last executing test programs: 7.603735931s ago: executing program 4 (id=1110): syz_emit_vhci(0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0, 0x700}, {&(0x7f0000000200)="97", 0x1}], 0x2}}], 0x1, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 5.783585927s ago: executing program 0 (id=1117): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x15c, &(0x7f0000000140)='bridge_slave_1\x00', 0xfffffffffffffffc, 0xe, 0xde}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23d1) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000fdffffff5f00000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737972310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000000e0a050000000000000000000a0000050900010073797a3100000000140003800c0000800800034000000002040000800900020073797a3100000000140000001100010200000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 4.931858246s ago: executing program 0 (id=1121): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000780)={0x1, 0x2, 0x8, 0x5}) (async) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x80000001}) (async) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000300)) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r2 = userfaultfd(0x80801) (rerun: 64) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) (async, rerun: 64) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) (rerun: 64) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) sched_setattr(r3, &(0x7f0000000200)={0x38, 0x5, 0x20, 0x3, 0x9, 0xffffffff00000000, 0x3, 0x5, 0xd, 0x3}, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000540)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x64, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffdeb, 0xb, 0x396}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004094}, 0x24008040) (async, rerun: 32) r7 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) (rerun: 32) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, r4}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24040801}, 0x800) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x52, "35e1f9c686d27408a761f1375b7e9e388272b58d167165f418bc58f381db303c801e519ba2e1009d66be2b8b108c5c870f7b578b30df4c383c99b6cee4ddd9a26b05df4fa2d8cbf2a94b890535d1e3309864"}, &(0x7f0000000080)=0x76) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) 4.728657948s ago: executing program 4 (id=1124): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x15c, &(0x7f0000000140)='bridge_slave_1\x00', 0xfffffffffffffffc, 0xe, 0xde}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x23d1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000fdffffff5f00000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737972310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000000e0a050000000000000000000a0000050900010073797a3100000000140003800c0000800800034000000002040000800900020073797a3100000000140000001100010200000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 4.49910851s ago: executing program 1 (id=1126): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) setns(0xc9, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000527000/0x2000)=nil, 0x2000, 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x4, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000001c0)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x104000, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, 0x0, 0x200440c4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x12d140, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 3.647424899s ago: executing program 4 (id=1130): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) io_setup(0x2, &(0x7f0000000100)=0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x50, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9d, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_FLAGS={0x8, 0x8, 0x268}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x3, 0x3c9e, 0xc654}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setns(0xc9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x3f, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) connect$can_j1939(r5, &(0x7f0000000580)={0x1d, r8, 0x2, {0x0, 0x1, 0x4}, 0xfd}, 0x18) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3.167893723s ago: executing program 1 (id=1133): r0 = io_uring_setup(0x79ce, &(0x7f0000000080)={0x0, 0x1fffff, 0x80000, 0x82, 0xa}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x700, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 3.111160371s ago: executing program 2 (id=1134): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0) 3.110625327s ago: executing program 3 (id=1135): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x2}, 0x10}, 0x94) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) modify_ldt$read_default(0x2, 0x0, 0x17) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) r1 = syz_open_procfs$pagemap(0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000304fcfffffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500280012800b00010062726964676500001800028005001900025d2abf28"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) listns(&(0x7f0000000000)={0x20, 0x0, 0x9, 0x40000000, 0x0, 0x5}, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000440)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x8, 0x7, 0x52}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r9) 3.058669679s ago: executing program 0 (id=1136): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) io_uring_setup(0xa1c, &(0x7f0000000340)={0x0, 0xcbff, 0x80, 0x41, 0x2e0}) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = socket$inet(0x2, 0x1, 0x100) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) shutdown(r2, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 3.051531856s ago: executing program 4 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="2cfe8385bb0c6afdc7da0e5d8ecc9ff5", @ANYRES32, @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYRESHEX=r1], 0x38}}, 0x8800) r2 = socket$inet(0x2, 0x2, 0x11) close(0x3) socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000040)={'bridge0\x00', @ifru_data=&(0x7f0000000080)="765acee8ecd2ff1216a8b6c1815bb81fbbe16f167b06f473480a77a9f407f4d0"}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000008b804020240000102030109021b000101053003090400"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) accept$inet6(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000100)={0xa, 0x4}, 0xc) 2.976581264s ago: executing program 2 (id=1138): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_MM(0x4e, 0x1, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048800}, 0x80) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0x9d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x1) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x2000, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x10}, 0x8}}}, 0x108) close(r4) 2.976151482s ago: executing program 1 (id=1139): syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 2.975454102s ago: executing program 3 (id=1140): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10002020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24}, 0x20044880) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='zstd', 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) write(r2, &(0x7f00000004c0)="7394b609bf8e3677bb5d6e7ea6962a589bbccbcdcec0f84f0bf75f1ea8f97d19ddb3312ad0a05d417808c293d074d15db8404d735012de7592666adcb8b7a31ca5a7aa18b18ede99d55b1a9e6671a4904d4de90ac0031f5f813b300bfcce467b437401afad72cbebfd0fc647ecb827c32f4111068f7c1137849d64a495", 0x7d) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x1, 0x9, 0x4, @mcast1, @loopback, 0x7, 0x10, 0x1}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x688d4}, 0x4040) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) r7 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r7}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$TIOCCBRK(r8, 0x5428) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 1.971962878s ago: executing program 0 (id=1141): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@delqdisc={0x30, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="9324500008000000"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x5d, &(0x7f0000000540)=""/93, 0x41000, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x5, 0x8, 0x5, 0x1}, 0x10, 0x1c7b5, r4, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x1, 0x3, 0xc, 0x3}, {0x2, 0x2, 0xd, 0x6}, {0x5, 0x3, 0x7, 0xa}, {0x3, 0x2, 0x8, 0x7}, {0x3, 0x3, 0x5, 0x5}, {0x0, 0x1, 0x10, 0x4}, {0x3, 0x3, 0x1, 0x9}], 0x10, 0x3c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000a598c87dbf0e000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r4], 0x0, 0x80}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRESOCT=0x0, @ANYRES32=r9, @ANYBLOB="f3ff000003f9000000", @ANYRES16=r4], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x3, r10, 0x4}, 0x38) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 1.920523422s ago: executing program 3 (id=1142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000180)={{@my=0x0, 0x2}, @local, 0x0, 0x5, 0x5e, 0x9, 0x100000000, 0x400000, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r7, r5, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000500)={0x18, r7, 0x3, 0x1c}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x2}) 1.911152477s ago: executing program 1 (id=1143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) setns(0xc9, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000527000/0x2000)=nil, 0x2000, 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x4, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000001c0)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x104000, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, 0x0, 0x200440c4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x12d140, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 1.775937788s ago: executing program 2 (id=1144): syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 1.529932574s ago: executing program 3 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x400001, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/prev\x00') dup(r3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40e2ff00", @ANYRES16=r2, @ANYBLOB="050028bd7000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="04002d80"], 0x20}}, 0x0) 1.389047033s ago: executing program 3 (id=1146): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) socket(0x1e, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r7], 0x2c}}, 0x18) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x101201, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000100)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r0, 0x0, 0x1100) 1.33146472s ago: executing program 2 (id=1147): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) io_setup(0x2, &(0x7f0000000100)=0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x50, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9d, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_FLAGS={0x8, 0x8, 0x268}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x3, 0x3c9e, 0xc654}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setns(0xc9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x3f, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) connect$can_j1939(r5, &(0x7f0000000580)={0x1d, r8, 0x2, {0x0, 0x1, 0x4}, 0xfd}, 0x18) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.139851822s ago: executing program 0 (id=1148): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x4, 0x7, 0x6}) r2 = socket$inet6(0x10, 0x2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r11, 0xc0403d11, &(0x7f00000001c0)={0xfffffffd, 0x9}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r7, 0x108c3, 0xc4a48b7f26be2e0b}}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 695.633924ms ago: executing program 1 (id=1149): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 645.805824ms ago: executing program 4 (id=1150): r0 = io_uring_setup(0x79ce, &(0x7f0000000080)={0x0, 0x1fffff, 0x80000, 0x82, 0xa}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x700, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 605.482617ms ago: executing program 2 (id=1151): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000340)='bpf\x00', 0x0, &(0x7f0000000380)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f\xa2a\xe8P\xfc\x80\x81X\xbb\a\x00\x00\x00\x10\xa3\xc8n\xa4\'\x1fpuM\xb7\xe6:\xa0\x04\xb2\xeft\xc8\x82t\x96\xf8\xcc\xc5\xa8k\xaa\xad.$\xba\xef\"\x8c\xef\t?\x8by\b\xc0%\xa00x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd3d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0x7}, {0xb}, {0x8, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) 226.79752ms ago: executing program 2 (id=1153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2a8, 0x100000c, 0x158, 0x0, 0x158, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0x2a8, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) 63.843562ms ago: executing program 1 (id=1154): syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002ea00200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 56.978987ms ago: executing program 0 (id=1155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ftruncate(0xffffffffffffffff, 0x3c9d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) syz_open_pts(r5, 0x101000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x101, 0x2, 0x0, 0x49a0db64, 0x3, 0x1, 0x0, 0x8}}) socket$inet_tcp(0x2, 0x1, 0x0) renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1156): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) iopl(0xfa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee01}}, 'usb0\x00'}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000080204000a"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f00000001c0)='functionfs', 0xa) read(r5, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) kernel console output (not intermixed with test programs): lue: 15 [ 265.193718][ T1578] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.193745][ T1578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.193772][ T1578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 265.242643][ T1578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.242677][ T1578] usb 1-1: Product: syz [ 265.242708][ T1578] usb 1-1: Manufacturer: syz [ 265.242724][ T1578] usb 1-1: SerialNumber: syz [ 265.247038][ T1578] usb 1-1: config 0 descriptor?? [ 265.250945][ T8240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 265.323760][ T8249] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 265.361858][ T190] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 265.408481][ T8250] FAULT_INJECTION: forcing a failure. [ 265.408481][ T8250] name failslab, interval 1, probability 0, space 0, times 0 [ 265.408513][ T8250] CPU: 1 UID: 0 PID: 8250 Comm: syz.4.680 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.408541][ T8250] Tainted: [L]=SOFTLOCKUP [ 265.408549][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 265.408559][ T8250] Call Trace: [ 265.408565][ T8250] [ 265.408572][ T8250] dump_stack_lvl+0x100/0x190 [ 265.408609][ T8250] should_fail_ex.cold+0x5/0xa [ 265.408640][ T8250] should_failslab+0xc2/0x120 [ 265.408664][ T8250] __kmalloc_noprof+0xfc/0x840 [ 265.408683][ T8250] ? rcu_is_watching+0x13/0xc0 [ 265.408709][ T8250] ? tomoyo_realpath_from_path+0xb6/0x690 [ 265.408738][ T8250] tomoyo_realpath_from_path+0xb6/0x690 [ 265.408766][ T8250] tomoyo_check_open_permission+0x2af/0x3c0 [ 265.408798][ T8250] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 265.408843][ T8250] ? hook_file_open+0x248/0x8e0 [ 265.408888][ T8250] ? path_get+0x61/0x80 [ 265.408917][ T8250] tomoyo_file_open+0x6b/0x90 [ 265.408943][ T8250] security_file_open+0xb5/0x1e0 [ 265.408965][ T8250] do_dentry_open+0x588/0x14d0 [ 265.408993][ T8250] vfs_open+0x82/0x3f0 [ 265.409022][ T8250] path_openat+0x19fa/0x2440 [ 265.409050][ T8250] ? __pfx_path_openat+0x10/0x10 [ 265.409081][ T8250] do_file_open+0x20e/0x430 [ 265.409107][ T8250] ? __pfx_do_file_open+0x10/0x10 [ 265.409150][ T8250] ? _raw_spin_unlock+0x28/0x50 [ 265.409181][ T8250] ? alloc_fd+0x471/0x7a0 [ 265.409214][ T8250] do_sys_openat2+0x10f/0x1e0 [ 265.409239][ T8250] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.409267][ T8250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.409292][ T8250] ? __fget_files+0x21f/0x3d0 [ 265.409319][ T8250] __x64_sys_openat+0x12d/0x210 [ 265.409346][ T8250] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.409371][ T8250] ? ksys_write+0x1ac/0x250 [ 265.409401][ T8250] do_syscall_64+0x123/0x790 [ 265.409425][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.409447][ T8250] RIP: 0033:0x7f26b959e159 [ 265.409464][ T8250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.409483][ T8250] RSP: 002b:00007f26ba430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.409504][ T8250] RAX: ffffffffffffffda RBX: 00007f26b9826090 RCX: 00007f26b959e159 [ 265.409518][ T8250] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 265.409531][ T8250] RBP: 00007f26ba430090 R08: 0000000000000000 R09: 0000000000000000 [ 265.409544][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.409557][ T8250] R13: 00007f26b9826128 R14: 00007f26b9826090 R15: 00007fff8ba1c138 [ 265.409585][ T8250] [ 265.409610][ T8250] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.501983][ T8240] SELinux: invalid class [ 265.502067][ T8240] SELinux: failed to load policy [ 265.514231][ T190] usb 4-1: device descriptor read/64, error -71 [ 265.529638][ T31] audit: type=1400 audit(1788087025.762:758): avc: denied { unlink } for pid=5601 comm="syz-executor" name="file0" dev="tmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 265.643122][ T5724] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 265.808005][ T31] audit: type=1400 audit(1788087026.042:759): avc: denied { listen } for pid=8253 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.814106][ T8254] fuse: Unknown parameter 'fd z' [ 265.816915][ T31] audit: type=1400 audit(1788087026.042:760): avc: denied { accept } for pid=8253 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.827485][ T190] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 265.899407][ T31] audit: type=1400 audit(1788087026.132:761): avc: denied { write } for pid=8256 comm="syz.2.683" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 265.899589][ T8257] random: crng reseeded on system resumption [ 265.951879][ T190] usb 4-1: device descriptor read/64, error -71 [ 266.062251][ T190] usb usb4-port1: attempt power cycle [ 266.432115][ T190] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 266.453636][ T190] usb 4-1: device descriptor read/8, error -71 [ 266.694164][ T190] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 266.811255][ T190] usb 4-1: device descriptor read/8, error -71 [ 267.947972][ T190] usb usb4-port1: unable to enumerate USB device [ 268.834548][ T1578] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 268.863905][ T1578] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 269.021491][ C1] powermate: config urb returned -71 [ 269.021687][ C1] powermate: config urb returned -71 [ 269.021870][ C1] powermate: config urb returned -71 [ 269.022052][ C1] powermate: config urb returned -71 [ 269.046385][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 269.046423][ T1578] usb 1-1: USB disconnect, device number 34 [ 269.495360][ T8276] syzkaller0: entered promiscuous mode [ 269.495405][ T8276] syzkaller0: entered allmulticast mode [ 269.515004][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 269.515065][ T31] audit: type=1400 audit(1788087029.752:765): avc: denied { setopt } for pid=8272 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 269.524976][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 271.440559][ T31] audit: type=1400 audit(1788087031.632:766): avc: denied { write } for pid=8304 comm="syz.0.697" name="functions" dev="configfs" ino=19614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.440767][ T31] audit: type=1400 audit(1788087031.642:767): avc: denied { write } for pid=8304 comm="syz.0.697" name="p_chmask" dev="configfs" ino=18858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 271.441008][ T31] audit: type=1400 audit(1788087031.652:768): avc: denied { open } for pid=8304 comm="syz.0.697" path="/127/config/usb_gadget/g1/functions/uac1.usb0/p_chmask" dev="configfs" ino=18858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 271.441174][ T31] audit: type=1400 audit(1788087031.672:769): avc: denied { ioctl } for pid=8304 comm="syz.0.697" path="/127/config/usb_gadget/g1/functions/uac1.usb0/p_chmask" dev="configfs" ino=18858 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 271.801960][ T5612] Bluetooth: hci4: unexpected event for opcode 0x202a [ 272.431511][ T8328] x_tables: duplicate underflow at hook 2 [ 272.744421][ T31] audit: type=1400 audit(1788087032.612:770): avc: denied { setopt } for pid=8321 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.792014][ T5703] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 272.942511][ T5703] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 272.943419][ T5703] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 272.943480][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.943511][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 272.943542][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 272.945793][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.945822][ T5703] usb 3-1: Product: syz [ 272.945842][ T5703] usb 3-1: Manufacturer: syz [ 272.945862][ T5703] usb 3-1: SerialNumber: syz [ 273.295862][ T5703] usb 3-1: config 0 descriptor?? [ 273.297894][ T8323] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 273.968091][ T31] audit: type=1400 audit(1788087033.672:771): avc: denied { create } for pid=8336 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 273.968156][ T31] audit: type=1400 audit(1788087033.682:772): avc: denied { sys_admin } for pid=8336 comm="syz.4.708" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 274.198564][ T8319] SELinux: invalid class [ 274.207481][ T8319] SELinux: failed to load policy [ 274.429604][ T8353] netlink: 'syz.0.716': attribute type 4 has an invalid length. [ 274.437476][ T8353] netlink: 152 bytes leftover after parsing attributes in process `syz.0.716'. [ 274.456465][ T8353] .`: renamed from bond0 (while UP) [ 274.511941][ T5794] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 274.662269][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 274.662998][ T5794] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 274.725232][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.871211][ T5794] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 275.266986][ T5703] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 275.283990][ T5703] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 275.320289][ C0] powermate: config urb returned -71 [ 275.320445][ C0] powermate: config urb returned -71 [ 275.320616][ C0] powermate: config urb returned -71 [ 275.320785][ C0] powermate: config urb returned -71 [ 275.354437][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 275.357309][ T5703] usb 3-1: USB disconnect, device number 37 [ 275.423561][ T5794] gspca_nw80x: reg_w err -71 [ 275.423636][ T5794] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 275.433783][ T5794] usb 4-1: USB disconnect, device number 31 [ 275.874946][ T31] audit: type=1400 audit(1788087036.112:773): avc: denied { mount } for pid=8375 comm="syz.4.723" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 276.464643][ T8387] FAULT_INJECTION: forcing a failure. [ 276.464643][ T8387] name failslab, interval 1, probability 0, space 0, times 0 [ 276.478727][ T8387] CPU: 1 UID: 0 PID: 8387 Comm: syz.3.728 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.478760][ T8387] Tainted: [L]=SOFTLOCKUP [ 276.478769][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 276.478782][ T8387] Call Trace: [ 276.478789][ T8387] [ 276.478798][ T8387] dump_stack_lvl+0x100/0x190 [ 276.478833][ T8387] should_fail_ex.cold+0x5/0xa [ 276.478862][ T8387] ? __pfx_das16m1_interrupt+0x10/0x10 [ 276.478894][ T8387] should_failslab+0xc2/0x120 [ 276.478918][ T8387] ? __pfx_das16m1_interrupt+0x10/0x10 [ 276.478949][ T8387] __kmalloc_cache_noprof+0x91/0x6d0 [ 276.478978][ T8387] ? request_threaded_irq+0x15a/0x3e0 [ 276.479004][ T8387] ? __pfx_das16m1_interrupt+0x10/0x10 [ 276.479031][ T8387] request_threaded_irq+0x15a/0x3e0 [ 276.479056][ T8387] das16m1_attach+0x9d5/0xc30 [ 276.479091][ T8387] comedi_device_attach+0x40e/0x6b0 [ 276.479126][ T8387] do_devconfig_ioctl+0x1b3/0x6d0 [ 276.479158][ T8387] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 276.479203][ T8387] ? kasan_quarantine_put+0x104/0x240 [ 276.479228][ T8387] ? find_held_lock+0x2b/0x80 [ 276.479263][ T8387] comedi_unlocked_ioctl+0x860/0x3310 [ 276.479286][ T8387] ? tomoyo_path_number_perm+0x188/0x580 [ 276.479324][ T8387] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 276.479355][ T8387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 276.479378][ T8387] ? do_vfs_ioctl+0x226/0x13e0 [ 276.479405][ T8387] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 276.479434][ T8387] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 276.479469][ T8387] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 276.479505][ T8387] ? __fget_files+0x34/0x3d0 [ 276.479550][ T8387] ? selinux_file_ioctl+0x13b/0x290 [ 276.479578][ T8387] ? selinux_file_ioctl+0xb6/0x290 [ 276.479609][ T8387] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 276.479634][ T8387] __x64_sys_ioctl+0x18e/0x210 [ 276.479668][ T8387] do_syscall_64+0x123/0x790 [ 276.479694][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.479713][ T8387] RIP: 0033:0x7fa1ced9e159 [ 276.479730][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.479750][ T8387] RSP: 002b:00007fa1cfc4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.479770][ T8387] RAX: ffffffffffffffda RBX: 00007fa1cf025fa0 RCX: 00007fa1ced9e159 [ 276.479785][ T8387] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 276.479798][ T8387] RBP: 00007fa1cfc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 276.479811][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.479825][ T8387] R13: 00007fa1cf026038 R14: 00007fa1cf025fa0 R15: 00007ffdd39c2e98 [ 276.479856][ T8387] [ 276.771952][ T31] audit: type=1400 audit(1788087037.002:774): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 277.349672][ T8397] syzkaller0: entered promiscuous mode [ 277.349697][ T8397] syzkaller0: entered allmulticast mode [ 277.417310][ T5612] Bluetooth: hci4: unexpected event for opcode 0x202a [ 277.467580][ T8414] FAULT_INJECTION: forcing a failure. [ 277.467580][ T8414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.481877][ T8414] CPU: 1 UID: 0 PID: 8414 Comm: syz.4.736 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.481910][ T8414] Tainted: [L]=SOFTLOCKUP [ 277.481915][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 277.481922][ T8414] Call Trace: [ 277.481926][ T8414] [ 277.481932][ T8414] dump_stack_lvl+0x100/0x190 [ 277.481957][ T8414] should_fail_ex.cold+0x5/0xa [ 277.481973][ T8414] _copy_from_iter+0x1f4/0x1690 [ 277.481993][ T8414] ? __asan_memset+0x23/0x50 [ 277.482011][ T8414] ? __pfx__copy_from_iter+0x10/0x10 [ 277.482027][ T8414] ? __pfx___alloc_skb+0x10/0x10 [ 277.482044][ T8414] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 277.482062][ T8414] ? sock_has_perm+0x25a/0x2f0 [ 277.482077][ T8414] ? __pfx_sock_has_perm+0x10/0x10 [ 277.482095][ T8414] netlink_sendmsg+0x808/0xda0 [ 277.482115][ T8414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.482133][ T8414] ? selinux_socket_sendmsg+0x198/0x2f0 [ 277.482151][ T8414] ____sys_sendmsg+0xa4d/0xbe0 [ 277.482165][ T8414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.482182][ T8414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.482199][ T8414] ? lock_acquire+0x1d1/0x380 [ 277.482211][ T8414] ? get_pid_task+0x2a/0x250 [ 277.482227][ T8414] ___sys_sendmsg+0x190/0x1e0 [ 277.482242][ T8414] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.482256][ T8414] ? get_pid_task+0x106/0x250 [ 277.482276][ T8414] ? find_held_lock+0x2b/0x80 [ 277.482301][ T8414] __sys_sendmsg+0x160/0x210 [ 277.482319][ T8414] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.482344][ T8414] do_syscall_64+0x123/0x790 [ 277.482359][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.482371][ T8414] RIP: 0033:0x7f26b959e159 [ 277.482382][ T8414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.482393][ T8414] RSP: 002b:00007f26ba451028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.482405][ T8414] RAX: ffffffffffffffda RBX: 00007f26b9825fa0 RCX: 00007f26b959e159 [ 277.482413][ T8414] RDX: 0000000000048084 RSI: 0000200000000780 RDI: 0000000000000004 [ 277.482420][ T8414] RBP: 00007f26ba451090 R08: 0000000000000000 R09: 0000000000000000 [ 277.482427][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.482433][ T8414] R13: 00007f26b9826038 R14: 00007f26b9825fa0 R15: 00007fff8ba1c138 [ 277.482455][ T8414] [ 277.902038][ T190] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 278.055108][ T190] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 278.056630][ T190] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 278.056675][ T190] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.056704][ T190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 278.056733][ T190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 278.062815][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.062838][ T190] usb 3-1: Product: syz [ 278.062854][ T190] usb 3-1: Manufacturer: syz [ 278.062870][ T190] usb 3-1: SerialNumber: syz [ 278.097992][ T190] usb 3-1: config 0 descriptor?? [ 278.100014][ T8416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.734834][ T8416] SELinux: invalid class [ 278.735370][ T8416] SELinux: failed to load policy [ 278.953480][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 279.385625][ T5703] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 279.542421][ T5703] usb 4-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice= 0.00 [ 279.561716][ T5703] usb 4-1: config index 0 descriptor too short (expected 45, got 39) [ 279.570387][ T5703] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 279.581869][ T5703] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.600596][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.600643][ T5703] usb 4-1: Product: syz [ 279.600686][ T5703] usb 4-1: Manufacturer: syz [ 279.600706][ T5703] usb 4-1: SerialNumber: syz [ 279.640845][ T5703] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 279.665774][ T5703] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 279.676831][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 279.903218][ T8452] ocfs2: Bad value for 'barrier' [ 279.905134][ T8452] program syz.4.