last executing test programs: 32.884522104s ago: executing program 0 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000004500)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f000001d500)={0x40000000, 0x0, &(0x7f000001d540)={&(0x7f000001d580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000001d5c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000001d640)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f000001d740), 0x800001d, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) 26.941535589s ago: executing program 0 (id=684): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000e00), 0x2, 0x141102) writev(r0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9c0000000906030000000000000000000000000a5c0008801c0007801800168014000240ff0100000000000000000000000000010c00078008000a4000000007100007800c001940000000e8324cb6bfea070b8009"], 0x9c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x38, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffc, 0x17, 0x8, 0x2000, 0x2, 0x4, 0x900d]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x68, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f00000012c0)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001380)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') read$FUSE(r7, &(0x7f0000003540)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000003440)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000034c0)={0x1, &(0x7f0000003500)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 25.383216938s ago: executing program 3 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000004240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001d240)=0x7) r4 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r4, 0x9, 0x1, 0x0, r4, 0x2) futex(r4, 0x3, 0x1, 0x0, r4, 0x1) 25.371144305s ago: executing program 4 (id=689): r0 = socket(0x10, 0x2, 0x0) io_uring_setup(0x1c37, &(0x7f0000000300)={0x0, 0xa46d, 0x0, 0x2, 0x188}) r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newchain={0x24, 0x64, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {0x5, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000580)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000680)={0x20, 0x6, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.626100586s ago: executing program 2 (id=691): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wlan1\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x1}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="68000000000905040000000000000000020000000900010073797a30000000001400028006000100000200000500020006", 0x31}], 0x1}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000700)={r1}, 0xfffffffffffffecc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x100) mkdir(&(0x7f0000000780)='./file0\x00', 0x184) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f00000007c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000008c0)='./bus\x00') r5 = syz_open_dev$sndmidi(&(0x7f0000000900), 0x2, 0x121c81) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) ioctl$STOP_ARRAY(r1, 0x932, 0x0) r6 = open(&(0x7f00000009c0)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000a00)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000ac0), 0x7f03) sendmsg$netlink(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000005e0001", @ANYRES64], 0x1c}], 0x1, 0x0, 0x0, 0x805}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 20.274039399s ago: executing program 3 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000019540)={0x0, 0x0, &(0x7f0000019580)=[{&(0x7f00000195c0)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x11, 0xd, &(0x7f0000019440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9b}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000194c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000019500)={r2}, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000193c0)="b56dcd3292ead749402288086b8d47bdf2d59a220270bdd2e2", 0x19) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000191c0)=0x40003) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000019240), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x20) 19.98770281s ago: executing program 4 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9c, 0x0, 0x0, 0x40000000}, {}, {0x3, 0x7}, {}, {0x0, 0x5a}, {}, {0x6, 0x0, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) mkdir(&(0x7f0000000600)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) bind$netlink(r1, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r5, 0x0) mlockall(0x2) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000700)='wg2\x00') openat2(r1, &(0x7f0000000740)='./cgroup/../file0\x00', &(0x7f0000000780)={0x2000, 0xc88f7bfa456ed010, 0x1}, 0x18) openat$cgroup_pressure(r1, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000800)={0x18, 0x0, {0xffff, @broadcast, 'vlan1\x00'}}, 0x1e) clock_gettime(0x0, &(0x7f0000000840)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 19.925624307s ago: executing program 0 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f000001d500)={0x40000000, 0x0, &(0x7f000001d540)={&(0x7f000001d580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f000001d5c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f000001d640)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f000001d740), 0x800001d, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) 18.774246245s ago: executing program 0 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000019540)={0x0, 0x0, &(0x7f0000019580)=[{&(0x7f00000195c0)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x11, 0xd, &(0x7f0000019440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9b}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000194c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000019500)={r1}, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000193c0)="b56dcd3292ead749402288086b8d47bdf2d59a220270bdd2e2", 0x19) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f00000001c0)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000191c0)=0x40003) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000019240), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x20) 16.842025756s ago: executing program 2 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x4a, {0x2, 0x0, @dev}}) 15.85363475s ago: executing program 1 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000004500)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f000001d500)={0x40000000, 0x0, &(0x7f000001d540)={&(0x7f000001d580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f000001d5c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f000001d600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f000001d640)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f000001d740), 0x800001d, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001d780)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 14.862353175s ago: executing program 1 (id=699): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000021b000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00003fd000/0x2000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000500), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='0', 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000680)={0x0, 0x200000}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000940)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) 14.32416869s ago: executing program 4 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000001d80)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f000001b000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)='X', 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xfa, 0x7, 0xb, 0x2, 0x5, 0xe, 0x4, 0x6, 0x7, 0x7, 0x7, 0x5, 0x85, 0x3f}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) 12.906880282s ago: executing program 0 (id=701): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [{0x8, 0x5}], {0x10, 0x6}, {0x20, 0x2}}, 0x2c, 0x3) getxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00', &(0x7f0000000340)=""/47, 0x2f) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) 12.1297006s ago: executing program 3 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000001d80)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f000001b000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)='X', 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xfa, 0x7, 0xb, 0x2, 0x5, 0xe, 0x4, 0x6, 0x7, 0x7, 0x7, 0x5, 0x85, 0x3f}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x10001, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) write$P9_RSTATu(r4, &(0x7f000001b140)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) 10.95845041s ago: executing program 4 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000004240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001d240)=0x7) r4 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r4, 0x9, 0x1, 0x0, r4, 0x2) futex(r4, 0x3, 0x1, 0x0, r4, 0x1) 10.936483879s ago: executing program 2 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000004500)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f000001d500)={0x40000000, 0x0, &(0x7f000001d540)={&(0x7f000001d580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000001d5c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000001d640)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f000001d740), 0x800001d, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) 10.913406696s ago: executing program 3 (id=705): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000e00), 0x2, 0x141102) writev(r0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9c0000000906030000000000000000000000000a5c0008801c0007801800168014000240ff0100000000000000000000000000010c00078008000a4000000007100007800c001940000000e8324cb6bfea070b8009"], 0x9c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x38, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffc, 0x17, 0x8, 0x2000, 0x2, 0x4, 0x900d]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x68, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f00000012c0)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001380)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') read$FUSE(r7, &(0x7f0000003540)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000003440)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000034c0)={0x1, &(0x7f0000003500)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 10.055968889s ago: executing program 4 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f000001d500)={0x40000000, 0x0, &(0x7f000001d540)={&(0x7f000001d580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f000001d5c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f000001d640)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f000001d740), 0x800001d, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) 9.293886843s ago: executing program 2 (id=707): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a600000000b0a0102000000000000000001000001080003400000008008000f400000000008000340000000200900010073797a310000000027000d40b1efbc487adad81450cddbfaf6308ad9e3276657792377af9437373eb042da2e7f07a400240000000b0a010200000000000000000500000a0800074000000003080004400000000270010000160a01040000000000000000020000050900010073797a3000000000240103809000038014000100687372300000000000000000000000001400010076657468315f766972745f77696669001400010076657468305f766c616e00000000000014000100697036746e6c300000000000000000001400010068737230000000000000000000000000140001006d6163767461703000000000000000001400010064756d6d7930000000000000001b00009000038014000100766972745f776966693000000000000014000100626f6e645f736c6176655f310000000014000100766574683100000000000000000000001400010069703665727370616e300000000000001400010076657468305f6d616376746170000000140001006272696467655f736c6176655f3100001400010076657468305f746f5f7465616d00000008000740000000010c00054000000000000000040900020073797a30"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)={0x40, 0x14, 0x4, "008b35a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 9.139129125s ago: executing program 3 (id=708): r0 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x35, 0x2d, 0x38, 0x39, 0x30, 0x34, 0x62, 0x35, 0x62, 0x30, 0x61, 0x30, 0x30, 0x30, 0x0, 0x37]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x37}, 0x48, r0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="f8", 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r7, &(0x7f0000000fc0)=""/102392, 0x18ff8) unlink(&(0x7f0000000040)='./cgroup\x00') sched_setaffinity(r6, 0x47, &(0x7f0000019fc0)=0x7) r8 = syz_open_dev$dri(0x0, 0xe, 0x400000) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f000001a000)={0xa6c, 0x5, {r6}, {}, 0x65b49b38, 0x7f2}) bpf$PROG_LOAD(0x5, &(0x7f000001a040)={0x2, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000070000000000000053a0000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181b0000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f000001a140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xcf) keyctl$revoke(0x3, r3) keyctl$link(0x8, r0, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000000)={@local}, &(0x7f00000001c0)=0x14) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180), 0x808, &(0x7f0000000140)={[{@verity_require}, {@index_off}]}) 7.748000943s ago: executing program 3 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000004500)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f000001d500)={0x40000000, 0x0, &(0x7f000001d540)={&(0x7f000001d580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f000001d5c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f000001d600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f000001d640)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f000001d740), 0x800001d, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001d780)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r6, 0x801c582d, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000040601010000001aa99c45000700000d0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 6.831928121s ago: executing program 1 (id=710): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0xf32}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000191c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000019200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000019240), 0x0, 0x0) read$msr(r3, &(0x7f0000019480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000032480)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x800) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000324c0)=[{&(0x7f0000032500)="580000001400192340834b80040d8c560a117436c37900000ec00100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000325c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000032600)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000032640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) dup3(r7, r6, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x10000000000) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 5.608286625s ago: executing program 1 (id=711): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000021b000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00003fd000/0x2000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000500), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)="1670a708c24eb4c493b7a2eef9e509dc20edf29ec5718d2e5a499487f0e1c9a632fe0c8b2d6ce27c8ec44109bd03051aad8881391b6aea8b77a8a8c1e51f4140912ed367358eba573601a71519ffb2e205fd9a80a5374caa0290d2467e7705509170a97559d1b4c64c3ad61394c5e10d9c826d6667ecc36ee46d0a90bde44b13c75f19769b18054b0737a33c2f10ee9bf5f50cf698f93bb555961bb6d9323095dc4e67fa9ef5e054e94ae2ccfd007396e081007381e6e6b755208c4f8e0e1180af415e0936ee4596fc88839954f744e4beec898fd8b6c32db762ac67b470cbc885bd5b028f9b8671d8d204354d08362d835c35df00"/258, 0x102) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000680)={0x0, 0x200000}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3ff, 0x2, 0xb5}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000140)={0x20004, r4}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)={r8}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000940)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) 5.525074262s ago: executing program 2 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000004500)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f000001d500)={0x40000000, 0x0, &(0x7f000001d540)={&(0x7f000001d580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f000001d5c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f000001d600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f000001d640)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f000001d740), 0x800001d, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001d780)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.060616976s ago: executing program 4 (id=713): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000004500)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f000001d5c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f000001d600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f000001d640)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f000001d740), 0x800001d, 0x1c) 2.342195828s ago: executing program 2 (id=714): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000019640), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000019680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000019b40)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x1a3d0b62f67633dd, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@flakey={0x0, 0x2080, 0x0, 0x68, 'flakey\x00', {{@rnull={'/dev/syzrnull', 0x0}, 0x20, '4096'}, 0x20, 0x3, 0x20, 0x3}}]}) 1.085437382s ago: executing program 0 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x4a, {0x2, 0x0, @dev}}) 1.082890513s ago: executing program 1 (id=716): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000380)='source', &(0x7f00000003c0)='source', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000740)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) mount(0x0, &(0x7f00000007c0)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='trace/events/sched/sched_switch/filter\x00', 0x1, 0xb2) write(r6, &(0x7f0000000880), 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000008c0)=[{0x3, 0x2, 0x75, 0x7, @tick=0x6, {0x3, 0x81}, {0x4, 0x4}, @control={0x0, 0x401}}], 0x1c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x4, 0x5, 0xa, 0x8, 0x9, 0xecb7, 0x1041, 0x4, 0x0, 0x0, 0x2000003, 0x2000000100000002, 0x49, 0x9, 0x800005, 0x6b], 0xd000, 0x101052}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 1 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000004240)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f000001d240)=0x7) r3 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r3, 0x9, 0x1, 0x0, r3, 0x2) futex(r3, 0x3, 0x1, 0x0, r3, 0x1) kernel console output (not intermixed with test programs): +0x77/0x7f [ 291.119060][ T7489] RIP: 0033:0x7f910255fd8e [ 291.119070][ T7489] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.119081][ T7489] RSP: 002b:00007f9103384fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.119093][ T7489] RAX: ffffffffffffffda RBX: 00007f91033856c0 RCX: 00007f910255fd8e [ 291.119100][ T7489] RDX: 000000000000000f RSI: 00007f91033850a0 RDI: 0000000000000004 [ 291.119107][ T7489] RBP: 00007f9103385090 R08: 0000000000000000 R09: 0000000000000000 [ 291.119114][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.119120][ T7489] R13: 00007f9102826038 R14: 00007f9102825fa0 R15: 00007fff30491a38 [ 291.119136][ T7489] [ 291.170067][ T7481] device-mapper: table: 248:1: integrity: Not enough provided sectors for requested mapping size (-EINVAL) [ 291.170092][ T7481] device-mapper: ioctl: error adding target to table [ 291.407321][ T24] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 291.425114][ T24] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 291.425143][ T24] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 291.425162][ T24] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 291.500847][ T24] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 291.527267][ T24] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 291.547016][ T24] usb 2-1: USB disconnect, device number 10 [ 291.639082][ T7462] udevd[7462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.339729][ T7494] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=7494 comm=syz.1.305 [ 294.122067][ T7501] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=7501 comm=syz.3.307 [ 296.332764][ T7525] rxe_eth0 speed is unknown, defaulting to 1000 [ 297.647923][ T7534] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=7534 comm=syz.0.311 [ 300.267844][ T7560] rxe_eth0 speed is unknown, defaulting to 1000 [ 301.918112][ T7571] binder: 7567:7571 ioctl c0306201 0 returned -14 [ 303.297852][ T5752] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 303.478175][ T5752] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.478203][ T5752] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 303.507212][ T5752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.507238][ T5752] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 303.507261][ T5752] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 303.507286][ T5752] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 303.507307][ T5752] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 303.507321][ T5752] usb 1-1: config 1 interface 1 has no altsetting 0 [ 303.617175][ T5752] usb 1-1: string descriptor 0 read error: -22 [ 303.617248][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.430602][ T7588] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=7588 comm=syz.3.319 [ 307.960653][ T5727] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 308.141786][ T5727] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 308.157119][ T5727] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.157142][ T5727] usb 5-1: config 0 has no interface number 0 [ 308.210307][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.210334][ T5727] usb 5-1: Product: syz [ 308.210350][ T5727] usb 5-1: Manufacturer: syz [ 308.210364][ T5727] usb 5-1: SerialNumber: syz [ 308.243625][ T5727] usb 5-1: config 0 descriptor?? [ 308.505264][ T5727] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 308.535231][ T5727] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 308.535451][ T5727] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 308.535478][ T5727] usb 5-1: media controller created [ 308.662747][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.685329][ T7597] FAULT_INJECTION: forcing a failure. [ 308.685329][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 308.685372][ T7597] CPU: 0 UID: 0 PID: 7597 Comm: syz.1.