last executing test programs: 11.027969152s ago: executing program 3 (id=777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000004}, 0x0) r0 = getpgrp(0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 9.971135237s ago: executing program 1 (id=781): connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@proc={0x2d, 0x0, 0x25dfdbfe, 0x8000}, 0xc) 8.836770922s ago: executing program 2 (id=784): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x2, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) 8.819071967s ago: executing program 1 (id=785): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 8.733403409s ago: executing program 3 (id=786): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r6, &(0x7f0000000000)={0x27, r3, 0x0, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 7.786094515s ago: executing program 2 (id=794): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82080}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x1c8, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffe}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc0f3}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xfffffff7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='westwood', 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1210, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10a0, 0x10c0, 0x0, {0x390, 0x8f00}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1270) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x2b, 0x80003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) unshare(0x100000) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/177, 0xb1) getdents(r4, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000400)='v2\x00ul\x00\x00\n\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 7.78245852s ago: executing program 4 (id=795): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x3) 6.578863771s ago: executing program 4 (id=796): r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, 0x0, 0x0) 6.029146235s ago: executing program 2 (id=797): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(r0, 0x9) readv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1) 5.455274814s ago: executing program 1 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r3, &(0x7f00000026c0), 0x0, 0xffffffff, 0x34) 4.838028401s ago: executing program 3 (id=799): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) pivot_root(0x0, &(0x7f00000001c0)='./cgroup\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xa, 0x0, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e22, 0xfffffffe, @mcast2}, 0xffffffffffffffff, 0x40099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.640713342s ago: executing program 2 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x6e1d, &(0x7f0000000100)={0x0, 0xf3c0, 0x200, 0x0, 0x127}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) 4.584960445s ago: executing program 4 (id=801): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.442972572s ago: executing program 3 (id=802): mkdirat(0xffffffffffffff9c, 0x0, 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') 4.376594068s ago: executing program 1 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x100000001, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = timerfd_create(0x0, 0x80000) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000040)=0x8004) 3.128099071s ago: executing program 0 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.361011487s ago: executing program 4 (id=805): syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 2.337728798s ago: executing program 2 (id=806): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x3) 2.30512759s ago: executing program 4 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x70) inotify_init() r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0xa) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0) 2.121751971s ago: executing program 0 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sync() sync() sync() sync() sync() sync() ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd26, 0x1001, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x3, 0x8}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) 790.468349ms ago: executing program 2 (id=809): syz_usb_connect(0x5, 0xe4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af41900"], 0x0) 789.490218ms ago: executing program 3 (id=810): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 786.023058ms ago: executing program 4 (id=811): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 734.03136ms ago: executing program 1 (id=812): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xf0}}, 0x0) 547.497368ms ago: executing program 3 (id=813): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x2e, "d412be40b532cc37d442bd95cb06448a5e6a76691230ec0a86c3069b91ea70597f000000000000005377714fd11d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0x3, 0x67, {0x67, 0x21, "fd2939b1d889b36293ccba37e3f2b43776a0c347e79d07c12278377e18720bf1af4cf950a9be0751b5379c34315f39452436edf7a674b272e80f1dadec71f01f4531a22bd52a238ce8bb80c4aef2a0bb8e44235a6fa9f9b3d7506e2a6c0383164df100554c"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x40, 0x15, 0x1d, "daeb936f485a1925fcda853b8cbf13282a9d98892659db08d1c0f83b49"}, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)={0x40, 0x5, 0x3, "17c7d5"}}) 517.201673ms ago: executing program 1 (id=814): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000013c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 313.616787ms ago: executing program 0 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 244.158952ms ago: executing program 0 (id=816): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 84.812144ms ago: executing program 0 (id=817): syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 0s ago: executing program 0 (id=818): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000006, 0x1, 0xcdf, 0x2, "3596030000002474a3e47b329555fc00008000", 0x7, 0x10200005}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, &(0x7f00000000c0)="79b8c598", 0x4) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 0x14/0x30 [ 176.639801][ T6814] ? __kasan_kmalloc+0xaa/0xb0 [ 176.639824][ T6814] ? __pfx_alloc_vmap_area+0x10/0x10 [ 176.639848][ T6814] ? vm_map_ram+0x31d/0xf80 [ 176.639871][ T6814] ? vm_map_ram+0x6d9/0xf80 [ 176.639898][ T6814] vm_map_ram+0x745/0xf80 [ 176.639930][ T6814] fuse_readdir_uncached+0x858/0x1c00 [ 176.639971][ T6814] ? find_held_lock+0x2b/0x80 [ 176.639999][ T6814] ? clockevents_program_event+0x23e/0x820 [ 176.640028][ T6814] ? clockevents_program_event+0x23e/0x820 [ 176.640060][ T6814] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 176.640092][ T6814] ? ktime_get+0x9f/0x320 [ 176.640113][ T6814] ? ktime_get+0x1a4/0x320 [ 176.640138][ T6814] ? lapic_next_event+0x10/0x20 [ 176.640160][ T6814] ? clockevents_program_event+0x1ef/0x820 [ 176.640197][ T6814] ? __pfx_clockevents_program_event+0x10/0x10 [ 176.640227][ T6814] ? find_held_lock+0x2b/0x80 [ 176.640262][ T6814] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 176.640296][ T6814] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 176.640351][ T6814] ? find_held_lock+0x2b/0x80 [ 176.640380][ T6814] ? fuse_readdir+0x9a7/0x1f20 [ 176.640409][ T6814] ? fuse_readdir+0x9a7/0x1f20 [ 176.640439][ T6814] ? fuse_readdir+0x98f/0x1f20 [ 176.640473][ T6814] fuse_readdir+0x9bb/0x1f20 [ 176.640511][ T6814] ? avc_policy_seqno+0x9/0x20 [ 176.640545][ T6814] iterate_dir+0x296/0xae0 [ 176.640572][ T6814] __x64_sys_getdents64+0x13b/0x2c0 [ 176.640594][ T6814] ? __x64_sys_futex+0x358/0x4d0 [ 176.640622][ T6814] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 176.640646][ T6814] ? __pfx_filldir64+0x10/0x10 [ 176.640679][ T6814] do_syscall_64+0x123/0x790 [ 176.640713][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.640734][ T6814] RIP: 0033:0x7f1d18b9e159 [ 176.640762][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.640782][ T6814] RSP: 002b:00007f1d16dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 176.640802][ T6814] RAX: ffffffffffffffda RBX: 00007f1d18e26180 RCX: 00007f1d18b9e159 [ 176.640816][ T6814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 176.640828][ T6814] RBP: 00007f1d18c3506b R08: 0000000000000000 R09: 0000000000000000 [ 176.640841][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.640853][ T6814] R13: 00007f1d18e26218 R14: 00007f1d18e26180 R15: 00007ffc3ee6bb58 [ 176.640884][ T6814] [ 177.407157][ T31] audit: type=1400 audit(1790205000.121:748): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 182.122578][ T6850] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 182.184978][ T6850] udc dummy_udc.0: failed to start g1: -19 [ 182.185460][ T6850] UDC core: g1: couldn't find an available UDC or it's busy [ 182.280803][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.339026][ T6855] overlayfs: missing 'lowerdir' [ 183.048259][ T31] audit: type=1400 audit(1790205005.522:749): avc: denied { create } for pid=6858 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.382771][ T31] audit: type=1400 audit(1790205005.848:750): avc: denied { bind } for pid=6858 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.188270][ T31] audit: type=1326 audit(1790205007.651:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 185.188322][ T31] audit: type=1326 audit(1790205007.651:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 185.189449][ T31] audit: type=1326 audit(1790205007.651:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f079d55e98e code=0x7ffc0000 [ 185.189494][ T31] audit: type=1326 audit(1790205007.651:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 185.189536][ T31] audit: type=1326 audit(1790205007.651:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 185.314001][ T31] audit: type=1326 audit(1790205007.778:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 185.314049][ T31] audit: type=1326 audit(1790205007.778:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 185.314089][ T31] audit: type=1326 audit(1790205007.778:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 185.473611][ T6887] ip_tables: iptables: counters copy to user failed while replacing table [ 185.477896][ T6887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6887 comm=syz.1.295 [ 188.604323][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 188.604341][ T31] audit: type=1400 audit(1790205011.018:781): avc: denied { write } for pid=6902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.479957][ T31] audit: type=1400 audit(1790205011.912:782): avc: denied { write } for pid=6941 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.003427][ T31] audit: type=1400 audit(1790205012.430:783): avc: denied { read write } for pid=6958 comm="syz.3.309" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.003708][ T31] audit: type=1400 audit(1790205012.430:784): avc: denied { open } for pid=6958 comm="syz.3.309" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.188814][ T31] audit: type=1326 audit(1790205012.609:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 190.188941][ T31] audit: type=1326 audit(1790205012.609:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 190.202939][ T31] audit: type=1326 audit(1790205012.619:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f079d55e98e code=0x7ffc0000 [ 190.202986][ T31] audit: type=1326 audit(1790205012.619:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 190.203025][ T31] audit: type=1326 audit(1790205012.619:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 190.205383][ T31] audit: type=1326 audit(1790205012.629:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 190.403152][ T6969] ip_tables: iptables: counters copy to user failed while replacing table [ 190.407837][ T6969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6969 comm=syz.1.310 [ 194.145788][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 194.145805][ T31] audit: type=1400 audit(1790205016.469:809): avc: denied { write } for pid=7006 comm="syz.0.318" name="sg0" dev="devtmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 194.147313][ T31] audit: type=1400 audit(1790205016.469:810): avc: denied { open } for pid=7006 comm="syz.0.318" path="/dev/sg0" dev="devtmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 194.919551][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.919596][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.194889][ T7020] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 195.194889][ T7020] program syz.0.318 not setting count and/or reply_len properly [ 195.238112][ T31] audit: type=1400 audit(1790205017.590:811): avc: denied { write } for pid=7006 comm="syz.0.318" name="virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.490135][ T7009] syz.0.318 (7009): drop_caches: 2 [ 196.591729][ T31] audit: type=1400 audit(1790205018.937:812): avc: denied { allowed } for pid=7011 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 196.911441][ T31] audit: type=1326 audit(1790205019.251:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.2.324" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 196.911611][ T31] audit: type=1326 audit(1790205019.251:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.2.324" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 196.983967][ T31] audit: type=1326 audit(1790205019.329:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.2.324" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d18b5e98e code=0x7ffc0000 [ 196.983998][ T31] audit: type=1326 audit(1790205019.329:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.2.324" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 196.984021][ T31] audit: type=1326 audit(1790205019.329:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.2.324" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 196.987699][ T31] audit: type=1326 audit(1790205019.329:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.2.324" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 197.020421][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 197.113484][ T7038] ip_tables: iptables: counters copy to user failed while replacing table [ 197.114252][ T7038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7038 comm=syz.2.324 [ 197.192229][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 197.193065][ T7018] Bluetooth: hci1: command 0x0406 tx timeout [ 197.196039][ T7018] Bluetooth: hci4: command 0x0406 tx timeout [ 197.196972][ T7018] Bluetooth: hci0: