last executing test programs: 14.190294278s ago: executing program 4 (id=679): socket(0xa, 0x2400000001, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000640)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000680)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000006c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendto$inet(r0, &(0x7f0000002840)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000002a00), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 12.661045851s ago: executing program 4 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x1, 0x100) listen(r4, 0x0) 10.011361278s ago: executing program 4 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) setxattr$security_ima(0x0, &(0x7f00000001c0), &(0x7f00000006c0)=@v2={0x5, 0x3, 0xd, 0x8, 0x78, "a92c1fd1ffd2bf69fdcf69796f6a5c2c54184ac8e34d42e71c851a2a05240d77f03b138ee746c2245e3d0f2dfe70752fcd408ce566ddf3942a20590cec5ca74872eb062c41f6f03a098be5378600fa6cb1e46146669ac1c73621e1f0da6ed7c79910fbeb8ba774c0703ecc025563f8febfc88d607509de57"}, 0x81, 0x3) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2000}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 8.762538501s ago: executing program 3 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x36, 0x107, 0x70bd2d, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 7.567747434s ago: executing program 3 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r3}, 0x38) 7.51150988s ago: executing program 0 (id=697): socket$rds(0x15, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r4 = eventfd(0xe467) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 7.05289896s ago: executing program 1 (id=699): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='BATMAN_V\n\x00', 0x9) close(r0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c) write(r1, &(0x7f0000000240)="3c000000100005060200000000000000000000000000000000000000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c) write(r1, &(0x7f0000000280)="2c000000100005000300000000000000000000000000000001000000010000000c0003006261746164763000", 0x2c) r2 = socket(0x11, 0x3, 0x543) write(r2, &(0x7f0000000300)="ffffffffffff0200000000024305030f02000000000200000001000003e8", 0x1e) write(r2, &(0x7f0000000340)="ffffffffffff0200000000024305040f320000000001020000000002000c0098968001010008000003e8000003e8", 0x2e) nanosleep(&(0x7f0000000380)={0x1}, 0x0) 6.39983957s ago: executing program 4 (id=700): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x5c, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x5c, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x5c}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) connect(r2, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 6.119138988s ago: executing program 3 (id=701): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000001540)=0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b51, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x2bd}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 6.075872585s ago: executing program 2 (id=702): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt(0xffffffffffffffff, 0xd, 0x80, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1f4, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @loopback, 0x7e71}, 0x1c) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./tracing\x00', &(0x7f0000001000)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x141000, 0x24) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x5220, 0x0) 5.77662944s ago: executing program 2 (id=703): r0 = memfd_create(&(0x7f0000000100)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000240)={{@local, 0x8}, @local, 0xa, 0x5, 0x1, 0x9, 0x1, 0xe, 0x401}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c80)={r4, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5.556869256s ago: executing program 1 (id=704): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) 4.998544556s ago: executing program 2 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 4.906211434s ago: executing program 4 (id=706): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xf58b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x20000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000921) read(r1, 0x0, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x80) 4.49720027s ago: executing program 0 (id=707): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 4.493849056s ago: executing program 3 (id=708): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) 3.270781709s ago: executing program 0 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) 3.22450983s ago: executing program 2 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl(r5, 0x4048aecb, &(0x7f0000000100)) ioctl(r5, 0xc048aeca, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r6, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r6, &(0x7f0000000680)='nullb1\x00', 0x200) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x1, 0x4, 0x446, 0x8}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xffffffffffffff0b, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000010) 2.820582379s ago: executing program 3 (id=711): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000840)=0x15) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000900)=0x7) mmap(&(0x7f00007a4000/0x3000)=nil, 0x3000, 0xb635773f06ebbee2, 0x8031, r0, 0xf093c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2) memfd_create(&(0x7f0000000b00)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) setpriority(0x2, 0x0, 0xffffffffffffffcd) 1.996466295s ago: executing program 4 (id=712): memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x5) socket(0x2, 0x80805, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xd0af, 0x400, 0xb, 0x255, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ca58, 0x200, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1000, 0x0, 0x3e3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x7fd, 0x5, 0x23b}}], 0x1, &(0x7f0000000340)={0x2e, 0x41, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) memfd_secret(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x2000090, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.935620831s ago: executing program 1 (id=713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, &(0x7f0000000040)='proc\x00', 0x0, 0x0) r5 = socket(0xa, 0x3, 0x87) sendto(r5, &(0x7f0000000240)="e1118ce4809b", 0x6, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x88, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x6b, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x30, 0x44}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x1, 0xa, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x4, 0x81}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0xb9, 0x19, 0x3}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.919650085s ago: executing program 0 (id=714): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x3b, @local, 0x4e20, 0x3, 'rr\x00', 0x18, 0x4, 0x49}, 0x2c) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x101, 0x8a, 0x101, 0x0, 0x2000000, 0x4, 0x0, 0xb063}}) getsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x8e, "391796e9cc91cde2878c5c9787a7c067987d236c95c9793b474a41de1b00c6221001e21b034745bb54b0a92e4f43394a6e2f5bf41c7bd41dbb920fd5b1e4322c74b64135f8aadc2be9ae7dd8cbeae5a82c543a6b0c64f6369507b9345df7e10800483569b109c187ae5c369083a537b68f6025328ab3e5eeb3c63e8d2142d3e97d189f074bed36317dfb82969f8d"}, &(0x7f0000000140)=0xb2) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x11e, 0x82, 0x0, &(0x7f0000000540)) 1.833038758s ago: executing program 2 (id=715): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100004095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 1.782476481s ago: executing program 1 (id=716): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x80000001, 0x1, 0x3, 0xc6, 0x2, 0xdce0, 0x0, 0x7}}}}]}, 0x58}}, 0x20040084) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff1, 0xffe0}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5c29}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8401000010000100feffffff0001000020010000000000000000000000000001fc020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d43c00000020010000000000000000000000000002020000000000000000000000000000000100000000000000ffff00000000000004000000000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001e00000000000000030000000000000002000000fcffffff090000002abd70001000000002000100200000000000000048000300"], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000001080)=0x1e) getsockopt$bt_hci(r13, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 1.57466334s ago: executing program 0 (id=717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0xfd7f, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0xff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r2, &(0x7f0000000400), 0x1000) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 1.499876671s ago: executing program 1 (id=718): syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) 1.049282609s ago: executing program 2 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 1.024906775s ago: executing program 3 (id=720): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffbfff, 0x1, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000400)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x8000, 0x10000000, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) 419.167581ms ago: executing program 0 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 0s ago: executing program 1 (id=722): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x19}], 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 90.792757][ T44] [ 90.792987][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 90.875258][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.876659][ T44] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 90.876718][ T44] usb 2-1: media controller created [ 90.881713][ T44] dvb-usb: bulk message failed: -22 (8/0) [ 90.881734][ T44] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 90.881806][ T44] dvb-usb: MAC address reading failed. [ 90.973497][ T6234] dvb-usb: bulk message failed: -22 (7/0) [ 90.973515][ T6234] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 90.979592][ T30] audit: type=1400 audit(1791997543.883:370): avc: denied { read } for pid=6239 comm="syz.2.134" path="socket:[11118]" dev="sockfs" ino=11118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.028778][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.109163][ T44] DVB: Unable to find symbol stb0899_attach() [ 91.109172][ T44] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 91.733455][ T44] rc_core: IR keymap rc-tt-1500 not found [ 91.733499][ T44] Registered IR keymap rc-empty [ 91.931872][ T44] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 92.134460][ T44] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 92.179586][ T44] dvb-usb: schedule remote query interval to 100 msecs. [ 92.179602][ T44] pctv452e: pctv452e_power_ctrl: 0 [ 92.179602][ T44] [ 92.179612][ T44] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 92.235510][ T44] usb 2-1: USB disconnect, device number 5 [ 92.377093][ T44] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 92.488333][ T30] audit: type=1400 audit(1791997545.393:371): avc: denied { execute } for pid=6250 comm="syz.3.136" path="/26/file0" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.742440][ C0] net_ratelimit: 46 callbacks suppressed [ 93.105429][ T30] audit: type=1400 audit(1791997546.013:372): avc: denied { write } for pid=6277 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.329350][ T44] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 93.583502][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.749667][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 93.749694][ T44] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 93.978207][ T44] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 93.994322][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.994339][ T44] usb 4-1: Product: syz [ 93.994353][ T44] usb 4-1: Manufacturer: syz [ 93.994365][ T44] usb 4-1: SerialNumber: syz [ 94.851569][ T44] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 94.853679][ T44] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 94.919160][ T44] usb 4-1: USB disconnect, device number 4 [ 95.050058][ T6248] udevd[6248]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.374199][ T30] audit: type=1400 audit(1791997548.283:373): avc: denied { read write } for pid=6305 comm="syz.1.151" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.376355][ T30] audit: type=1400 audit(1791997548.283:374): avc: denied { open } for pid=6305 comm="syz.1.151" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.490208][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.523640][ T25] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.526352][ T6308] FAULT_INJECTION: forcing a failure. [ 95.526352][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 95.526379][ T6308] CPU: 0 UID: 0 PID: 6308 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) [ 95.526403][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.526415][ T6308] Call Trace: [ 95.526423][ T6308] [ 95.526431][ T6308] dump_stack_lvl+0x100/0x190 [ 95.526462][ T6308] should_fail_ex.cold+0x5/0xa [ 95.526489][ T6308] should_failslab+0xc2/0x120 [ 95.526518][ T6308] __kmalloc_cache_noprof+0x91/0x6d0 [ 95.526539][ T6308] ? kvm_set_memory_region+0xc43/0x15e0 [ 95.526571][ T6308] kvm_set_memory_region+0xc43/0x15e0 [ 95.526610][ T6308] kvm_vm_ioctl+0x216a/0x4170 [ 95.526646][ T6308] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 95.526687][ T6308] ? kasan_quarantine_put+0x104/0x240 [ 95.526711][ T6308] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.526741][ T6308] ? find_held_lock+0x2b/0x80 [ 95.526770][ T6308] ? tomoyo_path_number_perm+0x28f/0x580 [ 95.526796][ T6308] ? tomoyo_path_number_perm+0x28f/0x580 [ 95.526828][ T6308] ? tomoyo_path_number_perm+0x188/0x580 [ 95.526856][ T6308] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.526884][ T6308] ? __handle_mm_fault+0x4ec/0x2f60 [ 95.526910][ T6308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.526962][ T6308] ? selinux_file_ioctl+0x13b/0x290 [ 95.526989][ T6308] ? selinux_file_ioctl+0xb6/0x290 [ 95.527018][ T6308] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 95.527042][ T6308] __x64_sys_ioctl+0x18e/0x210 [ 95.527069][ T6308] do_syscall_64+0x123/0x790 [ 95.527099][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.527119][ T6308] RIP: 0033:0x7f101739df6b [ 95.527136][ T6308] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 95.527152][ T6308] RSP: 002b:00007f101817c450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.527177][ T6308] RAX: ffffffffffffffda RBX: 0000200000fe8000 RCX: 00007f101739df6b [ 95.527191][ T6308] RDX: 00007f101817cbd0 RSI: 000000004020ae46 RDI: 0000000000000005 [ 95.527203][ T6308] RBP: 0000000000000005 R08: 0000000000000001 R09: 0000000000000013 [ 95.527215][ T6308] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000fec00000 [ 95.527226][ T6308] R13: 00007f101817cbd0 R14: 0000200000fe9000 R15: 0000000000000001 [ 95.527254][ T6308] [ 95.848225][ T6315] fido_id[6315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.936561][ T30] audit: type=1400 audit(1791997548.843:375): avc: denied { view } for pid=6326 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 96.479092][ T6346] ======================================================= [ 96.479092][ T6346] WARNING: The mand mount option has been deprecated and [ 96.479092][ T6346] and is ignored by this kernel. Remove the mand [ 96.479092][ T6346] option from the mount to silence this warning. [ 96.479092][ T6346] ======================================================= [ 96.533123][ T30] audit: type=1400 audit(1791997549.443:376): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.616919][ T30] audit: type=1400 audit(1791997550.523:377): avc: denied { mount } for pid=6362 comm="syz.3.171" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 97.620088][ T30] audit: type=1400 audit(1791997550.523:378): avc: denied { search } for pid=6362 comm="syz.3.171" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.620131][ T30] audit: type=1400 audit(1791997550.523:379): avc: denied { search } for pid=6362 comm="syz.3.171" name="events" dev="tracefs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.625916][ T30] audit: type=1400 audit(1791997550.533:380): avc: denied { map } for pid=6359 comm="syz.1.170" path="socket:[11542]" dev="sockfs" ino=11542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.705133][ T30] audit: type=1400 audit(1791997550.613:381): avc: denied { search } for pid=6362 comm="syz.3.171" name="irq" dev="tracefs" ino=11548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.705407][ T30] audit: type=1400 audit(1791997550.613:382): avc: denied { search } for pid=6362 comm="syz.3.171" name="irq_handler_entry" dev="tracefs" ino=11550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.869348][ T6371] net_ratelimit: 54 callbacks suppressed [ 99.367344][ T6423] FAULT_INJECTION: forcing a failure. [ 99.367344][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 99.367373][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT(full) [ 99.367396][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.367409][ T6423] Call Trace: [ 99.367417][ T6423] [ 99.367425][ T6423] dump_stack_lvl+0x100/0x190 [ 99.367461][ T6423] should_fail_ex.cold+0x5/0xa [ 99.367489][ T6423] should_failslab+0xc2/0x120 [ 99.367519][ T6423] __kmalloc_cache_noprof+0x91/0x6d0 [ 99.367540][ T6423] ? bpf_lsm_inode_init_security_anon+0x9/0x10 [ 99.367567][ T6423] ? __do_sys_memfd_secret+0x130/0x570 [ 99.367603][ T6423] __do_sys_memfd_secret+0x130/0x570 [ 99.367634][ T6423] do_syscall_64+0x123/0x790 [ 99.367665][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.367686][ T6423] RIP: 0033:0x7fd95299e2d9 [ 99.367703][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.367722][ T6423] RSP: 002b:00007fd953887028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 99.367742][ T6423] RAX: ffffffffffffffda RBX: 00007fd952c25fa0 RCX: 00007fd95299e2d9 [ 99.367756][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 99.367769][ T6423] RBP: 00007fd952a35888 R08: 0000000000000000 R09: 0000000000000000 [ 99.367781][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.367793][ T6423] R13: 00007fd952c26038 R14: 00007fd952c25fa0 R15: 00007ffc0619f6c8 [ 99.367820][ T6423] [ 99.575642][ T6428] syzkaller0: entered promiscuous mode [ 99.575663][ T6428] syzkaller0: entered allmulticast mode [ 99.580913][ T6427] FAULT_INJECTION: forcing a failure. [ 99.580913][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 99.580928][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.1.182 Not tainted syzkaller #0 PREEMPT(full) [ 99.580942][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.580950][ T6427] Call Trace: [ 99.580954][ T6427] [ 99.580959][ T6427] dump_stack_lvl+0x100/0x190 [ 99.580979][ T6427] should_fail_ex.cold+0x5/0xa [ 99.580996][ T6427] should_failslab+0xc2/0x120 [ 99.581014][ T6427] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 99.581031][ T6427] ? kasprintf+0xc7/0x100 [ 99.581050][ T6427] kvasprintf+0xbc/0x150 [ 99.581065][ T6427] ? __pfx_kvasprintf+0x10/0x10 [ 99.581084][ T6427] ? up_write+0x2dc/0x5b0 [ 99.581100][ T6427] kasprintf+0xc7/0x100 [ 99.581116][ T6427] ? __pfx_kasprintf+0x10/0x10 [ 99.581133][ T6427] ? kernfs_create_link+0x1bd/0x240 [ 99.581151][ T6427] ? kernfs_put+0x3f/0x60 [ 99.581163][ T6427] ? sysfs_do_create_link_sd+0xbb/0x140 [ 99.581184][ T6427] iommu_group_alloc_device+0xdc/0x600 [ 99.581214][ T6427] ? fwnode_property_read_int_array+0x19d/0x1f0 [ 99.581244][ T6427] __iommu_probe_device+0x6b5/0x1550 [ 99.581259][ T6427] ? __pfx___iommu_probe_device+0x10/0x10 [ 99.581273][ T6427] ? __pfx___might_resched+0x10/0x10 [ 99.581290][ T6427] iommu_probe_device+0x28/0x130 [ 99.581303][ T6427] iommu_bus_notifier+0x5b/0x110 [ 99.581317][ T6427] notifier_call_chain+0x99/0x3f0 [ 99.581336][ T6427] blocking_notifier_call_chain+0x69/0xa0 [ 99.581354][ T6427] bus_notify+0x56/0x80 [ 99.581370][ T6427] device_add+0x1169/0x1970 [ 99.581383][ T6427] ? __pfx_device_add+0x10/0x10 [ 99.581396][ T6427] ? kobject_get+0xbb/0x150 [ 99.581407][ T6427] ? __pfx_software_node_get+0x10/0x10 [ 99.581421][ T6427] ? software_node_get+0x68/0x90 [ 99.581436][ T6427] ? fwnode_handle_get+0x97/0xd0 [ 99.581448][ T6427] iommu_mock_device_add+0x7c/0xb0 [ 99.581461][ T6427] iommufd_test+0x3038/0x6600 [ 99.581479][ T6427] ? __lock_acquire+0x5c0/0x1f40 [ 99.581494][ T6427] ? __lock_acquire+0x5c0/0x1f40 [ 99.581508][ T6427] ? __pfx_iommufd_test+0x10/0x10 [ 99.581525][ T6427] ? tomoyo_path_number_perm+0x188/0x580 [ 99.581543][ T6427] ? lock_acquire+0x1d1/0x380 [ 99.581555][ T6427] ? __might_fault+0xc5/0x140 [ 99.581567][ T6427] ? find_held_lock+0x2b/0x80 [ 99.581583][ T6427] ? __might_fault+0xc5/0x140 [ 99.581601][ T6427] iommufd_fops_ioctl+0x358/0x520 [ 99.581613][ T6427] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 99.581623][ T6427] ? __fget_files+0x34/0x3d0 [ 99.581645][ T6427] ? selinux_file_ioctl+0x13b/0x290 [ 99.581666][ T6427] ? selinux_file_ioctl+0xb6/0x290 [ 99.581683][ T6427] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 99.581696][ T6427] __x64_sys_ioctl+0x18e/0x210 [ 99.581712][ T6427] do_syscall_64+0x123/0x790 [ 99.581731][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.581744][ T6427] RIP: 0033:0x7f911bf9e2d9 [ 99.581754][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.581767][ T6427] RSP: 002b:00007f911cf35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.581779][ T6427] RAX: ffffffffffffffda RBX: 00007f911c225fa0 RCX: 00007f911bf9e2d9 [ 99.581786][ T6427] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 99.581793][ T6427] RBP: 00007f911c035888 R08: 0000000000000000 R09: 0000000000000000 [ 99.581800][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.581806][ T6427] R13: 00007f911c226038 R14: 00007f911c225fa0 R15: 00007fff9faa1178 [ 99.581821][ T6427] [ 99.616451][ T6427] iommufd_mock iommufd_mock0: Failed to add to iommu group 0: -12 [ 100.382726][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 100.382735][ T30] audit: type=1400 audit(1791997553.283:404): avc: denied { write } for pid=6448 comm="syz.3.189" path="socket:[11809]" dev="sockfs" ino=11809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.440328][ T30] audit: type=1400 audit(1791997553.343:405): avc: denied { create } for pid=6453 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.441449][ T6454] FAULT_INJECTION: forcing a failure. [ 100.441449][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 100.441475][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.2.191 Not tainted syzkaller #0 PREEMPT(full) [ 100.441495][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.441506][ T6454] Call Trace: [ 100.441513][ T6454] [ 100.441521][ T6454] dump_stack_lvl+0x100/0x190 [ 100.441553][ T6454] should_fail_ex.cold+0x5/0xa [ 100.441580][ T6454] should_failslab+0xc2/0x120 [ 100.441613][ T6454] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 100.441640][ T6454] ? find_held_lock+0x2b/0x80 [ 100.441667][ T6454] ? blk_alloc_queue+0x31/0x790 [ 100.441697][ T6454] blk_alloc_queue+0x31/0x790 [ 100.441726][ T6454] __blk_alloc_disk+0xa0/0x170 [ 100.441748][ T6454] ? __pfx___blk_alloc_disk+0x10/0x10 [ 100.441768][ T6454] ? __pfx___debug_object_init+0x10/0x10 [ 100.441814][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 100.441841][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 100.441869][ T6454] dm_create+0x5e8/0x1530 [ 100.441896][ T6454] dev_create+0x121/0x2a0 [ 100.441921][ T6454] ? __pfx_dev_create+0x10/0x10 [ 100.441954][ T6454] ctl_ioctl+0x4d2/0xcc0 [ 100.441977][ T6454] ? __pfx_dev_create+0x10/0x10 [ 100.442004][ T6454] ? __pfx_ctl_ioctl+0x10/0x10 [ 100.442055][ T6454] ? selinux_file_ioctl+0x13b/0x290 [ 100.442083][ T6454] ? selinux_file_ioctl+0xb6/0x290 [ 100.442115][ T6454] dm_ctl_ioctl+0x22/0x30 [ 100.442138][ T6454] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 100.442169][ T6454] __x64_sys_ioctl+0x18e/0x210 [ 100.442196][ T6454] do_syscall_64+0x123/0x790 [ 100.442227][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.442249][ T6454] RIP: 0033:0x7f310f79e2d9 [ 100.442266][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.442282][ T6454] RSP: 002b:00007f31105c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.442300][ T6454] RAX: ffffffffffffffda RBX: 00007f310fa25fa0 RCX: 00007f310f79e2d9 [ 100.442312][ T6454] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 100.442323][ T6454] RBP: 00007f310f835888 R08: 0000000000000000 R09: 0000000000000000 [ 100.442334][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.442345][ T6454] R13: 00007f310fa26038 R14: 00007f310fa25fa0 R15: 00007ffe0977d188 [ 100.442369][ T6454] [ 100.568968][ T30] audit: type=1400 audit(1791997553.473:406): avc: denied { ioctl } for pid=6446 comm="syz.0.188" path="socket:[11795]" dev="sockfs" ino=11795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.768645][ T6459] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 100.798472][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 101.011367][ T6463] netlink: 76 bytes leftover after parsing attributes in process `syz.1.194'. [ 101.047521][ T6471] syzkaller0: entered promiscuous mode [ 101.047530][ T6471] syzkaller0: entered allmulticast mode [ 101.105524][ T30] audit: type=1400 audit(1791997554.013:407): avc: denied { getopt } for pid=6477 comm="syz.1.200" lport=27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.166462][ T30] audit: type=1400 audit(1791997554.073:408): avc: denied { write } for pid=6481 comm="syz.1.201" name="tcp6" dev="proc" ino=4026533157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 101.192488][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.289176][ T6488] Bluetooth: ISO socket layer initialized [ 101.335518][ T6492] uprobe: syz.4.206:6492 failed to unregister, leaking uprobe [ 101.343380][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 101.354455][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.354493][ T9] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 101.355768][ T9] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 101.355790][ T9] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 101.355808][ T9] usb 3-1: config 14 has no interface number 0 [ 101.355824][ T9] usb 3-1: config 14 has no interface number 1 [ 101.355872][ T9] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 101.355894][ T9] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 101.355919][ T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 101.355945][ T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 101.355970][ T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 101.355994][ T9] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.356018][ T9] usb 3-1: config 14 interface 57 has no altsetting 0 [ 101.356033][ T9] usb 3-1: config 14 interface 228 has no altsetting 0 [ 101.358991][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.359011][ T9] usb 3-1: Product: syz [ 101.359025][ T9] usb 3-1: Manufacturer: syz [ 101.359040][ T9] usb 3-1: SerialNumber: syz [ 101.359589][ T30] audit: type=1400 audit(1791997554.263:409): avc: denied { connect } for pid=6487 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.419957][ T30] audit: type=1400 audit(1791997554.323:410): avc: denied { create } for pid=6494 comm="syz.4.207" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.420414][ T30] audit: type=1400 audit(1791997554.323:411): avc: denied { link } for pid=6494 comm="syz.4.207" name="#7" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.422473][ T30] audit: type=1400 audit(1791997554.323:412): avc: denied { rename } for pid=6494 comm="syz.4.207" name="#8" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.994002][ T9] legousbtower 3-1:14.57: interrupt endpoints not found [ 102.400853][ T9] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 102.420494][ T9] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 102.884718][ T30] audit: type=1400 audit(1791997555.783:413): avc: denied { execute_no_trans } for pid=6522 comm="syz.3.214" path="/45/file0" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.970466][ T6526] usb 3-1: LEGO USB Tower reset control request failed [ 102.982578][ T4930] Bluetooth: hci4: command tx timeout [ 102.984142][ T4308] net_ratelimit: 144 callbacks suppressed [ 103.136536][ T6532] FAULT_INJECTION: forcing a failure. [ 103.136536][ T6532] name failslab, interval 1, probability 0, space 0, times 0 [ 103.136560][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.1.217 Not tainted syzkaller #0 PREEMPT(full) [ 103.136582][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.136594][ T6532] Call Trace: [ 103.136601][ T6532] [ 103.136611][ T6532] dump_stack_lvl+0x100/0x190 [ 103.136646][ T6532] should_fail_ex.cold+0x5/0xa [ 103.136674][ T6532] should_failslab+0xc2/0x120 [ 103.136703][ T6532] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 103.136732][ T6532] ? net_generic+0xea/0x2a0 [ 103.136754][ T6532] ? nf_nat_register_fn+0x3a2/0x6b0 [ 103.136791][ T6532] kmemdup_noprof+0x29/0x60 [ 103.136816][ T6532] nf_nat_register_fn+0x3a2/0x6b0 [ 103.136844][ T6532] ? __asan_memcpy+0x3c/0x60 [ 103.136869][ T6532] iptable_nat_table_init+0xf5/0x270 [ 103.136905][ T6532] xt_find_table_lock+0x2db/0x520 [ 103.136936][ T6532] xt_request_find_table_lock+0x28/0xf0 [ 103.136963][ T6532] get_info+0x1a7/0x790 [ 103.136990][ T6532] ? avc_has_perm_noaudit+0x145/0x470 [ 103.137015][ T6532] ? __pfx_get_info+0x10/0x10 [ 103.137042][ T6532] ? cred_has_capability.isra.0+0x186/0x300 [ 103.137070][ T6532] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 103.137106][ T6532] ? rcu_is_watching+0x13/0xc0 [ 103.137136][ T6532] ? cap_capable+0x107/0x430 [ 103.137161][ T6532] ? bpf_lsm_capable+0x9/0x10 [ 103.137180][ T6532] ? security_capable+0x80/0x260 [ 