last executing test programs: 8.540016428s ago: executing program 4 (id=838): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000480)=""/123) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}, @algo_auth={0x48, 0x1, {{'rmd160\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) 7.515715338s ago: executing program 3 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) 7.276893932s ago: executing program 3 (id=842): r0 = syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff02000c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000c"], 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="cdb2f2f513f3a6f12b6156c34893f08dfe3adfde1342a22fee7dc58d7a283087b070aad7eb8967cb8ca9a744593e9ca2296345494a5105bb609f4cca1cdda7056ad2bccf2e28a36ab04674fdae7a5fbb372688e8932126d3e8d935bbf49532b052af940f9b791f742f40629f967da82f04e0c6bc65cb0b9857bcc05343deb160f2fc4c73155bf82126520b45092e6fb65224ae5e0559c6de40b9e04893b0141408630d89ea4b92bb70f10259a0e9dd59cbc9d8e050e37bfe1ae9e603bc01fafc29", 0xc1}, 0x1, 0x0, 0x0, 0x2400c090}, 0x40) 7.065792751s ago: executing program 3 (id=843): rseq(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) 5.861149768s ago: executing program 1 (id=846): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000080)) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000000c0)={0x0, 0xaec4, 0x20000, 0x2, 0x103}, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a09, 0x20000, 0x1, 0x292}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x953a, 0x4000, 0x2, 0x267}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9df2, 0x20, 0x0, 0x122, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb0f9, 0x4, 0x3, 0xd3, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f00000013c0)={0x2e, 0x0, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x1, 0xc57, 0x0, &(0x7f00000003c0)=@buf_max_buf="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"}}, &(0x7f0000001440)) r7 = io_uring_setup(0x68a6, &(0x7f0000001500)={0x0, 0x606b, 0x20, 0x3, 0x35e, 0x0, r0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000001480)={0x0, 0x134a, 0x8000, 0x0, 0x1c7, 0x0, r4}, &(0x7f0000001580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9be7, 0x200, 0x1, 0x2fe, 0x0, r7}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8113, 0x8801, 0x0, 0x223}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x13d7, 0x80, 0x2, 0x3d1, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a1f, 0x1, 0x0, 0x2a5}}], 0x4, &(0x7f0000002800)={0x2e, 0xe, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, r8, '\x00', {0x3, 0xb8c, 0x0, &(0x7f0000001800)=@buf_512="b92de3c6b3bf0c720cf3f52782a6f2ea144dcafd912ecef53954c6d2f2f86a0e6e09a7ee7c15f66a1aa9bf53c0db0c965223aa0645fde51e8f5b6b909146ca1a5c180db5bbf414ac4aa3eda6ae4524feed0a3b6eba5b9f75c918143201c1cc49c33ecc5819eb5d6a1e690d48736ff3368ac17581b60a662664eb09c6bc0e4ef382ccb0b3810bf70937ef817f295714012d05e999e47ca035e47b8b24f31a85797f04f40c109643c6b5dda2205e96df90abfe2473e13949550cbead0641bd1a2e3028ebe6116505c97fe421140fcae1a5044242d566963d76a9336a9d7a2a1de0f0332e9d6e7250f17dcc269a020b8f79e74463c42bfc5d868b0067a47376f8bd384cbd0638a29fd5e58f9b94c9fc09ab60e798522fbc83c2f9b9b4a67a091ac2fb28ecbc7427d36b1d53de69f895e9062173881e122ce08902af5a44fcf5b7a3ecc38ecd41b3d0a520b97097260cbda6ef2d7295d055d5ac37446304c30c394e18c69939d9d61fd15e73f3d99dae6c9044b863cb58d94e664ec4631b128bb28109a2b27bf46a335d865355e75d29cf801df4c39ddd48304bff6a5cd766d5798cbe26bdc2fa022de0fb0f1f7eef26f7523184fead1e4dd2692542dac0115c460fad14533433021aa89362e375da2024277e00ceeefeb6a50b599aa439d81e64f7650a8675838a1557b5c36296da8165751094bedb45e4ec0174e0581cb6e19177"}}, &(0x7f0000002880)) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000028c0)={0x8, 0x3ff, 0xb0}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x48, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040041) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000002a40)) mmap$IORING_OFF_CQ_RING(0x0, 0x6, 0x2000006, 0x100010, r2, 0x8000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e80)={r0, 0xe0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000002c80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002cc0), &(0x7f0000002d00), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000002d40)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003080)={r0, 0x20, &(0x7f0000003040)={&(0x7f0000002f00)=""/51, 0x33, 0x0, &(0x7f0000002f40)=""/234, 0xea}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0x16, 0x19, &(0x7f0000002a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe0000000}, [@initr0, @generic={0x1, 0x7, 0x8, 0xff, 0x4a91aded}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000002b80)='syzkaller\x00', 0x91, 0x0, 0x0, 0x41100, 0x1, '\x00', r14, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002ec0)={0x2, 0xf, 0x19c19078, 0x40}, 0x10, r15, r0, 0x0, &(0x7f00000030c0)=[r0], 0x0, 0x10, 0x4}, 0x94) r16 = openat$null(0xffffffffffffff9c, &(0x7f00000031c0), 0x2443, 0x0) syz_ublk_setup_io_uring(0x5512, &(0x7f0000003200)={0x0, 0x37a, 0x10000, 0x3, 0xd3, 0x0, r7}, &(0x7f0000003280)=0x0, &(0x7f00000032c0), &(0x7f0000003300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, r10, &(0x7f0000003380)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xd48, 0x0, r13, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003340)=@new_dev={0x2, 0xf25, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0xe0}}}, &(0x7f0000003400)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000003440)=0x0) syz_ublk_add_dev(r16, r17, r5, r1, &(0x7f00000034c0)={0x2e, 0x24, 0x0, r18, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003480)=@new_dev={0x2, 0x87d, 0x0, 0x0, 0x1000, 0xffffffff, r19, 0x0, 0x64}}}, &(0x7f0000003540)) r20 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003580), 0x34600, 0x0) ioctl$PPPIOCSMRU1(r20, 0x40047452, &(0x7f00000035c0)=0xffff) socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000003700)) ioctl$SNDCTL_SEQ_NRMIDIS(r16, 0x8004510b, &(0x7f0000003740)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r12, 0xc0709411, &(0x7f0000003780)={{0x0, 0x80000000, 0xca4, 0x2, 0x5, 0xe, 0x7, 0x3f, 0x3, 0x7, 0x7, 0x6, 0x1, 0x4, 0x6}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000003840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f00001192c0)={0x3, [{r21, r22}], 0x2, "5754faa1e4fdf0"}) 5.714465135s ago: executing program 1 (id=847): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x61, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x48080) rseq(&(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0x2, 0x7, 0x8000000000000001}}, 0x20, 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setpipe(r0, 0x407, 0x8001a0) splice(r0, 0x0, r4, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x0, 0xfffffffe, 0x8000, 0x800a1, 0xffffffffffffffff, 0x3}, 0x50) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x40}, 0x2c, 0x0, 0x5, 0xb, 0x8001, 0x1, 0x12, 0xe, 0x5, 0x7db8, {0x1, 0x8, 0xffff, 0x80, 0xffffffff, 0xd7d}}}}]}, 0x78}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_clone3(&(0x7f0000000900)={0xb7800080, &(0x7f0000000380)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000180)={0x297, @time={0xffff, 0x400}, 0x1, {}, 0x67, 0x1}) io_setup(0x8, &(0x7f0000000600)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xec99}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004804}, 0x20000000) connect$pppl2tp(r11, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0xf8, 0x308, 0x308, 0x308, 0xf8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, &(0x7f0000000440), {[{{@ipv6={@private1, @loopback, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'dvmrp1\x00', 'veth0_vlan\x00', {}, {0xff}, 0x33, 0xc7, 0x0, 0x5a993ecd3b362ad}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xa}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@dst={{0x48}, {0x0, 0x6, 0x1, [0x6, 0xd5, 0x6, 0xc, 0x7, 0x1, 0x1, 0x2, 0xa, 0x4, 0x2, 0x9, 0x3, 0x6, 0xa568, 0x9], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x43}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x83e, 0x5, @ipv6=@mcast1, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 4.778719723s ago: executing program 4 (id=849): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x58d042, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x1f0}, {0x0}], 0x2) 4.776103342s ago: executing program 3 (id=850): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) lremovexattr(0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) unshare(0x4a000200) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4103, 0x1007}], 0x1, 0x18, 0x4000002) 4.723025848s ago: executing program 0 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x43, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$FUSE_INTERRUPT(r5, 0x0, 0x0) 4.63779347s ago: executing program 1 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) 4.411039766s ago: executing program 2 (id=853): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) socket$inet(0x2, 0x2, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004006007000008000600", @ANYRES32=r1], 0x60}, 0x1, 0x400000000000000}, 0x40810) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x9}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r6) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x44090) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) syz_open_dev$dvb_demux(&(0x7f0000000600), 0xa24, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x1, 0xa8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) 4.394349098s ago: executing program 4 (id=854): r0 = socket$inet_smc(0x2b, 0x1, 0x0) memfd_create(0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0x145303) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, 0x0, &(0x7f00000010c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f0000000100)) dup(r0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x4, 0x0, 0x39}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8, 0x7b, 0x8, 0xfffffff8}, {0x9, 0x8, 0x2, 0xffff}, {0x9, 0xa, 0x9, 0x7b}]}) 4.181183294s ago: executing program 1 (id=855): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x25}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x7, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0xa, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0xffffff01, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x2b, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x9, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x4, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x6}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x100, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x7fff, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x10, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x9, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x4, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x6, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x30c, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x2}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0x2, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc400, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x9f, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0x10, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x1, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x7, 0x5}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xc, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x6}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8) write$binfmt_elf32(r1, &(0x7f0000002cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x43, 0x6, 0x8, 0x3, 0x3, 0x5, 0x333, 0x38, 0xbf, 0xe, 0x7, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7362, 0x4, 0x200001, 0x2, 0x400}]}, 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) open(&(0x7f0000000500)='./file0\x00', 0x200000, 0x100) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000100)={0x10000000, 0x0, 0x1, 0x2, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r6, 0x24, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.693508664s ago: executing program 2 (id=856): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0x0, 0xcf0d}, 0xfffffffc, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0x84d9, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x2, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0xe5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0xfffffffd, 0x0, 0x40, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x200]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x13) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresuid(0xee00, 0xee00, 0x0) socket(0x10, 0x3, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) 3.606592412s ago: executing program 1 (id=857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) r5 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 3.487436528s ago: executing program 0 (id=858): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000080)) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000000c0)={0x0, 0xaec4, 0x20000, 0x2, 0x103}, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a09, 0x20000, 0x1, 0x292}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x953a, 0x4000, 0x2, 0x267}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9df2, 0x20, 0x0, 0x122, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb0f9, 0x4, 0x3, 0xd3, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f00000013c0)={0x2e, 0x0, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x1, 0xc57, 0x0, &(0x7f00000003c0)=@buf_max_buf="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"}}, &(0x7f0000001440)) r7 = io_uring_setup(0x68a6, &(0x7f0000001500)={0x0, 0x606b, 0x20, 0x3, 0x35e, 0x0, r0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000001480)={0x0, 0x134a, 0x8000, 0x0, 0x1c7, 0x0, r4}, &(0x7f0000001580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9be7, 0x200, 0x1, 0x2fe, 0x0, r7}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8113, 0x8801, 0x0, 0x223}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x13d7, 0x80, 0x2, 0x3d1, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a1f, 0x1, 0x0, 0x2a5}}], 0x4, &(0x7f0000002800)={0x2e, 0xe, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, r8, '\x00', {0x3, 0xb8c, 0x0, &(0x7f0000001800)=@buf_512="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"}}, &(0x7f0000002880)) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000028c0)={0x8, 0x3ff, 0xb0}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x48, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040041) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000002a40)) mmap$IORING_OFF_CQ_RING(0x0, 0x6, 0x2000006, 0x100010, r2, 0x8000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e80)={r0, 0xe0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000002c80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002cc0), &(0x7f0000002d00), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000002d40)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003080)={r0, 0x20, &(0x7f0000003040)={&(0x7f0000002f00)=""/51, 0x33, 0x0, &(0x7f0000002f40)=""/234, 0xea}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0x16, 0x19, &(0x7f0000002a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe0000000}, [@initr0, @generic={0x1, 0x7, 0x8, 0xff, 0x4a91aded}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000002b80)='syzkaller\x00', 0x91, 0x0, 0x0, 0x41100, 0x1, '\x00', r14, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002ec0)={0x2, 0xf, 0x19c19078, 0x40}, 0x10, r15, r0, 0x0, &(0x7f00000030c0)=[r0], 0x0, 0x10, 0x4}, 0x94) r16 = openat$null(0xffffffffffffff9c, &(0x7f00000031c0), 0x2443, 0x0) syz_ublk_setup_io_uring(0x5512, &(0x7f0000003200)={0x0, 0x37a, 0x10000, 0x3, 0xd3, 0x0, r7}, &(0x7f0000003280)=0x0, &(0x7f00000032c0), &(0x7f0000003300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, r10, &(0x7f0000003380)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xd48, 0x0, r13, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003340)=@new_dev={0x2, 0xf25, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0xe0}}}, &(0x7f0000003400)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000003440)=0x0) syz_ublk_add_dev(r16, r17, r5, r1, &(0x7f00000034c0)={0x2e, 0x24, 0x0, r18, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003480)=@new_dev={0x2, 0x87d, 0x0, 0x0, 0x1000, 0xffffffff, r19, 0x0, 0x64}}}, &(0x7f0000003540)) r20 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003580), 0x34600, 0x0) ioctl$PPPIOCSMRU1(r20, 0x40047452, &(0x7f00000035c0)=0xffff) syz_emit_vhci(&(0x7f0000003600)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x5e, 0xc9}}}, 0x6) lstat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000003700)) ioctl$SNDCTL_SEQ_NRMIDIS(r16, 0x8004510b, &(0x7f0000003740)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r12, 0xc0709411, &(0x7f0000003780)={{0x0, 