command 0x0406 tx timeout [ 198.035448][ T7051] CIFS mount error: No usable UNC path provided in device string! [ 198.035448][ T7051] [ 198.035705][ T7051] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 199.436812][ T5700] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 199.630594][ T5700] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 199.666185][ T5700] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.666248][ T5700] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.733704][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 199.734003][ T5700] usb 3-1: Product: syz [ 199.734393][ T5700] usb 3-1: Manufacturer: syz [ 199.917971][ T5700] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 203.248787][ T7106] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 203.248787][ T7106] program syz.0.343 not setting count and/or reply_len properly [ 203.840540][ T5700] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 204.084362][ T5700] usb 3-1: USB disconnect, device number 6 [ 204.883365][ T7115] netlink: 256 bytes leftover after parsing attributes in process `syz.1.345'. [ 204.883429][ T7115] ksmbd: Unknown IPC event: 3, ignore. [ 204.909082][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'. [ 204.933668][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 204.933710][ T31] audit: type=1400 audit(1790205026.772:833): avc: denied { write } for pid=7111 comm="syz.1.345" path="socket:[14834]" dev="sockfs" ino=14834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.498342][ T5700] mos7840 3-1:1.0: device disconnected [ 205.575256][ T7115] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 205.575294][ T7115] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 205.575450][ T31] audit: type=1800 audit(1790205027.431:834): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.1.345" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 205.575489][ T31] audit: type=1400 audit(1790205027.431:835): avc: denied { firmware_load } for pid=7111 comm="syz.1.345" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 205.576242][ T7115] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 205.576369][ T31] audit: type=1400 audit(1790205027.431:836): avc: denied { firmware_load } for pid=7111 comm="syz.1.345" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 205.694463][ T7105] syz.0.343 (7105): drop_caches: 2 [ 207.157796][ T5700] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 207.258848][ T59] IPVS: starting estimator thread 0... [ 207.332984][ T5700] usb 4-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 207.336529][ T5700] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.336561][ T5700] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.336773][ T5700] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.352078][ T7146] IPVS: using max 32 ests per chain, 76800 per kthread [ 207.441865][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.441904][ T5700] usb 4-1: Product: syz [ 207.441919][ T5700] usb 4-1: Manufacturer: syz [ 207.442030][ T5700] usb 4-1: SerialNumber: syz [ 207.537001][ T31] audit: type=1400 audit(1790205029.238:837): avc: denied { read write } for pid=7147 comm="syz.4.356" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 207.579215][ T31] audit: type=1400 audit(1790205029.256:838): avc: denied { open } for pid=7147 comm="syz.4.356" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 209.113548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 209.151041][ T5797] usb 4-1: USB disconnect, device number 7 [ 209.400422][ T31] audit: type=1400 audit(1790205030.968:839): avc: denied { create } for pid=7161 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.403537][ T7162] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 209.413149][ T7162] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 209.535792][ T5700] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 209.821426][ T5700] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 209.843475][ T5700] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 209.843575][ T5700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.843638][ T5700] usb 2-1: config 0 has no interface number 0 [ 209.844069][ T5700] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 209.844251][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.018853][ T5700] usb 2-1: config 0 descriptor?? [ 210.136200][ T5700] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 210.292361][ T30] usb 2-1: USB disconnect, device number 6 [ 210.300181][ T1482] usb 2-1: Failed to submit usb control message: -71 [ 210.300211][ T1482] usb 2-1: unable to send the bmi data to the device: -71 [ 210.300227][ T1482] usb 2-1: unable to get target info from device [ 210.300241][ T1482] usb 2-1: could not get target info (-71) [ 210.300264][ T1482] usb 2-1: could not probe fw (-71) [ 210.394559][ T31] audit: type=1400 audit(1790205031.892:840): avc: denied { name_bind } for pid=7178 comm="syz.0.366" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 211.883336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 212.429425][ T31] audit: type=1400 audit(1790205032.946:841): avc: denied { setopt } for pid=7178 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 212.431011][ T1221] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.802227][ T31] audit: type=1400 audit(1790205034.110:842): avc: denied { write } for pid=7189 comm="syz.1.371" name="functions" dev="configfs" ino=11488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.802457][ T7190] LUN: removable file: (no medium) [ 212.832464][ T31] audit: type=1400 audit(1790205034.147:843): avc: denied { write } for pid=7189 comm="syz.1.371" name="functions" dev="configfs" ino=11488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.833887][ T31] audit: type=1400 audit(1790205034.147:844): avc: denied { remove_name } for pid=7189 comm="syz.1.371" name="mass_storage.usb0" dev="configfs" ino=14973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.834199][ T31] audit: type=1400 audit(1790205034.147:845): avc: denied { rmdir } for pid=7189 comm="syz.1.371" name="mass_storage.usb0" dev="configfs" ino=14973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.870770][ T1221] usb 3-1: device not accepting address 7, error -71 [ 214.752789][ T31] audit: type=1400 audit(1790205035.911:846): avc: denied { setopt } for pid=7192 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.318634][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 216.116821][ T31] audit: type=1400 audit(1790205037.176:847): avc: denied { setopt } for pid=7212 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.160894][ T31] audit: type=1400 audit(1790205037.213:848): avc: denied { write } for pid=7214 comm="syz.0.378" name="subsystems" dev="configfs" ino=3493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.240108][ T7219] binder: 7218:7219 ioctl c0306201 200000000640 returned -22 [ 216.279172][ T31] audit: type=1400 audit(1790205037.287:849): avc: denied { read } for pid=7218 comm="syz.1.380" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.279225][ T31] audit: type=1400 audit(1790205037.287:850): avc: denied { open } for pid=7218 comm="syz.1.380" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.279266][ T31] audit: type=1400 audit(1790205037.287:851): avc: denied { write } for pid=7218 comm="syz.1.380" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.279306][ T31] audit: type=1400 audit(1790205037.296:852): avc: denied { ioctl } for pid=7218 comm="syz.1.380" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.311351][ T7215] nvmet: adding nsid 1 to subsystem testsubsys [ 216.319283][ T31] audit: type=1400 audit(1790205037.351:853): avc: denied { write } for pid=7214 comm="syz.0.378" name="namespaces" dev="configfs" ino=14305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.782864][ T31] audit: type=1400 audit(1790205037.730:854): avc: denied { write } for pid=7214 comm="syz.0.378" name="ports" dev="configfs" ino=3494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.989769][ T31] audit: type=1326 audit(1790205037.979:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 216.989822][ T31] audit: type=1326 audit(1790205037.979:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 218.025845][ T7193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.588473][ T7253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.715965][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.738193][ T5700] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 218.781223][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 218.895528][ T30] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 218.900251][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 218.900312][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 218.900346][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 218.900374][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 218.900502][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.982806][ T5700] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 218.998116][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 219.014174][ T25] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 219.056618][ T25] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 219.086429][ T30] usb 5-1: config 0 descriptor?? [ 219.110355][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.113237][ T5700] usb 1-1: Product: syz [ 219.113851][ T5700] usb 1-1: Manufacturer: syz [ 219.114864][ T5700] usb 1-1: SerialNumber: syz [ 219.171106][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.171954][ T25] usb 2-1: Product: syz [ 219.172972][ T25] usb 2-1: Manufacturer: syz [ 219.173717][ T25] usb 2-1: SerialNumber: syz [ 219.327940][ T5700] usb 1-1: config 0 descriptor?? [ 219.607638][ T5700] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 219.865560][ T25] usb 2-1: selecting invalid altsetting 1 [ 219.939912][ T30] hdpvr 5-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 219.939912][ T30] †Ã›‘êpY [ 219.984311][ T25] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 219.992080][ T25] usb 2-1: selecting invalid altsetting 1 [ 219.993675][ T7261] mmap: syz.3.394 (7261) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 220.030454][ T25] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 220.032315][ T25] usb 2-1: selecting invalid altsetting 1 [ 220.254034][ T5700] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.303492][ T1565] usb 1-1: USB disconnect, device number 9 [ 220.418880][ T5700] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 220.423257][ T5700] usb 3-1: config index 0 descriptor too short (expected 50, got 32) [ 220.423288][ T5700] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.423590][ T5700] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 220.423708][ T5700] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.493511][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.493684][ T5700] usb 3-1: Product: syz [ 220.493725][ T5700] usb 3-1: Manufacturer: syz [ 220.493765][ T5700] usb 3-1: SerialNumber: syz [ 220.749881][ T7259] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 220.850427][ T5700] usb_debug 3-1:1.0: debug converter detected [ 221.065796][ T5700] usb 3-1: debug converter now attached to ttyUSB0 [ 221.184136][ T25] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 221.204205][ T30] hdpvr 5-1:0.0: Could not setup controls [ 221.204540][ T30] hdpvr 5-1:0.0: registering videodev failed [ 221.229873][ T25] usb 2-1: USB disconnect, device number 7 [ 221.288652][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.326897][ T30] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 221.332957][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.335251][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.335370][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.335474][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.335545][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.335686][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.335751][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.335913][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.335990][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.336137][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.336209][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.336342][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.336383][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 221.366183][ T10] usb 3-1: USB disconnect, device number 9 [ 221.385416][ T10] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 221.385915][ T10] usb_debug 3-1:1.0: device disconnected [ 221.480639][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.507106][ T30] usb 5-1: USB disconnect, device number 6 [ 221.510860][ T7267] device-mapper: ioctl: Invalid ioctl structure: name c, dev f800 [ 221.531059][ T7271] FAULT_INJECTION: forcing a failure. [ 221.531059][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 221.531090][ T7271] CPU: 1 UID: 0 PID: 7271 Comm: syz.3.398 Not tainted syzkaller #0 PREEMPT(full) [ 221.531116][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 221.531140][ T7271] Call Trace: [ 221.531147][ T7271] [ 221.531155][ T7271] dump_stack_lvl+0x100/0x190 [ 221.531191][ T7271] should_fail_ex.cold+0x5/0xa [ 221.531221][ T7271] should_failslab+0xc2/0x120 [ 221.531248][ T7271] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 221.531273][ T7271] ? sidtab_sid2str_get+0x84/0x670 [ 221.531308][ T7271] ? sidtab_sid2str_get+0x17a/0x670 [ 221.531338][ T7271] kmemdup_noprof+0x29/0x60 [ 221.531365][ T7271] sidtab_sid2str_get+0x17a/0x670 [ 221.531395][ T7271] security_sid_to_context_core+0x373/0x700 [ 221.531423][ T7271] avc_audit_post_callback+0x1aa/0x910 [ 221.531451][ T7271] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 221.531478][ T7271] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 221.531503][ T7271] ? skb_put+0x138/0x180 [ 221.531535][ T7271] ? audit_log_n_string+0x2a3/0x5a0 [ 221.531565][ T7271] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 221.531589][ T7271] common_lsm_audit+0x23f/0x2b0 [ 221.531619][ T7271] ? __pfx_common_lsm_audit+0x10/0x10 [ 221.531641][ T7271] ? avc_denied+0x14a/0x190 [ 221.531677][ T7271] slow_avc_audit+0x186/0x210 [ 221.531706][ T7271] ? __pfx_slow_avc_audit+0x10/0x10 [ 221.531734][ T7271] ? find_held_lock+0x2b/0x80 [ 221.531761][ T7271] ? avc_has_perm_noaudit+0x359/0x470 [ 