103.137206][ T6532] do_ipt_get_ctl+0x231/0xbf0 [ 103.137234][ T6532] ? __mutex_unlock_slowpath+0x35d/0x930 [ 103.137265][ T6532] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 103.137292][ T6532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.137324][ T6532] ? lock_acquire+0x1d1/0x380 [ 103.137352][ T6532] ? nf_sockopt_find.isra.0+0x222/0x290 [ 103.137377][ T6532] nf_getsockopt+0x7c/0xe0 [ 103.137399][ T6532] ip_getsockopt+0x192/0x1e0 [ 103.137429][ T6532] ? __pfx_ip_getsockopt+0x10/0x10 [ 103.137457][ T6532] ? rcu_is_watching+0x13/0xc0 [ 103.137484][ T6532] ? trace_sched_exit_tp+0x120/0x160 [ 103.137515][ T6532] sctp_getsockopt+0x19b/0x7160 [ 103.137539][ T6532] ? avc_has_perm_noaudit+0x56/0x470 [ 103.137561][ T6532] ? find_held_lock+0x2b/0x80 [ 103.137589][ T6532] ? avc_has_perm_noaudit+0x11e/0x470 [ 103.137608][ T6532] ? avc_has_perm_noaudit+0x11e/0x470 [ 103.137631][ T6532] ? __pfx_sctp_getsockopt+0x10/0x10 [ 103.137656][ T6532] ? __lock_acquire+0x5c0/0x1f40 [ 103.137679][ T6532] ? avc_has_perm+0x135/0x1e0 [ 103.137699][ T6532] ? __pfx_avc_has_perm+0x10/0x10 [ 103.137725][ T6532] ? lock_acquire+0x1d1/0x380 [ 103.137747][ T6532] ? __might_fault+0xc5/0x140 [ 103.137768][ T6532] ? find_held_lock+0x2b/0x80 [ 103.137800][ T6532] ? __might_fault+0xc5/0x140 [ 103.137819][ T6532] ? __might_fault+0xc5/0x140 [ 103.137846][ T6532] ? _copy_from_user+0x59/0xd0 [ 103.137873][ T6532] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 103.137901][ T6532] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 103.137933][ T6532] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 103.137960][ T6532] do_sock_getsockopt+0x50a/0x6e0 [ 103.137990][ T6532] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 103.138019][ T6532] ? __fget_files+0x34/0x3d0 [ 103.138047][ T6532] ? find_held_lock+0x2b/0x80 [ 103.138083][ T6532] ? __fget_files+0x21f/0x3d0 [ 103.138117][ T6532] __sys_getsockopt+0x148/0x260 [ 103.138144][ T6532] ? __x64_sys_getsockopt+0xbd/0x160 [ 103.138162][ T6532] __x64_sys_getsockopt+0xbd/0x160 [ 103.138180][ T6532] ? do_syscall_64+0xae/0x790 [ 103.138207][ T6532] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.138234][ T6532] do_syscall_64+0x123/0x790 [ 103.138264][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.138284][ T6532] RIP: 0033:0x7f911bf9e2d9 [ 103.138302][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.138322][ T6532] RSP: 002b:00007f911cf35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 103.138343][ T6532] RAX: ffffffffffffffda RBX: 00007f911c225fa0 RCX: 00007f911bf9e2d9 [ 103.138357][ T6532] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 103.138370][ T6532] RBP: 00007f911c035888 R08: 00002000000000c0 R09: 0000000000000000 [ 103.138384][ T6532] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 103.138397][ T6532] R13: 00007f911c226038 R14: 00007f911c225fa0 R15: 00007fff9faa1178 [ 103.138425][ T6532] [ 103.184700][ T25] usb 3-1: USB disconnect, device number 4 [ 103.206821][ T25] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 103.332414][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.494137][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 103.498663][ T44] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 103.539533][ T44] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 103.539561][ T44] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 103.539589][ T44] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 103.539612][ T44] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 103.539633][ T44] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 103.539655][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.543287][ T44] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 103.543305][ T44] usb 4-1: Product: syz [ 103.543318][ T44] usb 4-1: Manufacturer: syz [ 103.543330][ T44] usb 4-1: SerialNumber: syz [ 103.560183][ T44] usb 4-1: config 0 descriptor?? [ 103.570160][ T6530] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 103.576295][ T44] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 103.588085][ T44] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 103.966691][ T6540] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 104.682447][ T5823] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.833463][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 104.853336][ T6547] logitech-hidpp-device 0005:046D:B012.0003: received hid++ report of bad size (4096) [ 104.854766][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.854802][ T5823] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 104.855740][ T5823] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 104.855770][ T5823] usb 2-1: can't read configurations, error -71 [ 104.923971][ T9] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 104.937188][ T5621] usb 4-1: USB disconnect, device number 5 [ 104.947452][ T5621] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 105.025949][ T6551] fido_id[6551]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.617897][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 105.617912][ T30] audit: type=1400 audit(1791997558.523:425): avc: denied { bind } for pid=6567 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.620757][ T30] audit: type=1400 audit(1791997558.523:426): avc: denied { read } for pid=6567 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.691417][ T30] audit: type=1400 audit(1791997558.593:427): avc: denied { write } for pid=6567 comm="syz.1.229" path="socket:[12891]" dev="sockfs" ino=12891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.436365][ T30] audit: type=1400 audit(1791997559.343:428): avc: denied { node_bind } for pid=6581 comm="syz.2.234" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 106.627507][ T6585] bridge0: port 3(syz_tun) entered blocking state [ 106.627770][ T6585] bridge0: port 3(syz_tun) entered disabled state [ 106.628039][ T6585] syz_tun: entered allmulticast mode [ 106.631410][ T6585] syz_tun: entered promiscuous mode [ 106.665820][ T6585] bridge0: port 3(syz_tun) entered blocking state [ 106.665952][ T6585] bridge0: port 3(syz_tun) entered listening state [ 106.744603][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'. [ 106.930719][ T6589] netlink: 76 bytes leftover after parsing attributes in process `syz.2.237'. [ 107.170319][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 107.605147][ T6614] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 107.606090][ T6614] netlink: 84 bytes leftover after parsing attributes in process `syz.4.246'. [ 107.728920][ T30] audit: type=1400 audit(1791997560.633:429): avc: denied { setopt } for pid=6610 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.813230][ T30] audit: type=1400 audit(1791997560.683:430): avc: denied { write } for pid=6610 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.091163][ T30] audit: type=1400 audit(1791997560.993:431): avc: denied { read } for pid=6610 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.112143][ C1] net_ratelimit: 693 callbacks suppressed [ 108.759888][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 108.909850][ T6636] netlink: 76 bytes leftover after parsing attributes in process `syz.3.252'. [ 108.993760][ T188] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.157307][ T188] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 109.160228][ T188] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.160287][ T188] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 109.160329][ T188] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.160368][ T188] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.161022][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.238195][ T188] usb 3-1: config 0 descriptor?? [ 109.239349][ T6634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.213548][ T5823] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.327394][ T30] audit: type=1400 audit(1791997563.233:432): avc: denied { write } for pid=6654 comm="syz.0.257" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.359212][ T30] audit: type=1400 audit(1791997563.263:433): avc: denied { write } for pid=6654 comm="syz.0.257" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.386468][ T5823] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 110.389294][ T5823] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 110.389357][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.389393][ T5823] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.389493][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.392421][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.455917][ T6651] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.542396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 110.544275][ T25] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 110.546024][ T25] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.546051][ T25] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 110.546095][ T25] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.546118][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.546160][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.550712][ T25] usb 4-1: config 0 descriptor?? [ 110.551404][ T6658] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 110.948308][ T5616] Bluetooth: hci5: Reading Intel version command failed (-71) [ 110.950447][ T44] usb 2-1: USB disconnect, device number 8 [ 111.690286][ T6675] block nbd0: shutting down sockets [ 111.849834][ T188] usbhid 3-1:0.0: can't add hid device: -71 [ 111.849978][ T188] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 112.439047][ T6680] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 112.669887][ T188] usb 3-1: USB disconnect, device number 5 [ 112.957041][ T6685] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 113.173800][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 113.173905][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 113.203391][ T25] usb 4-1: USB disconnect, device number 6 [ 113.255641][ T1118] net_ratelimit: 67 callbacks suppressed [ 113.592324][ T6696] FAULT_INJECTION: forcing a failure. [ 113.592324][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 113.592353][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.4.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.592380][ T6696] Tainted: [L]=SOFTLOCKUP [ 113.592388][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.592399][ T6696] Call Trace: [ 113.592405][ T6696] [ 113.592413][ T6696] dump_stack_lvl+0x100/0x190 [ 113.592445][ T6696] should_fail_ex.cold+0x5/0xa [ 113.592473][ T6696] should_failslab+0xc2/0x120 [ 113.592502][ T6696] __kmalloc_cache_noprof+0x91/0x6d0 [ 113.592525][ T6696] ? iommu_group_alloc_device+0x4e/0x600 [ 113.592562][ T6696] iommu_group_alloc_device+0x4e/0x600 [ 113.592592][ T6696] ? fwnode_property_read_int_array+0x19d/0x1f0 [ 113.592627][ T6696] __iommu_probe_device+0x6b5/0x1550 [ 113.592653][ T6696] ? __pfx___iommu_probe_device+0x10/0x10 [ 113.592678][ T6696] ? __pfx___might_resched+0x10/0x10 [ 113.592705][ T6696] iommu_probe_device+0x28/0x130 [ 113.592729][ T6696] iommu_bus_notifier+0x5b/0x110 [ 113.592753][ T6696] notifier_call_chain+0x99/0x3f0 [ 113.592787][ T6696] blocking_notifier_call_chain+0x69/0xa0 [ 113.592819][ T6696] bus_notify+0x56/0x80 [ 113.592846][ T6696] device_add+0x1169/0x1970 [ 113.592871][ T6696] ? __pfx_device_add+0x10/0x10 [ 113.592892][ T6696] ? kobject_get+0xbb/0x150 [ 113.592913][ T6696] ? __pfx_software_node_get+0x10/0x10 [ 113.592939][ T6696] ? software_node_get+0x68/0x90 [ 113.592964][ T6696] ? fwnode_handle_get+0x97/0xd0 [ 113.592986][ T6696] iommu_mock_device_add+0x7c/0xb0 [ 113.593008][ T6696] iommufd_test+0x3038/0x6600 [ 113.593040][ T6696] ? __lock_acquire+0x5c0/0x1f40 [ 113.593067][ T6696] ? __lock_acquire+0x5c0/0x1f40 [ 113.593095][ T6696] ? __pfx_iommufd_test+0x10/0x10 [ 113.593123][ T6696] ? tomoyo_path_number_perm+0x188/0x580 [ 113.593156][ T6696] ? lock_acquire+0x1d1/0x380 [ 113.593178][ T6696] ? __might_fault+0xc5/0x140 [ 113.593200][ T6696] ? find_held_lock+0x2b/0x80 [ 113.593229][ T6696] ? __might_fault+0xc5/0x140 [ 113.593262][ T6696] iommufd_fops_ioctl+0x358/0x520 [ 113.593284][ T6696] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 113.593303][ T6696] ? __fget_files+0x34/0x3d0 [ 113.593342][ T6696] ? selinux_file_ioctl+0x13b/0x290 [ 113.593366][ T6696] ? selinux_file_ioctl+0xb6/0x290 [ 113.593395][ T6696] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 113.593411][ T6696] __x64_sys_ioctl+0x18e/0x210 [ 113.593433][ T6696] do_syscall_64+0x123/0x790 [ 113.593459][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.593476][ T6696] RIP: 0033:0x7ff70d99e2d9 [ 113.593492][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.593510][ T6696] RSP: 002b:00007ff70e901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.593528][ T6696] RAX: ffffffffffffffda RBX: 00007ff70dc25fa0 RCX: 00007ff70d99e2d9 [ 113.593540][ T6696] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 113.593550][ T6696] RBP: 00007ff70da35888 R08: 0000000000000000 R09: 0000000000000000 [ 113.593560][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.593570][ T6696] R13: 00007ff70dc26038 R14: 00007ff70dc25fa0 R15: 00007ffc8028c998 [ 113.593593][ T6696] [ 114.016671][ T4930] Bluetooth: hci0: unexpected subevent 0x01 length: 19 > 18 [ 114.020334][ T4930] Bluetooth: hci0: link tx timeout [ 114.819099][ T30] audit: type=1400 audit(1791997567.703:434): avc: denied { append } for pid=6711 comm="syz.0.274" name="sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.819218][ T30] audit: type=1400 audit(1791997567.703:435): avc: denied { open } for pid=6711 comm="syz.0.274" path="/dev/sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.732569][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.884014][ T44] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 115.886318][ T44] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.886372][ T44] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 115.886436][ T44] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.886485][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.886605][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.004844][ T44] usb 3-1: config 0 descriptor?? [ 116.007971][ T6716] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.026427][ T5616] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 116.026441][ T5616] Bluetooth: hci0: MSFT extension not registered [ 116.244826][ T6722] batadv_slave_1: entered promiscuous mode [ 116.250393][ T6721] batadv_slave_1: left promiscuous mode [ 116.362502][ T30] audit: type=1400 audit(1791997569.263:436): avc: denied { create } for pid=6723 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 116.400170][ T30] audit: type=1400 audit(1791997569.303:437): avc: denied { sys_admin } for pid=6723 comm="syz.1.280" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 118.342627][ T42] net_ratelimit: 39 callbacks suppressed [ 118.469398][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 