0x80000000, 0xca4, 0x2, 0x5, 0xe, 0x7, 0x3f, 0x3, 0x7, 0x7, 0x6, 0x1, 0x4, 0x6}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000003840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f00001192c0)={0x3, [{r21, r22}], 0x2, "5754faa1e4fdf0"}) 3.454947321s ago: executing program 3 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) write(r3, &(0x7f0000000000)='7', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xa7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x48040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000004ab7609b11f8800000000000736a5d401b096f55b08afe5b0c95734ed32f43b06424d9bb5bb95f8ccc47affa03680c753b22252ca058eb49dfae03af2132e22ad4c09e9e8030cfe061145014e20c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffff00000000}, 0x38) 3.097746451s ago: executing program 4 (id=860): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0xa0b2, 0x0, 0x0, 0xef}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800090400000000000100000a000000000000020017000008001e0001000000080017004e224e22"], 0x2c}}, 0x80) syz_open_procfs$pagemap(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) setns(0xc9, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) listen(r6, 0xda90) accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000000)='7', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_ublk_setup_queues(r8, r5, &(0x7f00000002c0)={0x0, 0x67a1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x20, 0x20fe, 0x39c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe21f, 0x800, 0xfffffffe, 0xae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4de, 0x2000, 0x0, 0x20001f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.010272052s ago: executing program 2 (id=861): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x40810) 2.854382276s ago: executing program 0 (id=862): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x4c, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd7000fedbdf25640000000800e992e25960957cd0cc01007400000008000300e17242eccfaca81c75e4c7eafe272bef303ca92932fed8da0700a5eae859d6e0540b9bbea44dc9208215d86e9d19d45ab71da8de6659cc5e0f10e17722d1a652764c82789e5c082a2ccdf7e8c30921a7d30466b630a9f32c0db62bff41ae751db2eefb5e15315a646a8fec8f62858f28ea43beb31c21a05c1f3cba182ce0fb77c04610db65510cd58e90e5e57da3f5ee9c4583d8c5b42cf03bb56732c85294459a2a936a23", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40001) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="4b5a9a180a2e"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x1, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 2.755690607s ago: executing program 1 (id=863): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000840)=""/4096, 0x1000) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) read(r2, &(0x7f0000001680)=""/4096, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x31, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) 2.716527626s ago: executing program 2 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0, 0xe0}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2c}}, 0x4048000) 2.406303978s ago: executing program 0 (id=865): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) 2.34719517s ago: executing program 2 (id=866): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x898b) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048015}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_usb_connect(0x3, 0xc7, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c2405", @ANYRESHEX=0x0], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0xfa, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0x8000, 0x3, 0xff]], '\x00', [{0x10, 0x12, 0x0, 0x0, 0x1, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x5, 0x0, 0x0, 0x1}, {0x0, 0xf0240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc048) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r5, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8000031, 0x9, 0x80, 0x18, 0x1, 0x3, 0x2, 0xb4c0}, 0x0) 1.590913848s ago: executing program 3 (id=867): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9", 0xc4}], 0x1}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) mkdirat(0xffffffffffffffff, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setuid(0xee00) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="026ad9fffee4b4000c7dea4e010000000004040000000000", @ANYRES32=0xee01, @ANYRESDEC], 0x2c, 0x6) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000280)={0x1, 0x95, 0x1, &(0x7f0000000240)={0x21, "ae4095a05045db3967a2d0bbb17ecd023d06b38eb7da595e6a36f89632ee3ba916"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1.02703336s ago: executing program 0 (id=868): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x30, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r4, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 812.369673ms ago: executing program 4 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x43, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 642.222832ms ago: executing program 0 (id=870): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x4000000006, 0x100000800000010}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0xfff, r2, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = syz_io_uring_setup(0x16b4, &(0x7f00000000c0)={0x0, 0xeb36, 0x1, 0x1, 0x2026b}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)) io_uring_setup(0x5008, &(0x7f0000000440)={0x0, 0x1fc7, 0x80, 0x1, 0x2d5, 0x0, r5}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 504.540198ms ago: executing program 2 (id=871): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xffffffce) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x4, 0x80000, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x31, 0x0, &(0x7f00000001c0)) bind$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000080)={0x0, r0, r1, 0x970b, 0x6, '\x00', {0x4, 0xb34, 0x9, 0x6, 0x9, 0xfffffff1, 0x7, 0xfffffffffffffff7, {0x4, 0x3}, {0xffffffffffffff54, 0x7f}, {0x9, 0x7cf4}, 0x3, 0x5, 0x8, 0x8, 0x2, 0x4, 0x1, 0xf320, 0x7, 0x4327, '\x00', 0x9, 0xfff, 0x62, 0xd}}) 0s ago: executing program 4 (id=872): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) readv(r6, &(0x7f0000000880)=[{&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f0000000440)=""/172, 0xac}], 0x2) kernel console output (not intermixed with test programs): usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 188.637231][ T190] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 188.670500][ T190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.670526][ T190] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 188.670540][ T190] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 188.670560][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.855098][ T31] kauditd_printk_skb: 224 callbacks suppressed [ 188.855111][ T31] audit: type=1400 audit(1789271206.827:5319): avc: denied { prog_load } for pid=7368 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 188.855134][ T31] audit: type=1400 audit(1789271206.827:5320): avc: denied { bpf } for pid=7368 comm="syz.2.440" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.866951][ T31] audit: type=1400 audit(1789271206.837:5321): avc: denied { perfmon } for pid=7368 comm="syz.2.440" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.886676][ T31] audit: type=1400 audit(1789271206.857:5322): avc: denied { perfmon } for pid=7368 comm="syz.2.440" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.981270][ T31] audit: type=1400 audit(1789271206.957:5323): avc: denied { perfmon } for pid=7368 comm="syz.2.440" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.981296][ T31] audit: type=1400 audit(1789271206.957:5324): avc: denied { perfmon } for pid=7368 comm="syz.2.440" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.981317][ T31] audit: type=1400 audit(1789271206.957:5325): avc: denied { bpf } for pid=7368 comm="syz.2.440" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.013152][ T31] audit: type=1400 audit(1789271206.987:5326): avc: denied { prog_load } for pid=7368 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 189.013177][ T31] audit: type=1400 audit(1789271206.987:5327): avc: denied { bpf } for pid=7368 comm="syz.2.440" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.103523][ T31] audit: type=1400 audit(1789271207.077:5328): avc: denied { create } for pid=7353 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 189.160016][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.163878][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.192777][ T7372] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 189.210693][ T7372] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 190.774299][ T5703] usb 1-1: USB disconnect, device number 19 [ 190.929884][ T5797] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 191.270388][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 191.274473][ T5797] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 191.306204][ T5797] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 191.347982][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.347999][ T5797] usb 4-1: Product: syz [ 191.348007][ T5797] usb 4-1: Manufacturer: syz [ 191.348015][ T5797] usb 4-1: SerialNumber: syz [ 192.537957][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.553557][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.658761][ T7396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.456'. [ 192.804303][ T5797] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.804491][ T5797] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 193.535072][ T5797] usb 4-1: USB disconnect, device number 21 [ 193.913302][ T31] kauditd_printk_skb: 149 callbacks suppressed [ 193.913314][ T31] audit: type=1400 audit(1789271211.887:5477): avc: denied { mounton } for pid=7406 comm="syz.4.458" path="/103/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 194.224189][ T31] audit: type=1400 audit(1789271212.197:5478): avc: denied { unlink } for pid=7406 comm="syz.4.458" name="#3" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 194.288874][ T31] audit: type=1400 audit(1789271212.257:5479): avc: denied { module_request } for pid=7411 comm="syz.0.459" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 194.386146][ T31] audit: type=1400 audit(1789271212.357:5480): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.414637][ T31] audit: type=1400 audit(1789271212.357:5481): avc: denied { read write open } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.445465][ T31] audit: type=1400 audit(1789271212.417:5482): avc: denied { ioctl } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.546263][ T31] audit: type=1400 audit(1789271212.517:5483): avc: denied { mount } for pid=7406 comm="syz.4.458" name="/" dev="overlay" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.630905][ T31] audit: type=1400 audit(1789271212.607:5484): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.731392][ T31] audit: type=1400 audit(1789271212.707:5485): avc: denied { sys_module } for pid=7411 comm="syz.0.459" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 194.733454][ T31] audit: type=1400 audit(1789271212.707:5486): avc: denied { module_request } for pid=7411 comm="syz.0.459" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 194.930327][ T7423] syzkaller0: entered promiscuous mode [ 194.930340][ T7423] syzkaller0: entered allmulticast mode [ 195.034446][ T7425] SELinux: Context system_u: is not valid (left unmapped). [ 195.838450][ T7437] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 195.926181][ T7444] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 196.910159][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 197.006447][ T5613] Bluetooth: hci3: unexpected cc 0x0c47 length: 2 > 1 [ 197.006466][ T5613] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 197.190327][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 198.661458][ T7484] netlink: 'syz.0.482': attribute type 12 has an invalid length. [ 198.661472][ T7484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.482'. [ 198.921030][ T31] kauditd_printk_skb: 280 callbacks suppressed [ 198.921042][ T31] audit: type=1400 audit(1789271216.897:5767): avc: denied { setopt } for pid=7486 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.966946][ T31] audit: type=1400 audit(1789271216.937:5768): avc: denied { read } for pid=7488 comm="syz.0.485" dev="nsfs" ino=4026533122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 198.966973][ T31] audit: type=1400 audit(1789271216.937:5769): avc: denied { read open } for pid=7488 comm="syz.0.485" path="net:[4026533122]" dev="nsfs" ino=4026533122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.018698][ T31] audit: type=1400 audit(1789271216.937:5770): avc: denied { map } for pid=7486 comm="syz.2.484" path="socket:[18265]" dev="sockfs" ino=18265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.045169][ T31] audit: type=1400 audit(1789271217.017:5771): avc: denied { create } for pid=7488 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.074774][ T31] audit: type=1400 audit(1789271217.047:5772): avc: denied { read write } for pid=7486 comm="syz.2.484" path="socket:[18265]" dev="sockfs" ino=18265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.116007][ T31] audit: type=1400 audit(1789271217.087:5773): avc: denied { connect } for pid=7488 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.161661][ T31] audit: type=1400 audit(1789271217.127:5774): avc: denied { create } for pid=7489 comm="syz.1.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.193926][ T31] audit: type=1400 audit(1789271217.167:5775): avc: denied { ioctl } for pid=7489 comm="syz.1.486" path="socket:[18276]" dev="sockfs" ino=18276 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.237717][ T31] audit: type=1400 audit(1789271217.207:5776): avc: denied { create } for pid=7489 comm="syz.1.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.583575][ T5613] Bluetooth: hci1: unexpected event for opcode 0x204e [ 199.662411][ T7498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.740745][ T7500] ocfs2: Bad value for 'barrier' [ 200.657336][ T7522] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 200.807397][ T7527] fuse: fd is not a fuse device [ 201.015353][ T7530] 9pnet_virtio: no channels available for device 127.0.0.1 [ 201.428919][ T190] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 201.580242][ T190] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 201.614407][ T190] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 201.614424][ T190] usb 4-1: Product: syz [ 201.614432][ T190] usb 4-1: SerialNumber: syz [ 201.617538][ T190] usb 4-1: config 0 descriptor?? [ 201.685488][ T7548] sctp: [Deprecated]: syz.1.505 (pid 7548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.685488][ T7548] Use struct sctp_sack_info instead [ 202.177543][ T7537] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 202.213932][ T190] ldusb 4-1:0.0: Interrupt in endpoint not found [ 202.216799][ T190] usb 4-1: USB disconnect, device number 22 [ 202.339516][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 203.342417][ T7565] bridge1: entered promiscuous mode [ 203.342430][ T7565] bridge1: entered allmulticast mode [ 203.400368][ T7565] team0: Port device bridge1 added [ 203.936707][ T31] kauditd_printk_skb: 261 callbacks suppressed [ 203.936718][ T31] audit: type=1400 audit(1789271221.908:6038): avc: denied { read write open } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.971947][ T31] audit: type=1400 audit(1789271221.948:6039): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.015164][ T31] audit: type=1400 audit(1789271221.988:6040): avc: denied { module_request } for pid=7579 comm="syz.2.513" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 204.065876][ T31] audit: type=1400 audit(1789271222.038:6041): avc: denied { listen } for pid=7574 comm="syz.0.512" lport=38825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.104779][ T31] audit: type=1400 audit(1789271222.078:6042): avc: denied { accept } for pid=7574 comm="syz.0.512" lport=38825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.142753][ T31] audit: type=1400 audit(1789271222.118:6043): avc: denied { sys_module } for pid=7563 comm="syz.4.509" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 204.142781][ T31] audit: type=1400 audit(1789271222.118:6044): avc: denied { module_request } for pid=7563 comm="syz.4.509" kmod="" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 204.275502][ T31] audit: type=1400 audit(1789271222.248:6045): avc: denied { prog_load } for pid=7574 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.275531][ T31] audit: type=1400 audit(1789271222.248:6046): avc: denied { bpf } for pid=7574 comm="syz.0.512" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.327682][ T31] audit: type=1400 audit(1789271222.298:6047): avc: denied { perfmon } for pid=7574 comm="syz.0.512" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.883664][ T7596] netlink: 48 bytes leftover after parsing attributes in process `syz.3.517'. [ 204.919510][ T7595] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 205.005425][ T7595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.205382][ T7644] syzkaller0: entered promiscuous mode [ 208.205396][ T7644] syzkaller0: entered allmulticast mode [ 208.408400][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 209.664123][ T31] kauditd_printk_skb: 265 callbacks suppressed [ 209.664135][ T31] audit: type=1400 audit(1789271227.638:6313): avc: denied { read } for pid=7642 comm="syz.0.534" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.664159][ T31] audit: type=1400 audit(1789271227.638:6314): avc: denied { read open } for pid=7642 comm="syz.0.534" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.665472][ T31] audit: type=1400 audit(1789271227.638:6315): avc: denied { read } for pid=7642 comm="syz.0.534" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.665494][ T31] audit: type=1400 audit(1789271227.638:6316): avc: denied { read open } for pid=7642 comm="syz.0.534" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.871547][ T31] audit: type=1400 audit(1789271227.838:6317): avc: denied { read } for pid=7652 comm="syz.3.535" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.873045][ T31] audit: type=1400 audit(1789271227.848:6318): avc: denied { read open } for pid=7652 comm="syz.3.535" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.877156][ T31] audit: type=1400 audit(1789271227.848:6319): avc: denied { create } for pid=7652 comm="syz.3.