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.905539][ T31] audit: type=1400 audit(1788087040.142:775): avc: denied { read write } for pid=8451 comm="syz.4.746" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 279.905879][ T31] audit: type=1400 audit(1788087040.142:776): avc: denied { open } for pid=8451 comm="syz.4.746" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 280.072043][ T8458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.749'. [ 280.105102][ T31] audit: type=1326 audit(1788087040.342:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.1.749" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fece639e159 code=0x0 [ 280.891092][ T190] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 281.003172][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 281.015224][ T190] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 281.268651][ C0] powermate: config urb returned -71 [ 281.268832][ C0] powermate: config urb returned -71 [ 281.269023][ C0] powermate: config urb returned -71 [ 281.269213][ C0] powermate: config urb returned -71 [ 281.340389][ T190] usb 3-1: USB disconnect, device number 38 [ 281.340490][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 281.950575][ T1578] usb 4-1: USB disconnect, device number 32 [ 281.991235][ T1578] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 281.995447][ T1578] qcserial 4-1:1.0: device disconnected [ 282.008400][ T8482] FAULT_INJECTION: forcing a failure. [ 282.008400][ T8482] name failslab, interval 1, probability 0, space 0, times 0 [ 282.008438][ T8482] CPU: 1 UID: 0 PID: 8482 Comm: syz.2.757 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.008465][ T8482] Tainted: [L]=SOFTLOCKUP [ 282.008472][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 282.008485][ T8482] Call Trace: [ 282.008491][ T8482] [ 282.008498][ T8482] dump_stack_lvl+0x100/0x190 [ 282.008532][ T8482] should_fail_ex.cold+0x5/0xa [ 282.008562][ T8482] should_failslab+0xc2/0x120 [ 282.008587][ T8482] __kmalloc_noprof+0xfc/0x840 [ 282.008608][ T8482] ? video_usercopy+0x1a3/0x1730 [ 282.008636][ T8482] video_usercopy+0x1a3/0x1730 [ 282.008662][ T8482] ? __pfx___video_do_ioctl+0x10/0x10 [ 282.008683][ T8482] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 282.008720][ T8482] ? __pfx_video_usercopy+0x10/0x10 [ 282.008762][ T8482] v4l2_ioctl+0x1bd/0x250 [ 282.008786][ T8482] ? __pfx_v4l2_ioctl+0x10/0x10 [ 282.008812][ T8482] __x64_sys_ioctl+0x18e/0x210 [ 282.008845][ T8482] do_syscall_64+0x123/0x790 [ 282.008871][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.008892][ T8482] RIP: 0033:0x7f72e7f9e159 [ 282.008909][ T8482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.008929][ T8482] RSP: 002b:00007f72e61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.008949][ T8482] RAX: ffffffffffffffda RBX: 00007f72e8225fa0 RCX: 00007f72e7f9e159 [ 282.008963][ T8482] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 282.008976][ T8482] RBP: 00007f72e61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.008989][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.009001][ T8482] R13: 00007f72e8226038 R14: 00007f72e8225fa0 R15: 00007ffd64f952e8 [ 282.009030][ T8482] [ 282.714353][ T8486] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.758'. [ 282.752249][ T5612] block nbd4: Receive control failed (result -32) [ 282.828827][ T8480] block nbd4: shutting down sockets [ 282.853592][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 282.873530][ T31] audit: type=1400 audit(1788087043.102:778): avc: denied { getattr } for pid=8523 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.075278][ T31] audit: type=1400 audit(1788087043.302:779): avc: denied { read } for pid=8526 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.097346][ T31] audit: type=1400 audit(1788087043.312:780): avc: denied { listen } for pid=8527 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 283.109969][ T31] audit: type=1400 audit(1788087043.342:781): avc: denied { bind } for pid=8515 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 284.159816][ T31] audit: type=1400 audit(1788087044.392:782): avc: denied { open } for pid=8526 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 285.286278][ T8543] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.870297][ T8548] geneve2: entered promiscuous mode [ 285.875762][ T8548] geneve2: entered allmulticast mode [ 286.038935][ T31] audit: type=1400 audit(1788087046.272:783): avc: denied { write } for pid=8516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.040858][ T31] audit: type=1400 audit(1788087046.272:784): avc: denied { create } for pid=8516 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.041330][ T31] audit: type=1400 audit(1788087046.272:785): avc: denied { write } for pid=8516 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb2.link" dev="tmpfs" ino=4521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.042313][ T31] audit: type=1400 audit(1788087046.272:786): avc: denied { append } for pid=8516 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" dev="tmpfs" ino=4521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.344189][ T8563] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 286.344688][ T8563] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 286.349808][ T8563] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 286.351874][ T8563] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 286.736897][ T8567] FAULT_INJECTION: forcing a failure. [ 286.736897][ T8567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.736947][ T8567] CPU: 1 UID: 0 PID: 8567 Comm: syz.2.773 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.736976][ T8567] Tainted: [L]=SOFTLOCKUP [ 286.736984][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.736996][ T8567] Call Trace: [ 286.737003][ T8567] [ 286.737012][ T8567] dump_stack_lvl+0x100/0x190 [ 286.737045][ T8567] should_fail_ex.cold+0x5/0xa [ 286.737072][ T8567] _copy_from_iter+0x1f4/0x1690 [ 286.737107][ T8567] ? __asan_memset+0x23/0x50 [ 286.737139][ T8567] ? __pfx__copy_from_iter+0x10/0x10 [ 286.737169][ T8567] ? __pfx___alloc_skb+0x10/0x10 [ 286.737212][ T8567] netlink_sendmsg+0x808/0xda0 [ 286.737255][ T8567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.737289][ T8567] ? selinux_socket_sendmsg+0x198/0x2f0 [ 286.737330][ T8567] ____sys_sendmsg+0xa4d/0xbe0 [ 286.737354][ T8567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.737388][ T8567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.737418][ T8567] ? lock_acquire+0x1d1/0x380 [ 286.737438][ T8567] ? get_pid_task+0x2a/0x250 [ 286.737469][ T8567] ___sys_sendmsg+0x190/0x1e0 [ 286.737508][ T8567] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.737535][ T8567] ? get_pid_task+0x106/0x250 [ 286.737572][ T8567] ? find_held_lock+0x2b/0x80 [ 286.737614][ T8567] __sys_sendmsg+0x160/0x210 [ 286.737645][ T8567] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.737684][ T8567] do_syscall_64+0x123/0x790 [ 286.737709][ T8567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.737731][ T8567] RIP: 0033:0x7f72e7f9e159 [ 286.737748][ T8567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.737767][ T8567] RSP: 002b:00007f72e61f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.737788][ T8567] RAX: ffffffffffffffda RBX: 00007f72e8225fa0 RCX: 00007f72e7f9e159 [ 286.737801][ T8567] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 286.737813][ T8567] RBP: 00007f72e61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.737825][ T8567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.737838][ T8567] R13: 00007f72e8226038 R14: 00007f72e8225fa0 R15: 00007ffd64f952e8 [ 286.737866][ T8567] [ 287.077153][ T31] audit: type=1400 audit(1788087047.312:787): avc: denied { write } for pid=8572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.099285][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 287.107914][ T5612] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 287.163911][ T8574] FAULT_INJECTION: forcing a failure. [ 287.163911][ T8574] name failslab, interval 1, probability 0, space 0, times 0 [ 287.163964][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.2.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.163988][ T8574] Tainted: [L]=SOFTLOCKUP [ 287.163994][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.164003][ T8574] Call Trace: [ 287.164008][ T8574] [ 287.164014][ T8574] dump_stack_lvl+0x100/0x190 [ 287.164041][ T8574] should_fail_ex.cold+0x5/0xa [ 287.164064][ T8574] should_failslab+0xc2/0x120 [ 287.164084][ T8574] __kmalloc_cache_noprof+0x91/0x6d0 [ 287.164107][ T8574] ? rcu_is_watching+0x13/0xc0 [ 287.164127][ T8574] ? vhost_task_create+0xee/0x370 [ 287.164154][ T8574] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 287.164178][ T8574] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 287.164204][ T8574] vhost_task_create+0xee/0x370 [ 287.164228][ T8574] ? __pfx_vhost_task_create+0x10/0x10 [ 287.164258][ T8574] ? __pfx_vhost_task_fn+0x10/0x10 [ 287.164282][ T8574] ? register_lock_class+0x3f/0x7b0 [ 287.164299][ T8574] ? rcu_is_watching+0x13/0xc0 [ 287.164320][ T8574] ? trace_contention_end+0x126/0x160 [ 287.164342][ T8574] kvm_mmu_post_init_vm+0x1b3/0x360 [ 287.164364][ T8574] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 287.164386][ T8574] ? __pfx___mutex_lock+0x10/0x10 [ 287.164405][ T8574] ? kasan_quarantine_put+0x104/0x240 [ 287.164426][ T8574] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 287.164448][ T8574] ? lock_acquire+0x1d1/0x380 [ 287.164463][ T8574] ? do_raw_write_lock+0x11e/0x260 [ 287.164482][ T8574] ? find_held_lock+0x2b/0x80 [ 287.164507][ T8574] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 287.164528][ T8574] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 287.164554][ T8574] kvm_vcpu_ioctl+0x730/0x1700 [ 287.164576][ T8574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 287.164597][ T8574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.164616][ T8574] ? do_vfs_ioctl+0x226/0x13e0 [ 287.164644][ T8574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 287.164666][ T8574] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 287.164696][ T8574] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 287.164724][ T8574] ? __fget_files+0x34/0x3d0 [ 287.164760][ T8574] ? selinux_file_ioctl+0x13b/0x290 [ 287.164782][ T8574] ? selinux_file_ioctl+0xb6/0x290 [ 287.164806][ T8574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 287.164830][ T8574] __x64_sys_ioctl+0x18e/0x210 [ 287.164855][ T8574] do_syscall_64+0x123/0x790 [ 287.164876][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.164894][ T8574] RIP: 0033:0x7f72e7f9e159 [ 287.164909][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.164927][ T8574] RSP: 002b:00007f72e61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.164945][ T8574] RAX: ffffffffffffffda RBX: 00007f72e8225fa0 RCX: 00007f72e7f9e159 [ 287.164956][ T8574] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 287.164967][ T8574] RBP: 00007f72e61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.164978][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.164990][ T8574] R13: 00007f72e8226038 R14: 00007f72e8225fa0 R15: 00007ffd64f952e8 [ 287.165013][ T8574] [ 287.471023][ T8588] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 288.481034][ T8608] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 288.821864][ T5724] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 288.985200][ T5724] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 288.996413][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 288.996454][ T5724] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 289.463866][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.463907][ T5724] usb 5-1: Product: syz [ 289.463940][ T5724] usb 5-1: Manufacturer: syz [ 289.463959][ T5724] usb 5-1: SerialNumber: syz [ 289.519375][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 289.519421][ T31] audit: type=1400 audit(1788087049.752:791): avc: denied { write } for pid=8589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.724673][ T5724] usb 5-1: Limiting number of CPorts to U8_MAX [ 289.846042][ T31] audit: type=1400 audit(1788087050.082:792): avc: denied { write } for pid=8643 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.011322][ C1] usb 5-1: check_urb_status: overflow actual length is 128 [ 290.011353][ C1] usb 5-1: arpc in-urb error -75 (dropped) [ 290.733340][ T5724] usb 5-1: failed to set cport flags for port 0 [ 290.741660][ T5724] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 290.770018][ T5724] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 291.143945][ T31] audit: type=1400 audit(1788087051.322:793): avc: denied { write } for pid=8653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.215894][ T31] audit: type=1400 audit(1788087051.452:794): avc: denied { write } for pid=8667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.760641][ T8674] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003 [ 291.801887][ T8639] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 291.802215][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 292.014246][ T31] audit: type=1400 audit(1788087052.252:795): avc: denied { write } for pid=8673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.131079][ T31] audit: type=1400 audit(1788087052.362:796): avc: denied { write } for pid=8685 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.598714][ T8639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.598894][ T8639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.599044][ T8639] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 292.599198][ T8639] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.334820][ T31] audit: type=1400 audit(1788087053.572:797): avc: denied { write } for pid=8688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.360427][ T1578] usb 5-1: USB disconnect, device number 40 [ 293.420740][ T31] audit: type=1400 audit(1788087053.652:798): avc: denied { append } for pid=8711 comm="syz.0.806" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 293.569939][ T8712] input: syz0 as /devices/virtual/input/input24 [ 293.684000][ T31] audit: type=1400 audit(1788087053.912:799): avc: denied { write } for pid=8713 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.753898][ T8716] loop9: detected capacity change from 0 to 255852544 [ 293.867706][ T8716] loop9: detected capacity change from 255852544 to 524287999 [ 293.882178][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 293.945863][ T1578] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 294.154305][ T1578] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 294.183333][ T1578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.762892][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 294.762962][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.765218][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.888894][ T1578] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 295.021263][ T8744] overlayfs: failed to clone upperpath [ 295.047635][ T31] audit: type=1400 audit(1788087055.282:800): avc: denied { read write } for pid=8742 comm="syz.3.814" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 295.047701][ T31] audit: type=1400 audit(1788087055.282:801): avc: denied { open } for pid=8742 comm="syz.3.814" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 295.050186][ T31] audit: type=1400 audit(1788087055.282:802): avc: denied { ioctl } for pid=8742 comm="syz.3.814" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 295.073692][ T31] audit: type=1400 audit(1788087055.312:803): avc: denied { bind } for pid=8745 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.239494][ T31] audit: type=1400 audit(1788087055.472:804): avc: denied { write } for pid=8727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.344496][ T8757] geneve2: entered promiscuous mode [ 295.344531][ T8757] geneve2: entered allmulticast mode [ 295.394897][ T31] audit: type=1400 audit(1788087055.632:805): avc: denied { write } for pid=8763 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.538776][ T8767] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 295.606873][ T8770] netlink: 45 bytes leftover after parsing attributes in process `syz.1.819'. [ 295.618336][ T1578] usb 5-1: USB disconnect, device number 41 [ 295.622169][ T190] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 295.638617][ T31] audit: type=1400 audit(1788087055.872:806): avc: denied { append } for pid=8773 comm="syz.3.821" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 296.030314][ T190] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 296.036966][ T190] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.037009][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.065237][ T190] usb 3-1: config 0 descriptor?? [ 296.075702][ T8777] process 'syz.0.822' launched '/dev/fd/9' with NULL argv: empty string added [ 296.078783][ T31] audit: type=1400 audit(1788087056.312:807): avc: denied { execute_no_trans } for pid=8776 comm="syz.0.822" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.902192][ T8785] overlayfs: missing 'lowerdir' [ 297.072490][ T8787] overlayfs: conflicting lowerdir path [ 297.411841][ T1578] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 297.419775][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 297.713532][ T190] holtek_mouse 0003:04D9:A070.000A: unknown main item tag 0x0 [ 297.713589][ T190] holtek_mouse 0003:04D9:A070.000A: unknown main item tag 0x0 [ 297.713613][ T190] holtek_mouse 0003:04D9:A070.000A: unknown main item tag 0x0 [ 297.713635][ T190] holtek_mouse 0003:04D9:A070.000A: unknown main item tag 0x0 [ 297.713659][ T190] holtek_mouse 0003:04D9:A070.000A: unknown main item tag 0x0 [ 297.713685][ T190] holtek_mouse 0003:04D9:A070.000A: unknown main item tag 0x0 [ 297.713710][ T190] holtek_mouse 0003:04D9:A070.000A: unknown main item tag 0x0 [ 297.713735][ T190] holtek_mouse 0003:04D9:A070.000A: unknown main item tag 0x0 [ 297.713799][ T190] holtek_mouse 0003:04D9:A070.000A: item fetching failed at offset 38/40 [ 297.714382][ T190] holtek_mouse 0003:04D9:A070.000A: hid parse failed: -22 [ 297.714445][ T190] holtek_mouse 0003:04D9:A070.000A: probe with driver holtek_mouse failed with error -22 [ 297.835799][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 297.839670][ T8762] binder: 8758:8762 ioctl c0207508 200000000680 returned -22 [ 297.897882][ T190] usb 3-1: USB disconnect, device number 39 [ 298.790353][ T8801] syzkaller0: entered promiscuous mode [ 298.790389][ T8801] syzkaller0: entered allmulticast mode [ 299.435450][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.833'. [ 300.157441][ T8832] kernel profiling enabled (shift: 7) [ 300.350268][ T8837] fuse: fd is not a fuse device [ 300.358609][ T31] audit: type=1400 audit(1788087060.592:808): avc: denied { read } for pid=8836 comm="syz.1.840" path="socket:[21303]" dev="sockfs" ino=21303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 300.399508][ T31] audit: type=1400 audit(1788087060.622:809): avc: denied { write } for pid=8836 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 300.951974][ T8857] FAULT_INJECTION: forcing a failure. [ 300.951974][ T8857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.952012][ T8857] CPU: 1 UID: 0 PID: 8857 Comm: syz.3.843 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.952039][ T8857] Tainted: [L]=SOFTLOCKUP [ 300.952046][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 300.952056][ T8857] Call Trace: [ 300.952063][ T8857] [ 300.952070][ T8857] dump_stack_lvl+0x100/0x190 [ 300.952105][ T8857] should_fail_ex.cold+0x5/0xa [ 300.952133][ T8857] _copy_from_user+0x2e/0xd0 [ 300.952165][ T8857] do_devconfig_ioctl+0x11e/0x6d0 [ 300.952199][ T8857] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 300.952241][ T8857] ? kasan_quarantine_put+0x104/0x240 [ 300.952265][ T8857] ? find_held_lock+0x2b/0x80 [ 300.952298][ T8857] comedi_unlocked_ioctl+0x860/0x3310 [ 300.952321][ T8857] ? tomoyo_path_number_perm+0x188/0x580 [ 300.952356][ T8857] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 300.952384][ T8857] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 300.952409][ T8857] ? do_vfs_ioctl+0x226/0x13e0 [ 300.952441][ T8857] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 300.952469][ T8857] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 300.952504][ T8857] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 300.952542][ T8857] ? __fget_files+0x34/0x3d0 [ 300.952577][ T8857] ? selinux_file_ioctl+0x13b/0x290 [ 300.952607][ T8857] ? selinux_file_ioctl+0xb6/0x290 [ 300.952639][ T8857] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 300.952663][ T8857] __x64_sys_ioctl+0x18e/0x210 [ 300.952696][ T8857] do_syscall_64+0x123/0x790 [ 300.952721][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.952750][ T8857] RIP: 0033:0x7fa1ced9e159 [ 300.952767][ T8857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.952789][ T8857] RSP: 002b:00007fa1cfc4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.952809][ T8857] RAX: ffffffffffffffda RBX: 00007fa1cf025fa0 RCX: 00007fa1ced9e159 [ 300.952823][ T8857] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 300.952836][ T8857] RBP: 00007fa1cfc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 300.952849][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.952862][ T8857] R13: 00007fa1cf026038 R14: 00007fa1cf025fa0 R15: 00007ffdd39c2e98 [ 300.952891][ T8857] [ 302.366789][ T31] audit: type=1400 audit(1788087062.602:810): avc: denied { setopt } for pid=8864 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 303.252510][ T31] audit: type=1400 audit(1788087063.482:811): avc: denied { write } for pid=8875 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 303.275638][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 303.973736][ T31] audit: type=1400 audit(1788087064.162:812): avc: denied { bind } for pid=8886 comm="syz.1.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 303.988873][ T31] audit: type=1400 audit(1788087064.222:813): avc: denied { write } for pid=8886 comm="syz.1.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.871819][ T8900] FAULT_INJECTION: forcing a failure. [ 304.871819][ T8900] name failslab, interval 1, probability 0, space 0, times 0 [ 304.887201][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.3.858 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.887230][ T8900] Tainted: [L]=SOFTLOCKUP [ 304.887237][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 304.887252][ T8900] Call Trace: [ 304.887259][ T8900] [ 304.887268][ T8900] dump_stack_lvl+0x100/0x190 [ 304.887304][ T8900] should_fail_ex.cold+0x5/0xa [ 304.887333][ T8900] should_failslab+0xc2/0x120 [ 304.887357][ T8900] __kmalloc_noprof+0xfc/0x840 [ 304.887378][ T8900] ? lsm_blob_alloc+0x68/0x90 [ 304.887407][ T8900] lsm_blob_alloc+0x68/0x90 [ 304.887431][ T8900] security_key_alloc+0x34/0x310 [ 304.887463][ T8900] key_alloc+0x876/0x1310 [ 304.887487][ T8900] ? sprintf+0xcc/0x100 [ 304.887508][ T8900] ? __pfx_sprintf+0x10/0x10 [ 304.887530][ T8900] ? __pfx_key_alloc+0x10/0x10 [ 304.887549][ T8900] ? request_key_auth_new+0x172/0xa00 [ 304.887576][ T8900] request_key_auth_new+0x667/0xa00 [ 304.887601][ T8900] ? __pfx_request_key_auth_new+0x10/0x10 [ 304.887633][ T8900] request_key_and_link+0x1089/0x1330 [ 304.887669][ T8900] ? __pfx_request_key_and_link+0x10/0x10 [ 304.887699][ T8900] ? __pfx___might_resched+0x10/0x10 [ 304.887738][ T8900] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 304.887767][ T8900] ? __pfx_keyring_search_iterator+0x10/0x10 [ 304.887793][ T8900] ? _copy_from_user+0x59/0xd0 [ 304.887828][ T8900] __do_sys_request_key+0x2a2/0x3c0 [ 304.887855][ T8900] ? __pfx___do_sys_request_key+0x10/0x10 [ 304.887879][ T8900] ? ksys_write+0x1ac/0x250 [ 304.887909][ T8900] do_syscall_64+0x123/0x790 [ 304.887935][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.887956][ T8900] RIP: 0033:0x7fa1ced9e159 [ 304.887974][ T8900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.888000][ T8900] RSP: 002b:00007fa1cfc4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 304.888025][ T8900] RAX: ffffffffffffffda RBX: 00007fa1cf025fa0 RCX: 00007fa1ced9e159 [ 304.888038][ T8900] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 304.888052][ T8900] RBP: 00007fa1cfc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 304.888064][ T8900] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 304.888078][ T8900] R13: 00007fa1cf026038 R14: 00007fa1cf025fa0 R15: 00007ffdd39c2e98 [ 304.888107][ T8900] [ 305.075665][ T31] audit: type=1400 audit(1788087065.312:814): avc: denied { bind } for pid=8901 comm="syz.4.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 306.661989][ T1578] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 306.822067][ T1578] usb 5-1: Using ep0 maxpacket: 8 [ 306.834981][ T1578] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.835170][ T1578] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 306.855638][ T1578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 306.855714][ T1578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 306.855778][ T1578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 306.855849][ T1578] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 306.855917][ T1578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 306.855973][ T1578] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 306.962092][ T1578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.970370][ T1578] usb 5-1: Product: syz [ 306.975882][ T1578] usb 5-1: Manufacturer: syz [ 306.980719][ T1578] usb 5-1: SerialNumber: syz [ 307.034231][ T1578] usb 5-1: config 0 descriptor?? [ 307.040220][ T8918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.040351][ T8918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.092908][ T1578] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.342756][ T8927] busy [ 307.475070][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 307.578860][ T8918] loop4: detected capacity change from 0 to 7 [ 307.855223][ T8918] Dev loop4: unable to read RDB block 7 [ 307.855271][ T8918] loop4: AHDI p2 p3 [ 307.855297][ T8918] loop4: partition table partially beyond EOD, truncated [ 307.858270][ T8918] loop4: p3 start 335544320 is beyond EOD, truncated [ 308.202671][ T8934] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.309262][ T8934] geneve2: entered promiscuous mode [ 308.309294][ T8934] geneve2: entered allmulticast mode [ 308.383925][ T8936] geneve2: entered promiscuous mode [ 308.383963][ T8936] geneve2: entered allmulticast mode [ 309.630082][ T31] audit: type=1400 audit(1788087069.352:815): avc: denied { getopt } for pid=8939 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.799795][ T10] usb 5-1: USB disconnect, device number 43 [ 309.818756][ T8945] FAULT_INJECTION: forcing a failure. [ 309.818756][ T8945] name failslab, interval 1, probability 0, space 0, times 0 [ 309.832276][ T8945] CPU: 0 UID: 0 PID: 8945 Comm: syz.3.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.832298][ T8945] Tainted: [L]=SOFTLOCKUP [ 309.832302][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 309.832310][ T8945] Call Trace: [ 309.832314][ T8945] [ 309.832319][ T8945] dump_stack_lvl+0x100/0x190 [ 309.832341][ T8945] should_fail_ex.cold+0x5/0xa [ 309.832358][ T8945] should_failslab+0xc2/0x120 [ 309.832372][ T8945] __kmalloc_cache_noprof+0x91/0x6d0 [ 309.832389][ T8945] ? preempt_schedule_thunk+0x16/0x40 [ 309.832404][ T8945] ? qdisc_get_rtab+0x14d/0x810 [ 309.832422][ T8945] qdisc_get_rtab+0x14d/0x810 [ 309.832441][ T8945] tcf_police_init+0xec9/0x1690 [ 309.832457][ T8945] ? __pfx_tcf_police_init+0x10/0x10 [ 309.832477][ T8945] ? tcf_action_init_1+0x2d8/0x6c0 [ 309.832491][ T8945] tcf_action_init_1+0x466/0x6c0 [ 309.832504][ T8945] ? __pfx_tcf_action_init_1+0x10/0x10 [ 309.832521][ T8945] ? tc_action_load_ops+0x1f5/0x3e0 [ 309.832539][ T8945] ? __pfx_tc_action_load_ops+0x10/0x10 [ 309.832566][ T8945] ? __nla_parse+0x40/0x60 [ 309.832584][ T8945] tcf_action_init+0x43f/0xa60 [ 309.832601][ T8945] ? __pfx_tcf_action_init+0x10/0x10 [ 309.832624][ T8945] ? __kernel_text_address+0xd/0x30 [ 309.832641][ T8945] ? unwind_get_return_address+0x59/0xa0 [ 309.832658][ T8945] ? arch_stack_walk+0xa6/0xf0 [ 309.832687][ T8945] ? __lock_acquire+0x4c5/0x1ec0 [ 309.832702][ T8945] tcf_action_add+0xed/0x5c0 [ 309.832716][ T8945] ? __pfx_tcf_action_add+0x10/0x10 [ 309.832750][ T8945] ? __nla_parse+0x40/0x60 [ 309.832766][ T8945] tc_ctl_action+0x2e3/0x470 [ 309.832778][ T8945] ? __pfx_tc_ctl_action+0x10/0x10 [ 309.832795][ T8945] ? __pfx_tc_ctl_action+0x10/0x10 [ 309.832806][ T8945] rtnetlink_rcv_msg+0x3c9/0xe90 [ 309.832821][ T8945] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.832837][ T8945] ? ref_tracker_free+0x37e/0x6c0 [ 309.832852][ T8945] netlink_rcv_skb+0x159/0x420 [ 309.832869][ T8945] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.832882][ T8945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.832904][ T8945] ? netlink_deliver_tap+0x1ae/0xcc0 [ 309.832923][ T8945] netlink_unicast+0x585/0x850 [ 309.832941][ T8945] ? __pfx_netlink_unicast+0x10/0x10 [ 309.832962][ T8945] netlink_sendmsg+0x8b0/0xda0 [ 309.832981][ T8945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.832999][ T8945] ? selinux_socket_sendmsg+0x198/0x2f0 [ 309.833019][ T8945] ____sys_sendmsg+0xa4d/0xbe0 [ 309.833035][ T8945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.833060][ T8945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.833095][ T8945] ? lock_acquire+0x1d1/0x380 [ 309.833106][ T8945] ? get_pid_task+0x2a/0x250 [ 309.833122][ T8945] ___sys_sendmsg+0x190/0x1e0 [ 309.833138][ T8945] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.833152][ T8945] ? get_pid_task+0x106/0x250 [ 309.833173][ T8945] ? find_held_lock+0x2b/0x80 [ 309.833198][ T8945] __sys_sendmsg+0x160/0x210 [ 309.833216][ T8945] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.833242][ T8945] do_syscall_64+0x123/0x790 [ 309.833257][ T8945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.833269][ T8945] RIP: 0033:0x7fa1ced9e159 [ 309.833280][ T8945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.833291][ T8945] RSP: 002b:00007fa1cfc4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.833304][ T8945] RAX: ffffffffffffffda RBX: 00007fa1cf025fa0 RCX: 00007fa1ced9e159 [ 309.833311][ T8945] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 309.833318][ T8945] RBP: 00007fa1cfc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 309.833325][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.833332][ T8945] R13: 00007fa1cf026038 R14: 00007fa1cf025fa0 R15: 00007ffdd39c2e98 [ 309.833348][ T8945] [ 311.760874][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.760943][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.942050][ T25] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 314.092622][ T25] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 314.102682][ T25] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 314.110720][ T25] usb 3-1: config 1 has no interface number 0 [ 314.118751][ T25] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 314.130807][ T25] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 314.140915][ T25] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.152986][ T31] audit: type=1400 audit(1788087074.392:816): avc: denied { connect } for pid=8978 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.183820][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.193461][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.883'. [ 314.204043][ T25] usb 3-1: Product: syz [ 314.204076][ T25] usb 3-1: Manufacturer: syz [ 314.204090][ T25] usb 3-1: SerialNumber: syz [ 314.219972][ T8970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 314.239978][ T8979] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 315.055956][ T8970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 315.439410][ T25] usb 3-1: Incompatible driver and firmware versions [ 315.485297][ T25] usb 3-1: USB disconnect, device number 40 [ 318.962341][ T9006] ima: policy update failed [ 318.969687][ T31] audit: type=1802 audit(1788087079.202:817): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.890" res=0 errno=0 [ 319.024042][ T9019] mmap: syz.3.882 (9019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 319.159091][ T9020] IPVS: sh: FWM 3 0x00000003 - no destination available [ 319.190770][ T1262] IPVS: starting estimator thread 0... [ 319.302998][ T9021] IPVS: using max 33 ests per chain, 79200 per kthread [ 321.409415][ T31] audit: type=1800 audit(1788087081.632:818): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.893" name="bus" dev="tmpfs" ino=874 res=0 errno=0 [ 321.584183][ T9038] busy [ 321.993655][ T31] audit: type=1400 audit(1788087082.232:819): avc: denied { write } for pid=9046 comm="syz.3.900" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 322.314968][ T31] audit: type=1400 audit(1788087082.552:820): avc: denied { mounton } for pid=9049 comm="syz.0.901" path="/158/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 