118.469510][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 118.488021][ T44] usb 3-1: USB disconnect, device number 6 [ 118.831244][ T6752] kvm: pic: non byte write [ 120.022649][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.182306][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.195303][ T44] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 120.201617][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 120.235190][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.235255][ T44] usb 4-1: Product: syz [ 120.235269][ T44] usb 4-1: Manufacturer: syz [ 120.235321][ T44] usb 4-1: SerialNumber: syz [ 120.358236][ T5621] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.512925][ T5621] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 120.518056][ T5621] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 120.518123][ T5621] usb 3-1: config 0 has no interface number 0 [ 120.518247][ T5621] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.565894][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.565953][ T5621] usb 3-1: Product: syz [ 120.565967][ T5621] usb 3-1: Manufacturer: syz [ 120.566027][ T5621] usb 3-1: SerialNumber: syz [ 120.654309][ T5621] usb 3-1: config 0 descriptor?? [ 120.828017][ T5621] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 120.943951][ T6770] bridge0: port 3(syz_tun) entered blocking state [ 120.944033][ T6770] bridge0: port 3(syz_tun) entered disabled state [ 120.944232][ T6770] syz_tun: entered allmulticast mode [ 120.949399][ T6770] syz_tun: entered promiscuous mode [ 121.079785][ T44] usb 4-1: USB disconnect, device number 7 [ 121.197459][ T30] audit: type=1400 audit(1791997574.103:438): avc: denied { create } for pid=6775 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.200205][ T30] audit: type=1400 audit(1791997574.103:439): avc: denied { setopt } for pid=6775 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.213188][ T30] audit: type=1400 audit(1791997574.103:440): avc: denied { write } for pid=6775 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.278740][ T30] audit: type=1400 audit(1791997574.183:441): avc: denied { bind } for pid=6775 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 122.193833][ C0] bridge0: port 3(syz_tun) entered learning state [ 122.609328][ T6795] syzkaller0: entered promiscuous mode [ 122.609362][ T6795] syzkaller0: entered allmulticast mode [ 122.623921][ T6795] tipc: Started in network mode [ 122.623940][ T6795] tipc: Node identity 126284d2b2d2, cluster identity 4711 [ 122.626831][ T6795] tipc: Enabled bearer , priority 0 [ 122.638316][ T6794] tipc: Resetting bearer [ 122.665046][ T6794] tipc: Disabling bearer [ 122.665570][ T6799] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 123.083310][ T5621] usb 3-1: USB disconnect, device number 7 [ 123.175055][ T5621] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 123.382424][ C1] net_ratelimit: 39 callbacks suppressed [ 123.405985][ T12] IPVS: starting estimator thread 0... [ 123.497935][ T6813] IPVS: using max 41 ests per chain, 98400 per kthread [ 123.789986][ T30] audit: type=1400 audit(1791997576.693:442): avc: denied { bind } for pid=6816 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.815208][ T30] audit: type=1400 audit(1791997576.723:443): avc: denied { connect } for pid=6816 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.869522][ T30] audit: type=1400 audit(1791997576.773:444): avc: denied { write } for pid=6816 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.896161][ T30] audit: type=1400 audit(1791997576.803:445): avc: denied { read } for pid=6816 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.142651][ T5782] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.303908][ T5782] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 125.305438][ T5782] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.305476][ T5782] usb 2-1: config 0 has no interface number 0 [ 125.305586][ T5782] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.305638][ T5782] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.305715][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.311439][ T5782] usb 2-1: config 0 descriptor?? [ 125.553798][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.565556][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.596607][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.607628][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.611808][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.621758][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.873624][ T5782] prodikeys 0003:041E:2801.0004: collection stack underflow [ 125.873661][ T5782] prodikeys 0003:041E:2801.0004: item 0 1 0 12 parsing failed [ 125.874511][ T5782] prodikeys 0003:041E:2801.0004: hid parse failed [ 125.874648][ T5782] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 126.074371][ T44] usb 2-1: USB disconnect, device number 9 [ 126.120520][ T6849] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 126.326722][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.322'. [ 126.326759][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.322'. [ 126.849582][ T30] audit: type=1400 audit(1791997579.753:446): avc: denied { kexec_image_load } for pid=6867 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 127.242520][ T188] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.305854][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.305896][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.377027][ T6882] FAULT_INJECTION: forcing a failure. [ 127.377027][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 127.377069][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.3.331 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.377098][ T6882] Tainted: [L]=SOFTLOCKUP [ 127.377106][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.377118][ T6882] Call Trace: [ 127.377125][ T6882] [ 127.377133][ T6882] dump_stack_lvl+0x100/0x190 [ 127.377168][ T6882] should_fail_ex.cold+0x5/0xa [ 127.377196][ T6882] should_failslab+0xc2/0x120 [ 127.377225][ T6882] __kmalloc_cache_noprof+0x91/0x6d0 [ 127.377247][ T6882] ? get_device_parent+0x260/0x4c0 [ 127.377274][ T6882] ? get_device_parent+0x29a/0x4c0 [ 127.377308][ T6882] get_device_parent+0x29a/0x4c0 [ 127.377340][ T6882] device_add+0xc3b/0x1970 [ 127.377361][ T6882] ? __pfx_dev_set_name+0x10/0x10 [ 127.377382][ T6882] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.377407][ T6882] ? __pfx_device_add+0x10/0x10 [ 127.377426][ T6882] ? lockdep_init_map_type+0x5c/0x250 [ 127.377451][ T6882] ? __init_waitqueue_head+0xca/0x150 [ 127.377483][ T6882] wakeup_source_device_create+0x243/0x2e0 [ 127.377515][ T6882] wakeup_source_sysfs_add+0x1c/0x90 [ 127.377538][ T6882] wakeup_source_register+0x154/0x3e0 [ 127.377568][ T6882] ep_create_wakeup_source+0x1df/0x2e0 [ 127.377589][ T6882] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 127.377614][ T6882] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 127.377637][ T6882] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 127.377667][ T6882] do_epoll_ctl_file+0x1e26/0x36e0 [ 127.377699][ T6882] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 127.377721][ T6882] ? lock_acquire+0x1d1/0x380 [ 127.377742][ T6882] ? __fget_files+0x34/0x3d0 [ 127.377771][ T6882] ? find_held_lock+0x2b/0x80 [ 127.377801][ T6882] ? __fget_files+0x215/0x3d0 [ 127.377834][ T6882] ? __fget_files+0x21f/0x3d0 [ 127.377868][ T6882] ? do_epoll_ctl+0xfd/0x1a0 [ 127.377888][ T6882] do_epoll_ctl+0xfd/0x1a0 [ 127.377912][ T6882] ? __pfx_do_epoll_ctl+0x10/0x10 [ 127.377943][ T6882] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 127.377966][ T6882] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 127.377999][ T6882] do_syscall_64+0x123/0x790 [ 127.378030][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.378050][ T6882] RIP: 0033:0x7fd95299e2d9 [ 127.378067][ T6882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.378086][ T6882] RSP: 002b:00007fd953887028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 127.378105][ T6882] RAX: ffffffffffffffda RBX: 00007fd952c25fa0 RCX: 00007fd95299e2d9 [ 127.378117][ T6882] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 127.378128][ T6882] RBP: 00007fd952a35888 R08: 0000000000000000 R09: 0000000000000000 [ 127.378139][ T6882] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 127.378153][ T6882] R13: 00007fd952c26038 R14: 00007fd952c25fa0 R15: 00007ffc0619f6c8 [ 127.378180][ T6882] [ 127.437093][ T188] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 127.488848][ T188] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.488902][ T188] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 127.488941][ T188] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.488980][ T188] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.489067][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.799494][ T188] usb 2-1: config 0 descriptor?? [ 127.801311][ T6877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.018200][ T30] audit: type=1400 audit(1791997580.923:447): avc: denied { mount } for pid=6886 comm="syz.3.332" name="/" dev="autofs" ino=14684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 128.548474][ T5705] net_ratelimit: 41 callbacks suppressed [ 128.632256][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.963921][ T6898] FAULT_INJECTION: forcing a failure. [ 128.963921][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 128.963950][ T6898] CPU: 1 UID: 0 PID: 6898 Comm: syz.0.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.963975][ T6898] Tainted: [L]=SOFTLOCKUP [ 128.963982][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.963993][ T6898] Call Trace: [ 128.964000][ T6898] [ 128.964008][ T6898] dump_stack_lvl+0x100/0x190 [ 128.964043][ T6898] should_fail_ex.cold+0x5/0xa [ 128.964070][ T6898] should_failslab+0xc2/0x120 [ 128.964098][ T6898] __kmalloc_noprof+0xfc/0x840 [ 128.964122][ T6898] ? process_preds+0x4a2/0x1d90 [ 128.964151][ T6898] process_preds+0x4a2/0x1d90 [ 128.964180][ T6898] ? create_filter_start.constprop.0+0x134/0x310 [ 128.964208][ T6898] create_filter+0x140/0x210 [ 128.964232][ T6898] ? __pfx_create_filter+0x10/0x10 [ 128.964255][ T6898] ? __pfx___mutex_lock+0x10/0x10 [ 128.964282][ T6898] ? __might_fault+0xc5/0x140 [ 128.964304][ T6898] ? find_held_lock+0x2b/0x80 [ 128.964335][ T6898] apply_event_filter+0x220/0x500 [ 128.964361][ T6898] ? __pfx_apply_event_filter+0x10/0x10 [ 128.964393][ T6898] event_filter_write+0x16d/0x290 [ 128.964424][ T6898] vfs_write+0x2aa/0x1050 [ 128.964449][ T6898] ? __pfx_event_filter_write+0x10/0x10 [ 128.964477][ T6898] ? lock_acquire+0x1d1/0x380 [ 128.964498][ T6898] ? __fget_files+0x34/0x3d0 [ 128.964524][ T6898] ? __pfx_vfs_write+0x10/0x10 [ 128.964545][ T6898] ? find_held_lock+0x2b/0x80 [ 128.964582][ T6898] ? __fget_files+0x215/0x3d0 [ 128.964614][ T6898] ? __fget_files+0x21f/0x3d0 [ 128.964648][ T6898] ksys_write+0x12a/0x250 [ 128.964672][ T6898] ? __pfx_ksys_write+0x10/0x10 [ 128.964705][ T6898] do_syscall_64+0x123/0x790 [ 128.964736][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.964755][ T6898] RIP: 0033:0x7f101739e2d9 [ 128.964772][ T6898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.964790][ T6898] RSP: 002b:00007f101817e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.964810][ T6898] RAX: ffffffffffffffda RBX: 00007f1017625fa0 RCX: 00007f101739e2d9 [ 128.964823][ T6898] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 128.964835][ T6898] RBP: 00007f1017435888 R08: 0000000000000000 R09: 0000000000000000 [ 128.964846][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.964858][ T6898] R13: 00007f1017626038 R14: 00007f1017625fa0 R15: 00007ffd679c7818 [ 128.964885][ T6898] [ 129.500034][ T30] audit: type=1400 audit(1791997582.403:448): avc: denied { create } for pid=6908 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.533580][ T30] audit: type=1400 audit(1791997582.443:449): avc: denied { create } for pid=6908 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.056188][ T188] usbhid 2-1:0.0: can't add hid device: -71 [ 130.056368][ T188] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 130.080813][ T188] usb 2-1: USB disconnect, device number 10 [ 130.257587][ T6928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'. [ 130.403101][ T30] audit: type=1400 audit(1791997583.313:450): avc: denied { listen } for pid=6931 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.406924][ T30] audit: type=1400 audit(1791997583.313:451): avc: denied { accept } for pid=6931 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.471290][ T6936] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 130.504743][ T5782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.571967][ T30] audit: type=1400 audit(1791997583.473:452): avc: denied { read write } for pid=6932 comm="syz.4.346" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.572234][ T30] audit: type=1400 audit(1791997583.473:453): avc: denied { open } for pid=6932 comm="syz.4.346" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.669570][ T6928] netlink: 148 bytes leftover after parsing attributes in process `syz.1.344'. [ 130.722319][ T6934] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 130.731489][ T6934] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 130.731702][ T6934] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 130.750339][ T6934] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 130.771811][ T6934] kvm: requested 126552 ns i8254 timer period limited to 200000 ns [ 130.774923][ T6934] kvm: requested 34361 ns i8254 timer period limited to 200000 ns [ 130.780497][ T6934] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 130.783725][ T6934] kvm: requested 148342 ns i8254 timer period limited to 200000 ns [ 130.788489][ T6934] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 130.802012][ T6934] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 131.077116][ T6950] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 133.610397][ T30] audit: type=1400 audit(1791997586.513:454): avc: denied { read } for pid=6977 comm="syz.3.359" name="stats" dev="binder" ino=1048588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.610437][ T30] audit: type=1400 audit(1791997586.513:455): avc: denied { open } for pid=6977 comm="syz.3.359" path="/dev/binderfs/binder_logs/stats" dev="binder" ino=1048588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.652288][ T6970] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 133.765933][ T6976] syzkaller0: entered promiscuous mode [ 133.765948][ T6976] syzkaller0: entered allmulticast mode [ 133.862460][ C1] net_ratelimit: 109 callbacks suppressed [ 133.898301][ T30] audit: type=1400 audit(1791997586.803:456): avc: denied { create } for pid=6979 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 133.947914][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 134.120965][ T6982] netlink: 148 bytes leftover after parsing attributes in process `syz.3.361'. [ 134.219297][ T30] audit: type=1400 audit(1791997587.123:457): avc: denied { bind } for pid=6987 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.233631][ T30] audit: type=1400 audit(1791997587.133:458): avc: denied { setopt } for pid=6987 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.299374][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 135.790173][ T30] audit: type=1400 audit(1791997588.693:459): avc: denied { mounton } for pid=6998 comm="syz.1.369" path="/78/file0" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 135.818060][ T30] audit: type=1800 audit(1791997588.713:460): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.365" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 136.068785][ T7004] create_pit_timer: 8 callbacks suppressed [ 136.068811][ T7004] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 136.156166][ T7004] kvm: pic: level sensitive irq not supported [ 136.156283][ T7004] kvm_do_msr_access: 3303 callbacks suppressed [ 136.247339][ T7012] tipc: Started in network mode [ 136.247360][ T7012] tipc: Node identity 7f000001, cluster identity 4711 [ 136.249242][ T7012] tipc: Enabling of bearer rejected, failed to enable media [ 136.282773][ T7012] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 136.283377][ T7012] tipc: Enabled bearer , priority 10 [ 136.696023][ T30] audit: type=1400 audit(1791997589.603:461): avc: denied { watch } for pid=7018 comm="syz.4.373" path="/67/file0" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.696068][ T30] audit: type=1400 audit(1791997589.603:462): avc: denied { watch_sb watch_reads } for pid=7018 comm="syz.4.373" path="/67/file0" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.376907][ T5782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.413378][ T5621] tipc: Node number set to 2130706433 [ 137.486709][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 137.543614][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 137.543640][ C0] bridge0: topology change detected, propagating [ 137.574693][ T5804] usb 5-1: Failed to load image "edgeport/down.fw" err -110 [ 137.575614][ T5804] usb 5-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 137.575634][ T5804] usb 5-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 137.744508][ T30] audit: type=1400 audit(1791997590.653:463): avc: denied { append } for pid=7034 comm="syz.2.378" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.171177][ T7031] netlink: 148 bytes leftover after parsing attributes in process `syz.3.377'. [ 139.248968][ T5705] net_ratelimit: 72 callbacks suppressed [ 139.472169][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 139.472182][ T30] audit: type=1400 audit(1791997592.373:465): avc: denied { bind } for pid=7042 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.472610][ T30] audit: type=1400 audit(1791997592.383:466): avc: denied { listen } for pid=7042 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.473060][ T30] audit: type=1400 audit(1791997592.383:467): avc: denied { connect } for pid=7042 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.474477][ T30] audit: type=1400 audit(1791997592.383:468): avc: denied { setopt } for pid=7042 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.474697][ T30] audit: type=1400 audit(1791997592.383:469): avc: denied { write } for pid=7042 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.475811][ T30] audit: type=1400 audit(1791997592.383:470): avc: denied { accept } for pid=7042 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.476129][ T30] audit: type=1400 audit(1791997592.383:471): avc: denied { read } for pid=7042 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.180114][ T5782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.946049][ T5782] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 140.979187][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 141.063330][ T30] audit: type=1400 audit(1791997593.963:472): avc: denied { write } for pid=7063 comm="syz.0.386" path="socket:[15030]" dev="sockfs" ino=15030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 141.116196][ T5782] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.121292][ T5782] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 141.121331][ T5782] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 141.121368][ T5782] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.171726][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.171760][ T5782] usb 4-1: Product: syz [ 141.171789][ T5782] usb 4-1: Manufacturer: syz [ 141.171803][ T5782] usb 4-1: SerialNumber: syz [ 141.186704][ T30] audit: type=1400 audit(1791997594.083:473): avc: denied { write } for pid=7066 comm="syz.1.388" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.189111][ T30] audit: type=1400 audit(1791997594.093:474): avc: denied { write } for pid=7066 comm="syz.1.388" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.250150][ T5782] usb 4-1: config 0 descriptor?? [ 141.251919][ T7051] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.274109][ T5782] usb 4-1: selecting invalid altsetting 0 [ 141.559922][ T7051] usb 4-1: BOGUS urb xfer, pipe 0 != type 1 [ 141.905961][ T5782] usb 4-1: USB disconnect, device number 8 [ 143.507240][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 143.861822][ T7108] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.884064][ T7056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.422644][ C1] net_ratelimit: 56 callbacks suppressed [ 144.887766][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 144.887784][ T30] audit: type=1400 audit(1791997597.793:478): avc: denied { read } for pid=7130 comm="syz.0.408" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.887824][ T30] audit: type=1400 audit(1791997597.793:479): avc: denied { open } for pid=7130 comm="syz.0.408" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 145.866525][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.935358][ T30] audit: type=1400 audit(1791997598.833:480): avc: denied { create } for pid=7142 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 145.935362][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 145.935402][ T30] audit: type=1400 audit(1791997598.843:481): avc: denied { write } for pid=7142 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 146.040223][ T30] audit: type=1400 audit(1791997598.943:482): avc: denied { map } for pid=7144 comm="syz.2.411" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.122134][ T7150] bond1: entered promiscuous mode [ 146.122148][ T7150] bond1: entered allmulticast mode [ 146.646920][ T30] audit: type=1400 audit(1791997599.553:483): avc: denied { write } for pid=7160 comm="syz.3.416" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.649862][ T30] audit: type=1400 audit(1791997599.553:484): avc: denied { write } for pid=7160 comm="syz.3.416" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.957924][ T30] audit: type=1400 audit(1791997599.863:485): avc: denied { create } for pid=7163 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.993239][ T30] audit: type=1400 audit(1791997599.903:486): avc: denied { bind } for pid=7163 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.997877][ T30] audit: type=1400 audit(1791997599.903:487): avc: denied { listen } for pid=7163 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.782471][ C0] net_ratelimit: 41 callbacks suppressed [ 150.418012][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 150.418037][ T30] audit: type=1400 audit(1791997603.323:492): avc: denied { write } for pid=7196 comm="syz.3.427" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.421173][ T30] audit: type=1400 audit(1791997603.323:493): avc: denied { write } for pid=7196 comm="syz.3.427" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.553650][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'. [ 150.894619][ T7204] binder: 7203:7204 ioctl c0306201 2000000003c0 returned -14 [ 151.023073][ T7201] netlink: 148 bytes leftover after parsing attributes in process `syz.1.429'. [ 151.624789][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.734485][ T7231] se_dev->se_dev_ptr already set for storage object [ 151.945787][ T7235] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 152.080959][ T7233] kvm: pic: level sensitive irq not supported [ 152.097800][ T7233] kvm: pic: non byte write [ 152.098038][ T7233] kvm: pic: level sensitive irq not supported [ 152.098448][ T7233] kvm: pic: non byte write [ 152.111680][ T7233] kvm: pic: single mode not supported [ 152.117960][ T30] audit: type=1400 audit(1791997605.013:494): avc: denied { read write } for pid=7238 comm="syz.2.441" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 152.118004][ T30] audit: type=1400 audit(1791997605.013:495): avc: denied { open } for pid=7238 comm="syz.2.441" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 152.118037][ T30] audit: type=1400 audit(1791997605.023:496): avc: denied { ioctl } for pid=7238 comm="syz.2.441" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 152.136534][ T7233] kvm: pic: single mode not supported [ 152.146059][ T7233] kvm: pic: level sensitive irq not supported [ 152.210031][ T7233] kvm: pic: single mode not supported [ 152.210055][ T7233] kvm: pic: level sensitive irq not supported [ 152.212642][ T7233] kvm: pic: level sensitive irq not supported [ 152.232671][ T188] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.280525][ T30] audit: type=1400 audit(1791997605.183:497): avc: denied { write } for pid=7241 comm="syz.4.442" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.302467][ T30] audit: type=1400 audit(1791997605.193:498): avc: denied { write } for pid=7241 comm="syz.4.442" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.387744][ T188] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 152.399111][ T188] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.399147][ T188] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 152.399195][ T188] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.399230][ T188] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.399295][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.418208][ T188] usb 2-1: config 0 descriptor?? [ 152.420803][ T7237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.627792][ T7233] kvm: pic: level sensitive irq not supported [ 152.628036][ T7233] kvm: pic: single mode not supported [ 152.628047][ T7233] kvm: pic: level sensitive irq not supported [ 152.628112][ T7233] kvm: pic: non byte write [ 152.964570][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.422016][ T30] audit: type=1326 audit(1791997606.323:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.445" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f79e2d9 code=0x7ffc0000 [ 153.451952][ T30] audit: type=1326 audit(1791997606.353:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.445" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f79e2d9 code=0x7ffc0000 [ 153.480424][ T30] audit: type=1326 audit(1791997606.383:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.445" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f79e2d9 code=0x7ffc0000 [ 153.640163][ T5616] Bluetooth: hci4: Unknown advertising packet type: 0x14 [ 153.852543][ T5823] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.004324][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 154.017265][ T5823] usb 3-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 154.037917][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.037951][ T5823] usb 3-1: Product: syz [ 154.037981][ T5823] usb 3-1: Manufacturer: syz [ 154.038017][ T5823] usb 3-1: SerialNumber: syz [ 154.365608][ T5823] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 154.616871][ T5823] usb 3-1: USB disconnect, device number 8 [ 154.817294][ T7078] udevd[7078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.982480][ C0] net_ratelimit: 686 callbacks suppressed [ 155.019420][ T188] usbhid 2-1:0.0: can't add hid device: -71 [ 155.019635][ T188] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 155.044250][ T188] usb 2-1: USB disconnect, device number 11 [ 155.407788][ T7269] syzkaller0: entered promiscuous mode [ 155.407817][ T7269] syzkaller0: entered allmulticast mode [ 156.339835][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.673109][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.873527][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.053837][ T44] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 157.054909][ T44] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.054934][ T44] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 157.054959][ T44] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.054984][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.055030][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.057886][ T44] usb 3-1: config 0 descriptor?? [ 157.058491][ T7294] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.202459][ T5612] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.353307][ T5612] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 158.354624][ T5612] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.354649][ T5612] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 158.354674][ T5612] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.354697][ T5612] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.354764][ T5612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.358978][ T5612] usb 2-1: config 0 descriptor?? [ 158.361159][ T7301] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 158.554458][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 158.554477][ T30] audit: type=1400 audit(1791997611.463:593): avc: denied { append } for pid=7311 comm="syz.0.468" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.761525][ T1103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.706226][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 159.706355][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 159.739687][ T44] usb 3-1: USB disconnect, device number 9 [ 159.848275][ T7310] kvm_do_msr_access: 156 callbacks suppressed [ 160.102446][ C0] net_ratelimit: 34 callbacks suppressed [ 160.656301][ T5612] usbhid 2-1:0.0: can't add hid device: -71 [ 160.656418][ T5612] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 160.696704][ T5612] usb 2-1: USB disconnect, device number 12 [ 160.812378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.691159][ T30] audit: type=1400 audit(1791997614.593:594): avc: denied { listen } for pid=7335 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.692182][ T30] audit: type=1400 audit(1791997614.593:595): avc: denied { accept } for pid=7335 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.867246][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.868524][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.346451][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 164.449420][ T7368] netlink: 76 bytes leftover after parsing attributes in