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.962915][ T7653] FAULT_INJECTION: forcing a failure. [ 209.962915][ T7653] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 209.962935][ T7653] CPU: 0 UID: 0 PID: 7653 Comm: syz.3.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.962950][ T7653] Tainted: [L]=SOFTLOCKUP [ 209.962954][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 209.962961][ T7653] Call Trace: [ 209.962965][ T7653] [ 209.962970][ T7653] dump_stack_lvl+0x100/0x190 [ 209.962993][ T7653] should_fail_ex.cold+0x5/0xa [ 209.963007][ T7653] ? prepare_alloc_pages+0x16d/0x5b0 [ 209.963023][ T7653] should_fail_alloc_page+0xeb/0x140 [ 209.963038][ T7653] prepare_alloc_pages+0x1f0/0x5b0 [ 209.963055][ T7653] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 209.963076][ T7653] ? __lock_acquire+0x5c0/0x1f40 [ 209.963092][ T7653] ? __lock_acquire+0x5c0/0x1f40 [ 209.963104][ T7653] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.963124][ T7653] ? __lock_acquire+0x5c0/0x1f40 [ 209.963137][ T7653] ? lock_acquire+0x1d1/0x380 [ 209.963148][ T7653] ? unwind_next_frame+0xbd/0x2090 [ 209.963168][ T7653] ? __kasan_check_byte+0x13/0x50 [ 209.963183][ T7653] ? unwind_next_frame+0x3be/0x2090 [ 209.963198][ T7653] ? rcu_is_watching+0x13/0xc0 [ 209.963213][ T7653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.963227][ T7653] ? policy_nodemask+0xed/0x4f0 [ 209.963243][ T7653] alloc_pages_mpol+0x201/0x550 [ 209.963259][ T7653] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 209.963273][ T7653] ? lock_release+0x24d/0x310 [ 209.963284][ T7653] ? bpf_ksym_find+0x128/0x1c0 [ 209.963301][ T7653] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 209.963321][ T7653] folio_alloc_mpol_noprof+0x36/0x260 [ 209.963339][ T7653] vma_alloc_folio_noprof+0xed/0x1d0 [ 209.963356][ T7653] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 209.963374][ T7653] ? __kasan_check_byte+0x13/0x50 [ 209.963392][ T7653] do_anonymous_page+0xac9/0x2050 [ 209.963412][ T7653] ? __pfx_do_anonymous_page+0x10/0x10 [ 209.963426][ T7653] ? rcu_read_unlock+0x2d/0xb0 [ 209.963442][ T7653] ? rcu_read_unlock+0x2d/0xb0 [ 209.963458][ T7653] ? __pte_offset_map+0x179/0x310 [ 209.963472][ T7653] __handle_mm_fault+0x1ff3/0x2f60 [ 209.963492][ T7653] ? __pfx___handle_mm_fault+0x10/0x10 [ 209.963507][ T7653] ? __pfx_mt_find+0x10/0x10 [ 209.963531][ T7653] ? find_vma+0xbf/0x140 [ 209.963542][ T7653] ? __pfx_find_vma+0x10/0x10 [ 209.963556][ T7653] handle_mm_fault+0x363/0xa20 [ 209.963574][ T7653] do_user_addr_fault+0x745/0x12f0 [ 209.963593][ T7653] exc_page_fault+0x6f/0xd0 [ 209.963608][ T7653] asm_exc_page_fault+0x26/0x30 [ 209.963619][ T7653] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 209.963631][ T7653] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f b1 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 209.963642][ T7653] RSP: 0018:ffffc90004a8f9c0 EFLAGS: 00050206 [ 209.963652][ T7653] RAX: 0000000000000001 RBX: 000000000000009f RCX: 000000000000009f [ 209.963658][ T7653] RDX: 0000000000000001 RSI: ffff88802665e000 RDI: 00002000000042c0 [ 209.963665][ T7653] RBP: ffffc90004a8fbd0 R08: 0000000000000000 R09: ffffed1004ccbc13 [ 209.963672][ T7653] R10: ffff88802665e09e R11: 0000000000000000 R12: ffff88802665e000 [ 209.963684][ T7653] R13: 0000000000000000 R14: 00002000000042c0 R15: 000000000000009f [ 209.963698][ T7653] _copy_to_iter+0x4c5/0x1720 [ 209.963713][ T7653] ? __pfx__copy_to_iter+0x10/0x10 [ 209.963724][ T7653] ? do_raw_spin_lock+0x128/0x260 [ 209.963738][ T7653] ? find_held_lock+0x2b/0x80 [ 209.963754][ T7653] ? seq_read_iter+0xd33/0x1270 [ 209.963767][ T7653] ? seq_read_iter+0xd33/0x1270 [ 209.963783][ T7653] seq_read_iter+0xdab/0x1270 [ 209.963802][ T7653] seq_read+0x344/0x4d0 [ 209.963814][ T7653] ? __pfx_seq_read+0x10/0x10 [ 209.963826][ T7653] ? get_pid_task+0x2a/0x250 [ 209.963843][ T7653] ? lock_acquire+0x1d1/0x380 [ 209.963854][ T7653] ? fdget_pos+0x2aa/0x380 [ 209.963871][ T7653] ? selinux_file_permission+0x8f/0x6d0 [ 209.963886][ T7653] ? __pfx_seq_read+0x10/0x10 [ 209.963899][ T7653] proc_reg_read+0x240/0x330 [ 209.963915][ T7653] ? __pfx_proc_reg_read+0x10/0x10 [ 209.963932][ T7653] vfs_read+0x1e4/0xb40 [ 209.963944][ T7653] ? lock_acquire+0x1d1/0x380 [ 209.963955][ T7653] ? __fget_files+0x34/0x3d0 [ 209.963968][ T7653] ? __pfx_vfs_read+0x10/0x10 [ 209.963977][ T7653] ? find_held_lock+0x2b/0x80 [ 209.963993][ T7653] ? __fget_files+0x215/0x3d0 [ 209.964009][ T7653] ? __fget_files+0x21f/0x3d0 [ 209.964026][ T7653] ksys_read+0x12a/0x250 [ 209.964037][ T7653] ? __pfx_ksys_read+0x10/0x10 [ 209.964052][ T7653] do_syscall_64+0x123/0x790 [ 209.964069][ T7653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.964080][ T7653] RIP: 0033:0x7f3d54d9e159 [ 209.964089][ T7653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.964099][ T7653] RSP: 002b:00007f3d55d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.964109][ T7653] RAX: ffffffffffffffda RBX: 00007f3d55025fa0 RCX: 00007f3d54d9e159 [ 209.964116][ T7653] RDX: 0000000000002020 RSI: 00002000000042c0 RDI: 0000000000000003 [ 209.964123][ T7653] RBP: 00007f3d55d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 209.964129][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.964135][ T7653] R13: 00007f3d55026038 R14: 00007f3d55025fa0 R15: 00007ffe730295e8 [ 209.964150][ T7653] [ 210.618365][ T31] audit: type=1400 audit(1789271228.588:6320): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.623021][ T31] audit: type=1400 audit(1789271228.588:6321): avc: denied { read write open } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.623048][ T31] audit: type=1400 audit(1789271228.598:6322): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.377676][ T7660] MTD: Couldn't look up '/dev/rnullb0': -2 [ 211.693033][ T7662] syzkaller0: entered promiscuous mode [ 211.693047][ T7662] syzkaller0: entered allmulticast mode [ 211.730971][ T7664] Illegal XDP return value 4294967294 on prog (id 27) dev N/A, expect packet loss! [ 211.816073][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 212.315856][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 212.593291][ T7686] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 213.348453][ T190] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 213.509289][ T190] usb 4-1: Using ep0 maxpacket: 32 [ 213.514550][ T190] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 213.544531][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 213.561048][ T190] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 213.561064][ T190] usb 4-1: config 0 has no interface number 0 [ 213.606486][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.606504][ T190] usb 4-1: Product: syz [ 213.606513][ T190] usb 4-1: Manufacturer: syz [ 213.606521][ T190] usb 4-1: SerialNumber: syz [ 213.640042][ T190] usb 4-1: config 0 descriptor?? [ 214.286973][ T190] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 214.286995][ T190] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 214.671855][ T31] kauditd_printk_skb: 383 callbacks suppressed [ 214.671878][ T31] audit: type=1400 audit(1789271232.648:6706): avc: denied { read } for pid=7692 comm="syz.3.547" name="system" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.672660][ T31] audit: type=1400 audit(1789271232.648:6707): avc: denied { read open } for pid=7692 comm="syz.3.547" path="/dev/dma_heap/system" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.754013][ T31] audit: type=1400 audit(1789271232.728:6708): avc: denied { map_create } for pid=7692 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 214.754039][ T31] audit: type=1400 audit(1789271232.728:6709): avc: denied { perfmon } for pid=7692 comm="syz.3.547" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.820011][ T31] audit: type=1400 audit(1789271232.798:6710): avc: denied { read } for pid=7714 comm="syz.4.555" dev="nsfs" ino=4026533061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.851207][ T31] audit: type=1400 audit(1789271232.828:6711): avc: denied { map_create } for pid=7692 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 214.852740][ T31] audit: type=1400 audit(1789271232.828:6712): avc: denied { read open } for pid=7714 comm="syz.4.555" path="net:[4026533061]" dev="nsfs" ino=4026533061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.852765][ T31] audit: type=1400 audit(1789271232.828:6713): avc: denied { create } for pid=7714 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.855594][ T31] audit: type=1400 audit(1789271232.828:6714): avc: denied { ioctl } for pid=7692 comm="syz.3.547" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=926 ioctlcmd=0x6f2a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 214.855974][ T31] audit: type=1400 audit(1789271232.828:6715): avc: denied { map_read map_write } for pid=7692 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 215.602855][ T7726] FAULT_INJECTION: forcing a failure. [ 215.602855][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 215.602875][ T7726] CPU: 0 UID: 0 PID: 7726 Comm: syz.1.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.602890][ T7726] Tainted: [L]=SOFTLOCKUP [ 215.602894][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 215.602901][ T7726] Call Trace: [ 215.602904][ T7726] [ 215.602909][ T7726] dump_stack_lvl+0x100/0x190 [ 215.602929][ T7726] should_fail_ex.cold+0x5/0xa [ 215.602947][ T7726] should_failslab+0xc2/0x120 [ 215.602962][ T7726] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 215.602975][ T7726] ? sidtab_sid2str_get+0x84/0x670 [ 215.602989][ T7726] ? sidtab_sid2str_get+0x17a/0x670 [ 215.603005][ T7726] kmemdup_noprof+0x29/0x60 [ 215.603022][ T7726] sidtab_sid2str_get+0x17a/0x670 [ 215.603038][ T7726] security_sid_to_context_core+0x373/0x700 [ 215.603053][ T7726] avc_audit_post_callback+0x1aa/0x910 [ 215.603075][ T7726] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 215.603090][ T7726] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 215.603104][ T7726] ? skb_put+0x138/0x180 [ 215.603120][ T7726] ? audit_log_n_string+0x2a3/0x5a0 [ 215.603135][ T7726] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 215.603149][ T7726] common_lsm_audit+0x23f/0x2b0 [ 215.603163][ T7726] ? __pfx_common_lsm_audit+0x10/0x10 [ 215.603174][ T7726] ? avc_denied+0x14a/0x190 [ 215.603192][ T7726] slow_avc_audit+0x186/0x210 [ 215.603207][ T7726] ? __pfx_slow_avc_audit+0x10/0x10 [ 215.603223][ T7726] ? find_held_lock+0x2b/0x80 [ 215.603239][ T7726] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 215.603259][ T7726] avc_has_perm+0x1a6/0x1e0 [ 215.603275][ T7726] ? __pfx_avc_has_perm+0x10/0x10 [ 215.603289][ T7726] ? __might_fault+0xc5/0x140 [ 215.603306][ T7726] ? find_held_lock+0x2b/0x80 [ 215.603321][ T7726] ? __might_fault+0xc5/0x140 [ 215.603336][ T7726] ? __might_fault+0xc5/0x140 [ 215.603354][ T7726] selinux_bpf+0xf4/0x150 [ 215.603371][ T7726] security_bpf+0xa5/0x260 [ 215.603385][ T7726] __sys_bpf+0x440/0x4a30 [ 215.603399][ T7726] ? __pfx___sys_bpf+0x10/0x10 [ 215.603410][ T7726] ? find_held_lock+0x2b/0x80 [ 215.603425][ T7726] ? get_pid_task+0xfc/0x250 [ 215.603440][ T7726] ? get_pid_task+0xfc/0x250 [ 215.603459][ T7726] ? find_held_lock+0x2b/0x80 [ 215.603477][ T7726] ? rcu_read_lock_any_held+0x6a/0x90 [ 215.603493][ T7726] ? find_held_lock+0x2b/0x80 [ 215.603508][ T7726] ? ksys_write+0x190/0x250 [ 215.603519][ T7726] ? ksys_write+0x190/0x250 [ 215.603530][ T7726] ? lock_acquire+0x1d1/0x380 [ 215.603551][ T7726] ? fput+0x7c/0x100 [ 215.603565][ T7726] ? ksys_write+0x1ac/0x250 [ 215.603577][ T7726] ? __x64_sys_bpf+0xce/0x140 [ 215.603588][ T7726] __x64_sys_bpf+0xce/0x140 [ 215.603599][ T7726] ? do_syscall_64+0xae/0x790 [ 215.603615][ T7726] do_syscall_64+0x123/0x790 [ 215.603631][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.603642][ T7726] RIP: 0033:0x7f8d59f9e159 [ 215.603652][ T7726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.603662][ T7726] RSP: 002b:00007f8d581f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.603674][ T7726] RAX: ffffffffffffffda RBX: 00007f8d5a225fa0 RCX: 00007f8d59f9e159 [ 215.603681][ T7726] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 215.603688][ T7726] RBP: 00007f8d581f6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.603694][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.603700][ T7726] R13: 00007f8d5a226038 R14: 00007f8d5a225fa0 R15: 00007ffea51f7738 [ 215.603715][ T7726] [ 216.441221][ T7730] overlayfs: failed to clone upperpath [ 216.461609][ T190] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 216.461726][ T190] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 216.490532][ T190] usb 4-1: USB disconnect, device number 23 [ 217.676481][ T7741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.566'. [ 217.676496][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.566'. [ 217.676504][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 219.054830][ T1474] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.458912][ T7765] syzkaller1: entered promiscuous mode [ 219.458926][ T7765] syzkaller1: entered allmulticast mode [ 219.584090][ T7764] ima: policy update failed [ 219.773894][ T31] kauditd_printk_skb: 585 callbacks suppressed [ 219.773907][ T31] audit: type=1400 audit(1789271237.748:7301): avc: denied { read write } for pid=7770 comm="syz.3.578" name="vbi3" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.774445][ T31] audit: type=1400 audit(1789271237.748:7302): avc: denied { read write open } for pid=7770 comm="syz.3.578" path="/dev/vbi3" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.839221][ T31] audit: type=1400 audit(1789271237.818:7303): avc: denied { ioctl } for pid=7770 comm="syz.3.578" path="/dev/vbi3" dev="devtmpfs" ino=965 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.888480][ T31] audit: type=1400 audit(1789271237.868:7304): avc: denied { create } for pid=7771 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.895016][ T31] audit: type=1400 audit(1789271237.868:7305): avc: denied { ioctl } for pid=7770 comm="syz.3.578" path="/dev/vbi3" dev="devtmpfs" ino=965 ioctlcmd=0x561b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.949862][ T31] audit: type=1400 audit(1789271237.928:7306): avc: denied { create } for pid=7771 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.950872][ T31] audit: type=1400 audit(1789271237.928:7307): avc: denied { write } for pid=7771 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.952995][ T31] audit: type=1400 audit(1789271237.928:7308): avc: denied { read } for pid=7771 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.953550][ T31] audit: type=1400 audit(1789271237.928:7309): avc: denied { read } for pid=7771 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.099947][ T31] audit: type=1400 audit(1789271238.078:7310): avc: denied { create } for pid=7770 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 221.383934][ T7784] overlay: Bad value for 'workdir' [ 221.429894][ T7781] netlink: 56 bytes leftover after parsing attributes in process `syz.1.579'. [ 221.429910][ T7781] netlink: 56 bytes leftover after parsing attributes in process `syz.1.579'. [ 221.675992][ T7788] netlink: 'syz.4.583': attribute type 21 has an invalid length. [ 221.676005][ T7788] netlink: 128 bytes leftover after parsing attributes in process `syz.4.583'. [ 221.676078][ T7788] netlink: 3 bytes leftover after parsing attributes in process `syz.4.583'. [ 221.997484][ T7797] comedi comedi0: Cannot bond this driver to itself! [ 222.167281][ T7803] bridge1: entered promiscuous mode [ 222.167305][ T7803] bridge1: entered allmulticast mode [ 224.715597][ T7821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.755767][ T7831] openvswitch: netlink: ct_state flags 00000180 unsupported [ 224.789991][ T31] kauditd_printk_skb: 283 callbacks suppressed [ 224.790003][ T31] audit: type=1400 audit(1789271242.769:7594): avc: denied { prog_load } for pid=7816 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.790026][ T31] audit: type=1400 audit(1789271242.769:7595): avc: denied { bpf } for pid=7816 comm="syz.3.591" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.852435][ T31] audit: type=1400 audit(1789271242.829:7596): avc: denied { perfmon } for pid=7816 comm="syz.3.591" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.852467][ T31] audit: type=1400 audit(1789271242.829:7597): avc: denied { perfmon } for pid=7816 comm="syz.3.591" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.881474][ T31] audit: type=1400 audit(1789271242.859:7598): avc: denied { perfmon } for pid=7816 comm="syz.3.591" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.928282][ T31] audit: type=1400 audit(1789271242.899:7599): avc: denied { prog_load } for pid=7816 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.928309][ T31] audit: type=1400 audit(1789271242.909:7600): avc: denied { bpf } for pid=7816 comm="syz.3.591" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.999210][ T31] audit: type=1400 audit(1789271242.979:7601): avc: denied { map_create } for pid=7816 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 225.002130][ T31] audit: type=1400 audit(1789271242.979:7602): avc: denied { mount } for pid=7832 comm="syz.0.594" name="/" dev="ramfs" ino=20500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 225.005410][ T31] audit: type=1400 audit(1789271242.979:7603): avc: denied { perfmon } for pid=7816 comm="syz.3.591" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.256819][ T7835] Mount JFS Failure: -5 [ 226.073427][ T7852] rnbd_client L202: map_device: Unknown parameter or missing value 'd' [ 227.479012][ T5702] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 227.637083][ T5702] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 227.684042][ T5702] usb 2-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 227.684057][ T5702] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.684079][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.729310][ T5702] usb 2-1: config 0 descriptor?? [ 228.523938][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 228.559673][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.559699][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.559717][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.559735][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.629868][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 229.034462][ T7894] nbd: couldn't find a device at index -1 [ 229.569684][ T7907] random: crng reseeded on system resumption [ 229.834666][ T31] kauditd_printk_skb: 413 callbacks suppressed [ 229.834678][ T31] audit: type=1400 audit(1789271247.799:8017): avc: denied { write } for pid=7910 comm="syz.3.621" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 229.837456][ T31] audit: type=1400 audit(1789271247.799:8018): avc: denied { write open } for pid=7910 comm="syz.3.621" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 229.896421][ T31] audit: type=1400 audit(1789271247.869:8019): avc: denied { ioctl } for pid=7910 comm="syz.3.621" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 229.937059][ T31] audit: type=1400 audit(1789271247.899:8020): avc: denied { create } for pid=7910 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.965074][ T31] audit: type=1400 audit(1789271247.939:8021): avc: denied { ioctl } for pid=7910 comm="syz.3.621" path="socket:[21216]" dev="sockfs" ino=21216 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.966957][ T31] audit: type=1400 audit(1789271247.939:8022): avc: denied { create } for pid=7910 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.021876][ T31] audit: type=1400 audit(1789271247.989:8023): avc: denied { write } for pid=7910 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.022426][ T31] audit: type=1400 audit(1789271247.989:8024): avc: denied { read } for pid=7910 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.075153][ T31] audit: type=1400 audit(1789271248.049:8025): avc: denied { read } for pid=7910 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.101994][ T31] audit: type=1400 audit(1789271248.079:8026): avc: denied { ioctl } for pid=7910 comm="syz.3.621" path="socket:[21216]" dev="sockfs" ino=21216 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.221888][ T9] usb 2-1: USB disconnect, device number 19 [ 230.690322][ T7918] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 230.807279][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 230.959694][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 230.983062][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.983080][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 230.983100][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.986292][ T9] usb 2-1: config 0 descriptor?? [ 231.045336][ T7921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.344823][ T7933] netlink: 79 bytes leftover after parsing attributes in process `syz.0.627'. [ 231.495234][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495253][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495266][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495278][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495290][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495303][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495315][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495327][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495338][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.495350][ T9] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 231.611758][ T9] cypress 0003:04B4:BCA1.0007: hidraw0: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0 [ 231.792515][ T9] usb 2-1: USB disconnect, device number 20 [ 232.286484][ T7935] fido_id[7935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 232.424545][ T7945] netlink: 44 bytes leftover after parsing attributes in process `syz.0.631'. [ 232.848140][ T5702] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 233.001767][ T5702] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 233.029277][ T5702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.029303][ T5702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 233.029319][ T5702] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 233.029344][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.291143][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.316191][ T7958] FAULT_INJECTION: forcing a failure. [ 233.316191][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 233.316211][ T7958] CPU: 0 UID: 0 PID: 7958 Comm: syz.4.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.316226][ T7958] Tainted: [L]=SOFTLOCKUP [ 233.316230][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 233.316237][ T7958] Call Trace: [ 233.316241][ T7958] [ 233.316245][ T7958] dump_stack_lvl+0x100/0x190 [ 233.316268][ T7958] should_fail_ex.cold+0x5/0xa [ 233.316285][ T7958] should_failslab+0xc2/0x120 [ 233.316304][ T7958] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 233.316317][ T7958] ? sidtab_sid2str_get+0x84/0x670 [ 233.316335][ T7958] ? sidtab_sid2str_get+0x17a/0x670 [ 233.316352][ T7958] kmemdup_noprof+0x29/0x60 [ 233.316370][ T7958] sidtab_sid2str_get+0x17a/0x670 [ 233.316385][ T7958] security_sid_to_context_core+0x373/0x700 [ 233.316401][ T7958] avc_audit_post_callback+0x109/0x910 [ 233.316416][ T7958] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 233.316431][ T7958] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 233.316445][ T7958] ? skb_put+0x138/0x180 [ 233.316462][ T7958] ? audit_log_n_string+0x2a3/0x5a0 [ 233.316477][ T7958] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 233.316491][ T7958] common_lsm_audit+0x23f/0x2b0 [ 233.316505][ T7958] ? __pfx_common_lsm_audit+0x10/0x10 [ 233.316518][ T7958] ? avc_denied+0x14a/0x190 [ 233.316536][ T7958] slow_avc_audit+0x186/0x210 [ 233.316551][ T7958] ? __pfx_slow_avc_audit+0x10/0x10 [ 233.316567][ T7958] ? find_held_lock+0x2b/0x80 [ 233.316582][ T7958] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 233.316603][ T7958] avc_has_perm+0x1a6/0x1e0 [ 233.316619][ T7958] ? __pfx_avc_has_perm+0x10/0x10 [ 233.316633][ T7958] ? __might_fault+0xc5/0x140 [ 233.316649][ T7958] ? find_held_lock+0x2b/0x80 [ 233.316664][ T7958] ? __might_fault+0xc5/0x140 [ 233.316679][ T7958] ? __might_fault+0xc5/0x140 [ 233.316698][ T7958] selinux_bpf+0xf4/0x150 [ 233.316714][ T7958] security_bpf+0xa5/0x260 [ 233.316726][ T7958] __sys_bpf+0x440/0x4a30 [ 233.316741][ T7958] ? __pfx___sys_bpf+0x10/0x10 [ 233.316751][ T7958] ? find_held_lock+0x2b/0x80 [ 233.316766][ T7958] ? get_pid_task+0xfc/0x250 [ 233.316781][ T7958] ? get_pid_task+0xfc/0x250 [ 233.316800][ T7958] ? find_held_lock+0x2b/0x80 [ 233.316819][ T7958] ? rcu_read_lock_any_held+0x6a/0x90 [ 233.316835][ T7958] ? find_held_lock+0x2b/0x80 [ 233.316850][ T7958] ? ksys_write+0x190/0x250 [ 233.316861][ T7958] ? ksys_write+0x190/0x250 [ 233.316871][ T7958] ? lock_acquire+0x1d1/0x380 [ 233.316893][ T7958] ? fput+0x7c/0x100 [ 233.316906][ T7958] ? ksys_write+0x1ac/0x250 [ 233.316919][ T7958] ? __x64_sys_bpf+0xce/0x140 [ 233.316929][ T7958] __x64_sys_bpf+0xce/0x140 [ 233.316941][ T7958] ? do_syscall_64+0xae/0x790 [ 233.316957][ T7958] do_syscall_64+0x123/0x790 [ 233.316973][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.316984][ T7958] RIP: 0033:0x7f0a7d59e159 [ 233.316994][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.317005][ T7958] RSP: 002b:00007f0a7e421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.317016][ T7958] RAX: ffffffffffffffda RBX: 00007f0a7d825fa0 RCX: 00007f0a7d59e159 [ 233.317023][ T7958] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 233.317029][ T7958] RBP: 00007f0a7e421090 R08: 0000000000000000 R09: 0000000000000000 [ 233.317035][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.317042][ T7958] R13: 00007f0a7d826038 R14: 00007f0a7d825fa0 R15: 00007ffd57aad408 [ 233.317056][ T7958] [ 233.754290][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.754508][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.972948][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.049338][ T5702] usb 4-1: USB disconnect, device number 24 [ 234.144358][ T7966] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 234.168927][ T7966] bond1: entered promiscuous mode [ 234.169145][ T7966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.219869][ T7966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.220043][ T7966] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 234.220054][ T7966] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 234.221580][ T7966] bond1: (slave gre1): making interface the new active one [ 234.221592][ T7966] gre1: entered promiscuous mode [ 234.226316][ T7966] bond1: (slave gre1): Enslaving as an active interface with an up link [ 234.752475][ T7974] netlink: 296 bytes leftover after parsing attributes in process `syz.0.641'. [ 234.845816][ T31] kauditd_printk_skb: 414 callbacks suppressed [ 234.845828][ T31] audit: type=1400 audit(1789271252.809:8440): avc: denied { ioctl } for pid=7973 comm="syz.0.641" path="socket:[21607]" dev="sockfs" ino=21607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.889855][ T31] audit: type=1400 audit(1789271252.859:8441): avc: denied { write } for pid=7973 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.986295][ T31] audit: type=1400 audit(1789271252.949:8442): avc: denied { read write } for pid=7975 comm="syz.1.642" name="video6" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.986339][ T31] audit: type=1400 audit(1789271252.949:8443): avc: denied { read write open } for pid=7975 comm="syz.1.642" path="/dev/video6" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 235.068078][ T31] audit: type=1400 audit(1789271253.039:8444): avc: denied { ioctl } for pid=7975 comm="syz.1.642" path="/dev/video6" dev="devtmpfs" ino=937 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 235.070063][ T31] audit: type=1400 audit(1789271253.039:8445): avc: denied { ioctl } for pid=7975 comm="syz.1.642" path="/dev/video6" dev="devtmpfs" ino=937 ioctlcmd=0x5612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 235.144083][ T31] audit: type=1400 audit(1789271253.109:8446): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.146075][ T31] audit: type=1400 audit(1789271253.109:8447): avc: denied { read write open } for pid=5601 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.211690][ T31] audit: type=1400 audit(1789271253.179:8448): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.273195][ T31] audit: type=1400 audit(1789271253.239:8449): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.064572][ T8008] netlink: 64 bytes leftover after parsing attributes in process `syz.2.655'. [ 238.959113][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 239.109939][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 239.138993][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.139019][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 239.139034][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 239.139054][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.552605][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.552824][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.840683][ T10] usb 2-1: USB disconnect, device number 21 [ 239.931871][ T31] kauditd_printk_skb: 294 callbacks suppressed [ 239.931882][ T31] audit: type=1400 audit(1789271257.900:8743): avc: denied { module_request } for pid=8047 comm="syz.2.668" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 239.992971][ T31] audit: type=1400 audit(1789271257.960:8744): avc: denied { write } for pid=8047 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.030812][ T31] audit: type=1400 audit(1789271258.000:8745): avc: denied { map } for pid=8045 comm="syz.4.667" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 240.070099][ T31] audit: type=1400 audit(1789271258.040:8746): avc: denied { module_request } for pid=8047 comm="syz.2.668" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 240.130032][ T31] audit: type=1400 audit(1789271258.100:8747): avc: denied { mounton } for pid=8045 comm="syz.4.667" path="/142/tracing" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 240.130060][ T31] audit: type=1400 audit(1789271258.100:8748): avc: denied { mount } for pid=8045 comm="syz.4.667" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 240.135580][ T31] audit: type=1400 audit(1789271258.100:8749): avc: denied { module_request } for pid=8045 comm="syz.4.667" kmod="net-pf-2-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 240.221441][ T31] audit: type=1400 audit(1789271258.190:8750): avc: denied { search } for pid=8045 comm="syz.4.667" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.221469][ T31] audit: type=1400 audit(1789271258.190:8751): avc: denied { search } for pid=8045 comm="syz.4.667" name="events" dev="tracefs" ino=1723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.221489][ T31] audit: type=1400 audit(1789271258.190:8752): avc: denied { search } for pid=8045 comm="syz.4.667" name="sched" dev="tracefs" ino=17989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 242.132637][ T8085] IPv4: Oversized IP packet from 127.202.26.0 [ 242.679577][ T8095] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.612447][ T8115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.683'. [ 243.694554][ T8115] ALSA: seq fatal error: cannot create timer (-16) [ 243.776095][ T8116] netlink: 68 bytes leftover after parsing attributes in process `syz.2.684'. [ 243.801312][ T8116] veth0_macvtap: left promiscuous mode [ 245.049209][ T31] kauditd_printk_skb: 328 callbacks suppressed [ 245.049222][ T31] audit: type=1400 audit(1789271263.020:9081): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.051544][ T31] audit: type=1400 audit(1789271263.020:9082): avc: denied { read write open } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.054810][ T31] audit: type=1400 audit(1789271263.020:9083): avc: denied { ioctl } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.273757][ T31] audit: type=1400 audit(1789271263.240:9084): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 245.304720][ T31] audit: type=1400 audit(1789271263.270:9085): avc: denied { read } for pid=8132 comm="syz.1.691" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.329540][ T31] audit: type=1400 audit(1789271263.310:9086): avc: denied { read open } for pid=8132 comm="syz.1.691" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.364405][ T31] audit: type=1400 audit(1789271263.340:9087): avc: denied { ioctl } for pid=8132 comm="syz.1.691" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.394094][ T31] audit: type=1400 audit(1789271263.370:9088): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.396146][ T31] audit: type=1400 audit(1789271263.370:9089): avc: denied { read write open } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.396881][ T31] audit: type=1400 audit(1789271263.370:9090): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.950858][ T8138] syzkaller0: entered promiscuous mode [ 245.950873][ T8138] syzkaller0: entered allmulticast mode [ 246.281506][ T8145] netlink: 72 bytes leftover after parsing attributes in process `syz.2.695'. [ 246.281520][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.695'. [ 246.281528][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 246.455193][ T8147] netlink: 60 bytes leftover after parsing attributes in process `syz.3.696'. [ 246.515595][ T8147] ALSA: seq fatal error: cannot create timer (-16) [ 246.582083][ T8145] ipvlan2: entered promiscuous mode [ 246.584737][ T8145] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 246.602618][ T8145] team0: Device ipvlan2 is already an upper device of the team interface [ 246.716000][ T8146] ipvlan2: entered allmulticast mode [ 246.716013][ T8146] macvlan1: entered allmulticast mode [ 246.716019][ T8146] veth1_vlan: entered allmulticast mode [ 246.749264][ T8146] batman_adv: batadv0: Adding interface: ipvlan2 [ 246.749273][ T8146] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.749290][ T8146] batman_adv: batadv0: Interface activated: ipvlan2 [ 247.467915][ T8163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.701'. [ 247.467939][ T8163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.701'. [ 247.593854][ T8165] jffs2: notice: (8165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 248.273609][ T8175] random: crng reseeded on system resumption [ 248.410251][ T8180] jffs2: notice: (8180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 248.527132][ T8186] FAULT_INJECTION: forcing a failure. [ 248.527132][ T8186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.527152][ T8186] CPU: 0 UID: 0 PID: 8186 Comm: syz.1.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.527167][ T8186] Tainted: [L]=SOFTLOCKUP [ 248.527171][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 248.527177][ T8186] Call Trace: [ 248.527181][ T8186] [ 248.527186][ T8186] dump_stack_lvl+0x100/0x190 [ 248.527211][ T8186] should_fail_ex.cold+0x5/0xa [ 248.527228][ T8186] _copy_from_user+0x2e/0xd0 [ 248.527240][ T8186] memdup_user+0x6b/0xe0 [ 248.527257][ T8186] strndup_user+0x78/0xe0 [ 248.527268][ T8186] __x64_sys_mount+0x17f/0x310 [ 248.527284][ T8186] ? __pfx___x64_sys_mount+0x10/0x10 [ 248.527304][ T8186] do_syscall_64+0x123/0x790 [ 248.527321][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.527332][ T8186] RIP: 0033:0x7f8d59f9e159 [ 248.527342][ T8186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.527352][ T8186] RSP: 002b:00007f8d581f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.527364][ T8186] RAX: ffffffffffffffda RBX: 00007f8d5a225fa0 RCX: 00007f8d59f9e159 [ 248.527371][ T8186] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 248.527377][ T8186] RBP: 00007f8d581f6090 R08: 0000000000000000 R09: 0000000000000000 [ 248.527384][ T8186] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 248.527390][ T8186] R13: 00007f8d5a226038 R14: 00007f8d5a225fa0 R15: 00007ffea51f7738 [ 248.527404][ T8186] [ 249.295973][ T8194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.711'. [ 250.106701][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.106730][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.310660][ T31] kauditd_printk_skb: 200 callbacks suppressed [ 250.310673][ T31] audit: type=1400 audit(1789271268.280:9291): avc: denied { read } for pid=8196 comm="syz.3.713" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.570074][ T7962] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 250.570369][ T8044] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 250.608273][ T7372] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 250.630934][ T31] audit: type=1400 audit(1789271268.600:9292): avc: denied { read open } for pid=8196 comm="syz.3.713" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.630961][ T31] audit: type=1400 audit(1789271268.600:9293): avc: denied { create } for pid=8196 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.688917][ T31] audit: type=1400 audit(1789271268.660:9294): avc: denied { write } for pid=8197 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.718438][ T31] audit: type=1400 audit(1789271268.660:9295): avc: denied { mounton } for pid=8196 comm="syz.3.713" path="/131/sys" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 250.718473][ T31] audit: type=1400 audit(1789271268.670:9296): avc: denied { mount } for pid=8196 comm="syz.3.713" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 250.786894][ T8198] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 250.816662][ T31] audit: type=1400 audit(1789271268.780:9297): avc: denied { prog_load } for pid=8196 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.816689][ T31] audit: type=1400 audit(1789271268.780:9298): avc: denied { bpf } for pid=8196 comm="syz.3.713" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.816710][ T31] audit: type=1400 audit(1789271268.780:9299): avc: denied { perfmon } for pid=8196 comm="syz.3.713" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.816729][ T31] audit: type=1400 audit(1789271268.780:9300): avc: denied { perfmon } for pid=8196 comm="syz.3.713" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 251.060928][ T5703] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 251.282688][ T5703] usb 1-1: device descriptor read/all, error -71 [ 251.415933][ T8209] ip6gre1: entered promiscuous mode [ 251.415949][ T8209] ip6gre1: entered allmulticast mode [ 253.489282][ T8227] bridge0: port 3(syz_tun) entered blocking state [ 253.493774][ T8227] bridge0: port 3(syz_tun) entered disabled state [ 253.493980][ T8227] syz_tun: entered allmulticast mode [ 253.554799][ T8227] syz_tun: entered promiscuous mode [ 253.640919][ T8227] bridge0: port 3(syz_tun) entered blocking state [ 253.640993][ T8227] bridge0: port 3(syz_tun) entered forwarding state [ 253.867932][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 253.867946][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 253.927488][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 253.927501][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 254.181718][ T8230] netlink: 56 bytes leftover after parsing attributes in process `syz.3.724'. [ 255.619020][ T31] kauditd_printk_skb: 155 callbacks suppressed [ 255.619032][ T31] audit: type=1400 audit(1789271273.560:9456): avc: denied { mounton } for pid=8241 comm="syz.0.722" path="/128/config" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 255.619056][ T31] audit: type=1400 audit(1789271273.560:9457): avc: denied { mount } for pid=8241 comm="syz.0.722" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 255.619076][ T31] audit: type=1400 audit(1789271273.570:9458): avc: denied { search } for pid=8241 comm="syz.0.722" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.619097][ T31] audit: type=1400 audit(1789271273.570:9459): avc: denied { search } for pid=8241 comm="syz.0.722" name="usb_gadget" dev="configfs" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.619118][ T31] audit: type=1400 audit(1789271273.570:9460): avc: denied { write search } for pid=8241 comm="syz.0.722" name="usb_gadget" dev="configfs" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.619139][ T31] audit: type=1400 audit(1789271273.570:9461): avc: denied { add_name search } for pid=8241 comm="syz.0.722" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.619158][ T31] audit: type=1400 audit(1789271273.570:9462): avc: denied { create } for pid=8241 comm="syz.0.722" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 255.619183][ T31] audit: type=1400 audit(1789271273.570:9463): avc: denied { search } for pid=8241 comm="syz.0.722" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.619203][ T31] audit: type=1400 audit(1789271273.570:9464): avc: denied { search } for pid=8241 comm="syz.0.722" name="usb_gadget" dev="configfs" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.619224][ T31] audit: type=1400 audit(1789271273.570:9465): avc: denied { search } for pid=8241 comm="syz.0.722" name="g1" dev="configfs" ino=23026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.005514][ T8246] macsec2: entered promiscuous mode [ 256.005528][ T8246] dummy0: entered promiscuous mode [ 256.005620][ T8246] macsec2: entered allmulticast mode [ 256.005628][ T8246] dummy0: entered allmulticast mode [ 256.049507][ T8246] dummy0: left allmulticast mode [ 256.049522][ T8246] dummy0: left promiscuous mode [ 256.157071][ T5703] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 256.286632][ T5703] usb 1-1: device descriptor read/64, error -71 [ 256.452982][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 256.526371][ T5703] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 256.656084][ T5703] usb 1-1: device descriptor read/64, error -71 [ 256.767827][ T5703] usb usb1-port1: attempt power cycle [ 256.824564][ T8262] netlink: 56 bytes leftover after parsing attributes in process `syz.3.734'. [ 256.824580][ T8262] netlink: 56 bytes leftover after parsing attributes in process `syz.3.734'. [ 257.117659][ T5703] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 257.137620][ T5703] usb 1-1: device descriptor read/8, error -71 [ 257.200824][ T8271] xt_hashlimit: max too large, truncated to 1048576 [ 257.201041][ T8271] xt_IDLETIMER: timeout value is zero [ 257.324614][ T8271] Mount JFS Failure: -22 [ 257.324624][ T8271] jfs_mount failed w/return code = -22 [ 257.375820][ T5703] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 257.397331][ T5703] usb 1-1: device descriptor read/8, error -71 [ 257.508327][ T5703] usb usb1-port1: unable to enumerate USB device [ 258.111019][ T8280] random: crng reseeded on system resumption [ 258.418292][ T5703] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 258.614751][ T5703] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.614776][ T5703] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 258.653994][ T5703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.654009][ T5703] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 258.654035][ T5703] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 258.723580][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.723596][ T5703] usb 1-1: Product: syz [ 258.723604][ T5703] usb 1-1: Manufacturer: syz [ 258.723612][ T5703] usb 1-1: SerialNumber: syz [ 259.111099][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.111311][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.156866][ T8291] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 259.193011][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.205986][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.267787][ T8291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.268490][ T8288] netlink: 96 bytes leftover after parsing attributes in process `syz.1.743'. [ 259.274342][ T8294] bond3: entered promiscuous mode [ 259.274356][ T8294] bond3: entered allmulticast mode [ 259.334288][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.334511][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.444465][ T5703] usb 1-1: 1:1 : invalid UAC_AS_GENERAL desc [ 259.444707][ T5703] usb 1-1: 0:2 : does not exist [ 259.630271][ T5703] usb 1-1: USB disconnect, device number 26 [ 259.794676][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.835357][ T8299] netlink: 'syz.4.744': attribute type 4 has an invalid length. [ 259.864225][ T8300] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 10 (only 8 groups) [ 260.612678][ T8307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.612736][ T8307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.813578][ T31] kauditd_printk_skb: 337 callbacks suppressed [ 260.813590][ T31] audit: type=1400 audit(1789271278.781:9803): avc: denied { create } for pid=8316 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.861984][ T31] audit: type=1400 audit(1789271278.831:9804): avc: denied { allowed } for pid=8316 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 260.865250][ T31] audit: type=1400 audit(1789271278.831:9805): avc: denied { write } for pid=8316 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.961085][ T31] audit: type=1400 audit(1789271278.931:9806): avc: denied { module_request } for pid=8301 comm="syz.3.746" kmod="crypto-hmac(sm3)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.026910][ T31] audit: type=1400 audit(1789271279.001:9808): avc: denied { map_create } for pid=8317 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.035518][ T31] audit: type=1400 audit(1789271278.931:9807): avc: denied { module_request } for pid=8301 comm="syz.3.746" kmod="crypto-hmac(sm3)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.035547][ T31] audit: type=1400 audit(1789271279.001:9809): avc: denied { module_request } for pid=8301 comm="syz.3.746" kmod="crypto-cbc(des)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.142612][ T31] audit: type=1400 audit(1789271279.101:9810): avc: denied { module_request } for pid=8301 comm="syz.3.746" kmod="crypto-cbc(des)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.142640][ T31] audit: type=1400 audit(1789271279.111:9811): avc: denied { module_request } for pid=8301 comm="syz.3.746" kmod="crypto-cbc(des3_ede)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.142660][ T31] audit: type=1400 audit(1789271279.111:9812): avc: denied { module_request } for pid=8301 comm="syz.3.746" kmod="crypto-cbc(des3_ede)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 262.047471][ T8307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.047505][ T8307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 262.655449][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 262.687725][ T8307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.687758][ T8307] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 262.773743][ T8307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.025847][ T5703] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 263.156625][ T5703] usb 1-1: device descriptor read/64, error -71 [ 263.397828][ T5703] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 263.525375][ T5703] usb 1-1: device descriptor read/64, error -71 [ 263.637639][ T5703] usb usb1-port1: attempt power cycle [ 263.732141][ T8355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8355 comm=syz.3.755 [ 263.790057][ T8355] netlink: 'syz.3.755': attribute type 4 has an invalid length. [ 264.095592][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 264.738097][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 264.738127][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 264.817955][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 265.204748][ T8369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.565383][ T190] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 265.721566][ T190] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 265.750329][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 265.750348][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 265.750361][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 265.750373][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 265.750386][ T190] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 265.820688][ T31] kauditd_printk_skb: 192 callbacks suppressed [ 265.820699][ T31] audit: type=1400 audit(1789271283.791:10005): avc: denied { ioctl } for pid=8373 comm="syz.3.762" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.860469][ T31] audit: type=1400 audit(1789271283.841:10006): avc: denied { ioctl } for pid=8373 comm="syz.3.762" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.891576][ T31] audit: type=1400 audit(1789271283.861:10007): avc: denied { ioctl } for pid=8373 comm="syz.3.762" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.923940][ T31] audit: type=1400 audit(1789271283.901:10008): avc: denied { ioctl } for pid=8373 comm="syz.3.762" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.954943][ T31] audit: type=1400 audit(1789271283.931:10009): avc: denied { create } for pid=8378 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.955069][ T31] audit: type=1400 audit(1789271283.931:10010): avc: denied { ioctl } for pid=8373 comm="syz.3.762" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.004368][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.004383][ T190] usb 4-1: Product: syz [ 266.004391][ T190] usb 4-1: Manufacturer: syz [ 266.004399][ T190] usb 4-1: SerialNumber: syz [ 266.040807][ T31] audit: type=1400 audit(1789271284.011:10011): avc: denied { ioctl } for pid=8373 comm="syz.3.762" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.040836][ T31] audit: type=1400 audit(1789271284.011:10012): avc: denied { ioctl } for pid=8373 comm="syz.3.762" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.044885][ T31] audit: type=1400 audit(1789271284.011:10013): avc: denied { append } for pid=8378 comm="syz.0.764" name="sg0" dev="devtmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 266.099185][ T31] audit: type=1400 audit(1789271284.081:10014): avc: denied { append open } for pid=8378 comm="syz.0.764" path="/dev/sg0" dev="devtmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 266.100636][ T8374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.173765][ T8374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.174378][ T8374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.174927][ T8374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.175397][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 266.228685][ T190] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 266.229005][ T190] keyspan 4-1:1.0: unsupported endpoint type 0 [ 266.261246][ T190] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 266.290497][ T190] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 266.309788][ T190] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 266.330234][ T190] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 266.815461][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 267.280842][ T8389] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 267.562706][ T8397] FAULT_INJECTION: forcing a failure. [ 267.562706][ T8397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.562726][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.1.