322.341587][ T31] audit: type=1400 audit(1788087082.572:821): avc: denied { read write } for pid=9049 comm="syz.0.901" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 322.365407][ T31] audit: type=1400 audit(1788087082.602:822): avc: denied { open } for pid=9049 comm="syz.0.901" path="/158/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 323.526776][ T31] audit: type=1400 audit(1788087083.762:823): avc: denied { write } for pid=9054 comm="syz.0.902" name="functions" dev="configfs" ino=19614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 323.529169][ T9056] file system registered [ 323.554763][ T5724] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 323.689193][ T9062] netlink: 'syz.1.903': attribute type 12 has an invalid length. [ 323.721847][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 323.813474][ T5724] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.837249][ T5724] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.904848][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.914070][ T5724] usb 4-1: Product: syz [ 323.914091][ T5724] usb 4-1: Manufacturer: syz [ 323.914109][ T5724] usb 4-1: SerialNumber: syz [ 323.937047][ T5724] usb 4-1: config 0 descriptor?? [ 323.951333][ T9053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.959603][ T5724] hub 4-1:0.0: bad descriptor, ignoring hub [ 323.966761][ T5724] hub 4-1:0.0: probe with driver hub failed with error -5 [ 324.029818][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.905'. [ 324.292071][ T5703] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 324.385012][ T9074] netlink: 'syz.2.895': attribute type 12 has an invalid length. [ 324.444521][ T5703] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 324.444662][ T5703] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 324.447408][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.447450][ T5703] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 28, changing to 8 [ 324.447478][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.448334][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.448375][ T5703] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 28, changing to 8 [ 324.448403][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.449234][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.449274][ T5703] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 28, changing to 8 [ 324.449301][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.450139][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.450178][ T5703] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 28, changing to 8 [ 324.450204][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.452260][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.452302][ T5703] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 28, changing to 8 [ 324.452329][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.454018][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.454066][ T5703] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 28, changing to 8 [ 324.454094][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.454935][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.454975][ T5703] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 28, changing to 8 [ 324.455002][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.455820][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.455861][ T5703] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 28, changing to 8 [ 324.455888][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.462780][ T5703] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 324.462812][ T5703] usb 1-1: Product: syz [ 324.462852][ T5703] usb 1-1: Manufacturer: syz [ 324.462868][ T5703] usb 1-1: SerialNumber: syz [ 324.483018][ T5703] usb 1-1: config 0 descriptor?? [ 324.545908][ T5703] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 326.283248][ T1578] usb 4-1: USB disconnect, device number 33 [ 326.340726][ T5703] usb 1-1: USB disconnect, device number 35 [ 326.380901][ T5703] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 327.162233][ T9091] random: crng reseeded on system resumption [ 327.677634][ T31] audit: type=1400 audit(1788087087.912:824): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 328.441890][ T31] audit: type=1400 audit(1788087088.672:825): avc: denied { ioctl } for pid=9085 comm="syz.1.911" path="socket:[22139]" dev="sockfs" ino=22139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 329.505749][ T9112] binder: 9108:9112 ioctl c018620c 2000000001c0 returned -1 [ 329.738397][ T5617] Bluetooth: hci3: unexpected event for opcode 0x202a [ 329.790846][ T9087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.792919][ T9087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.894744][ T9087] xfrm1: left allmulticast mode [ 329.932230][ T1500] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.938433][ T1500] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.940271][ T1500] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.941056][ T1500] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.387979][ T9120] netlink: 144 bytes leftover after parsing attributes in process `syz.3.915'. [ 330.404103][ T5724] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 330.554074][ T5724] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 330.568862][ T5724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 330.581078][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.594186][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 330.608635][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 331.135595][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.143744][ T5724] usb 5-1: Product: syz [ 331.148112][ T5724] usb 5-1: Manufacturer: syz [ 331.153864][ T5724] usb 5-1: SerialNumber: syz [ 331.181880][ T5724] usb 5-1: config 0 descriptor?? [ 331.192088][ T9116] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.632297][ T5703] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 331.793937][ T5703] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 331.801321][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 331.801367][ T5703] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.801394][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 331.801421][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 331.832104][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.832129][ T5703] usb 1-1: Product: syz [ 331.832145][ T5703] usb 1-1: Manufacturer: syz [ 331.832160][ T5703] usb 1-1: SerialNumber: syz [ 331.888038][ T5724] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 331.890876][ T5724] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 331.991729][ T5703] usb 1-1: config 0 descriptor?? [ 332.002216][ T9124] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 332.569104][ T9133] SELinux: invalid class [ 332.586823][ T9133] SELinux: failed to load policy [ 332.647230][ T5703] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 332.692790][ C1] powermate: config urb returned -71 [ 332.692950][ C1] powermate: config urb returned -71 [ 332.693118][ C1] powermate: config urb returned -71 [ 332.693299][ C1] powermate: config urb returned -71 [ 332.698377][ T5724] usb 5-1: USB disconnect, device number 45 [ 332.698441][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 332.766236][ T5703] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 332.803105][ C0] powermate: config urb returned -71 [ 332.803264][ C0] powermate: config urb returned -71 [ 332.803440][ C0] powermate: config urb returned -71 [ 332.803598][ C0] powermate: config urb returned -71 [ 332.849808][ T5703] usb 1-1: USB disconnect, device number 36 [ 332.849912][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 333.769647][ T9141] overlayfs: conflicting lowerdir path [ 335.717765][ T9168] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.844795][ T9177] overlay: Unknown parameter 'obj_user' [ 335.860455][ T31] audit: type=1400 audit(1788087096.092:826): avc: denied { write } for pid=9148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.880450][ T9178] geneve2: entered promiscuous mode [ 335.880474][ T9178] geneve2: entered allmulticast mode [ 335.986118][ T31] audit: type=1400 audit(1788087096.222:827): avc: denied { write } for pid=9183 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.317718][ T9194] comedi comedi3: das16m1: I/O base address not correctly aligned [ 336.351394][ T9194] wg0 speed is unknown, defaulting to 1000 [ 336.353514][ T9194] wg0 speed is unknown, defaulting to 1000 [ 336.354651][ T9194] wg0 speed is unknown, defaulting to 1000 [ 336.442950][ T9194] infiniband syz2: set active [ 336.442970][ T9194] infiniband syz2: added wg0 [ 336.473306][ T5717] wg0 speed is unknown, defaulting to 1000 [ 336.492236][ T9194] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 336.492301][ T9194] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 336.492350][ T9194] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 336.527648][ T9194] RDS/IB: syz2: added [ 336.528060][ T9194] smc: adding ib device syz2 with port count 1 [ 336.528188][ T9194] smc: ib device syz2 port 1 has no pnetid [ 336.530723][ T9194] wg0 speed is unknown, defaulting to 1000 [ 336.639197][ T9194] wg0 speed is unknown, defaulting to 1000 [ 336.736270][ T9194] wg0 speed is unknown, defaulting to 1000 [ 336.836891][ T9194] wg0 speed is unknown, defaulting to 1000 [ 336.936803][ T9194] wg0 speed is unknown, defaulting to 1000 [ 337.037436][ T5717] wg0 speed is unknown, defaulting to 1000 [ 337.074721][ T31] audit: type=1326 audit(1788087096.782:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.932" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febaed9e159 code=0x0 [ 338.163845][ T31] audit: type=1400 audit(1788087098.392:829): avc: denied { write } for pid=9185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.393221][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.936'. [ 338.460108][ T9217] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 338.460159][ T9217] block device autoloading is deprecated and will be removed. [ 338.493743][ T31] audit: type=1400 audit(1788087098.732:830): avc: denied { write } for pid=9221 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.637358][ T31] audit: type=1400 audit(1788087098.872:831): avc: denied { name_bind } for pid=9226 comm="syz.3.938" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 339.567065][ T31] audit: type=1400 audit(1788087099.802:832): avc: denied { read } for pid=9235 comm="syz.4.939" dev="nsfs" ino=4026533207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 339.567417][ T31] audit: type=1400 audit(1788087099.802:833): avc: denied { open } for pid=9235 comm="syz.4.939" path="net:[4026533207]" dev="nsfs" ino=4026533207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 339.570946][ T9236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.939'. [ 339.682079][ T9244] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.807631][ T9249] geneve2: entered promiscuous mode [ 339.813329][ T5724] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 339.821582][ T9249] geneve2: entered allmulticast mode [ 339.835924][ T31] audit: type=1400 audit(1788087100.072:834): avc: denied { mounton } for pid=9246 comm="syz.4.944" path="/173/file0" dev="autofs" ino=23151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 339.859147][ T9248] nfs4: Unknown parameter 'dummy0' [ 339.864384][ T31] audit: type=1400 audit(1788087100.102:835): avc: denied { map } for pid=9246 comm="syz.4.944" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 339.953298][ T5889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 339.962299][ T5889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 339.962339][ T5889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 339.962371][ T5889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 339.981860][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 339.982374][ T5724] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.986357][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.986388][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.986411][ T5724] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.986449][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.000633][ T5724] usb 4-1: config 0 descriptor?? [ 341.042505][ T5724] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input27 [ 341.282728][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.283072][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.529276][ T5724] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 342.215084][ T5724] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 342.339926][ T9281] ipvlan3: entered promiscuous mode [ 342.346551][ T9281] team0: Device ipvlan3 failed to register rx_handler [ 342.438222][ T9281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.953'. [ 342.950702][ T9292] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.289429][ T25] usb 4-1: USB disconnect, device number 34 [ 345.319538][ T9313] bridge0: port 3(vlan2) entered blocking state [ 345.319709][ T9313] bridge0: port 3(vlan2) entered disabled state [ 345.319833][ T9313] vlan2: entered allmulticast mode [ 345.319849][ T9313] geneve0: entered allmulticast mode [ 345.321331][ T9313] vlan2: entered promiscuous mode [ 345.321347][ T9313] geneve0: entered promiscuous mode [ 345.363392][ T9313] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 345.363425][ T9313] netlink: 244 bytes leftover after parsing attributes in process `syz.4.959'. [ 345.449581][ T9315] FAULT_INJECTION: forcing a failure. [ 345.449581][ T9315] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 345.449641][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.4.