last executing test programs: 30.066062445s ago: executing program 2 (id=448): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a0104000000ffeb0000000a0000000900010073797a31000000000900020073797a320000d54b90a40480100001800c0001"], 0x15c}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r3, 0x5fa2e000) keyctl$negate(0xd, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000880)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75f7bff80673e47054118c2cd8213aa7e45ec2b21f64d916e4c99cc78d1a68723c3724ad2614bdfd786ed13da0a086608e207ccafa3a857c1007", 0xc2, r2) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r5 = add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f00000000c0)="eaa8729b31b3a8d180baeab8ca", 0xd, 0xfffffffffffffffd) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x0, 0x0, 0xc, 0x0, "abeff095be8d702752b7eeb429acf4d12038dbc9fbf8ecdfb46c4bd79dd4f776884ea8adbad407e16d7a167ec729b00bb2274c178267fa6f102b51601095b89ef66452e2715f179d18caa64f260187e4"}, 0xd8) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r4, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha3-256\x00'}}) 19.044063226s ago: executing program 2 (id=458): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xa0602, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd0c, &(0x7f0000000380)="0400000000000000000000007801000038010000010000000000000fffff0000000000000000000000000000000000006d7061746830") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0700000002000000040000000200000000800400", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/20, @ANYRES32=r2, @ANYBLOB="93ca9cc855b7f7e0ff1c9463a34698388717bbd2838ab33b23780597268a799911c342a6d428754da9047ecf8696219242db2bc0832a10d55a5ac0f465fe524c0a32e6bb71551bcc52b0cf4db54f87f7904849775ef029cc8316ca3857c9a5ab09d684da53f199feb79552bcd127d084a772c491a773362117486d3a45"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="71fca487d0fb0c519e3da23893152036655d34c1fbd8aca3bbeaef21510a25b3215ec5314661307a6c133a0c8b1c9893215e15e47025b545c8edf9ff420574d62ceb6dfb349460ed8ed070de995bf958fb3d7e62c9bb79d9a5f488a5eb93a46a8189360ae13af76dffece431409c13ea9c3a1b392971d7ef5ec0430c2d9456d8ef2c97ac02020f8469c8b6552e7501e1bcbb6372f93d421ba7e50a70f62ba982ce430bb9d98437cbe4737bd96d076b4f2f3af261262357c49a2b", @ANYBLOB="00f000"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1e9) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r5, 0x40104d00, &(0x7f0000000200)="0000020000020000000002") mkdirat(0xffffffffffffff9c, 0x0, 0x170) capset(&(0x7f00000001c0)={0x20071026}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x3, 0x100106}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000000)=@file={0x1, './dev/mapper/control\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000780)="ce06dd8c7c015aec03b31957a89a8930417a03c094540da28bb8b9622c71d53e920c18938c14f0f87260f8cdb4e5352276086debd8598b210dfa6735b07e7da44a91d08b0dae32c1288ca3358ffdb460226f8a5e6c74d85d0a5cc39f4b95c1de2e6464907a77ca60c68767fa364a976fc3644acb8caaa6edbdd58ab68598d75092478ce3091b9a2b7d36ff5856a0e4f99642bc538005085a5a2f44b17fee2bc33e40e1a9786a652365a76db736f15e88fe1b6ffad5ba222d3bbc17", 0xbb}, {&(0x7f0000000840)="c954ab379543a6acaa1e691bb4213459a9d24ba80ff330d74540419e2d2b4d5304fd9e83764c8d82db547af6016a0f95c8737a79e2f5da4f4e676e50fc5bb6c779f4bdfe535117d2a799612fc11dfb1911b9e5dedb38e73cf6bfea550023898f55fb865c46567064e980912daeb58333a4cbf6d903f8a341a533d49d207c98f1bb7e9ad4f897b85c6f565a64c40ce0ba54027f9e83698ac444847efab473b9367078f1c9e2c17f84bc46974f942672", 0xaf}, {&(0x7f0000000900)="aff863b8854a7ec5969d0fbe293acd687a4600039d984dac698e424427813c5f208e53de8147bed2bf935636beb4d4a5f56fef600e6bf52aab6554f8d2deb45d0a9f715b158ba572af813f01d8950742f924d0b4c2c2b3216f4030eefb3e1cc589409882d2761c89b8c4150c1c71d80c9b0721e898245fea2cd54297acd6890eded87be34c79660d941709ec0749b0029ceb50d2539b925b", 0x98}, {&(0x7f00000009c0)="d44be35e25f7bf0ed8bae089fdc8d630a3d9b77c83b22321f6e0cc4767b515ff83f2cc9a0ed50a94123ae4e0c2ee9899fde5bd2605f11930c893cf8b7d2a982e5d7bf39df68f4417a2c904139999a8d946fd077523085d2aff6ae4b0473798515c0e4367b1f2f58a77158c2748fe51b1c098488885a4c88befcd7643f1268e6ac4a35e5d4370e832d95c29b95aa7d0c3f3c2a52587f0f019608cb408e65f62c8e5337214f7147f", 0xa7}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="0976c716a0acf1654a0eb8fd1efa84750d45dee8bc20d72491f9fffca86d2f9cd34ba255587f87a4d1", 0x29}], 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="1c000000000000000800000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002300001c00000000002bffcc8c45577fdf0000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRESHEX=r3, @ANYRES32=r5, @ANYRES32=r7, @ANYRESDEC=r0, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000d981fae777076d26df218e7b5af2fcd904f6cc82d87a12c26d8a71618c014e1db0ad5a22cf6a61fab15d8c0cb6c5167f2aa67d49c72d6c0c6f749eaf9503ff09dbd3ada0e819ed25d9243b37e07042e04847d5379a98ab8cfaf6ebc52e81000000004e7ace7631798ee32cf60451ee1000000000000000"], 0xb0, 0x20008804}}], 0x1, 0x0) recvmmsg(r9, &(0x7f00000005c0), 0x10106, 0x2, 0x0) 18.159551821s ago: executing program 1 (id=463): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, &(0x7f00000005c0)=""/4096, 0x1000) splice(r0, 0x0, r2, 0x0, 0x400000008000f28, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="00010000036d0b"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0xffffffffffffffed, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102000000408c0d030140000102030109026e0003017f0006080b0002010030230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960002523050a2525010400567800000904020000010230000904020101010230000905820900027409c00a2525ffffff7f01e10b"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x21cd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1002}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) write(r4, &(0x7f0000000400)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x185301, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) setns(0xc9, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newtfilter={0x30, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0xa7c, r8}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) 18.122575201s ago: executing program 4 (id=464): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1a1282, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOWNER(r1, 0x400454c8, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/x86/topo/domains\x00', 0x0, 0x0) read(r2, &(0x7f00000001c0)=""/100, 0x64) connect$llc(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_usb_connect(0x3, 0x39, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff00070501020002"], 0x0) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x6100) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000500)=[r3], 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffff0300ffffffff00000000002000000000000000000000abcd0000000000002f0000000000000005000000000000000200000000000008010000000000000001000000000000004400050000010000000000000008000000000000000000003c00000002000000fe80000000000000000000000000003a0600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) socket$inet6(0xa, 0x400000000001, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='task\x00') getdents(r8, &(0x7f00000005c0)=""/56, 0x38) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 15.30811252s ago: executing program 0 (id=469): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000100)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='fd', 0x0, r1) r3 = fspick(r0, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x244) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x80049370, 0x0) 15.160574658s ago: executing program 0 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00') write$tcp_mem(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000002dc0)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002e00)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpgrp(0x0) chdir(&(0x7f00000006c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) 12.260108738s ago: executing program 1 (id=472): socket$unix(0x1, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r0, &(0x7f0000000500)}, 0x20) r1 = mq_open(&(0x7f00000001c0)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000200)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r1, &(0x7f0000000240)={0x0, 0x40, 0x4, 0xffff}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000002c0)=""/98, 0x62, 0x2008001, &(0x7f0000000340)={r2, r3+60000000}) close(0x3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_flash={0x28, 0xea6, '.