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.685389][ T7597] Tainted: [L]=SOFTLOCKUP [ 308.685393][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 308.685400][ T7597] Call Trace: [ 308.685405][ T7597] [ 308.685409][ T7597] dump_stack_lvl+0x100/0x190 [ 308.685430][ T7597] should_fail_ex.cold+0x5/0xa [ 308.685457][ T7597] should_failslab+0xc2/0x120 [ 308.685483][ T7597] kmem_cache_alloc_noprof+0x92/0x6a0 [ 308.685506][ T7597] ? do_getname_kernel+0x5d/0x250 [ 308.685533][ T7597] do_getname_kernel+0x5d/0x250 [ 308.685552][ T7597] split_huge_pages_write+0x12cc/0x2300 [ 308.685569][ T7597] ? lock_acquire+0x1d1/0x380 [ 308.685585][ T7597] ? is_bpf_text_address+0x25/0x1a0 [ 308.685606][ T7597] ? __pfx_split_huge_pages_write+0x10/0x10 [ 308.685628][ T7597] ? is_bpf_text_address+0x8a/0x1a0 [ 308.685649][ T7597] ? bpf_ksym_find+0x128/0x1c0 [ 308.685669][ T7597] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.685684][ T7597] ? is_bpf_text_address+0x94/0x1a0 [ 308.685695][ T7597] ? kernel_text_address+0x8d/0x100 [ 308.685706][ T7597] ? fast_dput+0x494/0x6f0 [ 308.685718][ T7597] ? __kernel_text_address+0xd/0x30 [ 308.685729][ T7597] ? unwind_get_return_address+0x59/0xa0 [ 308.685758][ T7597] ? arch_stack_walk+0xa6/0xf0 [ 308.685812][ T7597] ? register_lock_class+0x3f/0x7b0 [ 308.685826][ T7597] ? __lock_acquire+0x5c0/0x1f40 [ 308.685855][ T7597] ? __pfx___debugfs_file_get+0x10/0x10 [ 308.685877][ T7597] ? lock_acquire+0x1d1/0x380 [ 308.685899][ T7597] ? ksys_write+0x12a/0x250 [ 308.685926][ T7597] full_proxy_write+0x135/0x1a0 [ 308.685949][ T7597] vfs_write+0x2aa/0x1050 [ 308.685965][ T7597] ? __pfx_full_proxy_write+0x10/0x10 [ 308.685975][ T7597] ? lock_acquire+0x1d1/0x380 [ 308.685988][ T7597] ? __fget_files+0x34/0x3d0 [ 308.686004][ T7597] ? __pfx_vfs_write+0x10/0x10 [ 308.686017][ T7597] ? find_held_lock+0x2b/0x80 [ 308.686035][ T7597] ? __fget_files+0x215/0x3d0 [ 308.686067][ T7597] ? __fget_files+0x21f/0x3d0 [ 308.686100][ T7597] ksys_write+0x12a/0x250 [ 308.686114][ T7597] ? __pfx_ksys_write+0x10/0x10 [ 308.686131][ T7597] do_syscall_64+0x123/0x790 [ 308.686152][ T7597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.686165][ T7597] RIP: 0033:0x7f8105b9f559 [ 308.686182][ T7597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.686199][ T7597] RSP: 002b:00007f8106a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.686218][ T7597] RAX: ffffffffffffffda RBX: 00007f8105e25fa0 RCX: 00007f8105b9f559 [ 308.686231][ T7597] RDX: 0000000000000017 RSI: 0000200000002540 RDI: 0000000000000003 [ 308.686242][ T7597] RBP: 00007f8106a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 308.686250][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.686257][ T7597] R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948 [ 308.686273][ T7597] [ 309.028133][ T5752] usb 1-1: 2:0: failed to get current value for ch 0 (-110) [ 309.047069][ T5752] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 309.047095][ T5752] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 309.047112][ T5752] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 309.103619][ T5752] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 309.124478][ T5752] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 309.174272][ T5727] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 310.406560][ T5727] usb 5-1: USB disconnect, device number 9 [ 311.134977][ T7610] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=7610 comm=syz.2.317 [ 312.302677][ T29] usb 1-1: USB disconnect, device number 8 [ 312.503462][ T6818] syz.0.184 (6818) used greatest stack depth: 18120 bytes left [ 314.941489][ T5727] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 315.089133][ T5727] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 315.090052][ T5727] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.090075][ T5727] usb 1-1: config 0 has no interface number 0 [ 315.123474][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.123500][ T5727] usb 1-1: Product: syz [ 315.124039][ T5727] usb 1-1: Manufacturer: syz [ 315.124055][ T5727] usb 1-1: SerialNumber: syz [ 315.152102][ T5727] usb 1-1: config 0 descriptor?? [ 315.214740][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 315.233301][ T29] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.377555][ T5727] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 315.403646][ T5727] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 315.403796][ T5727] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 315.403819][ T5727] usb 1-1: media controller created [ 315.537171][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.656892][ T5727] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 315.876385][ T5727] usb 1-1: USB disconnect, device number 9 [ 316.694498][ T7652] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.138339][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.138387][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.660026][ T7651] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.403073][ T7688] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=7688 comm=syz.3.333 [ 323.559576][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 323.559589][ T30] audit: type=1400 audit(1792847377.456:648): avc: denied { setopt } for pid=7724 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 325.533094][ T5830] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 326.424043][ T5830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.424072][ T5830] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 326.448913][ T5830] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.448930][ T5830] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 326.448953][ T5830] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 326.448973][ T5830] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 326.448994][ T5830] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 326.449008][ T5830] usb 2-1: config 1 interface 1 has no altsetting 0 [ 326.527686][ T5830] usb 2-1: string descriptor 0 read error: -22 [ 326.536107][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.643564][ T30] audit: type=1400 audit(1792847381.526:649): avc: denied { accept } for pid=7749 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.949530][ T5830] usb 2-1: 2:0: failed to get current value for ch 0 (-110) [ 331.984202][ T5830] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 331.984220][ T5830] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 331.984230][ T5830] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 332.170394][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 332.243813][ T5830] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 332.926895][ T7788] rxe_eth0 speed is unknown, defaulting to 1000 [ 333.825871][ T9] usb 4-1: device not accepting address 9, error -71 [ 333.833503][ T5830] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 334.183085][ T1598] usb 2-1: USB disconnect, device number 11 [ 344.932091][ T988] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 345.061443][ T7860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.356'. [ 345.090891][ T988] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 345.092232][ T988] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.092283][ T988] usb 2-1: config 0 has no interface number 0 [ 345.250401][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.250479][ T988] usb 2-1: Product: syz [ 345.250524][ T988] usb 2-1: Manufacturer: syz [ 345.250563][ T988] usb 2-1: SerialNumber: syz [ 345.427889][ T988] usb 2-1: config 0 descriptor?? [ 345.678475][ T988] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 345.835513][ T988] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 345.835777][ T988] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 345.835822][ T988] usb 2-1: media controller created [ 345.927167][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.971804][ T5727] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 347.005073][ T7860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.073975][ T7860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.083809][ T988] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 347.104609][ T7860] bond0 (unregistering): Released all slaves [ 347.195140][ T988] usb 2-1: USB disconnect, device number 12 [ 350.847887][ T7880] syz.3.353 uses obsolete (PF_INET,SOCK_PACKET) [ 351.351496][ T5727] usb 5-1: device descriptor read/all, error -71 [ 353.763935][ T7887] rxe_eth0 speed is unknown, defaulting to 1000 [ 358.757933][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 358.934841][ T29] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 358.935760][ T29] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 358.935776][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.935787][ T29] usb 1-1: config 0 has no interface number 0 [ 358.935807][ T29] usb 1-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.948844][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.948867][ T29] usb 1-1: Product: syz [ 358.948881][ T29] usb 1-1: Manufacturer: syz [ 358.948895][ T29] usb 1-1: SerialNumber: syz [ 359.022858][ T29] usb 1-1: config 0 descriptor?? [ 359.037160][ T29] yurex 1-1:0.50: Could not find endpoints [ 359.239817][ T30] audit: type=1400 audit(1792847413.136:650): avc: denied { create } for pid=7927 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 359.239867][ T30] audit: type=1400 audit(1792847413.136:651): avc: denied { ioctl } for pid=7927 comm="syz.0.366" path="socket:[14896]" dev="sockfs" ino=14896 ioctlcmd=0x400261f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 360.091981][ T7938] jffs2: notice: (7938) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 360.114965][ T29] usb 1-1: USB disconnect, device number 10 [ 360.145544][ T30] audit: type=1400 audit(1792847414.036:652): avc: denied { write } for pid=7933 comm="syz.1.368" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.042716][ T7946] FAULT_INJECTION: forcing a failure. [ 361.042716][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.042752][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.3.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.042771][ T7946] Tainted: [L]=SOFTLOCKUP [ 361.042775][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 361.042784][ T7946] Call Trace: [ 361.042788][ T7946] [ 361.042793][ T7946] dump_stack_lvl+0x100/0x190 [ 361.042815][ T7946] should_fail_ex.cold+0x5/0xa [ 361.042832][ T7946] _copy_from_user+0x2e/0xd0 [ 361.042844][ T7946] copy_msghdr_from_user+0x9f/0x4c0 [ 361.042862][ T7946] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 361.042883][ T7946] ? lock_acquire+0x1d1/0x380 [ 361.042897][ T7946] ? get_pid_task+0x2a/0x250 [ 361.042914][ T7946] ___sys_sendmsg+0x106/0x1e0 [ 361.042932][ T7946] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.042948][ T7946] ? get_pid_task+0x106/0x250 [ 361.042969][ T7946] ? find_held_lock+0x2b/0x80 [ 361.042989][ T7946] __sys_sendmsg+0x160/0x210 [ 361.043002][ T7946] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.043023][ T7946] do_syscall_64+0x123/0x790 [ 361.043042][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.043054][ T7946] RIP: 0033:0x7f910259f559 [ 361.043064][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.043075][ T7946] RSP: 002b:00007f9103385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.043089][ T7946] RAX: ffffffffffffffda RBX: 00007f9102825fa0 RCX: 00007f910259f559 [ 361.043097][ T7946] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000007 [ 361.043103][ T7946] RBP: 00007f9103385090 R08: 0000000000000000 R09: 0000000000000000 [ 361.043111][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.043117][ T7946] R13: 00007f9102826038 R14: 00007f9102825fa0 R15: 00007fff30491a38 [ 361.043132][ T7946] [ 363.287990][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 364.190292][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 364.190323][ T29] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 364.192061][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.192083][ T29] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 364.192122][ T29] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 364.192156][ T29] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 364.192190][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 364.192217][ T29] usb 5-1: config 1 interface 1 has no altsetting 0 [ 364.285999][ T29] usb 5-1: string descriptor 0 read error: -22 [ 364.286115][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.339096][ T7985] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.553248][ T29] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 365.577184][ T29] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 365.577201][ T29] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 365.577211][ T29] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 365.767160][ T29] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 366.000465][ T7991] ip_tables: iptables: counters copy to user failed while replacing table [ 366.014062][ T29] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 366.245657][ T29] usb 5-1: USB disconnect, device number 12 [ 368.087850][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 368.946644][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 368.954094][ T9] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 368.980950][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.980985][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.981012][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 368.981043][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.035906][ T9] usb 1-1: config 0 descriptor?? [ 369.544948][ T7999] tipc: Started in network mode [ 369.544977][ T7999] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 369.545915][ T7999] tipc: Enabled bearer , priority 7 [ 369.770890][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.786494][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.015252][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 370.015337][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 370.038909][ T9] usb 1-1: USB disconnect, device number 11 [ 370.116927][ T30] audit: type=1400 audit(1792847424.006:653): avc: denied { bind } for pid=8007 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.285996][ T9] tipc: Node number set to 9480874 [ 372.913927][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 373.093186][ T9] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 373.095046][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 373.095072][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 373.095108][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.152563][ T9] ums-alauda 1-1:1.0: USB Mass Storage device detected [ 373.175608][ T9] ums-alauda 1-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 373.175608][ T9] Please send a copy of this message to and [ 373.214019][ T9] scsi host1: usb-storage 1-1:1.0 [ 373.411105][ T988] usb 1-1: USB disconnect, device number 12 [ 374.124044][ T8045] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=8045 comm=syz.2.381 [ 378.388567][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.388601][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.162975][ T8082] ip_tables: iptables: counters copy to user failed while replacing table [ 381.363943][ T8091] netlink: 'syz.4.394': attribute type 10 has an invalid length. [ 381.363959][ T8091] netlink: 55 bytes leftover after parsing attributes in process `syz.4.394'. [ 385.157839][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 385.301640][ T29] usb 5-1: device descriptor read/64, error -71 [ 385.538429][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 385.677990][ T29] usb 5-1: device descriptor read/64, error -71 [ 385.846708][ T29] usb usb5-port1: attempt power cycle [ 387.277834][ T29] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 387.301321][ T29] usb 5-1: device descriptor read/8, error -71 [ 387.538059][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 387.562123][ T29] usb 5-1: device descriptor read/8, error -71 [ 387.669060][ T29] usb usb5-port1: unable to enumerate USB device [ 389.643480][ T8179] jffs2: notice: (8179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 389.683342][ T30] audit: type=1400 audit(1792847443.576:654): avc: denied { write } for pid=8177 comm="syz.2.404" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.756769][ T1598] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 390.921604][ T1598] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 390.940401][ T1598] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 390.940428][ T1598] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 390.940465][ T1598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.959144][ T1598] ums-alauda 2-1:1.0: USB Mass Storage device detected [ 390.986514][ T1598] ums-alauda 2-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 390.986514][ T1598] Please send a copy of this message to and [ 390.987909][ T1598] scsi host1: usb-storage 2-1:1.0 [ 392.108775][ T988] usb 2-1: USB disconnect, device number 13 [ 394.433022][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 394.578455][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 394.579444][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.579459][ T24] usb 2-1: config 0 has no interface number 0 [ 394.581950][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.581964][ T24] usb 2-1: Product: syz [ 394.581972][ T24] usb 2-1: Manufacturer: syz [ 394.581980][ T24] usb 2-1: SerialNumber: syz [ 394.637721][ T24] usb 2-1: config 0 descriptor?? [ 395.148284][ T8224] binder: 8222:8224 ioctl c0306201 0 returned -14 [ 395.796625][ T24] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 395.815202][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 395.831076][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 395.831114][ T24] usb 2-1: media controller created [ 395.883677][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.041628][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 396.495051][ T24] usb 2-1: USB disconnect, device