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.449668][ T9315] Tainted: [L]=SOFTLOCKUP [ 345.449674][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 345.449685][ T9315] Call Trace: [ 345.449691][ T9315] [ 345.449700][ T9315] dump_stack_lvl+0x100/0x190 [ 345.449738][ T9315] should_fail_ex.cold+0x5/0xa [ 345.449764][ T9315] ? prepare_alloc_pages+0x16d/0x5b0 [ 345.449790][ T9315] should_fail_alloc_page+0xeb/0x140 [ 345.449816][ T9315] prepare_alloc_pages+0x1f0/0x5b0 [ 345.449840][ T9315] ? is_bpf_text_address+0x25/0x1a0 [ 345.449869][ T9315] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 345.449904][ T9315] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.449937][ T9315] ? is_bpf_text_address+0x94/0x1a0 [ 345.449961][ T9315] ? kernel_text_address+0x8d/0x100 [ 345.449992][ T9315] ? __kernel_text_address+0xd/0x30 [ 345.450028][ T9315] ? unwind_get_return_address+0x59/0xa0 [ 345.450060][ T9315] ? __lock_acquire+0x4c5/0x1ec0 [ 345.450081][ T9315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 345.450123][ T9315] ? __lock_acquire+0x4c5/0x1ec0 [ 345.450159][ T9315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 345.450184][ T9315] ? policy_nodemask+0xed/0x4f0 [ 345.450213][ T9315] alloc_pages_mpol+0x201/0x550 [ 345.450240][ T9315] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 345.450267][ T9315] ? mt_find+0x4d5/0x9b0 [ 345.450296][ T9315] folio_alloc_mpol_noprof+0x36/0x260 [ 345.450326][ T9315] vma_alloc_folio_noprof+0xed/0x1d0 [ 345.450355][ T9315] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 345.450384][ T9315] ? rcu_read_unlock+0x2d/0xb0 [ 345.450418][ T9315] do_anonymous_page+0xac9/0x2050 [ 345.450454][ T9315] ? __pfx_do_anonymous_page+0x10/0x10 [ 345.450479][ T9315] ? rcu_read_unlock+0x2d/0xb0 [ 345.450505][ T9315] ? rcu_read_unlock+0x2d/0xb0 [ 345.450532][ T9315] ? __pte_offset_map+0x179/0x310 [ 345.450557][ T9315] __handle_mm_fault+0x1ff3/0x2f60 [ 345.450591][ T9315] ? __pfx___handle_mm_fault+0x10/0x10 [ 345.450617][ T9315] ? __pfx_mt_find+0x10/0x10 [ 345.450657][ T9315] ? find_vma+0xbf/0x140 [ 345.450676][ T9315] ? __pfx_find_vma+0x10/0x10 [ 345.450699][ T9315] handle_mm_fault+0x363/0xa20 [ 345.450742][ T9315] do_user_addr_fault+0x745/0x12f0 [ 345.450777][ T9315] exc_page_fault+0x6f/0xd0 [ 345.450800][ T9315] asm_exc_page_fault+0x26/0x30 [ 345.450820][ T9315] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 345.450849][ T9315] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f b0 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 345.450868][ T9315] RSP: 0018:ffffc900033e7be8 EFLAGS: 00050206 [ 345.450885][ T9315] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000f40 [ 345.450898][ T9315] RDX: 0000000000000001 RSI: ffff88803522e0c0 RDI: 0000200000004000 [ 345.450912][ T9315] RBP: 0000200000003f40 R08: 0000000000000000 R09: ffffed1006a45dff [ 345.450925][ T9315] R10: ffff88803522efff R11: 0000000000000000 R12: ffff88803522e000 [ 345.450938][ T9315] R13: 0000200000004f40 R14: 00007ffffffff000 R15: 0000000000000000 [ 345.450966][ T9315] _copy_to_user+0xa4/0xd0 [ 345.451002][ T9315] pagemap_read+0x51b/0x830 [ 345.451031][ T9315] ? __pfx_pagemap_read+0x10/0x10 [ 345.451059][ T9315] ? rw_verify_area+0xce/0x6d0 [ 345.451093][ T9315] ? __pfx_pagemap_read+0x10/0x10 [ 345.451117][ T9315] vfs_read+0x1e4/0xb40 [ 345.451148][ T9315] ? lock_acquire+0x1d1/0x380 [ 345.451168][ T9315] ? __fget_files+0x34/0x3d0 [ 345.451191][ T9315] ? __pfx_vfs_read+0x10/0x10 [ 345.451220][ T9315] ? find_held_lock+0x2b/0x80 [ 345.451245][ T9315] ? __fget_files+0x215/0x3d0 [ 345.451266][ T9315] ? __fget_files+0x215/0x3d0 [ 345.451294][ T9315] ? __fget_files+0x21f/0x3d0 [ 345.451325][ T9315] __x64_sys_pread64+0x1eb/0x250 [ 345.451346][ T9315] ? __pfx___x64_sys_pread64+0x10/0x10 [ 345.451375][ T9315] do_syscall_64+0x123/0x790 [ 345.451400][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.451420][ T9315] RIP: 0033:0x7f26b959e159 [ 345.451438][ T9315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.451456][ T9315] RSP: 002b:00007f26ba451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 345.451475][ T9315] RAX: ffffffffffffffda RBX: 00007f26b9825fa0 RCX: 00007f26b959e159 [ 345.451488][ T9315] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000003 [ 345.451500][ T9315] RBP: 00007f26ba451090 R08: 0000000000000000 R09: 0000000000000000 [ 345.451510][ T9315] R10: 0000001000000300 R11: 0000000000000246 R12: 0000000000000001 [ 345.451522][ T9315] R13: 00007f26b9826038 R14: 00007f26b9825fa0 R15: 00007fff8ba1c138 [ 345.451551][ T9315] [ 345.700095][ T9326] openvswitch: netlink: IPv4 tunnel dst address is zero [ 345.700335][ T9326] openvswitch: netlink: IPv4 tunnel dst address is zero [ 345.700548][ T9326] openvswitch: netlink: IPv4 tunnel dst address is zero [ 346.013623][ T1451] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 346.016838][ T1451] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 346.016876][ T1451] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 346.021916][ T1523] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 346.211882][ T190] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 346.362055][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 346.367637][ T190] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 346.389381][ T190] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 346.391205][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.391234][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.391257][ T190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 346.391297][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.423208][ T190] usb 4-1: config 0 descriptor?? [ 346.787034][ T9343] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.039975][ T190] usbhid 4-1:0.0: can't add hid device: -71 [ 347.040085][ T190] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 347.067332][ T190] usb 4-1: USB disconnect, device number 35 [ 347.136842][ T9352] IPVS: Error connecting to the multicast addr [ 347.153123][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 347.731700][ T9358] overlayfs: missing 'lowerdir' [ 347.801730][ T9360] overlayfs: conflicting lowerdir path [ 348.170853][ T5794] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 348.322032][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 348.324207][ T5794] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 348.327734][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.327759][ T5794] usb 3-1: Product: syz [ 348.327774][ T5794] usb 3-1: Manufacturer: syz [ 348.327789][ T5794] usb 3-1: SerialNumber: syz [ 348.330591][ T5794] usb 3-1: config 0 descriptor?? [ 349.147012][ T5794] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 349.156130][ T5794] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 349.156279][ T5794] visor 3-1:0.0: probe with driver visor failed with error -71 [ 349.177182][ T5794] usb 3-1: USB disconnect, device number 41 [ 356.471537][ T9415] syz.1.991 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 356.655111][ T9415] fuse: fd is not a fuse device [ 356.775206][ T9419] FAULT_INJECTION: forcing a failure. [ 356.775206][ T9419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.775252][ T9419] CPU: 0 UID: 0 PID: 9419 Comm: syz.3.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.775280][ T9419] Tainted: [L]=SOFTLOCKUP [ 356.775287][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 356.775299][ T9419] Call Trace: [ 356.775305][ T9419] [ 356.775312][ T9419] dump_stack_lvl+0x100/0x190 [ 356.775344][ T9419] should_fail_ex.cold+0x5/0xa [ 356.775374][ T9419] _copy_from_user+0x2e/0xd0 [ 356.775405][ T9419] __sys_bpf+0x2f5/0x4a30 [ 356.775444][ T9419] ? __pfx___sys_bpf+0x10/0x10 [ 356.775474][ T9419] ? find_held_lock+0x2b/0x80 [ 356.775500][ T9419] ? get_pid_task+0xfc/0x250 [ 356.775525][ T9419] ? get_pid_task+0xfc/0x250 [ 356.775560][ T9419] ? find_held_lock+0x2b/0x80 [ 356.775593][ T9419] ? rcu_read_lock_any_held+0x6a/0x90 [ 356.775621][ T9419] ? find_held_lock+0x2b/0x80 [ 356.775655][ T9419] ? ksys_write+0x190/0x250 [ 356.775674][ T9419] ? ksys_write+0x190/0x250 [ 356.775692][ T9419] ? lock_acquire+0x1d1/0x380 [ 356.775712][ T9419] ? populate_seccomp_data+0x225/0x4d0 [ 356.775760][ T9419] ? ksys_write+0x1ac/0x250 [ 356.775782][ T9419] ? __x64_sys_bpf+0xce/0x140 [ 356.775800][ T9419] __x64_sys_bpf+0xce/0x140 [ 356.775818][ T9419] ? __seccomp_permit_syscall+0x204/0x2e0 [ 356.775850][ T9419] do_syscall_64+0x123/0x790 [ 356.775875][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.775897][ T9419] RIP: 0033:0x7fa1ced9e159 [ 356.775915][ T9419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.775934][ T9419] RSP: 002b:00007fa1cfc4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.775954][ T9419] RAX: ffffffffffffffda RBX: 00007fa1cf025fa0 RCX: 00007fa1ced9e159 [ 356.775967][ T9419] RDX: 00000000000000b6 RSI: 00002000000001c0 RDI: 0000000000000005 [ 356.775980][ T9419] RBP: 00007fa1cfc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 356.775993][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.776005][ T9419] R13: 00007fa1cf026038 R14: 00007fa1cf025fa0 R15: 00007ffdd39c2e98 [ 356.776032][ T9419] [ 357.070022][ T9425] netlink: 91 bytes leftover after parsing attributes in process `syz.1.994'. [ 357.435157][ T9439] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.441847][ T5794] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 357.452730][ T1578] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 357.593800][ T5794] usb 4-1: Using ep0 maxpacket: 8 [ 357.603830][ T5794] usb 4-1: unable to get BOS descriptor or descriptor too short [ 357.603888][ T5794] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 357.604786][ T5794] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 357.604824][ T5794] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 357.611171][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.611194][ T5794] usb 4-1: Product: syz [ 357.611209][ T5794] usb 4-1: Manufacturer: syz [ 357.611224][ T5794] usb 4-1: SerialNumber: syz [ 357.661570][ T1578] usb 3-1: not running at top speed; connect to a high speed hub [ 357.661608][ T1578] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 357.689319][ T1578] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.689359][ T1578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.726904][ T1578] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 359.205259][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.305327][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.364728][ T1578] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 359.383408][ T9443] comedi comedi0: dt2801: I/O base address not correctly aligned [ 359.395132][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 359.395149][ T31] audit: type=1400 audit(1788087119.632:837): avc: denied { connect } for pid=9442 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 359.402702][ T1578] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 359.402760][ T1578] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 359.456641][ T1578] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -5 [ 360.007640][ T9456] kAFS: No cell specified [ 361.048949][ T5794] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 361.059193][ T5794] usb 4-1: unit 1 not found! [ 361.086157][ T190] usb 3-1: USB disconnect, device number 42 [ 361.535055][ T1578] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 361.554342][ T5794] usb 4-1: USB disconnect, device number 36 [ 361.679962][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.696721][ T1578] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 361.706846][ T1578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 361.706866][ T1578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 361.706880][ T1578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 361.706894][ T1578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 361.743107][ T1578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.743134][ T1578] usb 1-1: Product: syz [ 361.743148][ T1578] usb 1-1: Manufacturer: syz [ 361.743164][ T1578] usb 1-1: SerialNumber: syz [ 361.781590][ T1578] usb 1-1: config 0 descriptor?? [ 361.882069][ T5702] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 361.910459][ T31] audit: type=1400 audit(1788087122.142:838): avc: denied { write } for pid=9483 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 361.911507][ T31] audit: type=1400 audit(1788087122.142:839): avc: denied { write } for pid=9483 comm="syz.3.1005" lport=45501 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 362.005708][ T1578] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 362.033164][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 362.051860][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 362.058131][ T5702] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 362.066588][ T9493] geneve3: entered promiscuous mode [ 362.066608][ T9493] geneve3: entered allmulticast mode [ 362.078290][ T9494] hsr_slave_0: left promiscuous mode [ 362.084019][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.093727][ T9494] hsr_slave_1: left promiscuous mode [ 362.114940][ T9490] can: request_module (can-proto-0) failed. [ 362.121513][ T5702] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 362.182131][ T5889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 362.184540][ T5889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 362.184578][ T5889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 362.184611][ T5889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 362.369656][ T5794] usb 1-1: USB disconnect, device number 37 [ 362.847279][ T5702] gspca_nw80x: reg_r err -32 [ 362.852785][ T5702] nw80x 5-1:3.0: probe with driver nw80x failed with error -32 [ 362.880597][ T5702] usb 5-1: USB disconnect, device number 46 [ 363.426987][ T31] audit: type=1400 audit(1788087123.662:840): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 363.663357][ T31] audit: type=1400 audit(1788087123.852:841): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.663582][ T31] audit: type=1400 audit(1788087123.862:842): avc: denied { open } for pid=5604 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.663881][ T31] audit: type=1400 audit(1788087123.872:843): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.054356][ T31] audit: type=1400 audit(1788087124.292:844): avc: denied { create } for pid=9508 comm="syz.3.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.091852][ T31] audit: type=1400 audit(1788087124.322:845): avc: denied { write } for pid=9508 comm="syz.3.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.120682][ T31] audit: type=1400 audit(1788087124.352:846): avc: denied { write } for pid=9510 comm="syz.4.1014" name="comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.342197][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 365.342246][ T31] audit: type=1400 audit(1788087125.582:864): avc: denied { read } for pid=9521 comm="syz.3.1016" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 365.384756][ T31] audit: type=1400 audit(1788087125.612:865): avc: denied { open } for pid=9521 comm="syz.3.1016" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 365.410295][ T31] audit: type=1400 audit(1788087125.652:866): avc: denied { ioctl } for pid=9520 comm="syz.4.1017" path="socket:[23546]" dev="sockfs" ino=23546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 365.411879][ T31] audit: type=1400 audit(1788087125.652:867): avc: denied { ioctl } for pid=9521 comm="syz.3.1016" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 365.416670][ T31] audit: type=1400 audit(1788087125.652:868): avc: denied { bpf } for pid=9520 comm="syz.4.1017" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 365.423413][ T31] audit: type=1400 audit(1788087125.652:869): avc: denied { create } for pid=9520 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.428851][ T31] audit: type=1400 audit(1788087125.652:870): avc: denied { setopt } for pid=9520 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.447315][ T31] audit: type=1400 audit(1788087125.682:871): avc: denied { bind } for pid=9520 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.512245][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 365.512267][ T9522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.530475][ T9522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.543067][ T31] audit: type=1400 audit(1788087125.772:872): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 365.592896][ T31] audit: type=1400 audit(1788087125.812:873): avc: denied { read write } for pid=9524 comm="syz.2.1018" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 365.604282][ T9527] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.874692][ T9536] 9pnet_fd: Insufficient options for proto=fd [ 366.928801][ T5617] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 367.273546][ T1578] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 367.433233][ T1578] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 367.446545][ T1578] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.446577][ T1578] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.475306][ T1578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.475366][ T1578] usb 5-1: Product: syz [ 367.475413][ T1578] usb 5-1: Manufacturer: syz [ 367.475460][ T1578] usb 5-1: SerialNumber: syz [ 367.506722][ T9562] binder: 9557:9562 ioctl c018620c 2000000001c0 returned -1 [ 367.538130][ T1578] usb 5-1: config 0 descriptor?? [ 367.762441][ T9549] netlink: 'syz.4.1025': attribute type 12 has an invalid length. [ 368.295282][ T9562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.300879][ T9562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.319581][ T9562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.319840][ T9562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 368.319951][ T9562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 368.320071][ T9562] hwrng_fill thread creation failed [ 368.352087][ T9555] event trace: Could not enable event p [ 369.672315][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 370.208127][ T5703] usb 5-1: USB disconnect, device number 47 [ 