\x00'}}) listen(r4, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x4, 0xf, 0x0, "da"}]}}}}}}}}, 0x0) 12.227299212s ago: executing program 0 (id=473): listen(0xffffffffffffffff, 0xffe) close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000400)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) setrlimit(0xf, &(0x7f0000000380)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup(r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9, 0x9, 0xf, 0x4, 0x3, 0xffffffffffffffff}) write(r0, &(0x7f0000000580)="464d85e908", 0x5) 12.207306648s ago: executing program 4 (id=474): r0 = socket(0xa, 0x3, 0x3a) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xc4, 0xb, 0x62, 0x20, 0x5f9, 0xffff, 0x645b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x81, 0x30, 0x32, "", [{{0x9, 0x4, 0x67, 0x2, 0x0, 0x91, 0x2c, 0x65, 0x9}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x41015500, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000200)}, 0x20) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000003c0), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x0, 0x0, 0x1, r2}, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0) close(0x3) 11.972877403s ago: executing program 2 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00') write$tcp_mem(r1, 0x0, 0x0) r2 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000002dc0)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002e00)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpgrp(0x0) chdir(&(0x7f00000006c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) 11.761535249s ago: executing program 1 (id=477): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000004214000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x8040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000500)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000000780)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x1f2, 0x10, &(0x7f0000000940), 0xfffffe51}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000980)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b80)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x3, 0xe, 0x0, &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0), 0x8, 0x10, &(0x7f0000001d00), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d40)={r5, 0xc0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) symlinkat(&(0x7f0000001ec0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001f00)='./file0/file0\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001f40)=0x4) ioctl$TCFLSH(r6, 0x400455c8, 0x2000000000000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r8, 0x0, 0x0}, 0x20) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x10) 11.760507247s ago: executing program 3 (id=478): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./security\x00', 0x43) mount(0x0, &(0x7f0000000140)='./security\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./security/ima/policy\x00', 0x1, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000c00)='./security/ima/policy\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) pipe(&(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(0xffffffffffffffff, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000c80)=@filename='./file0\x00', &(0x7f0000000d00)='./security/ima/policy\x00', &(0x7f0000000d40)='ext4\x00', 0x2000000, &(0x7f0000000cc0)='v\x9f\x87\xe2(1.0,user=root,pass=root\x00') ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10.289886506s ago: executing program 0 (id=479): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') openat(r1, &(0x7f0000000180)='rpc/auth.unix.ip/channel\x00', 0xa802, 0x32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'veth1\x00', 0x8000}) r2 = syz_ublk_setup_io_uring(0x5af8, &(0x7f0000000340)={0x0, 0xabbe, 0x4000, 0x3, 0x1e1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x891, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x104}}}, &(0x7f0000000480)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000280)=0x33, 0x8) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10) r10 = accept4(r8, 0x0, 0x0, 0x0) sendto(r10, &(0x7f0000000440), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r9, &(0x7f0000000500)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f0000000540)={0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x400000}, 0x0, &(0x7f00000005c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000000600), 0x4) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r12, &(0x7f0000000640)={0xa, 0x4e24, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x2, 0x1, 0x4}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0xff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) 8.346801669s ago: executing program 1 (id=480): socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x40000000003) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1ffffd}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="b7000000010000009500040000000000e994592f0972c4e286ff678116d05c65efc3462bb54fd05746a40bee6bb7f28adbbd518127bee1f319c5c5fd957c3960d876c35d1955c951d4c1bb5241006aa4d77592701465182ab1664a058b35c25bb0e653dd033a65951a5d141cd948ed764a79035031a0a1dc402cd10d759da97907fe87297705623f5fbf72a0acde17f7d359ab696ea0e0ad0f7611a718020eb8c6fe114f3792bc7ba61f8db95ac68046617163b7891da1"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000380)={0x401}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map=r5, r6, 0x7, 0x0, r6, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r5, &(0x7f0000000700), &(0x7f0000000740)=@tcp=r4}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f0000000080)={0x1, 0x400000000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x700, 0x700, 0x7, 0x8, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, {[@ssrr={0x89, 0x7, 0x3d, [@broadcast]}, @rr={0x7, 0x1b, 0x8d, [@empty, @rand_addr=0x64010101, @rand_addr=0x64010100, @private=0xa010102, @local, @remote]}]}}}}}) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.85424234s ago: executing program 4 (id=481): r0 = syz_open_dev$dri(&(0x7f0000000800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000840)={0x0, 0x0, 0x1, 0x6, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000600)={0x0, 0x0, 0x100}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)={0x18, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x1d, 0x0, 0x0, @binary="1be5605e"}]}, 0x18}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000640101"], 0xfc}}, 0x0) connect$inet6(r6, &(0x7f0000000a80)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000740)={0x2e, 0x0, 0x0, r1, 0xc0207512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a6) r9 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc2c45512, 0x0) r10 = open$dir(&(0x7f00000001c0)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0xc080661a, &(0x7f0000000200)={@desc={0x1, 0x0, @auto="949147fc2048ae40"}}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f000000ab00)={0x0, 0x121c000, 0x1000, 0xbb}, 0x1c) (fail_nth: 2) 6.75798793s ago: executing program 2 (id=482): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000408205820540000102030109026e000301c0c310080b000201223061090400000001013000"], 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000040)={0x0, 0x0, 0x20, 0x1, 0x1fff, r2, 0x0, 0xfe, 0x3}]) 6.491925028s ago: executing program 3 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00') write$tcp_mem(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000002dc0)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002e00)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpgrp(0x0) chdir(&(0x7f00000006c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) 5.646771991s ago: executing program 4 (id=484): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x2b, 0x1, 0x70bd28, 0x25dfdbfd, "", [@typed={0x4, 0xf}]}, 0x14}], 0x1}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1a, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) 5.594827094s ago: executing program 0 (id=485): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x1c, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000200)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r3, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000197c0)=0x7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)={&(0x7f0000019900)={0x30, 0x0, 0x400, 0x70bd26, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x4}}}}, 0xfffffffffffffdcf}}, 0x20000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000019940)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000199c0)={0x6, 0xd, &(0x7f0000019a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000019b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 4.532256083s ago: executing program 1 (id=486): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x4}, {0x6, 0xff, 0x0, 0x7ffffdbe}]}) syz_usb_connect(0x6, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000400a115012000101020301090227000101008032090400"], 0x0) r0 = socket$inet(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) openat$panthor(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir\x00', 0x1ff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000400)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0) mount(0x0, &(0x7f0000000440)='./tracefs_dir\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='10', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000005c0)={0x18, r3}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000600)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000640)={"cb02a6be95eab5700900a190c6d8cb00fc18137f1caf3e48018b251f7320a0e8", r7}) close(r5) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000680)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0xc, 0x4}, 0x0, &(0x7f00000006c0)={0x3ff, 0x6, 0x7b6e, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e21, @private=0xa010102}, 0x10) 4.1707766s ago: executing program 4 (id=487): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='fd', 0x0, r1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000003c0)=""/35, 0x23}, {0x0, 0x2424}, {0x0}], 0x5) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f00000007c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000800)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) r7 = open(&(0x7f0000000840)='.