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.562741][ T8397] Tainted: [L]=SOFTLOCKUP [ 267.562745][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 267.562752][ T8397] Call Trace: [ 267.562756][ T8397] [ 267.562761][ T8397] dump_stack_lvl+0x100/0x190 [ 267.562781][ T8397] should_fail_ex.cold+0x5/0xa [ 267.562797][ T8397] _copy_from_user+0x2e/0xd0 [ 267.562810][ T8397] copy_msghdr_from_user+0x9f/0x4c0 [ 267.562828][ T8397] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 267.562849][ T8397] ? lock_acquire+0x1d1/0x380 [ 267.562861][ T8397] ? get_pid_task+0x2a/0x250 [ 267.562877][ T8397] ___sys_sendmsg+0x106/0x1e0 [ 267.562895][ T8397] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.562912][ T8397] ? get_pid_task+0x106/0x250 [ 267.562931][ T8397] ? find_held_lock+0x2b/0x80 [ 267.562955][ T8397] __sys_sendmsg+0x160/0x210 [ 267.562968][ T8397] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.562991][ T8397] do_syscall_64+0x123/0x790 [ 267.563015][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.563026][ T8397] RIP: 0033:0x7f8d59f9e159 [ 267.563036][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.563047][ T8397] RSP: 002b:00007f8d581f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.563058][ T8397] RAX: ffffffffffffffda RBX: 00007f8d5a225fa0 RCX: 00007f8d59f9e159 [ 267.563066][ T8397] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 267.563072][ T8397] RBP: 00007f8d581f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.563079][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.563085][ T8397] R13: 00007f8d5a226038 R14: 00007f8d5a225fa0 R15: 00007ffea51f7738 [ 267.563099][ T8397] [ 267.830903][ T190] usb 4-1: USB disconnect, device number 25 [ 267.868984][ T190] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 267.899311][ T190] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 267.922169][ T190] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 267.948886][ T190] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 267.949366][ T190] keyspan 4-1:1.0: device disconnected [ 268.307368][ T8407] ip6gre1: entered promiscuous mode [ 268.307382][ T8407] ip6gre1: entered allmulticast mode [ 268.797466][ T8414] syzkaller0: entered promiscuous mode [ 268.797481][ T8414] syzkaller0: entered allmulticast mode [ 268.928292][ T8420] netlink: 44 bytes leftover after parsing attributes in process `syz.3.778'. [ 268.928323][ T8420] netlink: 44 bytes leftover after parsing attributes in process `syz.3.778'. [ 269.815308][ T5702] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 269.995755][ T5702] usb 4-1: Using ep0 maxpacket: 8 [ 269.998450][ T5702] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 270.032272][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.032297][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 270.032311][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.106628][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.782'. [ 270.109737][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 270.109751][ T5702] usb 4-1: Product: syz [ 270.109759][ T5702] usb 4-1: Manufacturer: syz [ 270.109767][ T5702] usb 4-1: SerialNumber: syz [ 270.150394][ T5702] usb 4-1: config 0 descriptor?? [ 270.495335][ T5702] rc_core: IR keymap rc-imon-rsc not found [ 270.495346][ T5702] Registered IR keymap rc-empty [ 270.496109][ T5702] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 270.503259][ T5702] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 270.582173][ T5702] usb 4-1: USB disconnect, device number 26 [ 270.901329][ T31] kauditd_printk_skb: 256 callbacks suppressed [ 270.901341][ T31] audit: type=1400 audit(1789271288.871:10271): avc: denied { create } for pid=8445 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.952253][ T31] audit: type=1400 audit(1789271288.921:10272): avc: denied { prog_load } for pid=8445 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 270.952279][ T31] audit: type=1400 audit(1789271288.921:10273): avc: denied { bpf } for pid=8445 comm="syz.1.786" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.011287][ T31] audit: type=1400 audit(1789271288.981:10274): avc: denied { setopt } for pid=8445 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.053325][ T31] audit: type=1400 audit(1789271289.021:10275): avc: denied { read } for pid=8447 comm="syz.0.787" dev="nsfs" ino=4026533122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.078374][ T31] audit: type=1400 audit(1789271289.051:10276): avc: denied { read open } for pid=8447 comm="syz.0.787" path="net:[4026533122]" dev="nsfs" ino=4026533122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.119356][ T31] audit: type=1400 audit(1789271289.091:10277): avc: denied { create } for pid=8447 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 271.184634][ T31] audit: type=1400 audit(1789271289.151:10278): avc: denied { read } for pid=8447 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 271.221711][ T31] audit: type=1400 audit(1789271289.191:10279): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.256044][ T31] audit: type=1400 audit(1789271289.191:10280): avc: denied { read write open } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.516453][ T8452] input: syz0 as /devices/virtual/input/input17 [ 271.572462][ T8453] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 272.273539][ T8462] syzkaller0: entered promiscuous mode [ 272.273553][ T8462] syzkaller0: entered allmulticast mode [ 274.034342][ T8469] syz.3.794: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 274.034450][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.3.794 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.034466][ T8469] Tainted: [L]=SOFTLOCKUP [ 274.034470][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 274.034477][ T8469] Call Trace: [ 274.034481][ T8469] [ 274.034486][ T8469] dump_stack_lvl+0x100/0x190 [ 274.034505][ T8469] warn_alloc.cold+0x9e/0xb2 [ 274.034518][ T8469] ? __pfx_warn_alloc+0x10/0x10 [ 274.034539][ T8469] ? avc_has_extended_perms+0x33a/0x1080 [ 274.034554][ T8469] ? avc_has_extended_perms+0x33a/0x1080 [ 274.034574][ T8469] __vmalloc_node_range_noprof+0x123b/0x1420 [ 274.034590][ T8469] ? rcu_is_watching+0x13/0xc0 [ 274.034606][ T8469] ? trace_contention_end+0x126/0x160 [ 274.034621][ T8469] ? dvb_demux_do_ioctl+0x929/0x1200 [ 274.034632][ T8469] ? kasan_quarantine_put+0x104/0x240 [ 274.034644][ T8469] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 274.034657][ T8469] ? __pfx___mutex_lock+0x10/0x10 [ 274.034673][ T8469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.034689][ T8469] ? tomoyo_path_number_perm+0x188/0x580 [ 274.034702][ T8469] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 274.034713][ T8469] __vmalloc_node_noprof+0xad/0xf0 [ 274.034730][ T8469] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 274.034743][ T8469] dvb_demux_do_ioctl+0x9e0/0x1200 [ 274.034755][ T8469] ? do_vfs_ioctl+0x226/0x13e0 [ 274.034768][ T8469] dvb_usercopy+0x167/0x340 [ 274.034783][ T8469] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 274.034795][ T8469] ? __pfx_dvb_usercopy+0x10/0x10 [ 274.034810][ T8469] ? __fget_files+0x34/0x3d0 [ 274.034829][ T8469] ? selinux_file_ioctl+0x13b/0x290 [ 274.034840][ T8469] ? selinux_file_ioctl+0xb6/0x290 [ 274.034854][ T8469] dvb_demux_ioctl+0x29/0x40 [ 274.034869][ T8469] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 274.034886][ T8469] __x64_sys_ioctl+0x18e/0x210 [ 274.034904][ T8469] do_syscall_64+0x123/0x790 [ 274.034921][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.034934][ T8469] RIP: 0033:0x7f3d54d9e159 [ 274.034945][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.034956][ T8469] RSP: 002b:00007f3d55cea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.034967][ T8469] RAX: ffffffffffffffda RBX: 00007f3d55026090 RCX: 00007f3d54d9e159 [ 274.034974][ T8469] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000009 [ 274.034981][ T8469] RBP: 00007f3d54e3503b R08: 0000000000000000 R09: 0000000000000000 [ 274.034988][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.034996][ T8469] R13: 00007f3d55026128 R14: 00007f3d55026090 R15: 00007ffe730295e8 [ 274.035012][ T8469] [ 274.035066][ T8469] Mem-Info: [ 274.035071][ T8469] active_anon:10415 inactive_anon:0 isolated_anon:0 [ 274.035071][ T8469] active_file:1 inactive_file:25255 isolated_file:0 [ 274.035071][ T8469] unevictable:0 dirty:1318 writeback:0 [ 274.035071][ T8469] slab_reclaimable:11611 slab_unreclaimable:99807 [ 274.035071][ T8469] mapped:32969 shmem:520 pagetables:1221 [ 274.035071][ T8469] sec_pagetables:0 bounce:0 [ 274.035071][ T8469] kernel_misc_reclaimable:0 [ 274.035071][ T8469] free:1325686 free_pcp:13109 free_cma:0 [ 274.035100][ T8469] Node 0 active_anon:41660kB inactive_anon:0kB active_file:4kB inactive_file:100884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131876kB dirty:5272kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12800kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 274.035130][ T8469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 274.035159][ T8469] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.035202][ T8469] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 274.035222][ T8469] Node 0 DMA32 free:1346684kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41660kB inactive_anon:0kB active_file:4kB inactive_file:100884kB unevictable:0kB writepending:5272kB zspages:0kB present:3129332kB managed:2530140kB mlocked:0kB bounce:0kB free_pcp:52436kB local_pcp:52436kB free_cma:0kB [ 274.035251][ T8469] lowmem_reserve[]: 0 0 0 0 0 [ 274.035268][ T8469] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.035298][ T8469] lowmem_reserve[]: 0 0 0 0 0 [ 274.035317][ T8469] Node 1 Normal free:3940700kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.035349][ T8469] lowmem_reserve[]: 0 0 0 0 0 [ 274.035367][ T8469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.035442][ T8469] Node 0 DMA32: 2470*4kB (UME) 158*8kB (UM) 622*16kB (UME) 1048*32kB (UME) 538*64kB (UME) 159*128kB (UM) 151*256kB (UM) 49*512kB (UM) 22*1024kB (UM) 4*2048kB (UM) 279*4096kB (UM) = 1346664kB [ 274.035536][ T8469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 274.035592][ T8469] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 6*16kB (UM) 8*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940700kB [ 274.035677][ T8469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.035686][ T8469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.035694][ T8469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.035702][ T8469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.035710][ T8469] 25772 total pagecache pages [ 274.035714][ T8469] 0 pages in swap cache [ 274.035717][ T8469] Free swap = 124996kB [ 274.035721][ T8469] Total swap = 124996kB [ 274.035725][ T8469] 2097051 pages RAM [ 274.035729][ T8469] 0 pages HighMem/MovableOnly [ 274.035732][ T8469] 432882 pages reserved [ 274.035736][ T8469] 0 pages cma reserved [ 274.178725][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 275.952946][ T8480] erspan1: entered allmulticast mode [ 276.018520][ T31] kauditd_printk_skb: 154 callbacks suppressed [ 276.018532][ T31] audit: type=1400 audit(1789271293.992:10435): avc: denied { read write } for pid=8481 comm="syz.4.798" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 276.018556][ T31] audit: type=1400 audit(1789271293.992:10436): avc: denied { read write open } for pid=8481 comm="syz.4.798" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 276.108762][ T31] audit: type=1400 audit(1789271294.082:10437): avc: denied { create } for pid=8481 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.137713][ T31] audit: type=1400 audit(1789271294.112:10438): avc: denied { create } for pid=8470 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 276.141970][ T31] audit: type=1400 audit(1789271294.112:10439): avc: denied { read write } for pid=8485 comm="syz.3.799" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.143453][ T31] audit: type=1400 audit(1789271294.112:10440): avc: denied { write } for pid=8481 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.143476][ T31] audit: type=1400 audit(1789271294.112:10441): avc: denied { connect } for pid=8481 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.144060][ T31] audit: type=1400 audit(1789271294.112:10442): avc: denied { read write open } for pid=8485 comm="syz.3.799" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.196830][ T31] audit: type=1400 audit(1789271294.172:10443): avc: denied { name_connect } for pid=8481 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 276.297067][ T31] audit: type=1400 audit(1789271294.272:10444): avc: denied { ioctl } for pid=8485 comm="syz.3.799" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.535852][ T5702] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 276.703027][ T5702] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 276.721237][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.721255][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 276.785500][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.785515][ T5702] usb 4-1: Product: syz [ 276.785523][ T5702] usb 4-1: Manufacturer: syz [ 276.785532][ T5702] usb 4-1: SerialNumber: syz [ 276.820417][ T5702] usb 4-1: config 0 descriptor?? [ 276.846431][ T5702] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 277.111237][ T190] usb 4-1: USB disconnect, device number 27 [ 277.741689][ T8511] binder: 8510:8511 ioctl c0306201 200000000080 returned -14 [ 277.780075][ T8513] binder: 8510:8513 unknown command 0 [ 277.780087][ T8513] binder: 8510:8513 ioctl c0306201 2000000004c0 returned -22 [ 277.940644][ T8509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.960577][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 277.997001][ T8514] SET target dimension over the limit! [ 278.103408][ T8522] FAULT_INJECTION: forcing a failure. [ 278.103408][ T8522] name failslab, interval 1, probability 0, space 0, times 0 [ 278.103431][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.3.