221.531800][ T7271] avc_has_perm+0x1a6/0x1e0 [ 221.531825][ T7271] ? __pfx_avc_has_perm+0x10/0x10 [ 221.531863][ T7271] selinux_socket_create+0x215/0x590 [ 221.531886][ T7271] ? __pfx_selinux_socket_create+0x10/0x10 [ 221.531913][ T7271] ? do_futex+0x190/0x440 [ 221.531941][ T7271] security_socket_create+0xa3/0x250 [ 221.531963][ T7271] __sock_create+0x8f/0x860 [ 221.531988][ T7271] __sys_socket+0x14d/0x260 [ 221.532011][ T7271] ? __pfx___sys_socket+0x10/0x10 [ 221.532041][ T7271] __x64_sys_socket+0x72/0xb0 [ 221.532060][ T7271] ? lockdep_hardirqs_on+0x7d/0x110 [ 221.532089][ T7271] do_syscall_64+0x123/0x790 [ 221.532120][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.532141][ T7271] RIP: 0033:0x7f8d53b9e159 [ 221.532158][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.532177][ T7271] RSP: 002b:00007f8d549a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 221.532198][ T7271] RAX: ffffffffffffffda RBX: 00007f8d53e25fa0 RCX: 00007f8d53b9e159 [ 221.532212][ T7271] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 221.532225][ T7271] RBP: 00007f8d53c3506b R08: 0000000000000000 R09: 0000000000000000 [ 221.532237][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.532249][ T7271] R13: 00007f8d53e26038 R14: 00007f8d53e25fa0 R15: 00007ffcb56d0f68 [ 221.532287][ T7271] [ 221.565860][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 221.565876][ T31] audit: type=1400 audit(1790205042.180:878): avc: denied { create } for pid=7268 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tsid=147 tclass=kcm_socket permissive=1 [ 221.884407][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 222.059523][ T7285] FAULT_INJECTION: forcing a failure. [ 222.059523][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 222.059554][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.3.404 Not tainted syzkaller #0 PREEMPT(full) [ 222.059577][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 222.059590][ T7285] Call Trace: [ 222.059597][ T7285] [ 222.059604][ T7285] dump_stack_lvl+0x100/0x190 [ 222.059643][ T7285] should_fail_ex.cold+0x5/0xa [ 222.059673][ T7285] should_failslab+0xc2/0x120 [ 222.059700][ T7285] kmem_cache_alloc_noprof+0x92/0x6a0 [ 222.059724][ T7285] ? security_file_alloc+0x34/0x2c0 [ 222.059764][ T7285] security_file_alloc+0x34/0x2c0 [ 222.059790][ T7285] init_file+0x95/0x480 [ 222.059818][ T7285] alloc_empty_file+0x79/0x1c0 [ 222.059846][ T7285] path_openat+0xdb/0x2440 [ 222.059876][ T7285] ? __pfx_path_openat+0x10/0x10 [ 222.059908][ T7285] do_file_open+0x20e/0x430 [ 222.059936][ T7285] ? __pfx_do_file_open+0x10/0x10 [ 222.059981][ T7285] ? _raw_spin_unlock+0x28/0x50 [ 222.060008][ T7285] ? alloc_fd+0x471/0x7a0 [ 222.060043][ T7285] do_sys_openat2+0x10f/0x1e0 [ 222.060071][ T7285] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.060108][ T7285] __x64_sys_openat+0x12d/0x210 [ 222.060137][ T7285] ? __pfx___x64_sys_openat+0x10/0x10 [ 222.060176][ T7285] do_syscall_64+0x123/0x790 [ 222.060207][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.060228][ T7285] RIP: 0033:0x7f8d53b9e159 [ 222.060244][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.060263][ T7285] RSP: 002b:00007f8d549a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 222.060283][ T7285] RAX: ffffffffffffffda RBX: 00007f8d53e25fa0 RCX: 00007f8d53b9e159 [ 222.060297][ T7285] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 222.060310][ T7285] RBP: 00007f8d53c3506b R08: 0000000000000000 R09: 0000000000000000 [ 222.060322][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.060334][ T7285] R13: 00007f8d53e26038 R14: 00007f8d53e25fa0 R15: 00007ffcb56d0f68 [ 222.060359][ T7285] [ 222.240164][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 222.350028][ T31] audit: type=1400 audit(1790205042.928:879): avc: denied { read } for pid=7286 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.351388][ T31] audit: type=1400 audit(1790205042.928:880): avc: denied { write } for pid=7286 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.438355][ T30] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 222.507527][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.507873][ T30] usb 5-1: Product: syz [ 222.508076][ T30] usb 5-1: Manufacturer: syz [ 222.508717][ T30] usb 5-1: SerialNumber: syz [ 222.541402][ T1482] IPVS: starting estimator thread 0... [ 222.632240][ T30] usb 5-1: config 0 descriptor?? [ 222.669695][ T7292] IPVS: using max 32 ests per chain, 76800 per kthread [ 222.732774][ T30] ch341 5-1:0.0: ch341-uart converter detected [ 223.111072][ T31] audit: type=1400 audit(1790205043.630:881): avc: denied { read write } for pid=7293 comm="syz.3.407" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 223.111456][ T31] audit: type=1400 audit(1790205043.630:882): avc: denied { open } for pid=7293 comm="syz.3.407" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 223.221160][ T7296] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 223.701041][ T1221] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 223.829017][ T31] audit: type=1400 audit(1790205044.248:883): avc: denied { create } for pid=7293 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.829089][ T31] audit: type=1400 audit(1790205044.267:884): avc: denied { connect } for pid=7293 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.980689][ T1221] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 223.981647][ T1221] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.981701][ T1221] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 223.984677][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.984700][ T1221] usb 3-1: Product: syz [ 223.984715][ T1221] usb 3-1: Manufacturer: syz [ 223.984730][ T1221] usb 3-1: SerialNumber: syz [ 224.056997][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 224.189010][ T30] usb 5-1: failed to send control message: -71 [ 224.189239][ T30] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 224.328078][ T30] usb 5-1: USB disconnect, device number 7 [ 224.358241][ T30] ch341 5-1:0.0: device disconnected [ 224.448940][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 224.587809][ C0] usb 3-1: received EP1 urb->status = -2 [ 224.588542][ T1221] usb 3-1: unable to init card! (ret=-110) [ 224.589166][ T1221] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 224.788521][ T1221] usb 3-1: USB disconnect, device number 10 [ 225.512778][ T7333] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input5 [ 225.559541][ T7335] FAULT_INJECTION: forcing a failure. [ 225.559541][ T7335] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 225.559572][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: syz.4.423 Not tainted syzkaller #0 PREEMPT(full) [ 225.559595][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 225.559607][ T7335] Call Trace: [ 225.559615][ T7335] [ 225.559624][ T7335] dump_stack_lvl+0x100/0x190 [ 225.559669][ T7335] should_fail_ex.cold+0x5/0xa [ 225.559708][ T7335] _copy_from_user+0x2e/0xd0 [ 225.559740][ T7335] bpf_prog_load+0x1490/0x2a80 [ 225.559790][ T7335] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.559855][ T7335] __sys_bpf+0x1f46/0x4a30 [ 225.559880][ T7335] ? plist_check_list+0x1b8/0x280 [ 225.559913][ T7335] ? plist_check_list+0x190/0x280 [ 225.559944][ T7335] ? __pfx___sys_bpf+0x10/0x10 [ 225.559971][ T7335] ? find_held_lock+0x2b/0x80 [ 225.560022][ T7335] ? futex_wake+0x4ea/0x5e0 [ 225.560053][ T7335] ? futex_private_hash_put.part.0+0xdc/0x180 [ 225.560091][ T7335] ? futex_private_hash_put+0x24/0x30 [ 225.560132][ T7335] ? __pfx_futex_wake+0x10/0x10 [ 225.560156][ T7335] ? sock_do_ioctl+0x1d4/0x280 [ 225.560206][ T7335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.560263][ T7335] ? __x64_sys_futex+0x34f/0x4d0 [ 225.560292][ T7335] ? __x64_sys_futex+0x358/0x4d0 [ 225.560320][ T7335] ? xfd_validate_state+0x129/0x190 [ 225.560352][ T7335] ? __x64_sys_bpf+0xce/0x140 [ 225.560381][ T7335] __x64_sys_bpf+0xce/0x140 [ 225.560411][ T7335] ? do_syscall_64+0xae/0x790 [ 225.560456][ T7335] do_syscall_64+0x123/0x790 [ 225.560507][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.560534][ T7335] RIP: 0033:0x7fb28ad9e159 [ 225.560552][ T7335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.560573][ T7335] RSP: 002b:00007fb28bc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.560594][ T7335] RAX: ffffffffffffffda RBX: 00007fb28b025fa0 RCX: 00007fb28ad9e159 [ 225.560608][ T7335] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 225.560621][ T7335] RBP: 00007fb28ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 225.560632][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.560643][ T7335] R13: 00007fb28b026038 R14: 00007fb28b025fa0 R15: 00007ffe9c332828 [ 225.560671][ T7335] [ 226.280548][ T31] audit: type=1400 audit(1790205046.565:885): avc: denied { ioctl } for pid=7364 comm="syz.3.433" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15647 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 226.460980][ T31] audit: type=1400 audit(1790205046.732:886): avc: denied { cmd } for pid=7374 comm="iou-wrk-7375" path="socket:[15262]" dev="sockfs" ino=15262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 226.568888][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 226.590428][ T1221] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 226.701836][ T31] audit: type=1400 audit(1790205046.953:887): avc: denied { read } for pid=7386 comm="syz.0.440" name="video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 226.763829][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 226.770444][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 226.770665][ T1221] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 226.771643][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.777798][ T10] usb 4-1: config 0 descriptor?? [ 226.780903][ T1221] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 226.780945][ T1221] usb 2-1: Product: syz [ 226.780959][ T1221] usb 2-1: Manufacturer: syz [ 226.780974][ T1221] usb 2-1: SerialNumber: syz [ 226.787023][ T1221] usb 2-1: config 0 descriptor?? [ 227.214652][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 227.735352][ T1221] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 227.735823][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.737494][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 227.737537][ T10] usb 4-1: media controller created [ 227.753007][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.958503][ T1221] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 227.958564][ T1221] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 228.024333][ T10] az6027: usb out operation failed. (-71) [ 228.026088][ T10] az6027: usb out operation failed. (-71) [ 228.026114][ T10] stb0899_attach: Driver disabled by Kconfig [ 228.026123][ T10] az6027: no front-end attached [ 228.026123][ T10] [ 228.027111][ T10] az6027: usb out operation failed. (-71) [ 228.027124][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 228.045717][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 228.122845][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 228.122868][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 228.142327][ T10] usb 4-1: USB disconnect, device number 8 [ 228.176003][ T1221] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 228.223880][ T1221] usb 2-1: USB disconnect, device number 8 [ 228.406214][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 228.430393][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 228.430410][ T31] audit: type=1400 audit(1790205048.541:891): avc: denied { read } for pid=7413 comm="syz.4.451" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.430453][ T31] audit: type=1400 audit(1790205048.541:892): avc: denied { open } for pid=7413 comm="syz.4.451" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.437195][ T31] audit: type=1400 audit(1790205048.550:893): avc: denied { ioctl } for pid=7413 comm="syz.4.451" path="/newroot/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.656212][ T31] audit: type=1400 audit(1790205048.753:894): avc: denied { create } for pid=7420 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 228.860922][ T1221] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.040869][ T1221] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 229.057058][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.440689][ T1221] usb 5-1: NFC: Reader power on cmd error 0 [ 229.440713][ T1221] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 229.440829][ T1221] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -22 [ 229.474548][ T1221] usb 5-1: USB disconnect, device number 8 [ 229.498720][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.539961][ T31] audit: type=1400 audit(1790205049.575:895): avc: denied { create } for pid=7432 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.541453][ T31] audit: type=1400 audit(1790205049.575:896): avc: denied { bind } for pid=7432 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.544056][ T31] audit: type=1400 audit(1790205049.575:897): avc: denied { connect } for pid=7432 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.544534][ T31] audit: type=1400 audit(1790205049.575:898): avc: denied { write } for pid=7432 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.578437][ T7435] netlink: 'syz.0.460': attribute type 2 has an invalid length. [ 229.742038][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 229.743306][ T25] usb 3-1: config index 0 descriptor too short (expected 50, got 32) [ 229.743329][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.743385][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 229.743408][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.749210][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.749233][ T25] usb 3-1: Product: syz [ 229.749248][ T25] usb 3-1: Manufacturer: syz [ 229.749263][ T25] usb 3-1: SerialNumber: syz [ 229.757306][ T7424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 229.762399][ T25] usb_debug 3-1:1.0: debug converter detected [ 229.772455][ T25] usb 3-1: debug converter now attached to ttyUSB0 [ 229.989686][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 229.993149][ T25] usb 3-1: USB disconnect, device number 11 [ 230.008144][ T25] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 230.008669][ T25] usb_debug 3-1:1.0: device disconnected [ 230.725073][ T31] audit: type=1326 audit(1790205050.664:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.2.