213115.524:1592): avc: denied { create } for pid=20938 comm="syz.0.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1969.276521][ T5736] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1969.276904][ T5736] r8152-cfgselector 1-1: No union descriptors [ 1969.295042][ T5736] r8152-cfgselector 1-1: USB disconnect, device number 77 [ 1969.842949][T20964] FAULT_INJECTION: forcing a failure. [ 1969.842949][T20964] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.842997][T20964] CPU: 0 UID: 0 PID: 20964 Comm: syz.2.3936 Tainted: G L syzkaller #0 PREEMPT(full) [ 1969.843022][T20964] Tainted: [L]=SOFTLOCKUP [ 1969.843029][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1969.843039][T20964] Call Trace: [ 1969.843045][T20964] [ 1969.843053][T20964] dump_stack_lvl+0x100/0x190 [ 1969.843075][T20964] should_fail_ex.cold+0x5/0xa [ 1969.843092][T20964] should_failslab+0xc2/0x120 [ 1969.843106][T20964] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1969.843124][T20964] ? preempt_schedule_thunk+0x16/0x40 [ 1969.843139][T20964] ? __alloc_skb+0x140/0x710 [ 1969.843155][T20964] __alloc_skb+0x140/0x710 [ 1969.843167][T20964] ? __alloc_skb+0x5b7/0x710 [ 1969.843181][T20964] ? __pfx___alloc_skb+0x10/0x10 [ 1969.843194][T20964] ? if_nlmsg_size+0x4b/0xdc0 [ 1969.843212][T20964] rtmsg_ifinfo_build_skb+0x81/0x260 [ 1969.843233][T20964] rtmsg_ifinfo+0xa4/0x1b0 [ 1969.843246][T20964] netif_close_many+0x3ca/0x810 [ 1969.843265][T20964] ? __pfx_netif_close_many+0x10/0x10 [ 1969.843286][T20964] netif_close+0x17f/0x230 [ 1969.843302][T20964] ? __pfx_netif_close+0x10/0x10 [ 1969.843322][T20964] dev_close+0xaa/0x240 [ 1969.843337][T20964] lapbeth_device_event+0x458/0xd20 [ 1969.843355][T20964] notifier_call_chain+0x99/0x3f0 [ 1969.843370][T20964] call_netdevice_notifiers_info+0xbe/0x110 [ 1969.843387][T20964] __dev_close_many+0xfa/0x700 [ 1969.843405][T20964] ? __pfx___dev_close_many+0x10/0x10 [ 1969.843423][T20964] ? netif_close_many+0x237/0x810 [ 1969.843441][T20964] netif_close_many+0x243/0x810 [ 1969.843460][T20964] ? __pfx_netif_close_many+0x10/0x10 [ 1969.843481][T20964] netif_close+0x17f/0x230 [ 1969.843497][T20964] ? __pfx_netif_close+0x10/0x10 [ 1969.843517][T20964] dev_close+0xaa/0x240 [ 1969.843532][T20964] cfg80211_shutdown_all_interfaces+0xb4/0x250 [ 1969.843548][T20964] cfg80211_rfkill_set_block+0x35/0x50 [ 1969.843561][T20964] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 1969.843575][T20964] rfkill_set_block+0x205/0x510 [ 1969.843588][T20964] rfkill_fop_write+0x2c0/0x580 [ 1969.843600][T20964] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1969.843612][T20964] ? bpf_lsm_inode_getlsmprop+0x10/0x10 [ 1969.843628][T20964] ? security_file_permission+0x76/0x210 [ 1969.843640][T20964] ? rw_verify_area+0xce/0x6d0 [ 1969.843658][T20964] vfs_write+0x2aa/0x1040 [ 1969.843669][T20964] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1969.843686][T20964] ? irqentry_exit+0x202/0xab0 [ 1969.843699][T20964] ? __pfx_vfs_write+0x10/0x10 [ 1969.843709][T20964] ? irqentry_exit+0x202/0xab0 [ 1969.843728][T20964] ? ksys_write+0x8c/0x250 [ 1969.843740][T20964] ksys_write+0x1f8/0x250 [ 1969.843751][T20964] ? __pfx_ksys_write+0x10/0x10 [ 1969.843767][T20964] do_syscall_64+0x123/0x7b0 [ 1969.843782][T20964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.843793][T20964] RIP: 0033:0x7fc095b9fb19 [ 1969.843803][T20964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1969.843814][T20964] RSP: 002b:00007fc0969c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1969.843825][T20964] RAX: ffffffffffffffda RBX: 00007fc095e26180 RCX: 00007fc095b9fb19 [ 1969.843832][T20964] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000006 [ 1969.843838][T20964] RBP: 00007fc0969c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1969.843844][T20964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1969.843851][T20964] R13: 00007fc095e26218 R14: 00007fc095e26180 R15: 00007ffcf759f178 [ 1969.843865][T20964] [ 1970.502796][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.502942][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1970.549279][T20970] netlink: 'syz.5.3938': attribute type 1 has an invalid length. [ 1970.572240][ T5736] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1970.612511][ T31] audit: type=1400 audit(1794213116.934:1593): avc: denied { ioctl } for pid=20969 comm="syz.5.3938" path="socket:[65339]" dev="sockfs" ino=65339 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1970.646466][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3938'. [ 1970.715647][T20970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1970.759928][ T5736] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1970.762754][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.774202][ T5736] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1970.774224][ T5736] usb 2-1: Product: syz [ 1970.774237][ T5736] usb 2-1: Manufacturer: syz [ 1970.774249][ T5736] usb 2-1: SerialNumber: syz [ 1970.790392][ T5736] usb 2-1: config 0 descriptor?? [ 1970.793633][ T5736] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 1970.798647][ T5736] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1970.798726][ T5736] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 1970.804546][ T5736] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1970.819006][ T5736] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1970.820418][T20972] macvlan2: entered promiscuous mode [ 1970.820435][T20972] macvlan2: entered allmulticast mode [ 1970.872971][ T5736] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1970.878382][ T5736] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1970.879410][ T5736] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1970.908222][ T5736] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1970.909235][ T5736] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1970.932282][ T5736] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1970.935908][T20977] jffs2: notice: (20977) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1970.949704][ T31] audit: type=1400 audit(1794213117.264:1594): avc: denied { write } for pid=20976 comm="syz.0.3940" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1970.972562][ T1578] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1971.015900][T20975] bond1: (slave ip6gretap1): making interface the new active one [ 1971.017777][T20975] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1971.124461][ T1578] usb 4-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=e.b7 [ 1971.135932][ T1578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.136001][ T1578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.139371][ T1578] usb 4-1: config 0 descriptor?? [ 1971.184094][ T1578] usbserial_generic 4-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1971.184116][ T1578] usbserial_generic 4-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1971.184149][ T1578] usbserial_generic 4-1:0.0: device has no bulk endpoints [ 1971.287893][T20977] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1971.449681][ T1578] usb 4-1: USB disconnect, device number 80 [ 1971.903798][ T31] audit: type=1400 audit(1794213118.194:1595): avc: denied { append } for pid=20981 comm="syz.5.3943" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1971.903953][ T31] audit: type=1400 audit(1794213118.204:1596): avc: denied { ioctl } for pid=20981 comm="syz.5.3943" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=926 ioctlcmd=0x403c6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1973.502979][ T31] audit: type=1400 audit(1794213119.824:1597): avc: denied { create } for pid=20996 comm="syz.0.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1973.828908][ T31] audit: type=1400 audit(1794213120.134:1598): avc: denied { sys_module } for pid=20996 comm="syz.0.3945" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1974.321474][ T5736] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1974.500187][ T5736] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 1974.503900][ T5736] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.503935][ T5736] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1974.530665][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.530686][ T5736] usb 6-1: Product: syz [ 1974.530699][ T5736] usb 6-1: Manufacturer: syz [ 1974.530712][ T5736] usb 6-1: SerialNumber: syz [ 1974.703297][T21017] usb usb7: usbfs: process 21017 (syz.3.3944) did not claim interface 0 before