number 14 [ 398.114710][ T8236] netlink: 'syz.0.409': attribute type 10 has an invalid length. [ 398.114731][ T8236] netlink: 55 bytes leftover after parsing attributes in process `syz.0.409'. [ 400.849972][ T8244] jffs2: notice: (8244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 400.946413][ T30] audit: type=1400 audit(1792847454.836:655): avc: denied { write } for pid=8243 comm="syz.0.415" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.518183][ T30] audit: type=1400 audit(1792847457.406:656): avc: denied { create } for pid=8301 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 403.549075][ T30] audit: type=1400 audit(1792847457.446:657): avc: denied { write } for pid=8301 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 404.099615][ T8305] binder: 8303:8305 ioctl c0306201 0 returned -14 [ 404.602450][ T30] audit: type=1400 audit(1792847458.496:658): avc: denied { read } for pid=8301 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 404.659817][ T30] audit: type=1400 audit(1792847458.556:659): avc: denied { setopt } for pid=8301 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 407.766136][ T29] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 408.465059][ T29] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 408.479745][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 408.479772][ T29] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 408.479808][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.495127][ T29] ums-alauda 2-1:1.0: USB Mass Storage device detected [ 408.527951][ T29] ums-alauda 2-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 408.527951][ T29] Please send a copy of this message to and [ 408.566184][ T29] scsi host1: usb-storage 2-1:1.0 [ 408.742657][ T29] usb 2-1: USB disconnect, device number 15 [ 409.973329][ T30] audit: type=1800 audit(1792847463.836:660): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.428" name="file0" dev="overlay" ino=539 res=0 errno=-22 [ 410.060953][ T8339] netlink: 14 bytes leftover after parsing attributes in process `syz.1.428'. [ 410.432884][ T8339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.578628][ T8339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.633951][ T8339] bond0 (unregistering): Released all slaves [ 414.467817][ T5727] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 414.640931][ T5727] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 414.641849][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.641890][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 414.641931][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.709097][ T5727] ums-alauda 4-1:1.0: USB Mass Storage device detected [ 414.730851][ T5727] ums-alauda 4-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 414.730851][ T5727] Please send a copy of this message to and [ 416.073643][ T1598] usb 4-1: USB disconnect, device number 11 [ 418.110620][ T1598] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 419.079306][ T1598] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 419.080875][ T1598] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.080899][ T1598] usb 4-1: config 0 has no interface number 0 [ 419.083331][ T1598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.083355][ T1598] usb 4-1: Product: syz [ 419.083369][ T1598] usb 4-1: Manufacturer: syz [ 419.083385][ T1598] usb 4-1: SerialNumber: syz [ 419.171566][ T1598] usb 4-1: config 0 descriptor?? [ 419.642495][ T1598] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 419.670125][ T1598] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 419.670275][ T1598] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 419.670299][ T1598] usb 4-1: media controller created [ 419.774282][ T1598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.877642][ T1598] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 421.366877][ T1598] usb 4-1: USB disconnect, device number 12 [ 424.447982][ T8451] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=8451 comm=syz.3.440 [ 425.550097][ T8472] binder: 8470:8472 ioctl c0306201 0 returned -14 [ 435.909490][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 436.059121][ T24] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 436.059996][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.060010][ T24] usb 5-1: config 0 has no interface number 0 [ 436.062330][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.062345][ T24] usb 5-1: Product: syz [ 436.062353][ T24] usb 5-1: Manufacturer: syz [ 436.062362][ T24] usb 5-1: SerialNumber: syz [ 436.116415][ T24] usb 5-1: config 0 descriptor?? [ 436.404034][ T8566] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.703603][ T24] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 436.745823][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.745977][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 436.746001][ T24] usb 5-1: media controller created [ 436.824075][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.906617][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 437.012138][ T24] usb 5-1: USB disconnect, device number 17 [ 439.270011][ T30] audit: type=1400 audit(1792847493.166:661): avc: denied { read write } for pid=8588 comm="syz.2.455" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 439.270740][ T30] audit: type=1400 audit(1792847493.166:662): avc: denied { open } for pid=8588 comm="syz.2.455" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 439.486238][ T8590] FAULT_INJECTION: forcing a failure. [ 439.486238][ T8590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.486262][ T8590] CPU: 1 UID: 0 PID: 8590 Comm: syz.2.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.486278][ T8590] Tainted: [L]=SOFTLOCKUP [ 439.486282][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 439.486290][ T8590] Call Trace: [ 439.486294][ T8590] [ 439.486299][ T8590] dump_stack_lvl+0x100/0x190 [ 439.486320][ T8590] should_fail_ex.cold+0x5/0xa [ 439.486336][ T8590] _copy_from_user+0x2e/0xd0 [ 439.486349][ T8590] copy_msghdr_from_user+0x9f/0x4c0 [ 439.486366][ T8590] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 439.486386][ T8590] ? lock_acquire+0x1d1/0x380 [ 439.486400][ T8590] ? get_pid_task+0x2a/0x250 [ 439.486418][ T8590] ___sys_sendmsg+0x106/0x1e0 [ 439.486435][ T8590] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.486451][ T8590] ? get_pid_task+0x106/0x250 [ 439.486473][ T8590] ? find_held_lock+0x2b/0x80 [ 439.486492][ T8590] __sys_sendmsg+0x160/0x210 [ 439.486506][ T8590] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.486526][ T8590] do_syscall_64+0x123/0x790 [ 439.486552][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.486565][ T8590] RIP: 0033:0x7f328099f559 [ 439.486574][ T8590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.486585][ T8590] RSP: 002b:00007f32817a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.486597][ T8590] RAX: ffffffffffffffda RBX: 00007f3280c26090 RCX: 00007f328099f559 [ 439.486604][ T8590] RDX: 000000002400c800 RSI: 0000200000020200 RDI: 000000000000000a [ 439.486611][ T8590] RBP: 00007f32817a2090 R08: 0000000000000000 R09: 0000000000000000 [ 439.486618][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.486625][ T8590] R13: 00007f3280c26128 R14: 00007f3280c26090 R15: 00007fff5f9b8148 [ 439.486640][ T8590] [ 439.830075][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.830126][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.155225][ T8599] FAULT_INJECTION: forcing a failure. [ 441.155225][ T8599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.155248][ T8599] CPU: 1 UID: 0 PID: 8599 Comm: syz.0.456 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.155264][ T8599] Tainted: [L]=SOFTLOCKUP [ 441.155268][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 441.155275][ T8599] Call Trace: [ 441.155279][ T8599] [ 441.155284][ T8599] dump_stack_lvl+0x100/0x190 [ 441.155307][ T8599] should_fail_ex.cold+0x5/0xa [ 441.155324][ T8599] _copy_from_user+0x2e/0xd0 [ 441.155336][ T8599] copy_msghdr_from_user+0x9f/0x4c0 [ 441.155360][ T8599] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 441.155381][ T8599] ? lock_acquire+0x1d1/0x380 [ 441.155395][ T8599] ? get_pid_task+0x2a/0x250 [ 441.155412][ T8599] ___sys_sendmsg+0x106/0x1e0 [ 441.155430][ T8599] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.155446][ T8599] ? get_pid_task+0x106/0x250 [ 441.155467][ T8599] ? find_held_lock+0x2b/0x80 [ 441.155487][ T8599] __sys_sendmsg+0x160/0x210 [ 441.155500][ T8599] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.155521][ T8599] do_syscall_64+0x123/0x790 [ 441.155540][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.155552][ T8599] RIP: 0033:0x7f9bb879f559 [ 441.155561][ T8599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.155573][ T8599] RSP: 002b:00007f9bb9637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.155584][ T8599] RAX: ffffffffffffffda RBX: 00007f9bb8a25fa0 RCX: 00007f9bb879f559 [ 441.155592][ T8599] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000004 [ 441.155598][ T8599] RBP: 00007f9bb9637090 R08: 0000000000000000 R09: 0000000000000000 [ 441.155605][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.155612][ T8599] R13: 00007f9bb8a26038 R14: 00007f9bb8a25fa0 R15: 00007ffe3a79f258 [ 441.155627][ T8599] [ 441.955563][ T30] audit: type=1400 audit(1792847495.846:663): avc: denied { create } for pid=8601 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 441.992908][ T30] audit: type=1400 audit(1792847495.886:664): avc: denied { write } for pid=8601 comm="syz.0.459" path="socket:[16042]" dev="sockfs" ino=16042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 442.087478][ T30] audit: type=1400 audit(1792847495.976:665): avc: denied { nlmsg_read } for pid=8601 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 447.697759][ T30] audit: type=1400 audit(1792847501.566:666): avc: denied { bind } for pid=8625 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 447.746153][ T30] audit: type=1400 audit(1792847501.636:667): avc: denied { listen } for pid=8625 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 447.746576][ T30] audit: type=1400 audit(1792847501.636:668): avc: denied { write } for pid=8625 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 448.670896][ T30] audit: type=1400 audit(1792847502.566:669): avc: denied { listen } for pid=8638 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 448.696782][ T30] audit: type=1400 audit(1792847502.586:670): avc: denied { accept } for pid=8638 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 448.745733][ T8640] FAULT_INJECTION: forcing a failure. [ 448.745733][ T8640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.745755][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.4.467 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.745771][ T8640] Tainted: [L]=SOFTLOCKUP [ 448.745775][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 448.745782][ T8640] Call Trace: [ 448.745786][ T8640] [ 448.745791][ T8640] dump_stack_lvl+0x100/0x190 [ 448.745811][ T8640] should_fail_ex.cold+0x5/0xa [ 448.745828][ T8640] _copy_from_user+0x2e/0xd0 [ 448.745841][ T8640] copy_msghdr_from_user+0x9f/0x4c0 [ 448.745860][ T8640] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 448.745879][ T8640] ? __lock_acquire+0x5c0/0x1f40 [ 448.745897][ T8640] ___sys_recvmsg+0xdd/0x1a0 [ 448.745913][ T8640] ? __pfx____sys_recvmsg+0x10/0x10 [ 448.745929][ T8640] ? lock_acquire+0x1d1/0x380 [ 448.745954][ T8640] do_recvmmsg+0x2f3/0x750 [ 448.745973][ T8640] ? __pfx_do_recvmmsg+0x10/0x10 [ 448.746008][ T8640] __x64_sys_recvmmsg+0x199/0x280 [ 448.746023][ T8640] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 448.746041][ T8640] do_syscall_64+0x123/0x790 [ 448.746061][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.746073][ T8640] RIP: 0033:0x7fd7b599f559 [ 448.746083][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.746094][ T8640] RSP: 002b:00007fd7b6783028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 448.746105][ T8640] RAX: ffffffffffffffda RBX: 00007fd7b5c25fa0 RCX: 00007fd7b599f559 [ 448.746113][ T8640] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000004 [ 448.746119][ T8640] RBP: 00007fd7b6783090 R08: 00002000000007c0 R09: 0000000000000000 [ 448.746127][ T8640] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 448.746133][ T8640] R13: 00007fd7b5c26038 R14: 00007fd7b5c25fa0 R15: 00007ffc493dd048 [ 448.746148][ T8640] [ 449.315483][ T8648] overlay: filesystem on ./bus not supported as upperdir [ 449.339083][ T8648] overlay: filesystem on ./bus not supported as upperdir [ 449.358211][ T30] audit: type=1400 audit(1792847503.256:671): avc: denied { read } for pid=8645 comm="syz.2.468" name="state_hashed" dev="binder" ino=1048587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 449.359003][ T30] audit: type=1400 audit(1792847503.256:672): avc: denied { open } for pid=8645 comm="syz.2.468" path="/dev/binderfs/binder_logs/state_hashed" dev="binder" ino=1048587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 449.420033][ T8648] overlay: filesystem on ./bus not supported as upperdir [ 449.436852][ T8648] overlay: filesystem on ./bus not supported as upperdir [ 449.455222][ T8648] overlay: filesystem on ./bus not supported as upperdir [ 449.499354][ T8648] overlay: filesystem on ./bus not supported as upperdir [ 449.518347][ T8648] overlay: filesystem on ./bus not supported as upperdir [ 449.535198][ T8648] overlay: filesystem on ./bus not supported as upperdir [ 449.554469][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.586805][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.605935][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.629377][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.635921][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.671952][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.686636][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.706597][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.729563][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.746561][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.767187][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.794739][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.892307][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.931721][ T8648] overlayfs: failed to resolve './file0': -2 [ 449.966774][ T8648] overlayfs: failed to resolve './file0': -2 [ 450.014149][ T8648] overlayfs: failed to resolve './file0': -2 [ 450.055689][ T8648] overlayfs: failed to resolve './file0': -2 [ 450.086961][ T8648] overlayfs: failed to resolve './file0': -2 [ 450.897476][ T8648] overlayfs: failed to resolve './file0': -2 [ 450.932665][ T8648] overlayfs: failed to resolve './file0': -2 [ 450.972417][ T8648] overlayfs: failed to resolve './file0': -2 [ 451.127949][ T8648] overlayfs: failed to resolve './file0': -2 [ 451.165450][ T8648] overlayfs: failed to resolve './file0': -2 [ 451.196433][ T8648] overlayfs: failed to resolve './file0': -2 [ 453.958488][ T8687] binder: 8685:8687 ioctl c0306201 0 returned -14 [ 455.318020][ T8691] rxe_eth0 speed is unknown, defaulting to 1000 [ 458.025825][ T8699] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=8699 comm=syz.4.473 [ 463.205994][ T5830] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 463.244848][ T5830] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 467.052255][ T8782] FAULT_INJECTION: forcing a failure. [ 467.052255][ T8782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.052277][ T8782] CPU: 1 UID: 0 PID: 8782 Comm: syz.2.490 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.052292][ T8782] Tainted: [L]=SOFTLOCKUP [ 467.052296][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 467.052303][ T8782] Call Trace: [ 467.052308][ T8782] [ 467.052312][ T8782] dump_stack_lvl+0x100/0x190 [ 467.052333][ T8782] should_fail_ex.cold+0x5/0xa [ 467.052350][ T8782] _copy_to_user+0x32/0xd0 [ 467.052363][ T8782] simple_read_from_buffer+0xcb/0x170 [ 467.052384][ T8782] proc_fail_nth_read+0x1af/0x230 [ 467.052402][ T8782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.052420][ T8782] ? rw_verify_area+0xce/0x6d0 [ 467.052433][ T8782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.052450][ T8782] vfs_read+0x1e4/0xb40 [ 467.052464][ T8782] ? lock_acquire+0x1d1/0x380 [ 467.052477][ T8782] ? __fget_files+0x34/0x3d0 [ 467.052493][ T8782] ? __pfx_vfs_read+0x10/0x10 [ 467.052505][ T8782] ? find_held_lock+0x2b/0x80 [ 467.052515][ T8782] ? __fget_files+0x215/0x3d0 [ 467.052534][ T8782] ? __fget_files+0x21f/0x3d0 [ 467.052554][ T8782] ksys_read+0x12a/0x250 [ 467.052567][ T8782] ? __pfx_ksys_read+0x10/0x10 [ 467.052585][ T8782] do_syscall_64+0x123/0x790 [ 467.052604][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.052616][ T8782] RIP: 0033:0x7f328095fd8e [ 467.052626][ T8782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 467.052637][ T8782] RSP: 002b:00007f32817c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.052648][ T8782] RAX: ffffffffffffffda RBX: 00007f32817c36c0 RCX: 00007f328095fd8e [ 467.052656][ T8782] RDX: 000000000000000f RSI: 00007f32817c30a0 RDI: 0000000000000005 [ 467.052662][ T8782] RBP: 00007f32817c3090 R08: 0000000000000000 R09: 0000000000000000 [ 467.052669][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.052675][ T8782] R13: 00007f3280c26038 R14: 00007f3280c25fa0 R15: 00007fff5f9b8148 [ 467.052691][ T8782] [ 467.337982][ T5752] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 468.127884][ T5752] usb 1-1: Using ep0 maxpacket: 8 [ 468.128390][ T5752] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 468.129366][ T5752] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 468.129392][ T5752] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.163043][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 468.163067][ T5752] usb 1-1: Product: syz [ 468.165257][ T5752] usb 1-1: config 0 descriptor?? [ 468.709490][ T988] usb 1-1: USB disconnect, device number 13 [ 473.677582][ T5615] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 475.984501][ T30] audit: type=1400 audit(1792847529.876:673): avc: denied { mount } for pid=8849 comm="syz.0.497" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 476.044923][ T30] audit: type=1400 audit(1792847529.936:674): avc: denied { mounton } for pid=8849 comm="syz.0.497" path="/103/dev/sda1" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.045504][ T8850] /dev/sg0: Can't lookup blockdev [ 476.210161][ T30] audit: type=1400 audit(1792847530.106:675): avc: denied { write } for pid=8849 comm="syz.0.497" name="/" dev="ocfs2_dlmfs" ino=16343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.271849][ T30] audit: type=1400 audit(1792847530.166:676): avc: denied { add_name } for pid=8849 comm="syz.0.497" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.272628][ T30] audit: type=1400 audit(1792847530.166:677): avc: denied { create } for pid=8849 comm="syz.0.497" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 476.272882][ T30] audit: type=1400 audit(1792847530.166:678): avc: denied { associate } for pid=8849 comm="syz.0.497" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 476.272962][ T8850] (syz.0.497,8850,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 476.400301][ T30] audit: type=1400 audit(1792847530.296:679): avc: denied { write } for pid=8849 comm="syz.0.497" name="/" dev="ocfs2_dlmfs" ino=16343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 477.618361][ T30] audit: type=1400 audit(1792847531.516:680): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 477.725871][ T5830] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 477.739143][ T5830] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.876275][ T30] audit: type=1400 audit(1792847532.766:681): avc: denied { connect } for pid=8867 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 478.916288][ T30] audit: type=1400 audit(1792847532.806:682): avc: denied { mount } for pid=8867 comm="syz.3.501" name="/" dev="ramfs" ino=16373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 479.037796][ T5752] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 479.188844][ T5752] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 479.189897][ T5752] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 479.189921][ T5752] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 479.189957][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.194476][ T5752] ums-alauda 2-1:1.0: USB Mass Storage device detected [ 479.252514][ T5752] ums-alauda 2-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 479.252514][ T5752] Please send a copy of this message to and [ 479.254852][ T5752] scsi host1: usb-storage 2-1:1.0 [ 479.401999][ T5752] usb 2-1: USB disconnect, device number 16 [ 483.180142][ T30] audit: type=1800 audit(1792847537.076:683): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.515" name="file0" dev="overlay" ino=635 res=0 errno=-22 [ 483.694942][ T8917] netlink: 14 bytes leftover after parsing attributes in process `syz.1.515'. [ 484.424639][ T8923] IPv6: addrconf: prefix option has invalid lifetime [ 485.033452][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 485.057668][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 485.768731][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 486.009892][ T10] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 486.020284][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 486.020300][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 486.020320][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.059143][ T10] ums-alauda 2-1:1.0: USB Mass Storage device detected [ 486.098559][ T10] ums-alauda 2-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 486.098559][ T10] Please send a copy of this message to and [ 486.099768][ T10] scsi host1: usb-storage 2-1:1.0 [ 486.630233][ T5752] usb 2-1: USB disconnect, device number 17 [ 489.312166][ T8976] FAULT_INJECTION: forcing a failure. [ 489.312166][ T8976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.312190][ T8976] CPU: 0 UID: 0 PID: 8976 Comm: syz.1.