\x00', 0x0, 0x244) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) openat$cgroup_int(r7, &(0x7f0000000280)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000000900)=""/248, 0x65) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r2, 0x0, 0x2) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x8) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="100000000f5addb4f1f91400012cbd70"], 0x10}, 0x1, 0x0, 0x0, 0x815}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000005c0)={0xce3, 0x2, 0x6}) setpgid(r11, r11) setpgid(0x0, r11) fchdir(r10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001002abd500000000000fe800000000000000000000000f900bbac1414bb000000000002000000000000000000008000384bf0e6dc97216e0000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000000000092b6000000000000020000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0) 3.580717978s ago: executing program 3 (id=488): openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/168, 0xa8}], 0x1, 0xfff, 0x98) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x80000000) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f00000013c0)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r2, 0x18000000000002a0, 0xfe2a, 0x1200, &(0x7f0000001480)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x7930, 0x1bb, 0x2000000000004}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000014c0)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000480)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.321346425s ago: executing program 2 (id=489): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x2b, 0x1, 0x70bd28, 0x25dfdbfd, "", [@typed={0x4, 0xf}]}, 0x14}], 0x1}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1a, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x2000000000000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) 2.303981822s ago: executing program 4 (id=490): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x40, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2.172784895s ago: executing program 3 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x105, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x3, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9b, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x9, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0xfffffffe, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xc}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.026848202s ago: executing program 2 (id=492): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}}, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a0200090500010000000000", @ANYBLOB="8b75"], 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000100)={0x7, 0x9, 0x380000, 0x8, 0x5, 0xfffffffffffffff7, 0x1000000d, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x102, 0x4, 0x2, 0x5, 0x3, 0x3ff, 0x8}) (fail_nth: 2) 943.514023ms ago: executing program 0 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev_mnt\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x303, 0x4000, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) mount(0x0, &(0x7f00000002c0)='./dev_mnt\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x18, &(0x7f0000000400)={0x40, 0xf, 0x3, "a04fc4"}, 0x0, 0x0, 0x0, 0x0}) 731.602108ms ago: executing program 1 (id=494): mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000073119c0000000000851000000200000085000000c400000095000000000000009500ff0500000000"], &(0x7f0000000400)='GPL\x00', 0x5, 0x29e, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_flash={0x33, 0xea5, './cgroup/../file0\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/mtrr\x00', 0x2, 0x82) ioctl(r2, 0x40104d05, &(0x7f0000000680)) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='tps6598x 0x20\n', 0xe) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000780)={0x3000}) syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000007c0)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff00090501"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071188500000000001d300500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x8, 0x10, &(0x7f00000013c0), 0x10, 0x0, r0}, 0x94) mount(0x0, &(0x7f00000016c0)='./sec/tomoyo/domain_policy\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)="3c6b65726e656c3e202f6e65775f216f6d61696e0a3c696c652072656164202f6574632f706173737764207461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696ed83d3c6b65726e656c3e202f6e65775f646f6d61696e414692702690280897e49ef631aa76d28d9c56f443c1172de40fcc2ad303016b4dd7f492809671208be145378e33f4c469d8a2c8e20180f36d0a", 0x9f) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) ioctl$USBDEVFS_RESET(r5, 0xc00c5512) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0xa4242, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001400), 0x2982, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001440)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000001480)=0x304008000) 67.695301ms ago: executing program 3 (id=495): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000540)=ANY=[], 0xc) 0s ago: executing program 3 (id=496): syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x8901) set_mempolicy(0x3, &(0x7f0000000080)=0x83e3, 0x1e37) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0x6576, 0x109}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000480)=0x1) write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0xf8}, @val={0x0, 0x0, 0x1, 0x400, 0x6, 0x4}, @eth={@local, @random="004d052caf78", @void, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x2c, 0x3, 0x0, 0x0, "6e471335f8477584606c862cb9dae3302c24785efecd39bc7c2f5117201c457644aa58b40ed6665feff07a7d30989189595216e709ec14e8f11599cdd3d18df6"}}}}}, 0x64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80d4) openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/md0\x00', 0x0, 0x70) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r4 = fsopen(&(0x7f00000007c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ailed while replacing table [ 208.787050][ T30] libceph: connect (1)[c::]:6789 error -101 [ 208.787210][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 208.825119][ T7031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7031 comm=syz.4.266 [ 208.825547][ T7030] ceph: No mds server is up or the cluster is laggy [ 209.084384][ T7025] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.642123][ T7035] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 210.453278][ T7044] ceph: No mds server is up or the cluster is laggy [ 210.754988][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 210.755263][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 211.731517][ T7052] ceph: No mds server is up or the cluster is laggy [ 211.739545][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 211.739812][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 212.303044][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 212.347248][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 212.667779][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 212.722075][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 213.048076][ T7051] ceph: No mds server is up or the cluster is laggy [ 214.715255][ T7075] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 214.797253][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 214.799581][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 214.826828][ T7076] ceph: No mds server is up or the cluster is laggy [ 215.083380][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 215.090186][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 215.092446][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 215.160932][ T7083] ceph: No mds server is up or the cluster is laggy [ 215.212018][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 215.212166][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 215.582173][ T25] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 