use [ 1974.859476][T21013] rxe_eth0 speed is unknown, defaulting to 1000 [ 1974.953023][ T31] audit: type=1400 audit(1794213121.274:1599): avc: denied { write } for pid=20994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1976.167732][T21008] xt_NETMAP: bad rangesize 37. [ 1976.195216][ T31] audit: type=1400 audit(1794213122.514:1600): avc: denied { write } for pid=21005 comm="syz.5.3946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1976.390013][ T31] audit: type=1400 audit(1794213122.704:1601): avc: denied { write } for pid=21024 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1976.959995][T16255] usb 2-1: USB disconnect, device number 89 [ 1976.982485][T16255] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1977.012574][T16255] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1977.058785][T16255] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1977.091817][T16255] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1977.092453][T16255] keyspan 2-1:0.0: device disconnected [ 1977.449364][ T31] audit: type=1400 audit(1794213123.764:1602): avc: denied { read write } for pid=21034 comm="syz.1.3949" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1977.449413][ T31] audit: type=1400 audit(1794213123.764:1603): avc: denied { open } for pid=21034 comm="syz.1.3949" path="/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1977.812543][ T5729] usb 6-1: USB disconnect, device number 81 [ 1977.921335][ T31] audit: type=1400 audit(1794213124.124:1604): avc: denied { ioctl } for pid=21034 comm="syz.1.3949" path="/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1978.237285][T13921] Bluetooth: hci2: command 0x0406 tx timeout [ 1978.571629][ T31] audit: type=1400 audit(1794213124.894:1605): avc: denied { write } for pid=21026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1978.711595][ T31] audit: type=1400 audit(1794213125.034:1606): avc: denied { append } for pid=21047 comm="syz.5.3951" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1978.739182][ T31] audit: type=1400 audit(1794213125.054:1607): avc: denied { read } for pid=21047 comm="syz.5.3951" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1978.739366][ T31] audit: type=1400 audit(1794213125.054:1608): avc: denied { open } for pid=21047 comm="syz.5.3951" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1979.014474][ T31] audit: type=1400 audit(1794213125.334:1609): avc: denied { write } for pid=21049 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1979.102135][ T5809] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1979.139035][T21052] FAULT_INJECTION: forcing a failure. [ 1979.139035][T21052] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.139064][T21052] CPU: 0 UID: 0 PID: 21052 Comm: syz.1.3952 Tainted: G L syzkaller #0 PREEMPT(full) [ 1979.139087][T21052] Tainted: [L]=SOFTLOCKUP [ 1979.139102][T21052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1979.139114][T21052] Call Trace: [ 1979.139120][T21052] [ 1979.139128][T21052] dump_stack_lvl+0x100/0x190 [ 1979.139161][T21052] should_fail_ex.cold+0x5/0xa [ 1979.139188][T21052] should_failslab+0xc2/0x120 [ 1979.139209][T21052] __kmalloc_noprof+0xfc/0x840 [ 1979.139237][T21052] ? tomoyo_encode2+0xfb/0x3c0 [ 1979.139260][T21052] tomoyo_encode2+0xfb/0x3c0 [ 1979.139283][T21052] tomoyo_encode+0x29/0x50 [ 1979.139301][T21052] tomoyo_realpath_from_path+0x18c/0x690 [ 1979.139327][T21052] tomoyo_path_number_perm+0x23c/0x580 [ 1979.139353][T21052] ? tomoyo_path_number_perm+0x22e/0x580 [ 1979.139381][T21052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1979.139417][T21052] ? __lock_acquire+0x5c0/0x1f40 [ 1979.139454][T21052] ? __fget_files+0x34/0x3d0 [ 1979.139478][T21052] ? find_held_lock+0x2b/0x80 [ 1979.139497][T21052] ? hook_file_ioctl_common+0x140/0x440 [ 1979.139525][T21052] ? __fget_files+0x21f/0x3d0 [ 1979.139552][T21052] security_file_ioctl+0xd3/0x230 [ 1979.139582][T21052] __x64_sys_ioctl+0xb7/0x210 [ 1979.139603][T21052] do_syscall_64+0x123/0x7b0 [ 1979.139628][T21052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.139647][T21052] RIP: 0033:0x7f9901d9fb19 [ 1979.139663][T21052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1979.139681][T21052] RSP: 