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.312206][ T8976] Tainted: [L]=SOFTLOCKUP [ 489.312210][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 489.312217][ T8976] Call Trace: [ 489.312221][ T8976] [ 489.312226][ T8976] dump_stack_lvl+0x100/0x190 [ 489.312247][ T8976] should_fail_ex.cold+0x5/0xa [ 489.312264][ T8976] _copy_to_user+0x32/0xd0 [ 489.312278][ T8976] simple_read_from_buffer+0xcb/0x170 [ 489.312296][ T8976] proc_fail_nth_read+0x1af/0x230 [ 489.312314][ T8976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.312332][ T8976] ? rw_verify_area+0xce/0x6d0 [ 489.312354][ T8976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.312371][ T8976] vfs_read+0x1e4/0xb40 [ 489.312385][ T8976] ? lock_acquire+0x1d1/0x380 [ 489.312398][ T8976] ? __fget_files+0x34/0x3d0 [ 489.312414][ T8976] ? __pfx_vfs_read+0x10/0x10 [ 489.312426][ T8976] ? find_held_lock+0x2b/0x80 [ 489.312436][ T8976] ? __fget_files+0x215/0x3d0 [ 489.312455][ T8976] ? __fget_files+0x21f/0x3d0 [ 489.312476][ T8976] ksys_read+0x12a/0x250 [ 489.312489][ T8976] ? __pfx_ksys_read+0x10/0x10 [ 489.312506][ T8976] do_syscall_64+0x123/0x790 [ 489.312526][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.312538][ T8976] RIP: 0033:0x7f8105b5fd8e [ 489.312548][ T8976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.312558][ T8976] RSP: 002b:00007f8106a7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.312570][ T8976] RAX: ffffffffffffffda RBX: 00007f8106a7b6c0 RCX: 00007f8105b5fd8e [ 489.312577][ T8976] RDX: 000000000000000f RSI: 00007f8106a7b0a0 RDI: 0000000000000004 [ 489.312584][ T8976] RBP: 00007f8106a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 489.312591][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.312597][ T8976] R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948 [ 489.312613][ T8976] [ 489.745965][ T8978] FAULT_INJECTION: forcing a failure. [ 489.745965][ T8978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.745988][ T8978] CPU: 0 UID: 0 PID: 8978 Comm: syz.1.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.746004][ T8978] Tainted: [L]=SOFTLOCKUP [ 489.746008][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 489.746015][ T8978] Call Trace: [ 489.746019][ T8978] [ 489.746024][ T8978] dump_stack_lvl+0x100/0x190 [ 489.746045][ T8978] should_fail_ex.cold+0x5/0xa [ 489.746062][ T8978] _copy_from_iter+0x1f4/0x1690 [ 489.746078][ T8978] ? __pfx__copy_from_iter+0x10/0x10 [ 489.746089][ T8978] ? sock_has_perm+0x254/0x320 [ 489.746105][ T8978] ? __pfx_sock_has_perm+0x10/0x10 [ 489.746119][ T8978] ? __pfx_avc_has_perm+0x10/0x10 [ 489.746136][ T8978] hci_sock_sendmsg+0x4c3/0x26f0 [ 489.746152][ T8978] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 489.746165][ T8978] ? selinux_socket_sendmsg+0x198/0x2f0 [ 489.746182][ T8978] sock_write_iter+0x560/0x5d0 [ 489.746198][ T8978] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 489.746211][ T8978] ? __pfx_sock_write_iter+0x10/0x10 [ 489.746230][ T8978] ? bpf_lsm_file_permission+0x9/0x10 [ 489.746245][ T8978] ? security_file_permission+0x76/0x210 [ 489.746270][ T8978] ? rw_verify_area+0xce/0x6d0 [ 489.746284][ T8978] vfs_write+0x6af/0x1050 [ 489.746298][ T8978] ? __pfx_sock_write_iter+0x10/0x10 [ 489.746315][ T8978] ? __pfx_vfs_write+0x10/0x10 [ 489.746327][ T8978] ? find_held_lock+0x2b/0x80 [ 489.746347][ T8978] ksys_write+0x1f8/0x250 [ 489.746360][ T8978] ? __pfx_ksys_write+0x10/0x10 [ 489.746378][ T8978] do_syscall_64+0x123/0x790 [ 489.746398][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.746410][ T8978] RIP: 0033:0x7f8105b9f559 [ 489.746420][ T8978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.746431][ T8978] RSP: 002b:00007f8106a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.746442][ T8978] RAX: ffffffffffffffda RBX: 00007f8105e25fa0 RCX: 00007f8105b9f559 [ 489.746449][ T8978] RDX: 0000000000000016 RSI: 00002000000001c0 RDI: 0000000000000004 [ 489.746456][ T8978] RBP: 00007f8106a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 489.746463][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.746470][ T8978] R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948 [ 489.746486][ T8978] [ 490.475789][ T8984] can0: slcan on ptm0. [ 490.501039][ T30] audit: type=1400 audit(1792847544.396:684): avc: denied { read } for pid=5273 comm="dhcpcd" name="n31" dev="tmpfs" ino=2514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 490.525087][ T30] audit: type=1400 audit(1792847544.416:685): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 490.525116][ T30] audit: type=1400 audit(1792847544.416:686): avc: denied { getattr } for pid=5273 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 491.263245][ T30] audit: type=1326 audit(1792847545.156:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.4.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b599f559 code=0x7ffc0000 [ 491.263292][ T30] audit: type=1326 audit(1792847545.156:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.4.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b599f559 code=0x7ffc0000 [ 491.263331][ T30] audit: type=1326 audit(1792847545.156:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.4.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b599f559 code=0x7ffc0000 [ 491.263371][ T30] audit: type=1326 audit(1792847545.156:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.4.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b599f559 code=0x7ffc0000 [ 491.263408][ T30] audit: type=1326 audit(1792847545.156:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.4.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd7b599f559 code=0x7ffc0000 [ 491.263452][ T30] audit: type=1326 audit(1792847545.156:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.4.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b599f559 code=0x7ffc0000 [ 491.263490][ T30] audit: type=1326 audit(1792847545.156:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.4.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b599f559 code=0x7ffc0000 [ 492.471935][ T8983] can0 (unregistered): slcan off ptm0. [ 495.723273][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 496.406366][ T1598] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 496.457043][ T1598] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 498.491949][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 498.491966][ T30] audit: type=1400 audit(1792847552.386:702): avc: denied { write } for pid=9047 comm="syz.2.541" name="hidraw0" dev="devtmpfs" ino=2989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 498.506027][ T30] audit: type=1400 audit(1792847552.396:703): avc: denied { write } for pid=9046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.710453][ T30] audit: type=1400 audit(1792847552.606:704): avc: denied { node_bind } for pid=9047 comm="syz.2.541" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 499.014676][ T30] audit: type=1400 audit(1792847552.906:705): avc: denied { write } for pid=9081 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.142886][ T9083] FAULT_INJECTION: forcing a failure. [ 499.142886][ T9083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.142919][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: syz.1.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.142946][ T9083] Tainted: [L]=SOFTLOCKUP [ 499.142953][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 499.142964][ T9083] Call Trace: [ 499.142970][ T9083] [ 499.142978][ T9083] dump_stack_lvl+0x100/0x190 [ 499.143010][ T9083] should_fail_ex.cold+0x5/0xa [ 499.143039][ T9083] _copy_from_user+0x2e/0xd0 [ 499.143060][ T9083] ucma_create_id+0xcd/0x380 [ 499.143087][ T9083] ? __pfx_ucma_create_id+0x10/0x10 [ 499.143110][ T9083] ? __might_fault+0xc5/0x140 [ 499.143155][ T9083] ? __pfx_ucma_create_id+0x10/0x10 [ 499.143180][ T9083] ucma_write+0x1f6/0x330 [ 499.143201][ T9083] ? __pfx_ucma_write+0x10/0x10 [ 499.143221][ T9083] ? bpf_lsm_file_permission+0x9/0x10 [ 499.143245][ T9083] ? security_file_permission+0x76/0x210 [ 499.143276][ T9083] ? rw_verify_area+0xce/0x6d0 [ 499.143298][ T9083] ? __pfx_ucma_write+0x10/0x10 [ 499.143318][ T9083] vfs_writev+0x5ed/0xdd0 [ 499.143347][ T9083] ? __pfx_vfs_writev+0x10/0x10 [ 499.143374][ T9083] ? lock_acquire+0x1d1/0x380 [ 499.143397][ T9083] ? __fget_files+0x34/0x3d0 [ 499.143434][ T9083] ? __fget_files+0x21f/0x3d0 [ 499.143468][ T9083] ? do_writev+0x28a/0x340 [ 499.143487][ T9083] do_writev+0x28a/0x340 [ 499.143509][ T9083] ? __pfx_do_writev+0x10/0x10 [ 499.143539][ T9083] do_syscall_64+0x123/0x790 [ 499.143571][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.143592][ T9083] RIP: 0033:0x7f8105b9f559 [ 499.143608][ T9083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.143626][ T9083] RSP: 002b:00007f8106a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 499.143645][ T9083] RAX: ffffffffffffffda RBX: 00007f8105e25fa0 RCX: 00007f8105b9f559 [ 499.143657][ T9083] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009 [ 499.143669][ T9083] RBP: 00007f8106a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 499.143681][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.143693][ T9083] R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948 [ 499.143722][ T9083] [ 499.949325][ T9090] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=9090 comm=syz.1.545 [ 501.828585][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.828617][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.489830][ T30] audit: type=1400 audit(1792847556.386:706): avc: denied { read write } for pid=9116 comm="syz.0.550" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 502.490057][ T30] audit: type=1400 audit(1792847556.386:707): avc: denied { open } for pid=9116 comm="syz.0.550" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 503.395798][ T9125] overlayfs: missing 'lowerdir' [ 505.999638][ T9136] FAULT_INJECTION: forcing a failure. [ 505.999638][ T9136] name failslab, interval 1, probability 0, space 0, times 0 [ 505.999672][ T9136] CPU: 0 UID: 0 PID: 9136 Comm: syz.2.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.999698][ T9136] Tainted: [L]=SOFTLOCKUP [ 505.999705][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 505.999716][ T9136] Call Trace: [ 505.999723][ T9136] [ 505.999731][ T9136] dump_stack_lvl+0x100/0x190 [ 505.999755][ T9136] should_fail_ex.cold+0x5/0xa [ 505.999773][ T9136] should_failslab+0xc2/0x120 [ 505.999789][ T9136] __kmalloc_noprof+0xfc/0x840 [ 505.999803][ T9136] ? rcu_is_watching+0x13/0xc0 [ 505.999832][ T9136] ? tomoyo_realpath_from_path+0xb6/0x690 [ 505.999859][ T9136] tomoyo_realpath_from_path+0xb6/0x690 [ 505.999884][ T9136] tomoyo_check_open_permission+0x2af/0x3c0 [ 505.999903][ T9136] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 505.999925][ T9136] ? hook_file_open+0x245/0x8e0 [ 505.999954][ T9136] tomoyo_file_open+0x6b/0x90 [ 505.999968][ T9136] security_file_open+0xb5/0x1e0 [ 505.999979][ T9136] do_dentry_open+0x552/0x1470 [ 505.999998][ T9136] vfs_open_consume+0xcc/0x460 [ 506.000018][ T9136] path_openat+0x1547/0x23f0 [ 506.000038][ T9136] ? __pfx_path_openat+0x10/0x10 [ 506.000059][ T9136] do_file_open+0x20e/0x430 [ 506.000076][ T9136] ? __pfx_do_file_open+0x10/0x10 [ 506.000098][ T9136] ? __pfx_kfree_link+0x10/0x10 [ 506.000118][ T9136] ? _raw_spin_unlock+0x28/0x50 [ 506.000134][ T9136] ? alloc_fd+0x471/0x7a0 [ 506.000155][ T9136] do_sys_openat2+0x163/0x1d0 [ 506.000173][ T9136] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.000196][ T9136] __x64_sys_openat+0x12d/0x210 [ 506.000207][ T9136] ? __pfx___x64_sys_openat+0x10/0x10 [ 506.000217][ T9136] ? ksys_read+0x1ac/0x250 [ 506.000236][ T9136] do_syscall_64+0x123/0x790 [ 506.000256][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.000267][ T9136] RIP: 0033:0x7f328095fd8e [ 506.000278][ T9136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.000289][ T9136] RSP: 002b:00007f32817c2f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.000301][ T9136] RAX: ffffffffffffffda RBX: 00007f32817c36c0 RCX: 00007f328095fd8e [ 506.000308][ T9136] RDX: 0000000000000002 RSI: 00007f3280a3641a RDI: ffffffffffffff9c [ 506.000315][ T9136] RBP: 00007f3280a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 506.000322][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.000329][ T9136] R13: 00007f3280c26038 R14: 00007f3280c25fa0 R15: 00007fff5f9b8148 [ 506.000345][ T9136] [ 506.000351][ T9136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.000403][ T9136] FAULT_INJECTION: forcing a failure. [ 506.000403][ T9136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.000418][ T9136] CPU: 0 UID: 0 PID: 9136 Comm: syz.2.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.000433][ T9136] Tainted: [L]=SOFTLOCKUP [ 506.000437][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 506.000444][ T9136] Call Trace: [ 506.000447][ T9136] [ 506.000451][ T9136] dump_stack_lvl+0x100/0x190 [ 506.000469][ T9136] should_fail_ex.cold+0x5/0xa [ 506.000485][ T9136] strncpy_from_user+0x3b/0x2d0 [ 506.000502][ T9136] do_getname+0x78/0x390 [ 506.000515][ T9136] do_sys_openat2+0xc3/0x1d0 [ 506.000533][ T9136] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.000551][ T9136] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 506.000570][ T9136] ? __fget_files+0x21f/0x3d0 [ 506.000589][ T9136] __x64_sys_openat+0x12d/0x210 [ 506.000600][ T9136] ? __pfx___x64_sys_openat+0x10/0x10 [ 506.000609][ T9136] ? ksys_write+0x1ac/0x250 [ 506.000628][ T9136] do_syscall_64+0x123/0x790 [ 506.000646][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.000657][ T9136] RIP: 0033:0x7f328099f559 [ 506.000667][ T9136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.000677][ T9136] RSP: 002b:00007f32817c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.000688][ T9136] RAX: ffffffffffffffda RBX: 00007f3280c25fa0 RCX: 00007f328099f559 [ 506.000695][ T9136] RDX: 0000000000080200 RSI: 0000200000003440 RDI: ffffffffffffff9c [ 506.000702][ T9136] RBP: 00007f32817c3090 R08: 0000000000000000 R09: 0000000000000000 [ 506.000709][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.000716][ T9136] R13: 00007f3280c26038 R14: 00007f3280c25fa0 R15: 00007fff5f9b8148 [ 506.000731][ T9136] [ 507.070557][ T9138] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=9138 comm=syz.3.549 [ 508.289509][ T5735] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 508.305010][ T5735] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 513.776141][ T9208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=9208 comm=syz.2.557 [ 514.049552][ T30] audit: type=1800 audit(1792847567.916:708): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.563" name="file0" dev="overlay" ino=702 res=0 errno=-22 [ 514.113169][ T9223] netlink: 14 bytes leftover after parsing attributes in process `syz.3.563'. [ 516.615385][ T30] audit: type=1400 audit(1792847570.506:709): avc: denied { create } for pid=9236 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 516.655109][ T30] audit: type=1400 audit(1792847570.546:710): avc: denied { getopt } for pid=9236 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 521.649696][ T5752] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 521.723810][ T5752] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 523.897851][ T988] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 524.061073][ T988] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 524.062035][ T988] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 524.062050][ T988] usb 2-1: config 0 has no interface number 0 [ 524.063978][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.063992][ T988] usb 2-1: Product: syz [ 524.064001][ T988] usb 2-1: Manufacturer: syz [ 524.064009][ T988] usb 2-1: SerialNumber: syz [ 524.117042][ T988] usb 2-1: config 0 descriptor?? [ 524.322275][ T988] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 524.340087][ T988] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 524.340240][ T988] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 524.340264][ T988] usb 2-1: media controller created [ 524.383881][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.894663][ T988] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 526.150575][ T988] usb 2-1: USB disconnect, device number 18 [ 532.284494][ T9342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'. [ 532.311185][ T30] audit: type=1400 audit(1792847586.206:711): avc: denied { ioctl } for pid=9339 comm="syz.1.579" path="socket:[17947]" dev="sockfs" ino=17947 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 532.364462][ T30] audit: type=1400 audit(1792847586.256:712): avc: denied { setopt } for pid=9339 comm="syz.1.579" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 532.402343][ T9340] 9p: Could not find request transport: xen [ 536.441832][ T9370] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=9370 comm=syz.1.590 [ 536.642914][ T30] audit: type=1800 audit(1792847590.536:713): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.591" name="file0" dev="overlay" ino=738 res=0 errno=-22 [ 536.764037][ T9386] netlink: 14 bytes leftover after parsing attributes in process `syz.3.591'. [ 537.322005][ T9387] binder: 9380:9387 ioctl c0306201 0 returned -14 [ 542.596765][ T30] audit: type=1400 audit(1792847596.486:714): avc: denied { setopt } for pid=9416 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 542.692589][ T30] audit: type=1400 audit(1792847596.586:715): avc: denied { cmd } for pid=9416 comm="syz.0.597" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 544.061294][ T988] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 544.219550][ T988] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 544.224807][ T988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.224833][ T988] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 544.224856][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.281338][ T988] usb 1-1: config 0 descriptor?? [ 544.283249][ T988] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 544.555180][ T9451] netlink: 532 bytes leftover after parsing attributes in process `syz.2.592'. [ 544.630856][ T9432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.170746][ T9454] ip_tables: iptables: counters copy to user failed while replacing table [ 545.177312][ T30] audit: type=1400 audit(1792847599.066:716): avc: denied { connect } for pid=9447 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 547.454737][ T5727] usb 1-1: USB disconnect, device number 14 [ 547.616478][ T9481] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=9481 comm=syz.2.602 [ 549.537360][ T9504] rxe_eth0 speed is unknown, defaulting to 1000 [ 551.884427][ T9533] FAULT_INJECTION: forcing a failure. [ 551.884427][ T9533] name failslab, interval 1, probability 