370.372232][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 370.378487][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.390595][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 370.398287][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 370.431365][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 370.431410][ T31] audit: type=1400 audit(370.407:928): avc: denied { prog_run } for pid=9602 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 370.856225][ T31] audit: type=1400 audit(370.837:929): avc: denied { allowed } for pid=9611 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 370.880077][ T31] audit: type=1400 audit(370.857:930): avc: denied { create } for pid=9611 comm="syz.1.1042" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 370.962154][ T31] audit: type=1400 audit(370.937:931): avc: denied { map } for pid=9613 comm="syz.2.1043" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 370.987103][ T31] audit: type=1400 audit(370.947:932): avc: denied { read write } for pid=9613 comm="syz.2.1043" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 371.055777][ T9614] jffs2: notice: (9614) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 371.073342][ T31] audit: type=1400 audit(371.057:933): avc: denied { mount } for pid=9613 comm="syz.2.1043" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 371.123332][ T31] audit: type=1400 audit(371.107:934): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 372.443598][ T31] audit: type=1400 audit(372.427:935): avc: denied { read } for pid=9625 comm="syz.0.1044" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 372.468739][ T31] audit: type=1400 audit(372.427:936): avc: denied { open } for pid=9625 comm="syz.0.1044" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 372.468813][ T31] audit: type=1400 audit(372.427:937): avc: denied { ioctl } for pid=9625 comm="syz.0.1044" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 372.608754][ T9629] evm: overlay not supported [ 373.162929][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.162993][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.322595][ T9642] bpf: Bad value for 'uid' [ 373.467324][ T9647] binder: 9645:9647 ioctl c018620c 2000000001c0 returned -1 [ 373.622043][ T1578] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 375.016115][ T9647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.091446][ T9647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.091627][ T1578] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.093066][ T9647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.093183][ T9647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.093360][ T9647] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.093538][ T9647] hwrng_fill thread creation failed [ 375.135120][ T1578] usb 5-1: not running at top speed; connect to a high speed hub [ 375.135154][ T1578] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=c0.de [ 375.187007][ T1578] usb 5-1: config 8 has an invalid interface number: 116 but max is 0 [ 375.187057][ T1578] usb 5-1: config 8 has no interface number 0 [ 375.187107][ T1578] usb 5-1: config 8 interface 116 has no altsetting 0 [ 375.190936][ T1578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.190962][ T1578] usb 5-1: Product: syz [ 375.190978][ T1578] usb 5-1: Manufacturer: syz [ 375.190994][ T1578] usb 5-1: SerialNumber: syz [ 375.287699][ T9658] bridge0: port 3(netdevsim0) entered blocking state [ 375.287886][ T9658] bridge0: port 3(netdevsim0) entered disabled state [ 375.288219][ T9658] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 375.296646][ T9658] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 375.413787][ T9660] pvfs2: Unknown parameter './' [ 375.432946][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.434218][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.442170][ T1578] usb 5-1: selecting invalid altsetting 1 [ 375.442196][ T1578] catc 5-1:8.116: Can't set altsetting 1. [ 375.442241][ T1578] catc 5-1:8.116: probe with driver catc failed with error -5 [ 375.458779][ T1578] usb 5-1: USB disconnect, device number 48 [ 375.475468][ T9663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9663 comm=syz.3.1058 [ 375.481565][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 375.481580][ T31] audit: type=1400 audit(375.457:954): avc: denied { read write } for pid=9662 comm="syz.3.1058" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 375.483118][ T31] audit: type=1400 audit(375.457:955): avc: denied { open } for pid=9662 comm="syz.3.1058" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 375.493651][ T9665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9665 comm=syz.3.1058 [ 375.561924][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 376.316408][ T31] audit: type=1400 audit(376.297:956): avc: denied { getopt } for pid=9669 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.316475][ T31] audit: type=1400 audit(376.297:957): avc: denied { read } for pid=9669 comm="syz.2.1061" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 376.316511][ T31] audit: type=1400 audit(376.297:958): avc: denied { open } for pid=9669 comm="syz.2.1061" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 376.316550][ T31] audit: type=1400 audit(376.297:959): avc: denied { append } for pid=9669 comm="syz.2.1061" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.316593][ T31] audit: type=1400 audit(376.297:960): avc: denied { ioctl } for pid=9669 comm="syz.2.1061" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 376.388534][ T31] audit: type=1400 audit(376.297:961): avc: denied { create } for pid=9669 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 376.543951][ T31] audit: type=1400 audit(376.527:962): avc: denied { wake_alarm } for pid=9672 comm="syz.3.1062" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 376.565587][ T9675] comedi comedi0: dt2801: I/O base address or length out of range [ 376.629182][ T31] audit: type=1400 audit(376.607:963): avc: denied { shutdown } for pid=9673 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 377.164941][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.164990][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.165026][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 377.165053][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.251926][ T5703] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 377.442062][ T5703] usb 5-1: Using ep0 maxpacket: 16 [ 377.444335][ T5703] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 377.454431][ T5703] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.454495][ T5703] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.469380][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.469448][ T5703] usb 5-1: SerialNumber: syz [ 377.837856][ T5703] usb 5-1: 0:2 : does not exist [ 377.946196][ T9698] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 377.956034][ T9698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.163791][ T9680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.320394][ T5794] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 378.378186][ T5703] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 378.671719][ T5794] usb 4-1: device descriptor read/64, error -71 [ 378.959514][ T5703] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 378.972155][ T5794] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 378.989049][ T5703] usb 5-1: USB disconnect, device number 49 [ 379.107960][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.115000][ T5794] usb 4-1: device descriptor read/64, error -71 [ 380.172600][ T5794] usb usb4-port1: attempt power cycle [ 380.285787][ T9720] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.701622][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 380.709933][ T31] audit: type=1400 audit(380.677:984): avc: denied { bind } for pid=9726 comm="syz.0.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 382.570912][ T9747] binder: 9742:9747 ioctl c018620c 2000000001c0 returned -1 [ 383.047691][ T9747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 383.047906][ T9747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 383.048075][ T9747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 383.048210][ T9747] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 383.048341][ T9747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 383.048511][ T9747] hwrng_fill thread creation failed [ 383.334600][ T9755] binder: 9752:9755 ioctl c0306201 0 returned -14 [ 383.808017][ T31] audit: type=1400 audit(383.787:985): avc: denied { read write } for pid=9764 comm="syz.4.1088" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 383.808176][ T31] audit: type=1400 audit(383.787:987): avc: denied { set_context_mgr } for pid=9752 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 383.881053][ T31] audit: type=1400 audit(383.787:986): avc: denied { open } for pid=9764 comm="syz.4.1088" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 383.881130][ T31] audit: type=1400 audit(383.837:988): avc: denied { map } for pid=9752 comm="syz.0.1085" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 383.881165][ T31] audit: type=1400 audit(383.847:989): avc: denied { call } for pid=9752 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 383.881205][ T31] audit: type=1400 audit(383.847:990): avc: denied { transfer } for pid=9752 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 383.980331][ T31] audit: type=1400 audit(383.957:991): avc: denied { read append } for pid=9764 comm="syz.4.1088" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.032754][ T9768] nfs4: Unknown parameter 'UcW­”¿ŽÚÉÑ' [ 384.322020][ T5702] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 384.376407][ T31] audit: type=1400 audit(384.357:992): avc: denied { create } for pid=9779 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.384439][ T31] audit: type=1400 audit(384.357:993): avc: denied { ioctl } for pid=9780 comm="syz.0.1093" path="socket:[25118]" dev="sockfs" ino=25118 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.472009][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 384.472964][ T5702] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 384.473839][ T5702] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 384.473863][ T5702] usb 5-1: config 2 has no interface number 0 [ 384.473901][ T5702] usb 5-1: config 2 interface 31 has no altsetting 0 [ 384.474785][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.474808][ T5702] usb 5-1: SerialNumber: syz [ 384.486334][ T5794] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 384.682485][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 384.690172][ T5794] usb 4-1: Using ep0 maxpacket: 16 [ 384.715215][ T5794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.755871][ T5794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.755943][ T5794] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 384.755968][ T5794] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 384.755990][ T5794] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.851949][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 384.851999][ T5794] usb 4-1: SerialNumber: syz [ 385.081950][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 385.082005][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 385.082030][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 385.082050][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 385.386825][ T9777] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 385.387299][ T9777] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 385.402038][ T5794] hub 4-1:1.0: bad descriptor, ignoring hub [ 385.402069][ T5794] hub 4-1:1.0: probe with driver hub failed with error -5 [ 385.482822][ T5702] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 385.485950][ T5702] usb 5-1: USB disconnect, device number 50 [ 385.604813][ T9777] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 385.604946][ T9777] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 385.765760][ T9798] binder: 9793:9798 ioctl c018620c 2000000001c0 returned -1 [ 386.575256][ T9798] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 386.575442][ T9798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 386.575660][ T9798] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 386.575850][ T9798] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 386.575985][ T9798] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 386.576185][ T9798] hwrng_fill thread creation failed [ 386.678349][ T5794] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 386.728654][ T5794] usb 4-1: USB disconnect, device number 40 [ 386.765883][ T5794] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 386.843356][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 386.843399][ T31] audit: type=1400 audit(386.827:996): avc: denied { read } for pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 387.260942][ T9812] kAFS: No cell specified [ 387.388646][ T31] audit: type=1400 audit(387.357:997): avc: denied { setopt } for pid=9820 comm="syz.4.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 388.387944][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 388.611913][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 388.611963][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 388.612002][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 388.612029][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 389.546096][ T31] audit: type=1326 audit(389.527:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.1.1108" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece639e159 code=0x7ffc0000 [ 389.546162][ T31] audit: type=1326 audit(389.527:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.1.1108" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece639e159 code=0x7ffc0000 [ 389.603885][ T31] audit: type=1326 audit(389.587:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.1.1108" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fece639e159 code=0x7ffc0000 [ 389.603957][ T31] audit: type=1326 audit(389.587:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.1.1108" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece639e159 code=0x7ffc0000 [ 389.603996][ T31] audit: type=1326 audit(389.587:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.1.1108" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece639e159 code=0x7ffc0000 [ 389.604042][ T31] audit: type=1326 audit(389.587:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.1.1108" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fece639e159 code=0x7ffc0000 [ 389.604085][ T31] audit: type=1326 audit(389.587:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.1.1108" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece639e159 code=0x7ffc0000 [ 389.604128][ T31] audit: type=1326 audit(389.587:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.1.1108" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece639e159 code=0x7ffc0000 [ 389.666252][ T9830] jffs2: notice: (9830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 389.763458][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 390.210801][ T9846] binder: 9840:9846 ioctl c018620c 2000000001c0 returned -1 [ 390.304821][ T1578] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 391.046181][ T9846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.046321][ T9846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.046435][ T9846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.046523][ T9846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.046599][ T9846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.046709][ T9846] hwrng_fill thread creation failed [ 391.095093][ T1578] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 391.117635][ T1578] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 391.117679][ T1578] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.117702][ T1578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 391.117720][ T1578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 391.172112][ T1578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.172152][ T1578] usb 5-1: Product: syz [ 391.172181][ T1578] usb 5-1: Manufacturer: syz [ 391.172200][ T1578] usb 5-1: SerialNumber: syz [ 391.203915][ T1578] usb 5-1: config 0 descriptor?? [ 391.215393][ T9833] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.270786][ T9856] FAULT_INJECTION: forcing a failure. [ 391.270786][ T9856] name failslab, interval 1, probability 0, space 0, times 0 [ 391.270841][ T9856] CPU: 0 UID: 0 PID: 9856 Comm: syz.0.