last executing test programs: 14.73672921s ago: executing program 1 (id=514): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x40, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 14.701305298s ago: executing program 3 (id=515): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x1c, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000200)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r3, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000197c0)=0x7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)={&(0x7f0000019900)={0x30, 0x0, 0x400, 0x70bd26, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x4}}}}, 0xfffffffffffffdcf}}, 0x20000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000019940)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000199c0)={0x6, 0xd, &(0x7f0000019a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000019b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 12.869467558s ago: executing program 2 (id=516): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x2b, 0x1, 0x70bd28, 0x25dfdbfd, "", [@typed={0x4, 0xf}]}, 0x14}], 0x1}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1a, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) 12.327193602s ago: executing program 3 (id=517): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000400)=[@nested_load_syzos={0x136, 0x11c, {0x1, 0xb5, [@cpuid={0x64, 0x18, {0x3978, 0x1000}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x8a, 0x4, 0xfffffffffffffff9, 0x1}}, @code={0xa, 0x74, {"48b8a0000000000000000f23d80f21f835000000900f23f8c401fa2c84a57c0000000f23c6c481c5da21366766470f388015faff000048b863240000000000000f23d80f21f835400000d00f23f80f098f8a7810d0003800006465f242dc3b460f21c6"}}, @uexit={0x0, 0x18, 0xd3}, @in_dx={0x69, 0x20, {0x6d97, 0x2}}]}}, @set_irq_handler={0xc8, 0x20, {0x1e, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xa7, 0x3, 0x1, 0x2}}, @nested_create_vm={0x12d, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0xfff}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x5, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x3, 0xffff}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7, 0x7, 0x1}}, @wrmsr={0x65, 0x20, {0x96e, 0x3}}], 0x294}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000380)='fd', 0x0, r4) write$tun(r4, &(0x7f0000000a80)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) lstat(&(0x7f0000000ac0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000b00)='./file0/../file0\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r8, &(0x7f0000000100)="257f61ceeb5d130d3509ed32f1b0d4e5e1fd1f96dd006e646220c1149bbfe04df93f2f3339f9b69854cbbf311a020441e1b4e2dd7f918459a85a8df6cb35505144e0f7dce1fb46", 0x47) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r8, 0x84, 0x85, &(0x7f0000000200)={r9, @in6={{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x400}, &(0x7f00000002c0)=0x90) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000b40)={"427a9d99", 0x3, 0x6, 0x0, 0xbf7, 0xffff, "fdb12b1e46e358c729473030a336c1", "a9f627f8", '\x00', "d7cd3aba", ["154ee1174df4ba7d2f1ddd20", "962764c101d960ff9d50b0f1", "61a56e6c46f53ba0f616dd84", "698bd00aaefec61d30fc83dd"]}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 11.506058614s ago: executing program 1 (id=518): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x40, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r5, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 11.50119146s ago: executing program 4 (id=519): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0xd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101200, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000600)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x14}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000900)={'\x00', 0x23f5, 0xdd33, 0x1, 0xffffffffffffffff, 0x6}) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) getsockname$packet(r2, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40804}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$inet(r5, 0x0, 0x4040801) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 11.279685404s ago: executing program 2 (id=520): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r3, 0x5fa2e000) keyctl$negate(0xd, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000880)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75f7bff80673e47054118c2cd8213aa7e45ec2b21f64d916e4c99cc78d1a68723c3724ad2614bdfd786ed13da0a086608e207ccafa3a857c1007", 0xc2, r2) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r5 = add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f00000000c0)="eaa8729b31b3a8d180baeab8cae38bfbf8fcd9a8685a9593ffff", 0x1a, 0xfffffffffffffffd) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x0, 0x0, 0xc, 0x0, "abeff095be8d702752b7eeb429acf4d12038dbc9fbf8ecdfb46c4bd79dd4f776884ea8adbad407e16d7a167ec729b00bb2274c178267fa6f102b51601095b89ef66452e2715f179d18caa64f260187e4"}, 0xd8) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r4, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha3-256\x00'}}) 9.436620853s ago: executing program 3 (id=521): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r3, 0x5fa2e000) keyctl$negate(0xd, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000880)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75f7bff80673e47054118c2cd8213aa7e45ec2b21f64d916e4c99cc78d1a68723c3724ad2614bdfd786ed13da0a086608e207ccafa3a857c1007", 0xc2, r2) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r5 = add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f00000000c0)="eaa8729b31b3a8d180baeab8cae38bfbf8fcd9a8685a9593ffff", 0x1a, 0xfffffffffffffffd) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x0, 0x0, 0xc, 0x0, "abeff095be8d702752b7eeb429acf4d12038dbc9fbf8ecdfb46c4bd79dd4f776884ea8adbad407e16d7a167ec729b00bb2274c178267fa6f102b51601095b89ef66452e2715f179d18caa64f260187e4"}, 0xd8) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r4, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha3-256\x00'}}) 8.919672404s ago: executing program 4 (id=523): listen(0xffffffffffffffff, 0xffe) close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000400)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) setrlimit(0xf, &(0x7f0000000380)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup(r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9, 0x9, 0xf, 0x4, 0x3, 0xffffffffffffffff}) write(r0, &(0x7f0000000580)="464d85", 0x3) 8.323548956s ago: executing program 1 (id=524): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x104, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@mcast1}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff7321", @nested={0xc, 0xa4, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @uid}]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 8.092278344s ago: executing program 1 (id=525): r0 = syz_open_dev$dri(&(0x7f0000000800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000840)={0x0, 0x0, 0x1, 0x6, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000600)={0x0, 0x0, 0x100}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)={0x18, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x1d, 0x0, 0x0, @binary="1be5605e"}]}, 0x18}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000640101"], 0xfc}}, 0x0) connect$inet6(r6, &(0x7f0000000a80)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000740)={0x2e, 0x0, 0x0, r1, 0xc0207512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a6) r9 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc2c45512, 0x0) r10 = open$dir(&(0x7f00000001c0)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0xc080661a, &(0x7f0000000200)={@desc={0x1, 0x0, @auto="949147fc2048ae40"}}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f000000ab00)={0x0, 0x121c000, 0x1000, 0xbb}, 0x1c) 7.811496891s ago: executing program 4 (id=526): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x40, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 7.706393908s ago: executing program 1 (id=527): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40400d4) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r3, 0x801, 0xfffffffc, 0x1, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x1}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40400c5}, 0x8000) syz_usb_control_io(r0, 0x0, 0x0) 6.531365738s ago: executing program 2 (id=528): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x40, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 5.952522942s ago: executing program 4 (id=529): syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x8901) set_mempolicy(0x3, &(0x7f0000000080)=0x83e3, 0x1e37) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0x6576, 0x109}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000480)=0x1) write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0xf8}, @val={0x0, 0x0, 0x1, 0x400, 0x6, 0x4}, @eth={@local, @random="004d052caf78", @void, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x2c, 0x3, 0x0, 0x0, "6e471335f8477584606c862cb9dae3302c24785efecd39bc7c2f5117201c457644aa58b40ed6665feff07a7d30989189595216e709ec14e8f11599cdd3d18df6"}}}}}, 0x64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80d4) openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/md0\x00', 0x0, 0x70) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r4 = fsopen(&(0x7f00000007c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) 5.193278001s ago: executing program 0 (id=530): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x6, 0x9, 0x5}, {0x7f, 0x1, 0x9, 0x2}, {0x6, 0x4, 0x7, 0x5}, {0x81, 0x1, 0xf4, 0x1e1}, {0x6, 0x9, 0xe, 0x67}, {0x7, 0x4, 0x8, 0x5}, {0xf001, 0x9, 0x9, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x85d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x8}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={r1, 0x1, r3, 0xffffffff}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', r4, 0x40, 0x8, 0x101, 0x5, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty, @private=0xa010101, {[@noop, @noop, @end, @rr={0x7, 0x2b, 0xdb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @remote, @local, @empty, @private=0xa010101, @private=0xa010101, @empty]}, @timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x7, [{@multicast1, 0x7}]}, @timestamp={0x44, 0x18, 0xa5, 0x0, 0x4, [0x5, 0x5, 0x9, 0x1000, 0x7ff]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) (async) r5 = fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fstat(r3, &(0x7f0000000380)) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x0, &(0x7f0000000400)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0x2}}, './file1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', r7, 0x29, 0x7, 0x5, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @private1, 0x8000, 0x7, 0xcaa, 0x2}}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r6) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x4004) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000700)='\xff\xff', &(0x7f0000000740)) (async) r10 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r10, &(0x7f0000000780)={0x2, 0x4e20, @private=0xa010102}, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r11, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) setns(r0, 0x4000000) (async) r12 = request_key(&(0x7f0000000900)='logon\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)='mptcp_pm\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r12, 0x0, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f00000011c0)={{r6, &(0x7f0000000a40)='\x00', 0x501000, &(0x7f0000000a80)={@_ha_fsid={[0xb3b5, 0x4]}, {0x0, 0x4, 0x7c}}, 0x3ff, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0x2}, 0x5, &(0x7f0000001100)=[{0x2, 0x8e, &(0x7f0000000b40)='\xff\xff', &(0x7f0000000b80)="e55f08b2ffd18d0a72b987e7719566ae7f4e06c2c472e74950b50fec35a77cd520e7927c255ea158bf75854b22e0533b9ded1084071c40a5bda3a85284e4af2372da1b43440ef70f5ce2353cc09c92bbcde37d4afb2451187a3b18c62ee67180d8be74f450d8397a20df599eef1aab00421f63e3a0c68fe9512ecc3f3dfca1ac7d1285", 0x83, 0x22}, {0x1, 0x9, &(0x7f0000000c40)='erspan0\x00', &(0x7f0000000c80)="b54a3b9bdc51db0a51a2099b6688bd46820eb3f5bbb74af18f78c1b2432c21ca527d248d568903a194f9ce8604175f351fe4ff87da53d4639079cccfdf2296bae2d9a4340c222f5cab0a1ae66f033d640c0ab84ce21452bc3e6c9b1bc32fb59391ff82cdddb2f1ea6e6d9cca235886c26f018bc2838a187bcee5af38ee836ba5d8570f1317039be887369a785eff3e63bf8dd545ef9aa5ef8860c2693fd797cfa5ad2227c201734bbd9661ccaef86a031b58220e5271a0433a8db66d8addda74654d8b2b03529f247ad0ba8911e61b7041496178346db976074f4eb4b3fc2a7a308bee0ccbc2fa", 0xe7, 0x2}, {0x1, 0x2, &(0x7f0000000d80)='./)*^\x00', &(0x7f0000000dc0)="07a3095186feab27e88ab24df2f866370ad9ea66aed454d80ede9eb40ef12b6e0e2c4846e9909a0deeea2024c37e548003bb4aaf36927c40dcda83e98aa4c9fe02778bfbca480223f29dfa9c141b90b4b8eb191b725c86ce1996f1fc35b7bd84d81afef2328005b9fe67ce210baed794f6aad5a02fa0b09b24f4fa9311d07e4a04e16fed8d15a3a2f7473ff7cb0cf69f365afcad923d7530722ee668bdbc5f3245b521f10a528a0d2adac1d300562f4fe9b41f8dd1b29aa729d017e4888c8a43c55ac085574a86341ea828b1407c3a463fd534c76eacdf37", 0xd8, 0x10}, {0x3, 0x5, &(0x7f0000000ec0)='*\x00', &(0x7f0000000f00)="b9e11d9c18b9ef6ea7f95382c6b51fcb6a8a58d647c9e86132a59323fc8640cb8bcc2b78dcdc4994034a17e6085a51675ed3785809df92e7e7f19972376d9469c8313394ba6a2aedb41a05bd99a9fde252b575dfda86cdb48e728573b015849eff437905edb7242c1a40a95f9d80107b89d1e0e38cad786fc7053bc945afa49210886b70", 0x84, 0x2a}, {0x2, 0x800, &(0x7f0000000fc0)='syztnl2\x00', &(0x7f0000001000)="0e399861b99cf5c1138780a3a729577bf5746ab4830ad558ebdcccac426df2f973413ae1fdd33e5c2bb3e992b36d3cc33149c5655dae5a9a4c214410387617b3a43e139786fc8125270ca22a135ade2e32cd9d078587c0cb280bc35b8d88a88192395bcdfd070143d62b8261d7a66f5df985d4c7e813404bcebc297d511883727318c1046446e8b8fff885a1802c2afd480074911793495d3220ceaeb00beb46ef2c0ebcdad9a92c8b40f9d40aedf95d1250703a04a59f92ea50c3c4a75c5ed55897c30c725c3d6d29b2906cfd54ef2f0504a75733f2591f592886efd4", 0xdd, 0x2}]}) recvmmsg$unix(r13, &(0x7f0000005cc0)=[{{&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f00000012c0)=""/249, 0xf9}, {&(0x7f00000013c0)=""/2, 0x2}, {&(0x7f0000001400)=""/159, 0x9f}, {&(0x7f00000014c0)=""/34, 0x22}, {&(0x7f0000001500)=""/210, 0xd2}, {&(0x7f0000001600)=""/116, 0x74}, {&(0x7f0000001680)=""/139, 0x8b}, {&(0x7f0000001740)=""/137, 0x89}], 0x8, &(0x7f0000001880)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/181, 0xb5}], 0x1}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001a80)=""/52, 0x34}, {&(0x7f0000001ac0)=""/212, 0xd4}, {&(0x7f0000001bc0)=""/254, 0xfe}, {&(0x7f0000001cc0)=""/26, 0x1a}, {&(0x7f0000001d00)=""/164, 0xa4}, {&(0x7f0000001dc0)=""/105, 0x69}], 0x6, &(0x7f0000001ec0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001f40), 0x6e, &(0x7f00000024c0)=[{&(0x7f0000001fc0)=""/83, 0x53}, {&(0x7f0000002040)=""/81, 0x51}, {&(0x7f00000020c0)=""/140, 0x8c}, {&(0x7f0000002180)=""/29, 0x1d}, {&(0x7f00000021c0)=""/78, 0x4e}, {&(0x7f0000002240)=""/236, 0xec}, {&(0x7f0000002340)=""/251, 0xfb}, {&(0x7f0000002440)=""/83, 0x53}], 0x8}}, {{&(0x7f0000002540), 0x6e, &(0x7f00000026c0)=[{&(0x7f00000025c0)=""/83, 0x53}, {&(0x7f0000002640)=""/90, 0x5a}], 0x2, &(0x7f0000002700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/238, 0xee}, {&(0x7f0000004940)=""/53, 0x35}, {&(0x7f0000004980)=""/10, 0xa}, {&(0x7f00000049c0)=""/111, 0x6f}, {&(0x7f0000004a40)=""/243, 0xf3}, {&(0x7f0000004b40)=""/106, 0x6a}, {&(0x7f0000004bc0)=""/4096, 0x1000}], 0x9, &(0x7f0000005c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x6, 0x2000, &(0x7f0000005e40)) syz_clone(0xc0800000, &(0x7f0000005e80)="9b0f5e620da9dd128df95ca05665d236ef23700a1c43260b8e90bd907aebbbc093b227c839542a6d4846e9f3791cebafb18559b7f3d1808fcf669f027835838392ee4986c5b0c5679919f8399a1ea157e99a1ea63189d83bd9cfa218114b29d257f6708af0eeafa343dc5fa4207187f28acfbbf4e138e81063d3d37636d1bdac4cd91bd45c2b2ab4dcd6779bf8ad53a37d23e7e4da1a826a86ff7fe1671dcb06ba34d8006a5828bbe5440c2488a502a542cbbd407bd4b11d893eee8298", 0xbd, &(0x7f0000005f40), &(0x7f0000005f80), &(0x7f0000005fc0)="6880c772962231a4b74ad37093c5ffbef4dadefd80c3782a251b7e7d1f67da6c0994813808a6e0113e03025a3f662c") (async) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000006000)=0x0) syz_open_procfs(r16, &(0x7f0000006040)='net/icmp6\x00') (async) mkdirat(r14, &(0x7f0000006080)='./file0\x00', 0x10) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006180)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200080d8}, 0x40810) 4.921085606s ago: executing program 2 (id=531): r0 = syz_open_dev$dri(&(0x7f0000000800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000840)={0x0, 0x0, 0x1, 0x6, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000600)={0x0, 0x0, 0x100}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)={0x18, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x1d, 0x0, 0x0, @binary="1be5605e"}]}, 0x18}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000640101"], 0xfc}}, 0x0) connect$inet6(r6, &(0x7f0000000a80)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000740)={0x2e, 0x0, 0x0, r1, 0xc0207512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a6) r10 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc2c45512, 0x0) open$dir(&(0x7f00000001c0)='./mnt\x00', 0x0, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)={0x4000, 0xaa, 0x14}, 0x18) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000140)=0xe) ioctl$TCFLSH(r11, 0x80047456, 0x7fffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000200)={@desc={0x1, 