002b:00007f9902c5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1979.139700][T21052] RAX: ffffffffffffffda RBX: 00007f9902025fa0 RCX: 00007f9901d9fb19 [ 1979.139712][T21052] RDX: 0000200000000940 RSI: 00000000c0d05605 RDI: 0000000000000008 [ 1979.139724][T21052] RBP: 00007f9902c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1979.139735][T21052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1979.139746][T21052] R13: 00007f9902026038 R14: 00007f9902025fa0 R15: 00007ffe195fec88 [ 1979.139773][T21052] [ 1979.139788][T21052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1979.266874][ T5809] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1979.285154][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.303889][ T5809] usb 6-1: config 0 descriptor?? [ 1979.430514][T21053] usb usb7: usbfs: process 21053 (syz.0.3950) did not claim interface 0 before use [ 1979.578174][T21061] jffs2: notice: (21061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1979.610955][ T31] audit: type=1400 audit(1794213125.924:1610): avc: denied { write } for pid=21059 comm="syz.1.3953" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1979.722548][T21061] FAULT_INJECTION: forcing a failure. [ 1979.722548][T21061] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.722569][T21061] CPU: 0 UID: 0 PID: 21061 Comm: syz.1.3953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1979.722584][T21061] Tainted: [L]=SOFTLOCKUP [ 1979.722588][T21061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1979.722595][T21061] Call Trace: [ 1979.722599][T21061] [ 1979.722604][T21061] dump_stack_lvl+0x100/0x190 [ 1979.722632][T21061] should_fail_ex.cold+0x5/0xa [ 1979.722651][T21061] should_failslab+0xc2/0x120 [ 1979.722665][T21061] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1979.722685][T21061] ? __kernfs_new_node+0xd2/0xa10 [ 1979.722699][T21061] __kernfs_new_node+0xd2/0xa10 [ 1979.722712][T21061] ? __pfx___kernfs_new_node+0x10/0x10 [ 1979.722725][T21061] ? lock_acquire+0x1d1/0x380 [ 1979.722739][T21061] ? kernfs_root+0x23/0x2a0 [ 1979.722755][T21061] ? find_held_lock+0x2b/0x80 [ 1979.722766][T21061] ? kernfs_root+0xee/0x2a0 [ 1979.722780][T21061] ? kernfs_root+0xee/0x2a0 [ 1979.722798][T21061] kernfs_new_node+0x194/0x200 [ 1979.722810][T21061] ? __pfx_kernfs_new_node+0x10/0x10 [ 1979.722822][T21061] ? kernfs_add_one+0x213/0xb40 [ 1979.722838][T21061] __kernfs_create_file+0x53/0x350 [ 1979.722853][T21061] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1979.722872][T21061] internal_create_group+0x593/0xfb0 [ 1979.722892][T21061] ? __pfx_internal_create_group+0x10/0x10 [ 1979.722910][T21061] ? kernfs_create_link+0x1f1/0x280 [ 1979.722927][T21061] internal_create_groups+0x9d/0x150 [ 1979.722945][T21061] device_add+0x71a/0x1970 [ 1979.722961][T21061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1979.722978][T21061] ? __pfx_device_add+0x10/0x10 [ 1979.722993][T21061] ? lockdep_init_map_type+0x5c/0x250 [ 1979.723008][T21061] ? __init_waitqueue_head+0xca/0x150 [ 1979.723027][T21061] netdev_register_kobject+0x1df/0x410 [ 1979.723044][T21061] register_netdevice+0x1313/0x26b0 [ 1979.723061][T21061] ? __pfx_register_netdevice+0x10/0x10 [ 1979.723080][T21061] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 1979.723095][T21061] batadv_meshif_newlink+0x8f/0xc0 [ 1979.723109][T21061] rtnl_newlink+0x1697/0x2620 [ 1979.723129][T21061] ? __pfx_rtnl_newlink+0x10/0x10 [ 1979.723143][T21061] ? avc_has_perm_noaudit+0x56/0x470 [ 1979.723157][T21061] ? find_held_lock+0x2b/0x80 [ 1979.723168][T21061] ? avc_has_perm_noaudit+0x11e/0x470 [ 1979.723181][T21061] ? avc_has_perm_noaudit+0x11e/0x470 [ 1979.723211][T21061] ? lock_acquire+0x1d1/0x380 [ 1979.723226][T21061] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1979.723242][T21061] ? find_held_lock+0x2b/0x80 [ 1979.723253][T21061] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1979.723267][T21061] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1979.723283][T21061] ? __pfx_rtnl_newlink+0x10/0x10 [ 1979.723299][T21061] rtnetlink_rcv_msg+0x95e/0xe90 [ 1979.723315][T21061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1979.723339][T21061] netlink_rcv_skb+0x159/0x420 [ 