0, space 0, times 0 [ 551.884448][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.1.609 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.884465][ T9533] Tainted: [L]=SOFTLOCKUP [ 551.884469][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 551.884477][ T9533] Call Trace: [ 551.884481][ T9533] [ 551.884487][ T9533] dump_stack_lvl+0x100/0x190 [ 551.884508][ T9533] should_fail_ex.cold+0x5/0xa [ 551.884526][ T9533] should_failslab+0xc2/0x120 [ 551.884542][ T9533] __kmalloc_cache_noprof+0x91/0x6d0 [ 551.884564][ T9533] ? kthread_create_worker_on_node+0xe2/0x220 [ 551.884589][ T9533] kthread_create_worker_on_node+0xe2/0x220 [ 551.884616][ T9533] ? __pfx_kthread_create_worker_on_node+0x10/0x10 [ 551.884637][ T9533] ? __kasan_kmalloc+0xaa/0xb0 [ 551.884651][ T9533] ? lockdep_init_map_type+0x5c/0x250 [ 551.884667][ T9533] ? lockdep_init_map_type+0x5c/0x250 [ 551.884684][ T9533] kvm_create_pit+0x16f/0x780 [ 551.884699][ T9533] kvm_arch_vm_ioctl+0x11f9/0x1650 [ 551.884711][ T9533] ? __lock_acquire+0x5c0/0x1f40 [ 551.884724][ T9533] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 551.884739][ T9533] ? __lock_acquire+0x5c0/0x1f40 [ 551.884756][ T9533] ? __lock_acquire+0x5c0/0x1f40 [ 551.884771][ T9533] ? lock_acquire+0x1d1/0x380 [ 551.884784][ T9533] ? unwind_next_frame+0xbd/0x2090 [ 551.884803][ T9533] ? lock_acquire+0x1d1/0x380 [ 551.884815][ T9533] ? is_bpf_text_address+0x25/0x1a0 [ 551.884828][ T9533] ? find_held_lock+0x2b/0x80 [ 551.884838][ T9533] ? is_bpf_text_address+0x8a/0x1a0 [ 551.884848][ T9533] ? is_bpf_text_address+0x8a/0x1a0 [ 551.884860][ T9533] ? bpf_ksym_find+0x128/0x1c0 [ 551.884873][ T9533] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 551.884888][ T9533] ? is_bpf_text_address+0x94/0x1a0 [ 551.884908][ T9533] ? tomoyo_path_number_perm+0x46d/0x580 [ 551.884925][ T9533] ? stack_trace_save+0x8e/0xc0 [ 551.884938][ T9533] ? __pfx_stack_trace_save+0x10/0x10 [ 551.884951][ T9533] ? stack_depot_save_flags+0x27/0x9f0 [ 551.884967][ T9533] ? __lock_acquire+0x5c0/0x1f40 [ 551.884981][ T9533] ? tomoyo_path_number_perm+0x46d/0x580 [ 551.884996][ T9533] ? kasan_save_stack+0x3f/0x50 [ 551.885009][ T9533] ? kasan_save_stack+0x30/0x50 [ 551.885021][ T9533] ? kasan_save_track+0x14/0x30 [ 551.885033][ T9533] ? kasan_save_free_info+0x3b/0x70 [ 551.885043][ T9533] ? __kasan_slab_free+0x5f/0x80 [ 551.885064][ T9533] ? kfree+0x22b/0x6d0 [ 551.885080][ T9533] ? tomoyo_path_number_perm+0x46d/0x580 [ 551.885096][ T9533] ? security_file_ioctl+0xd3/0x230 [ 551.885113][ T9533] ? __x64_sys_ioctl+0xb7/0x210 [ 551.885126][ T9533] ? do_syscall_64+0x123/0x790 [ 551.885143][ T9533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.885165][ T9533] kvm_vm_ioctl+0xdca/0x2950 [ 551.885182][ T9533] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 551.885199][ T9533] ? kasan_quarantine_put+0x104/0x240 [ 551.885212][ T9533] ? lockdep_hardirqs_on+0x7d/0x110 [ 551.885229][ T9533] ? find_held_lock+0x2b/0x80 [ 551.885241][ T9533] ? tomoyo_path_number_perm+0x28f/0x580 [ 551.885256][ T9533] ? tomoyo_path_number_perm+0x28f/0x580 [ 551.885275][ T9533] ? tomoyo_path_number_perm+0x188/0x580 [ 551.885292][ T9533] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 551.885309][ T9533] ? __pfx_futex_wait+0x10/0x10 [ 551.885326][ T9533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 551.885344][ T9533] ? do_vfs_ioctl+0x226/0x13e0 [ 551.885357][ T9533] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 551.885369][ T9533] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 551.885389][ T9533] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 551.885408][ T9533] ? __fget_files+0x34/0x3d0 [ 551.885431][ T9533] ? selinux_file_ioctl+0x1e0/0x290 [ 551.885447][ T9533] ? selinux_file_ioctl+0x1e7/0x290 [ 551.885464][ T9533] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 551.885477][ T9533] __x64_sys_ioctl+0x18e/0x210 [ 551.885492][ T9533] do_syscall_64+0x123/0x790 [ 551.885511][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.885522][ T9533] RIP: 0033:0x7f8105b9f559 [ 551.885533][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.885543][ T9533] RSP: 002b:00007f8106a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.885556][ T9533] RAX: ffffffffffffffda RBX: 00007f8105e25fa0 RCX: 00007f8105b9f559 [ 551.885567][ T9533] RDX: 00002000000001c0 RSI: 000000004040ae77 RDI: 0000000000000005 [ 551.885574][ T9533] RBP: 00007f8105c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 551.885581][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.885588][ T9533] R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948 [ 551.885604][ T9533] [ 552.271644][ T30] audit: type=1400 audit(1792847606.166:717): avc: denied { write } for pid=9532 comm="syz.1.609" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 552.278123][ T30] audit: type=1400 audit(1792847606.176:718): avc: denied { open } for pid=9532 comm="syz.1.609" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 552.278328][ T9533] random: crng reseeded on system resumption [ 553.998813][ T9546] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 553.998833][ T9546] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 553.998937][ T9546] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 553.998947][ T9546] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 554.307135][ T9546] kvm: kvm [9543]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 554.358289][ T30] audit: type=1400 audit(1792847608.256:719): avc: denied { ioctl } for pid=9543 comm="syz.2.605" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0xc06855c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 554.499568][ T9567] netlink: 532 bytes leftover after parsing attributes in process `syz.4.612'. [ 557.389205][ T9581] FAULT_INJECTION: forcing a failure. [ 557.389205][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 557.389239][ T9581] CPU: 1 UID: 0 PID: 9581 Comm: syz.0.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.389268][ T9581] Tainted: [L]=SOFTLOCKUP [ 557.389275][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 557.389287][ T9581] Call Trace: [ 557.389294][ T9581] [ 557.389302][ T9581] dump_stack_lvl+0x100/0x190 [ 557.389338][ T9581] should_fail_ex.cold+0x5/0xa [ 557.389368][ T9581] should_failslab+0xc2/0x120 [ 557.389395][ T9581] __kmalloc_cache_noprof+0x91/0x6d0 [ 557.389435][ T9581] ? __lock_acquire+0x5c0/0x1f40 [ 557.389459][ T9581] ? snd_seq_create_port+0xcd/0x4f0 [ 557.389489][ T9581] snd_seq_create_port+0xcd/0x4f0 [ 557.389513][ T9581] snd_seq_ioctl_create_port+0x250/0x9e0 [ 557.389538][ T9581] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 557.389559][ T9581] ? clientptr+0x20/0x190 [ 557.389581][ T9581] ? find_held_lock+0x2b/0x80 [ 557.389599][ T9581] ? clientptr+0x80/0x190 [ 557.389623][ T9581] call_seq_client_ctl+0xa3/0x130 [ 557.389649][ T9581] snd_seq_kernel_client_ctl+0x35/0x50 [ 557.389673][ T9581] create_port+0x19b/0x270 [ 557.389696][ T9581] ? __pfx_create_port+0x10/0x10 [ 557.389724][ T9581] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 557.389749][ T9581] ? __pfx_free_devinfo+0x10/0x10 [ 557.389789][ T9581] ? find_held_lock+0x2b/0x80 [ 557.389811][ T9581] ? mark_held_locks+0x40/0x70 [ 557.389838][ T9581] snd_seq_oss_open+0x292/0xa10 [ 557.389868][ T9581] odev_open+0x6f/0x90 [ 557.389888][ T9581] ? __pfx_odev_open+0x10/0x10 [ 557.389909][ T9581] soundcore_open+0x2e3/0x5a0 [ 557.389934][ T9581] ? __pfx_soundcore_open+0x10/0x10 [ 557.389957][ T9581] chrdev_open+0x234/0x6a0 [ 557.389985][ T9581] ? __pfx_chrdev_open+0x10/0x10 [ 557.390013][ T9581] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 557.390043][ T9581] do_dentry_open+0x674/0x1470 [ 557.390067][ T9581] ? __pfx_chrdev_open+0x10/0x10 [ 557.390099][ T9581] vfs_open_consume+0xcc/0x460 [ 557.390132][ T9581] path_openat+0x1547/0x23f0 [ 557.390166][ T9581] ? __pfx_path_openat+0x10/0x10 [ 557.390202][ T9581] do_file_open+0x20e/0x430 [ 557.390232][ T9581] ? __pfx_do_file_open+0x10/0x10 [ 557.390283][ T9581] ? _raw_spin_unlock+0x28/0x50 [ 557.390309][ T9581] ? alloc_fd+0x471/0x7a0 [ 557.390346][ T9581] do_sys_openat2+0x163/0x1d0 [ 557.390377][ T9581] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.390407][ T9581] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.390455][ T9581] __x64_sys_openat+0x12d/0x210 [ 557.390475][ T9581] ? __pfx___x64_sys_openat+0x10/0x10 [ 557.390507][ T9581] do_syscall_64+0x123/0x790 [ 557.390540][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.390562][ T9581] RIP: 0033:0x7f9bb879f559 [ 557.390579][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.390598][ T9581] RSP: 002b:00007f9bb9637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.390618][ T9581] RAX: ffffffffffffffda RBX: 00007f9bb8a25fa0 RCX: 00007f9bb879f559 [ 557.390632][ T9581] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 557.390646][ T9581] RBP: 00007f9bb8836b20 R08: 0000000000000000 R09: 0000000000000000 [ 557.390658][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.390671][ T9581] R13: 00007f9bb8a26038 R14: 00007f9bb8a25fa0 R15: 00007ffe3a79f258 [ 557.390700][ T9581] [ 557.390722][ T9581] ALSA: seq_oss: can't create port [ 557.497896][ T9583] loop9: detected capacity change from 0 to 2640 [ 557.946466][ T30] audit: type=1400 audit(1792847611.346:720): avc: denied { read write } for pid=9580 comm="syz.0.608" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 557.946518][ T30] audit: type=1400 audit(1792847611.356:721): avc: denied { open } for pid=9580 comm="syz.0.608" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 557.946676][ T30] audit: type=1400 audit(1792847611.376:722): avc: denied { write } for pid=9580 comm="syz.0.608" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 558.333784][ T9578] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=9578 comm=syz.2.616 [ 558.868303][ T9421] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 559.047933][ T9421] usb 2-1: Using ep0 maxpacket: 32 [ 559.057318][ T9421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 559.057347][ T9421] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 559.111451][ T9421] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 559.111467][ T9421] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 559.111479][ T9421] usb 2-1: config 14 has no interface number 0 [ 559.111488][ T9421] usb 2-1: config 14 has no interface number 1 [ 559.111526][ T9421] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 559.111540][ T9421] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 559.111554][ T9421] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 559.111568][ T9421] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 559.111583][ T9421] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 559.111597][ T9421] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.111612][ T9421] usb 2-1: config 14 interface 57 has no altsetting 0 [ 559.111621][ T9421] usb 2-1: config 14 interface 228 has no altsetting 0 [ 559.254812][ T9421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.254828][ T9421] usb 2-1: Product: syz [ 559.254836][ T9421] usb 2-1: Manufacturer: syz [ 559.254844][ T9421] usb 2-1: SerialNumber: syz [ 559.730358][ T9421] legousbtower 2-1:14.57: interrupt endpoints not found [ 560.242542][ T9421] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 560.322084][ T9421] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 561.207252][ T5727] usb 2-1: USB disconnect, device number 19 [ 561.248201][ T5727] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 561.863244][ T8723] syz.3.478 (8723) used greatest stack depth: 17688 bytes left [ 561.950578][ T9633] ip_tables: iptables: counters copy to user failed while replacing table [ 562.713973][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.714025][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.884019][ T9640] jffs2: notice: (9640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 563.494049][ T9648] FAULT_INJECTION: forcing a failure. [ 563.494049][ T9648] name failslab, interval 1, probability 0, space 0, times 0 [ 563.494090][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.1.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.494125][ T9648] Tainted: [L]=SOFTLOCKUP [ 563.494134][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 563.494148][ T9648] Call Trace: [ 563.494155][ T9648] [ 563.494165][ T9648] dump_stack_lvl+0x100/0x190 [ 563.494202][ T9648] should_fail_ex.cold+0x5/0xa [ 563.494234][ T9648] ? __pfx_cryptomgr_probe+0x10/0x10 [ 563.494265][ T9648] should_failslab+0xc2/0x120 [ 563.494295][ T9648] __kmalloc_cache_noprof+0x91/0x6d0 [ 563.494330][ T9648] ? __kthread_create_on_node+0xce/0x3f0 [ 563.494365][ T9648] ? __pfx_cryptomgr_probe+0x10/0x10 [ 563.494394][ T9648] __kthread_create_on_node+0xce/0x3f0 [ 563.494424][ T9648] ? __pfx___kthread_create_on_node+0x10/0x10 [ 563.494469][ T9648] ? __pfx_cryptomgr_probe+0x10/0x10 [ 563.494500][ T9648] kthread_create_on_node+0xc7/0x100 [ 563.494529][ T9648] ? __pfx_kthread_create_on_node+0x10/0x10 [ 563.494560][ T9648] ? __kasan_kmalloc+0xaa/0xb0 [ 563.494588][ T9648] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 563.494622][ T9648] ? cryptomgr_notify+0xa4/0xb40 [ 563.494656][ T9648] cryptomgr_notify+0x953/0xb40 [ 563.494687][ T9648] ? __kasan_kmalloc+0xaa/0xb0 [ 563.494715][ T9648] notifier_call_chain+0x99/0x3f0 [ 563.494749][ T9648] blocking_notifier_call_chain+0x69/0xa0 [ 563.494770][ T9648] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 563.494789][ T9648] crypto_alloc_tfm_node+0xd3/0x260 [ 563.494808][ T9648] esp_init_authenc.constprop.0+0x1df/0xb50 [ 563.494830][ T9648] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 563.494859][ T9648] ? find_held_lock+0x2b/0x80 [ 563.494873][ T9648] esp_init_state+0x2f8/0x530 [ 563.494891][ T9648] __xfrm_init_state+0x842/0x1dc0 [ 563.494906][ T9648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 563.494933][ T9648] xfrm_init_state+0x1c/0xa0 [ 563.494948][ T9648] pfkey_add+0x1c88/0x2f10 [ 563.494969][ T9648] ? __pfx_pfkey_add+0x10/0x10 [ 563.494982][ T9648] ? kfree_skbmem+0x19f/0x210 [ 563.495001][ T9648] ? sk_skb_reason_drop+0x114/0x1b0 [ 563.495018][ T9648] ? pfkey_broadcast+0x28c/0x420 [ 563.495032][ T9648] ? __pfx_pfkey_add+0x10/0x10 [ 563.495046][ T9648] pfkey_process+0x5c3/0x810 [ 563.495062][ T9648] ? __pfx_pfkey_process+0x10/0x10 [ 563.495076][ T9648] ? pfkey_sendmsg+0x41a/0x840 [ 563.495101][ T9648] ? __pfx___alloc_skb+0x10/0x10 [ 563.495119][ T9648] pfkey_sendmsg+0x428/0x840 [ 563.495137][ T9648] ____sys_sendmsg+0xa99/0xc30 [ 563.495154][ T9648] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 563.495171][ T9648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.495197][ T9648] ___sys_sendmsg+0x190/0x1e0 [ 563.495226][ T9648] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.495256][ T9648] ? futex_wait+0x11e/0x370 [ 563.495293][ T9648] ? find_held_lock+0x2b/0x80 [ 563.495331][ T9648] __sys_sendmsg+0x160/0x210 [ 563.495357][ T9648] ? __pfx___sys_sendmsg+0x10/0x10 [ 563.495398][ T9648] do_syscall_64+0x123/0x790 [ 563.495435][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.495459][ T9648] RIP: 0033:0x7f8105b9f559 [ 563.495481][ T9648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.495504][ T9648] RSP: 002b:00007f8106a7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.495526][ T9648] RAX: ffffffffffffffda RBX: 00007f8105e25fa0 RCX: 00007f8105b9f559 [ 563.495542][ T9648] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 563.495555][ T9648] RBP: 00007f8105c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 563.495568][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.495581][ T9648] R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948 [ 563.495612][ T9648] [ 565.404494][ T9663] netlink: 532 bytes leftover after parsing attributes in process `syz.1.625'. [ 565.747910][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 565.908147][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 565.910977][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 565.911017][ T24] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 565.945564][ T24] usb 4-1: config 14 has an invalid interface number: 228 but max is 0 [ 565.945589][ T24] usb 4-1: config 14 has no interface number 0 [ 565.945626][ T24] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 565.945654][ T24] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 565.945677][ T24] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 565.945690][ T24] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 565.945704][ T24] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.945718][ T24] usb 4-1: config 14 interface 228 has no altsetting 0 [ 566.039315][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.039340][ T24] usb 4-1: Product: syz [ 566.039355][ T24] usb 4-1: Manufacturer: syz [ 566.039369][ T24] usb 4-1: SerialNumber: syz [ 566.446178][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.627'. [ 566.758810][ T9668] rxe_eth0 speed is unknown, defaulting to 1000 [ 567.020287][ T24] legousbtower 4-1:14.228: interrupt endpoints not found [ 568.626882][ T9670] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=9670 comm=syz.4.630 [ 570.299513][ T1598] usb 4-1: USB disconnect, device number 13 [ 572.081395][ T9718] device-mapper: table: 248:2: cache: Invalid data block size (-EINVAL) [ 572.081414][ T9718] device-mapper: ioctl: error adding target to table [ 572.088262][ T9718] device-mapper: table: 248:2: flakey: Device lookup failed (-ENOENT) [ 572.088275][ T9718] device-mapper: ioctl: error adding target to table [ 574.087438][ T9730] binder: 9729:9730 ioctl c00c620f 2000000006c0 returned -22 [ 574.289235][ T9734] netlink: 532 bytes leftover after parsing attributes in process `syz.1.640'. [ 574.863363][ T9739] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 574.863377][ T9739] netlink: 55 bytes leftover after parsing attributes in process `syz.0.635'. [ 576.091035][ T9752] binder: 9746:9752 ioctl c0306201 0 returned -14 [ 578.196462][ T9758] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=9758 comm=syz.1.645 [ 583.003882][ T5727] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 583.220913][ T5727] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 583.244314][ T5727] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.244348][ T5727] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 583.244372][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.283647][ T5727] ums-alauda 1-1:1.0: USB Mass Storage device detected [ 583.298731][ T5727] ums-alauda 1-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 583.298731][ T5727] Please send a copy of this message to and [ 583.594466][ T9421] usb 1-1: USB disconnect, device number 15 [ 583.858021][ T5727] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 584.013983][ T5727] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 584.016419][ T5727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.016445][ T5727] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 584.016468][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.069250][ T5727] ums-alauda 3-1:1.0: USB Mass Storage device detected [ 584.084784][ T5727] ums-alauda 3-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 584.084784][ T5727] Please send a copy of this message to and [ 584.284455][ T5727] usb 3-1: USB disconnect, device number 4 [ 584.529816][ T9834] FAULT_INJECTION: forcing a failure. [ 584.529816][ T9834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.529840][ T9834] CPU: 0 UID: 0 PID: 9834 Comm: syz.0.653 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.529855][ T9834] Tainted: [L]=SOFTLOCKUP [ 584.529860][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 584.529866][ T9834] Call Trace: [ 584.529870][ T9834] [ 584.529875][ T9834] dump_stack_lvl+0x100/0x190 [ 584.529896][ T9834] should_fail_ex.cold+0x5/0xa [ 584.529913][ T9834] _copy_from_user+0x2e/0xd0 [ 584.529926][ T9834] copy_msghdr_from_user+0x9f/0x4c0 [ 584.529943][ T9834] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 584.529964][ T9834] ? lock_acquire+0x1d1/0x380 [ 584.529977][ T9834] ? get_pid_task+0x2a/0x250 [ 584.529995][ T9834] ___sys_sendmsg+0x106/0x1e0 [ 584.530012][ T9834] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.530028][ T9834] ? get_pid_task+0x106/0x250 [ 584.530049][ T9834] ? find_held_lock+0x2b/0x80 [ 584.530069][ T9834] __sys_sendmsg+0x160/0x210 [ 584.530082][ T9834] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.530104][ T9834] do_syscall_64+0x123/0x790 [ 584.530123][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.530135][ T9834] RIP: 0033:0x7f9bb879f559 [ 584.530145][ T9834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.530155][ T9834] RSP: 002b:00007f9bb9637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.530167][ T9834] RAX: ffffffffffffffda RBX: 00007f9bb8a25fa0 RCX: 00007f9bb879f559 [ 584.530174][ T9834] RDX: 000000002400c800 RSI: 0000200000020200 RDI: 000000000000000b [ 584.530181][ T9834] RBP: 00007f9bb9637090 R08: 0000000000000000 R09: 0000000000000000 [ 584.530188][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.530195][ T9834] R13: 00007f9bb8a26038 R14: 00007f9bb8a25fa0 R15: 00007ffe3a79f258 [ 584.530210][ T9834] [ 585.896328][ T9853] netlink: 532 bytes leftover after parsing attributes in process `syz.1.655'. [ 587.793558][ T30] audit: type=1400 audit(1792847641.686:723): avc: denied { write } for pid=9882 comm="syz.2.659" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 587.794169][ T9883] FAULT_INJECTION: forcing a failure. [ 587.794169][ T9883] name failslab, interval 1, probability 0, space 0, times 0 [ 587.794190][ T9883] CPU: 0 UID: 0 PID: 9883 Comm: syz.1.