0x0, @auto="949147fc2048ae40"}}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f000000ab00)={0x0, 0x121c000, 0x1000, 0xbb}, 0x1c) 4.395490317s ago: executing program 3 (id=532): syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) unshare(0x22020400) r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x3, 0x822b01) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000001300)=""/4096) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') read$dsp(r1, &(0x7f0000002300)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.248550481s ago: executing program 1 (id=533): syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)=0x91b) unshare(0x22020400) r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x3, 0x822b01) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000001300)=""/4096) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') read$dsp(r1, &(0x7f0000002300)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.183537461s ago: executing program 2 (id=534): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x40, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r5, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3.796937927s ago: executing program 4 (id=535): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@flushsa={0x104, 0x1c, 0x120, 0x70bd25, 0x25dfdbfb, {0x2b}, [@iptfs_max_qsize={0x8, 0x28, 0x4}, @iptfs_pkt_size={0x8, 0x29, 0x1}, @extra_flags={0x8, 0x18, 0x4}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2c, 0x7}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x6, 0x7}}, @tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0xff}, 0x2, @in=@local, 0x7, 0x4, 0x0, 0xfd, 0xd, 0x101, 0x9}, {{@in=@loopback, 0x4d4, 0xff}, 0xa, @in6=@empty, 0x3502, 0x3, 0x2, 0x9, 0x101, 0x4, 0x6}]}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e20, @in6=@local}}]}, 0x104}, 0x1, 0x0, 0x0, 0x11}, 0x95f70fcd2d360dc6) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x30, &(0x7f0000000780)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1}}}}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000002}, @flat=@handle={0x73682a85, 0x100a, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=""/1}) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6000000, 0x204031, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f00000003c0)) r6 = gettid() r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0x5, &(0x7f0000000580)={0x16}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x840) 3.54193312s ago: executing program 0 (id=536): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100ec001aff070003"], 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000090) (fail_nth: 2) 3.117533686s ago: executing program 0 (id=537): listen(0xffffffffffffffff, 0xffe) close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000400)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) setrlimit(0xf, &(0x7f0000000380)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup(r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9, 0x9, 0xf, 0x4, 0x3, 0xffffffffffffffff}) write(r0, &(0x7f0000000580)="464d85", 0x3) 2.059798087s ago: executing program 0 (id=538): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r1, 0x5fa2e000) keyctl$negate(0xd, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000880)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75f7bff80673e47054118c2cd8213aa7e45ec2b21f64d916e4c99cc78d1a68723c3724ad2614bdfd786ed13da0a086608e207ccafa3a857c1007", 0xc2, r0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r3 = add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f00000000c0)="eaa8729b31b3a8d180baeab8cae38bfbf8fcd9a8685a9593ffff", 0x1a, 0xfffffffffffffffd) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x0, 0x0, 0xc, 0x0, "abeff095be8d702752b7eeb429acf4d12038dbc9fbf8ecdfb46c4bd79dd4f776884ea8adbad407e16d7a167ec729b00bb2274c178267fa6f102b51601095b89ef66452e2715f179d18caa64f260187e4"}, 0xd8) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r2, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha3-256\x00'}}) 1.908088583s ago: executing program 3 (id=539): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x40, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.788686939s ago: executing program 0 (id=540): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f00000003c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/clk/clk_dump\x00', 0x101100, 0x0) r7 = dup(r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x5e, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6181, 0x400, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4919, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0xffffffff, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x28c032, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000022c0)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x20c5, {0xee9b, 0xffff9577, 0x0, {0x5, 0x7, 0x4, 0xd0d, 0x6, 0x70000000000, 0x6, 0x1, 0xe, 0x2000, 0xffff, 0x0, 0x0, 0x6, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() socket$igmp(0x2, 0x3, 0x2) openat$dlm_plock(0xffffff9c, &(0x7f0000000940), 0x2080, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r9, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 482.430559ms ago: executing program 4 (id=541): mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000073119c0000000000851000000200000085000000c400000095000000000000009500ff0500000000"], &(0x7f0000000400)='GPL\x00', 0x5, 0x29e, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_flash={0x33, 0xea5, './cgroup/../file0\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/mtrr\x00', 0x2, 0x82) ioctl(r2, 0x40104d05, &(0x7f0000000680)) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='tps6598x 0x20\n', 0xe) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000780)={0x3000}) syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000007c0)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff00090501"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071188500000000001d300500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x8, 0x10, &(0x7f00000013c0), 0x10, 0x0, r0}, 0x94) mount(0x0, &(0x7f00000016c0)='./sec/tomoyo/domain_policy\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)="3c6b65726e656c3e202f6e65775f216f6d61696e0a3c696c652072656164202f6574632f706173737764207461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696ed83d3c6b65726e656c3e202f6e65775f646f6d61696e414692702690280897e49ef631aa76d28d9c56f443c1172de40fcc2ad303016b4dd7f492809671208be145378e33f4c469d8a2c8e20180f36d0a", 0x9f) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) ioctl$USBDEVFS_RESET(r5, 0xc00c5512) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0xa4242, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001440)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000001480)=0x304008000) 383.521101ms ago: executing program 3 (id=542): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}}, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a0200090500010000000000", @ANYBLOB="8b75"], 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000100)={0x7, 0x9, 0x380000, 0x8, 0x5, 0xfffffffffffffff7, 0x1000000d, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x102, 0x4, 0x2, 0x5, 0x3, 0x3ff, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x3e}}}, 0xfff7, 0x7}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f0000000300)={r2, 0x1}, 0x8) 297.214127ms ago: executing program 2 (id=543): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3a0d4000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x200800, 0x0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x200800, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb85, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x2000159, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x20, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2102, 0x8, 0x6, 0x72}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x5c0, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb85, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x2000159, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x20, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2102, 0x8, 0x6, 0x72}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x5c0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 0 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)="dd18f57f5c79f84118504877", 0xc) connect$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efcf9e559 code=0x7ffc0000 [ 197.198159][ T6999] ceph: No mds server is up or the cluster is laggy [ 197.218895][ T943] libceph: connect (1)[c::]:6789 error -101 [ 197.219131][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 197.527343][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 197.529631][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 197.792299][ T6995] ip_tables: iptables: counters copy to user failed while replacing table [ 197.821063][ T6995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6995 comm=syz.1.268 [ 198.415456][ T7004] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 200.127830][ T5706] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 200.145751][ T943] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.342105][ T5706] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 200.359591][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 200.359632][ T5706] usb 1-1: Product: syz [ 200.359660][ T5706] usb 1-1: Manufacturer: syz [ 200.404024][ T943] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.404065][ T943] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 200.405218][ T943] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.405270][ T943] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.405350][ T943] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 200.405410][ T943] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 200.405502][ T943] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 200.405539][ T943] usb 4-1: config 1 interface 1 has no altsetting 0 [ 200.412676][ T943] usb 4-1: string descriptor 0 read error: -22 [ 200.412851][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.639617][ T943] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 200.807527][ T7018] fuse: Unknown parameter 'ÿ0xffffffffffffffff01777777777777777777777000000000000000000000000000000000000000300000000000000000000' [ 200.873853][ T943] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 200.873940][ T943] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 200.873973][ T943] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 201.330477][ T51] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 202.193608][ T943] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 202.242964][ T943] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 202.294584][ T943] usb 4-1: USB disconnect, device number 9 [ 202.366877][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 202.366897][ T31] audit: type=1400 audit(1792110064.829:466): avc: denied { write } for pid=7011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.669907][ T5706] usbhid 1-1:1.0: can't add hid device: -71 [ 202.670074][ T5706] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 202.713914][ T5706] usb 1-1: USB disconnect, device number 11 [ 202.726748][ T31] audit: type=1400 audit(1792110065.189:467): avc: denied { write } for pid=7041 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.860225][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 202.860398][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 202.993155][ T7043] ceph: No mds server is up or the cluster is laggy [ 203.778589][ T943] libceph: connect (1)[c::]:6789 error -101 [ 203.778872][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 203.810301][ T7059] ceph: No mds server is up or the cluster is laggy [ 203.931934][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.277'. [ 204.083419][ T31] audit: type=1400 audit(1792110066.549:468): avc: denied { write } for pid=7055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.453915][ T7078] jffs2: notice: (7078) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.495664][ T31] audit: type=1400 audit(1792110066.959:469): avc: denied { write } for pid=7079 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.738990][ T51] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 204.743115][ T31] audit: type=1400 audit(1792110067.209:470): avc: denied { write } for pid=7047 comm="syz.2.276" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.309079][ T51] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 206.467627][ T5809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 206.619427][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.619468][ T5809] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 206.620442][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.620461][ T5809] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.620496][ T5809] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 206.620525][ T5809] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 206.620555][ T5809] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 206.620577][ T5809] usb 3-1: config 1 interface 1 has no altsetting 0 [ 206.623334][ T5809] usb 3-1: string descriptor 0 read error: -22 [ 206.623428][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.830410][ T5809] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 207.062469][ T5809] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 207.062501][ T5809] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 207.062517][ T5809] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 207.146953][ T5809] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 207.185632][ T5809] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 207.208556][ T5809] usb 3-1: USB disconnect, device number 7 [ 207.587508][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.821014][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 207.823406][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 207.823433][ T30] usb 5-1: Product: syz [ 207.823451][ T30] usb 5-1: Manufacturer: syz [ 207.891842][ T943] libceph: connect (1)[c::]:6789 error -101 [ 207.892069][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 207.937909][ T7109] ceph: No mds server is up or the cluster is laggy [ 208.393128][ T7106] fuse: Unknown parameter 'ÿ0xffffffffffffffff01777777777777777777777000000000000000000000000000000000000000300000000000000000000' [ 208.700116][ T7120] ceph: No mds server is up or the cluster is laggy [ 209.143281][ T25] libceph: connect (1)[c::]:6789 error -101 [ 209.143442][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 209.308236][ T943] libceph: connect (1)[c::]:6789 error -101 [ 209.308414][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 209.341604][ T7126] ceph: No mds server is up or the cluster is laggy [ 209.783587][ T7134] ceph: No mds server is up or the cluster is laggy [ 209.825833][ T943] libceph: connect (1)[c::]:6789 error -101 [ 209.828233][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 209.984256][ T30] usbhid 5-1:1.0: can't add hid device: -71 [ 209.984330][ T30] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 210.011458][ T30] usb 5-1: USB disconnect, device number 8 [ 210.646297][ T30] libceph: connect (1)[c::]:6789 error -101 [ 210.646445][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 210.693141][ T7140] ceph: No mds server is up or the cluster is laggy [ 211.153677][ T51] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 211.788445][ T31] audit: type=1400 audit(1792110073.569:471): avc: denied { write } for pid=7144 comm="syz.1.296" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.788489][ T31] audit: type=1400 audit(1792110073.579:472): avc: denied { write } for pid=7144 comm="syz.1.296" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.715239][ T7163] jffs2: notice: (7163) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 215.138968][ T7167] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 215.308504][ T31] audit: type=1400 audit(1792110077.769:473): avc: denied { connect } for pid=7171 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.315572][ T31] audit: type=1400 audit(1792110077.769:474): avc: denied { write } for pid=7171 comm="syz.2.304" path="socket:[13249]" dev="sockfs" ino=13249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.516193][ T31] audit: type=1400 audit(1792110077.969:475): avc: denied { read } for pid=7171 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.778778][ T31] audit: type=1400 audit(1792110078.079:476): avc: denied { write } for pid=7161 comm="syz.0.300" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.779105][ T31] audit: type=1400 audit(1792110078.219:477): avc: denied { write } for pid=7161 comm="syz.0.300" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.939238][ T7176] jffs2: notice: (7176) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 215.984376][ T31] audit: type=1400 audit(1792110078.439:478): avc: denied { write } for pid=7171 comm="syz.2.304" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.986377][ T31] audit: type=1400 audit(1792110078.439:479): avc: denied { add_name } for pid=7171 comm="syz.2.304" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.992846][ T31] audit: type=1400 audit(1792110078.439:480): avc: denied { create } for pid=7171 comm="syz.2.304" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 