215.633115][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.633154][ T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 215.633198][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.763602][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.763629][ T25] usb 4-1: Product: syz [ 215.763642][ T25] usb 4-1: Manufacturer: syz [ 215.763656][ T25] usb 4-1: SerialNumber: syz [ 215.845184][ T7091] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 216.046017][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 216.048266][ T31] audit: type=1400 audit(1792110079.638:470): avc: denied { write } for pid=7060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.091827][ T5716] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 216.239585][ T25] usb 4-1: 0:2 : does not exist [ 216.244339][ T5716] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 216.247790][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.247811][ T5716] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 216.247852][ T5716] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.252924][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.252946][ T5716] usb 3-1: Product: syz [ 216.252959][ T5716] usb 3-1: Manufacturer: syz [ 216.252971][ T5716] usb 3-1: SerialNumber: syz [ 216.713511][ T7104] ceph: No mds server is up or the cluster is laggy [ 216.720552][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 216.722748][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 216.986913][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 217.022953][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 217.578822][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 217.592524][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 218.756259][ T5716] usb 3-1: 0:2 : does not exist [ 218.762392][ T25] usb 4-1: USB disconnect, device number 9 [ 218.790814][ T5716] usb 3-1: USB disconnect, device number 10 [ 218.925341][ T31] audit: type=1400 audit(1792110082.508:471): avc: denied { write } for pid=7102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.461777][ T6966] udevd[6966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.544213][ T6966] udevd[6966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 219.656150][ T31] audit: type=1326 audit(1792110083.248:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 219.656230][ T31] audit: type=1326 audit(1792110083.248:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 219.719340][ T31] audit: type=1326 audit(1792110083.308:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9b1f5ed8e code=0x7ffc0000 [ 219.720219][ T31] audit: type=1326 audit(1792110083.308:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 219.720268][ T31] audit: type=1326 audit(1792110083.308:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 219.810221][ T31] audit: type=1326 audit(1792110083.398:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 219.810298][ T31] audit: type=1326 audit(1792110083.398:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 219.810361][ T31] audit: type=1326 audit(1792110083.398:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 219.867503][ T7127] ceph: No mds server is up or the cluster is laggy [ 219.867906][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 219.868071][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 220.029369][ T7138] ip_tables: iptables: counters copy to user failed while replacing table [ 220.505609][ T7141] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 221.463387][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 221.463403][ T31] audit: type=1400 audit(1792110085.038:490): avc: denied { write } for pid=7165 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.911317][ T5716] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 222.091861][ T5716] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 222.095656][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.095680][ T5716] usb 1-1: Product: syz [ 222.095693][ T5716] usb 1-1: Manufacturer: syz [ 222.095707][ T5716] usb 1-1: SerialNumber: syz [ 222.373526][ T5716] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 222.373575][ T5716] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 222.373593][ T5716] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 223.350611][ T5716] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 223.433860][ T5716] usb 1-1: USB disconnect, device number 12 [ 223.810546][ T7178] ceph: No mds server is up or the cluster is laggy [ 223.810809][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 223.812577][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 223.951412][ T5716] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 224.081159][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 224.081499][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 224.335815][ T5716] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 224.626449][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 224.628251][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 225.010152][ T31] audit: type=1400 audit(1792110088.588:491): avc: denied { read write } for pid=7182 comm="syz.3.293" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 225.040801][ T5716] usb 1-1: unable to read config index 0 descriptor/all [ 225.040845][ T5716] usb 1-1: can't read configurations, error -71 [ 225.085905][ T31] audit: type=1400 audit(1792110088.668:492): avc: denied { open } for pid=7182 comm="syz.3.293" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 225.221587][ T7186] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 225.472080][ T30] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.522800][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 225.523107][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 225.716180][ T7194] ceph: No mds server is up or the cluster is laggy [ 225.731175][ T5716] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 225.756628][ T30] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 225.757532][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.757553][ T30] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 225.757595][ T30] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.765732][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.765755][ T30] usb 3-1: Product: syz [ 225.765768][ T30] usb 3-1: Manufacturer: syz [ 225.765780][ T30] usb 3-1: SerialNumber: syz [ 225.941479][ T31] audit: type=1400 audit(1792110089.448:493): avc: denied { write } for pid=7195 comm="syz.1.299" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.943353][ T52] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 226.023039][ T5716] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 226.029953][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 226.030069][ T5716] usb 1-1: Product: syz [ 226.030098][ T5716] usb 1-1: Manufacturer: syz [ 226.451828][ T30] usb 3-1: 0:2 : does not exist [ 226.509128][ T30] usb 3-1: USB disconnect, device number 11 [ 226.549882][ T6966] udevd[6966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.699027][ T7188] fuse: Unknown parameter 'ÿ0xffffffffffffffff01777777777777777777777000000000000000000000000000000000000000300000000000000000000' [ 227.746748][ T7213] ceph: No mds server is up or the cluster is laggy [ 227.760048][ T30] libceph: connect (1)[c::]:6789 error -101 [ 227.760588][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 228.033761][ T31] audit: type=1326 audit(1792110091.618:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.033857][ T31] audit: type=1326 audit(1792110091.618:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.036743][ T31] audit: type=1326 audit(1792110091.618:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9b1f5ed8e code=0x7ffc0000 [ 228.036983][ T31] audit: type=1326 audit(1792110091.618:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.037132][ T31] audit: type=1326 audit(1792110091.618:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.037545][ T31] audit: type=1326 audit(1792110091.618:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.037701][ T31] audit: type=1326 audit(1792110091.618:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.038283][ T31] audit: type=1326 audit(1792110091.618:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.040161][ T31] audit: type=1326 audit(1792110091.618:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.040282][ T31] audit: type=1326 audit(1792110091.618:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b1f9e559 code=0x7ffc0000 [ 228.320517][ T7219] ip_tables: iptables: counters copy to user failed while replacing table [ 228.651132][ T7223] ceph: No mds server is up or the cluster is laggy [ 228.653193][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 228.653437][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 229.041066][ T7219] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.929424][ T7229] ceph: No mds server is up or the cluster is laggy [ 231.010330][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 231.011149][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 231.383301][ T30] libceph: connect (1)[c::]:6789 error -101 [ 231.383941][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 231.488174][ T5716] usbhid 1-1:1.0: can't add hid device: -71 [ 231.488415][ T5716] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 231.527391][ T5716] usb 1-1: USB disconnect, device number 14 [ 231.880937][ T7241] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 232.128801][ T7249] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 232.247184][ T7252] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00 [ 232.247217][ T7252] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 232.247552][ T7252] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 232.247576][ T7252] page_type: f5(slab) [ 232.247594][ T7252] raw: 00fff00000000040 ffff88801d033140 dead000000000100 dead000000000122 [ 232.247611][ T7252] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 232.247629][ T7252] head: 00fff00000000040 ffff88801d033140 dead000000000100 dead000000000122 [ 232.247647][ T7252] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 232.247666][ T7252] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 232.247682][ T7252] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 232.247693][ T7252] page dumped because: unmovable page [ 232.247701][ T7252] page_owner tracks the page as allocated [ 232.247708][ T7252] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1349, tgid 1349 (kworker/u8:9), ts 68250724532 [ 232.247738][ T7252] post_alloc_hook+0xfd/0x120 [ 232.247761][ T7252] get_page_from_freelist+0x110d/0x35d0 [ 232.247781][ T7252] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 232.247803][ T7252] new_slab+0xa9/0x6e0 [ 232.247820][ T7252] refill_objects+0xe3/0x410 [ 232.247838][ T7252] __pcs_replace_empty_main+0x35e/0x650 [ 232.247865][ T7252] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 232.247890][ T7252] kmalloc_reserve+0xe8/0x350 [ 232.247915][ T7252] __alloc_skb+0x185/0x710 [ 232.247942][ T7252] nsim_dev_trap_report_work+0x2af/0xd20 [ 232.247963][ T7252] process_one_work+0xac7/0x1b10 [ 232.247991][ T7252] worker_thread+0x5ef/0xe50 [ 232.248005][ T7252] kthread+0x373/0x450 [ 232.248030][ T7252] ret_from_fork+0x730/0xd60 [ 232.248050][ T7252] ret_from_fork_asm+0x1a/0x30 [ 232.248070][ T7252] page last free pid 1 tgid 1 ts 16337400669 stack trace: [ 232.248082][ T7252] free_pages_prepare+0x586/0xe00 [ 232.248098][ T7252] __free_contig_range_common+0x14f/0x250 [ 232.248116][ T7252] destroy_args+0xa8/0x7a0 [ 232.248137][ T7252] debug_vm_pgtable+0x1d69/0x3490 [ 232.248159][ T7252] do_one_initcall+0x11c/0x6f0 [ 232.248176][ T7252] kernel_init_freeable+0x6ea/0x7b0 [ 232.248197][ T7252] kernel_init+0x21/0x1e0 [ 232.248215][ T7252] ret_from_fork+0x730/0xd60 [ 232.248233][ T7252] ret_from_fork_asm+0x1a/0x30 [ 232.423726][ T5716] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 232.729718][ T52] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 232.741323][ T5716] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 232.742169][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.742191][ T5716] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.742235][ T5716] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.743910][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.743930][ T5716] usb 5-1: Product: syz [ 232.743945][ T5716] usb 5-1: Manufacturer: syz [ 232.743958][ T5716] usb 5-1: SerialNumber: syz [ 233.073903][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 233.073937][ T31] audit: type=1400 audit(1792110096.289:554): avc: denied { write } for pid=7243 comm="syz.0.307" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.074072][ T31] audit: type=1400 audit(1792110096.619:555): avc: denied { write } for pid=7254 comm="syz.3.310" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.501839][ T5716] usb 5-1: 0:2 : does not exist [ 233.535732][ T5716] usb 5-1: USB disconnect, device number 8 [ 233.566826][ T6966] udevd[6966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.657984][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 233.658125][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 233.685571][ T7260] ceph: No mds server is up or the cluster is laggy [ 233.828568][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 233.828726][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 233.828996][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 233.829134][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 234.062458][ T5716] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 234.080805][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 234.080964][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 234.541431][ T31] audit: type=1400 audit(1792110098.059:556): avc: denied { write } for pid=7272 comm="syz.3.314" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 234.591618][ T5716] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 234.595281][ T5716] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.595342][ T5716] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.595385][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.595460][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.729034][ T5716] usb 2-1: config 0 descriptor?? [ 234.736972][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 234.749196][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 235.017114][ T31] audit: type=1400 audit(1792110098.499:557): avc: denied { create } for pid=7278 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.017172][ T31] audit: type=1400 audit(1792110098.519:558): avc: denied { write } for pid=7278 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.163260][ T7267] ceph: No mds server is up or the cluster is laggy [ 235.521222][ T5716] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 235.584401][ T5716] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf4 found [ 235.584457][ T5716] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf3 found [ 236.038488][ T31] audit: type=1326 audit(1792110099.619:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.3.316" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23579e559 code=0x7ffc0000 [ 236.039172][ T31] audit: type=1326 audit(1792110099.619:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.3.316" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb23575ed8e code=0x7ffc0000 [ 236.039532][ T31] audit: type=1326 audit(1792110099.619:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.3.316" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23579e559 code=0x7ffc0000 [ 236.040034][ T31] audit: type=1326 audit(1792110099.619:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.3.316" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb23579e559 code=0x7ffc0000 [ 236.068310][ T31] audit: type=1326 audit(1792110099.649:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.3.316" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23579e559 code=0x7ffc0000 [ 236.225424][ T5716] usb 2-1: USB disconnect, device number 10 [ 236.280686][ T7290] FAULT_INJECTION: forcing a failure. [ 236.280686][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 236.280727][ T7290] CPU: 1 UID: 0 PID: 7290 Comm: syz.0.319 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.280751][ T7290] Tainted: [L]=SOFTLOCKUP [ 236.280758][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 236.280768][ T7290] Call Trace: [ 236.280775][ T7290] [ 236.280782][ T7290] dump_stack_lvl+0x100/0x190 [ 236.280813][ T7290] should_fail_ex.cold+0x5/0xa [ 236.280839][ T7290] should_failslab+0xc2/0x120 [ 236.280865][ T7290] __kmalloc_noprof+0xfc/0x840 [ 236.280889][ T7290] ? do_handle_open+0x47d/0xf20 [ 236.280916][ T7290] do_handle_open+0x47d/0xf20 [ 236.280939][ T7290] ? __fget_files+0x21f/0x3d0 [ 236.280964][ T7290] ? __pfx_do_handle_open+0x10/0x10 [ 236.280992][ T7290] ? ksys_write+0x1ac/0x250 [ 236.281013][ T7290] ? __pfx_ksys_write+0x10/0x10 [ 236.281040][ T7290] ? do_syscall_64+0x123/0x790 [ 236.281066][ T7290] do_syscall_64+0x123/0x790 [ 236.281093][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.281111][ T7290] RIP: 0033:0x7fb10939e559 [ 236.281127][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.281143][ T7290] RSP: 002b:00007fb10a1dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 236.281161][ T7290] RAX: ffffffffffffffda RBX: 00007fb109625fa0 RCX: 00007fb10939e559 [ 236.281173][ T7290] RDX: 0000000000000080 RSI: 0000200000000400 RDI: 0000000000000003 [ 236.281183][ T7290] RBP: 00007fb10a1dd090 R08: 0000000000000000 R09: 0000000000000000 [ 236.281194][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.281204][ T7290] R13: 00007fb109626038 R14: 00007fb109625fa0 R15: 00007ffc007cbcc8 [ 236.281228][ T7290] [ 236.520979][ T7294] ip_tables: iptables: counters copy to user failed while replacing table [ 236.968711][ T7294] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 237.458724][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.321'. [ 237.458822][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 237.714145][ T7312] FAULT_INJECTION: forcing a failure. [ 237.714145][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 237.714176][ T7312] CPU: 1 UID: 0 PID: 7312 Comm: syz.1.