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 230.726390][ T31] audit: type=1326 audit(1790205050.664:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.2.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 230.901076][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e0d8400: rx timeout, send abort [ 230.909474][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807e0d8400: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 231.291385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 233.935437][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 233.935455][ T31] audit: type=1326 audit(1790205053.619:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.1.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 233.935500][ T31] audit: type=1326 audit(1790205053.619:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.1.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 234.146834][ T7475] FAULT_INJECTION: forcing a failure. [ 234.146834][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 234.146868][ T7475] CPU: 1 UID: 0 PID: 7475 Comm: syz.1.475 Not tainted syzkaller #0 PREEMPT(full) [ 234.146899][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 234.146913][ T7475] Call Trace: [ 234.146921][ T7475] [ 234.146930][ T7475] dump_stack_lvl+0x100/0x190 [ 234.146967][ T7475] should_fail_ex.cold+0x5/0xa [ 234.146998][ T7475] should_failslab+0xc2/0x120 [ 234.147026][ T7475] __kmalloc_cache_noprof+0x91/0x6d0 [ 234.147059][ T7475] ? tomoyo_find_next_domain+0xfd/0x2010 [ 234.147097][ T7475] tomoyo_find_next_domain+0xfd/0x2010 [ 234.147130][ T7475] ? __pfx___kernel_read+0x10/0x10 [ 234.147160][ T7475] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 234.147203][ T7475] tomoyo_bprm_check_security+0x12d/0x1d0 [ 234.147232][ T7475] ? tomoyo_bprm_check_security+0x11f/0x1d0 [ 234.147263][ T7475] security_bprm_check+0x87/0x1e0 [ 234.147294][ T7475] bprm_execve+0x80b/0x1940 [ 234.147325][ T7475] ? __pfx_bprm_execve+0x10/0x10 [ 234.147346][ T7475] ? copy_string_kernel+0x339/0x3f0 [ 234.147375][ T7475] do_execveat_common.isra.0+0x4a5/0x580 [ 234.147405][ T7475] __x64_sys_execve+0x93/0xd0 [ 234.147429][ T7475] do_syscall_64+0x123/0x790 [ 234.147462][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.147483][ T7475] RIP: 0033:0x7f079d59e159 [ 234.147501][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.147521][ T7475] RSP: 002b:00007f079e46e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 234.147543][ T7475] RAX: ffffffffffffffda RBX: 00007f079d825fa0 RCX: 00007f079d59e159 [ 234.147557][ T7475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 234.147569][ T7475] RBP: 00007f079d63506b R08: 0000000000000000 R09: 0000000000000000 [ 234.147582][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.147594][ T7475] R13: 00007f079d826038 R14: 00007f079d825fa0 R15: 00007ffea3232ab8 [ 234.147625][ T7475] [ 234.467323][ T1221] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 235.479977][ T1221] usb 4-1: Using ep0 maxpacket: 16 [ 235.527785][ T1221] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 235.550549][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.550592][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.550626][ T1221] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.550702][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.851179][ T31] audit: type=1400 audit(1790205055.391:953): avc: denied { write } for pid=7490 comm="syz.1.480" name="frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 235.887087][ T31] audit: type=1400 audit(1790205055.428:954): avc: denied { ioctl } for pid=7490 comm="syz.1.480" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=925 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 235.887305][ T7491] FAULT_INJECTION: forcing a failure. [ 235.887305][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.887333][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.1.480 Not tainted syzkaller #0 PREEMPT(full) [ 235.887357][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 235.887370][ T7491] Call Trace: [ 235.887377][ T7491] [ 235.887385][ T7491] dump_stack_lvl+0x100/0x190 [ 235.887423][ T7491] should_fail_ex.cold+0x5/0xa [ 235.887453][ T7491] _copy_from_user+0x2e/0xd0 [ 235.887480][ T7491] memdup_user+0x6b/0xe0 [ 235.887503][ T7491] dvb_frontend_handle_ioctl+0x1085/0x2f00 [ 235.887541][ T7491] ? __pfx_dvb_frontend_handle_ioctl+0x10/0x10 [ 235.887574][ T7491] ? do_raw_spin_lock+0x128/0x260 [ 235.887602][ T7491] ? find_held_lock+0x2b/0x80 [ 235.887630][ T7491] ? down_interruptible+0x66/0xa0 [ 235.887652][ T7491] ? rcu_is_watching+0x13/0xc0 [ 235.887680][ T7491] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.887709][ T7491] ? lockdep_hardirqs_on+0x7d/0x110 [ 235.887743][ T7491] dvb_frontend_do_ioctl+0x1ce/0x320 [ 235.887786][ T7491] dvb_usercopy+0x167/0x340 [ 235.887806][ T7491] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 235.887841][ T7491] ? __pfx_dvb_usercopy+0x10/0x10 [ 235.887859][ T7491] ? __fget_files+0x34/0x3d0 [ 235.887896][ T7491] ? selinux_file_ioctl+0x13b/0x290 [ 235.887919][ T7491] ? selinux_file_ioctl+0xb6/0x290 [ 235.887947][ T7491] dvb_frontend_ioctl+0x50/0x80 [ 235.887973][ T7491] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 235.888001][ T7491] __x64_sys_ioctl+0x18e/0x210 [ 235.888026][ T7491] do_syscall_64+0x123/0x790 [ 235.888058][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.888081][ T7491] RIP: 0033:0x7f079d59e159 [ 235.888098][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.888117][ T7491] RSP: 002b:00007f079e46e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.888139][ T7491] RAX: ffffffffffffffda RBX: 00007f079d825fa0 RCX: 00007f079d59e159 [ 235.888154][ T7491] RDX: 0000200000000440 RSI: 0000000040106f52 RDI: 0000000000000004 [ 235.888168][ T7491] RBP: 00007f079d63506b R08: 0000000000000000 R09: 0000000000000000 [ 235.888182][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.888194][ T7491] R13: 00007f079d826038 R14: 00007f079d825fa0 R15: 00007ffea3232ab8 [ 235.888224][ T7491] [ 236.343054][ T1221] usb 4-1: config 0 descriptor?? [ 236.823817][ T1221] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 236.823853][ T1221] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 236.823874][ T1221] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 236.823897][ T1221] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 236.823920][ T1221] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 236.834089][ T1221] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 237.010442][ T31] audit: type=1400 audit(1790205056.462:955): avc: denied { write } for pid=7502 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 237.034105][ T7503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 237.045336][ T1221] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 237.047710][ T1221] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 237.052464][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.052862][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.295248][ T10] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 237.946599][ T10] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 238.007705][ T1221] usb 4-1: USB disconnect, device number 9 [ 238.266631][ T10] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 238.266700][ T10] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 238.328867][ T31] audit: type=1400 audit(1790205057.681:956): avc: denied { read } for pid=4953 comm="acpid" name="event3" dev="devtmpfs" ino=3008 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.329111][ T31] audit: type=1400 audit(1790205057.681:957): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3008 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.329289][ T31] audit: type=1400 audit(1790205057.681:958): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3008 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.688875][ T31] audit: type=1400 audit(1790205058.013:959): avc: denied { append } for pid=7509 comm="syz.3.486" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 238.688961][ T7510] FAULT_INJECTION: forcing a failure. [ 238.688961][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 238.688990][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.3.486 Not tainted syzkaller #0 PREEMPT(full) [ 238.689016][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 238.689030][ T7510] Call Trace: [ 238.689038][ T7510] [ 238.689046][ T7510] dump_stack_lvl+0x100/0x190 [ 238.689083][ T7510] should_fail_ex.cold+0x5/0xa [ 238.689114][ T7510] should_failslab+0xc2/0x120 [ 238.689143][ T7510] __kmalloc_cache_noprof+0x91/0x6d0 [ 238.689173][ T7510] ? lock_acquire+0x1d1/0x380 [ 238.689195][ T7510] ? dm_open+0x51/0x130 [ 238.689229][ T7510] dm_open+0x51/0x130 [ 238.689257][ T7510] ? __pfx_dm_open+0x10/0x10 [ 238.689282][ T7510] misc_open+0x26d/0x450 [ 238.689305][ T7510] ? __pfx_misc_open+0x10/0x10 [ 238.689325][ T7510] chrdev_open+0x234/0x6a0 [ 238.689354][ T7510] ? __pfx_chrdev_open+0x10/0x10 [ 238.689381][ T7510] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 238.689418][ T7510] do_dentry_open+0x6ab/0x14d0 [ 238.689441][ T7510] ? __pfx_chrdev_open+0x10/0x10 [ 238.689473][ T7510] vfs_open+0x82/0x3f0 [ 238.689513][ T7510] path_openat+0x19fa/0x2440 [ 238.689541][ T7510] ? __pfx_path_openat+0x10/0x10 [ 238.689572][ T7510] do_file_open+0x20e/0x430 [ 238.689597][ T7510] ? __pfx_do_file_open+0x10/0x10 [ 238.689643][ T7510] ? _raw_spin_unlock+0x28/0x50 [ 238.689669][ T7510] ? alloc_fd+0x471/0x7a0 [ 238.689704][ T7510] do_sys_openat2+0x10f/0x1e0 [ 238.689733][ T7510] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.689773][ T7510] __x64_sys_openat+0x12d/0x210 [ 238.689803][ T7510] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.689843][ T7510] do_syscall_64+0x123/0x790 [ 238.689872][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.689893][ T7510] RIP: 0033:0x7f8d53b9e159 [ 238.689910][ T7510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.689928][ T7510] RSP: 002b:00007f8d549a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.689948][ T7510] RAX: ffffffffffffffda RBX: 00007f8d53e25fa0 RCX: 00007f8d53b9e159 [ 238.689962][ T7510] RDX: 0000000000040443 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 238.689976][ T7510] RBP: 00007f8d53c3506b R08: 0000000000000000 R09: 0000000000000000 [ 238.689988][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.690000][ T7510] R13: 00007f8d53e26038 R14: 00007f8d53e25fa0 R15: 00007ffcb56d0f68 [ 238.690029][ T7510] [ 238.852433][ T31] audit: type=1400 audit(1790205058.161:960): avc: denied { execute } for pid=7515 comm="syz.4.488" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 239.003779][ T1221] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 239.167979][ T1221] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 239.171297][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 239.171325][ T1221] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 239.171369][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 239.171392][ T1221] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 239.171427][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.177502][ T1221] usb 2-1: config 0 descriptor?? [ 239.307037][ T1565] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 239.339519][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.416886][ T1221] hdpvr 2-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 239.416886][ T1221] †Ã›‘êpY [ 239.471183][ T1565] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 239.474833][ T1565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.474862][ T1565] usb 1-1: Product: syz [ 239.474876][ T1565] usb 1-1: Manufacturer: syz [ 239.474889][ T1565] usb 1-1: SerialNumber: syz [ 239.498693][ T1565] usb 1-1: config 0 descriptor?? [ 239.523461][ T1565] ch341 1-1:0.0: ch341-uart converter detected [ 239.533435][ T7539] Bluetooth: MGMT ver 1.23 [ 239.534910][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 239.553966][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.554713][ T25] usb 4-1: config 0 has no interfaces? [ 239.555748][ T25] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.555771][ T25] usb 4-1: Manufacturer: syz [ 239.599989][ T25] usb 4-1: config 0 descriptor?? [ 239.636756][ T1221] hdpvr 2-1:0.0: device init failed [ 239.636825][ T1221] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 239.653236][ T1221] usb 2-1: USB disconnect, device number 9 [ 239.766300][ T7545] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 239.840184][ T984] usb 4-1: USB disconnect, device number 10 [ 239.945706][ T7549] nvmet: Invalid value 'loop [ 239.945706][ T7549] ò' for trtype [ 240.179840][ T1565] usb 1-1: failed to send control message: -71 [ 240.179870][ T1565] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 240.184470][ T1565] usb 1-1: USB disconnect, device number 10 [ 240.185940][ T1565] ch341 1-1:0.0: device disconnected [ 240.866483][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 240.866499][ T31] audit: type=1400 audit(1790205060.026:964): avc: denied { getopt } for pid=7550 comm="syz.4.504" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.866552][ T59] IPVS: starting estimator thread 0... [ 240.986081][ T7553] IPVS: using max 55 ests per chain, 132000 per kthread [ 241.414964][ T31] audit: type=1400 audit(1790205060.533:965): avc: denied { read } for pid=7566 comm="syz.0.512" path="socket:[16677]" dev="sockfs" ino=16677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.787523][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 241.788876][ T5601] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 243.003960][ T31] audit: type=1400 audit(1790205062.001:966): avc: denied { write } for pid=7577 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.225429][ T31] audit: type=1400 audit(1790205062.204:967): avc: denied { connect } for pid=7588 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.312928][ T7604] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 243.364995][ T7589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.376471][ T31] audit: type=1400 audit(1790205062.343:968): avc: denied { mounton } for pid=7607 comm="syz.1.525" path="/106/file0" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 244.532427][ T31] audit: type=1400 audit(1790205063.414:969): avc: denied { bind } for pid=7624 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.532981][ T31] audit: type=1400 