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.794206][ T9883] Tainted: [L]=SOFTLOCKUP [ 587.794210][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 587.794216][ T9883] Call Trace: [ 587.794220][ T9883] [ 587.794225][ T9883] dump_stack_lvl+0x100/0x190 [ 587.794245][ T9883] should_fail_ex.cold+0x5/0xa [ 587.794262][ T9883] should_failslab+0xc2/0x120 [ 587.794278][ T9883] __kmalloc_noprof+0xfc/0x840 [ 587.794291][ T9883] ? __pfx_dynamic_dname+0x10/0x10 [ 587.794306][ T9883] ? tomoyo_encode2+0xfb/0x3c0 [ 587.794320][ T9883] tomoyo_encode2+0xfb/0x3c0 [ 587.794333][ T9883] tomoyo_encode+0x29/0x50 [ 587.794343][ T9883] tomoyo_realpath_from_path+0x18c/0x690 [ 587.794358][ T9883] tomoyo_path_number_perm+0x23c/0x580 [ 587.794374][ T9883] ? tomoyo_path_number_perm+0x22e/0x580 [ 587.794390][ T9883] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 587.794415][ T9883] ? __lock_acquire+0x5c0/0x1f40 [ 587.794437][ T9883] ? __fget_files+0x34/0x3d0 [ 587.794453][ T9883] ? find_held_lock+0x2b/0x80 [ 587.794463][ T9883] ? hook_file_ioctl_common+0x140/0x440 [ 587.794479][ T9883] ? __fget_files+0x21f/0x3d0 [ 587.794498][ T9883] security_file_ioctl+0xd3/0x230 [ 587.794515][ T9883] __x64_sys_ioctl+0xb7/0x210 [ 587.794531][ T9883] do_syscall_64+0x123/0x790 [ 587.794550][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.794562][ T9883] RIP: 0033:0x7f8105b9f559 [ 587.794572][ T9883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.794582][ T9883] RSP: 002b:00007f8106a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.794594][ T9883] RAX: ffffffffffffffda RBX: 00007f8105e25fa0 RCX: 00007f8105b9f559 [ 587.794601][ T9883] RDX: 0000200000000540 RSI: 0000000000008946 RDI: 0000000000000003 [ 587.794608][ T9883] RBP: 00007f8106a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 587.794615][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.794622][ T9883] R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948 [ 587.794637][ T9883] [ 587.794647][ T9883] ERROR: Out of memory at tomoyo_realpath_from_path. [ 588.082603][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 588.303219][ T9890] ======================================================= [ 588.303219][ T9890] WARNING: The mand mount option has been deprecated and [ 588.303219][ T9890] and is ignored by this kernel. Remove the mand [ 588.303219][ T9890] option from the mount to silence this warning. [ 588.303219][ T9890] ======================================================= [ 588.303528][ T9890] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 588.303554][ T9890] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 588.522863][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 588.573481][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 588.927497][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 588.927860][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 588.952178][ T9886] ceph: No mds server is up or the cluster is laggy [ 589.454091][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 589.454281][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 591.290645][ T9908] ip_tables: iptables: counters copy to user failed while replacing table [ 593.317752][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 593.493256][ T5830] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 593.496910][ T5830] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.496935][ T5830] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.496965][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.554051][ T5830] ums-alauda 3-1:1.0: USB Mass Storage device detected [ 593.584163][ T5830] ums-alauda 3-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 593.584163][ T5830] Please send a copy of this message to and [ 594.955491][ T5735] usb 3-1: USB disconnect, device number 5 [ 598.356000][ T9962] binder: 9958:9962 ioctl c0306201 0 returned -14 [ 605.397363][T10000] FAULT_INJECTION: forcing a failure. [ 605.397363][T10000] name fail_futex, interval 1, probability 0, space 0, times 1 [ 605.397388][T10000] CPU: 1 UID: 0 PID: 10000 Comm: syz.4.680 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.397404][T10000] Tainted: [L]=SOFTLOCKUP [ 605.397408][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 605.397415][T10000] Call Trace: [ 605.397419][T10000] [ 605.397424][T10000] dump_stack_lvl+0x100/0x190 [ 605.397444][T10000] should_fail_ex.cold+0x5/0xa [ 605.397461][T10000] get_futex_key+0x1c9/0x13e0 [ 605.397482][T10000] ? __pfx_get_futex_key+0x10/0x10 [ 605.397503][T10000] futex_lock_pi+0x1eb/0x7e0 [ 605.397518][T10000] ? __pfx_futex_lock_pi+0x10/0x10 [ 605.397532][T10000] ? __lock_acquire+0x5c0/0x1f40 [ 605.397560][T10000] ? __pfx_futex_wake_mark+0x10/0x10 [ 605.397578][T10000] ? rcu_read_lock_any_held+0x6a/0x90 [ 605.397589][T10000] ? find_held_lock+0x2b/0x80 [ 605.397599][T10000] ? ksys_write+0x190/0x250 [ 605.397615][T10000] do_futex+0x371/0x440 [ 605.397627][T10000] ? __pfx_do_futex+0x10/0x10 [ 605.397637][T10000] ? __seccomp_filter+0x896/0x1130 [ 605.397650][T10000] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.397683][T10000] __x64_sys_futex+0x34f/0x4d0 [ 605.397705][T10000] ? __pfx___x64_sys_futex+0x10/0x10 [ 605.397722][T10000] ? ksys_write+0x1ac/0x250 [ 605.397742][T10000] ? __pfx_ksys_write+0x10/0x10 [ 605.397772][T10000] do_syscall_64+0x123/0x790 [ 605.397804][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.397824][T10000] RIP: 0033:0x7fd7b599f559 [ 605.397840][T10000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.397857][T10000] RSP: 002b:00007fd7b6783028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 605.397882][T10000] RAX: ffffffffffffffda RBX: 00007fd7b5c25fa0 RCX: 00007fd7b599f559 [ 605.397895][T10000] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000200000000080 [ 605.397906][T10000] RBP: 00007fd7b6783090 R08: 0000000000000000 R09: 0000000000000001 [ 605.397917][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.397928][T10000] R13: 00007fd7b5c26038 R14: 00007fd7b5c25fa0 R15: 00007ffc493dd048 [ 605.397957][T10000] [ 605.754551][ T30] audit: type=1400 audit(1792847659.646:724): avc: denied { execmod } for pid=10001 comm="syz.4.681" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 610.483194][T10055] jffs2: notice: (10055) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 610.520779][ T30] audit: type=1400 audit(1792847664.416:725): avc: denied { write } for pid=10054 comm="syz.2.686" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.215587][ T1598] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 611.387736][ T1598] usb 5-1: Using ep0 maxpacket: 32 [ 611.389893][ T1598] usb 5-1: unable to get BOS descriptor or descriptor too short [ 611.389919][ T1598] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 611.486038][ T1598] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 611.486068][ T1598] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 611.486087][ T1598] usb 5-1: config 14 has no interface number 0 [ 611.486101][ T1598] usb 5-1: config 14 has no interface number 1 [ 611.486159][ T1598] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 611.486185][ T1598] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 611.486210][ T1598] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 611.486238][ T1598] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 611.486264][ T1598] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 611.486289][ T1598] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.486312][ T1598] usb 5-1: config 14 interface 57 has no altsetting 0 [ 611.486328][ T1598] usb 5-1: config 14 interface 228 has no altsetting 0 [ 612.761724][T10066] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=10066 comm=syz.2.690 [ 612.857217][ T1598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.857243][ T1598] usb 5-1: Product: syz [ 612.857258][ T1598] usb 5-1: Manufacturer: syz [ 612.857272][ T1598] usb 5-1: SerialNumber: syz [ 613.139747][ T30] audit: type=1400 audit(1792847667.036:726): avc: denied { create } for pid=10056 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 613.394787][ T1598] legousbtower 5-1:14.57: interrupt endpoints not found [ 613.817007][ T1598] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 613.835341][ T1598] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 614.447241][ T9421] usb 5-1: USB disconnect, device number 18 [ 614.474808][ T9421] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 617.354137][ T30] audit: type=1800 audit(1792847671.226:727): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.691" name="file0" dev="overlay" ino=837 res=0 errno=-22 [ 617.423319][T10112] netlink: 14 bytes leftover after parsing attributes in process `syz.2.691'. [ 618.251728][ T30] audit: type=1326 audit(1792847672.146:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.1.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8105b9f559 code=0x7fc00000 [ 618.291489][ T30] audit: type=1326 audit(1792847672.186:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.1.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8105b9f559 code=0x7fc00000 [ 618.969972][T10115] FAULT_INJECTION: forcing a failure. [ 618.969972][T10115] name failslab, interval 1, probability 0, space 0, times 0 [ 618.970006][T10115] CPU: 1 UID: 0 PID: 10115 Comm: syz.1.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.970036][T10115] Tainted: [L]=SOFTLOCKUP [ 618.970043][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 618.970056][T10115] Call Trace: [ 618.970063][T10115] [ 618.970072][T10115] dump_stack_lvl+0x100/0x190 [ 618.970110][T10115] should_fail_ex.cold+0x5/0xa [ 618.970141][T10115] should_failslab+0xc2/0x120 [ 618.970169][T10115] kmem_cache_alloc_noprof+0x92/0x6a0 [ 618.970192][T10115] ? kernfs_root+0xee/0x2a0 [ 618.970221][T10115] ? __kernfs_new_node+0xd2/0xa10 [ 618.970250][T10115] __kernfs_new_node+0xd2/0xa10 [ 618.970272][T10115] ? kernfs_xattr_get+0x5f/0x80 [ 618.970299][T10115] ? __pfx___kernfs_new_node+0x10/0x10 [ 618.970334][T10115] ? lock_acquire+0x1d1/0x380 [ 618.970359][T10115] ? kernfs_root+0x23/0x2a0 [ 618.970381][T10115] ? find_held_lock+0x2b/0x80 [ 618.970399][T10115] ? kernfs_root+0xee/0x2a0 [ 618.970418][T10115] ? kernfs_root+0xee/0x2a0 [ 618.970446][T10115] kernfs_new_node+0x194/0x200 [ 618.970472][T10115] ? __pfx_kernfs_new_node+0x10/0x10 [ 618.970506][T10115] __kernfs_create_file+0x53/0x350 [ 618.970537][T10115] sysfs_add_file_mode_ns+0x207/0x3c0 [ 618.970574][T10115] internal_create_group+0x593/0xfb0 [ 618.970605][T10115] ? __pfx_internal_create_group+0x10/0x10 [ 618.970632][T10115] ? kernfs_create_link+0x1f1/0x280 [ 618.970664][T10115] internal_create_groups+0x9d/0x150 [ 618.970689][T10115] device_add+0x71a/0x1970 [ 618.970721][T10115] ? __pfx_device_add+0x10/0x10 [ 618.970747][T10115] ? lockdep_init_map_type+0x5c/0x250 [ 618.970773][T10115] ? __init_waitqueue_head+0xca/0x150 [ 618.970807][T10115] rfkill_register+0x1ad/0xb30 [ 618.970838][T10115] nfc_register_device+0x11f/0x3e0 [ 618.970861][T10115] nci_register_device+0x7f1/0xb80 [ 618.970890][T10115] ? __pfx_nci_register_device+0x10/0x10 [ 618.970920][T10115] ? lockdep_init_map_type+0x5c/0x250 [ 618.970949][T10115] virtual_ncidev_open+0x141/0x220 [ 618.970978][T10115] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 618.971005][T10115] misc_open+0x26d/0x450 [ 618.971027][T10115] ? __pfx_misc_open+0x10/0x10 [ 618.971051][T10115] chrdev_open+0x234/0x6a0 [ 618.971079][T10115] ? __pfx_chrdev_open+0x10/0x10 [ 618.971108][T10115] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 618.971138][T10115] do_dentry_open+0x674/0x1470 [ 618.971163][T10115] ? __pfx_chrdev_open+0x10/0x10 [ 618.971196][T10115] vfs_open_consume+0xcc/0x460 [ 618.971230][T10115] path_openat+0x1547/0x23f0 [ 618.971264][T10115] ? __pfx_path_openat+0x10/0x10 [ 618.971301][T10115] do_file_open+0x20e/0x430 [ 618.971339][T10115] ? __pfx_do_file_open+0x10/0x10 [ 618.971391][T10115] ? _raw_spin_unlock+0x28/0x50 [ 618.971418][T10115] ? alloc_fd+0x471/0x7a0 [ 618.971456][T10115] do_sys_openat2+0x163/0x1d0 [ 618.971486][T10115] ? __pfx_do_sys_openat2+0x10/0x10 [ 618.971516][T10115] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 618.971556][T10115] __x64_sys_openat+0x12d/0x210 [ 618.971576][T10115] ? __pfx___x64_sys_openat+0x10/0x10 [ 618.971595][T10115] ? ksys_write+0x1ac/0x250 [ 618.971629][T10115] do_syscall_64+0x123/0x790 [ 618.971663][T10115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.971685][T10115] RIP: 0033:0x7f8105b9f559 [ 618.971702][T10115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.971722][T10115] RSP: 002b:00007f8106a5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 618.971744][T10115] RAX: ffffffffffffffda RBX: 00007f8105e26090 RCX: 00007f8105b9f559 [ 618.971759][T10115] RDX: 0000000000000002 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 618.971772][T10115] RBP: 00007f8105c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 618.971785][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.971798][T10115] R13: 00007f8105e26128 R14: 00007f8105e26090 R15: 00007ffdb17f3948 [ 618.971827][T10115] [ 619.141268][ T30] audit: type=1326 audit(1792847673.046:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.1.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8105b9f559 code=0x7fc00000 [ 624.148964][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.149017][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.323883][T10186] overlayfs: missing 'lowerdir' [ 627.815003][ T5727] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 628.567736][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 628.652011][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 628.789705][ T5727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 628.789804][ T5727] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 628.790418][ T5727] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 628.790439][ T5727] usb 3-1: can't read configurations, error -71 [ 629.558036][T10190] binder: 10188:10190 ioctl c0306201 0 returned -14 [ 634.287518][T10215] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 634.949773][T10224] ip_tables: iptables: counters copy to user failed while replacing table [ 636.782842][T10237] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=10237 comm=syz.3.709 [ 637.370303][T10236] syz.3.709 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 637.370333][T10236] CPU: 1 UID: 0 PID: 10236 Comm: syz.3.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.370350][T10236] Tainted: [L]=SOFTLOCKUP [ 637.370354][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 637.370361][T10236] Call Trace: [ 637.370365][T10236] [ 637.370370][T10236] dump_stack_lvl+0x100/0x190 [ 637.370391][T10236] dump_header+0xfb/0x606 [ 637.370406][T10236] oom_kill_process.cold+0xd/0x380 [ 637.370421][T10236] out_of_memory+0x343/0x14c0 [ 637.370439][T10236] ? __pfx_out_of_memory+0x10/0x10 [ 637.370458][T10236] mem_cgroup_out_of_memory+0xc6/0x130 [ 637.370472][T10236] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 637.370485][T10236] ? find_held_lock+0x2b/0x80 [ 637.370499][T10236] ? do_raw_spin_unlock+0x145/0x1e0 [ 637.370516][T10236] ? _raw_spin_unlock+0x28/0x50 [ 637.370533][T10236] try_charge_memcg+0x76f/0xfd0 [ 637.370554][T10236] ? __pfx_try_charge_memcg+0x10/0x10 [ 637.370570][T10236] ? find_held_lock+0x2b/0x80 [ 637.370580][T10236] ? rcu_read_unlock+0x17/0x60 [ 637.370590][T10236] ? rcu_read_unlock+0x17/0x60 [ 637.370600][T10236] ? find_held_lock+0x2b/0x80 [ 637.370611][T10236] ? rcu_read_unlock+0x17/0x60 [ 637.370625][T10236] charge_memcg+0x1ae/0x210 [ 637.370643][T10236] __mem_cgroup_charge+0x2b/0x1c0 [ 637.370656][T10236] shmem_alloc_and_add_folio+0x451/0xd40 [ 637.370683][T10236] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 637.370701][T10236] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 637.370721][T10236] shmem_get_folio_gfp+0x758/0x1af0 [ 637.370741][T10236] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 637.370756][T10236] ? inode_set_ctime_current+0x9c/0x850 [ 637.370775][T10236] ? find_held_lock+0x2b/0x80 [ 637.370786][T10236] ? timestamp_truncate+0x22e/0x2f0 [ 637.370806][T10236] shmem_write_begin+0x1a4/0x420 [ 637.370824][T10236] ? __pfx_shmem_write_begin+0x10/0x10 [ 637.370840][T10236] ? inode_set_ctime_current+0x283/0x850 [ 637.370858][T10236] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 637.370875][T10236] ? inode_maybe_inc_iversion+0x169/0x220 [ 637.370893][T10236] generic_perform_write+0x292/0xa40 [ 637.370906][T10236] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 637.370929][T10236] ? __pfx_generic_perform_write+0x10/0x10 [ 637.370943][T10236] ? mnt_put_write_access_file+0x4e/0x100 [ 637.370960][T10236] ? file_update_time_flags+0x38c/0x520 [ 637.370975][T10236] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 637.370992][T10236] shmem_file_write_iter+0x10e/0x140 [ 637.371011][T10236] __kernel_write_iter+0x2ac/0x930 [ 637.371026][T10236] ? __pfx___kernel_write_iter+0x10/0x10 [ 637.371040][T10236] ? __up_read+0x333/0x980 [ 637.371057][T10236] ? dump_user_range+0x7e0/0xe90 [ 637.371076][T10236] dump_user_range+0xa0d/0xe90 [ 637.371095][T10236] ? __pfx_dump_user_range+0x10/0x10 [ 637.371115][T10236] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 637.371129][T10236] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 637.371143][T10236] ? __pfx_writenote+0x10/0x10 [ 637.371163][T10236] elf_core_dump+0x2d97/0x3d60 [ 637.371188][T10236] ? __pfx_elf_core_dump+0x10/0x10 [ 637.371203][T10236] ? kasan_save_stack+0x3f/0x50 [ 637.371215][T10236] ? kasan_save_stack+0x30/0x50 [ 637.371228][T10236] ? kasan_save_track+0x14/0x30 [ 637.371240][T10236] ? __kasan_kmalloc+0xaa/0xb0 [ 637.371252][T10236] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 637.371266][T10236] ? get_signal+0x1f20/0x21d0 [ 637.371277][T10236] ? arch_do_signal_or_restart+0x91/0x7e0 [ 637.371293][T10236] ? irqentry_exit+0x542/0xab0 [ 637.371313][T10236] ? 