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.103446][ T8522] Tainted: [L]=SOFTLOCKUP [ 278.103450][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 278.103456][ T8522] Call Trace: [ 278.103460][ T8522] [ 278.103465][ T8522] dump_stack_lvl+0x100/0x190 [ 278.103487][ T8522] should_fail_ex.cold+0x5/0xa [ 278.103504][ T8522] should_failslab+0xc2/0x120 [ 278.103519][ T8522] __kmalloc_noprof+0xfc/0x840 [ 278.103531][ T8522] ? tomoyo_encode2+0xfb/0x3c0 [ 278.103547][ T8522] tomoyo_encode2+0xfb/0x3c0 [ 278.103562][ T8522] tomoyo_encode+0x29/0x50 [ 278.103575][ T8522] tomoyo_realpath_from_path+0x18c/0x690 [ 278.103592][ T8522] tomoyo_path_number_perm+0x23c/0x580 [ 278.103602][ T8522] ? tomoyo_path_number_perm+0x22e/0x580 [ 278.103614][ T8522] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.103630][ T8522] ? __lock_acquire+0x5c0/0x1f40 [ 278.103649][ T8522] ? __fget_files+0x34/0x3d0 [ 278.103662][ T8522] ? find_held_lock+0x2b/0x80 [ 278.103677][ T8522] ? hook_file_ioctl_common+0x140/0x440 [ 278.103695][ T8522] ? __fget_files+0x21f/0x3d0 [ 278.103711][ T8522] security_file_ioctl+0xd3/0x230 [ 278.103724][ T8522] __x64_sys_ioctl+0xb7/0x210 [ 278.103736][ T8522] do_syscall_64+0x123/0x790 [ 278.103753][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.103764][ T8522] RIP: 0033:0x7f3d54d9e159 [ 278.103773][ T8522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.103784][ T8522] RSP: 002b:00007f3d55cc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.103795][ T8522] RAX: ffffffffffffffda RBX: 00007f3d55026180 RCX: 00007f3d54d9e159 [ 278.103802][ T8522] RDX: 0000200000000040 RSI: 00000000c0045009 RDI: 0000000000000003 [ 278.103809][ T8522] RBP: 00007f3d55cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 278.103815][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.103821][ T8522] R13: 00007f3d55026218 R14: 00007f3d55026180 R15: 00007ffe730295e8 [ 278.103836][ T8522] [ 278.103887][ T8522] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.732886][ T8527] random: crng reseeded on system resumption [ 278.971191][ T8532] FAULT_INJECTION: forcing a failure. [ 278.971191][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 278.971211][ T8532] CPU: 0 UID: 0 PID: 8532 Comm: syz.1.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.971226][ T8532] Tainted: [L]=SOFTLOCKUP [ 278.971230][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 278.971236][ T8532] Call Trace: [ 278.971240][ T8532] [ 278.971245][ T8532] dump_stack_lvl+0x100/0x190 [ 278.971265][ T8532] should_fail_ex.cold+0x5/0xa [ 278.971282][ T8532] should_failslab+0xc2/0x120 [ 278.971296][ T8532] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 278.971309][ T8532] ? sidtab_sid2str_get+0x84/0x670 [ 278.971324][ T8532] ? sidtab_sid2str_get+0x17a/0x670 [ 278.971341][ T8532] kmemdup_noprof+0x29/0x60 [ 278.971358][ T8532] sidtab_sid2str_get+0x17a/0x670 [ 278.971373][ T8532] security_sid_to_context_core+0x373/0x700 [ 278.971389][ T8532] selinux_lsmprop_to_secctx+0xe4/0x1b0 [ 278.971402][ T8532] ? __pfx_selinux_lsmprop_to_secctx+0x10/0x10 [ 278.971416][ T8532] ? skb_put+0x138/0x180 [ 278.971434][ T8532] security_lsmprop_to_secctx+0x146/0x1a0 [ 278.971452][ T8532] audit_log_subj_ctx+0x346/0x450 [ 278.971470][ T8532] ? map_id_range_up+0x2ce/0x3b0 [ 278.971483][ T8532] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 278.971502][ T8532] ? audit_log_format+0xe8/0x130 [ 278.971522][ T8532] audit_log_task_context+0x7f/0xb0 [ 278.971539][ T8532] ? __pfx_audit_log_task_context+0x10/0x10 [ 278.971560][ T8532] audit_log_task+0x1b7/0x3a0 [ 278.971574][ T8532] ? __pfx_audit_log_task+0x10/0x10 [ 278.971588][ T8532] ? find_held_lock+0x2b/0x80 [ 278.971603][ T8532] ? ksys_write+0x190/0x250 [ 278.971614][ T8532] ? ksys_write+0x190/0x250 [ 278.971626][ T8532] audit_seccomp+0x7a/0x1f0 [ 278.971643][ T8532] __seccomp_filter+0x88c/0x1130 [ 278.971662][ T8532] ? __pfx___seccomp_filter+0x10/0x10 [ 278.971681][ T8532] ? ksys_write+0x1ac/0x250 [ 278.971691][ T8532] ? __pfx_ksys_write+0x10/0x10 [ 278.971704][ T8532] __seccomp_permit_syscall+0x224/0x2e0 [ 278.971722][ T8532] do_syscall_64+0x591/0x790 [ 278.971740][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.971751][ T8532] RIP: 0033:0x7f8d59f9e159 [ 278.971761][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.971771][ T8532] RSP: 002b:00007f8d581f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000079 [ 278.971783][ T8532] RAX: ffffffffffffffda RBX: 00007f8d5a225fa0 RCX: 00007f8d59f9e159 [ 278.971790][ T8532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.971796][ T8532] RBP: 00007f8d581f6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.971803][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.971809][ T8532] R13: 00007f8d5a226038 R14: 00007f8d5a225fa0 R15: 00007ffea51f7738 [ 278.971826][ T8532] [ 279.754024][ T8548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.255296][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.484876][ T190] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 280.634608][ T190] usb 1-1: Using ep0 maxpacket: 16 [ 280.635823][ T190] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 280.642564][ T190] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 280.642579][ T190] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 280.642589][ T190] usb 1-1: config 0 has no interface number 0 [ 280.709282][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.709299][ T190] usb 1-1: Product: syz [ 280.709308][ T190] usb 1-1: Manufacturer: syz [ 280.709317][ T190] usb 1-1: SerialNumber: syz [ 281.155551][ T5797] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 281.169625][ T31] kauditd_printk_skb: 493 callbacks suppressed [ 281.169635][ T31] audit: type=1400 audit(1789271299.142:10937): avc: denied { ioctl } for pid=8566 comm="syz.3.823" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.170166][ T190] usb 1-1: config 0 descriptor?? [ 281.171424][ T31] audit: type=1400 audit(1789271299.142:10938): avc: denied { ioctl } for pid=8552 comm="syz.0.820" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.181729][ T31] audit: type=1400 audit(1789271299.152:10939): avc: denied { ioctl } for pid=8566 comm="syz.3.823" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.269636][ T31] audit: type=1400 audit(1789271299.242:10941): avc: denied { ioctl } for pid=8566 comm="syz.3.823" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.273658][ T31] audit: type=1400 audit(1789271299.242:10940): avc: denied { ioctl } for pid=8552 comm="syz.0.820" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.273683][ T31] audit: type=1400 audit(1789271299.242:10942): avc: denied { ioctl } for pid=8552 comm="syz.0.820" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.332770][ T190] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 281.332788][ T190] uvcvideo 1-1:0.105: No valid video chain found. [ 281.359493][ T31] audit: type=1400 audit(1789271299.312:10943): avc: denied { ioctl } for pid=8566 comm="syz.3.823" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.402075][ T31] audit: type=1400 audit(1789271299.382:10944): avc: denied { ioctl } for pid=8566 comm="syz.3.823" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.440282][ T31] audit: type=1400 audit(1789271299.412:10945): avc: denied { read } for pid=8568 comm="syz.1.824" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 281.440311][ T31] audit: type=1400 audit(1789271299.412:10946): avc: denied { read open } for pid=8568 comm="syz.1.824" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 281.548042][ T5797] usb 4-1: No LPM exit latency info found, disabling LPM. [ 281.548066][ T5797] usb 4-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 281.561835][ T5797] usb 4-1: config 0 has no interfaces? [ 281.598206][ T8569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.617425][ T8562] binder: 8552:8562 ioctl 8916 200000001040 returned -22 [ 281.652760][ T5797] usb 4-1: string descriptor 0 read error: -22 [ 281.652825][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.677334][ T5797] usb 4-1: config 0 descriptor?? [ 281.923207][ T5797] usb 4-1: USB disconnect, device number 28 [ 282.035419][ T8574] tc_dump_action: action bad kind [ 282.822418][ T8587] tipc: Started in network mode [ 282.822435][ T8587] tipc: Node identity 7f000001, cluster identity 4711 [ 282.887508][ T8587] tipc: Enabled bearer , priority 10 [ 283.146617][ T190] usb 1-1: USB disconnect, device number 30 [ 283.475270][ T8601] overlayfs: failed to clone upperpath [ 283.694431][ T190] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 283.748416][ T8613] binder: Unknown parameter '00000000000000000000003' [ 283.838897][ T8616] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 283.838906][ T8616] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 283.838922][ T8616] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 283.845698][ T190] usb 1-1: Using ep0 maxpacket: 8 [ 283.881084][ T190] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 283.896019][ T190] usb 1-1: config 0 has no interfaces? [ 283.896038][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.902944][ T190] usb 1-1: config 0 descriptor?? [ 284.015206][ T190] tipc: Node number set to 2130706433 [ 284.232433][ T190] usb 1-1: USB disconnect, device number 31 [ 284.552253][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.979394][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.844'. [ 284.979414][ T8628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.844'. [ 285.053959][ T8628] ip_tables: iptables: counters copy to user failed while replacing table [ 286.219797][ T31] kauditd_printk_skb: 577 callbacks suppressed [ 286.219809][ T31] audit: type=1400 audit(1789271304.192:11524): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.221829][ T31] audit: type=1400 audit(1789271304.192:11525): avc: denied { read write open } for pid=5601 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.221855][ T31] audit: type=1400 audit(1789271304.192:11526): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.406965][ T31] audit: type=1400 audit(1789271304.382:11527): avc: denied { map_create } for pid=8635 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 286.406995][ T31] audit: type=1400 audit(1789271304.382:11528): avc: denied { bpf } for pid=8635 comm="syz.1.847" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 286.480371][ T31] audit: type=1400 audit(1789271304.452:11529): avc: denied { mounton } for pid=8635 comm="syz.1.847" path="/178/proc" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 286.480537][ T31] audit: type=1400 audit(1789271304.452:11530): avc: denied { create } for pid=8637 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.482735][ T31] audit: type=1400 audit(1789271304.452:11531): avc: denied { mount } for pid=8635 comm="syz.1.847" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.507378][ T31] audit: type=1400 audit(1789271304.482:11532): avc: denied { create } for pid=8637 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.582245][ T31] audit: type=1400 audit(1789271304.552:11533): avc: denied { write } for pid=8637 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.618155][ T8636] FAULT_INJECTION: forcing a failure. [ 286.618155][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 286.618177][ T8636] CPU: 0 UID: 0 PID: 8636 Comm: syz.1.847 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.618194][ T8636] Tainted: [L]=SOFTLOCKUP [ 286.618199][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 286.618206][ T8636] Call Trace: [ 286.618211][ T8636] [ 286.618216][ T8636] dump_stack_lvl+0x100/0x190 [ 286.618236][ T8636] should_fail_ex.cold+0x5/0xa [ 286.618253][ T8636] should_failslab+0xc2/0x120 [ 286.618268][ T8636] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 286.618282][ T8636] ? sidtab_sid2str_get+0x84/0x670 [ 286.618295][ T8636] ? sidtab_sid2str_get+0x17a/0x670 [ 286.618311][ T8636] kmemdup_noprof+0x29/0x60 [ 286.618329][ T8636] sidtab_sid2str_get+0x17a/0x670 [ 286.618345][ T8636] security_sid_to_context_core+0x373/0x700 [ 286.618360][ T8636] avc_audit_post_callback+0x109/0x910 [ 286.618375][ T8636] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 286.618389][ T8636] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 286.618404][ T8636] ? skb_put+0x138/0x180 [ 286.618420][ T8636] ? audit_log_n_string+0x2a3/0x5a0 [ 286.618435][ T8636] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 286.618449][ T8636] common_lsm_audit+0x23f/0x2b0 [ 286.618462][ T8636] ? __pfx_common_lsm_audit+0x10/0x10 [ 286.618474][ T8636] ? avc_denied+0x14a/0x190 [ 286.618492][ T8636] slow_avc_audit+0x186/0x210 [ 286.618506][ T8636] ? __pfx_slow_avc_audit+0x10/0x10 [ 286.618522][ T8636] ? find_held_lock+0x2b/0x80 [ 286.618538][ T8636] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 286.618558][ T8636] avc_has_perm+0x1a6/0x1e0 [ 286.618574][ T8636] ? __pfx_avc_has_perm+0x10/0x10 [ 286.618589][ T8636] ? futex_unqueue+0x133/0x2c0 [ 286.618602][ T8636] ? futex_unqueue+0x133/0x2c0 [ 286.618618][ T8636] sock_has_perm+0x253/0x2f0 [ 286.618635][ T8636] ? __pfx_sock_has_perm+0x10/0x10 [ 286.618652][ T8636] ? __pfx___futex_wait+0x10/0x10 [ 286.618661][ T8636] ? __pfx_try_to_wake_up+0x10/0x10 [ 286.618674][ T8636] ? futex_hash+0x311/0x400 [ 286.618688][ T8636] ? __pfx_futex_wake_mark+0x10/0x10 [ 286.618708][ T8636] selinux_socket_connect_helper+0xc0/0x520 [ 286.618725][ T8636] ? __lock_acquire+0x5c0/0x1f40 [ 286.618737][ T8636] ? __pfx_selinux_socket_connect_helper+0x10/0x10 [ 286.618763][ T8636] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.618778][ T8636] ? tomoyo_socket_connect_permission+0x1b7/0x360 [ 286.618794][ T8636] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 286.618808][ T8636] ? __might_fault+0xc5/0x140 [ 286.618828][ T8636] ? __might_fault+0xc5/0x140 [ 286.618848][ T8636] selinux_socket_connect+0x45/0x80 [ 286.618866][ T8636] security_socket_connect+0xfb/0x230 [ 286.618884][ T8636] __sys_connect_file+0xdc/0x1a0 [ 286.618897][ T8636] __sys_connect+0x141/0x170 [ 286.618908][ T8636] ? __pfx___sys_connect+0x10/0x10 [ 286.618929][ T8636] __x64_sys_connect+0x72/0xb0 [ 286.618939][ T8636] ? lockdep_hardirqs_on+0x7d/0x110 [ 286.618955][ T8636] do_syscall_64+0x123/0x790 [ 286.618970][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.618982][ T8636] RIP: 0033:0x7f8d59f9e159 [ 286.618992][ T8636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.619003][ T8636] RSP: 002b:00007f8d581f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 286.619015][ T8636] RAX: ffffffffffffffda RBX: 00007f8d5a225fa0 RCX: 00007f8d59f9e159 [ 286.619023][ T8636] RDX: 0000000000000032 RSI: 00002000000002c0 RDI: 000000000000000a [ 286.619030][ T8636] RBP: 00007f8d5a03503b R08: 0000000000000000 R09: 0000000000000000 [ 286.619037][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.619043][ T8636] R13: 00007f8d5a226038 R14: 00007f8d5a225fa0 R15: 00007ffea51f7738 [ 286.619058][ T8636] [ 286.931824][ T8639] netlink: 56 bytes leftover after parsing attributes in process `syz.0.848'. [ 287.597230][ T8648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.667495][ T8646] gadgetfs: bound to dummy_udc driver [ 287.904942][ T5703] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 287.905134][ C0] gadgetfs: connected [ 287.913460][ T5703] gadgetfs: disconnected [ 287.952777][ T5909] IPVS: starting estimator thread 0... [ 288.034142][ T8661] IPVS: using max 74 ests per chain, 177600 per kthread [ 288.054480][ C0] gadgetfs: connected [ 288.055117][ T5703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 288.055346][ T5703] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 288.055365][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.140215][ C0] gadgetfs: configuration #1 [ 288.177036][ T8658] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 288.265388][ T8644] gadgetfs: suspended from state 3 [ 288.265462][ T8644] gadgetfs: disconnected [ 288.266780][ T5703] usb 1-1: USB disconnect, device number 32 [ 288.912957][ T8670] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 289.502458][ T8678] FAULT_INJECTION: forcing a failure. [ 289.502458][ T8678] name failslab, interval 1, probability 0, space 0, times 0 [ 289.502480][ T8678] CPU: 0 UID: 0 PID: 8678 Comm: syz.4.