audit(1790205063.414:970): avc: denied { listen } for pid=7624 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.552616][ T31] audit: type=1400 audit(1790205063.432:971): avc: denied { getopt } for pid=7624 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.981306][ T31] audit: type=1400 audit(1790205063.802:972): avc: denied { read write } for pid=7627 comm="syz.0.533" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 244.981523][ T31] audit: type=1400 audit(1790205063.802:973): avc: denied { open } for pid=7627 comm="syz.0.533" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.227782][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 246.372166][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 246.372183][ T31] audit: type=1400 audit(1790205065.112:976): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 249.337411][ T31] audit: type=1400 audit(1790205067.845:977): avc: denied { create } for pid=7663 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 249.910046][ T31] audit: type=1400 audit(1790205068.371:978): avc: denied { bind } for pid=7663 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.910116][ T31] audit: type=1400 audit(1790205068.371:979): avc: denied { listen } for pid=7663 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.108280][ T31] audit: type=1326 audit(1790205068.565:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 250.108331][ T31] audit: type=1326 audit(1790205068.565:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 250.109081][ T31] audit: type=1326 audit(1790205068.565:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d18b5e98e code=0x7ffc0000 [ 250.109127][ T31] audit: type=1326 audit(1790205068.565:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 250.109167][ T31] audit: type=1326 audit(1790205068.565:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 250.110316][ T31] audit: type=1326 audit(1790205068.565:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1d18b9e159 code=0x7ffc0000 [ 250.597419][ T7676] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 250.670253][ T7676] bond2 (unregistering): Released all slaves [ 252.049347][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 252.251829][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 252.258690][ T25] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 252.277832][ T25] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 252.278360][ T25] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.278621][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.278914][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.318761][ T25] usb 4-1: config 0 descriptor?? [ 254.121469][ T25] hid-alps 0003:044E:120B.0002: failed to read command (-71) [ 254.122915][ T25] hid-alps 0003:044E:120B.0002: failed U1_NUM_SENS_X (-71) [ 254.268354][ T25] hid-alps 0003:044E:120B.0002: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 254.278736][ T25] usb 4-1: USB disconnect, device number 11 [ 254.465419][ T7704] fido_id[7704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 254.612791][ T984] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 254.643434][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 254.643452][ T31] audit: type=1326 audit(1790205072.738:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 254.643498][ T31] audit: type=1326 audit(1790205072.738:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 254.644256][ T31] audit: type=1326 audit(1790205072.738:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f079d55e98e code=0x7ffc0000 [ 254.644301][ T31] audit: type=1326 audit(1790205072.738:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 254.644343][ T31] audit: type=1326 audit(1790205072.738:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 254.679255][ T31] audit: type=1326 audit(1790205072.738:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 254.679313][ T31] audit: type=1326 audit(1790205072.738:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 254.679354][ T31] audit: type=1326 audit(1790205072.738:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 254.679396][ T31] audit: type=1326 audit(1790205072.757:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 254.679438][ T31] audit: type=1326 audit(1790205072.757:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.1.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 255.114211][ T984] usb 1-1: Using ep0 maxpacket: 16 [ 255.178137][ T984] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.181007][ T984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.181038][ T984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 255.181061][ T984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 255.181084][ T984] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.182050][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.182072][ T984] usb 1-1: SerialNumber: syz [ 255.228901][ T7706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.228998][ T7706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.272257][ T984] hub 1-1:1.0: bad descriptor, ignoring hub [ 255.272289][ T984] hub 1-1:1.0: probe with driver hub failed with error -5 [ 256.139299][ T1565] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 256.164621][ T7706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.164751][ T7706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.280602][ T1565] usb 5-1: device descriptor read/64, error -71 [ 256.334493][ T7728] FAULT_INJECTION: forcing a failure. [ 256.334493][ T7728] name failslab, interval 1, probability 0, space 0, times 0 [ 256.334526][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.1.569 Not tainted syzkaller #0 PREEMPT(full) [ 256.334551][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 256.334564][ T7728] Call Trace: [ 256.334572][ T7728] [ 256.334581][ T7728] dump_stack_lvl+0x100/0x190 [ 256.334621][ T7728] should_fail_ex.cold+0x5/0xa [ 256.334652][ T7728] should_failslab+0xc2/0x120 [ 256.334679][ T7728] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 256.334702][ T7728] ? find_held_lock+0x2b/0x80 [ 256.334728][ T7728] ? alloc_inode+0x183/0x250 [ 256.334753][ T7728] alloc_inode+0x183/0x250 [ 256.334773][ T7728] path_from_stashed+0x25b/0x760 [ 256.334800][ T7728] ? do_raw_spin_unlock+0x145/0x1e0 [ 256.334831][ T7728] ns_get_path+0x60/0x80 [ 256.334869][ T7728] proc_ns_get_link+0x260/0x2e0 [ 256.334899][ T7728] ? __pfx_proc_ns_get_link+0x10/0x10 [ 256.334933][ T7728] pick_link+0xd17/0x13c0 [ 256.334952][ T7728] ? rcu_is_watching+0x13/0xc0 [ 256.334978][ T7728] ? __pfx_proc_ns_get_link+0x10/0x10 [ 256.335009][ T7728] step_into_slowpath+0x9ba/0xf90 [ 256.335034][ T7728] ? rcu_read_lock_any_held+0x6a/0x90 [ 256.335066][ T7728] ? __pfx_step_into_slowpath+0x10/0x10 [ 256.335097][ T7728] path_openat+0xfab/0x2440 [ 256.335125][ T7728] ? __pfx_path_openat+0x10/0x10 [ 256.335159][ T7728] do_file_open+0x20e/0x430 [ 256.335187][ T7728] ? __pfx_do_file_open+0x10/0x10 [ 256.335234][ T7728] ? _raw_spin_unlock+0x28/0x50 [ 256.335260][ T7728] ? alloc_fd+0x471/0x7a0 [ 256.335296][ T7728] do_sys_openat2+0x10f/0x1e0 [ 256.335327][ T7728] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.335366][ T7728] __x64_sys_openat+0x12d/0x210 [ 256.335395][ T7728] ? __pfx___x64_sys_openat+0x10/0x10 [ 256.335435][ T7728] do_syscall_64+0x123/0x790 [ 256.335467][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.335488][ T7728] RIP: 0033:0x7f079d55e98e [ 256.335506][ T7728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.335525][ T7728] RSP: 002b:00007f079e46dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.335547][ T7728] RAX: ffffffffffffffda RBX: 00007f079e46e6c0 RCX: 00007f079d55e98e [ 256.335561][ T7728] RDX: 0000000000000002 RSI: 00007f079e46df90 RDI: ffffffffffffff9c [ 256.335574][ T7728] RBP: 00007f079d63506b R08: 0000000000000000 R09: 0000000000000000 [ 256.335587][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.335599][ T7728] R13: 00007f079d826038 R14: 00007f079d825fa0 R15: 00007ffea3232ab8 [ 256.335630][ T7728] [ 256.442510][ T984] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 256.540797][ T1565] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 256.650186][ T984] usb 1-1: USB disconnect, device number 11 [ 256.688997][ T1565] usb 5-1: device descriptor read/64, error -71 [ 256.800825][ T1565] usb usb5-port1: attempt power cycle [ 257.493791][ T1565] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 257.515916][ T1565] usb 5-1: device descriptor read/8, error -71 [ 258.931690][ T1565] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 259.033868][ T1565] usb 5-1: device descriptor read/8, error -71 [ 259.079214][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 259.152185][ T1565] usb usb5-port1: unable to enumerate USB device [ 259.238464][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 259.241327][ T25] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 259.245892][ T25] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 259.245924][ T25] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.245951][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 259.245982][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.271054][ T25] usb 2-1: config 0 descriptor?? [ 259.801328][ T984] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 260.424192][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 260.424209][ T31] audit: type=1326 audit(1790205078.083:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.0.589" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 260.424249][ T31] audit: type=1326 audit(1790205078.083:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.0.589" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 260.461900][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 260.489684][ T984] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 260.511244][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.511270][ T984] usb 5-1: Product: syz [ 260.511285][ T984] usb 5-1: Manufacturer: syz [ 260.511299][ T984] usb 5-1: SerialNumber: syz [ 260.513784][ T984] usb 5-1: config 0 descriptor?? [ 260.543217][ T984] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 260.606727][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.591'. [ 260.682261][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.682313][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.826736][ T25] hid-alps 0003:044E:120B.0003: failed to read command (-71) [ 260.826790][ T25] hid-alps 0003:044E:120B.0003: failed U1_NUM_SENS_X (-71) [ 260.889811][ T984] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 261.001431][ T25] hid-alps 0003:044E:120B.0003: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.1-1/input0 [ 261.533460][ T25] usb 2-1: USB disconnect, device number 10 [ 261.882771][ T7788] fido_id[7788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 262.010909][ T5715] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 262.163372][ T5715] usb 3-1: device descriptor read/64, error -71 [ 262.500858][ T7812] device-mapper: ioctl: Invalid ioctl structure: name N!, dev 1016477000040 [ 263.093943][ T5715] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.267238][ T5715] usb 3-1: device descriptor read/64, error -71 [ 263.387229][ T5715] usb usb3-port1: attempt power cycle [ 263.469583][ T25] usb 5-1: USB disconnect, device number 13 [ 263.539212][ T31] audit: type=1326 audit(1790205080.964:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7816 comm="syz.4.601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28ad9e159 code=0x7ffc0000 [ 263.539337][ T31] audit: type=1326 audit(1790205080.964:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7816 comm="syz.4.601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28ad9e159 code=0x7ffc0000 [ 263.539703][ T31] audit: type=1326 audit(1790205080.964:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7816 comm="syz.4.601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb28ad5e98e code=0x7ffc0000 [ 263.539838][ T31] audit: type=1326 audit(1790205080.964:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7816 comm="syz.4.601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28ad9e159 code=0x7ffc0000 [ 263.540168][ T31] audit: type=1326 audit(1790205080.964:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7816 comm="syz.4.601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28ad9e159 code=0x7ffc0000 [ 263.541826][ T31] audit: type=1326 audit(1790205080.964:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7816 comm="syz.4.601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb28ad9e159 code=0x7ffc0000 [ 263.542019][ T31] audit: type=1326 audit(1790205080.964:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7816 comm="syz.4.601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28ad9e159 code=0x7ffc0000 [ 263.542362][ T31] audit: type=1326 audit(1790205080.964:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7816 comm="syz.4.601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb28ad9e159 code=0x7ffc0000 [ 263.668117][ T5601] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 263.668140][ T5601] CPU: 0 UID: 0 PID: 5601 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 263.668166][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 263.668187][ T5601] Workqueue: hci0 hci_rx_work [ 263.668217][ T5601] Call Trace: [ 263.668224][ T5601] [ 263.668233][ T5601] dump_stack_lvl+0x100/0x190 [ 263.668265][ T5601] sysfs_warn_dup.cold+0x1c/0x28 [ 263.668295][ T5601] sysfs_create_dir_ns+0x24b/0x2b0 [ 263.668323][ T5601] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 263.668348][ T5601] ? find_held_lock+0x2b/0x80 [ 263.668376][ T5601] ? kobject_add_internal+0x25f/0x930 [ 263.668399][ T5601] ? kobject_add_internal+0x25f/0x930 [ 263.668424][ T5601] ? do_raw_spin_unlock+0x145/0x1e0 [ 263.668453][ T5601] kobject_add_internal+0x2c8/0x930 [ 263.668481][ T5601] kobject_add+0x16a/0x1e0 [ 263.668503][ T5601] ? __pfx_kobject_add+0x10/0x10 [ 263.668523][ T5601] ? class_to_subsys+0x10f/0x150 [ 263.668557][ T5601] ? kobject_put+0xb9/0x640 [ 263.668576][ T5601] ? _raw_spin_unlock+0x28/0x50 [ 263.668609][ T5601] device_add+0x294/0x1970 [ 263.668637][ T5601] ? __pfx_dev_set_name+0x10/0x10 [ 263.668660][ T5601] ? __pfx_device_add+0x10/0x10 [ 263.668689][ T5601] ? mgmt_send_event_skb+0x2fb/0x460 [ 263.668726][ T5601] hci_conn_add_sysfs+0x1a3/0x260 [ 263.668760][ T5601] le_conn_complete_evt+0x122f/0x2130 [ 263.668792][ T5601] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 263.668817][ T5601] ? hci_event_packet+0x186/0xcd0 [ 263.668849][ T5601] hci_le_conn_complete_evt+0x23c/0x3a0 [ 263.668876][ T5601] ? skb_pull_data+0x15f/0x1e0 [ 263.668909][ T5601] hci_le_meta_evt+0x34a/0x5f0 [ 263.668936][ T5601] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 263.668965][ T5601] hci_event_packet+0x51c/0xcd0 [ 263.668990][ T5601] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 263.669018][ T5601] ? __pfx_hci_event_packet+0x10/0x10 [ 263.669049][ T5601] ? lockdep_hardirqs_on+0x7d/0x110 [ 263.669085][ T5601] hci_rx_work+0x451/0xfc0 [ 263.669115][ T5601] process_one_work+0xac7/0x1b10 [ 263.669157][ T5601] ? __pfx_process_one_work+0x10/0x10 [ 263.669196][ T5601] ? lock_acquire+0x1d1/0x380 [ 263.669227][ T5601] ? __pfx_hci_rx_work+0x10/0x10 [ 263.669254][ T5601] worker_thread+0x5ef/0xe50 [ 263.669298][ T5601] ? kthread+0x13a/0x450 [ 263.669325][ T5601] ? __pfx_worker_thread+0x10/0x10 [ 263.669353][ T5601] kthread+0x373/0x450 [ 263.669380][ T5601] ? __pfx_kthread+0x10/0x10 [ 263.669408][ T5601] ret_from_fork+0x730/0xd60 [ 263.669434][ T5601] ? __pfx_ret_from_fork+0x10/0x10 [ 263.669458][ T5601] ? __switch_to+0x800/0x10f0 [ 263.669486][ T5601] ? __pfx_kthread+0x10/0x10 [ 263.669514][ T5601] ret_from_fork_asm+0x1a/0x30 [ 263.669552][ T5601] [ 263.671123][ T5601] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 263.671161][ T5601] Bluetooth: hci0: failed to register connection device [ 263.796498][ T5715] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 263.975907][ T5715] usb 3-1: device descriptor read/8, error -71 [ 264.234315][ T5715] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 264.253564][ T5715] usb 3-1: device descriptor read/8, error -71 [ 265.099289][ T7833] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 265.701173][ T5715] usb usb3-port1: unable to enumerate USB device [ 268.485868][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 268.487410][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.047295][ T7853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.346431][ T5800] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 269.841484][ T5800] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 270.344704][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.344734][ T5800] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 270.344757][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 270.344778][ T5800] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 270.344816][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.557045][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 271.045021][ T5715] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 271.084903][ T5800] usb 3-1: config 0 descriptor?? [ 271.149089][ T5800] usb 3-1: can't set config #0, error -71 [ 271.266903][ T5715] usb 1-1: device descriptor read/64, error -71 [ 271.466571][ T5800] usb 3-1: USB disconnect, device number 16 [ 271.543854][ T5715] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 271.739531][ T5715] usb 1-1: device descriptor read/64, error -71 [ 271.857121][ T5715] usb usb1-port1: attempt power cycle [ 272.011662][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 272.011679][ T31] audit: type=1400 audit(1790205088.783:1066): avc: denied { getopt } for pid=7871 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 272.225242][ T5715] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 272.247523][ T5715] usb 1-1: device descriptor read/8, error -71 [ 272.520014][ T5715] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 272.541995][ T5715] usb 1-1: device descriptor read/8, error -71 [ 272.659494][ T5715] usb usb1-port1: unable to enumerate USB device [ 273.413697][ T31] audit: type=1400 audit(1790205090.076:1067): avc: denied { write } for pid=7897 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 273.528092][ T7898] hsr0 speed is unknown, defaulting to 1000 [ 273.528519][ T7898] hsr0 speed is unknown, defaulting to 1000 [ 273.751337][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 274.056674][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 274.057343][ T7898] hsr0 speed is unknown, defaulting to 1000 [ 274.082388][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 274.082416][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 274.082439][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 274.082460][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 274.082495][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.388146][ T7898] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 274.388221][ T7898] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 274.388296][ T7898] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 274.710128][ T7898] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 274.825380][ T25] usb 3-1: config 0 descriptor?? [ 275.232343][ T7898] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.247766][ T25] hdpvr 3-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 275.247766][ T25] †Ã›‘êpY [ 275.275674][ T31] audit: type=1400 audit(1790205091.793:1068): avc: denied { name_bind } for pid=7903 comm="syz.3.635" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 275.374875][ T7898] hsr0 speed is unknown, defaulting to 1000 [ 275.386313][ T7898] hsr0 speed is unknown, defaulting to 1000 [ 275.394105][ T7898] hsr0 speed is unknown, defaulting to 1000 [ 275.396180][ T7898] hsr0 speed is unknown, defaulting to 1000 [ 275.397795][ T7898] hsr0 speed is unknown, defaulting to 1000 [ 277.795166][ T25] hdpvr 3-1:0.0: Could not setup controls [ 277.795716][ T25] hdpvr 3-1:0.0: registering videodev failed [ 277.818796][ T25] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 277.855756][ T25] usb 3-1: USB disconnect, device number 17 [ 278.017867][ T7924] sd 0:0:1:0: PR command failed: 1026 [ 278.018000][ T7924] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 278.018195][ T7924] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 279.785729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 279.792110][ T7924] syz.1.642 (7924): drop_caches: 2 [ 279.983460][ T30] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 280.050834][ T7957] bond0: Error: Cannot enslave bond to itself. [ 280.055047][ T31] audit: type=1400 audit(1790205096.206:1069): avc: denied { shutdown } for pid=7956 comm="syz.1.658" lport=58034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 280.086493][ T31] audit: type=1400 audit(1790205096.243:1070): avc: denied { mount } for pid=7956 comm="syz.1.658" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 280.114362][ T31] audit: type=1800 audit(1790205096.243:1071): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.658" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 280.180128][ T30] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 280.184543][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 280.184572][ T30] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 280.184595][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 280.184616][ T30] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 280.184650][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.198600][ T30] usb 4-1: config 0 descriptor?? [ 280.403141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 280.489788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 280.533120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 281.204732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 281.518827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 281.667825][ T30] hdpvr 4-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 281.667825][ T30] †Ã›‘êpY [ 282.149244][ T30] hdpvr 4-1:0.0: Could not setup controls [ 282.154923][ T30] hdpvr 4-1:0.0: registering videodev failed [ 282.195877][ T30] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 282.213651][ T30] usb 4-1: USB disconnect, device number 12 [ 282.309611][ T5715] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 282.472070][ T5715] usb 5-1: Using ep0 maxpacket: 16 [ 282.472731][ T5715] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 282.473848][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.473877][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.473899][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 282.473936][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.478939][ T5715] usb 5-1: config 0 descriptor?? [ 283.046270][ T31] audit: type=1400 audit(1790205098.698:1072): avc: denied { unlink } for pid=7997 comm="syz.2.673" name="#1" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 283.370275][ T5715] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 283.370310][ T5715] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 283.370336][ T5715] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 283.370360][ T5715] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 283.370384][ T5715] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 283.430995][ T5715] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 283.554790][ T5715] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 283.555039][ T5715] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 283.601625][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.602025][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.637970][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.638371][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.888122][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.006973][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.026211][ T5700] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 284.026480][ T5700] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 284.026749][ T5700] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 284.027001][ T5700] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 284.028255][ T5797] usb 5-1: USB disconnect, device number 14 [ 284.075471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 284.711317][ T31] audit: type=1400 audit(1790205100.499:1073): avc: denied { create } for pid=8022 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 284.736004][ T31] audit: type=1400 audit(1790205100.508:1074): avc: denied { listen } for pid=8022 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 285.506806][ T31] audit: type=1326 audit(1790205101.247:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 285.506974][ T31] audit: type=1326 audit(1790205101.247:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 285.519300][ T31] audit: type=1326 audit(1790205101.256:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f079d55e98e code=0x7ffc0000 [ 285.519348][ T31] audit: type=1326 audit(1790205101.256:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 285.519389][ T31] audit: type=1326 audit(1790205101.256:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 285.521781][ T31] audit: type=1326 audit(1790205101.256:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 285.521825][ T31] audit: type=1326 audit(1790205101.256:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 285.521865][ T31] audit: type=1326 audit(1790205101.256:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 285.544911][ T31] audit: type=1326 audit(1790205101.274:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 285.545120][ T31] audit: type=1326 audit(1790205101.274:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079d59e159 code=0x7ffc0000 [ 287.855744][ T5700] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 287.866394][ T5797] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 288.032192][ T5700] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 288.035962][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.045440][ T5700] usb 5-1: config 0 descriptor?? [ 288.064241][ T5797] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 288.068953][ T5797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.069005][ T5797] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 288.108063][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.108089][ T5797] usb 2-1: Product: syz [ 288.108102][ T5797] usb 2-1: Manufacturer: syz [ 288.108117][ T5797] usb 2-1: SerialNumber: syz [ 289.339942][ T5700] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 289.556477][ C0] usb 2-1: received EP1 urb->status = -2 [ 289.563158][ T5797] usb 2-1: unable to init card! (ret=-110) [ 289.563549][ T5797] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 289.615182][ T5700] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 289.615197][ T5700] [drm] Initialized udl on minor 1 [ 289.795123][ T5715] usb 2-1: USB disconnect, device number 11 [ 292.134961][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 292.134979][ T31] audit: type=1400 audit(1790205107.358:1110): avc: denied { read } for pid=8072 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 293.447686][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 293.608948][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 293.908922][ T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 293.908950][ T10] usb 1-1: Product: syz [ 293.908967][ T10] usb 1-1: SerialNumber: syz [ 294.157860][ T10] usb 1-1: config 0 descriptor?? [ 295.840512][ T5700] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 295.914042][ T5700] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 295.981879][ T5715] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 296.231049][ T5700] usb 5-1: USB disconnect, device number 15 [ 296.364155][ T5715] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 296.376466][ T10] usb 1-1: USB disconnect, device number 16 [ 296.660012][ T31] audit: type=1326 audit(1790205111.531:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 296.660130][ T31] audit: type=1326 audit(1790205111.531:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 296.717583][ T31] audit: type=1326 audit(1790205111.596:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcaa575e98e code=0x7ffc0000 [ 296.717727][ T31] audit: type=1326 audit(1790205111.596:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 296.717847][ T31] audit: type=1326 audit(1790205111.596:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 296.728912][ T31] audit: type=1326 audit(1790205111.596:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 296.728960][ T31] audit: type=1326 audit(1790205111.596:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 296.728999][ T31] audit: type=1326 audit(1790205111.596:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 296.763155][ T31] audit: type=1326 audit(1790205111.623:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.0.