216.114299][ T7183] jffs2: warning: (7183) jffs2_sum_write_data: Summary too big (12 data, -14 pad) in eraseblock at 0001d000 [ 218.829763][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 218.829795][ T31] audit: type=1400 audit(1792110081.290:483): avc: denied { append } for pid=7198 comm="syz.0.310" name="comedi2" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.717445][ T5707] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 219.757914][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 219.882927][ T5707] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.882998][ T5707] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 219.884068][ T5707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.884101][ T5707] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.884164][ T5707] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 219.884208][ T5707] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 219.884265][ T5707] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 219.884299][ T5707] usb 1-1: config 1 interface 1 has no altsetting 0 [ 219.916513][ T5707] usb 1-1: string descriptor 0 read error: -22 [ 219.916771][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.636772][ T51] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 220.637700][ T31] audit: type=1400 audit(1792110082.850:484): avc: denied { write } for pid=7216 comm="syz.2.315" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.637741][ T31] audit: type=1400 audit(1792110083.030:485): avc: denied { write } for pid=7216 comm="syz.2.315" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.664689][ T5707] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 221.008419][ T7222] ceph: No mds server is up or the cluster is laggy [ 221.232281][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 221.261184][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 221.778208][ T30] libceph: connect (1)[c::]:6789 error -101 [ 221.778412][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 222.277937][ T5707] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 222.277974][ T5707] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 222.278000][ T5707] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 222.595087][ T31] audit: type=1400 audit(1792110085.020:486): avc: denied { write } for pid=7228 comm="syz.4.312" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.595212][ T31] audit: type=1400 audit(1792110085.030:487): avc: denied { write } for pid=7228 comm="syz.4.312" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.611537][ T31] audit: type=1326 audit(1792110085.070:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.2.318" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 222.618051][ T31] audit: type=1326 audit(1792110085.070:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.2.318" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 222.657488][ T51] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 222.759125][ T31] audit: type=1326 audit(1792110085.080:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.2.318" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1a9315ed8e code=0x7ffc0000 [ 222.765559][ T31] audit: type=1326 audit(1792110085.220:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.2.318" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 222.824452][ T31] audit: type=1326 audit(1792110085.280:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.2.318" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 223.029459][ T5707] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 223.053447][ T7232] ip_tables: iptables: counters copy to user failed while replacing table [ 223.094853][ T5707] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 223.143193][ T5707] usb 1-1: USB disconnect, device number 12 [ 223.220985][ T7241] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00 [ 223.221042][ T7241] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 223.221075][ T7241] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 223.221174][ T7241] page_type: f8(unknown) [ 223.221207][ T7241] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 223.221241][ T7241] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 223.221274][ T7241] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 223.222919][ T7241] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 223.222944][ T7241] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 223.222964][ T7241] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 223.222971][ T7241] page dumped because: unmovable page [ 223.222977][ T7241] page_owner tracks the page as allocated [ 223.222981][ T7241] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5599, tgid 5599 (syz-executor), ts 63648140320 [ 223.223010][ T7241] post_alloc_hook+0xfd/0x120 [ 223.223034][ T7241] get_page_from_freelist+0x110d/0x35d0 [ 223.223047][ T7241] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 223.223068][ T7241] alloc_pages_mpol+0x201/0x550 [ 223.223084][ T7241] ___kmalloc_large_node+0xe8/0x130 [ 223.223110][ T7241] __kmalloc_large_node_noprof+0x1c/0x70 [ 223.223136][ T7241] __kmalloc_noprof+0x5a8/0x840 [ 223.223149][ T7241] ops_init+0x77/0x5f0 [ 223.223170][ T7241] setup_net+0x118/0x3a0 [ 223.223180][ T7241] copy_net_ns+0x345/0x7a0 [ 223.223201][ T7241] create_new_namespaces+0x3ea/0xac0 [ 223.223214][ T7241] unshare_nsproxy_namespaces+0xf2/0x220 [ 223.232421][ T7241] ksys_unshare+0x4a2/0xb30 [ 223.232469][ T7241] __x64_sys_unshare+0x31/0x40 [ 223.232488][ T7241] do_syscall_64+0x123/0x790 [ 223.232537][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.232554][ T7241] page last free pid 1 tgid 1 ts 17672066774 stack trace: [ 223.232581][ T7241] free_pages_prepare+0x586/0xe00 [ 223.232610][ T7241] __free_contig_range_common+0x14f/0x250 [ 223.232640][ T7241] destroy_args+0xa8/0x7a0 [ 223.232672][ T7241] debug_vm_pgtable+0x1d69/0x3490 [ 223.232704][ T7241] do_one_initcall+0x11c/0x6f0 [ 223.232734][ T7241] kernel_init_freeable+0x6ea/0x7b0 [ 223.232836][ T7241] kernel_init+0x21/0x1e0 [ 223.232865][ T7241] ret_from_fork+0x730/0xd60 [ 223.232897][ T7241] ret_from_fork_asm+0x1a/0x30 [ 223.577544][ T7246] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 223.769967][ T7240] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 223.836605][ T5706] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.984499][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 223.984941][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 223.986546][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 223.986696][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 224.025266][ T7251] ceph: No mds server is up or the cluster is laggy [ 224.247713][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 224.248198][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 224.743377][ T5706] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 224.893879][ T5706] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.893925][ T5706] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.893966][ T5706] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.899709][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.899744][ T5706] usb 1-1: Product: syz [ 224.899774][ T5706] usb 1-1: Manufacturer: syz [ 224.899800][ T5706] usb 1-1: SerialNumber: syz [ 225.441123][ T7257] ceph: No mds server is up or the cluster is laggy [ 225.479561][ T943] libceph: connect (1)[c::]:6789 error -101 [ 225.481396][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 225.565838][ T5706] usb 1-1: 0:2 : does not exist [ 226.899789][ T5706] usb 1-1: USB disconnect, device number 13 [ 226.981340][ T7265] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 227.201502][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 227.201521][ T31] audit: type=1400 audit(1792110089.660:506): avc: denied { setopt } for pid=7271 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.226254][ T5601] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 227.240331][ T7274] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 227.351816][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 227.351986][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 227.377202][ T5601] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 227.378064][ T5601] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.378084][ T5601] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 227.378130][ T5601] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.381372][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.381395][ T5601] usb 2-1: Product: syz [ 227.381408][ T5601] usb 2-1: Manufacturer: syz [ 227.381422][ T5601] usb 2-1: SerialNumber: syz [ 227.383299][ T7276] ceph: No mds server is up or the cluster is laggy [ 227.573078][ T7281] jffs2: notice: (7281) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 227.598306][ T5706] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.138544][ T51] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 228.142383][ T31] audit: type=1400 audit(1792110090.410:507): avc: denied { write } for pid=7283 comm="syz.4.332" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.142640][ T31] audit: type=1400 audit(1792110090.470:508): avc: denied { write } for pid=7283 comm="syz.4.332" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.408156][ T5706] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 228.478789][ T5601] usb 2-1: 0:2 : does not exist [ 228.539945][ T5706] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.541453][ T5706] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.541848][ T5706] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.707253][ T7290] ceph: No mds server is up or the cluster is laggy [ 228.764006][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 228.774689][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 228.831602][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.833311][ T5706] usb 1-1: Product: syz [ 228.833379][ T5706] usb 1-1: Manufacturer: syz [ 228.833499][ T5706] usb 1-1: SerialNumber: syz [ 229.407558][ T5601] usb 2-1: USB disconnect, device number 8 [ 229.619823][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 229.620307][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 229.656934][ T7301] ceph: No mds server is up or the cluster is laggy [ 229.877676][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 229.878242][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 230.387966][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 230.388563][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 230.614692][ T5706] usb 1-1: 0:2 : does not exist [ 230.714564][ T5706] usb 1-1: USB disconnect, device number 14 [ 230.802280][ T7210] udevd[7210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.444084][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 231.444219][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 231.475057][ T7320] ceph: No mds server is up or the cluster is laggy [ 231.684250][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 231.684396][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 231.684629][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 231.684729][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 232.196426][ T943] libceph: connect (1)[c::]:6789 error -101 [ 232.196696][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 232.637444][ T7327] ceph: No mds server is up or the cluster is laggy [ 232.711429][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 232.711725][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 232.923299][ T7345] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 233.425955][ T51] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 233.468951][ T1589] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.494276][ T31] audit: type=1400 audit(1792110095.700:509): avc: denied { write } for pid=7346 comm="syz.4.344" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.494366][ T31] audit: type=1400 audit(1792110095.760:510): avc: denied { write } for pid=7346 comm="syz.4.344" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.627481][ T1589] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 233.628903][ T1589] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.628925][ T1589] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.628970][ T1589] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.633710][ T1589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.633734][ T1589] usb 1-1: Product: syz [ 233.633747][ T1589] usb 1-1: Manufacturer: syz [ 233.633761][ T1589] usb 1-1: SerialNumber: syz [ 233.959551][ T1589] usb 1-1: 0:2 : does not exist [ 233.965919][ T943] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 234.040134][ T1589] usb 1-1: USB disconnect, device number 15 [ 234.094733][ T7210] udevd[7210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.129035][ T943] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 234.129984][ T943] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.130014][ T943] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.130038][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 234.130055][ T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.159402][ T943] usb 4-1: config 0 descriptor?? [ 234.700219][ T943] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 234.767043][ T943] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf4 found [ 234.767072][ T943] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf3 found [ 235.155132][ T1589] usb 4-1: USB disconnect, device number 10 [ 235.215307][ T943] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.810413][ T943] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.810667][ T943] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 235.812581][ T943] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.812610][ T943] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 235.812644][ T943] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 235.812672][ T943] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 235.812701][ T943] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 235.812715][ T943] usb 3-1: config 1 interface 1 has no altsetting 0 [ 235.819500][ T943] usb 3-1: string descriptor 0 read error: -22 [ 235.819657][ T943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.101509][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 236.102109][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 236.137770][ T7368] ceph: No mds server is up or the cluster is laggy [ 236.449739][ T943] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 236.595835][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 236.596290][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 237.155922][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 237.156391][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 237.294806][ T7374] ceph: No mds server is up or the cluster is laggy [ 238.615756][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 238.616235][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 239.090506][ T25] libceph: connect (1)[c::]:6789 error -101 [ 239.095250][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 239.538175][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 239.538428][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 239.559936][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 239.560125][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 240.509560][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 240.509872][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 240.545992][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 240.546184][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 240.647590][ T943] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 240.647609][ T943] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 240.647629][ T943] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 240.772178][ T943] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 240.918024][ T943] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 241.014821][ T943] usb 3-1: USB disconnect, device number 8 [ 241.490629][ T7391] ceph: No mds server is up or the cluster is laggy [ 241.505999][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 241.506253][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 243.186724][ T25] libceph: connect (1)[c::]:6789 error -101 [ 243.186865][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 243.604376][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 243.604835][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 243.618542][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 243.618973][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 243.678958][ T7400] ceph: No mds server is up or the cluster is laggy [ 244.494199][ T7408] jffs2: notice: (7408) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 244.566557][ T7410] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 244.649938][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 244.650073][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 244.652955][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 244.653088][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 244.767616][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 244.767765][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 