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.502496][ T8678] Tainted: [L]=SOFTLOCKUP [ 289.502501][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 289.502508][ T8678] Call Trace: [ 289.502512][ T8678] [ 289.502516][ T8678] dump_stack_lvl+0x100/0x190 [ 289.502536][ T8678] should_fail_ex.cold+0x5/0xa [ 289.502553][ T8678] should_failslab+0xc2/0x120 [ 289.502577][ T8678] __kmalloc_noprof+0xfc/0x840 [ 289.502590][ T8678] ? lsm_blob_alloc+0x68/0x90 [ 289.502609][ T8678] lsm_blob_alloc+0x68/0x90 [ 289.502624][ T8678] security_sk_alloc+0x2d/0x290 [ 289.502637][ T8678] sk_prot_alloc+0x1d1/0x2a0 [ 289.502655][ T8678] sk_alloc+0x36/0xe80 [ 289.502668][ T8678] unix_create1+0xa6/0x700 [ 289.502681][ T8678] unix_create+0x10f/0x1b0 [ 289.502692][ T8678] __sock_create+0x339/0x860 [ 289.502710][ T8678] __sys_socketpair+0x1e4/0x5b0 [ 289.502721][ T8678] ? __pfx___sys_socketpair+0x10/0x10 [ 289.502733][ T8678] ? xfd_validate_state+0x129/0x190 [ 289.502749][ T8678] __x64_sys_socketpair+0x96/0x100 [ 289.502760][ T8678] ? lockdep_hardirqs_on+0x7d/0x110 [ 289.502774][ T8678] do_syscall_64+0x123/0x790 [ 289.502790][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.502801][ T8678] RIP: 0033:0x7f0a7d59e159 [ 289.502811][ T8678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.502821][ T8678] RSP: 002b:00007f0a7e421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 289.502833][ T8678] RAX: ffffffffffffffda RBX: 00007f0a7d825fa0 RCX: 00007f0a7d59e159 [ 289.502840][ T8678] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 289.502846][ T8678] RBP: 00007f0a7d63503b R08: 0000000000000000 R09: 0000000000000000 [ 289.502857][ T8678] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 289.502864][ T8678] R13: 00007f0a7d826038 R14: 00007f0a7d825fa0 R15: 00007ffd57aad408 [ 289.502878][ T8678] [ 289.761193][ T8673] FAULT_INJECTION: forcing a failure. [ 289.761193][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 289.761216][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.3.859 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.761232][ T8673] Tainted: [L]=SOFTLOCKUP [ 289.761236][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 289.761244][ T8673] Call Trace: [ 289.761249][ T8673] [ 289.761254][ T8673] dump_stack_lvl+0x100/0x190 [ 289.761274][ T8673] should_fail_ex.cold+0x5/0xa [ 289.761290][ T8673] should_failslab+0xc2/0x120 [ 289.761305][ T8673] __kmalloc_noprof+0xfc/0x840 [ 289.761319][ T8673] ? tomoyo_encode2+0xfb/0x3c0 [ 289.761339][ T8673] tomoyo_encode2+0xfb/0x3c0 [ 289.761355][ T8673] tomoyo_encode+0x29/0x50 [ 289.761367][ T8673] tomoyo_realpath_from_path+0x18c/0x690 [ 289.761384][ T8673] tomoyo_mkdev_perm+0x231/0x570 [ 289.761394][ T8673] ? tomoyo_mkdev_perm+0x21d/0x570 [ 289.761405][ T8673] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 289.761416][ T8673] ? do_raw_spin_lock+0x128/0x260 [ 289.761435][ T8673] ? do_raw_spin_unlock+0x145/0x1e0 [ 289.761459][ T8673] ? simple_lookup+0xfc/0x1d0 [ 289.761476][ T8673] tomoyo_path_mknod+0xe2/0x190 [ 289.761491][ T8673] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 289.761506][ T8673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.761522][ T8673] security_path_mknod+0x161/0x300 [ 289.761537][ T8673] filename_mknodat+0x241/0x7f0 [ 289.761553][ T8673] ? __pfx_filename_mknodat+0x10/0x10 [ 289.761567][ T8673] ? strncpy_from_user+0x19d/0x2d0 [ 289.761586][ T8673] ? do_getname+0x191/0x390 [ 289.761603][ T8673] __x64_sys_mknodat+0xb5/0xf0 [ 289.761618][ T8673] do_syscall_64+0x123/0x790 [ 289.761636][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.761648][ T8673] RIP: 0033:0x7f3d54d9e159 [ 289.761658][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.761669][ T8673] RSP: 002b:00007f3d55d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 289.761680][ T8673] RAX: ffffffffffffffda RBX: 00007f3d55025fa0 RCX: 00007f3d54d9e159 [ 289.761687][ T8673] RDX: 00000000000021c0 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 289.761694][ T8673] RBP: 00007f3d54e3503b R08: 0000000000000000 R09: 0000000000000000 [ 289.761702][ T8673] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 289.761709][ T8673] R13: 00007f3d55026038 R14: 00007f3d55025fa0 R15: 00007ffe730295e8 [ 289.761726][ T8673] [ 289.761736][ T8673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.295758][ T8694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.142944][ T8700] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8700 comm=syz.0.868 [ 291.240716][ T31] kauditd_printk_skb: 284 callbacks suppressed [ 291.240728][ T31] audit: type=1400 audit(1789271309.212:11818): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.241263][ T31] audit: type=1400 audit(1789271309.212:11819): avc: denied { read write open } for pid=5601 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.243640][ T31] audit: type=1400 audit(1789271309.212:11820): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.343835][ T190] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 291.362492][ T31] audit: type=1400 audit(1789271309.332:11821): avc: denied { ioctl } for pid=8697 comm="syz.3.867" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.362520][ T31] audit: type=1400 audit(1789271309.332:11822): avc: denied { ioctl } for pid=8697 comm="syz.3.867" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.433618][ T31] audit: type=1400 audit(1789271309.402:11823): avc: denied { ioctl } for pid=8697 comm="syz.3.867" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.433647][ T31] audit: type=1400 audit(1789271309.402:11824): avc: denied { ioctl } for pid=8697 comm="syz.3.867" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.433668][ T31] audit: type=1400 audit(1789271309.402:11825): avc: denied { ioctl } for pid=8697 comm="syz.3.867" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.530255][ T31] audit: type=1400 audit(1789271309.502:11826): avc: denied { bpf } for pid=8682 comm="syz.1.863" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 291.581609][ T190] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 291.582915][ T31] audit: type=1400 audit(1789271309.552:11827): avc: denied { ioctl } for pid=8697 comm="syz.3.867" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.630888][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.630906][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.630926][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.674789][ T190] usb 4-1: config 0 descriptor?? [ 291.725024][ T8702] gadgetfs: bound to dummy_udc driver [ 291.901268][ T5604] ================================================================== [ 291.901280][ T5604] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15c5/0x1bd0 [ 291.901300][ T5604] Read of size 8 at addr ffff888056194c58 by task syz-executor/5604 [ 291.901310][ T5604] [ 291.901316][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 291.901333][ T5604] Tainted: [L]=SOFTLOCKUP [ 291.901337][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 291.901344][ T5604] Call Trace: [ 291.901348][ T5604] [ 291.901352][ T5604] dump_stack_lvl+0x100/0x190 [ 291.901370][ T5604] print_report+0x13d/0x4b0 [ 291.901387][ T5604] ? __virt_addr_valid+0x239/0x430 [ 291.901399][ T5604] ? __mutex_lock+0x15c5/0x1bd0 [ 291.901414][ T5604] kasan_report+0xdf/0x1c0 [ 291.901429][ T5604] ? __mutex_lock+0x15c5/0x1bd0 [ 291.901445][ T5604] __mutex_lock+0x15c5/0x1bd0 [ 291.901460][ T5604] ? ep_open+0x4c/0x2c0 [ 291.901477][ T5604] ? __pfx_avc_has_perm+0x10/0x10 [ 291.901492][ T5604] ? hook_file_open+0x248/0x8e0 [ 291.901508][ T5604] ? __pfx___mutex_lock+0x10/0x10 [ 291.901525][ T5604] ? __pfx_selinux_file_open+0x10/0x10 [ 291.901539][ T5604] ? ep_open+0x4c/0x2c0 [ 291.901554][ T5604] ep_open+0x4c/0x2c0 [ 291.901570][ T5604] do_dentry_open+0x6ab/0x14d0 [ 291.901582][ T5604] ? __pfx_ep_open+0x10/0x10 [ 291.901600][ T5604] vfs_open+0x82/0x3f0 [ 291.901614][ T5604] path_openat+0x19fa/0x2440 [ 291.901629][ T5604] ? __pfx_path_openat+0x10/0x10 [ 291.901644][ T5604] do_file_open+0x20e/0x430 [ 291.901658][ T5604] ? __pfx_do_file_open+0x10/0x10 [ 291.901676][ T5604] ? _raw_spin_unlock+0x28/0x50 [ 291.901689][ T5604] ? alloc_fd+0x471/0x7a0 [ 291.901704][ T5604] do_sys_openat2+0x10f/0x1e0 [ 291.901719][ T5604] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.901736][ T5604] __x64_sys_openat+0x12d/0x210 [ 291.901751][ T5604] ? __pfx___x64_sys_openat+0x10/0x10 [ 291.901772][ T5604] ? putname+0xb1/0x110 [ 291.901788][ T5604] do_syscall_64+0x123/0x790 [ 291.901803][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.901815][ T5604] RIP: 0033:0x7f0a7d55e98e [ 291.901824][ T5604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.901835][ T5604] RSP: 002b:00007ffd57aab4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.901847][ T5604] RAX: ffffffffffffffda RBX: 000055555bd89500 RCX: 00007f0a7d55e98e [ 291.901855][ T5604] RDX: 0000000000000000 RSI: 00007ffd57aab640 RDI: ffffffffffffff9c [ 291.901862][ T5604] RBP: 00007ffd57aab640 R08: 0000000000000000 R09: 0000000000000000 [ 291.901869][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd57aac730 [ 291.901876][ T5604] R13: 00007f0a7d63448b R14: 000055555bd894e8 R15: 0000000000000006 [ 291.901887][ T5604] [ 291.901892][ T5604] [ 291.901894][ T5604] Allocated by task 8702: [ 291.901899][ T5604] kasan_save_stack+0x30/0x50 [ 291.901911][ T5604] kasan_save_track+0x14/0x30 [ 291.901922][ T5604] __kasan_kmalloc+0xaa/0xb0 [ 291.901933][ T5604] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 291.901948][ T5604] gadgetfs_bind+0x582/0x890 [ 291.901963][ T5604] gadget_bind_driver+0x28c/0xbf0 [ 291.901974][ T5604] really_probe+0x241/0xa60 [ 291.901985][ T5604] __driver_probe_device+0x210/0x460 [ 291.901996][ T5604] driver_probe_device+0x4a/0x140 [ 291.902008][ T5604] __driver_attach+0x21f/0x5b0 [ 291.902019][ T5604] bus_for_each_dev+0x13e/0x1d0 [ 291.902034][ T5604] bus_add_driver+0x305/0x5b0 [ 291.902044][ T5604] driver_register+0x1e2/0x360 [ 291.902056][ T5604] usb_gadget_register_driver_owner+0x132/0x210 [ 291.902068][ T5604] dev_config+0xdce/0x1610 [ 291.902082][ T5604] vfs_write+0x2aa/0x1050 [ 291.902091][ T5604] ksys_write+0x12a/0x250 [ 291.902101][ T5604] do_syscall_64+0x123/0x790 [ 291.902114][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.902124][ T5604] [ 291.902126][ T5604] Freed by task 5703: [ 291.902131][ T5604] kasan_save_stack+0x30/0x50 [ 291.902142][ T5604] kasan_save_track+0x14/0x30 [ 291.902153][ T5604] kasan_save_free_info+0x3b/0x70 [ 291.902168][ T5604] __kasan_slab_free+0x5f/0x80 [ 291.902179][ T5604] kfree+0x22b/0x6d0 [ 291.902193][ T5604] put_ep+0x117/0x150 [ 291.902206][ T5604] destroy_ep_files+0x163/0x420 [ 291.902220][ T5604] gadgetfs_unbind+0x139/0x260 [ 291.902235][ T5604] gadget_unbind_driver+0x20c/0x4f0 [ 291.902246][ T5604] device_remove+0xcb/0x180 [ 291.902256][ T5604] device_release_driver_internal+0x44e/0x620 [ 291.902269][ T5604] driver_detach+0xd8/0x1b0 [ 291.902281][ T5604] bus_remove_driver+0x13b/0x2e0 [ 291.902290][ T5604] driver_unregister+0x76/0xb0 [ 291.902303][ T5604] usb_gadget_unregister_driver+0x49/0x70 [ 291.902313][ T5604] dev_release+0x132/0x1b0 [ 291.902327][ T5604] __fput+0x3ff/0xb50 [ 291.902339][ T5604] delayed_fput+0x72/0x90 [ 291.902352][ T5604] process_one_work+0xac7/0x1b10 [ 291.902368][ T5604] worker_thread+0x5ef/0xe50 [ 291.902383][ T5604] kthread+0x373/0x450 [ 291.902396][ T5604] ret_from_fork+0x730/0xd60 [ 291.902407][ T5604] ret_from_fork_asm+0x1a/0x30 [ 291.902418][ T5604] [ 291.902420][ T5604] The buggy address belongs to the object at ffff888056194c00 [ 291.902420][ T5604] which belongs to the cache kmalloc-512 of size 512 [ 291.902428][ T5604] The buggy address is located 88 bytes inside of [ 291.902428][ T5604] freed 512-byte region [ffff888056194c00, ffff888056194e00) [ 291.902439][ T5604] [ 291.902441][ T5604] The buggy address belongs to the physical page: [ 291.902446][ T5604] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56194 [ 291.902456][ T5604] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 291.902464][ T5604] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 291.902474][ T5604] page_type: f5(slab) [ 291.902484][ T5604] raw: 00fff00000000040 ffff88801c02fc80 dead000000000100 dead000000000122 [ 291.902494][ T5604] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 291.902503][ T5604] head: 00fff00000000040 ffff88801c02fc80 dead000000000100 dead000000000122 [ 291.902513][ T5604] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 291.902522][ T5604] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 291.902531][ T5604] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 291.902537][ T5604] page dumped because: kasan: bad access detected [ 291.902542][ T5604] page_owner tracks the page as allocated [ 291.902545][ T5604] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1474, tgid 1474 (kworker/u8:11), ts 64728037085 [ 291.902563][ T5604] post_alloc_hook+0xfd/0x120 [ 291.902577][ T5604] get_page_from_freelist+0x110d/0x35d0 [ 291.902594][ T5604] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 291.902610][ T5604] new_slab+0xa9/0x6e0 [ 291.902625][ T5604] refill_objects+0xe3/0x410 [ 291.902640][ T5604] __pcs_replace_empty_main+0x35e/0x650 [ 291.902656][ T5604] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 291.902671][ T5604] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 291.902685][ T5604] addrconf_dad_work+0x276/0x1360 [ 291.902696][ T5604] process_one_work+0xac7/0x1b10 [ 291.902712][ T5604] worker_thread+0x5ef/0xe50 [ 291.902727][ T5604] kthread+0x373/0x450 [ 291.902740][ T5604] ret_from_fork+0x730/0xd60 [ 291.902750][ T5604] ret_from_fork_asm+0x1a/0x30 [ 291.902761][ T5604] page last free pid 1 tgid 1 ts 14777556281 stack trace: [ 291.902771][ T5604] free_pages_prepare+0x586/0xe00 [ 291.902786][ T5604] __free_contig_range_common+0x14f/0x250 [ 291.902801][ T5604] destroy_args+0xa8/0x7a0 [ 291.902816][ T5604] debug_vm_pgtable+0x1d69/0x3490 [ 291.902831][ T5604] do_one_initcall+0x11c/0x6f0 [ 291.902841][ T5604] kernel_init_freeable+0x6ea/0x7b0 [ 291.902855][ T5604] kernel_init+0x21/0x1e0 [ 291.902864][ T5604] ret_from_fork+0x730/0xd60 [ 291.902874][ T5604] ret_from_fork_asm+0x1a/0x30 [ 291.902885][ T5604] [ 291.902887][ T5604] Memory state around the buggy address: [ 291.902892][ T5604] ffff888056194b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 291.902900][ T5604] ffff888056194b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 291.902907][ T5604] >ffff888056194c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.902913][ T5604] ^ [ 291.902918][ T5604] ffff888056194c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.902925][ T5604] ffff888056194d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.902931][ T5604] ================================================================== [ 292.224645][ T5604] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.768876][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 292.779868][ T5604] Tainted: [L]=SOFTLOCKUP [ 292.784161][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 292.794196][ T5604] Call Trace: [ 292.797449][ T5604] [ 292.800364][ T5604] dump_stack_lvl+0x100/0x190 [ 292.805020][ T5604] vpanic+0x553/0x970 [ 292.808981][ T5604] ? __pfx_vpanic+0x10/0x10 [ 292.813470][ T5604] ? rcu_is_watching+0x13/0xc0 [ 292.818207][ T5604] ? __mutex_lock+0x15c5/0x1bd0 [ 292.823031][ T5604] panic+0xd1/0xe0 [ 292.826732][ T5604] ? __pfx_panic+0x10/0x10 [ 292.831117][ T5604] ? __mutex_lock+0x15c5/0x1bd0 [ 292.835952][ T5604] ? preempt_schedule_common+0x3c/0xb0 [ 292.841384][ T5604] check_panic_on_warn.cold+0x19/0x34 [ 292.846726][ T5604] end_report.part.0+0x3a/0x90 [ 292.851466][ T5604] kasan_report.cold+0xe/0x18 [ 292.856118][ T5604] ? __mutex_lock+0x15c5/0x1bd0 [ 292.860942][ T5604] __mutex_lock+0x15c5/0x1bd0 [ 292.865633][ T5604] ? ep_open+0x4c/0x2c0 [ 292.869766][ T5604] ? __pfx_avc_has_perm+0x10/0x10 [ 292.874762][ T5604] ? hook_file_open+0x248/0x8e0 [ 292.879589][ T5604] ? __pfx___mutex_lock+0x10/0x10 [ 292.884591][ T5604] ? __pfx_selinux_file_open+0x10/0x10 [ 292.890030][ T5604] ? ep_open+0x4c/0x2c0 [ 292.894159][ T5604] ep_open+0x4c/0x2c0 [ 292.898115][ T5604] do_dentry_open+0x6ab/0x14d0 [ 292.902849][ T5604] ? __pfx_ep_open+0x10/0x10 [ 292.907425][ T5604] vfs_open+0x82/0x3f0 [ 292.911468][ T5604] path_openat+0x19fa/0x2440 [ 292.916031][ T5604] ? __pfx_path_openat+0x10/0x10 [ 292.920941][ T5604] do_file_open+0x20e/0x430 [ 292.925416][ T5604] ? __pfx_do_file_open+0x10/0x10 [ 292.930416][ T5604] ? _raw_spin_unlock+0x28/0x50 [ 292.935238][ T5604] ? alloc_fd+0x471/0x7a0 [ 292.939548][ T5604] do_sys_openat2+0x10f/0x1e0 [ 292.944199][ T5604] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.949374][ T5604] __x64_sys_openat+0x12d/0x210 [ 292.954198][ T5604] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.959553][ T5604] ? putname+0xb1/0x110 [ 292.963684][ T5604] do_syscall_64+0x123/0x790 [ 292.968247][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.974109][ T5604] RIP: 0033:0x7f0a7d55e98e [ 292.978510][ T5604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.998096][ T5604] RSP: 002b:00007ffd57aab4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.006477][ T5604] RAX: ffffffffffffffda RBX: 000055555bd89500 RCX: 00007f0a7d55e98e [ 293.014428][ T5604] RDX: 0000000000000000 RSI: 00007ffd57aab640 RDI: ffffffffffffff9c [ 293.022371][ T5604] RBP: 00007ffd57aab640 R08: 0000000000000000 R09: 0000000000000000 [ 293.030311][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd57aac730 [ 293.038250][ T5604] R13: 00007f0a7d63448b R14: 000055555bd894e8 R15: 0000000000000006 [ 293.046205][ T5604] [ 293.049236][ T5604] Kernel Offset: disabled [ 293.053530][ T5604] Rebooting in 86400 seconds..