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcaa579e159 code=0x7ffc0000 [ 297.837133][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 297.837147][ T31] audit: type=1400 audit(1790205112.620:1127): avc: denied { connect } for pid=8106 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 297.838652][ T52] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 298.072372][ T8112] FAULT_INJECTION: forcing a failure. [ 298.072372][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 298.072407][ T8112] CPU: 0 UID: 0 PID: 8112 Comm: syz.4.711 Not tainted syzkaller #0 PREEMPT(full) [ 298.072432][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 298.072444][ T8112] Call Trace: [ 298.072452][ T8112] [ 298.072460][ T8112] dump_stack_lvl+0x100/0x190 [ 298.072494][ T8112] should_fail_ex.cold+0x5/0xa [ 298.072523][ T8112] should_failslab+0xc2/0x120 [ 298.072549][ T8112] __kmalloc_noprof+0xfc/0x840 [ 298.072581][ T8112] ? rcu_is_watching+0x13/0xc0 [ 298.072610][ T8112] ? tomoyo_realpath_from_path+0xb6/0x690 [ 298.072644][ T8112] tomoyo_realpath_from_path+0xb6/0x690 [ 298.072677][ T8112] tomoyo_path_number_perm+0x23c/0x580 [ 298.072698][ T8112] ? tomoyo_path_number_perm+0x22e/0x580 [ 298.072722][ T8112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.072745][ T8112] ? __pfx_futex_wait+0x10/0x10 [ 298.072772][ T8112] ? __lock_acquire+0x5c0/0x1f40 [ 298.072806][ T8112] ? __fget_files+0x34/0x3d0 [ 298.072830][ T8112] ? find_held_lock+0x2b/0x80 [ 298.072856][ T8112] ? hook_file_ioctl_common+0x140/0x440 [ 298.072889][ T8112] ? __fget_files+0x21f/0x3d0 [ 298.072919][ T8112] security_file_ioctl+0xd3/0x230 [ 298.072943][ T8112] __x64_sys_ioctl+0xb7/0x210 [ 298.072967][ T8112] do_syscall_64+0x123/0x790 [ 298.073001][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.073024][ T8112] RIP: 0033:0x7fb28ad9e159 [ 298.073043][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.073063][ T8112] RSP: 002b:00007fb28bc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.073094][ T8112] RAX: ffffffffffffffda RBX: 00007fb28b025fa0 RCX: 00007fb28ad9e159 [ 298.073108][ T8112] RDX: 0000000000000000 RSI: 00000000401070cd RDI: 0000000000000003 [ 298.073121][ T8112] RBP: 00007fb28ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 298.073134][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.073147][ T8112] R13: 00007fb28b026038 R14: 00007fb28b025fa0 R15: 00007ffe9c332828 [ 298.073178][ T8112] [ 298.073187][ T8112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.385702][ T1482] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.489505][ T5715] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 299.611059][ T31] audit: type=1400 audit(1790205114.264:1128): avc: denied { sqpoll } for pid=8135 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 299.651460][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 299.652294][ T5715] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.654978][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.655019][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.668707][ T5715] usb 2-1: config 0 descriptor?? [ 299.691622][ T5715] hub 2-1:0.0: bad descriptor, ignoring hub [ 299.691638][ T5715] hub 2-1:0.0: probe with driver hub failed with error -5 [ 299.792342][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 299.793004][ T31] audit: type=1400 audit(1790205114.430:1129): avc: denied { write } for pid=8144 comm="syz.2.722" name="cluster" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.970757][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 299.975949][ T10] usb 1-1: config index 0 descriptor too short (expected 50, got 32) [ 299.975975][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.976020][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 299.976044][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.984503][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.984525][ T10] usb 1-1: Product: syz [ 299.984540][ T10] usb 1-1: Manufacturer: syz [ 299.984554][ T10] usb 1-1: SerialNumber: syz [ 299.994442][ T8132] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.996361][ T10] usb_debug 1-1:1.0: debug converter detected [ 300.028443][ T10] usb 1-1: debug converter now attached to ttyUSB0 [ 300.801496][ T5715] usb 1-1: USB disconnect, device number 17 [ 300.838304][ T5715] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 300.838819][ T5715] usb_debug 1-1:1.0: device disconnected [ 301.059237][ T10] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 301.464191][ T31] audit: type=1400 audit(1790205115.972:1130): avc: denied { write } for pid=8169 comm="syz.0.731" name="subsystems" dev="configfs" ino=3493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 301.517259][ T31] audit: type=1400 audit(1790205116.008:1131): avc: denied { write } for pid=8169 comm="syz.0.731" name="subsystems" dev="configfs" ino=3493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 301.656028][ T5800] usb 2-1: USB disconnect, device number 12 [ 302.271741][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 302.374682][ T31] audit: type=1400 audit(1790205116.812:1132): avc: denied { bind } for pid=8180 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.427874][ T8178] device-mapper: table: 248:3: integrity: Error reading superblock (-EIO) [ 302.427902][ T8178] device-mapper: ioctl: error adding target to table [ 302.578624][ T8198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.808507][ T8203] FAULT_INJECTION: forcing a failure. [ 302.808507][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 302.808529][ T8203] CPU: 1 UID: 0 PID: 8203 Comm: syz.0.741 Not tainted syzkaller #0 PREEMPT(full) [ 302.808543][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 302.808551][ T8203] Call Trace: [ 302.808556][ T8203] [ 302.808561][ T8203] dump_stack_lvl+0x100/0x190 [ 302.808583][ T8203] should_fail_ex.cold+0x5/0xa [ 302.808600][ T8203] should_failslab+0xc2/0x120 [ 302.808616][ T8203] __kmalloc_cache_noprof+0x91/0x6d0 [ 302.808633][ T8203] ? lockdep_init_map_type+0x5c/0x250 [ 302.808647][ T8203] ? rand_initialize_disk+0x4a/0xb2 [ 302.808668][ T8203] rand_initialize_disk+0x4a/0xb2 [ 302.808685][ T8203] __alloc_disk_node+0x322/0x6b0 [ 302.808705][ T8203] __blk_alloc_disk+0xd2/0x170 [ 302.808722][ T8203] ? __pfx___blk_alloc_disk+0x10/0x10 [ 302.808737][ T8203] ? __pfx___debug_object_init+0x10/0x10 [ 302.808761][ T8203] ? lockdep_init_map_type+0x5c/0x250 [ 302.808775][ T8203] ? lockdep_init_map_type+0x5c/0x250 [ 302.808790][ T8203] dm_create+0x5e8/0x1530 [ 302.808812][ T8203] dev_create+0x121/0x2a0 [ 302.808823][ T8203] ? __pfx_dev_create+0x10/0x10 [ 302.808838][ T8203] ctl_ioctl+0x4d2/0xcc0 [ 302.808848][ T8203] ? __pfx_dev_create+0x10/0x10 [ 302.808860][ T8203] ? __pfx_ctl_ioctl+0x10/0x10 [ 302.808886][ T8203] ? selinux_file_ioctl+0x13b/0x290 [ 302.808899][ T8203] ? selinux_file_ioctl+0xb6/0x290 [ 302.808913][ T8203] dm_ctl_ioctl+0x22/0x30 [ 302.808922][ T8203] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 302.808933][ T8203] __x64_sys_ioctl+0x18e/0x210 [ 302.808946][ T8203] do_syscall_64+0x123/0x790 [ 302.808965][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.808981][ T8203] RIP: 0033:0x7fcaa579e159 [ 302.808991][ T8203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.809003][ T8203] RSP: 002b:00007fcaa6663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.809017][ T8203] RAX: ffffffffffffffda RBX: 00007fcaa5a25fa0 RCX: 00007fcaa579e159 [ 302.809030][ T8203] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000005 [ 302.809042][ T8203] RBP: 00007fcaa583506b R08: 0000000000000000 R09: 0000000000000000 [ 302.809056][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.809068][ T8203] R13: 00007fcaa5a26038 R14: 00007fcaa5a25fa0 R15: 00007fffa588bd58 [ 302.809096][ T8203] [ 303.387515][ T5715] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 303.800898][ T5715] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 303.883621][ T5715] usb 4-1: config index 0 descriptor too short (expected 50, got 32) [ 303.883651][ T5715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.883690][ T5715] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 303.883714][ T5715] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.046753][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.046781][ T5715] usb 4-1: Product: syz [ 304.046795][ T5715] usb 4-1: Manufacturer: syz [ 304.046810][ T5715] usb 4-1: SerialNumber: syz [ 304.408370][ T8205] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.496169][ T8163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.597323][ T31] audit: type=1400 audit(1790205118.861:1133): avc: denied { write } for pid=8214 comm="syz.1.746" name="subsystems" dev="configfs" ino=3493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 304.603630][ T31] audit: type=1400 audit(1790205118.870:1134): avc: denied { write } for pid=8214 comm="syz.1.746" name="subsystems" dev="configfs" ino=3493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 305.551739][ T5715] usb_debug 4-1:1.0: debug converter detected [ 305.566254][ T8210] sd 0:0:1:0: PR command failed: 1026 [ 305.566279][ T8210] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 305.566301][ T8210] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 305.678952][ T8210] syz.0.744 (8210): drop_caches: 2 [ 305.887420][ T5715] usb 4-1: debug converter now attached to ttyUSB0 [ 305.933977][ T5715] usb 4-1: USB disconnect, device number 13 [ 305.958904][ T5715] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 305.962876][ T5715] usb_debug 4-1:1.0: device disconnected [ 306.175450][ T5797] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 306.192277][ T5797] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 306.323630][ T31] audit: type=1400 audit(1790205120.449:1135): avc: denied { write } for pid=8230 comm="syz.0.752" path="socket:[18978]" dev="sockfs" ino=18978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 306.381149][ T31] audit: type=1400 audit(1790205120.514:1136): avc: denied { getopt } for pid=8230 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 306.479222][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 306.814759][ T8240] printk: console [ttyS0] disabled [ 307.214772][ T8242] printk: console [ttyS0] enabled [ 307.372614][ T8256] nvme_fabrics: unknown parameter or missing value 'transport=' in ctrl creation request [ 307.456551][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 307.547963][ T5797] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 307.776118][ T5797] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 307.823979][ T5797] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 307.824028][ T5797] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 307.824053][ T5797] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 249, changing to 11 [ 307.824074][ T5797] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 18234, setting to 1024 [ 307.824108][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.695604][ T8249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.696175][ T8249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.696579][ T8249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.936067][ T5797] pl2303 3-1:1.0: pl2303 converter detected [ 309.137851][ T31] audit: type=1400 audit(1790205123.052:1137): avc: denied { search } for pid=8269 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.176954][ T31] audit: type=1400 audit(1790205123.080:1138): avc: denied { read write } for pid=8269 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 309.232659][ T31] audit: type=1400 audit(1790205123.136:1139): avc: denied { open } for pid=8269 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 309.265799][ T31] audit: type=1400 audit(1790205123.145:1140): avc: denied { lock } for pid=8269 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 309.740427][ T5797] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 309.790182][ T5797] usb 3-1: USB disconnect, device number 18 [ 309.819918][ T5797] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 309.820559][ T5797] pl2303 3-1:1.0: device disconnected [ 309.926422][ T31] audit: type=1400 audit(1790205123.782:1141): avc: denied { create } for pid=8279 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.933484][ T31] audit: type=1400 audit(1790205123.791:1142): avc: denied { listen } for pid=8279 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.053911][ T5715] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 310.062764][ T5715] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 310.343188][ T5715] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 311.093880][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 311.093899][ T31] audit: type=1400 audit(1790205124.825:1144): avc: denied { getopt } for pid=8289 comm="syz.4.