0xffffffffff600000 [ 637.371342][T10236] ? lock_acquire+0x1d1/0x380 [ 637.371355][T10236] ? get_signal+0x1f20/0x21d0 [ 637.371372][T10236] ? vfs_coredump+0x2606/0x58c0 [ 637.371385][T10236] vfs_coredump+0x2606/0x58c0 [ 637.371417][T10236] ? __pfx_vfs_coredump+0x10/0x10 [ 637.371436][T10236] ? __lock_acquire+0x5c0/0x1f40 [ 637.371451][T10236] ? lock_acquire+0x1d1/0x380 [ 637.371464][T10236] ? unwind_next_frame+0xbd/0x2090 [ 637.371484][T10236] ? lock_acquire+0x1d1/0x380 [ 637.371496][T10236] ? is_bpf_text_address+0x25/0x1a0 [ 637.371508][T10236] ? find_held_lock+0x2b/0x80 [ 637.371518][T10236] ? is_bpf_text_address+0x8a/0x1a0 [ 637.371529][T10236] ? is_bpf_text_address+0x8a/0x1a0 [ 637.371540][T10236] ? bpf_ksym_find+0x128/0x1c0 [ 637.371554][T10236] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 637.371569][T10236] ? is_bpf_text_address+0x94/0x1a0 [ 637.371590][T10236] ? __sigqueue_free+0xbe/0x2a0 [ 637.371605][T10236] ? stack_trace_save+0x8e/0xc0 [ 637.371624][T10236] ? kasan_save_stack+0x3f/0x50 [ 637.371636][T10236] ? kasan_save_stack+0x30/0x50 [ 637.371649][T10236] ? kasan_save_track+0x14/0x30 [ 637.371661][T10236] ? kasan_save_free_info+0x3b/0x70 [ 637.371671][T10236] ? __kasan_slab_free+0x5f/0x80 [ 637.371688][T10236] ? kmem_cache_free+0x127/0x6c0 [ 637.371697][T10236] ? __sigqueue_free+0xbe/0x2a0 [ 637.371710][T10236] ? get_signal+0xb02/0x21d0 [ 637.371721][T10236] ? arch_do_signal_or_restart+0x91/0x7e0 [ 637.371737][T10236] ? irqentry_exit+0x542/0xab0 [ 637.371753][T10236] ? asm_exc_page_fault+0x26/0x30 [ 637.371791][T10236] ? rcu_is_watching+0x13/0xc0 [ 637.371811][T10236] get_signal+0x1f20/0x21d0 [ 637.371830][T10236] ? __pfx_get_signal+0x10/0x10 [ 637.371847][T10236] arch_do_signal_or_restart+0x91/0x7e0 [ 637.371865][T10236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 637.371892][T10236] irqentry_exit+0x542/0xab0 [ 637.371911][T10236] asm_exc_page_fault+0x26/0x30 [ 637.371922][T10236] RIP: 0033:0x7f910259f561 [ 637.371932][T10236] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 637.371943][T10236] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 637.371952][T10236] RAX: 0000000000000000 RBX: 00007f9102826090 RCX: 00007f910259f559 [ 637.371960][T10236] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 637.371967][T10236] RBP: 00007f9102636b20 R08: 0000000000000000 R09: 0000000000000000 [ 637.371973][T10236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 637.371980][T10236] R13: 00007f9102826128 R14: 00007f9102826090 R15: 00007fff30491a38 [ 637.371997][T10236] [ 637.372001][T10236] memory: usage 307200kB, limit 307200kB, failcnt 52571 [ 637.372009][T10236] memory+swap: usage 432008kB, limit 9007199254740988kB, failcnt 0 [ 637.372016][T10236] kmem: usage 3332kB, limit 9007199254740988kB, failcnt 0 [ 637.372022][T10236] Memory cgroup stats for /syz3: [ 637.372203][T10236] cache 310738944 [ 637.372208][T10236] rss 409600 [ 637.372212][T10236] rss_huge 0 [ 637.372216][T10236] shmem 310398976 [ 637.372220][T10236] mapped_file 124649472 [ 637.372224][T10236] dirty 0 [ 637.372227][T10236] writeback 0 [ 637.372231][T10236] workingset_refault_anon 4 [ 637.372235][T10236] workingset_refault_file 3473 [ 637.372239][T10236] swap 127803392 [ 637.372243][T10236] swapcached 12288 [ 637.372246][T10236] pgpgin 1552237 [ 637.372250][T10236] pgpgout 1476270 [ 637.372254][T10236] pgfault 377475 [ 637.372258][T10236] pgmajfault 34 [ 637.372261][T10236] inactive_anon 255684608 [ 637.372265][T10236] active_anon 55136256 [ 637.372269][T10236] inactive_file 40960 [ 637.372273][T10236] active_file 233472 [ 637.372277][T10236] unevictable 0 [ 637.372281][T10236] hierarchical_memory_limit 314572800 [ 637.372285][T10236] hierarchical_memsw_limit 9223372036854771712 [ 637.372290][T10236] total_cache 310738944 [ 637.372294][T10236] total_rss 409600 [ 637.372297][T10236] total_rss_huge 0 [ 637.372301][T10236] total_shmem 310398976 [ 637.372305][T10236] total_mapped_file 124649472 [ 637.372310][T10236] total_dirty 0 [ 637.372313][T10236] total_writeback 0 [ 637.372317][T10236] total_workingset_refault_anon 4 [ 637.372322][T10236] total_workingset_refault_file 3473 [ 637.372326][T10236] total_swap 127803392 [ 637.372330][T10236] total_swapcached 12288 [ 637.372334][T10236] total_pgpgin 1552237 [ 637.372338][T10236] total_pgpgout 1476270 [ 637.372342][T10236] total_pgfault 377475 [ 637.372346][T10236] total_pgmajfault 34 [ 637.372350][T10236] total_inactive_anon 255684608 [ 637.372354][T10236] total_active_anon 55136256 [ 637.372358][T10236] total_inactive_file 40960 [ 637.372362][T10236] total_active_file 233472 [ 637.372366][T10236] total_unevictable 0 [ 637.372370][T10236] anon_cost 0 [ 637.372373][T10236] file_cost 0 [ 637.372377][T10236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.693,pid=10151,uid=0 [ 637.372544][T10236] Memory cgroup out of memory: Killed process 10151 (syz.3.693) total-vm:102412kB, anon-rss:1292kB, file-rss:53828kB, shmem-rss:11256kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 742.267637][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 743.081455][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10230/2:b..l.. P10156/1:b..l.. P10234/1:b..l.. [ 743.093359][ C1] rcu: (detected by 1, t=10583 jiffies, g=49489, q=458 ncpus=2) [ 743.101069][ C1] task:syz.1.717 state:R running task stack:25608 pid:10234 tgid:10233 ppid:5607 task_flags:0x400140 flags:0x00080000 [ 743.114547][ C1] Call Trace: [ 743.117797][ C1] [ 743.120701][ C1] __schedule+0x125e/0x6990 [ 743.125181][ C1] ? ktime_get+0x1a4/0x320 [ 743.129577][ C1] ? __pfx___schedule+0x10/0x10 [ 743.134402][ C1] ? mark_held_locks+0x40/0x70 [ 743.139138][ C1] preempt_schedule_irq+0x4e/0x90 [ 743.144141][ C1] irqentry_exit+0x33f/0xab0 [ 743.148707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 743.154652][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 743.159818][ C1] Code: 05 0f a1 ce 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e 5f 80 10 0f 82 c9 02 00 00 8b 35 de 8e 80 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad a0 ce 13 0f 85 09 03 00 00 48 83 c4 [ 743.179391][ C1] RSP: 0018:ffffc9000505ea88 EFLAGS: 00000206 [ 743.185423][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 743.193367][ C1] RDX: 0000000000000000 RSI: ffffffff8e5f4e6e RDI: ffffffff8c830780 [ 743.201305][ C1] RBP: ffffffff8ffeb420 R08: 0000000005c59b81 R09: 0000000000000007 [ 743.209241][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 743.217176][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 743.225121][ C1] ? unwind_next_frame+0x3be/0x2090 [ 743.230291][ C1] ? unwind_next_frame+0x3be/0x2090 [ 743.235459][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 743.241582][ C1] unwind_next_frame+0xd1/0x2090 [ 743.246490][ C1] ? unwind_next_frame+0xbd/0x2090 [ 743.251571][ C1] ? __set_page_owner+0x8c/0x540 [ 743.256480][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 743.262601][ C1] arch_stack_walk+0x94/0xf0 [ 743.267163][ C1] ? __set_page_owner+0x8c/0x540 [ 743.272071][ C1] stack_trace_save+0x8e/0xc0 [ 743.276719][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 743.282061][ C1] ? lock_acquire+0x1d1/0x380 [ 743.286706][ C1] save_stack+0x162/0x1e0 [ 743.291003][ C1] ? __pfx_save_stack+0x10/0x10 [ 743.295828][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 743.300736][ C1] __set_page_owner+0x8c/0x540 [ 743.305473][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 743.310812][ C1] ? bad_range+0x261/0x400 [ 743.315197][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 743.320368][ C1] ? get_page_from_freelist+0x10ec/0x35e0 [ 743.326053][ C1] post_alloc_hook+0xfd/0x120 [ 743.330701][ C1] get_page_from_freelist+0x1113/0x35e0 [ 743.336225][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 743.342082][ C1] ? prepare_alloc_pages+0x1f0/0x5b0 [ 743.347339][ C1] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 743.353209][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 743.358114][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 743.364414][ C1] ? lock_acquire+0x1d1/0x380 [ 743.369059][ C1] ? do_raw_spin_lock+0x128/0x260 [ 743.374051][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 743.379390][ C1] ? find_held_lock+0x2b/0x80 [ 743.384038][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 743.388944][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 743.394809][ C1] ? policy_nodemask+0xed/0x4f0 [ 743.399629][ C1] alloc_pages_mpol+0x201/0x560 [ 743.404459][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 743.409806][ C1] folio_alloc_mpol_noprof+0x36/0x260 [ 743.415149][ C1] shmem_alloc_folio+0x135/0x160 [ 743.420057][ C1] shmem_alloc_and_add_folio+0x371/0xd40 [ 743.425662][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 743.431783][ C1] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 743.437735][ C1] shmem_get_folio_gfp+0x758/0x1af0 [ 743.442906][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 743.448508][ C1] ? filemap_map_pages+0x1155/0x2020 [ 743.453766][ C1] shmem_fault+0x1fb/0xa30 [ 743.458166][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 743.463074][ C1] ? __pte_offset_map+0x9a/0x470 [ 743.467981][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 743.473410][ C1] ? find_held_lock+0x2b/0x80 [ 743.478051][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 743.483474][ C1] __do_fault+0x10b/0x440 [ 743.487774][ C1] do_fault+0xb3f/0x1890 [ 743.491985][ C1] ? __pfx_do_fault+0x10/0x10 [ 743.496628][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 743.501362][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 743.506101][ C1] __handle_mm_fault+0x150b/0x2f60 [ 743.511187][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 743.516626][ C1] ? pte_offset_map_lock+0x174/0x320 [ 743.521879][ C1] ? find_held_lock+0x2b/0x80 [ 743.526518][ C1] ? find_held_lock+0x2b/0x80 [ 743.531157][ C1] ? follow_page_pte+0x536/0x1050 [ 743.536158][ C1] handle_mm_fault+0x363/0xa20 [ 743.540896][ C1] __get_user_pages+0x8a9/0x2c20 [ 743.545806][ C1] ? __pfx_mt_find+0x10/0x10 [ 743.550363][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 743.555707][ C1] populate_vma_page_range+0x267/0x3f0 [ 743.561135][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 743.567081][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 743.572859][ C1] __mm_populate+0x107/0x3a0 [ 743.577415][ C1] ? __pfx___mm_populate+0x10/0x10 [ 743.582493][ C1] ? up_write+0x2dc/0x5b0 [ 743.586794][ C1] vm_mmap_pgoff+0x441/0x470 [ 743.591352][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 743.596436][ C1] ? __pfx_do_futex+0x10/0x10 [ 743.601082][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 743.605725][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 743.610630][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 743.615883][ C1] ? xfd_validate_state+0x129/0x190 [ 743.621051][ C1] __x64_sys_mmap+0x125/0x190 [ 743.625699][ C1] do_syscall_64+0x123/0x790 [ 743.630264][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.636122][ C1] RIP: 0033:0x7f8105b9f559 [ 743.640513][ C1] RSP: 002b:00007f8106a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 743.648889][ C1] RAX: ffffffffffffffda RBX: 00007f8105e25fa0 RCX: 00007f8105b9f559 [ 743.656825][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 743.664763][ C1] RBP: 00007f8105c36b20 R08: ffffffffffffffff R09: 00000000d6d1c000 [ 743.672700][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 743.680635][ C1] R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948 [ 743.688579][ C1] [ 743.691567][ C1] task:syz.3.702 state:R running task stack:19056 pid:10156 tgid:10156 ppid:5624 task_flags:0xc00e40 flags:0x00080000 [ 743.704998][ C1] Call Trace: [ 743.708244][ C1] [ 743.711144][ C1] __schedule+0x125e/0x6990 [ 743.715619][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 743.721756][ C1] ? __pfx___schedule+0x10/0x10 [ 743.726574][ C1] ? irqentry_exit+0x202/0xab0 [ 743.731310][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 743.736651][ C1] preempt_schedule+0x57/0xd0 [ 743.741299][ C1] preempt_schedule_thunk+0x16/0x40 [ 743.746469][ C1] _raw_spin_unlock_irq+0x44/0x50 [ 743.751463][ C1] evict_folios+0x25c/0x1770 [ 743.756026][ C1] ? lock_acquire+0x1d1/0x380 [ 743.760670][ C1] ? __pfx_evict_folios+0x10/0x10 [ 743.765661][ C1] ? do_raw_spin_lock+0x128/0x260 [ 743.770652][ C1] ? find_held_lock+0x2b/0x80 [ 743.775304][ C1] ? try_to_inc_max_seq+0x6cd/0x10a0 [ 743.780555][ C1] ? try_to_inc_max_seq+0x6cd/0x10a0 [ 743.785808][ C1] ? try_to_inc_max_seq+0xbd/0x10a0 [ 743.790979][ C1] try_to_shrink_lruvec+0x32e/0x7b0 [ 743.796147][ C1] ? mlock_folio_batch+0x3730/0x3790 [ 743.801404][ C1] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 743.807094][ C1] shrink_lruvec+0x313/0x22e0 [ 743.811738][ C1] ? xa_load+0x149/0x2c0 [ 743.815949][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 743.820855][ C1] ? xa_load+0x153/0x2c0 [ 743.825064][ C1] ? __pfx_xa_load+0x10/0x10 [ 743.829623][ C1] ? __pfx_shrink_lruvec+0x10/0x10 [ 743.834702][ C1] ? do_shrink_slab+0xb67/0x1200 [ 743.839609][ C1] ? find_held_lock+0x2b/0x80 [ 743.844251][ C1] ? do_shrink_slab+0xcd9/0x1200 [ 743.849162][ C1] ? lock_acquire+0x1d1/0x380 [ 743.853810][ C1] ? shrink_slab+0x672/0x12e0 [ 743.858469][ C1] ? __pfx___might_resched+0x10/0x10 [ 743.863719][ C1] ? page_counter_calculate_protection+0x348/0x730 [ 743.870189][ C1] ? shrink_node+0x74f/0x42e0 [ 743.874834][ C1] shrink_node+0x74f/0x42e0 [ 743.879312][ C1] ? __pfx_shrink_node+0x10/0x10 [ 743.884220][ C1] ? queue_work_on+0x11b/0x1e0 [ 743.888949][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 743.894120][ C1] ? queue_work_on+0x141/0x1e0 [ 743.898853][ C1] ? do_try_to_free_pages+0x2da/0x1500 [ 743.904281][ C1] do_try_to_free_pages+0x2da/0x1500 [ 743.909543][ C1] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 743.915405][ C1] ? psi_group_change+0x457/0xb10 [ 743.920396][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 743.926784][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 743.931947][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 743.937115][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 743.942281][ C1] try_charge_memcg+0x50a/0xfd0 [ 743.947107][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 743.952447][ C1] ? find_held_lock+0x2b/0x80 [ 743.957087][ C1] ? rcu_read_unlock+0x17/0x60 [ 743.961816][ C1] ? rcu_read_unlock+0x17/0x60 [ 743.966544][ C1] ? find_held_lock+0x2b/0x80 [ 743.971187][ C1] ? rcu_read_unlock+0x17/0x60 [ 743.975916][ C1] charge_memcg+0x1ae/0x210 [ 743.980389][ C1] __mem_cgroup_charge+0x2b/0x1c0 [ 743.985381][ C1] shmem_alloc_and_add_folio+0x451/0xd40 [ 743.990987][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 743.997111][ C1] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 744.003064][ C1] shmem_get_folio_gfp+0x758/0x1af0 [ 744.008237][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 744.013853][ C1] ? filemap_map_pages+0x1155/0x2020 [ 744.019112][ C1] shmem_fault+0x1fb/0xa30 [ 744.023498][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 744.028403][ C1] ? __pte_offset_map+0x9a/0x470 [ 744.033310][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 744.038740][ C1] ? find_held_lock+0x2b/0x80 [ 744.043382][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 744.048808][ C1] __do_fault+0x10b/0x440 [ 744.053106][ C1] do_fault+0xb3f/0x1890 [ 744.057320][ C1] ? __pfx_do_fault+0x10/0x10 [ 744.061968][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 744.066704][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 744.071441][ C1] __handle_mm_fault+0x150b/0x2f60 [ 744.076524][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 744.081962][ C1] ? pte_offset_map_lock+0x174/0x320 [ 744.087214][ C1] ? find_held_lock+0x2b/0x80 [ 744.091856][ C1] ? find_held_lock+0x2b/0x80 [ 744.096496][ C1] ? follow_page_pte+0x536/0x1050 [ 744.101495][ C1] handle_mm_fault+0x363/0xa20 [ 744.106232][ C1] __get_user_pages+0x8a9/0x2c20 [ 744.111142][ C1] ? lock_acquire+0x1d1/0x380 [ 744.115787][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 744.121128][ C1] ? __pfx___might_resched+0x10/0x10 [ 744.126386][ C1] get_dump_page+0x27e/0x3d0 [ 744.130945][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 744.136021][ C1] ? dump_user_range+0x7e0/0xe90 [ 744.140943][ C1] dump_user_range+0x19c/0xe90 [ 744.145679][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 744.150937][ C1] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 744.157060][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 744.163615][ C1] ? __pfx_writenote+0x10/0x10 [ 744.168360][ C1] elf_core_dump+0x2d97/0x3d60 [ 744.173103][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 744.178181][ C1] ? kasan_save_stack+0x3f/0x50 [ 744.182999][ C1] ? kasan_save_stack+0x30/0x50 [ 744.187818][ C1] ? kasan_save_track+0x14/0x30 [ 744.192636][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 744.197377][ C1] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 744.202890][ C1] ? get_signal+0x1f20/0x21d0 [ 744.207531][ C1] ? arch_do_signal_or_restart+0x91/0x7e0 [ 744.213220][ C1] ? irqentry_exit+0x542/0xab0 [ 744.217957][ C1] ? 0xffffffffff600000 [ 744.222093][ C1] ? lock_acquire+0x1d1/0x380 [ 744.226736][ C1] ? get_signal+0x1f20/0x21d0 [ 744.231384][ C1] ? vfs_coredump+0x2606/0x58c0 [ 744.236204][ C1] vfs_coredump+0x2606/0x58c0 [ 744.240855][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 744.245850][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 744.250756][ C1] ? lock_acquire+0x1d1/0x380 [ 744.255400][ C1] ? unwind_next_frame+0xbd/0x2090 [ 744.260483][ C1] ? lock_acquire+0x1d1/0x380 [ 744.265127][ C1] ? is_bpf_text_address+0x25/0x1a0 [ 744.270289][ C1] ? find_held_lock+0x2b/0x80 [ 744.274933][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 744.280096][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 744.285259][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 744.289988][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 744.296112][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 744.301284][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 744.306107][ C1] ? stack_trace_save+0x8e/0xc0 [ 744.310928][ C1] ? kasan_save_stack+0x3f/0x50 [ 744.315747][ C1] ? kasan_save_stack+0x30/0x50 [ 744.320564][ C1] ? kasan_save_track+0x14/0x30 [ 744.325381][ C1] ? kasan_save_free_info+0x3b/0x70 [ 744.330541][ C1] ? __kasan_slab_free+0x5f/0x80 [ 744.335446][ C1] ? kmem_cache_free+0x127/0x6c0 [ 744.340347][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 744.345164][ C1] ? get_signal+0xb02/0x21d0 [ 744.349720][ C1] ? arch_do_signal_or_restart+0x91/0x7e0 [ 744.355408][ C1] ? irqentry_exit+0x542/0xab0 [ 744.360141][ C1] ? asm_exc_page_fault+0x26/0x30 [ 744.365172][ C1] ? rcu_is_watching+0x13/0xc0 [ 744.369916][ C1] get_signal+0x1f20/0x21d0 [ 744.374394][ C1] ? __pfx_get_signal+0x10/0x10 [ 744.379216][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 744.384735][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 744.390875][ C1] irqentry_exit+0x542/0xab0 [ 744.395440][ C1] asm_exc_page_fault+0x26/0x30 [ 744.400255][ C1] RIP: 0033:0x7f910259f561 [ 744.404634][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 744.410669][ C1] RAX: 0000000000000000 RBX: 00007f9102826090 RCX: 00007f910259f559 [ 744.418604][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 744.426539][ C1] RBP: 00007f9102636b20 R08: 0000000000000000 R09: 0000000000000000 [ 744.434475][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 744.442409][ C1] R13: 00007f9102826128 R14: 00007f9102826090 R15: 00007fff30491a38 [ 744.450368][ C1] [ 744.453367][ C1] task:syz.4.713 state:R running task stack:25608 pid:10230 tgid:10229 ppid:5606 task_flags:0x400040 flags:0x00080000 [ 744.466808][ C1] Call Trace: [ 744.470061][ C1] [ 744.472966][ C1] __schedule+0x125e/0x6990 [ 744.477455][ C1] ? __pfx___schedule+0x10/0x10 [ 744.482291][ C1] ? mark_held_locks+0x40/0x70 [ 744.487028][ C1] preempt_schedule_irq+0x4e/0x90 [ 744.492025][ C1] irqentry_exit+0x33f/0xab0 [ 744.496591][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 744.502540][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 744.507707][ C1] Code: 05 0f a1 ce 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e 5f 80 10 0f 82 c9 02 00 00 8b 35 de 8e 80 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad a0 ce 13 0f 85 09 03 00 00 48 83 c4 [ 744.527284][ C1] RSP: 0018:ffffc90004e9f578 EFLAGS: 00000206 [ 744.533318][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 744.541255][ C1] RDX: 0000000000000000 RSI: ffffffff8e5f4e6e RDI: ffffffff8c830780 [ 744.549194][ C1] RBP: ffffffff8ffeb420 R08: 00000000cd3458d0 R09: 0000000000000007 [ 744.557138][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 744.565073][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 744.573020][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 744.579321][ C1] filemap_map_pages+0x1e8/0x2020 [ 744.584315][ C1] ? filemap_map_pages+0x1d7/0x2020 [ 744.589483][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 744.594395][ C1] ? lock_acquire+0x1d1/0x380 [ 744.599040][ C1] ? __pte_offset_map+0x9a/0x470 [ 744.603945][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 744.609374][ C1] ? __pte_offset_map+0x1e9/0x470 [ 744.614367][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 744.619792][ C1] do_fault+0xa76/0x1890 [ 744.624006][ C1] ? __pfx_do_fault+0x10/0x10 [ 744.628648][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 744.633382][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 744.638132][ C1] __handle_mm_fault+0x150b/0x2f60 [ 744.643217][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 