244.912057][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 244.912767][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 244.945301][ T943] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 244.946771][ T7418] ceph: No mds server is up or the cluster is laggy [ 245.250303][ T943] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 245.275040][ T943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.275082][ T943] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.275246][ T943] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.308459][ T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.308488][ T943] usb 5-1: Product: syz [ 245.308504][ T943] usb 5-1: Manufacturer: syz [ 245.308522][ T943] usb 5-1: SerialNumber: syz [ 245.415676][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 245.415969][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 245.440642][ T7413] ceph: No mds server is up or the cluster is laggy [ 245.588790][ T943] usb 5-1: 0:2 : does not exist [ 245.826777][ T943] usb 5-1: USB disconnect, device number 9 [ 245.962276][ T7428] sg_write: data in/out 808464396/136 bytes for SCSI command 0x0-- guessing data in; [ 245.962276][ T7428] program syz.0.362 not setting count and/or reply_len properly [ 246.014203][ T31] audit: type=1400 audit(1792110108.361:511): avc: denied { read write } for pid=7425 comm="syz.0.362" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 246.014441][ T31] audit: type=1400 audit(1792110108.361:512): avc: denied { open } for pid=7425 comm="syz.0.362" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 246.014517][ T31] audit: type=1400 audit(1792110108.401:513): avc: denied { append } for pid=7425 comm="syz.0.362" name="sg0" dev="devtmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.014645][ T31] audit: type=1400 audit(1792110108.401:514): avc: denied { open } for pid=7425 comm="syz.0.362" path="/dev/sg0" dev="devtmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.181123][ T7210] udevd[7210]: setting mode of /dev/bus/usb/005/009 to 020664 failed: No such file or directory [ 246.181310][ T7210] udevd[7210]: setting owner of /dev/bus/usb/005/009 to uid=0, gid=0 failed: No such file or directory [ 246.238822][ T7210] udevd[7210]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.542588][ T7432] FAULT_INJECTION: forcing a failure. [ 246.542588][ T7432] name failslab, interval 1, probability 0, space 0, times 0 [ 246.542622][ T7432] CPU: 0 UID: 0 PID: 7432 Comm: syz.3.364 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.542646][ T7432] Tainted: [L]=SOFTLOCKUP [ 246.542652][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 246.542662][ T7432] Call Trace: [ 246.542668][ T7432] [ 246.542675][ T7432] dump_stack_lvl+0x100/0x190 [ 246.542706][ T7432] should_fail_ex.cold+0x5/0xa [ 246.542732][ T7432] should_failslab+0xc2/0x120 [ 246.542759][ T7432] __kmalloc_cache_noprof+0x91/0x6d0 [ 246.542780][ T7432] ? bpf_xdp_link_attach+0x18c/0x8f0 [ 246.542804][ T7432] bpf_xdp_link_attach+0x18c/0x8f0 [ 246.542823][ T7432] ? __fget_files+0x34/0x3d0 [ 246.542849][ T7432] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 246.542866][ T7432] ? find_held_lock+0x2b/0x80 [ 246.542893][ T7432] ? __fget_files+0x215/0x3d0 [ 246.542928][ T7432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.542956][ T7432] __sys_bpf+0x3cbf/0x4a30 [ 246.542984][ T7432] ? __pfx___sys_bpf+0x10/0x10 [ 246.543004][ T7432] ? find_held_lock+0x2b/0x80 [ 246.543027][ T7432] ? get_pid_task+0xfc/0x250 [ 246.543050][ T7432] ? get_pid_task+0xfc/0x250 [ 246.543083][ T7432] ? find_held_lock+0x2b/0x80 [ 246.543113][ T7432] ? rcu_read_lock_any_held+0x6a/0x90 [ 246.543141][ T7432] ? find_held_lock+0x2b/0x80 [ 246.543166][ T7432] ? ksys_write+0x190/0x250 [ 246.543187][ T7432] ? ksys_write+0x190/0x250 [ 246.543208][ T7432] ? lock_acquire+0x1d1/0x380 [ 246.543241][ T7432] ? fput+0x7c/0x100 [ 246.543264][ T7432] ? ksys_write+0x1ac/0x250 [ 246.543286][ T7432] ? __x64_sys_bpf+0xce/0x140 [ 246.543301][ T7432] __x64_sys_bpf+0xce/0x140 [ 246.543320][ T7432] ? do_syscall_64+0xae/0x790 [ 246.543344][ T7432] do_syscall_64+0x123/0x790 [ 246.543367][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.543384][ T7432] RIP: 0033:0x7f9830f9e559 [ 246.543403][ T7432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.543418][ T7432] RSP: 002b:00007f9831e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.543433][ T7432] RAX: ffffffffffffffda RBX: 00007f9831225fa0 RCX: 00007f9830f9e559 [ 246.543444][ T7432] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000001c [ 246.543454][ T7432] RBP: 00007f9831e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 246.543462][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.543471][ T7432] R13: 00007f9831226038 R14: 00007f9831225fa0 R15: 00007ffcd691fd58 [ 246.543493][ T7432] [ 246.567507][ T30] libceph: connect (1)[c::]:6789 error -101 [ 246.567643][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 246.618991][ T7430] ceph: No mds server is up or the cluster is laggy [ 247.252765][ T7440] ceph: No mds server is up or the cluster is laggy [ 247.278326][ T943] libceph: connect (1)[c::]:6789 error -101 [ 247.279316][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 248.095692][ T31] audit: type=1400 audit(1792110110.551:515): avc: denied { accept } for pid=7439 comm="syz.0.367" path="socket:[14179]" dev="sockfs" ino=14179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.152578][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 248.153273][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 248.154249][ T7447] ceph: No mds server is up or the cluster is laggy [ 248.196324][ T31] audit: type=1400 audit(1792110110.651:516): avc: denied { create } for pid=7439 comm="syz.0.367" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.405479][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 248.405640][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 248.828637][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 248.828784][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 249.085212][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 249.085371][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 249.527831][ T31] audit: type=1400 audit(1792110111.991:517): avc: denied { unlink } for pid=5612 comm="syz-executor" name="file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.582012][ T7466] FAULT_INJECTION: forcing a failure. [ 249.582012][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 249.582038][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.4.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.582054][ T7466] Tainted: [L]=SOFTLOCKUP [ 249.582058][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 249.582065][ T7466] Call Trace: [ 249.582069][ T7466] [ 249.582073][ T7466] dump_stack_lvl+0x100/0x190 [ 249.582093][ T7466] should_fail_ex.cold+0x5/0xa [ 249.582109][ T7466] should_failslab+0xc2/0x120 [ 249.582126][ T7466] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 249.582147][ T7466] ? sock_alloc_inode+0x26/0x2c0 [ 249.582161][ T7466] ? __pfx_sock_alloc_inode+0x10/0x10 [ 249.582175][ T7466] sock_alloc_inode+0x26/0x2c0 [ 249.582187][ T7466] ? __pfx_sock_alloc_inode+0x10/0x10 [ 249.582199][ T7466] alloc_inode+0x68/0x250 [ 249.582212][ T7466] sock_alloc+0x44/0x280 [ 249.582222][ T7466] ? security_socket_create+0x7f/0x250 [ 249.582237][ T7466] __sock_create+0xc2/0x860 [ 249.582254][ T7466] __sys_socket+0x14d/0x260 [ 249.582269][ T7466] ? __pfx___sys_socket+0x10/0x10 [ 249.582288][ T7466] __x64_sys_socket+0x72/0xb0 [ 249.582302][ T7466] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.582318][ T7466] do_syscall_64+0x123/0x790 [ 249.582335][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.582346][ T7466] RIP: 0033:0x7fa77ff9fdc7 [ 249.582356][ T7466] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.582367][ T7466] RSP: 002b:00007fa780d7ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 249.582380][ T7466] RAX: ffffffffffffffda RBX: 00007fa780226090 RCX: 00007fa77ff9fdc7 [ 249.582387][ T7466] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 249.582394][ T7466] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 249.582401][ T7466] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001 [ 249.582407][ T7466] R13: 00007fa780226128 R14: 00007fa780226090 R15: 00007ffcea20c118 [ 249.582421][ T7466] [ 249.582450][ T7466] socket: no more sockets [ 249.598083][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 249.598237][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 249.626199][ T7456] ceph: No mds server is up or the cluster is laggy [ 250.189890][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 250.190628][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 250.207114][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 250.207587][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 250.266963][ T7473] ceph: No mds server is up or the cluster is laggy [ 250.275602][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.436377][ T7470] FAULT_INJECTION: forcing a failure. [ 250.436377][ T7470] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 250.437431][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.0.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.437463][ T7470] Tainted: [L]=SOFTLOCKUP [ 250.437471][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 250.437484][ T7470] Call Trace: [ 250.437491][ T7470] [ 250.437499][ T7470] dump_stack_lvl+0x100/0x190 [ 250.437534][ T7470] should_fail_ex.cold+0x5/0xa [ 250.437557][ T7470] ? prepare_alloc_pages+0x16d/0x5b0 [ 250.437590][ T7470] should_fail_alloc_page+0xeb/0x140 [ 250.437621][ T7470] prepare_alloc_pages+0x1f0/0x5b0 [ 250.437649][ T7470] ? __pfx___schedule+0x10/0x10 [ 250.437675][ T7470] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 250.437700][ T7470] ? irqentry_exit+0x24d/0xa10 [ 250.437730][ T7470] ? lockdep_hardirqs_on+0x7d/0x110 [ 250.437758][ T7470] ? __lock_acquire+0x6f1/0x1f40 [ 250.437784][ T7470] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.437818][ T7470] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 250.437846][ T7470] ? __mutex_unlock_slowpath+0x35d/0x930 [ 250.437876][ T7470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.437911][ T7470] ? mm_drop_all_locks+0x390/0x4b0 [ 250.437933][ T7470] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.437959][ T7470] ? policy_nodemask+0xed/0x4f0 [ 250.437991][ T7470] alloc_pages_mpol+0x201/0x550 [ 250.438021][ T7470] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 250.438054][ T7470] alloc_pages_noprof+0x1a/0x160 [ 250.438074][ T7470] kvm_coalesced_mmio_init+0x1a/0x170 [ 250.438100][ T7470] kvm_dev_ioctl+0xec1/0x1b50 [ 250.438130][ T7470] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 250.438155][ T7470] ? selinux_file_ioctl+0x13b/0x290 [ 250.438183][ T7470] ? selinux_file_ioctl+0xb6/0x290 [ 250.438209][ T7470] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 250.438231][ T7470] __x64_sys_ioctl+0x18e/0x210 [ 250.438256][ T7470] do_syscall_64+0x123/0x790 [ 250.438284][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.438303][ T7470] RIP: 0033:0x7fa0bc39e559 [ 250.438320][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.438336][ T7470] RSP: 002b:00007fa0bd2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.438355][ T7470] RAX: ffffffffffffffda RBX: 00007fa0bc625fa0 RCX: 00007fa0bc39e559 [ 250.438366][ T7470] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 250.438377][ T7470] RBP: 00007fa0bc4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 250.438388][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.438398][ T7470] R13: 00007fa0bc626038 R14: 00007fa0bc625fa0 R15: 00007ffc82583828 [ 250.438421][ T7470] [ 250.474704][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 250.475323][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 250.986394][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 250.986879][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 251.498569][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 251.498957][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 251.504656][ T7479] ceph: No mds server is up or the cluster is laggy [ 252.288248][ T31] audit: type=1400 audit(1792110114.741:518): avc: denied { map } for pid=7487 comm="syz.1.377" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.288390][ T31] audit: type=1400 audit(1792110114.741:519): avc: denied { read write } for pid=7487 comm="syz.1.377" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.443333][ T7486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=7486 comm=syz.2.376 [ 252.607152][ T31] audit: type=1400 audit(1792110115.071:520): avc: denied { map } for pid=7487 comm="syz.1.377" path="socket:[14972]" dev="sockfs" ino=14972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 253.769621][ T5809] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 253.918026][ T5809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.918069][ T5809] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 253.919089][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.919108][ T5809] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 253.919143][ T5809] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 253.919174][ T5809] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 253.919205][ T5809] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 253.919226][ T5809] usb 2-1: config 1 interface 1 has no altsetting 0 [ 253.922533][ T5809] usb 2-1: string descriptor 0 read error: -22 [ 253.922630][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.130000][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 254.130166][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 254.167960][ T7523] ceph: No mds server is up or the cluster is laggy [ 254.203303][ T7522] si4713 0-0063: IRQ not configured. Using timeouts. [ 254.203613][ T7522] si4713 0-0063: Error while sending command 0x01 [ 254.203706][ T7522] si4713 0-0063: Failed to probe device information. [ 254.247766][ T7522] si4713 0-0063: probe with driver si4713 failed with error -5 [ 254.264345][ T7522] i2c i2c-0: new_device: Instantiated device si4713 at 0x63 [ 254.290958][ T5809] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 254.772907][ T5809] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 254.772937][ T5809] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 254.772952][ T5809] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 254.830138][ T7529] ceph: No mds server is up or the cluster is laggy [ 255.563702][ T25] libceph: connect (1)[c::]:6789 error -101 [ 255.597653][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 255.843669][ T5809] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 255.859616][ T5809] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 255.882121][ T5809] usb 2-1: USB disconnect, device number 9 [ 255.961465][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 255.961751][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 256.008972][ T7534] ceph: No mds server is up or the cluster is laggy [ 256.227425][ T31] audit: type=1400 audit(1792110118.692:521): avc: denied { listen } for pid=7538 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.233364][ T31] audit: type=1400 audit(1792110118.692:522): avc: denied { accept } for pid=7538 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.318224][ T51] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 256.420797][ T7544] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 256.422657][ T31] audit: type=1400 audit(1792110118.882:523): avc: denied { ioctl } for pid=7543 comm="syz.2.392" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 256.447086][ T31] audit: type=1400 audit(1792110118.902:524): avc: denied { map } for pid=7543 comm="syz.2.392" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 256.447143][ T31] audit: type=1400 audit(1792110118.902:525): avc: denied { execute } for pid=7543 comm="syz.2.392" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 256.584901][ T1589] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 256.724625][ T1589] usb 2-1: device descriptor read/64, error -71 [ 256.767401][ T7554] FAULT_INJECTION: forcing a failure. [ 256.767401][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 256.767449][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.4.397 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.767475][ T7554] Tainted: [L]=SOFTLOCKUP [ 256.767481][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 256.767492][ T7554] Call Trace: [ 256.767498][ T7554] [ 256.767506][ T7554] dump_stack_lvl+0x100/0x190 [ 256.767537][ T7554] should_fail_ex.cold+0x5/0xa [ 256.767563][ T7554] should_failslab+0xc2/0x120 [ 256.767591][ T7554] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 256.767615][ T7554] ? __alloc_skb+0x5b7/0x710 [ 256.767642][ T7554] ? __alloc_skb+0x140/0x710 [ 256.767670][ T7554] __alloc_skb+0x140/0x710 [ 256.767693][ T7554] ? __alloc_skb+0x5b7/0x710 [ 256.767718][ T7554] ? __pfx___alloc_skb+0x10/0x10 [ 256.767750][ T7554] netlink_alloc_large_skb+0x69/0x150 [ 256.767779][ T7554] netlink_sendmsg+0x680/0xda0 [ 256.767810][ T7554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.767838][ T7554] ? selinux_socket_sendmsg+0x198/0x2f0 [ 256.767865][ T7554] ____sys_sendmsg+0xa4d/0xbe0 [ 256.767886][ T7554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.767913][ T7554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.767946][ T7554] ___sys_sendmsg+0x190/0x1e0 [ 256.767969][ T7554] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.767991][ T7554] ? get_pid_task+0x106/0x250 [ 256.768024][ T7554] ? find_held_lock+0x2b/0x80 [ 256.768065][ T7554] __sys_sendmsg+0x160/0x210 [ 256.768084][ T7554] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.768116][ T7554] do_syscall_64+0x123/0x790 [ 256.768144][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.768163][ T7554] RIP: 0033:0x7fa77ff9e559 [ 256.768178][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.768195][ T7554] RSP: 002b:00007fa780da2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.768213][ T7554] RAX: ffffffffffffffda RBX: 00007fa780225fa0 RCX: 00007fa77ff9e559 [ 256.768224][ T7554] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 256.768235][ T7554] RBP: 00007fa780da2090 R08: 0000000000000000 R09: 0000000000000000 [ 256.768246][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.768256][ T7554] R13: 00007fa780226038 R14: 00007fa780225fa0 R15: 00007ffcea20c118 [ 256.768281][ T7554] [ 256.999359][ T1589] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 257.145699][ T1589] usb 2-1: device descriptor read/64, error -71 [ 257.203606][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 257.203761][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 257.244075][ T7558] ceph: No mds server is up or the cluster is laggy [ 257.256156][ T1589] usb usb2-port1: attempt power cycle [ 257.484606][ T5706] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 257.614715][ T1589] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 257.635375][ T5706] usb 5-1: Using ep0 maxpacket: 32 [ 257.636290][ T5706] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 257.646255][ T1589] usb 2-1: device descriptor read/8, error -71 [ 257.668340][ T5706] usb 5-1: config 3 has an invalid interface number: 79 but max is 0 [ 257.668393][ T5706] usb 5-1: config 3 has no interface number 0 [ 257.668434][ T5706] usb 5-1: config 3 interface 79 altsetting 5 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 257.668468][ T5706] usb 5-1: config 3 interface 79 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.668496][ T5706] usb 5-1: config 3 interface 79 has no altsetting 0 [ 257.724410][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.724532][ T5706] usb 5-1: Product: syz [ 257.724560][ T5706] usb 5-1: Manufacturer: syz [ 257.724589][ T5706] usb 5-1: SerialNumber: syz [ 257.887761][ T1589] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 257.905726][ T1589] usb 2-1: device descriptor read/8, error -71 [ 257.951635][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 257.952093][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 257.953282][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 257.953638][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 257.984520][ T7569] ceph: No mds server is up or the cluster is laggy [ 258.019492][ T1589] usb usb2-port1: unable to enumerate USB device [ 258.179101][ T5706] kobil_sct 5-1:3.79: KOBIL USB smart card terminal converter detected [ 258.222548][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 258.223079][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 258.793072][ T5706] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 258.803156][ T5706] usb 5-1: USB disconnect, device number 10 [ 258.808961][ T5706] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 258.809814][ T5706] kobil_sct 5-1:3.79: device disconnected [ 259.411624][ T7585] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 259.664435][ T5601] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 260.135032][ T5601] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 260.135874][ T5601] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.135894][ T5601] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.135937][ T5601] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.137592][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.137612][ T5601] usb 1-1: Product: syz [ 260.137626][ T5601] usb 1-1: Manufacturer: syz [ 260.137640][ T5601] usb 1-1: SerialNumber: syz [ 260.145211][ T5610] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 260.208983][ T31] audit: type=1400 audit(1792110122.362:526): avc: denied { write } for pid=7586 comm="syz.1.407" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.209034][ T31] audit: type=1400 audit(1792110122.432:527): avc: denied { write } for pid=7586 comm="syz.1.407" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.366837][ T31] audit: type=1400 audit(1792110122.832:528): avc: denied { cmd } for pid=7598 comm="syz.2.410" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 260.408399][ T31] audit: type=1400 audit(1792110122.872:529): avc: denied { map } for pid=7598 comm="syz.2.410" path="/dev/ublkc0" dev="devtmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.506695][ T7602] ip_tables: iptables: counters copy to user failed while replacing table [ 260.711059][ T5601] usb 1-1: 0:2 : does not exist [ 260.711219][ T7603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7603 comm=syz.2.410 [ 261.076138][ T5601] usb 1-1: USB disconnect, device number 16 [ 261.188843][ T7210] udevd[7210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.439203][ T31] audit: type=1400 audit(1792110123.902:530): avc: denied { write } for pid=7605 comm="syz.3.412" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.594433][ T31] audit: type=1400 audit(1792110124.052:531): avc: denied { write } for pid=7605 comm="syz.3.412" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.627453][ T7614] FAULT_INJECTION: forcing a failure. [ 261.627453][ T7614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.627485][ T7614] CPU: 0 UID: 0 PID: 7614 Comm: syz.2.414 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.627509][ T7614] Tainted: [L]=SOFTLOCKUP [ 261.627516][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 261.627527][ T7614] Call Trace: [ 261.627534][ T7614] [ 261.627541][ T7614] dump_stack_lvl+0x100/0x190 [ 261.627572][ T7614] should_fail_ex.cold+0x5/0xa [ 261.627599][ T7614] _copy_from_user+0x2e/0xd0 [ 261.627628][ T7614] kstrtouint_from_user+0xd6/0x1d0 [ 261.627648][ T7614] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 261.627680][ T7614] ? lock_acquire+0x1d1/0x380 [ 261.627706][ T7614] proc_fail_nth_write+0x83/0x220 [ 261.627734][ T7614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.627767][ T7614] vfs_write+0x2aa/0x1050 [ 261.627790][ T7614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.627815][ T7614] ? lock_acquire+0x1d1/0x380 [ 261.627834][ T7614] ? __fget_files+0x34/0x3d0 [ 261.627858][ T7614] ? __pfx_vfs_write+0x10/0x10 [ 261.627876][ T7614] ? find_held_lock+0x2b/0x80 [ 261.627902][ T7614] ? __fget_files+0x215/0x3d0 [ 261.627931][ T7614] ? __fget_files+0x21f/0x3d0 [ 261.627964][ T7614] ksys_write+0x12a/0x250 [ 261.627986][ T7614] ? __pfx_ksys_write+0x10/0x10 [ 261.628014][ T7614] do_syscall_64+0x123/0x790 [ 261.628042][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.628060][ T7614] RIP: 0033:0x7f1a9315ed8e [ 261.628074][ T7614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 261.628092][ T7614] RSP: 002b:00007f1a940befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.628110][ T7614] RAX: ffffffffffffffda RBX: 00007f1a940bf6c0 RCX: 00007f1a9315ed8e [ 261.628123][ T7614] RDX: 0000000000000001 RSI: 00007f1a940bf0a0 RDI: 0000000000000005 [ 261.628133][ T7614] RBP: 00007f1a940bf090 R08: 0000000000000000 R09: 0000000000000000 [ 261.628143][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.628154][ T7614] R13: 00007f1a93426038 R14: 00007f1a93425fa0 R15: 00007ffe89690158 [ 261.628178][ T7614] [ 262.440220][ T5706] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 263.186113][ T7632] CIFS: Witness protocol support is experimental [ 263.186469][ T7632] CIFS: Attempting to mount //127.0.0.1/share [ 263.406072][ T7632] CIFS: VFS: error -4 create cifsd thread [ 263.407711][ T7632] CIFS: VFS: cifs_mount failed w/return code = -4 [ 264.044301][ T31] audit: type=1400 audit(1792110125.262:532): avc: denied { write } for pid=7626 comm="syz.0.419" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 264.118581][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 264.118622][ T5706] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 264.119556][ T5706] usb 3-1: config 66 has an invalid interface number: 126 but max is 1 [ 264.119588][ T5706] usb 3-1: config 66 has no interface number 1 [ 264.119622][ T5706] usb 3-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 264.119636][ T5706] usb 3-1: config 66 interface 0 has no altsetting 0 [ 264.121635][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.121668][ T5706] usb 3-1: Product: syz [ 264.121686][ T5706] usb 3-1: Manufacturer: syz [ 264.121694][ T5706] usb 3-1: SerialNumber: syz [ 264.135608][ T7624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.417321][ T5706] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 2 [ 264.447624][ T5706] usb 3-1: USB disconnect, device number 9 [ 264.712688][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 265.170464][ T7647] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 265.474324][ T5601] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 266.294803][ T5601] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 266.295681][ T5601] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.295703][ T5601] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.295748][ T5601] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.297524][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.297544][ T5601] usb 3-1: Product: syz [ 266.297556][ T5601] usb 3-1: Manufacturer: syz [ 266.297568][ T5601] usb 3-1: SerialNumber: syz [ 266.657502][ T5601] usb 3-1: 0:2 : does not exist [ 266.739193][ T7661] FAULT_INJECTION: forcing a failure. [ 266.739193][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 266.742727][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.0.428 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.742758][ T7661] Tainted: [L]=SOFTLOCKUP [ 266.742764][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 266.742775][ T7661] Call Trace: [ 266.742781][ T7661] [ 266.742789][ T7661] dump_stack_lvl+0x100/0x190 [ 266.742821][ T7661] should_fail_ex.cold+0x5/0xa [ 266.742846][ T7661] should_failslab+0xc2/0x120 [ 266.742873][ T7661] __kmalloc_noprof+0xfc/0x840 [ 266.742898][ T7661] ? tomoyo_encode2+0xfb/0x3c0 [ 266.742930][ T7661] tomoyo_encode2+0xfb/0x3c0 [ 266.742961][ T7661] tomoyo_encode+0x29/0x50 [ 266.742988][ T7661] tomoyo_realpath_from_path+0x18c/0x690 [ 266.743022][ T7661] tomoyo_path_number_perm+0x23c/0x580 [ 266.743045][ T7661] ? tomoyo_path_number_perm+0x22e/0x580 [ 266.743076][ T7661] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.743113][ T7661] ? __lock_acquire+0x5c0/0x1f40 [ 266.743145][ T7661] ? __fget_files+0x34/0x3d0 [ 266.743172][ T7661] ? find_held_lock+0x2b/0x80 [ 266.743198][ T7661] ? hook_file_ioctl_common+0x140/0x440 [ 266.743223][ T7661] ? __fget_files+0x21f/0x3d0 [ 266.743252][ T7661] security_file_ioctl+0xd3/0x230 [ 266.743279][ T7661] __x64_sys_ioctl+0xb7/0x210 [ 266.743304][ T7661] do_syscall_64+0x123/0x790 [ 266.743334][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.743352][ T7661] RIP: 0033:0x7fa0bc39e559 [ 266.743368][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.743385][ T7661] RSP: 002b:00007fa0bd2a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.743405][ T7661] RAX: ffffffffffffffda RBX: 00007fa0bc626180 RCX: 00007fa0bc39e559 [ 266.743417][ T7661] RDX: 0000200000000a80 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 266.743427][ T7661] RBP: 00007fa0bd2a4090 R08: 0000000000000000 R09: 0000000000000000 [ 266.743437][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.743447][ T7661] R13: 00007fa0bc626218 R14: 00007fa0bc626180 R15: 00007ffc82583828 [ 266.743470][ T7661] [ 266.743565][ T7661] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.001662][ T5601] usb 3-1: USB disconnect, device number 10 [ 267.035199][ T7210] udevd[7210]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.491305][ T31] audit: type=1400 audit(1792110129.952:533): avc: denied { ioctl } for pid=7669 comm="syz.1.431" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.536844][ T31] audit: type=1400 audit(1792110130.002:534): avc: denied { set_context_mgr } for pid=7669 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 267.542713][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 267.542736][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.432'. [ 267.625880][ T31] audit: type=1400 audit(1792110130.082:535): avc: denied { write } for pid=7669 comm="syz.1.431" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 268.025662][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.433'. [ 268.025929][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.433'. [ 268.026241][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.433'. [ 268.027635][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.433'. [ 268.027866][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.433'. [ 268.028087][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.433'. [ 268.028309][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.433'. [ 268.049064][ T7673] binder_alloc: 7669: binder_alloc_buf, no vma [ 268.049203][ T31] audit: type=1400 audit(1792110130.512:536): avc: denied { call } for pid=7669 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 268.308716][ T7680] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 268.308741][ T7680] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 268.313709][ T7680] vhci_hcd vhci_hcd.0: Device attached [ 268.348721][ T7679] vhci_hcd vhci_hcd.0: port 0 already used [ 268.576105][ T5601] usb 42-1: SetAddress Request (2) to port 0 [ 268.576161][ T5601] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 268.577732][ T7688] vhci_hcd: connection closed [ 268.581121][ T12] vhci_hcd vhci_hcd.4: stop threads [ 268.614409][ T12] vhci_hcd vhci_hcd.4: release socket [ 268.630814][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 268.763774][ T1589] libceph: connect (1)[c::]:6789 error -101 [ 268.764015][ T1589] libceph: mon0 (1)[c::]:6789 connect error [ 268.791431][ T7698] ceph: No mds server is up or the cluster is laggy [ 269.953830][ T1589] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 270.107581][ T1589] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 270.109951][ T1589] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 270.110051][ T1589] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 270.110103][ T1589] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 270.110141][ T1589] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 270.110178][ T1589] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 270.110340][ T1589] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 270.110380][ T1589] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 270.171956][ T1589] usb 2-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 270.185162][ T1589] usb 2-1: Product: syz [ 270.185213][ T1589] usb 2-1: Manufacturer: syz [ 270.185321][ T1589] usb 2-1: SerialNumber: syz [ 270.441354][ T7703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.441661][ T7703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.442048][ T7703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.442354][ T7703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.518917][ T1589] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 270.519343][ T1589] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 270.542638][ T1589] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 270.542733][ T1589] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 270.578220][ T1589] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 270.656574][ T7703] FAULT_INJECTION: forcing a failure. [ 270.656574][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.656618][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.1.