process `syz.1.481'. [ 164.689254][ T30] audit: type=1400 audit(1791997617.593:596): avc: denied { create } for pid=7379 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 164.689934][ T30] audit: type=1400 audit(1791997617.593:597): avc: denied { write } for pid=7379 comm="syz.2.485" path="socket:[16987]" dev="sockfs" ino=16987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 165.222426][ C1] net_ratelimit: 39 callbacks suppressed [ 166.150433][ T7407] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 166.174385][ T30] audit: type=1400 audit(1791997619.053:598): avc: denied { getopt } for pid=7406 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.251650][ T7407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.370305][ T7409] bond2: (slave geneve2): making interface the new active one [ 166.421149][ T7409] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 166.618486][ T30] audit: type=1400 audit(1791997619.523:599): avc: denied { ioctl } for pid=7416 comm="syz.3.494" path="socket:[19364]" dev="sockfs" ino=19364 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.619923][ T7417] syzkaller0: entered promiscuous mode [ 166.619938][ T7417] syzkaller0: entered allmulticast mode [ 166.853000][ T7421] kvm: pic: level sensitive irq not supported [ 166.853215][ T7421] kvm: pic: non byte read [ 166.905351][ T1103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.937318][ T7423] binder_alloc: 7422: binder_alloc_buf, no vma [ 167.320565][ T7427] raw_sendmsg: syz.1.498 forgot to set AF_INET. Fix it! [ 168.083291][ T30] audit: type=1400 audit(1791997620.993:600): avc: denied { open } for pid=7435 comm="syz.3.502" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 168.116649][ T30] audit: type=1400 audit(1791997621.003:601): avc: denied { ioctl } for pid=7435 comm="syz.3.502" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 168.156443][ T30] audit: type=1400 audit(1791997621.063:602): avc: denied { create } for pid=7440 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.193056][ T30] audit: type=1400 audit(1791997621.103:603): avc: denied { bind } for pid=7440 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.231519][ T30] audit: type=1400 audit(1791997621.133:604): avc: denied { read } for pid=7440 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.281177][ T30] audit: type=1400 audit(1791997621.183:605): avc: denied { write } for pid=7440 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.911762][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.330327][ T7462] FAULT_INJECTION: forcing a failure. [ 169.330327][ T7462] name failslab, interval 1, probability 0, space 0, times 0 [ 169.330356][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz.2.509 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.330384][ T7462] Tainted: [L]=SOFTLOCKUP [ 169.330392][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.330404][ T7462] Call Trace: [ 169.330411][ T7462] [ 169.330420][ T7462] dump_stack_lvl+0x100/0x190 [ 169.330450][ T7462] should_fail_ex.cold+0x5/0xa [ 169.330479][ T7462] should_failslab+0xc2/0x120 [ 169.330506][ T7462] __kmalloc_noprof+0xfc/0x840 [ 169.330528][ T7462] ? rcu_is_watching+0x13/0xc0 [ 169.330558][ T7462] ? tomoyo_realpath_from_path+0xb6/0x690 [ 169.330593][ T7462] tomoyo_realpath_from_path+0xb6/0x690 [ 169.330627][ T7462] tomoyo_path_number_perm+0x23c/0x580 [ 169.330652][ T7462] ? tomoyo_path_number_perm+0x22e/0x580 [ 169.330678][ T7462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.330705][ T7462] ? __handle_mm_fault+0x4ec/0x2f60 [ 169.330731][ T7462] ? __lock_acquire+0x5c0/0x1f40 [ 169.330764][ T7462] ? __fget_files+0x34/0x3d0 [ 169.330790][ T7462] ? find_held_lock+0x2b/0x80 [ 169.330816][ T7462] ? hook_file_ioctl_common+0x140/0x440 [ 169.330842][ T7462] ? __fget_files+0x21f/0x3d0 [ 169.330871][ T7462] security_file_ioctl+0xd3/0x230 [ 169.330898][ T7462] __x64_sys_ioctl+0xb7/0x210 [ 169.330922][ T7462] do_syscall_64+0x123/0x790 [ 169.330951][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.330971][ T7462] RIP: 0033:0x7f310f79df6b [ 169.330987][ T7462] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 169.331005][ T7462] RSP: 002b:00007f31105c3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.331024][ T7462] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f310f79df6b [ 169.331037][ T7462] RDX: 00007f31105c4fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 169.331049][ T7462] RBP: 00007f31105c4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 169.331061][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31105c3fa0 [ 169.331073][ T7462] R13: 00002000000000c0 R14: 0000000000000003 R15: 0000000000000000 [ 169.331098][ T7462] [ 169.331107][ T7462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.572433][ T5621] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 169.586157][ T7471] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 169.587512][ T7471] CIFS: Attempting to mount //127.0.0.1/share [ 169.684420][ T7466] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 169.684440][ T7466] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 169.696003][ T30] audit: type=1400 audit(1791997622.603:606): avc: denied { allowed } for pid=7467 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.724200][ T5621] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 169.725198][ T5621] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.725215][ T5621] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 169.725295][ T5621] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.727154][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.727182][ T5621] usb 3-1: Product: syz [ 169.727195][ T5621] usb 3-1: Manufacturer: syz [ 169.727207][ T5621] usb 3-1: SerialNumber: syz [ 169.871103][ T30] audit: type=1400 audit(1791997622.773:607): avc: denied { write } for pid=7453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.137095][ T30] audit: type=1400 audit(1791997623.043:608): avc: denied { write } for pid=7482 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.164132][ T5621] usb 3-1: USB disconnect, device number 10 [ 170.367072][ T7471] CIFS: VFS: Error connecting to socket. Aborting operation. [ 170.367155][ T7471] CIFS: VFS: cifs_mount failed w/return code = -4 [ 170.458641][ T30] audit: type=1400 audit(1791997623.363:609): avc: denied { sqpoll } for pid=7489 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.525753][ T7494] net_ratelimit: 46014 callbacks suppressed [ 170.586144][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 171.005120][ T7496] netlink: 76 bytes leftover after parsing attributes in process `syz.1.516'. [ 171.018192][ T30] audit: type=1400 audit(1791997623.923:610): avc: denied { write } for pid=7486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.115823][ T7510] binder: 7509:7510 ioctl c0306201 0 returned -14 [ 171.502080][ T30] audit: type=1400 audit(1791997624.403:611): avc: denied { write } for pid=7526 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.332783][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.493210][ T30] audit: type=1400 audit(1791997625.403:612): avc: denied { bind } for pid=7543 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.564553][ T30] audit: type=1400 audit(1791997625.473:613): avc: denied { read } for pid=7542 comm="syz.3.525" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.680785][ T30] audit: type=1400 audit(1791997625.583:614): avc: denied { wake_alarm } for pid=7542 comm="syz.3.525" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.022740][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.712441][ C0] net_ratelimit: 48 callbacks suppressed [ 175.816191][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.995864][ T10] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 176.000807][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.000848][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 176.000903][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.000942][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.001029][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.007681][ T10] usb 4-1: config 0 descriptor?? [ 176.009333][ T7576] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 177.055669][ T30] audit: type=1400 audit(1791997629.963:615): avc: denied { write } for pid=7597 comm="syz.1.541" path="socket:[17280]" dev="sockfs" ino=17280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.145099][ T30] audit: type=1400 audit(1791997630.053:616): avc: denied { name_bind 0x1000000 } for pid=7601 comm="syz.1.544" path="socket:[19975]" dev="sockfs" ino=19975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 177.249456][ T30] audit: type=1400 audit(1791997630.153:617): avc: denied { nlmsg_read } for pid=7603 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.342365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 177.402363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 177.702367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 177.732362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 178.174458][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.581423][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 178.581622][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 178.610427][ T10] usb 4-1: USB disconnect, device number 9 [ 179.147871][ T1103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.642662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 179.919440][ T30] audit: type=1400 audit(1791997632.823:618): avc: denied { ioctl } for pid=7642 comm="syz.1.554" path="socket:[20026]" dev="sockfs" ino=20026 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 180.115541][ T7645] syzkaller0: entered promiscuous mode [ 180.115572][ T7645] syzkaller0: entered allmulticast mode [ 180.292045][ T7643] infiniband syz2: set down [ 180.292066][ T7643] infiniband syz2: added bond0 [ 180.316782][ T7643] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 180.316825][ T7643] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 180.316862][ T7643] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 180.372561][ T7643] RDS/IB: syz2: added [ 180.372860][ T7643] smc: adding ib device syz2 with port count 1 [ 180.372940][ T7643] smc: ib device syz2 port 1 has no pnetid [ 180.603517][ T7650] fuse: Bad value for 'fd' [ 180.742433][ C1] net_ratelimit: 38 callbacks suppressed [ 181.222472][ T30] audit: type=1400 audit(1791997634.073:619): avc: denied { write } for pid=7656 comm="syz.3.559" name="sched" dev="tracefs" ino=17348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 181.222553][ T30] audit: type=1400 audit(1791997634.073:620): avc: denied { add_name } for pid=7656 comm="syz.3.559" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 181.222620][ T30] audit: type=1400 audit(1791997634.083:621): avc: denied { create } for pid=7656 comm="syz.3.559" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 182.172958][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 182.471616][ T7687] gadgetfs: bound to dummy_udc driver [ 182.487139][ T30] audit: type=1400 audit(1791997635.393:622): avc: denied { append } for pid=7686 comm="syz.1.565" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.532559][ T5612] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 182.683040][ T5612] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 182.684388][ T5612] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.684413][ T5612] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 182.684437][ T5612] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.684460][ T5612] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.684505][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.689431][ T5612] usb 3-1: config 0 descriptor?? [ 182.692214][ T7683] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 183.633044][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.035874][ T30] audit: type=1400 audit(1791997636.943:623): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 184.127749][ T7702] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 184.226981][ T7702] bond1: entered promiscuous mode [ 184.228735][ T7702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.293003][ T7705] ipvlan2: entered allmulticast mode [ 184.293040][ T7705] bond1: entered allmulticast mode [ 184.373852][ T7702] bond1: (slave bridge1): making interface the new active one [ 184.373867][ T7702] bridge1: entered promiscuous mode [ 184.374035][ T7702] bridge1: entered allmulticast mode [ 184.377062][ T7702] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 184.453417][ T7712] netlink: 76 bytes leftover after parsing attributes in process `syz.0.570'. [ 184.903512][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.279298][ T5612] usbhid 3-1:0.0: can't add hid device: -71 [ 185.279410][ T5612] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 185.309908][ T5612] usb 3-1: USB disconnect, device number 11 [ 185.787734][ T4930] Bluetooth: hci4: command 0x0406 tx timeout [ 185.787774][ T4930] Bluetooth: hci3: command 0x0406 tx timeout [ 185.787833][ T4930] Bluetooth: hci2: command 0x0406 tx timeout [ 185.787872][ T4930] Bluetooth: hci1: command 0x0406 tx timeout [ 185.944107][ T7744] tc_dump_action: action bad kind [ 186.022403][ C1] net_ratelimit: 36 callbacks suppressed [ 187.331852][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.333757][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.792375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 187.870734][ T30] audit: type=1400 audit(1791997640.773:624): avc: denied { read } for pid=7756 comm="syz.2.584" path="socket:[20527]" dev="sockfs" ino=20527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.887559][ T7746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.912140][ T30] audit: type=1400 audit(1791997640.813:625): avc: denied { setopt } for pid=7759 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.916987][ T7746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.942145][ T30] audit: type=1400 audit(1791997640.843:627): avc: denied { name_bind } for pid=7758 comm="syz.4.585" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 187.964065][ T30] audit: type=1400 audit(1791997640.843:626): avc: denied { name_bind } for pid=7756 comm="syz.2.584" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 188.017569][ T30] audit: type=1400 audit(1791997640.923:628): avc: denied { accept } for pid=7759 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.415410][ T188] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 188.687002][ T188] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 188.692730][ T188] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.692789][ T188] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 188.692834][ T188] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.692885][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 188.692961][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.703682][ T188] usb 4-1: config 0 descriptor?? [ 