744.648648][ C1] ? pte_offset_map_lock+0x174/0x320 [ 744.653899][ C1] ? find_held_lock+0x2b/0x80 [ 744.658540][ C1] ? find_held_lock+0x2b/0x80 [ 744.663181][ C1] ? follow_page_pte+0x536/0x1050 [ 744.668179][ C1] handle_mm_fault+0x363/0xa20 [ 744.672916][ C1] __get_user_pages+0x8a9/0x2c20 [ 744.677824][ C1] ? __pfx_mt_find+0x10/0x10 [ 744.682381][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 744.687723][ C1] populate_vma_page_range+0x267/0x3f0 [ 744.693152][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 744.699096][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 744.704873][ C1] __mm_populate+0x107/0x3a0 [ 744.709432][ C1] ? __pfx___mm_populate+0x10/0x10 [ 744.714510][ C1] ? up_write+0x2dc/0x5b0 [ 744.718813][ C1] vm_mmap_pgoff+0x441/0x470 [ 744.723373][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 744.728454][ C1] ? __pfx_do_futex+0x10/0x10 [ 744.733100][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 744.737745][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 744.742648][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 744.747898][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 744.753147][ C1] ? __task_pid_nr_ns+0x1ca/0x510 [ 744.758141][ C1] ? __task_pid_nr_ns+0x1ca/0x510 [ 744.763137][ C1] __x64_sys_mmap+0x125/0x190 [ 744.767783][ C1] do_syscall_64+0x123/0x790 [ 744.772347][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.778215][ C1] RIP: 0033:0x7fd7b599f559 [ 744.782600][ C1] RSP: 002b:00007fd7b6783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 744.790975][ C1] RAX: ffffffffffffffda RBX: 00007fd7b5c25fa0 RCX: 00007fd7b599f559 [ 744.798912][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 744.806848][ C1] RBP: 00007fd7b5a36b20 R08: ffffffffffffffff R09: 00000000d6d1c000 [ 744.814785][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 744.822723][ C1] R13: 00007fd7b5c26038 R14: 00007fd7b5c25fa0 R15: 00007ffc493dd048 [ 744.830666][ C1] [ 744.833677][ C1] rcu: rcu_preempt kthread starved for 10583 jiffies! g49489 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 744.844669][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 744.854607][ C1] rcu: RCU grace-period kthread stack dump: [ 744.860459][ C1] task:rcu_preempt state:R running task stack:27400 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 744.873894][ C1] Call Trace: [ 744.877143][ C1] [ 744.880046][ C1] __schedule+0x125e/0x6990 [ 744.884523][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 744.889438][ C1] ? __pfx___schedule+0x10/0x10 [ 744.894258][ C1] ? find_held_lock+0x2b/0x80 [ 744.898910][ C1] ? schedule+0x225/0x2c0 [ 744.903251][ C1] schedule+0xdd/0x2c0 [ 744.907317][ C1] schedule_timeout+0x127/0x280 [ 744.912164][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 744.917533][ C1] ? __pfx_process_timeout+0x10/0x10 [ 744.922814][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 744.928616][ C1] ? prepare_to_swait_event+0xdf/0x4f0 [ 744.934075][ C1] rcu_gp_fqs_loop+0x1a9/0x930 [ 744.938837][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 744.944117][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 744.949051][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 744.954239][ C1] ? rcu_is_watching+0x13/0xc0 [ 744.959001][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 744.964806][ C1] rcu_gp_kthread+0x179/0x260 [ 744.969477][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 744.974667][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 744.980472][ C1] ? __kthread_parkme+0x18f/0x230 [ 744.985493][ C1] ? kthread+0x13a/0x450 [ 744.989727][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 744.994916][ C1] kthread+0x373/0x450 [ 744.998981][ C1] ? __pfx_kthread+0x10/0x10 [ 745.003567][ C1] ret_from_fork+0x730/0xd60 [ 745.008153][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 745.013259][ C1] ? __switch_to+0x800/0x10e0 [ 745.017933][ C1] ? __pfx_kthread+0x10/0x10 [ 745.022523][ C1] ret_from_fork_asm+0x1a/0x30 [ 745.027291][ C1] [ 745.030295][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 745.036605][ C1] Sending NMI from CPU 1 to CPUs 0: [ 745.041811][ C0] NMI backtrace for cpu 0 [ 745.041828][ C0] CPU: 0 UID: 0 PID: 10231 Comm: syz.3.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.041852][ C0] Tainted: [L]=SOFTLOCKUP [ 745.041858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 745.041867][ C0] RIP: 0010:mod_lruvec_state+0x6d/0x370 [ 745.041892][ C0] Code: ee e8 07 76 d1 ff 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 3c 02 00 00 48 8d 7b c0 <4c> 8b ab b8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 745.041907][ C0] RSP: 0000:ffffc90004c367f0 EFLAGS: 00000046 [ 745.041920][ C0] RAX: dffffc0000000000 RBX: ffff88801f6bd140 RCX: ffffffff95b9e543 [ 745.041932][ C0] RDX: 1ffff11003ed7aff RSI: 0000000000000014 RDI: ffff88801f6bd100 [ 745.041943][ C0] RBP: 0000000000000002 R08: ffffffff95b9e540 R09: ffffffffffffffff [ 745.041953][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffffffffffff [ 745.041963][ C0] R13: ffff88801f6bd7f8 R14: 0000000000000002 R15: 0000000000000001 [ 745.041974][ C0] FS: 0000555582008500(0000) GS:ffff8881224a4000(0000) knlGS:0000000000000000 [ 745.041990][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.042001][ C0] CR2: 0000001b33421530 CR3: 0000000073c13000 CR4: 00000000003526f0 [ 745.042012][ C0] Call Trace: [ 745.042017][ C0] [ 745.042025][ C0] lru_gen_update_size+0x3b5/0x12f0 [ 745.042047][ C0] lru_gen_del_folio+0x2e9/0x720 [ 745.042064][ C0] ? __pfx_lru_gen_del_folio+0x10/0x10 [ 745.042081][ C0] ? folio_evictable+0xe8/0x2c0 [ 745.042101][ C0] isolate_folios.constprop.0+0x1592/0x2b50 [ 745.042131][ C0] ? __pfx_isolate_folios.constprop.0+0x10/0x10 [ 745.042150][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 745.042178][ C0] ? __pfx_try_to_inc_min_seq+0x10/0x10 [ 745.042199][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 745.042222][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 745.042245][ C0] evict_folios+0x229/0x1770 [ 745.042270][ C0] ? __pfx_evict_folios+0x10/0x10 [ 745.042288][ C0] ? do_fault+0x659/0x1890 [ 745.042306][ C0] ? handle_mm_fault+0x363/0xa20 [ 745.042327][ C0] ? exc_page_fault+0x6f/0xd0 [ 745.042351][ C0] ? blk_mq_flush_plug_list+0x145/0x600 [ 745.042378][ C0] try_to_shrink_lruvec+0x32e/0x7b0 [ 745.042396][ C0] ? mlock_folio_batch+0x3731/0x3790 [ 745.042422][ C0] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 745.042445][ C0] shrink_lruvec+0x313/0x22e0 [ 745.042462][ C0] ? xa_load+0x149/0x2c0 [ 745.042482][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 745.042500][ C0] ? xa_load+0x153/0x2c0 [ 745.042517][ C0] ? __pfx_xa_load+0x10/0x10 [ 745.042535][ C0] ? __pfx_shrink_lruvec+0x10/0x10 [ 745.042554][ C0] ? do_shrink_slab+0xb67/0x1200 [ 745.042576][ C0] ? find_held_lock+0x2b/0x80 [ 745.042589][ C0] ? do_shrink_slab+0xcd9/0x1200 [ 745.042613][ C0] ? lock_acquire+0x1d1/0x380 [ 745.042635][ C0] ? shrink_slab+0x672/0x12e0 [ 745.042666][ C0] ? __pfx___might_resched+0x10/0x10 [ 745.042683][ C0] ? page_counter_calculate_protection+0x348/0x730 [ 745.042703][ C0] ? shrink_node+0x74f/0x42e0 [ 745.042727][ C0] shrink_node+0x74f/0x42e0 [ 745.042752][ C0] ? __pfx_shrink_node+0x10/0x10 [ 745.042774][ C0] ? queue_work_on+0x11b/0x1e0 [ 745.042789][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 745.042812][ C0] ? queue_work_on+0x141/0x1e0 [ 745.042830][ C0] ? do_try_to_free_pages+0x2da/0x1500 [ 745.042850][ C0] do_try_to_free_pages+0x2da/0x1500 [ 745.042878][ C0] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 745.042900][ C0] ? psi_group_change+0x457/0xb10 [ 745.042917][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 745.042944][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 745.042960][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 745.042983][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 745.043000][ C0] try_charge_memcg+0x50a/0xfd0 [ 745.043025][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 745.043048][ C0] ? find_held_lock+0x2b/0x80 [ 745.043061][ C0] ? rcu_read_unlock+0x17/0x60 [ 745.043076][ C0] ? rcu_read_unlock+0x17/0x60 [ 745.043095][ C0] obj_cgroup_charge_pages+0x2b/0x1f0 [ 745.043119][ C0] __memcg_slab_post_alloc_hook+0x476/0x10b0 [ 745.043139][ C0] ? kasan_save_track+0x14/0x30 [ 745.043159][ C0] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 745.043178][ C0] ? alloc_buffer_head+0x21/0x140 [ 745.043199][ C0] alloc_buffer_head+0x21/0x140 [ 745.043217][ C0] folio_alloc_buffers+0x197/0x8e0 [ 745.043240][ C0] create_empty_buffers+0x3a/0x5f0 [ 745.043263][ C0] folio_create_buffers+0x13b/0x1a0 [ 745.043284][ C0] __block_write_begin_int+0x393/0x19c0 [ 745.043307][ C0] ? lock_acquire+0x1d1/0x380 [ 745.043324][ C0] ? ext4_page_mkwrite+0x335/0x1850 [ 745.043344][ C0] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 745.043370][ C0] ? __pfx___block_write_begin_int+0x10/0x10 [ 745.043393][ C0] ? __pfx___might_resched+0x10/0x10 [ 745.043411][ C0] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 745.043434][ C0] block_page_mkwrite+0x348/0x460 [ 745.043457][ C0] ext4_page_mkwrite+0xde7/0x1850 [ 745.043479][ C0] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 745.043501][ C0] do_page_mkwrite+0x17a/0x430 [ 745.043518][ C0] do_fault+0x659/0x1890 [ 745.043536][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 745.043556][ C0] ? __pfx_do_fault+0x10/0x10 [ 745.043573][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 745.043595][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 745.043620][ C0] __handle_mm_fault+0x150b/0x2f60 [ 745.043645][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 745.043666][ C0] ? __pfx_mt_find+0x10/0x10 [ 745.043690][ C0] ? find_vma+0xbf/0x140 [ 745.043706][ C0] ? __pfx_find_vma+0x10/0x10 [ 745.043728][ C0] handle_mm_fault+0x363/0xa20 [ 745.043752][ C0] do_user_addr_fault+0x745/0x12f0 [ 745.043777][ C0] exc_page_fault+0x6f/0xd0 [ 745.043800][ C0] asm_exc_page_fault+0x26/0x30 [ 745.043816][ C0] RIP: 0033:0x7f9102473c09 [ 745.043830][ C0] Code: 89 dc 41 83 e4 03 0f 85 c9 01 00 00 4c 89 ff be 04 00 00 00 e8 88 8f fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 745.043845][ C0] RSP: 002b:00007fff30491ad0 EFLAGS: 00010212 [ 745.043857][ C0] RAX: 0000001b33421534 RBX: ffffffffffffd534 RCX: ffffffff821666fc [ 745.043869][ C0] RDX: 0000001b33421530 RSI: 0000000000000004 RDI: 00007f9103355720 [ 745.043879][ C0] RBP: 0000000000000000 R08: 00007f9102810000 R09: 00007f9102812000 [ 745.043889][ C0] R10: 0000000082166700 R11: 000000000000000d R12: 0000000000000000 [ 745.043899][ C0] R13: 0000000000000848 R14: ffffffff82166347 R15: 00007f9103355720 [ 745.043911][ C0] ? probe_sched_switch+0x67/0x90 [ 745.043937][ C0] ? trace_alloc_tgid_map+0xcc/0xe0 [ 745.043962][ C0] [ 747.310131][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.310177][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.310914][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.310953][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.312555][ T33] oom_reaper: reaped process 10151 (syz.3.693), now anon-rss:0kB, file-rss:53760kB, shmem-rss:11256kB [ 748.610319][T10236] syz.3.709 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 748.610343][T10236] CPU: 0 UID: 0 PID: 10236 Comm: syz.3.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.610360][T10236] Tainted: [L]=SOFTLOCKUP [ 748.610364][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 748.610370][T10236] Call Trace: [ 748.610375][T10236] [ 748.610379][T10236] dump_stack_lvl+0x100/0x190 [ 748.610400][T10236] dump_header+0xfb/0x606 [ 748.610414][T10236] oom_kill_process.cold+0xd/0x380 [ 748.610429][T10236] out_of_memory+0x343/0x14c0 [ 748.610446][T10236] ? __pfx_out_of_memory+0x10/0x10 [ 748.610464][T10236] mem_cgroup_out_of_memory+0xc6/0x130 [ 748.610479][T10236] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 748.610492][T10236] ? find_held_lock+0x2b/0x80 [ 748.610505][T10236] ? do_raw_spin_unlock+0x145/0x1e0 [ 748.610522][T10236] ? _raw_spin_unlock+0x28/0x50 [ 748.610539][T10236] try_charge_memcg+0x76f/0xfd0 [ 748.610560][T10236] ? __pfx_try_charge_memcg+0x10/0x10 [ 748.610576][T10236] ? find_held_lock+0x2b/0x80 [ 748.610586][T10236] ? rcu_read_unlock+0x17/0x60 [ 748.610596][T10236] ? rcu_read_unlock+0x17/0x60 [ 748.610606][T10236] ? find_held_lock+0x2b/0x80 [ 748.610616][T10236] ? rcu_read_unlock+0x17/0x60 [ 748.610629][T10236] charge_memcg+0x1ae/0x210 [ 748.610647][T10236] __mem_cgroup_charge+0x2b/0x1c0 [ 748.610660][T10236] shmem_alloc_and_add_folio+0x451/0xd40 [ 748.610680][T10236] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 748.610697][T10236] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 748.610717][T10236] shmem_get_folio_gfp+0x758/0x1af0 [ 748.610738][T10236] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 748.610755][T10236] ? vm_normal_page+0x1d1/0x380 [ 748.610767][T10236] ? __pfx_vm_normal_page+0x10/0x10 [ 748.610783][T10236] shmem_write_begin+0x1a4/0x420 [ 748.610801][T10236] ? __pfx_shmem_write_begin+0x10/0x10 [ 748.610818][T10236] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 748.610838][T10236] generic_perform_write+0x292/0xa40 [ 748.610851][T10236] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 748.610873][T10236] ? __pfx_generic_perform_write+0x10/0x10 [ 748.610887][T10236] ? file_update_time_flags+0x38c/0x520 [ 748.610902][T10236] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 748.610919][T10236] shmem_file_write_iter+0x10e/0x140 [ 748.610938][T10236] __kernel_write_iter+0x2ac/0x930 [ 748.610953][T10236] ? __pfx___kernel_write_iter+0x10/0x10 [ 748.610967][T10236] ? __up_read+0x333/0x980 [ 748.610984][T10236] ? dump_user_range+0x7e0/0xe90 [ 748.611002][T10236] dump_user_range+0xa0d/0xe90 [ 748.611021][T10236] ? __pfx_dump_user_range+0x10/0x10 [ 748.611040][T10236] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 748.611054][T10236] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 748.611068][T10236] ? __pfx_writenote+0x10/0x10 [ 748.611088][T10236] elf_core_dump+0x2d97/0x3d60 [ 748.611113][T10236] ? __pfx_elf_core_dump+0x10/0x10 [ 748.611127][T10236] ? kasan_save_stack+0x3f/0x50 [ 748.611140][T10236] ? kasan_save_stack+0x30/0x50 [ 748.611152][T10236] ? kasan_save_track+0x14/0x30 [ 748.611165][T10236] ? __kasan_kmalloc+0xaa/0xb0 [ 748.611177][T10236] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 748.611190][T10236] ? get_signal+0x1f20/0x21d0 [ 748.611201][T10236] ? arch_do_signal_or_restart+0x91/0x7e0 [ 748.611218][T10236] ? irqentry_exit+0x542/0xab0 [ 748.611238][T10236] ? 0xffffffffff600000 [ 748.611268][T10236] ? lock_acquire+0x1d1/0x380 [ 748.611280][T10236] ? get_signal+0x1f20/0x21d0 [ 748.611297][T10236] ? vfs_coredump+0x2606/0x58c0 [ 748.611314][T10236] vfs_coredump+0x2606/0x58c0 [ 748.611336][T10236] ? __pfx_vfs_coredump+0x10/0x10 [ 748.611354][T10236] ? __lock_acquire+0x5c0/0x1f40 [ 748.611369][T10236] ? lock_acquire+0x1d1/0x380 [ 748.611381][T10236] ? unwind_next_frame+0xbd/0x2090 [ 748.611402][T10236] ? lock_acquire+0x1d1/0x380 [ 748.611414][T10236] ? is_bpf_text_address+0x25/0x1a0 [ 748.611426][T10236] ? find_held_lock+0x2b/0x80 [ 748.611436][T10236] ? is_bpf_text_address+0x8a/0x1a0 [ 748.611447][T10236] ? is_bpf_text_address+0x8a/0x1a0 [ 748.611457][T10236] ? bpf_ksym_find+0x128/0x1c0 [ 748.611471][T10236] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 748.611487][T10236] ? is_bpf_text_address+0x94/0x1a0 [ 748.611508][T10236] ? __sigqueue_free+0xbe/0x2a0 [ 748.611522][T10236] ? stack_trace_save+0x8e/0xc0 [ 748.611541][T10236] ? kasan_save_stack+0x3f/0x50 [ 748.611554][T10236] ? kasan_save_stack+0x30/0x50 [ 748.611566][T10236] ? kasan_save_track+0x14/0x30 [ 748.611578][T10236] ? kasan_save_free_info+0x3b/0x70 [ 748.611588][T10236] ? __kasan_slab_free+0x5f/0x80 [ 748.611601][T10236] ? kmem_cache_free+0x127/0x6c0 [ 748.611611][T10236] ? __sigqueue_free+0xbe/0x2a0 [ 748.611624][T10236] ? get_signal+0xb02/0x21d0 [ 748.611634][T10236] ? arch_do_signal_or_restart+0x91/0x7e0 [ 748.611650][T10236] ? irqentry_exit+0x542/0xab0 [ 748.611666][T10236] ? asm_exc_page_fault+0x26/0x30 [ 748.611705][T10236] ? rcu_is_watching+0x13/0xc0 [ 748.611725][T10236] get_signal+0x1f20/0x21d0 [ 748.611743][T10236] ? __pfx_get_signal+0x10/0x10 [ 748.611760][T10236] arch_do_signal_or_restart+0x91/0x7e0 [ 748.611778][T10236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.611805][T10236] irqentry_exit+0x542/0xab0 [ 748.611824][T10236] asm_exc_page_fault+0x26/0x30 [ 748.611835][T10236] RIP: 0033:0x7f910259f561 [ 748.611845][T10236] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 748.611856][T10236] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 748.611866][T10236] RAX: 0000000000000000 RBX: 00007f9102826090 RCX: 00007f910259f559 [ 748.611873][T10236] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 748.611880][T10236] RBP: 00007f9102636b20 R08: 0000000000000000 R09: 0000000000000000 [ 748.611886][T10236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.611892][T10236] R13: 00007f9102826128 R14: 00007f9102826090 R15: 00007fff30491a38 [ 748.611909][T10236] [ 748.611913][T10236] memory: usage 307200kB, limit 307200kB, failcnt 161927 [ 748.611920][T10236] memory+swap: usage 431964kB, limit 9007199254740988kB, failcnt 0 [ 748.611927][T10236] kmem: usage 3352kB, limit 9007199254740988kB, failcnt 0 [ 748.611933][T10236] Memory cgroup stats for /syz3: [ 748.612007][T10236] cache 310788096 [ 748.612012][T10236] rss 348160 [ 748.612015][T10236] rss_huge 0 [ 748.612019][T10236] shmem 310689792 [ 748.612023][T10236] mapped_file 83738624 [ 748.612026][T10236] dirty 0 [ 748.612030][T10236] writeback 0 [ 748.612034][T10236] workingset_refault_anon 6 [ 748.612038][T10236] workingset_refault_file 5750 [ 748.612042][T10236] swap 127758336 [ 748.612045][T10236] swapcached 8192 [ 748.612049][T10236] pgpgin 1564673 [ 748.612053][T10236] pgpgout 1488711 [ 748.612057][T10236] pgfault 377850 [ 748.612060][T10236] pgmajfault 38 [ 748.612064][T10236] inactive_anon 167157760 [ 748.612068][T10236] active_anon 143884288 [ 748.612072][T10236] inactive_file 73728 [ 748.612076][T10236] active_file 24576 [ 748.612080][T10236] unevictable 0 [ 748.612084][T10236] hierarchical_memory_limit 314572800 [ 748.612088][T10236] hierarchical_memsw_limit 9223372036854771712 [ 748.612093][T10236] total_cache 310788096 [ 748.612097][T10236] total_rss 348160 [ 748.612101][T10236] total_rss_huge 0 [ 748.612104][T10236] total_shmem 310689792 [ 748.612108][T10236] total_mapped_file 83738624 [ 748.612113][T10236] total_dirty 0 [ 748.612116][T10236] total_writeback 0 [ 748.612120][T10236] total_workingset_refault_anon 6 [ 748.612124][T10236] total_workingset_refault_file 5750 [ 748.612128][T10236] total_swap 127758336 [ 748.612132][T10236] total_swapcached 8192 [ 748.612136][T10236] total_pgpgin 1564673 [ 748.612140][T10236] total_pgpgout 1488711 [ 748.612144][T10236] total_pgfault 377850 [ 748.612148][T10236] total_pgmajfault 38 [ 748.612152][T10236] total_inactive_anon 167157760 [ 748.612156][T10236] total_active_anon 143884288 [ 748.612160][T10236] total_inactive_file 73728 [ 748.612164][T10236] total_active_file 24576 [ 748.612168][T10236] total_unevictable 0 [ 748.612172][T10236] anon_cost 0 [ 748.612176][T10236] file_cost 0 [ 748.612180][T10236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.709,pid=10236,uid=0 [ 748.612297][T10236] Memory cgroup out of memory: Killed process 10236 (syz.3.709) total-vm:102412kB, anon-rss:1444kB, file-rss:55300kB, shmem-rss:11480kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 749.830976][T10258] device-mapper: table: 248:2: flakey: Device lookup failed (-ENOENT) SYZFAIL: failed to send rpc fd=3 want=312 sent=0 n=-1 (errno 32: Broken pipe) [ 749.830998][T10258] device-mapper: ioctl: error adding target to table [ 751.584573][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.816316][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.096527][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.349281][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.877425][ T13] bridge_slave_1: left allmulticast mode [ 752.877456][ T13] bridge_slave_1: left promiscuous mode [ 752.878446][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.909426][ T13] bridge_slave_0: left allmulticast mode [ 752.909447][ T13] bridge_slave_0: left promiscuous mode [ 752.909628][ T13] bridge0: port 1(bridge_slave_0) entered disabled state