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.656643][ T7703] Tainted: [L]=SOFTLOCKUP [ 270.656649][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 270.656660][ T7703] Call Trace: [ 270.656666][ T7703] [ 270.656673][ T7703] dump_stack_lvl+0x100/0x190 [ 270.656704][ T7703] should_fail_ex.cold+0x5/0xa [ 270.656730][ T7703] strncpy_from_user+0x3b/0x2d0 [ 270.656761][ T7703] do_getname+0x78/0x390 [ 270.656783][ T7703] do_sys_openat2+0xc7/0x1e0 [ 270.656800][ T7703] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.656818][ T7703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 270.656847][ T7703] ? __fget_files+0x21f/0x3d0 [ 270.656877][ T7703] __x64_sys_openat+0x12d/0x210 [ 270.656894][ T7703] ? __pfx___x64_sys_openat+0x10/0x10 [ 270.656911][ T7703] ? ksys_write+0x1ac/0x250 [ 270.656941][ T7703] do_syscall_64+0x123/0x790 [ 270.656968][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.656986][ T7703] RIP: 0033:0x7f3efcf9e559 [ 270.657001][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.657018][ T7703] RSP: 002b:00007f3efb1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.657035][ T7703] RAX: ffffffffffffffda RBX: 00007f3efd225fa0 RCX: 00007f3efcf9e559 [ 270.657046][ T7703] RDX: 0000000000000102 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 270.657057][ T7703] RBP: 00007f3efb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.657070][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.657080][ T7703] R13: 00007f3efd226038 R14: 00007f3efd225fa0 R15: 00007ffc381eb748 [ 270.657105][ T7703] [ 270.660692][ T1589] usb 2-1: USB disconnect, device number 14 [ 270.671028][ T30] kernel read not supported for file /dsp1 (pid: 30 comm: kworker/1:1) [ 271.023923][ T31] audit: type=1400 audit(1792110133.402:537): avc: denied { append } for pid=7715 comm="syz.4.441" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.176868][ T1589] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 271.177532][ T1589] keyspan 2-1:1.0: device disconnected [ 271.653857][ T1909] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 271.812264][ T1909] usb 5-1: New USB device found, idVendor=1bc7, idProduct=10b2, bcdDevice=86.9e [ 271.831135][ T1909] usb 5-1: config 5 has an invalid interface number: 235 but max is 0 [ 271.831176][ T1909] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 271.831204][ T1909] usb 5-1: config 5 has no interface number 0 [ 271.831266][ T1909] usb 5-1: config 5 interface 235 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 271.831299][ T1909] usb 5-1: config 5 interface 235 has no altsetting 0 [ 271.855254][ T1909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.855293][ T1909] usb 5-1: Product: syz [ 271.855319][ T1909] usb 5-1: Manufacturer: syz [ 271.855344][ T1909] usb 5-1: SerialNumber: syz [ 271.907181][ T7725] jffs2: notice: (7725) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 271.963568][ T31] audit: type=1400 audit(1792110134.403:538): avc: denied { write } for pid=7720 comm="syz.1.444" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.964161][ T31] audit: type=1400 audit(1792110134.413:539): avc: denied { create } for pid=7720 comm="syz.1.444" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 271.964419][ T31] audit: type=1400 audit(1792110134.423:540): avc: denied { write open } for pid=7720 comm="syz.1.444" path="/88/file0/file0" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.566114][ T7732] __nla_validate_parse: 40 callbacks suppressed [ 272.566155][ T7732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.442'. [ 272.597751][ T1909] option 5-1:5.235: GSM modem (1-port) converter detected [ 272.618043][ T1909] usb 5-1: USB disconnect, device number 11 [ 272.631416][ T1909] option 5-1:5.235: device disconnected [ 273.058775][ T7740] ceph: No mds server is up or the cluster is laggy [ 273.506774][ T30] libceph: connect (1)[c::]:6789 error -101 [ 273.691769][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 274.000817][ T5601] usb 42-1: device descriptor read/8, error -110 [ 274.200940][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 274.201193][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 274.984556][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 274.984696][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 275.165269][ T7746] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 275.244492][ T5601] usb usb42-port1: attempt power cycle [ 275.337895][ T7746] team0: Device wg2 is of different type [ 275.366297][ T31] audit: type=1400 audit(1792110137.833:541): avc: denied { execute } for pid=7739 comm="syz.1.446" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 275.814412][ T5601] usb usb42-port1: unable to enumerate USB device [ 275.916852][ T5610] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 275.920114][ T31] audit: type=1400 audit(1792110138.353:542): avc: denied { write } for pid=7756 comm="syz.1.451" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.921236][ T1589] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 276.821282][ T7751] batman_adv: batadv0: Adding interface: syzkaller0 [ 276.821300][ T7751] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.821326][ T7751] batman_adv: batadv0: Interface activated: syzkaller0 [ 277.269123][ T7762] FAULT_INJECTION: forcing a failure. [ 277.269123][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 277.269172][ T7762] CPU: 1 UID: 0 PID: 7762 Comm: syz.0.452 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.269200][ T7762] Tainted: [L]=SOFTLOCKUP [ 277.269207][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 277.269218][ T7762] Call Trace: [ 277.269225][ T7762] [ 277.269233][ T7762] dump_stack_lvl+0x100/0x190 [ 277.269264][ T7762] should_fail_ex.cold+0x5/0xa [ 277.269289][ T7762] should_failslab+0xc2/0x120 [ 277.269318][ T7762] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 277.269345][ T7762] ? alloc_inode+0x183/0x250 [ 277.269368][ T7762] alloc_inode+0x183/0x250 [ 277.269388][ T7762] iget_locked+0x1d9/0x6d0 [ 277.269408][ T7762] ? __pfx_iget_locked+0x10/0x10 [ 277.269428][ T7762] ? down_read+0x13b/0x4c0 [ 277.269445][ T7762] ? __pfx_down_read+0x10/0x10 [ 277.269460][ T7762] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 277.269484][ T7762] kernfs_get_inode+0x46/0x470 [ 277.269509][ T7762] kernfs_get_tree+0x636/0xbb0 [ 277.269541][ T7762] ? __pfx_kernfs_get_tree+0x10/0x10 [ 277.269570][ T7762] ? bpf_lsm_capable+0x9/0x10 [ 277.269587][ T7762] ? security_capable+0x80/0x260 [ 277.269611][ T7762] vfs_get_tree+0x92/0x320 [ 277.269631][ T7762] path_mount+0x7d0/0x2850 [ 277.269654][ T7762] ? __pfx_path_mount+0x10/0x10 [ 277.269672][ T7762] ? lockdep_hardirqs_on+0x7d/0x110 [ 277.269699][ T7762] ? putname+0xb1/0x110 [ 277.269713][ T7762] ? kmem_cache_free+0x127/0x6c0 [ 277.269741][ T7762] ? __x64_sys_mount+0x293/0x310 [ 277.269759][ T7762] __x64_sys_mount+0x293/0x310 [ 277.269777][ T7762] ? __pfx___x64_sys_mount+0x10/0x10 [ 277.269804][ T7762] do_syscall_64+0x123/0x790 [ 277.269832][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.269852][ T7762] RIP: 0033:0x7fa0bc39e559 [ 277.269868][ T7762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.269885][ T7762] RSP: 002b:00007fa0bd2c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.269903][ T7762] RAX: ffffffffffffffda RBX: 00007fa0bc626090 RCX: 00007fa0bc39e559 [ 277.269915][ T7762] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 277.269926][ T7762] RBP: 00007fa0bc4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 277.269936][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.269947][ T7762] R13: 00007fa0bc626128 R14: 00007fa0bc626090 R15: 00007ffc82583828 [ 277.269973][ T7762] [ 277.391183][ T7750] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 277.578017][ T7750] batman_adv: batadv0: Removing interface: syzkaller0 [ 277.598062][ T7768] FAULT_INJECTION: forcing a failure. [ 277.598062][ T7768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.598111][ T7768] CPU: 1 UID: 0 PID: 7768 Comm: syz.1.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.598139][ T7768] Tainted: [L]=SOFTLOCKUP [ 277.598146][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 277.598157][ T7768] Call Trace: [ 277.598164][ T7768] [ 277.598171][ T7768] dump_stack_lvl+0x100/0x190 [ 277.598204][ T7768] should_fail_ex.cold+0x5/0xa [ 277.598229][ T7768] _copy_from_user+0x2e/0xd0 [ 277.598257][ T7768] move_addr_to_kernel+0x65/0x170 [ 277.598283][ T7768] copy_msghdr_from_user+0x3f0/0x4c0 [ 277.598308][ T7768] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 277.598334][ T7768] ? lock_acquire+0x1d1/0x380 [ 277.598352][ T7768] ? get_pid_task+0x2a/0x250 [ 277.598379][ T7768] ___sys_sendmsg+0x106/0x1e0 [ 277.598404][ T7768] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.598428][ T7768] ? get_pid_task+0x106/0x250 [ 277.598462][ T7768] ? find_held_lock+0x2b/0x80 [ 277.598503][ T7768] __sys_sendmsg+0x160/0x210 [ 277.598523][ T7768] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.598556][ T7768] do_syscall_64+0x123/0x790 [ 277.598585][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.598604][ T7768] RIP: 0033:0x7f3efcf9e559 [ 277.598620][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.598637][ T7768] RSP: 002b:00007f3efb1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.598656][ T7768] RAX: ffffffffffffffda RBX: 00007f3efd225fa0 RCX: 00007f3efcf9e559 [ 277.598668][ T7768] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 277.598680][ T7768] RBP: 00007f3efb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.598691][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.598701][ T7768] R13: 00007f3efd226038 R14: 00007f3efd225fa0 R15: 00007ffc381eb748 [ 277.598727][ T7768] [ 277.654778][ T31] audit: type=1400 audit(1792110140.113:543): avc: denied { setopt } for pid=7766 comm="syz.0.455" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.782217][ T31] audit: type=1400 audit(1792110140.243:544): avc: denied { write } for pid=7766 comm="syz.0.455" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.790649][ T7770] lo: entered allmulticast mode [ 277.856977][ T1589] usb 5-1: unable to get BOS descriptor or descriptor too short [ 277.857018][ T1589] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 277.870807][ T1589] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 277.870839][ T1589] usb 5-1: can't read configurations, error -71 [ 278.070450][ T7775] ceph: No mds server is up or the cluster is laggy [ 278.081881][ T30] libceph: connect (1)[c::]:6789 error -101 [ 278.084964][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 278.143614][ T5707] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 278.438290][ T5707] usb 1-1: not running at top speed; connect to a high speed hub [ 278.442030][ T5707] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 279.164730][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.164769][ T5707] usb 1-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 279.164802][ T5707] usb 1-1: Manufacturer: ࡡ [ 279.164828][ T5707] usb 1-1: SerialNumber: Ѓ [ 279.530505][ T7791] /dev/sg0: Can't lookup blockdev [ 279.714226][ T31] audit: type=1400 audit(1792110142.173:545): avc: denied { mount } for pid=7785 comm="syz.1.459" name="/" dev="rpc_pipefs" ino=16675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 280.602790][ T31] audit: type=1400 audit(1792110143.063:546): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 280.643950][ T5707] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 280.660089][ T7766] lo: left allmulticast mode [ 281.811188][ T31] audit: type=1400 audit(1792110144.273:547): avc: denied { mount } for pid=7789 comm="syz.3.461" name="/" dev="ramfs" ino=16790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 281.854812][ T5707] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 281.866351][ T5707] usb 1-1: USB disconnect, device number 17 [ 281.919969][ T7210] udevd[7210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.170439][ T31] audit: type=1326 audit(1792110144.633:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 282.170674][ T31] audit: type=1326 audit(1792110144.633:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 282.172617][ T31] audit: type=1326 audit(1792110144.633:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1a9315ed8e code=0x7ffc0000 [ 282.173010][ T31] audit: type=1326 audit(1792110144.633:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 282.175026][ T31] audit: type=1326 audit(1792110144.643:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 282.234091][ T31] audit: type=1326 audit(1792110144.693:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 282.255634][ T31] audit: type=1326 audit(1792110144.693:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 282.255961][ T31] audit: type=1326 audit(1792110144.693:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.2.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9319e559 code=0x7ffc0000 [ 282.729377][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.467'. [ 282.785862][ T7825] netlink: 56 bytes leftover after parsing attributes in process `syz.4.466'. [ 282.845496][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.466'. [ 282.901806][ T7827] ip_tables: iptables: counters copy to user failed while replacing table [ 283.399638][ T7827] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 283.554544][ T7839] FAULT_INJECTION: forcing a failure. [ 283.554544][ T7839] name failslab, interval 1, probability 0, space 0, times 0 [ 283.556269][ T7839] CPU: 1 UID: 0 PID: 7839 Comm: syz.0.472 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.556296][ T7839] Tainted: [L]=SOFTLOCKUP [ 283.556302][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 283.556313][ T7839] Call Trace: [ 283.556325][ T7839] [ 283.556333][ T7839] dump_stack_lvl+0x100/0x190 [ 283.556366][ T7839] should_fail_ex.cold+0x5/0xa [ 283.556393][ T7839] should_failslab+0xc2/0x120 [ 283.556421][ T7839] __kmalloc_noprof+0xfc/0x840 [ 283.556444][ T7839] ? tomoyo_encode2+0xfb/0x3c0 [ 283.556477][ T7839] tomoyo_encode2+0xfb/0x3c0 [ 283.556507][ T7839] tomoyo_encode+0x29/0x50 [ 283.556533][ T7839] tomoyo_realpath_from_path+0x18c/0x690 [ 283.556567][ T7839] tomoyo_path_number_perm+0x23c/0x580 [ 283.556590][ T7839] ? tomoyo_path_number_perm+0x22e/0x580 [ 283.556615][ T7839] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 283.556640][ T7839] ? taprio_dequeue+0x31/0x5f0 [ 283.556668][ T7839] ? __lock_acquire+0x5c0/0x1f40 [ 283.556703][ T7839] ? __fget_files+0x34/0x3d0 [ 283.556729][ T7839] ? find_held_lock+0x2b/0x80 [ 283.556755][ T7839] ? hook_file_ioctl_common+0x140/0x440 [ 283.556781][ T7839] ? __fget_files+0x21f/0x3d0 [ 283.556811][ T7839] security_file_ioctl+0xd3/0x230 [ 283.556837][ T7839] __x64_sys_ioctl+0xb7/0x210 [ 283.556862][ T7839] do_syscall_64+0x123/0x790 [ 283.556890][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.556909][ T7839] RIP: 0033:0x7fa0bc39e559 [ 283.556925][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.556942][ T7839] RSP: 002b:00007fa0bd2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.556960][ T7839] RAX: ffffffffffffffda RBX: 00007fa0bc625fa0 RCX: 00007fa0bc39e559 [ 283.556972][ T7839] RDX: 00002000000000c0 RSI: 00000000c0845657 RDI: 0000000000000003 [ 283.556983][ T7839] RBP: 00007fa0bd2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.556994][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.557005][ T7839] R13: 00007fa0bc626038 R14: 00007fa0bc625fa0 R15: 00007ffc82583828 [ 283.557031][ T7839] [ 283.557138][ T7839] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.638404][ T7823] syz.3.469 uses obsolete (PF_INET,SOCK_PACKET) [ 284.841273][ T7865] syzkaller0: entered promiscuous mode [ 284.842105][ T7865] syzkaller0: entered allmulticast mode [ 285.026626][ T5610] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 285.853487][ T5601] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 285.957993][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 285.958012][ T31] audit: type=1400 audit(1792110148.423:578): avc: denied { create } for pid=7869 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 285.989088][ T31] audit: type=1400 audit(1792110148.433:579): avc: denied { setopt } for pid=7869 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 285.989137][ T31] audit: type=1400 audit(1792110148.433:580): avc: denied { write } for pid=7869 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.053904][ T5601] usb 1-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 286.054796][ T5601] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.056472][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.056494][ T5601] usb 1-1: Product: syz [ 286.056507][ T5601] usb 1-1: Manufacturer: syz [ 286.056521][ T5601] usb 1-1: SerialNumber: syz [ 286.106065][ T5601] ipheth 1-1:1.0: Unable to find alternate settings interface [ 286.352258][ T31] audit: type=1400 audit(1792110148.813:581): avc: denied { bind } for pid=7869 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.516919][ T5601] apple-mfi-fastcharge 1-1: USB disconnect, device number 18 [ 286.531325][ T31] audit: type=1400 audit(1792110148.993:582): avc: denied { append } for pid=7876 comm="syz.2.485" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.613667][ T31] audit: type=1400 audit(1792110150.023:583): avc: denied { watch watch_reads } for pid=7869 comm="syz.1.481" path="/98" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 287.763443][ T31] audit: type=1400 audit(1792110150.233:584): avc: denied { read write } for pid=7890 comm="syz.3.486" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 287.763827][ T31] audit: type=1400 audit(1792110150.233:585): avc: denied { open } for pid=7890 comm="syz.3.486" path="/100/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 287.801725][ T7894] FAULT_INJECTION: forcing a failure. [ 287.801725][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 287.801777][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: syz.3.486 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.801799][ T7894] Tainted: [L]=SOFTLOCKUP [ 287.801805][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 287.801814][ T7894] Call Trace: [ 287.801820][ T7894] [ 287.801826][ T7894] dump_stack_lvl+0x100/0x190 [ 287.801855][ T7894] should_fail_ex.cold+0x5/0xa [ 287.801878][ T7894] should_failslab+0xc2/0x120 [ 287.801902][ T7894] __kmalloc_noprof+0xfc/0x840 [ 287.801922][ T7894] ? tomoyo_encode2+0xfb/0x3c0 [ 287.801950][ T7894] tomoyo_encode2+0xfb/0x3c0 [ 287.801976][ T7894] tomoyo_encode+0x29/0x50 [ 287.801998][ T7894] tomoyo_realpath_from_path+0x18c/0x690 [ 287.802027][ T7894] tomoyo_path_number_perm+0x23c/0x580 [ 287.802046][ T7894] ? tomoyo_path_number_perm+0x22e/0x580 [ 287.802068][ T7894] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.802097][ T7894] ? __lock_acquire+0x5c0/0x1f40 [ 287.802126][ T7894] ? __fget_files+0x34/0x3d0 [ 287.802148][ T7894] ? find_held_lock+0x2b/0x80 [ 287.802171][ T7894] ? hook_file_ioctl_common+0x140/0x440 [ 287.802198][ T7894] ? __fget_files+0x21f/0x3d0 [ 287.802224][ T7894] security_file_ioctl+0xd3/0x230 [ 287.802247][ T7894] __x64_sys_ioctl+0xb7/0x210 [ 287.802268][ T7894] do_syscall_64+0x123/0x790 [ 287.802292][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.802309][ T7894] RIP: 0033:0x7f9830f9e559 [ 287.802322][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.802336][ T7894] RSP: 002b:00007f9831e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.802352][ T7894] RAX: ffffffffffffffda RBX: 00007f9831225fa0 RCX: 00007f9830f9e559 [ 287.802363][ T7894] RDX: 0000200000000640 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 287.802372][ T7894] RBP: 00007f9831e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 287.802382][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.802391][ T7894] R13: 00007f9831226038 R14: 00007f9831225fa0 R15: 00007ffcd691fd58 [ 287.802413][ T7894] [ 287.802489][ T7894] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.850623][ T31] audit: type=1400 audit(1792110150.263:586): avc: denied { ioctl } for pid=7890 comm="syz.3.486" path="/100/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 287.926123][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 287.926376][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 287.929256][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 287.929515][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 287.953114][ T83] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.955447][ T83] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.955501][ T83] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.955541][ T83] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.036334][ T7891] ceph: No mds server is up or the cluster is laggy [ 289.560287][ T7904] netlink: 'syz.0.488': attribute type 7 has an invalid length. [ 289.560318][ T7904] netlink: 'syz.0.488': attribute type 5 has an invalid length. [ 289.560329][ T7904] netlink: 17 bytes leftover after parsing attributes in process `syz.0.488'. [ 289.563799][ T7904] netlink: 400 bytes leftover after parsing attributes in process `syz.0.488'. [ 289.670741][ T31] audit: type=1400 audit(1792110152.134:587): avc: denied { read } for pid=7906 comm="syz.1.490" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.095563][ T7910] ceph: No mds server is up or the cluster is laggy [ 290.154903][ T943] libceph: connect (1)[c::]:6789 error -101 [ 290.155890][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 290.320644][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 290.333785][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 290.614044][ T943] libceph: connect (1)[c::]:6789 error -101 [ 290.617713][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 290.674528][ T30] usb 2-1: device descriptor read/64, error -32 [ 291.024483][ T30] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 291.229505][ T30] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 291.229555][ T30] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 291.231704][ T30] usb 2-1: config index 0 descriptor too short (expected 45, got 28) [ 291.231733][ T30] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 291.231766][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.233925][ T30] usb 2-1: config index 1 descriptor too short (expected 45, got 28) [ 291.233963][ T30] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 291.234025][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.245094][ T30] usb 2-1: config index 2 descriptor too short (expected 45, got 28) [ 291.245136][ T30] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 291.245203][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.288061][ T30] usb 2-1: config index 3 descriptor too short (expected 45, got 28) [ 291.288116][ T30] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 291.288180][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.348599][ T30] usb 2-1: config index 4 descriptor too short (expected 45, got 28) [ 291.348618][ T30] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 291.348664][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.367881][ T30] usb 2-1: config index 5 descriptor too short (expected 45, got 28) [ 291.367910][ T30] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 291.367944][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.398863][ T30] usb 2-1: config index 6 descriptor too short (expected 45, got 28) [ 291.398883][ T30] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 291.398928][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.464314][ T30] usb 2-1: config index 7 descriptor too short (expected 45, got 28) [ 291.464610][ T30] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 291.464747][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.788611][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.872918][ T30] usb 2-1: Product: syz [ 291.872957][ T30] usb 2-1: Manufacturer: syz [ 291.872986][ T30] usb 2-1: SerialNumber: syz [ 291.913575][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 291.913941][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 291.919735][ T30] rtl8150 2-1:1.0: couldn't find required endpoints [ 291.920043][ T30] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 292.056469][ T7917] ceph: No mds server is up or the cluster is laggy [ 292.216065][ T7907] FAULT_INJECTION: forcing a failure. [ 292.216065][ T7907] name failslab, interval 1, probability 0, space 0, times 0 [ 292.216101][ T7907] CPU: 0 UID: 0 PID: 7907 Comm: syz.1.490 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.216126][ T7907] Tainted: [L]=SOFTLOCKUP [ 292.216133][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 292.216144][ T7907] Call Trace: [ 292.216150][ T7907] [ 292.216158][ T7907] dump_stack_lvl+0x100/0x190 [ 292.216189][ T7907] should_fail_ex.cold+0x5/0xa [ 292.216216][ T7907] should_failslab+0xc2/0x120 [ 292.216248][ T7907] __kmalloc_cache_noprof+0x91/0x6d0 [ 292.216269][ T7907] ? bpf_int_jit_compile+0x1304/0x1820 [ 292.216299][ T7907] bpf_int_jit_compile+0x1304/0x1820 [ 292.216332][ T7907] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 292.216373][ T7907] __bpf_prog_select_runtime+0x8c3/0xc60 [ 292.216396][ T7907] ? __asan_memcpy+0x3c/0x60 [ 292.216418][ T7907] bpf_prepare_filter+0xd32/0x11e0 [ 292.216440][ T7907] ? __pfx_seccomp_check_filter+0x10/0x10 [ 292.216471][ T7907] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 292.216493][ T7907] ? __asan_memcpy+0x3c/0x60 [ 292.216514][ T7907] ? kmemdup_noprof+0x49/0x60 [ 292.216538][ T7907] bpf_prog_create_from_user+0x1df/0x2e0 [ 292.216560][ T7907] ? __pfx_seccomp_check_filter+0x10/0x10 [ 292.216589][ T7907] do_seccomp+0x870/0x27c0 [ 292.216613][ T7907] ? __pfx_do_seccomp+0x10/0x10 [ 292.216631][ T7907] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 292.216657][ T7907] ? xfd_validate_state+0x129/0x190 [ 292.216687][ T7907] do_syscall_64+0x123/0x790 [ 292.216716][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.216734][ T7907] RIP: 0033:0x7f3efcf9e559 [ 292.216749][ T7907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.216766][ T7907] RSP: 002b:00007f3efb1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 292.216784][ T7907] RAX: ffffffffffffffda RBX: 00007f3efd225fa0 RCX: 00007f3efcf9e559 [ 292.216796][ T7907] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000000000000001 [ 292.216807][ T7907] RBP: 00007f3efd0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 292.216817][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.216827][ T7907] R13: 00007f3efd226038 R14: 00007f3efd225fa0 R15: 00007ffc381eb748 [ 292.216852][ T7907] [ 292.421404][ T1909] usb 2-1: USB disconnect, device number 16 [ 292.503437][ T5601] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 292.576699][ T7929] jffs2: notice: (7929) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 292.654481][ T5601] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.654523][ T5601] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 292.655382][ T5601] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.655400][ T5601] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 292.655434][ T5601] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 292.655464][ T5601] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 292.655495][ T5601] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 292.655517][ T5601] usb 4-1: config 1 interface 1 has no altsetting 0 [ 292.658290][ T5601] usb 4-1: string descriptor 0 read error: -22 [ 292.658385][ T5601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.112125][ T7937] openvswitch: netlink: Flow key attribute not present in set flow. [ 294.197902][ T31] audit: type=1400 audit(1792110156.664:588): avc: denied { setopt } for pid=7923 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 294.208415][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.208812][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.231859][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.232215][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.518624][ T31] audit: type=1400 audit(1792110156.984:589): avc: denied { mount } for pid=7941 comm="syz.0.499" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 294.973185][ T5601] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 294.973216][ T5601] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 294.973232][ T5601] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 295.269436][ T31] audit: type=1400 audit(1792110157.604:590): avc: denied { search } for pid=7941 comm="syz.0.499" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 295.269631][ T31] audit: type=1400 audit(1792110157.704:591): avc: denied { search } for pid=7941 comm="syz.0.499" name="per_cpu" dev="tracefs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 295.331989][ T31] audit: type=1400 audit(1792110157.794:592): avc: denied { search } for pid=7941 comm="syz.0.499" name="cpu0" dev="tracefs" ino=3858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 295.443527][ T7947] ceph: No mds server is up or the cluster is laggy [ 295.478231][ T31] audit: type=1400 audit(1792110157.944:593): avc: denied { search } for pid=7941 comm="syz.0.499" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 295.542425][ T30] libceph: connect (1)[c::]:6789 error -101 [ 295.600580][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 295.647477][ T31] audit: type=1400 audit(1792110158.064:594): avc: denied { search } for pid=7941 comm="syz.0.499" name="per_cpu" dev="tracefs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 295.647600][ T31] audit: type=1400 audit(1792110158.064:595): avc: denied { search } for pid=7941 comm="syz.0.499" name="cpu0" dev="tracefs" ino=3858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 295.666170][ T31] audit: type=1400 audit(1792110158.134:596): avc: denied { read append } for pid=7941 comm="syz.0.499" name="trace_pipe_raw" dev="tracefs" ino=3861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 295.865269][ T31] audit: type=1400 audit(1792110158.334:597): avc: denied { open } for pid=7941 comm="syz.0.499" path="/94/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 296.057840][ T30] libceph: connect (1)[c::]:6789 error -101 [ 296.126127][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 296.655014][ T5601] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 296.672981][ T5601] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 296.721717][ T5601] usb 4-1: USB disconnect, device number 11 [ 297.443404][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 297.959967][ T7974] FAULT_INJECTION: forcing a failure. [ 297.959967][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.960028][ T7974] CPU: 0 UID: 0 PID: 7974 Comm: syz.2.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.960053][ T7974] Tainted: [L]=SOFTLOCKUP [ 297.960060][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 297.960071][ T7974] Call Trace: [ 297.960078][ T7974] [ 297.960085][ T7974] dump_stack_lvl+0x100/0x190 [ 297.960116][ T7974] should_fail_ex.cold+0x5/0xa [ 297.960142][ T7974] _copy_from_user+0x2e/0xd0 [ 297.960168][ T7974] __sys_bpf+0x2f5/0x4a30 [ 297.960195][ T7974] ? __pfx___sys_bpf+0x10/0x10 [ 297.960214][ T7974] ? find_held_lock+0x2b/0x80 [ 297.960241][ T7974] ? get_pid_task+0xfc/0x250 [ 297.960264][ T7974] ? get_pid_task+0xfc/0x250 [ 297.960296][ T7974] ? find_held_lock+0x2b/0x80 [ 297.960328][ T7974] ? rcu_read_lock_any_held+0x6a/0x90 [ 297.960355][ T7974] ? find_held_lock+0x2b/0x80 [ 297.960381][ T7974] ? ksys_write+0x190/0x250 [ 297.960403][ T7974] ? ksys_write+0x190/0x250 [ 297.960424][ T7974] ? lock_acquire+0x1d1/0x380 [ 297.960462][ T7974] ? fput+0x7c/0x100 [ 297.960487][ T7974] ? ksys_write+0x1ac/0x250 [ 297.960511][ T7974] ? __x64_sys_bpf+0xce/0x140 [ 297.960531][ T7974] __x64_sys_bpf+0xce/0x140 [ 297.960551][ T7974] ? do_syscall_64+0xae/0x790 [ 297.960578][ T7974] do_syscall_64+0x123/0x790 [ 297.960605][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.960629][ T7974] RIP: 0033:0x7f1a9319e559 [ 297.960644][ T7974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.960661][ T7974] RSP: 002b:00007f1a9405c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.960680][ T7974] RAX: ffffffffffffffda RBX: 00007f1a93426270 RCX: 00007f1a9319e559 [ 297.960691][ T7974] RDX: 0000000000000008 RSI: 0000200000000380 RDI: 000000000000000b [ 297.960702][ T7974] RBP: 00007f1a9405c090 R08: 0000000000000000 R09: 0000000000000000 [ 297.960712][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.960723][ T7974] R13: 00007f1a93426308 R14: 00007f1a93426270 R15: 00007ffe89690158 [ 297.960747][ T7974] [ 298.326493][ T7974] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 299.296824][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 299.296843][ T31] audit: type=1400 audit(1792110161.764:610): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 299.669572][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 299.883944][ T31] audit: type=1400 audit(1792110162.354:611): avc: denied { mount } for pid=8001 comm="syz.4.510" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 299.987252][ T8004] CIFS: VFS: UNC: path must begin with // or \\ [ 299.987343][ T8004] Malformed UNC in devname [ 299.987343][ T8004] [ 299.987570][ T8004] CIFS: VFS: Malformed UNC in devname [ 300.101048][ T8005] FAULT_INJECTION: forcing a failure. [ 300.101048][ T8005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.101226][ T8005] CPU: 1 UID: 0 PID: 8005 Comm: syz.4.