1979.723354][T21061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1979.723370][T21061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1979.723383][T21061] ? __asan_memcpy+0x3c/0x60 [ 1979.723404][T21061] ? netlink_deliver_tap+0x1ae/0xb50 [ 1979.723420][T21061] netlink_unicast+0x668/0x950 [ 1979.723437][T21061] ? __pfx_netlink_unicast+0x10/0x10 [ 1979.723455][T21061] netlink_sendmsg+0x9ac/0x10c0 [ 1979.723472][T21061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1979.723489][T21061] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1979.723506][T21061] ? ____sys_sendmsg+0xa99/0xc30 [ 1979.723521][T21061] ____sys_sendmsg+0xa99/0xc30 [ 1979.723536][T21061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1979.723552][T21061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1979.723575][T21061] ___sys_sendmsg+0x190/0x1e0 [ 1979.723592][T21061] ? __pfx____sys_sendmsg+0x10/0x10 [ 1979.723609][T21061] ? futex_wait+0x11e/0x370 [ 1979.723635][T21061] ? find_held_lock+0x2b/0x80 [ 1979.723658][T21061] __sys_sendmsg+0x160/0x210 [ 1979.723673][T21061] ? __pfx___sys_sendmsg+0x10/0x10 [ 1979.723696][T21061] do_syscall_64+0x123/0x7b0 [ 1979.723711][T21061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.723723][T21061] RIP: 0033:0x7f9901d9fb19 [ 1979.723733][T21061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1979.723744][T21061] RSP: 002b:00007f9902c5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1979.723755][T21061] RAX: ffffffffffffffda RBX: 00007f9902025fa0 RCX: 00007f9901d9fb19 [ 1979.723763][T21061] RDX: 0000000020000840 RSI: 0000200000000800 RDI: 0000000000000008 [ 1979.723771][T21061] RBP: 00007f9901e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1979.723777][T21061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1979.723785][T21061] R13: 00007f9902026038 R14: 00007f9902025fa0 R15: 00007ffe195fec88 [ 1979.723802][T21061] [ 1979.818033][T21065] FAULT_INJECTION: forcing a failure. [ 1979.818033][T21065] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.818061][T21065] CPU: 0 UID: 0 PID: 21065 Comm: syz.1.3953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1979.818087][T21065] Tainted: [L]=SOFTLOCKUP [ 1979.818096][T21065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1979.818107][T21065] Call Trace: [ 1979.818114][T21065] [ 1979.818121][T21065] dump_stack_lvl+0x100/0x190 [ 1979.818153][T21065] should_fail_ex.cold+0x5/0xa [ 1979.818180][T21065] should_failslab+0xc2/0x120 [ 1979.818200][T21065] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1979.818225][T21065] ? __pfx_stack_trace_save+0x10/0x10 [ 1979.818246][T21065] ? alloc_empty_file+0x5b/0x1c0 [ 1979.818272][T21065] alloc_empty_file+0x5b/0x1c0 [ 1979.818295][T21065] path_openat+0xd6/0x23f0 [ 1979.818319][T21065] ? __pfx_path_openat+0x10/0x10 [ 1979.818346][T21065] do_file_open+0x20e/0x430 [ 1979.818368][T21065] ? __pfx_do_file_open+0x10/0x10 [ 1979.818404][T21065] ? _raw_spin_unlock+0x28/0x50 [ 1979.818420][T21065] ? alloc_fd+0x471/0x7a0 [ 1979.818447][T21065] do_sys_openat2+0x163/0x1d0 [ 1979.818469][T21065] ? __pfx_do_sys_openat2+0x10/0x10 [ 1979.818499][T21065] __x64_sys_openat+0x12d/0x210 [ 1979.818522][T21065] ? __pfx___x64_sys_openat+0x10/0x10 [ 1979.818554][T21065] do_syscall_64+0x123/0x7b0 [ 1979.818586][T21065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.818603][T21065] RIP: 0033:0x7f9901d6034e [ 1979.818617][T21065] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1979.818643][T21065] RSP: 002b:00007f9902c3aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1979.818660][T21065] RAX: ffffffffffffffda RBX: 00007f9902c3b6c0 RCX: 00007f9901d6034e [ 1979.818671][T21065] RDX: 0000000000000000 RSI: 00007f9902c3af90 RDI: ffffffffffffff9c [ 1979.818682][T21065] RBP: 00007f9901e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1979.818693][T21065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1979.818703][T21065] R13: 00007f9902026128 R14: 00007f9902026090 R15: 00007ffe195fec88 [ 1979.818730][T21065] [ 1980.236484][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1980.236528][T21070] IPv6: Can't replace route, no match found [ 1980.321218][ T5809] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1980.471923][ T5809] usb 3-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1980.472913][ T5809] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1980.472934][ T5809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.472949][ T5809] usb 3-1: config 0 has no interface number 0 [ 1980.472978][ T5809] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1980.493798][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.493820][ T5809] usb 3-1: Product: syz [ 1980.493833][ T5809] usb 3-1: Manufacturer: syz [ 1980.493846][ T5809] usb 3-1: SerialNumber: syz [ 1980.534185][ T5809] usb 3-1: config 0 descriptor?? [ 1980.560690][ T5809] yurex 3-1:0.50: Could not find endpoints [ 1980.636579][ T31] audit: type=1400 audit(1794213126.954:1611): avc: denied { mount } for pid=21074 comm="syz.1.3955" name="/" dev="hugetlbfs" ino=66594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1981.488650][T21078] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1981.488667][T21078] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1981.583762][T21078] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1981.583785][T21078] Bluetooth: hci4: Error when powering off device on rfkill (-4)                                                                      syzkaller syzkaller login: [ 1984.324779][ T31] audit: type=1400 audit(1794213130.644:1615): avc: denied { write } for pid=21092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1984.424080][ T31] audit: type=1400 audit(1794213130.744:1616): avc: denied { write } for pid=21105 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1984.715256][T21112] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 1984.744763][T21112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1984.800363][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 1984.804739][T21112] macvlan2: entered promiscuous mode [ 1984.804756][T21112] macvlan2: entered allmulticast mode [ 1984.864680][T21112] bond2: (slave ip6gretap1): making interface the new active one [ 1984.868241][T21112] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1984.966281][ T31] audit: type=1400 audit(1794213131.284:1617): avc: denied { write } for pid=21107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1985.019946][ T31] audit: type=1400 audit(1794213131.334:1618): avc: denied { write } for pid=21121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1985.191507][ T31] audit: type=1400 audit(1794213131.514:1619): avc: denied { write } for pid=21123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1985.312903][ T31] audit: type=1400 audit(1794213131.634:1620): avc: denied { write } for pid=21134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1985.492234][ T31] audit: type=1400 audit(1794213131.814:1621): avc: denied { write } for pid=21136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1985.549256][ T31] audit: type=1400 audit(1794213131.864:1622): avc: denied { write } for pid=21147 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1985.720734][ T31] audit: type=1400 audit(1794213132.034:1623): avc: denied { write } for pid=21149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1985.769523][ T31] audit: type=1400 audit(1794213132.084:1624): avc: denied { write } for pid=21160 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1995.506330][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1995.506348][ T31] audit: type=1400 audit(1794213141.824:1627): avc: denied { write } for pid=21178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1995.581627][ T31] audit: type=1400 audit(1794213141.904:1628): avc: denied { write } for pid=21189 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2031.942489][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2031.942534][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2093.383465][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2093.383497][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2154.822838][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2154.822868][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2216.262056][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2216.262105][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2277.702147][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2277.702204][ T1316] ieee802154 phy1 wpan1: encryption failed: -22