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.094722][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 311.133844][ T8251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.144258][ T8284] ceph: No mds server is up or the cluster is laggy [ 311.362737][ T31] audit: type=1400 audit(1790205125.102:1145): avc: denied { name_bind } for pid=8297 comm="syz.2.776" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 311.441369][ T31] audit: type=1400 audit(1790205125.185:1146): avc: denied { create } for pid=8299 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.455122][ T31] audit: type=1400 audit(1790205125.194:1147): avc: denied { connect } for pid=8299 comm="syz.0.775" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.769908][ T8300] bond1: left promiscuous mode [ 311.829831][ T8300] 8021q: adding VLAN 0 to HW filter on device eth0 [ 311.951161][ T31] audit: type=1400 audit(1790205125.656:1148): avc: denied { mount } for pid=8310 comm="syz.2.779" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 312.480631][ T31] audit: type=1400 audit(1790205126.145:1149): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 314.053953][ T31] audit: type=1400 audit(1790205127.595:1150): avc: denied { create } for pid=8336 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.106798][ T31] audit: type=1400 audit(1790205127.641:1151): avc: denied { write } for pid=8336 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.144651][ T31] audit: type=1400 audit(1790205127.668:1152): avc: denied { write } for pid=8339 comm="syz.0.790" laddr=fe80::12 lport=58 faddr=fe80::bb fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.547630][ T5715] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 314.708436][ T5715] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 314.711273][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.711301][ T5715] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.711324][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.849011][ T31] audit: type=1400 audit(1790205129.256:1153): avc: denied { name_bind } for pid=8353 comm="syz.2.794" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 315.983287][ T8357] F2FS-fs: Conflicting test_dummy_encryption options [ 317.086885][ T8327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.967255][ T5715] usb 1-1: USB disconnect, device number 18 [ 320.010465][ T10] hsr0 speed is unknown, defaulting to 1000 [ 320.276009][ T8383] syz.1.803 (8383): drop_caches: 2 [ 321.995299][ T8395] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 322.239069][ T5715] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 322.398775][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 322.399465][ T5715] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.400335][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 322.400353][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 322.403026][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.403048][ T5715] usb 2-1: Product: syz [ 322.403063][ T5715] usb 2-1: Manufacturer: syz [ 322.403078][ T5715] usb 2-1: SerialNumber: syz [ 322.406810][ T5715] usb 2-1: config 0 descriptor?? [ 322.417307][ T5715] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 322.417338][ T5715] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 322.491854][ T8415] ================================================================== [ 322.491867][ T8415] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 322.491885][ T8415] Read of size 1 at addr ffff88802643b8a0 by task syz.0.818/8415 [ 322.491896][ T8415] [ 322.491906][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz.0.818 Not tainted syzkaller #0 PREEMPT(full) [ 322.491921][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 322.491931][ T8415] Call Trace: [ 322.491935][ T8415] [ 322.491940][ T8415] dump_stack_lvl+0x100/0x190 [ 322.491958][ T8415] print_report+0x13d/0x4b0 [ 322.491976][ T8415] ? __virt_addr_valid+0x239/0x430 [ 322.491989][ T8415] ? string+0x471/0x4d0 [ 322.492002][ T8415] kasan_report+0xdf/0x1c0 [ 322.492017][ T8415] ? string+0x471/0x4d0 [ 322.492033][ T8415] string+0x471/0x4d0 [ 322.492048][ T8415] ? __pfx_string+0x10/0x10 [ 322.492064][ T8415] vsnprintf+0x422/0x1300 [ 322.492080][ T8415] ? __pfx_vsnprintf+0x10/0x10 [ 322.492095][ T8415] ? check_noncircular+0x97/0x160 [ 322.492108][ T8415] vprintk_store+0x3b3/0xbe0 [ 322.492123][ T8415] ? __pfx_vprintk_store+0x10/0x10 [ 322.492137][ T8415] ? __lock_acquire+0xe8b/0x1f40 [ 322.492151][ T8415] ? check_noncircular+0x97/0x160 [ 322.492163][ T8415] ? printk_percpu_data_ready+0x9/0x20 [ 322.492176][ T8415] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 322.492191][ T8415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.492205][ T8415] vprintk_emit+0x139/0x6b0 [ 322.492220][ T8415] ? __pfx_vprintk_emit+0x10/0x10 [ 322.492237][ T8415] _printk+0xcf/0x110 [ 322.492247][ T8415] ? __pfx__printk+0x10/0x10 [ 322.492256][ T8415] ? do_raw_spin_lock+0x128/0x260 [ 322.492277][ T8415] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 322.492292][ T8415] ? _raw_spin_lock_irqsave+0x52/0x60 [ 322.492310][ T8415] __setup_irq.cold+0x3be/0x3f1 [ 322.492326][ T8415] request_threaded_irq+0x261/0x3e0 [ 322.492340][ T8415] pcl812_attach+0x1b62/0x2300 [ 322.492353][ T8415] comedi_device_attach+0x40e/0x6b0 [ 322.492372][ T8415] do_devconfig_ioctl+0x1b3/0x6d0 [ 322.492385][ T8415] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 322.492402][ T8415] ? kasan_quarantine_put+0x104/0x240 [ 322.492415][ T8415] ? find_held_lock+0x2b/0x80 [ 322.492432][ T8415] comedi_unlocked_ioctl+0x860/0x3310 [ 322.492446][ T8415] ? tomoyo_path_number_perm+0x188/0x580 [ 322.492460][ T8415] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 322.492475][ T8415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.492489][ T8415] ? do_vfs_ioctl+0x226/0x13e0 [ 322.492500][ T8415] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 322.492511][ T8415] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 322.492527][ T8415] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 322.492542][ T8415] ? __fget_files+0x34/0x3d0 [ 322.492558][ T8415] ? selinux_file_ioctl+0x13b/0x290 [ 322.492570][ T8415] ? selinux_file_ioctl+0xb6/0x290 [ 322.492583][ T8415] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 322.492598][ T8415] __x64_sys_ioctl+0x18e/0x210 [ 322.492609][ T8415] do_syscall_64+0x123/0x790 [ 322.492626][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.492638][ T8415] RIP: 0033:0x7fcaa579e159 [ 322.492648][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.492659][ T8415] RSP: 002b:00007fcaa6663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.492675][ T8415] RAX: ffffffffffffffda RBX: 00007fcaa5a25fa0 RCX: 00007fcaa579e159 [ 322.492683][ T8415] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000006 [ 322.492691][ T8415] RBP: 00007fcaa583506b R08: 0000000000000000 R09: 0000000000000000 [ 322.492698][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.492706][ T8415] R13: 00007fcaa5a26038 R14: 00007fcaa5a25fa0 R15: 00007fffa588bd58 [ 322.492718][ T8415] [ 322.492725][ T8415] [ 322.492727][ T8415] Allocated by task 1: [ 322.492735][ T8415] kasan_save_stack+0x30/0x50 [ 322.492748][ T8415] kasan_save_track+0x14/0x30 [ 322.492761][ T8415] __kasan_kmalloc+0xaa/0xb0 [ 322.492774][ T8415] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 322.492786][ T8415] kvasprintf+0xbc/0x150 [ 322.492798][ T8415] kasprintf+0xc7/0x100 [ 322.492808][ T8415] serial_core_register_port+0x46b/0x1660 [ 322.492823][ T8415] serial8250_register_8250_port+0x16c7/0x2440 [ 322.492833][ T8415] serial_pnp_probe+0x443/0x950 [ 322.492842][ T8415] pnp_device_probe+0x2b3/0x4a0 [ 322.492855][ T8415] really_probe+0x241/0xa60 [ 322.492867][ T8415] __driver_probe_device+0x210/0x460 [ 322.492879][ T8415] driver_probe_device+0x4a/0x140 [ 322.492892][ T8415] __driver_attach+0x21f/0x5b0 [ 322.492904][ T8415] bus_for_each_dev+0x13e/0x1d0 [ 322.492912][ T8415] bus_add_driver+0x305/0x5b0 [ 322.492922][ T8415] driver_register+0x1e2/0x360 [ 322.492935][ T8415] serial8250_init+0xcc/0x1c0 [ 322.492950][ T8415] do_one_initcall+0x11c/0x6f0 [ 322.492961][ T8415] kernel_init_freeable+0x6ea/0x7b0 [ 322.492978][ T8415] kernel_init+0x21/0x1e0 [ 322.492989][ T8415] ret_from_fork+0x730/0xd60 [ 322.493000][ T8415] ret_from_fork_asm+0x1a/0x30 [ 322.493010][ T8415] [ 322.493013][ T8415] Freed by task 8240: [ 322.493018][ T8415] kasan_save_stack+0x30/0x50 [ 322.493028][ T8415] kasan_save_track+0x14/0x30 [ 322.493039][ T8415] kasan_save_free_info+0x3b/0x70 [ 322.493054][ T8415] __kasan_slab_free+0x5f/0x80 [ 322.493066][ T8415] kfree+0x22b/0x6d0 [ 322.493080][ T8415] serial_core_unregister_port+0x4b9/0x960 [ 322.493094][ T8415] serial8250_unregister_port+0x1db/0x890 [ 322.493104][ T8415] pnp_device_remove+0x7f/0x250 [ 322.493116][ T8415] device_remove+0xcb/0x180 [ 322.493126][ T8415] device_release_driver_internal+0x44e/0x620 [ 322.493140][ T8415] unbind_store+0xf8/0x110 [ 322.493149][ T8415] drv_attr_store+0x74/0xb0 [ 322.493163][ T8415] sysfs_kf_write+0xf2/0x150 [ 322.493175][ T8415] kernfs_fop_write_iter+0x3e0/0x5f0 [ 322.493185][ T8415] vfs_write+0x6af/0x1050 [ 322.493195][ T8415] ksys_write+0x12a/0x250 [ 322.493204][ T8415] do_syscall_64+0x123/0x790 [ 322.493220][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.493230][ T8415] [ 322.493232][ T8415] The buggy address belongs to the object at ffff88802643b8a0 [ 322.493232][ T8415] which belongs to the cache kmalloc-8 of size 8 [ 322.493241][ T8415] The buggy address is located 0 bytes inside of [ 322.493241][ T8415] freed 8-byte region [ffff88802643b8a0, ffff88802643b8a8) [ 322.493251][ T8415] [ 322.493257][ T8415] The buggy address belongs to the physical page: [ 322.493263][ T8415] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2643b [ 322.493281][ T8415] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 322.493293][ T8415] page_type: f5(slab) [ 322.493306][ T8415] raw: 00fff00000000000 ffff88801c034500 dead000000000100 dead000000000122 [ 322.493318][ T8415] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 322.493325][ T8415] page dumped because: kasan: bad access detected [ 322.493336][ T8415] page_owner tracks the page as allocated [ 322.493340][ T8415] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4167969447 [ 322.493357][ T8415] post_alloc_hook+0xfd/0x120 [ 322.493374][ T8415] get_page_from_freelist+0x110d/0x35d0 [ 322.493384][ T8415] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 322.493400][ T8415] new_slab+0xa9/0x6e0 [ 322.493408][ T8415] refill_objects+0xe3/0x410 [ 322.493418][ T8415] __pcs_replace_empty_main+0x35e/0x650 [ 322.493434][ T8415] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 322.493446][ T8415] kstrdup+0x51/0xe0 [ 322.493455][ T8415] kstrdup_const+0x63/0x80 [ 322.493464][ T8415] kvasprintf_const+0x10f/0x1a0 [ 322.493476][ T8415] kobject_set_name_vargs+0x5a/0x140 [ 322.493488][ T8415] dev_set_name+0xc7/0x100 [ 322.493496][ T8415] tty_register_device_attr+0x2fb/0x7f0 [ 322.493508][ T8415] tty_register_driver+0x769/0xb50 [ 322.493520][ T8415] pty_init+0x65d/0xdc0 [ 322.493533][ T8415] do_one_initcall+0x11c/0x6f0 [ 322.493543][ T8415] page_owner free stack trace missing [ 322.493546][ T8415] [ 322.493548][ T8415] Memory state around the buggy address: [ 322.493554][ T8415] ffff88802643b780: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 322.493561][ T8415] ffff88802643b800: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 322.493568][ T8415] >ffff88802643b880: 05 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 322.493574][ T8415] ^ [ 322.493579][ T8415] ffff88802643b900: fa fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 322.493587][ T8415] ffff88802643b980: fa fc fc fc 04 fc fc fc 00 fc fc fc 00 fc fc fc [ 322.493592][ T8415] ================================================================== [ 322.493602][ T8415] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.329053][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz.0.818 Not tainted syzkaller #0 PREEMPT(full) [ 323.338234][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 323.348271][ T8415] Call Trace: [ 323.351535][ T8415] [ 323.354453][ T8415] dump_stack_lvl+0x100/0x190 [ 323.359128][ T8415] vpanic+0x553/0x970 [ 323.363097][ T8415] ? __pfx_vpanic+0x10/0x10 [ 323.367585][ T8415] ? __pfx_vprintk_emit+0x10/0x10 [ 323.372604][ T8415] ? string+0x471/0x4d0 [ 323.376748][ T8415] panic+0xd1/0xe0 [ 323.380457][ T8415] ? __pfx_panic+0x10/0x10 [ 323.384870][ T8415] ? end_report.part.0+0x23/0x90 [ 323.389808][ T8415] ? rcu_is_watching+0x13/0xc0 [ 323.394562][ T8415] ? end_report.part.0+0x23/0x90 [ 323.399496][ T8415] check_panic_on_warn.cold+0x19/0x34 [ 323.404869][ T8415] end_report.part.0+0x3a/0x90 [ 323.409642][ T8415] kasan_report.cold+0xe/0x18 [ 323.414314][ T8415] ? string+0x471/0x4d0 [ 323.418461][ T8415] string+0x471/0x4d0 [ 323.422434][ T8415] ? __pfx_string+0x10/0x10 [ 323.426927][ T8415] vsnprintf+0x422/0x1300 [ 323.431254][ T8415] ? __pfx_vsnprintf+0x10/0x10 [ 323.436022][ T8415] ? check_noncircular+0x97/0x160 [ 323.441038][ T8415] vprintk_store+0x3b3/0xbe0 [ 323.445619][ T8415] ? __pfx_vprintk_store+0x10/0x10 [ 323.450728][ T8415] ? __lock_acquire+0xe8b/0x1f40 [ 323.455657][ T8415] ? check_noncircular+0x97/0x160 [ 323.460667][ T8415] ? printk_percpu_data_ready+0x9/0x20 [ 323.466112][ T8415] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 323.472259][ T8415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.478142][ T8415] vprintk_emit+0x139/0x6b0 [ 323.482636][ T8415] ? __pfx_vprintk_emit+0x10/0x10 [ 323.487656][ T8415] _printk+0xcf/0x110 [ 323.491621][ T8415] ? __pfx__printk+0x10/0x10 [ 323.496196][ T8415] ? do_raw_spin_lock+0x128/0x260 [ 323.501206][ T8415] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 323.506562][ T8415] ? _raw_spin_lock_irqsave+0x52/0x60 [ 323.511924][ T8415] __setup_irq.cold+0x3be/0x3f1 [ 323.516767][ T8415] request_threaded_irq+0x261/0x3e0 [ 323.521949][ T8415] pcl812_attach+0x1b62/0x2300 [ 323.526700][ T8415] comedi_device_attach+0x40e/0x6b0 [ 323.531899][ T8415] do_devconfig_ioctl+0x1b3/0x6d0 [ 323.536908][ T8415] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 323.542441][ T8415] ? kasan_quarantine_put+0x104/0x240 [ 323.547799][ T8415] ? find_held_lock+0x2b/0x80 [ 323.552469][ T8415] comedi_unlocked_ioctl+0x860/0x3310 [ 323.557827][ T8415] ? tomoyo_path_number_perm+0x188/0x580 [ 323.563446][ T8415] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 323.569242][ T8415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.575120][ T8415] ? do_vfs_ioctl+0x226/0x13e0 [ 323.579873][ T8415] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 323.584884][ T8415] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 323.591372][ T8415] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 323.598207][ T8415] ? __fget_files+0x34/0x3d0 [ 323.602790][ T8415] ? selinux_file_ioctl+0x13b/0x290 [ 323.607975][ T8415] ? selinux_file_ioctl+0xb6/0x290 [ 323.613070][ T8415] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 323.618862][ T8415] __x64_sys_ioctl+0x18e/0x210 [ 323.623613][ T8415] do_syscall_64+0x123/0x790 [ 323.628202][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.634080][ T8415] RIP: 0033:0x7fcaa579e159 [ 323.638492][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.658093][ T8415] RSP: 002b:00007fcaa6663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.666493][ T8415] RAX: ffffffffffffffda RBX: 00007fcaa5a25fa0 RCX: 00007fcaa579e159 [ 323.674446][ T8415] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000006 [ 323.682401][ T8415] RBP: 00007fcaa583506b R08: 0000000000000000 R09: 0000000000000000 [ 323.690355][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.698313][ T8415] R13: 00007fcaa5a26038 R14: 00007fcaa5a25fa0 R15: 00007fffa588bd58 [ 323.706276][ T8415] [ 323.709501][ T8415] Kernel Offset: disabled [ 323.713807][ T8415] Rebooting in 86400 seconds..