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.101253][ T8005] Tainted: [L]=SOFTLOCKUP [ 300.101259][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 300.101270][ T8005] Call Trace: [ 300.101276][ T8005] [ 300.101284][ T8005] dump_stack_lvl+0x100/0x190 [ 300.101313][ T8005] should_fail_ex.cold+0x5/0xa [ 300.101340][ T8005] _copy_from_user+0x2e/0xd0 [ 300.101366][ T8005] move_addr_to_kernel+0x65/0x170 [ 300.101393][ T8005] __sys_bind+0x11d/0x260 [ 300.101419][ T8005] ? __pfx___sys_bind+0x10/0x10 [ 300.101453][ T8005] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 300.101484][ T8005] __x64_sys_bind+0x72/0xb0 [ 300.101506][ T8005] ? lockdep_hardirqs_on+0x7d/0x110 [ 300.101532][ T8005] do_syscall_64+0x123/0x790 [ 300.101560][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.101579][ T8005] RIP: 0033:0x7fa77ff9e559 [ 300.101596][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.101613][ T8005] RSP: 002b:00007fa77e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 300.101632][ T8005] RAX: ffffffffffffffda RBX: 00007fa780226180 RCX: 00007fa77ff9e559 [ 300.101645][ T8005] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000007 [ 300.101656][ T8005] RBP: 00007fa77e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 300.101667][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.101678][ T8005] R13: 00007fa780226218 R14: 00007fa780226180 R15: 00007ffcea20c118 [ 300.101710][ T8005] [ 301.036684][ T8001] ima: policy update failed [ 301.044439][ T31] audit: type=1802 audit(1792110163.504:612): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.510" res=0 errno=0 [ 302.160695][ T8003] ima: policy update failed [ 302.161583][ T31] audit: type=1802 audit(1792110164.624:613): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.511" res=0 errno=0 [ 302.204285][ T31] audit: type=1400 audit(1792110164.674:614): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 302.836302][ T31] audit: type=1400 audit(1792110165.274:615): avc: denied { write } for pid=8009 comm="syz.2.513" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.909370][ T31] audit: type=1400 audit(1792110165.324:616): avc: denied { write } for pid=8010 comm="syz.4.512" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.909515][ T31] audit: type=1400 audit(1792110165.344:617): avc: denied { write } for pid=8010 comm="syz.4.512" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.934517][ T5610] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 302.934783][ T5610] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 304.161171][ T31] audit: type=1400 audit(1792110166.354:618): avc: denied { write } for pid=8014 comm="syz.1.514" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 304.161229][ T31] audit: type=1400 audit(1792110166.604:619): avc: denied { write } for pid=8014 comm="syz.1.514" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 304.163348][ T51] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 305.629357][ T8029] xt_ipcomp: unknown flags 1D [ 305.705950][ T31] audit: type=1400 audit(1792110168.174:620): avc: denied { mount } for pid=8027 comm="syz.3.517" name="/" dev="autofs" ino=17389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 306.208814][ T31] audit: type=1400 audit(1792110168.674:621): avc: denied { write } for pid=8030 comm="syz.1.518" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 306.209738][ T51] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 306.874054][ T31] audit: type=1400 audit(1792110169.344:622): avc: denied { read } for pid=8032 comm="syz.4.519" name="sg0" dev="devtmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.128486][ T31] audit: type=1400 audit(1792110169.594:623): avc: denied { ioctl } for pid=8032 comm="syz.4.519" path="/dev/sg0" dev="devtmpfs" ino=1217 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.884688][ T8057] netlink: 'syz.1.524': attribute type 2 has an invalid length. [ 308.884712][ T8057] netlink: 224 bytes leftover after parsing attributes in process `syz.1.524'. [ 308.917373][ T31] audit: type=1400 audit(1792110171.385:624): avc: denied { write } for pid=8049 comm="syz.0.522" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 308.920057][ T31] audit: type=1400 audit(1792110171.385:625): avc: denied { open } for pid=8049 comm="syz.0.522" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 308.920144][ T8052] random: crng reseeded on system resumption [ 309.196093][ T8059] jffs2: notice: (8059) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 309.238940][ T31] audit: type=1400 audit(1792110171.705:626): avc: denied { write } for pid=8049 comm="syz.0.522" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.300102][ T31] audit: type=1400 audit(1792110171.765:627): avc: denied { read } for pid=8049 comm="syz.0.522" path="/96/mnt/fillfile" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 309.731631][ T31] audit: type=1400 audit(1792110172.135:628): avc: denied { write } for pid=8064 comm="syz.4.526" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.732034][ T51] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 310.541566][ T1906] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 310.841557][ T1906] usb 2-1: Using ep0 maxpacket: 32 [ 310.842234][ T1906] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 310.843108][ T1906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.843133][ T1906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.843153][ T1906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 310.843187][ T1906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.845471][ T1906] usb 2-1: config 0 descriptor?? [ 311.061558][ T31] audit: type=1400 audit(1792110173.415:629): avc: denied { write } for pid=8072 comm="syz.2.528" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.061687][ T31] audit: type=1400 audit(1792110173.435:630): avc: denied { write } for pid=8072 comm="syz.2.528" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.116989][ T51] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 311.659286][ T1906] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000E/input/input7 [ 311.701871][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.780055][ T1906] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000E/input/input8 [ 311.949325][ T1906] kye 0003:0458:5011.000E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 312.067839][ T31] audit: type=1400 audit(1792110174.535:631): avc: denied { connect } for pid=8081 comm="syz.0.530" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 312.218258][ T1906] usb 2-1: USB disconnect, device number 17 [ 312.407760][ T8082] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.437444][ T8085] fido_id[8085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 312.642589][ T31] audit: type=1400 audit(1792110175.115:632): avc: denied { override_creds } for pid=8088 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 312.951067][ T8093] jffs2: notice: (8093) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 313.184953][ T31] audit: type=1400 audit(1792110175.655:633): avc: denied { write } for pid=8094 comm="syz.2.534" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.185332][ T51] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 313.719105][ T8107] FAULT_INJECTION: forcing a failure. [ 313.719105][ T8107] name failslab, interval 1, probability 0, space 0, times 0 [ 313.719141][ T8107] CPU: 0 UID: 0 PID: 8107 Comm: syz.0.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.719165][ T8107] Tainted: [L]=SOFTLOCKUP [ 313.719171][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 313.719182][ T8107] Call Trace: [ 313.719188][ T8107] [ 313.719196][ T8107] dump_stack_lvl+0x100/0x190 [ 313.719228][ T8107] should_fail_ex.cold+0x5/0xa [ 313.719254][ T8107] should_failslab+0xc2/0x120 [ 313.719281][ T8107] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 313.719304][ T8107] ? __alloc_skb+0x5b7/0x710 [ 313.719331][ T8107] ? __alloc_skb+0x140/0x710 [ 313.719361][ T8107] __alloc_skb+0x140/0x710 [ 313.719386][ T8107] ? __alloc_skb+0x5b7/0x710 [ 313.719412][ T8107] ? __pfx___alloc_skb+0x10/0x10 [ 313.719445][ T8107] netlink_alloc_large_skb+0x69/0x150 [ 313.719475][ T8107] netlink_sendmsg+0x680/0xda0 [ 313.719512][ T8107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.719542][ T8107] ? selinux_socket_sendmsg+0x198/0x2f0 [ 313.719570][ T8107] ____sys_sendmsg+0xa4d/0xbe0 [ 313.719590][ T8107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.719619][ T8107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.719646][ T8107] ? lock_acquire+0x1d1/0x380 [ 313.719666][ T8107] ? get_pid_task+0x2a/0x250 [ 313.719693][ T8107] ___sys_sendmsg+0x190/0x1e0 [ 313.719717][ T8107] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.719741][ T8107] ? get_pid_task+0x106/0x250 [ 313.719774][ T8107] ? find_held_lock+0x2b/0x80 [ 313.719815][ T8107] __sys_sendmsg+0x160/0x210 [ 313.719835][ T8107] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.719867][ T8107] do_syscall_64+0x123/0x790 [ 313.719895][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.719913][ T8107] RIP: 0033:0x7fa0bc39e559 [ 313.719929][ T8107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.719945][ T8107] RSP: 002b:00007fa0bd2e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.719963][ T8107] RAX: ffffffffffffffda RBX: 00007fa0bc625fa0 RCX: 00007fa0bc39e559 [ 313.719975][ T8107] RDX: 0000000020000090 RSI: 0000200000000580 RDI: 0000000000000003 [ 313.719986][ T8107] RBP: 00007fa0bd2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.719996][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.720006][ T8107] R13: 00007fa0bc626038 R14: 00007fa0bc625fa0 R15: 00007ffc82583828 [ 313.720031][ T8107] [ 314.180326][ T31] audit: type=1400 audit(1792110176.645:634): avc: denied { map } for pid=8102 comm="syz.4.535" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 314.229650][ T31] audit: type=1400 audit(1792110176.695:635): avc: denied { transfer } for pid=8102 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 315.614678][ T31] audit: type=1400 audit(1792110178.045:636): avc: denied { write } for pid=8115 comm="syz.3.539" name="core" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 317.191412][ T943] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 317.239988][ T8131] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 317.341195][ T943] usb 4-1: Using ep0 maxpacket: 32 [ 317.342139][ T943] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 317.343483][ T943] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 317.343521][ T943] usb 4-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 317.343554][ T943] usb 4-1: config 0 has no interface number 0 [ 317.343617][ T943] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.346372][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.346423][ T943] usb 4-1: Product: syz [ 317.346437][ T943] usb 4-1: Manufacturer: syz [ 317.346467][ T943] usb 4-1: SerialNumber: syz [ 317.349925][ T943] usb 4-1: config 0 descriptor?? [ 317.370472][ T943] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input9 [ 317.544152][ T31] audit: type=1400 audit(1792110180.015:637): avc: denied { cmd } for pid=8125 comm="iou-wrk-8126" path="socket:[17687]" dev="sockfs" ino=17687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 317.544835][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 422.545184][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 422.552169][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8132/1:b..l [ 422.560074][ C0] rcu: (detected by 0, t=10502 jiffies, g=31577, q=425 ncpus=2) [ 422.567800][ C0] task:syz.0.544 state:R running task stack:26296 pid:8132 tgid:8129 ppid:5612 task_flags:0x400140 flags:0x00080000 [ 422.581286][ C0] Call Trace: [ 422.584642][ C0] [ 422.587578][ C0] __schedule+0x1259/0x6920 [ 422.592099][ C0] ? __pfx___schedule+0x10/0x10 [ 422.596947][ C0] ? htab_map_delete_elem+0x811/0xae0 [ 422.602317][ C0] ? htab_map_delete_elem+0x69c/0xae0 [ 422.607716][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 422.613196][ C0] preempt_schedule_common+0x3c/0xb0 [ 422.618484][ C0] preempt_schedule_thunk+0x16/0x40 [ 422.623699][ C0] ? bpf_test_run+0x2a4/0xa40 [ 422.628375][ C0] __local_bh_enable_ip+0x106/0x120 [ 422.633577][ C0] bpf_test_run+0x2a9/0xa40 [ 422.638081][ C0] ? bpf_test_run+0x1c6/0xa40 [ 422.642766][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 422.647790][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 422.653437][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 422.659427][ C0] ? 0xffffffffa0406080 [ 422.663570][ C0] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 422.669472][ C0] bpf_prog_test_run_xdp+0x8b4/0x1670 [ 422.674846][ C0] ? find_held_lock+0x2b/0x80 [ 422.679543][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 422.685448][ C0] ? fput+0x7c/0x100 [ 422.689346][ C0] ? __bpf_prog_get+0x97/0x290 [ 422.694161][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 422.699970][ C0] __sys_bpf+0x2265/0x4a30 [ 422.704391][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 422.709147][ C0] ? find_held_lock+0x2b/0x80 [ 422.713824][ C0] ? futex_wake+0x4ea/0x5e0 [ 422.718338][ C0] ? __fget_files+0x215/0x3d0 [ 422.723034][ C0] ? irqentry_exit+0x24d/0xa10 [ 422.727807][ C0] ? __x64_sys_bpf+0xce/0x140 [ 422.732482][ C0] __x64_sys_bpf+0xce/0x140 [ 422.736991][ C0] do_syscall_64+0x123/0x790 [ 422.741595][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.747515][ C0] RIP: 0033:0x7fa0bc39e559 [ 422.752026][ C0] RSP: 002b:00007fa0bd2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.760479][ C0] RAX: ffffffffffffffda RBX: 00007fa0bc625fa0 RCX: 00007fa0bc39e559 [ 422.768443][ C0] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 422.776413][ C0] RBP: 00007fa0bc4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 422.784375][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.792348][ C0] R13: 00007fa0bc626038 R14: 00007fa0bc625fa0 R15: 00007ffc82583828 [ 422.800325][ C0] [ 422.803336][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10495 jiffies! g31577 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 422.815295][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=20168 [ 422.823181][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g31577 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1 [ 422.834187][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 422.844142][ C0] rcu: RCU grace-period kthread stack dump: [ 422.850013][ C0] task:rcu_preempt state:I stack:28984 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 422.861931][ C0] Call Trace: [ 422.865203][ C0] [ 422.868144][ C0] __schedule+0x1259/0x6920 [ 422.872675][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 422.877639][ C0] ? __pfx___schedule+0x10/0x10 [ 422.882487][ C0] ? find_held_lock+0x2b/0x80 [ 422.887167][ C0] ? schedule+0x225/0x2c0 [ 422.891498][ C0] schedule+0xdd/0x2c0 [ 422.895573][ C0] schedule_timeout+0x127/0x280 [ 422.900418][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 422.905875][ C0] ? __pfx_process_timeout+0x10/0x10 [ 422.911158][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.916961][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 422.922416][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 422.927268][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 422.932550][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 422.937489][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 422.942687][ C0] ? rcu_is_watching+0x13/0xc0 [ 422.947453][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 422.953260][ C0] rcu_gp_kthread+0x17a/0x220 [ 422.957933][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 422.963125][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 422.968932][ C0] ? __kthread_parkme+0x18f/0x230 [ 422.973991][ C0] ? kthread+0x13a/0x450 [ 422.978258][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 422.983449][ C0] kthread+0x373/0x450 [ 422.987778][ C0] ? __pfx_kthread+0x10/0x10 [ 422.992385][ C0] ret_from_fork+0x730/0xd60 [ 422.996992][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 423.002106][ C0] ? __switch_to+0x800/0x10f0 [ 423.006786][ C0] ? __pfx_kthread+0x10/0x10 [ 423.011392][ C0] ret_from_fork_asm+0x1a/0x30 [ 423.016191][ C0] [ 423.019225][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 423.025533][ C0] Sending NMI from CPU 0 to CPUs 1: [ 423.030732][ C1] NMI backtrace for cpu 1 [ 423.030748][ C1] CPU: 1 UID: 0 PID: 8128 Comm: syz.3.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.030767][ C1] Tainted: [L]=SOFTLOCKUP [ 423.030772][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 423.030780][ C1] RIP: 0010:lock_release+0x8c/0x310 [ 423.030801][ C1] Code: 00 65 4c 8b 25 ad 18 a6 13 41 8b b4 24 a4 0b 00 00 85 f6 0f 85 23 01 00 00 48 81 3b 40 69 92 95 0f 84 16 01 00 00 9c 41 5e fa <48> c7 c7 9b a1 4d 8e e8 38 03 ed 09 65 ff 05 39 5f a6 13 8b 0d 5f [ 423.030814][ C1] RSP: 0018:ffffc90000a18e30 EFLAGS: 00000087 [ 423.030841][ C1] RAX: 0000000000000000 RBX: ffff8880b8328518 RCX: 0000000001000002 [ 423.030850][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 423.030858][ C1] RBP: ffffffff81f7c36b R08: 0000000000000001 R09: 0000000000000000 [ 423.030866][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802b684b00 [ 423.030875][ C1] R13: ffffffff89dc2b80 R14: 0000000000000087 R15: ffff8880b8328690 [ 423.030884][ C1] FS: 00007f9831e5e6c0(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 423.030898][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.030907][ C1] CR2: 000000110c3d203c CR3: 00000000354a9000 CR4: 00000000003526f0 [ 423.030916][ C1] Call Trace: [ 423.030922][ C1] [ 423.030930][ C1] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 423.030949][ C1] __hrtimer_run_queues+0x37b/0x9c0 [ 423.030973][ C1] hrtimer_interrupt+0x441/0xaa0 [ 423.030991][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 423.031010][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 423.031029][ C1] [ 423.031033][ C1] [ 423.031038][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.031053][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 423.031071][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 1a 10 f6 48 89 df e8 3e 71 10 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 54 ff f5 65 48 83 3d b4 33 b6 09 00 74 16 5b [ 423.031082][ C1] RSP: 0018:ffffc900037f7d80 EFLAGS: 00000246 [ 423.031093][ C1] RAX: 0000000000000006 RBX: ffffffff9c9b5438 RCX: 0000000000000000 [ 423.031101][ C1] RDX: 0000000000000001 RSI: ffffffff8e3e347e RDI: ffffffff8c625580 [ 423.031109][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 423.031117][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff920006fefb7 [ 423.031125][ C1] R13: 000000000c64259b R14: 000000000c64259b R15: 0000000000000000 [ 423.031141][ C1] do_settimeofday64+0x326/0x4d0 [ 423.031158][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 423.031173][ C1] ? security_capable+0x80/0x260 [ 423.031188][ C1] ? sdio_bus_probe+0x17d/0x490 [ 423.031214][ C1] ? capable+0xd3/0xf0 [ 423.031228][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 423.031246][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 423.031261][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 423.031278][ C1] do_syscall_64+0x123/0x790 [ 423.031298][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.031311][ C1] RIP: 0033:0x7f9830f9e559 [ 423.031323][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.031335][ C1] RSP: 002b:00007f9831e5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 423.031348][ C1] RAX: ffffffffffffffda RBX: 00007f9831225fa0 RCX: 00007f9830f9e559 [ 423.031357][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 423.031365][ C1] RBP: 00007f98310358b0 R08: 0000000000000000 R09: 0000000000000000 [ 423.031373][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.031381][ C1] R13: 00007f9831226038 R14: 00007f9831225fa0 R15: 00007ffcd691fd58 [ 423.031395][ C1]