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.270868][ T9856] Tainted: [L]=SOFTLOCKUP [ 391.270874][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 391.270885][ T9856] Call Trace: [ 391.270891][ T9856] [ 391.270898][ T9856] dump_stack_lvl+0x100/0x190 [ 391.270934][ T9856] should_fail_ex.cold+0x5/0xa [ 391.270964][ T9856] should_failslab+0xc2/0x120 [ 391.270989][ T9856] __kmalloc_noprof+0xfc/0x840 [ 391.271008][ T9856] ? rcu_is_watching+0x13/0xc0 [ 391.271035][ T9856] ? tomoyo_realpath_from_path+0xb6/0x690 [ 391.271063][ T9856] tomoyo_realpath_from_path+0xb6/0x690 [ 391.271091][ T9856] tomoyo_path_number_perm+0x23c/0x580 [ 391.271120][ T9856] ? tomoyo_path_number_perm+0x22e/0x580 [ 391.271151][ T9856] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 391.271210][ T9856] ? __lock_acquire+0x4c5/0x1ec0 [ 391.271245][ T9856] ? __fget_files+0x34/0x3d0 [ 391.271269][ T9856] ? find_held_lock+0x2b/0x80 [ 391.271295][ T9856] ? hook_file_ioctl_common+0x140/0x440 [ 391.271326][ T9856] ? __fget_files+0x21f/0x3d0 [ 391.271354][ T9856] security_file_ioctl+0xd3/0x230 [ 391.271386][ T9856] __x64_sys_ioctl+0xb7/0x210 [ 391.271419][ T9856] do_syscall_64+0x123/0x790 [ 391.271445][ T9856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.271467][ T9856] RIP: 0033:0x7febaed9e159 [ 391.271484][ T9856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.271504][ T9856] RSP: 002b:00007febafce5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.271524][ T9856] RAX: ffffffffffffffda RBX: 00007febaf025fa0 RCX: 00007febaed9e159 [ 391.271537][ T9856] RDX: 0000200000000440 RSI: 00000000800448d3 RDI: 0000000000000004 [ 391.271550][ T9856] RBP: 00007febafce5090 R08: 0000000000000000 R09: 0000000000000000 [ 391.271562][ T9856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.271575][ T9856] R13: 00007febaf026038 R14: 00007febaf025fa0 R15: 00007ffc3a795158 [ 391.271604][ T9856] [ 391.271620][ T9856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 391.509068][ T9833] SELinux: invalid class [ 391.509160][ T9833] SELinux: failed to load policy [ 391.519548][ T1578] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 391.532484][ T1578] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 391.553852][ C1] powermate: config urb returned -71 [ 391.553998][ C1] powermate: config urb returned -71 [ 391.559378][ C1] powermate: config urb returned -71 [ 391.559538][ C1] powermate: config urb returned -71 [ 391.672524][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 391.681683][ T1578] usb 5-1: USB disconnect, device number 51 [ 391.929311][ T9405] udevd[9405]: setting mode of /dev/bus/usb/005/051 to 020664 failed: No such file or directory [ 391.953171][ T9405] udevd[9405]: setting owner of /dev/bus/usb/005/051 to uid=0, gid=0 failed: No such file or directory [ 392.391345][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 392.448034][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 392.454610][ T31] audit: type=1400 audit(392.427:1033): avc: denied { ioctl } for pid=9879 comm="syz.0.1121" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26321 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 392.472291][ T9884] fuse: fd is not a fuse device [ 392.506581][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 392.506622][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 392.949668][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 392.949891][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 392.950262][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 392.950447][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 392.950805][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 392.951007][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 392.951436][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 393.084177][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 393.084214][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 393.084239][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 393.084256][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 393.281561][ T31] audit: type=1400 audit(393.257:1034): avc: denied { ioctl } for pid=9899 comm="syz.2.1127" path="socket:[26414]" dev="sockfs" ino=26414 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 394.431919][ T5794] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 394.618712][ T5794] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.627367][ T5794] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 394.682496][ T5794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.089512][ T5794] usb 5-1: string descriptor 0 read error: -22 [ 395.090308][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.163115][ T9936] SELinux: failed to load policy [ 395.173373][ T31] audit: type=1400 audit(908.152:1035): avc: denied { create } for pid=9932 comm="syz.2.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 395.421056][ T31] audit: type=1400 audit(908.392:1036): avc: denied { accept } for pid=9924 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 395.446688][ T31] audit: type=1400 audit(908.422:1037): avc: denied { getopt } for pid=9941 comm="syz.0.1141" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.473063][ T1578] usb 5-1: USB disconnect, device number 52 [ 395.511689][ T9944] __nla_validate_parse: 27 callbacks suppressed [ 395.511778][ T9944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1141'. [ 395.530792][ T9948] binder: 9945:9948 ioctl 3ba0 200000000180 returned -22 [ 395.854436][ T31] audit: type=1400 audit(908.832:1038): avc: denied { create } for pid=9957 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 396.020671][ T31] audit: type=1400 audit(908.992:1039): avc: denied { read } for pid=9961 comm="syz.0.1148" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 396.046803][ T31] audit: type=1400 audit(909.022:1040): avc: denied { open } for pid=9961 comm="syz.0.1148" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 396.104764][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 396.147077][ T31] audit: type=1400 audit(909.122:1041): avc: denied { ioctl } for pid=9961 comm="syz.0.1148" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 396.481371][ T31] audit: type=1400 audit(909.452:1042): avc: denied { write } for pid=9961 comm="syz.0.1148" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 396.504902][ T9962] random: crng reseeded on system resumption [ 397.328924][ T9976] ================================================================== [ 397.328953][ T9976] BUG: KASAN: slab-use-after-free in configfs_symlink+0x640/0x11f0 [ 397.328984][ T9976] Read of size 4 at addr ffff888075363b00 by task syz.3.1152/9976 [ 397.329003][ T9976] [ 397.329016][ T9976] CPU: 1 UID: 0 PID: 9976 Comm: syz.3.1152 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.329049][ T9976] Tainted: [L]=SOFTLOCKUP [ 397.329057][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 397.329073][ T9976] Call Trace: [ 397.329080][ T9976] [ 397.329089][ T9976] dump_stack_lvl+0x100/0x190 [ 397.329121][ T9976] print_report+0x13d/0x4b0 [ 397.329153][ T9976] ? __virt_addr_valid+0x239/0x430 [ 397.329177][ T9976] ? configfs_symlink+0x640/0x11f0 [ 397.329202][ T9976] kasan_report+0xdf/0x1c0 [ 397.329227][ T9976] ? configfs_symlink+0x640/0x11f0 [ 397.329252][ T9976] kasan_check_range+0x10f/0x1e0 [ 397.329280][ T9976] configfs_symlink+0x640/0x11f0 [ 397.329305][ T9976] ? __pfx_configfs_symlink+0x10/0x10 [ 397.329332][ T9976] vfs_symlink+0x178/0x4d0 [ 397.329364][ T9976] filename_symlinkat+0x2a6/0x560 [ 397.329393][ T9976] ? __pfx_filename_symlinkat+0x10/0x10 [ 397.329421][ T9976] ? strncpy_from_user+0x19d/0x2d0 [ 397.329470][ T9976] ? do_getname+0x191/0x390 [ 397.329501][ T9976] __x64_sys_symlinkat+0x9c/0xe0 [ 397.329530][ T9976] do_syscall_64+0x123/0x790 [ 397.329556][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.329579][ T9976] RIP: 0033:0x7fa1ced9e159 [ 397.329597][ T9976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.329618][ T9976] RSP: 002b:00007fa1cfc4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 397.329640][ T9976] RAX: ffffffffffffffda RBX: 00007fa1cf025fa0 RCX: 00007fa1ced9e159 [ 397.329655][ T9976] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 00002000000001c0 [ 397.329670][ T9976] RBP: 00007fa1cee35024 R08: 0000000000000000 R09: 0000000000000000 [ 397.329684][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.329698][ T9976] R13: 00007fa1cf026038 R14: 00007fa1cf025fa0 R15: 00007ffdd39c2e98 [ 397.329722][ T9976] [ 397.329736][ T9976] [ 397.329741][ T9976] Allocated by task 9976: [ 397.329757][ T9976] kasan_save_stack+0x30/0x50 [ 397.329779][ T9976] kasan_save_track+0x14/0x30 [ 397.329800][ T9976] __kasan_slab_alloc+0x89/0x90 [ 397.329821][ T9976] kmem_cache_alloc_noprof+0x269/0x6a0 [ 397.329842][ T9976] configfs_new_dirent+0x52/0x570 [ 397.329872][ T9976] configfs_make_dirent+0x36/0x1a0 [ 397.329905][ T9976] configfs_create_dir+0xbd/0x5c0 [ 397.329923][ T9976] configfs_attach_group+0x2a/0x440 [ 397.329941][ T9976] configfs_mkdir+0x657/0xd40 [ 397.329958][ T9976] vfs_mkdir+0x364/0x850 [ 397.329984][ T9976] filename_mkdirat+0x48b/0x5e0 [ 397.330007][ T9976] __x64_sys_mkdirat+0x89/0xc0 [ 397.330030][ T9976] do_syscall_64+0x123/0x790 [ 397.330050][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.330070][ T9976] [ 397.330075][ T9976] Freed by task 9986: [ 397.330084][ T9976] kasan_save_stack+0x30/0x50 [ 397.330104][ T9976] kasan_save_track+0x14/0x30 [ 397.330123][ T9976] kasan_save_free_info+0x3b/0x70 [ 397.330151][ T9976] __kasan_slab_free+0x5f/0x80 [ 397.330172][ T9976] kmem_cache_free+0x127/0x6c0 [ 397.330199][ T9976] configfs_d_iput+0x20d/0x290 [ 397.330226][ T9976] dentry_unlink_inode+0x265/0x470 [ 397.330252][ T9976] d_delete+0x213/0x280 [ 397.330277][ T9976] vfs_rmdir+0x4ab/0x8a0 [ 397.330303][ T9976] filename_rmdir+0x31a/0x5c0 [ 397.330326][ T9976] __x64_sys_rmdir+0x46/0x70 [ 397.330349][ T9976] do_syscall_64+0x123/0x790 [ 397.330369][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.330389][ T9976] [ 397.330394][ T9976] The buggy address belongs to the object at ffff888075363b00 [ 397.330394][ T9976] which belongs to the cache configfs_dir_cache of size 96 [ 397.330411][ T9976] The buggy address is located 0 bytes inside of [ 397.330411][ T9976] freed 96-byte region [ffff888075363b00, ffff888075363b60) [ 397.330432][ T9976] [ 397.330436][ T9976] The buggy address belongs to the physical page: [ 397.330451][ T9976] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75363 [ 397.330474][ T9976] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 397.330495][ T9976] page_type: f5(slab) [ 397.330514][ T9976] raw: 00fff00000000000 ffff888020aaf3c0 dead000000000122 0000000000000000 [ 397.330539][ T9976] raw: 0000000000000000 0000000200200020 00000000f5000000 0000000000000000 [ 397.330551][ T9976] page dumped because: kasan: bad access detected [ 397.330567][ T9976] page_owner tracks the page as allocated [ 397.330574][ T9976] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6964, tgid 6963 (syz.0.298), ts 157710533358 [ 397.330610][ T9976] post_alloc_hook+0xfd/0x120 [ 397.330636][ T9976] get_page_from_freelist+0x110d/0x35b0 [ 397.330665][ T9976] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 397.330694][ T9976] new_slab+0xa9/0x6e0 [ 397.330719][ T9976] refill_objects+0xe3/0x410 [ 397.330756][ T9976] __pcs_replace_empty_main+0x35e/0x650 [ 397.330785][ T9976] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 397.330804][ T9976] configfs_new_dirent+0x52/0x570 [ 397.330832][ T9976] configfs_make_dirent+0x36/0x1a0 [ 397.330862][ T9976] configfs_create_file+0xfe/0x180 [ 397.330889][ T9976] configfs_attach_item.part.0+0x147/0x4f0 [ 397.330921][ T9976] configfs_attach_group+0x63/0x440 [ 397.330939][ T9976] configfs_mkdir+0x657/0xd40 [ 397.330956][ T9976] vfs_mkdir+0x364/0x850 [ 397.330982][ T9976] filename_mkdirat+0x48b/0x5e0 [ 397.331005][ T9976] __x64_sys_mkdirat+0x89/0xc0 [ 397.331028][ T9976] page last free pid 6964 tgid 6963 ts 157692234686 stack trace: [ 397.331044][ T9976] __free_frozen_pages+0x79f/0x10f0 [ 397.331070][ T9976] tlb_remove_table_rcu+0x2cf/0x380 [ 397.331097][ T9976] rcu_core+0x5f0/0x1260 [ 397.331122][ T9976] handle_softirqs+0x1e6/0x9d0 [ 397.331141][ T9976] __irq_exit_rcu+0x194/0x210 [ 397.331160][ T9976] irq_exit_rcu+0x9/0x30 [ 397.331178][ T9976] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 397.331199][ T9976] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.331224][ T9976] [ 397.331228][ T9976] Memory state around the buggy address: [ 397.331240][ T9976] ffff888075363a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 397.331261][ T9976] ffff888075363a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 397.331278][ T9976] >ffff888075363b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 397.331291][ T9976] ^ [ 397.331302][ T9976] ffff888075363b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 397.331318][ T9976] ffff888075363c00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 397.331330][ T9976] ================================================================== [ 397.387470][ T9976] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 397.993144][ T9976] CPU: 1 UID: 0 PID: 9976 Comm: syz.3.1152 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.003991][ T9976] Tainted: [L]=SOFTLOCKUP [ 398.008296][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 398.018333][ T9976] Call Trace: [ 398.021598][ T9976] [ 398.024522][ T9976] dump_stack_lvl+0x100/0x190 [ 398.029202][ T9976] vpanic+0x553/0x970 [ 398.033170][ T9976] ? __pfx_vpanic+0x10/0x10 [ 398.037664][ T9976] ? configfs_symlink+0x640/0x11f0 [ 398.042764][ T9976] panic+0xd1/0xe0 [ 398.046469][ T9976] ? __pfx_panic+0x10/0x10 [ 398.050876][ T9976] ? configfs_symlink+0x640/0x11f0 [ 398.055982][ T9976] ? preempt_schedule_common+0x3c/0xb0 [ 398.061434][ T9976] check_panic_on_warn.cold+0x19/0x34 [ 398.066799][ T9976] end_report.part.0+0x3a/0x90 [ 398.071564][ T9976] kasan_report.cold+0xe/0x18 [ 398.076237][ T9976] ? configfs_symlink+0x640/0x11f0 [ 398.081340][ T9976] kasan_check_range+0x10f/0x1e0 [ 398.086272][ T9976] configfs_symlink+0x640/0x11f0 [ 398.091204][ T9976] ? __pfx_configfs_symlink+0x10/0x10 [ 398.096568][ T9976] vfs_symlink+0x178/0x4d0 [ 398.100983][ T9976] filename_symlinkat+0x2a6/0x560 [ 398.106003][ T9976] ? __pfx_filename_symlinkat+0x10/0x10 [ 398.111541][ T9976] ? strncpy_from_user+0x19d/0x2d0 [ 398.116651][ T9976] ? do_getname+0x191/0x390 [ 398.121155][ T9976] __x64_sys_symlinkat+0x9c/0xe0 [ 398.126086][ T9976] do_syscall_64+0x123/0x790 [ 398.130678][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.136560][ T9976] RIP: 0033:0x7fa1ced9e159 [ 398.140961][ T9976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.160558][ T9976] RSP: 002b:00007fa1cfc4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 398.168960][ T9976] RAX: ffffffffffffffda RBX: 00007fa1cf025fa0 RCX: 00007fa1ced9e159 [ 398.176919][ T9976] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 00002000000001c0 [ 398.184875][ T9976] RBP: 00007fa1cee35024 R08: 0000000000000000 R09: 0000000000000000 [ 398.192839][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.200804][ T9976] R13: 00007fa1cf026038 R14: 00007fa1cf025fa0 R15: 00007ffdd39c2e98 [ 398.208774][ T9976] [ 398.212009][ T9976] Kernel Offset: disabled [ 398.216318][ T9976] Rebooting in 86400 seconds..