188.705252][ T7766] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.750765][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.750808][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.787560][ T1118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.837307][ T7768] bridge0: port 4(vxlan0) entered blocking state [ 188.837392][ T7768] bridge0: port 4(vxlan0) entered disabled state [ 188.837571][ T7768] vxlan0: entered allmulticast mode [ 188.841737][ T7768] vxlan0: entered promiscuous mode [ 188.894134][ T4247] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.894200][ T4247] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.894266][ T4247] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.894331][ T4247] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.472351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 190.024804][ T4247] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.129434][ T30] audit: type=1400 audit(1791997643.033:629): avc: denied { map } for pid=7792 comm="syz.1.596" path="socket:[20588]" dev="sockfs" ino=20588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 191.190098][ T7802] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `ݗb"^6C2W [ 191.190098][ T7802] 7 [ 191.302452][ C0] net_ratelimit: 49 callbacks suppressed [ 191.990134][ T188] usbhid 4-1:0.0: can't add hid device: -71 [ 191.990765][ T188] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 191.992362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 192.024259][ T188] usb 4-1: USB disconnect, device number 10 [ 192.186355][ T7811] lo: entered allmulticast mode [ 193.317719][ T7818] netlink: 64 bytes leftover after parsing attributes in process `syz.4.603'. [ 193.352802][ T30] audit: type=1400 audit(1791997646.263:630): avc: denied { execute } for pid=7819 comm="syz.2.604" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.404421][ T188] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 193.572750][ T188] usb 4-1: Using ep0 maxpacket: 32 [ 193.577211][ T188] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 193.579348][ T188] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 193.579402][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 193.579440][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 193.579476][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 193.579528][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 193.653031][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.653068][ T188] usb 4-1: Product: syz [ 193.653101][ T188] usb 4-1: Manufacturer: syz [ 193.653134][ T188] usb 4-1: SerialNumber: syz [ 193.665792][ T188] usb 4-1: config 0 descriptor?? [ 194.487504][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.488081][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.513769][ T4247] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.534560][ T188] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 194.534599][ T188] input input7: Device does not respond to id packet P [ 194.537228][ T188] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 194.537271][ T188] input input7: Device does not respond to id packet B [ 194.539806][ T188] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 194.539896][ T188] input input7: Device does not respond to id packet N [ 194.593390][ T188] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 194.646649][ T7831] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 194.663148][ T7831] syzkaller0: entered promiscuous mode [ 194.663163][ T7831] syzkaller0: entered allmulticast mode [ 194.758172][ T188] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 194.760440][ T188] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 194.761119][ T188] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 194.768655][ T188] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 194.800516][ T188] usb 4-1: USB disconnect, device number 11 [ 194.907999][ T30] audit: type=1400 audit(1791997647.813:631): avc: denied { write } for pid=7832 comm="syz.2.609" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 195.111328][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.146172][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.407946][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.790766][ T1008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.325616][ T7866] FAULT_INJECTION: forcing a failure. [ 196.325616][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 196.325647][ T7866] CPU: 1 UID: 0 PID: 7866 Comm: syz.2.617 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.325674][ T7866] Tainted: [L]=SOFTLOCKUP [ 196.325680][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 196.325692][ T7866] Call Trace: [ 196.325707][ T7866] [ 196.325717][ T7866] dump_stack_lvl+0x100/0x190 [ 196.325754][ T7866] should_fail_ex.cold+0x5/0xa [ 196.325784][ T7866] ? __pfx_kyber_init_hctx+0x10/0x10 [ 196.325814][ T7866] should_failslab+0xc2/0x120 [ 196.325843][ T7866] __kmalloc_cache_node_noprof+0x94/0x720 [ 196.325873][ T7866] ? kyber_init_hctx+0x82/0xab0 [ 196.325907][ T7866] ? __pfx_kyber_init_hctx+0x10/0x10 [ 196.325934][ T7866] kyber_init_hctx+0x82/0xab0 [ 196.325968][ T7866] ? __pfx_kyber_init_hctx+0x10/0x10 [ 196.325994][ T7866] blk_mq_init_sched+0x39e/0x6c0 [ 196.326027][ T7866] elevator_switch+0x1e3/0x7e0 [ 196.326053][ T7866] elevator_change+0x352/0x530 [ 196.326081][ T7866] elv_iosched_store+0x3be/0x460 [ 196.326107][ T7866] ? __pfx_elv_iosched_store+0x10/0x10 [ 196.326141][ T7866] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 196.326168][ T7866] ? __pfx_elv_iosched_store+0x10/0x10 [ 196.326193][ T7866] queue_attr_store+0x25f/0x2f0 [ 196.326213][ T7866] ? __pfx_queue_attr_store+0x10/0x10 [ 196.326232][ T7866] ? __lock_acquire+0x5c0/0x1f40 [ 196.326264][ T7866] ? lock_acquire+0x1d1/0x380 [ 196.326283][ T7866] ? sysfs_file_kobj+0x21/0x290 [ 196.326309][ T7866] ? find_held_lock+0x2b/0x80 [ 196.326337][ T7866] ? sysfs_file_kobj+0xe4/0x290 [ 196.326362][ T7866] ? sysfs_file_kobj+0xe4/0x290 [ 196.326394][ T7866] ? __pfx_queue_attr_store+0x10/0x10 [ 196.326415][ T7866] sysfs_kf_write+0xf2/0x150 [ 196.326443][ T7866] kernfs_fop_write_iter+0x3e0/0x5f0 [ 196.326469][ T7866] ? __pfx_sysfs_kf_write+0x10/0x10 [ 196.326498][ T7866] vfs_write+0x6af/0x1050 [ 196.326524][ T7866] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 196.326551][ T7866] ? __pfx_vfs_write+0x10/0x10 [ 196.326572][ T7866] ? find_held_lock+0x2b/0x80 [ 196.326620][ T7866] ksys_write+0x12a/0x250 [ 196.326644][ T7866] ? __pfx_ksys_write+0x10/0x10 [ 196.326675][ T7866] do_syscall_64+0x123/0x790 [ 196.326712][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.326733][ T7866] RIP: 0033:0x7f310f79e2d9 [ 196.326751][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.326772][ T7866] RSP: 002b:00007f31105c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.326793][ T7866] RAX: ffffffffffffffda RBX: 00007f310fa25fa0 RCX: 00007f310f79e2d9 [ 196.326807][ T7866] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000005 [ 196.326819][ T7866] RBP: 00007f310f835888 R08: 0000000000000000 R09: 0000000000000000 [ 196.326830][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.326842][ T7866] R13: 00007f310fa26038 R14: 00007f310fa25fa0 R15: 00007ffe0977d188 [ 196.326867][ T7866] [ 196.347002][ C1] net_ratelimit: 32 callbacks suppressed [ 196.394664][ T7866] elv: switch to "kyber" failed, falling back to "none" [ 196.899742][ T30] audit: type=1400 audit(1791997649.803:632): avc: denied { write } for pid=7876 comm="syz.2.620" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 196.930939][ T30] audit: type=1400 audit(1791997649.833:633): avc: denied { open } for pid=7876 comm="syz.2.620" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 196.934516][ T7879] random: crng reseeded on system resumption [ 197.199318][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 197.843347][ T7885] netlink: 76 bytes leftover after parsing attributes in process `syz.1.623'. [ 198.348969][ T30] audit: type=1400 audit(1791997651.253:634): avc: denied { getopt } for pid=7901 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.955616][ T30] audit: type=1400 audit(1791997651.863:635): avc: denied { write } for pid=7914 comm="syz.4.633" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.008168][ T5804] usb 5-1: Failed to load image "edgeport/boot.fw" err -110 [ 199.035389][ T5804] usb 5-1: EPiC device converter now attached to ttyUSB0 [ 199.046548][ T7920] loop7: detected capacity change from 0 to 7 [ 199.073516][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.165962][ T5804] usb 5-1: USB disconnect, device number 4 [ 199.167371][ T30] audit: type=1400 audit(1791997652.063:636): avc: denied { read } for pid=7918 comm="syz.3.634" name="sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 199.253243][ T5804] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 199.253986][ T5804] io_edgeport 5-1:160.168: device disconnected [ 199.527952][ T7920] Dev loop7: unable to read RDB block 7 [ 199.527988][ T7920] loop7: unable to read partition table [ 199.528125][ T7920] loop7: partition table beyond EOD, truncated [ 199.531209][ T7920] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 199.652178][ T4234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.750277][ T30] audit: type=1400 audit(1791997652.653:637): avc: denied { firmware_load } for pid=7907 comm="syz.1.630" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 199.815573][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.815644][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.815705][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.815745][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.815836][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.815928][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.815969][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.816001][ T4979] ldm_validate_partition_table(): Disk read failed. [ 199.816040][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.816098][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.816138][ T4979] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.818882][ T4979] Dev loop7: unable to read RDB block 0 [ 199.818982][ T4979] loop7: unable to read partition table [ 199.819347][ T4979] loop7: partition table beyond EOD, [ 199.819371][ T4979] truncated [ 199.996885][ T7924] syz.1.630 (7924) used greatest stack depth: 18224 bytes left [ 200.225535][ T30] audit: type=1400 audit(1791997653.133:638): avc: denied { setopt } for pid=7925 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.348139][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 201.782576][ C1] net_ratelimit: 83 callbacks suppressed [ 201.903735][ T1118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 201.980660][ T51] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 202.039316][ T7940] netlink: 64 bytes leftover after parsing attributes in process `syz.0.638'. [ 202.261613][ T7939] ve: renamed from veth0_vlan (while UP) [ 202.424056][ T30] audit: type=1400 audit(1791997655.333:639): avc: denied { mounton } for pid=7946 comm="syz.3.642" path="/file0" dev="autofs" ino=21904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 205.009451][ T4308] Bluetooth: (null): Invalid header checksum [ 205.024832][ T4308] Bluetooth: (null): Invalid header checksum [ 205.102102][ T4308] Bluetooth: (null): Invalid header checksum [ 205.215677][ T4247] Bluetooth: (null): Invalid header checksum [ 205.343575][ T4308] Bluetooth: (null): Invalid header checksum [ 205.383421][ T1008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.450008][ T4247] Bluetooth: (null): Invalid header checksum [ 205.557877][ T4308] Bluetooth: (null): Invalid header checksum [ 205.679189][ T4234] Bluetooth: (null): Invalid header checksum [ 206.246297][ T7991] syzkaller0: entered promiscuous mode [ 206.246330][ T7991] syzkaller0: entered allmulticast mode [ 206.463226][ T30] audit: type=1400 audit(1791997659.373:640): avc: denied { read } for pid=7995 comm="syz.1.657" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 206.464482][ T30] audit: type=1400 audit(1791997659.373:641): avc: denied { open } for pid=7995 comm="syz.1.657" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 206.504671][ T30] audit: type=1400 audit(1791997659.413:642): avc: denied { ioctl } for pid=7995 comm="syz.1.657" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 206.982602][ C1] net_ratelimit: 35 callbacks suppressed [ 207.815114][ T4308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.852442][ T5804] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 207.928232][ T5612] libceph: connect (1)[c::]:6789 error -101 [ 207.930282][ T5612] libceph: mon0 (1)[c::]:6789 connect error [ 207.964197][ T5612] libceph: connect (1)[c::]:6789 error -101 [ 207.964402][ T5612] libceph: mon0 (1)[c::]:6789 connect error [ 208.003238][ T5804] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 208.004343][ T5804] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.004369][ T5804] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 208.004393][ T5804] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.004418][ T5804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.004464][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.007986][ T5804] usb 3-1: config 0 descriptor?? [ 208.012579][ T7998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.112648][ T8009] ceph: No mds server is up or the cluster is laggy [ 208.223925][ T5612] libceph: connect (1)[c::]:6789 error -101 [ 208.224131][ T5612] libceph: mon0 (1)[c::]:6789 connect error [ 209.225784][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.369935][ T8022] syzkaller0: entered promiscuous mode [ 209.369971][ T8022] syzkaller0: entered allmulticast mode [ 209.502315][ T8024] syzkaller0: entered promiscuous mode [ 209.511593][ T8024] syzkaller0: entered allmulticast mode [ 209.860387][ T5804] usbhid 3-1:0.0: can't add hid device: -71 [ 209.860519][ T5804] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 209.962926][ T5804] usb 3-1: USB disconnect, device number 12 [ 211.016030][ T8044] tipc: Started in network mode [ 211.016048][ T8044] tipc: Node identity ac1414aa, cluster identity 4711 [ 211.022076][ T8044] tipc: Enabled bearer , priority 10 [ 211.108201][ T8044] tipc: Enabling of bearer rejected, failed to enable media [ 211.526160][ T4234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.022553][ C1] net_ratelimit: 70 callbacks suppressed [ 212.653344][ T5715] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.805732][ T5715] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 212.807028][ T5715] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.807053][ T5715] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 212.807078][ T5715] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.807102][ T5715] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.807151][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.822206][ T188] tipc: Node number set to 2886997162 [ 212.837510][ T30] audit: type=1400 audit(1791997665.733:643): avc: denied { mount } for pid=8060 comm="syz.2.675" name="/" dev="ramfs" ino=21245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 212.920593][ T5715] usb 2-1: config 0 descriptor?? [ 212.933233][ T8073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.717992][ T4308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.826167][ T30] audit: type=1400 audit(1791997668.643:644): avc: denied { listen } for pid=8087 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.024041][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.033584][ T1439] net_ratelimit: 32 callbacks suppressed [ 217.040076][ T5715] usbhid 2-1:0.0: can't add hid device: -71 [ 217.040182][ T5715] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 217.089916][ T5715] usb 2-1: USB disconnect, device number 13 [ 217.194693][ T8096] syzkaller0: entered promiscuous mode [ 217.194708][ T8096] syzkaller0: entered allmulticast mode [ 217.683371][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 217.956824][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 219.123252][ T30] audit: type=1800 audit(1791997672.033:645): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.694" name="nullb0" dev="tmpfs" ino=780 res=0 errno=0 [ 219.467183][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.539599][ T30] audit: type=1400 audit(1791997672.443:646): avc: denied { mount } for pid=8138 comm="syz.4.684" name="/" dev="rpc_pipefs" ino=23077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 220.620522][ T30] audit: type=1400 audit(1791997673.523:647): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 220.936958][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.936977][ T8159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.939264][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.939280][ T8159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.112902][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.132499][ T30] audit: type=1400 audit(1791997674.033:648): avc: denied { map } for pid=8166 comm="syz.2.702" path="/138/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 221.134511][ T30] audit: type=1400 audit(1791997674.043:649): avc: denied { ioctl } for pid=8166 comm="syz.2.702" path="/138/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=598 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 221.562656][ T30] audit: type=1400 audit(1791997674.473:650): avc: denied { ioctl } for pid=8172 comm="syz.2.703" path="socket:[21434]" dev="sockfs" ino=21434 ioctlcmd=0x7a8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.872614][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 222.058444][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.066040][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.066075][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 222.066107][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.066203][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 222.066241][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 222.075019][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.075052][ T9] usb 2-1: Product: syz [ 222.075064][ T9] usb 2-1: Manufacturer: syz [ 222.111786][ C1] net_ratelimit: 28 callbacks suppressed [ 222.122662][ T4359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.135486][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 222.135516][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 222.183946][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 222.183985][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 222.527132][ T30] audit: type=1400 audit(1791997675.323:651): avc: denied { read write } for pid=8175 comm="syz.1.704" name="cdc-wdm0" dev="devtmpfs" ino=2923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 222.527178][ T30] audit: type=1400 audit(1791997675.323:652): avc: denied { open } for pid=8175 comm="syz.1.704" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 222.809076][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 222.811033][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.811171][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.811783][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.811801][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.812040][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.812056][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.812309][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.812322][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.812683][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.812696][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.813674][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.813689][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.814369][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.814385][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.816567][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.816584][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.816829][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.816846][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.817090][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 222.817107][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 222.832437][ T5612] usb 2-1: USB disconnect, device number 14 [ 222.835279][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 222.927784][ T8190] SET target dimension over the limit! [ 223.839546][ T8191] ptp ptp0: new virtual clock ptp1 [ 223.839564][ T8191] ptp ptp0: guarantee physical clock free running [ 223.841049][ T8191] ptp ptp0: delete virtual clock ptp1 [ 224.128776][ T8196] overlayfs: failed to clone upperpath [ 224.205741][ T8191] ptp ptp0: only physical clock in use now [ 224.367815][ T30] audit: type=1400 audit(1791997677.233:653): avc: denied { write } for pid=8193 comm="syz.2.710" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.370498][ T30] audit: type=1400 audit(1791997677.263:654): avc: denied { write } for pid=8193 comm="syz.2.710" name="nullb" dev="configfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.587655][ T4234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.254881][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.716'. [ 225.315772][ T8211] netlink: 148 bytes leftover after parsing attributes in process `syz.1.716'. [ 225.339609][ T8209] IPVS: set_ctl: invalid protocol: 25647 47.105.110.112:30068 [ 225.380431][ T30] audit: type=1400 audit(1791997678.283:655): avc: denied { getopt } for pid=8208 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 226.984474][ T8237] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 226.984575][ T8237] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 227.142632][ C1] net_ratelimit: 39 callbacks suppressed [ 227.225105][ T1118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.982498][ C1] net_ratelimit: 7 callbacks suppressed [ 332.862290][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 332.875226][ C1] rcu: (detected by 1, t=10502 jiffies, g=31045, q=418 ncpus=2) [ 332.882926][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294970444-4294959942), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 332.896272][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g31045 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 332.907277][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 332.917225][ C1] rcu: RCU grace-period kthread stack dump: [ 332.923095][ C1] task:rcu_preempt state:R running task stack:27400 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 332.936591][ C1] Call Trace: [ 332.939861][ C1] [ 332.942781][ C1] __schedule+0x1259/0x6920 [ 332.947282][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 332.952220][ C1] ? lock_acquire+0x1d1/0x380 [ 332.956887][ C1] ? __pfx___schedule+0x10/0x10 [ 332.961729][ C1] ? find_held_lock+0x2b/0x80 [ 332.966399][ C1] ? schedule+0x225/0x2c0 [ 332.970722][ C1] schedule+0xdd/0x2c0 [ 332.974782][ C1] schedule_timeout+0x127/0x280 [ 332.979622][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 332.984980][ C1] ? __pfx_process_timeout+0x10/0x10 [ 332.990258][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 332.996053][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 333.001503][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 333.006259][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 333.011536][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 333.016464][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 333.021657][ C1] ? rcu_is_watching+0x13/0xc0 [ 333.026413][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 333.032219][ C1] rcu_gp_kthread+0x17a/0x220 [ 333.036886][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 333.042070][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 333.047869][ C1] ? __kthread_parkme+0x18f/0x230 [ 333.052886][ C1] ? kthread+0x13a/0x450 [ 333.057120][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 333.062307][ C1] kthread+0x373/0x450 [ 333.066368][ C1] ? __pfx_kthread+0x10/0x10 [ 333.070954][ C1] ret_from_fork+0x730/0xd60 [ 333.075535][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 333.080635][ C1] ? __switch_to+0x800/0x10f0 [ 333.085307][ C1] ? __pfx_kthread+0x10/0x10 [ 333.089890][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.094659][ C1] [ 333.097664][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 333.103966][ C1] Sending NMI from CPU 1 to CPUs 0: [ 333.109157][ C0] NMI backtrace for cpu 0 [ 333.109175][ C0] CPU: 0 UID: 0 PID: 8249 Comm: syz.2.719 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.109197][ C0] Tainted: [L]=SOFTLOCKUP [ 333.109203][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.109211][ C0] RIP: 0010:check_preemption_disabled+0x8/0xe0 [ 333.109237][ C0] Code: b9 09 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 <65> 8b 15 69 16 b9 09 65 8b 2d 72 16 b9 09 85 d2 74 0f 48 83 c4 08 [ 333.109251][ C0] RSP: 0018:ffffc90000007b98 EFLAGS: 00000092 [ 333.109265][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000100 [ 333.109275][ C0] RDX: 0000000000000001 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 333.109285][ C0] RBP: ffff88802dcef2c0 R08: 0000000000020805 R09: 0000000000000bee [ 333.109295][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 333.109304][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 333.109313][ C0] FS: 00007f31105a56c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 333.109329][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.109339][ C0] CR2: 000000110c291743 CR3: 00000000460a1000 CR4: 00000000003526f0 [ 333.109349][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 333.109358][ C0] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 333.109368][ C0] Call Trace: [ 333.109374][ C0] [ 333.109379][ C0] ? advance_sched+0xe5/0xd20 [ 333.109398][ C0] lock_acquire+0x1e1/0x380 [ 333.109415][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 333.109436][ C0] ? __pfx_advance_sched+0x10/0x10 [ 333.109451][ C0] _raw_spin_lock+0x2e/0x40 [ 333.109467][ C0] ? advance_sched+0xe5/0xd20 [ 333.109482][ C0] advance_sched+0xe5/0xd20 [ 333.109497][ C0] ? find_held_lock+0x2b/0x80 [ 333.109518][ C0] ? __hrtimer_run_queues+0x37b/0x9c0 [ 333.109541][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 333.109560][ C0] ? __pfx_advance_sched+0x10/0x10 [ 333.109576][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 333.109601][ C0] hrtimer_interrupt+0x441/0xaa0 [ 333.109620][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 333.109640][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 333.109660][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.109677][ C0] RIP: 0010:handle_softirqs+0x1a9/0x9d0 [ 333.109694][ C0] Code: 89 6c 24 28 4c 89 7c 24 10 48 c7 c7 60 9d ed 8b e8 7c 37 0a 0a 31 d2 65 66 89 15 de 4c c3 13 e8 9d 5a 4a 00 fb bb ff ff ff ff <48> c7 c5 c0 a0 a0 8f 41 0f bc dc 83 c3 01 0f 85 9d 00 00 00 e9 b9 [ 333.109707][ C0] RSP: 0018:ffffc90000007f20 EFLAGS: 00000206 [ 333.109719][ C0] RAX: 0000000000001306 RBX: 00000000ffffffff RCX: 0000000000000008 [ 333.109729][ C0] RDX: 0000000000000101 RSI: ffffffff8e3e347e RDI: ffffffff8c625580 [ 333.109739][ C0] RBP: 1ffff92000000fec R08: 0000000000000001 R09: 0000000000000000 [ 333.109748][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000084 [ 333.109758][ C0] R13: 000000000000000a R14: 00000000ffffe37c R15: fffffbfff1f41e50 [ 333.109773][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 333.109790][ C0] ? trace_csd_function_exit+0x73/0x1f0 [ 333.109807][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 333.109824][ C0] __irq_exit_rcu+0x16a/0x210 [ 333.109839][ C0] irq_exit_rcu+0x9/0x30 [ 333.109853][ C0] sysvec_call_function_single+0xa3/0xc0 [ 333.109873][ C0] [ 333.109878][ C0] [ 333.109883][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 333.109899][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 333.109917][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 1a 10 f6 48 89 df e8 3e 71 10 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 54 ff f5 65 48 83 3d b4 33 b6 09 00 74 16 5b [ 333.109930][ C0] RSP: 0018:ffffc900073cfc90 EFLAGS: 00000246 [ 333.109941][ C0] RAX: 0000000000000002 RBX: ffff8880b8228500 RCX: 0000000000000080 [ 333.109950][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e347e RDI: ffffffff8c625580 [ 333.109960][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 333.109968][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 333.109982][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8880b8228500 [ 333.109997][ C0] clock_was_set+0x631/0x910 [ 333.110013][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 333.110027][ C0] ? rcu_is_watching+0x13/0xc0 [ 333.110048][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 333.110067][ C0] do_settimeofday64+0x330/0x4d0 [ 333.110085][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 333.110101][ C0] ? security_capable+0x80/0x260 [ 333.110118][ C0] ? sdio_bus_probe+0xa4/0x490 [ 333.110137][ C0] ? capable+0xd3/0xf0 [ 333.110153][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 333.110173][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 333.110189][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 333.110206][ C0] do_syscall_64+0x123/0x790 [ 333.110227][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.110241][ C0] RIP: 0033:0x7f310f79e2d9 [ 333.110255][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.110268][ C0] RSP: 002b:00007f31105a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 333.110281][ C0] RAX: ffffffffffffffda RBX: 00007f310fa26090 RCX: 00007f310f79e2d9 [ 333.110291][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 333.110300][ C0] RBP: 00007f310f835888 R08: 0000000000000000 R09: 0000000000000000 [ 333.110309][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.110318][ C0] R13: 00007f310fa26128 R14: 00007f310fa26090 R15: 00007ffe0977d188 [ 333.110332][ C0]