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.714200][ T7312] Tainted: [L]=SOFTLOCKUP [ 237.714206][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 237.714216][ T7312] Call Trace: [ 237.714222][ T7312] [ 237.714229][ T7312] dump_stack_lvl+0x100/0x190 [ 237.714260][ T7312] should_fail_ex.cold+0x5/0xa [ 237.714284][ T7312] should_failslab+0xc2/0x120 [ 237.714309][ T7312] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 237.714333][ T7312] ? __alloc_skb+0x5b7/0x710 [ 237.714359][ T7312] ? __alloc_skb+0x140/0x710 [ 237.714390][ T7312] __alloc_skb+0x140/0x710 [ 237.714414][ T7312] ? __alloc_skb+0x5b7/0x710 [ 237.714438][ T7312] ? __pfx___alloc_skb+0x10/0x10 [ 237.714471][ T7312] netlink_alloc_large_skb+0x69/0x150 [ 237.714500][ T7312] netlink_sendmsg+0x680/0xda0 [ 237.714530][ T7312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.714559][ T7312] ? selinux_socket_sendmsg+0x198/0x2f0 [ 237.714587][ T7312] ____sys_sendmsg+0xa4d/0xbe0 [ 237.714607][ T7312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.714633][ T7312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.714659][ T7312] ? lock_acquire+0x1d1/0x380 [ 237.714678][ T7312] ? get_pid_task+0x2a/0x250 [ 237.714704][ T7312] ___sys_sendmsg+0x190/0x1e0 [ 237.714728][ T7312] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.714750][ T7312] ? get_pid_task+0x106/0x250 [ 237.714782][ T7312] ? find_held_lock+0x2b/0x80 [ 237.714829][ T7312] __sys_sendmsg+0x160/0x210 [ 237.714848][ T7312] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.714880][ T7312] do_syscall_64+0x123/0x790 [ 237.714907][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.714926][ T7312] RIP: 0033:0x7fa9b1f9e559 [ 237.714941][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.714958][ T7312] RSP: 002b:00007fa9b2eea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.714976][ T7312] RAX: ffffffffffffffda RBX: 00007fa9b2225fa0 RCX: 00007fa9b1f9e559 [ 237.714988][ T7312] RDX: 0000000000004054 RSI: 0000200000000200 RDI: 0000000000000003 [ 237.714998][ T7312] RBP: 00007fa9b2eea090 R08: 0000000000000000 R09: 0000000000000000 [ 237.715009][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.715019][ T7312] R13: 00007fa9b2226038 R14: 00007fa9b2225fa0 R15: 00007ffdbf10e8b8 [ 237.715044][ T7312] [ 238.172593][ T7320] sg_write: data in/out 808464396/136 bytes for SCSI command 0x0-- guessing data in; [ 238.172593][ T7320] program syz.2.324 not setting count and/or reply_len properly [ 238.176410][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 238.176443][ T31] audit: type=1400 audit(1792110101.749:573): avc: denied { read write } for pid=7313 comm="syz.2.324" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 238.176556][ T31] audit: type=1400 audit(1792110101.749:574): avc: denied { open } for pid=7313 comm="syz.2.324" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 238.176636][ T31] audit: type=1400 audit(1792110101.749:575): avc: denied { append } for pid=7313 comm="syz.2.324" name="sg0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 238.176734][ T31] audit: type=1400 audit(1792110101.749:576): avc: denied { open } for pid=7313 comm="syz.2.324" path="/dev/sg0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 238.766530][ T31] audit: type=1400 audit(1792110102.349:577): avc: denied { ioctl } for pid=7315 comm="syz.4.326" path="socket:[14503]" dev="sockfs" ino=14503 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.870692][ T5607] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.903997][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 238.904152][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 238.907707][ T31] audit: type=1400 audit(1792110102.489:578): avc: denied { write } for pid=7330 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.908243][ T31] audit: type=1400 audit(1792110102.489:579): avc: denied { mounton } for pid=7330 comm="syz.0.329" path="/61/file1" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.973100][ T7326] ceph: No mds server is up or the cluster is laggy [ 238.978825][ T31] audit: type=1400 audit(1792110102.559:580): avc: denied { create } for pid=7330 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 239.010611][ T31] audit: type=1400 audit(1792110102.579:581): avc: denied { bind } for pid=7330 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 239.010667][ T31] audit: type=1400 audit(1792110102.579:582): avc: denied { accept } for pid=7330 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 239.023618][ T5607] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 239.044524][ T5607] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.044577][ T5607] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.044612][ T5607] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.044650][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.055230][ T5607] usb 2-1: config 0 descriptor?? [ 239.544127][ T5607] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 239.728585][ T7350] FAULT_INJECTION: forcing a failure. [ 239.728585][ T7350] name failslab, interval 1, probability 0, space 0, times 0 [ 239.728728][ T7350] CPU: 1 UID: 0 PID: 7350 Comm: syz.3.332 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.728754][ T7350] Tainted: [L]=SOFTLOCKUP [ 239.728761][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 239.728771][ T7350] Call Trace: [ 239.728778][ T7350] [ 239.728787][ T7350] dump_stack_lvl+0x100/0x190 [ 239.728820][ T7350] should_fail_ex.cold+0x5/0xa [ 239.728846][ T7350] should_failslab+0xc2/0x120 [ 239.728872][ T7350] __kmalloc_noprof+0xfc/0x840 [ 239.728896][ T7350] ? __pfx_dynamic_dname+0x10/0x10 [ 239.728918][ T7350] ? tomoyo_encode2+0xfb/0x3c0 [ 239.728950][ T7350] tomoyo_encode2+0xfb/0x3c0 [ 239.728979][ T7350] tomoyo_encode+0x29/0x50 [ 239.729004][ T7350] tomoyo_realpath_from_path+0x18c/0x690 [ 239.729038][ T7350] tomoyo_path_number_perm+0x23c/0x580 [ 239.729061][ T7350] ? tomoyo_path_number_perm+0x22e/0x580 [ 239.729086][ T7350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.729119][ T7350] ? __lock_acquire+0x5c0/0x1f40 [ 239.729152][ T7350] ? __fget_files+0x34/0x3d0 [ 239.729178][ T7350] ? find_held_lock+0x2b/0x80 [ 239.729211][ T7350] ? hook_file_ioctl_common+0x140/0x440 [ 239.729236][ T7350] ? __fget_files+0x21f/0x3d0 [ 239.729264][ T7350] security_file_ioctl+0xd3/0x230 [ 239.729290][ T7350] __x64_sys_ioctl+0xb7/0x210 [ 239.729315][ T7350] do_syscall_64+0x123/0x790 [ 239.729343][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.729361][ T7350] RIP: 0033:0x7fb23579e559 [ 239.729376][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.729392][ T7350] RSP: 002b:00007fb2366ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.729411][ T7350] RAX: ffffffffffffffda RBX: 00007fb235a26090 RCX: 00007fb23579e559 [ 239.729422][ T7350] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 239.729433][ T7350] RBP: 00007fb2366ee090 R08: 0000000000000000 R09: 0000000000000000 [ 239.729444][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.729454][ T7350] R13: 00007fb235a26128 R14: 00007fb235a26090 R15: 00007ffe03339198 [ 239.729479][ T7350] [ 239.813848][ T7350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.896490][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 239.975363][ T5764] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 240.038109][ T5607] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 240.038149][ T5607] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 240.136918][ T5716] usb 2-1: USB disconnect, device number 11 [ 240.155124][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.155167][ T25] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 240.157132][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.157156][ T25] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 240.157198][ T25] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 240.157227][ T25] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 240.157258][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 240.157281][ T25] usb 3-1: config 1 interface 1 has no altsetting 0 [ 240.247186][ T5764] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.247239][ T5764] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 240.269607][ T25] usb 3-1: string descriptor 0 read error: -22 [ 240.269717][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.277308][ T5764] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.277333][ T5764] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 240.277375][ T5764] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 240.277408][ T5764] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 240.277442][ T5764] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 240.277465][ T5764] usb 1-1: config 1 interface 1 has no altsetting 0 [ 240.358200][ T5764] usb 1-1: string descriptor 0 read error: -22 [ 240.358306][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.566653][ T25] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 240.787264][ T25] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 240.787293][ T25] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 240.787309][ T25] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 240.863955][ T25] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 240.900028][ T25] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 240.913723][ T5764] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 240.943094][ T25] usb 3-1: USB disconnect, device number 12 [ 241.188459][ T5764] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 241.188488][ T5764] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 241.188503][ T5764] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 241.236108][ T5764] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 241.263324][ T5764] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 241.292793][ T7365] ip_tables: iptables: counters copy to user failed while replacing table [ 241.296426][ T5764] usb 1-1: USB disconnect, device number 15 [ 241.390688][ T5716] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.541330][ T5716] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 241.542445][ T5716] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.542472][ T5716] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.542497][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.542525][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.691720][ T5716] usb 2-1: config 0 descriptor?? [ 242.553334][ T7365] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 242.823604][ T5716] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 242.880953][ T5716] hid-picolcd 0003:04D8:F002.000A: No report with id 0xf4 found [ 242.880979][ T5716] hid-picolcd 0003:04D8:F002.000A: No report with id 0xf3 found [ 243.942532][ T25] usb 2-1: USB disconnect, device number 12 [ 244.834486][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 244.834504][ T31] audit: type=1400 audit(1792110108.419:603): avc: denied { write } for pid=7392 comm="syz.2.347" name="radio1" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 244.982515][ T7395] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 245.230226][ T7397] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 245.251026][ T5764] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 245.406212][ T5764] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 245.424152][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 245.431591][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 245.438029][ T5764] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.438064][ T5764] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.438181][ T5764] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.438424][ T7404] ceph: No mds server is up or the cluster is laggy [ 245.500297][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.546682][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.546743][ T5764] usb 3-1: Product: syz [ 245.546942][ T5764] usb 3-1: Manufacturer: syz [ 245.546988][ T5764] usb 3-1: SerialNumber: syz [ 245.704818][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 245.705350][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 245.902339][ T25] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 245.923809][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.923880][ T25] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.924065][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.972204][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.972263][ T25] usb 2-1: Product: syz [ 245.972328][ T25] usb 2-1: Manufacturer: syz [ 245.972384][ T25] usb 2-1: SerialNumber: syz [ 246.211893][ T30] libceph: connect (1)[c::]:6789 error -101 [ 246.212650][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 246.367401][ T25] usb 2-1: 0:2 : does not exist [ 246.515574][ T5764] usb 3-1: 0:2 : does not exist [ 246.554452][ T25] usb 2-1: USB disconnect, device number 13 [ 246.671532][ T5764] usb 3-1: USB disconnect, device number 13 [ 246.809475][ T6966] udevd[6966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 247.389655][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 247.390005][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 247.557782][ T7423] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 247.833938][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 247.834101][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 247.887891][ T7416] ceph: No mds server is up or the cluster is laggy [ 247.920348][ T5910] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 248.161137][ T7429] ceph: No mds server is up or the cluster is laggy [ 248.172779][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 248.173392][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 248.377737][ T5910] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 248.477422][ T5910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.477463][ T5910] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.477554][ T5910] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.727917][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.727937][ T5910] usb 2-1: Product: syz [ 248.727956][ T5910] usb 2-1: Manufacturer: syz [ 248.727971][ T5910] usb 2-1: SerialNumber: syz [ 249.001813][ T31] audit: type=1400 audit(1792110112.580:604): avc: denied { read write } for pid=7433 comm="syz.0.356" name="mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 249.001860][ T31] audit: type=1400 audit(1792110112.580:605): avc: denied { open } for pid=7433 comm="syz.0.356" path="/dev/input/mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 249.001895][ T31] audit: type=1400 audit(1792110112.580:606): avc: denied { ioctl } for pid=7433 comm="syz.0.356" path="/dev/input/mouse0" dev="devtmpfs" ino=931 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 249.002612][ T7434] FAULT_INJECTION: forcing a failure. [ 249.002612][ T7434] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 249.002641][ T7434] CPU: 0 UID: 0 PID: 7434 Comm: syz.0.356 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.002657][ T7434] Tainted: [L]=SOFTLOCKUP [ 249.002663][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 249.002670][ T7434] Call Trace: [ 249.002674][ T7434] [ 249.002678][ T7434] dump_stack_lvl+0x100/0x190 [ 249.002699][ T7434] should_fail_ex.cold+0x5/0xa [ 249.002713][ T7434] ? prepare_alloc_pages+0x16d/0x5b0 [ 249.002731][ T7434] should_fail_alloc_page+0xeb/0x140 [ 249.002748][ T7434] prepare_alloc_pages+0x1f0/0x5b0 [ 249.002767][ T7434] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 249.002784][ T7434] ? is_bpf_text_address+0x8a/0x1a0 [ 249.002801][ T7434] ? bpf_ksym_find+0x128/0x1c0 [ 249.002812][ T7434] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.002825][ T7434] ? is_bpf_text_address+0x94/0x1a0 [ 249.002841][ T7434] ? kernel_text_address+0x8d/0x100 [ 249.002852][ T7434] ? __kernel_text_address+0xd/0x30 [ 249.002861][ T7434] ? unwind_get_return_address+0x59/0xa0 [ 249.002879][ T7434] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 249.002893][ T7434] ? __lock_acquire+0x5c0/0x1f40 [ 249.002908][ T7434] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 249.002926][ T7434] ? look_up_lock_class+0x55/0x120 [ 249.002942][ T7434] ? register_lock_class+0x3f/0x7b0 [ 249.002959][ T7434] ? __lock_acquire+0x5c0/0x1f40 [ 249.002972][ T7434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.002987][ T7434] ? policy_nodemask+0xed/0x4f0 [ 249.003006][ T7434] alloc_pages_mpol+0x201/0x550 [ 249.003023][ T7434] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 249.003041][ T7434] ? __pfx___might_resched+0x10/0x10 [ 249.003055][ T7434] folio_alloc_mpol_noprof+0x36/0x260 [ 249.003068][ T7434] vma_alloc_folio_noprof+0xed/0x1d0 [ 249.003080][ T7434] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 249.003096][ T7434] do_anonymous_page+0xac9/0x2050 [ 249.003111][ T7434] ? __pfx_do_anonymous_page+0x10/0x10 [ 249.003121][ T7434] ? rcu_read_unlock+0x2d/0xb0 [ 249.003132][ T7434] ? rcu_read_unlock+0x2d/0xb0 [ 249.003143][ T7434] ? __pte_offset_map+0x179/0x310 [ 249.003159][ T7434] __handle_mm_fault+0x1ff3/0x2f60 [ 249.003173][ T7434] ? __pfx___handle_mm_fault+0x10/0x10 [ 249.003183][ T7434] ? __pfx_mt_find+0x10/0x10 [ 249.003207][ T7434] ? find_vma+0xbf/0x140 [ 249.003221][ T7434] ? __pfx_find_vma+0x10/0x10 [ 249.003236][ T7434] handle_mm_fault+0x363/0xa20 [ 249.003250][ T7434] do_user_addr_fault+0x745/0x12f0 [ 249.003269][ T7434] exc_page_fault+0x6f/0xd0 [ 249.003290][ T7434] asm_exc_page_fault+0x26/0x30 [ 249.003301][ T7434] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 249.003314][ T7434] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f [ 249.003324][ T7434] RSP: 0018:ffffc900057bfbb0 EFLAGS: 00050202 [ 249.003334][ T7434] RAX: 00000000000000fa RBX: 0000000000000001 RCX: 0000000000000001 [ 249.003341][ T7434] RDX: 0000000000000001 RSI: ffffc900057bfcb0 RDI: 000020000000e5c0 [ 249.003348][ T7434] RBP: 000020000000e5c0 R08: 0000000000000000 R09: fffff52000af7f96 [ 249.003354][ T7434] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900057bfcb0 [ 249.003361][ T7434] R13: 000020000000e5c1 R14: 00007ffffffff000 R15: 0000000000000000 [ 249.003375][ T7434] _copy_to_user+0xa4/0xd0 [ 249.003393][ T7434] mousedev_read+0x387/0x7d0 [ 249.003405][ T7434] ? get_pid_task+0xfc/0x250 [ 249.003419][ T7434] ? get_pid_task+0xfc/0x250 [ 249.003435][ T7434] ? __pfx_mousedev_read+0x10/0x10 [ 249.003446][ T7434] ? get_pid_task+0x106/0x250 [ 249.003461][ T7434] ? avc_policy_seqno+0x9/0x20 [ 249.003477][ T7434] ? selinux_file_permission+0x8f/0x6d0 [ 249.003504][ T7434] ? bpf_lsm_file_permission+0x9/0x10 [ 249.003528][ T7434] ? security_file_permission+0x76/0x210 [ 249.003548][ T7434] ? rw_verify_area+0xce/0x6d0 [ 249.003561][ T7434] ? __pfx_mousedev_read+0x10/0x10 [ 249.003573][ T7434] vfs_read+0x1e4/0xb40 [ 249.003586][ T7434] ? lock_acquire+0x1d1/0x380 [ 249.003598][ T7434] ? __fget_files+0x34/0x3d0 [ 249.003614][ T7434] ? __pfx_vfs_read+0x10/0x10 [ 249.003626][ T7434] ? find_held_lock+0x2b/0x80 [ 249.003643][ T7434] ? __fget_files+0x215/0x3d0 [ 249.003658][ T7434] ? __fget_files+0x215/0x3d0 [ 249.003676][ T7434] ? __fget_files+0x21f/0x3d0 [ 249.003695][ T7434] ksys_read+0x1f8/0x250 [ 249.003708][ T7434] ? __pfx_ksys_read+0x10/0x10 [ 249.003725][ T7434] do_syscall_64+0x123/0x790 [ 249.003743][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.003754][ T7434] RIP: 0033:0x7fb10939e559 [ 249.003763][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.003773][ T7434] RSP: 002b:00007fb10a1dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.003785][ T7434] RAX: ffffffffffffffda RBX: 00007fb109625fa0 RCX: 00007fb10939e559 [ 249.003792][ T7434] RDX: 0000000000002020 RSI: 000020000000e5c0 RDI: 0000000000000003 [ 249.003799][ T7434] RBP: 00007fb10a1dd090 R08: 0000000000000000 R09: 0000000000000000 [ 249.003805][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.003811][ T7434] R13: 00007fb109626038 R14: 00007fb109625fa0 R15: 00007ffc007cbcc8 [ 249.003826][ T7434] [ 249.728122][ T7436] FAULT_INJECTION: forcing a failure. [ 249.728122][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 249.728188][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.0.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.728220][ T7436] Tainted: [L]=SOFTLOCKUP [ 249.728228][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 249.728242][ T7436] Call Trace: [ 249.728249][ T7436] [ 249.728258][ T7436] dump_stack_lvl+0x100/0x190 [ 249.728292][ T7436] should_fail_ex.cold+0x5/0xa [ 249.728318][ T7436] should_failslab+0xc2/0x120 [ 249.728348][ T7436] __kmalloc_cache_noprof+0x91/0x6d0 [ 249.728372][ T7436] ? __request_region+0x5c/0xf0 [ 249.728405][ T7436] __request_region+0x5c/0xf0 [ 249.728435][ T7436] __comedi_check_request_region+0xfb/0x130 [ 249.728465][ T7436] comedi_check_request_region+0x3c/0xc0 [ 249.728494][ T7436] pcl816_attach+0xaa/0xb30 [ 249.728525][ T7436] comedi_device_attach+0x40e/0x6b0 [ 249.728559][ T7436] do_devconfig_ioctl+0x1b3/0x6d0 [ 249.728592][ T7436] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 249.728636][ T7436] ? kasan_quarantine_put+0x104/0x240 [ 249.728665][ T7436] ? find_held_lock+0x2b/0x80 [ 249.728700][ T7436] comedi_unlocked_ioctl+0x860/0x3310 [ 249.728723][ T7436] ? tomoyo_path_number_perm+0x188/0x580 [ 249.728754][ T7436] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 249.728779][ T7436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.728818][ T7436] ? do_vfs_ioctl+0x226/0x13e0 [ 249.728847][ T7436] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 249.728872][ T7436] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 249.728906][ T7436] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 249.728938][ T7436] ? __fget_files+0x34/0x3d0 [ 249.728974][ T7436] ? selinux_file_ioctl+0x13b/0x290 [ 249.729002][ T7436] ? selinux_file_ioctl+0xb6/0x290 [ 249.729033][ T7436] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 249.729057][ T7436] __x64_sys_ioctl+0x18e/0x210 [ 249.729084][ T7436] do_syscall_64+0x123/0x790 [ 249.729117][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.729139][ T7436] RIP: 0033:0x7fb10939e559 [ 249.729157][ T7436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.729176][ T7436] RSP: 002b:00007fb10a1dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.729197][ T7436] RAX: ffffffffffffffda RBX: 00007fb109625fa0 RCX: 00007fb10939e559 [ 249.729208][ T7436] RDX: 00002000000001c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 249.729219][ T7436] RBP: 00007fb1094358b0 R08: 0000000000000000 R09: 0000000000000000 [ 249.729230][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.729241][ T7436] R13: 00007fb109626038 R14: 00007fb109625fa0 R15: 00007ffc007cbcc8 [ 249.729270][ T7436] [ 249.729453][ T7436] comedi comedi2: pcl816: I/O port conflict (0x140,16) [ 250.862351][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.862541][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.869040][ T5910] usb 2-1: 0:2 : does not exist [ 251.314333][ T5910] usb 2-1: USB disconnect, device number 14 [ 251.744952][ T31] audit: type=1400 audit(1792110115.260:607): avc: denied { write } for pid=7443 comm="syz.3.361" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.447278][ T6966] udevd[6966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.623767][ T25] libceph: connect (1)[c::]:6789 error -101 [ 252.624269][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 252.625361][ T25] libceph: connect (1)[c::]:6789 error -101 [ 252.625712][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 252.704268][ T7452] ceph: No mds server is up or the cluster is laggy [ 254.092462][ T7462] CIFS: Witness protocol support is experimental [ 254.094444][ T7462] CIFS: Attempting to mount //127.0.0.1/share [ 254.601064][ T31] audit: type=1400 audit(1792110118.190:608): avc: denied { create } for pid=7459 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.609211][ T31] audit: type=1400 audit(1792110118.190:609): avc: denied { bind } for pid=7459 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.656715][ T7462] CIFS: VFS: cifs_mount failed w/return code = -512 [ 255.733050][ T31] audit: type=1400 audit(1792110119.320:610): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 256.171178][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.369'. [ 258.471821][ T31] audit: type=1400 audit(1792110122.060:611): avc: denied { bind } for pid=7494 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.479318][ T31] audit: type=1400 audit(1792110122.070:612): avc: denied { setopt } for pid=7494 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.480641][ T7495] FAULT_INJECTION: forcing a failure. [ 258.480641][ T7495] name failslab, interval 1, probability 0, space 0, times 0 [ 258.480672][ T7495] CPU: 1 UID: 0 PID: 7495 Comm: syz.4.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.480698][ T7495] Tainted: [L]=SOFTLOCKUP [ 258.480705][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 258.480714][ T7495] Call Trace: [ 258.480720][ T7495] [ 258.480727][ T7495] dump_stack_lvl+0x100/0x190 [ 258.480755][ T7495] should_fail_ex.cold+0x5/0xa [ 258.480779][ T7495] should_failslab+0xc2/0x120 [ 258.480804][ T7495] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 258.480827][ T7495] ? __alloc_skb+0x140/0x710 [ 258.480856][ T7495] __alloc_skb+0x140/0x710 [ 258.480880][ T7495] ? __pfx___alloc_skb+0x10/0x10 [ 258.480905][ T7495] ? lock_acquire+0x1d1/0x380 [ 258.480925][ T7495] ? net_generic+0x25/0x2a0 [ 258.480953][ T7495] tipc_buf_acquire+0x26/0xe0 [ 258.480975][ T7495] tipc_msg_create+0x39/0x1d0 [ 258.480998][ T7495] tipc_group_proto_xmit+0x150/0x7c0 [ 258.481025][ T7495] tipc_group_delete+0xf8/0x4a0 [ 258.481048][ T7495] ? ktime_get+0x9f/0x320 [ 258.481070][ T7495] ? __pfx_tipc_group_delete+0x10/0x10 [ 258.481091][ T7495] ? tipc_sk_push_backlog+0x334/0xa00 [ 258.481128][ T7495] tipc_sk_leave+0x10e/0x1c0 [ 258.481152][ T7495] ? __pfx_tipc_sk_leave+0x10/0x10 [ 258.481175][ T7495] ? __pfx_woken_wake_function+0x10/0x10 [ 258.481206][ T7495] ? tipc_sk_filtering+0x47d/0x590 [ 258.481229][ T7495] tipc_release+0x11f/0x1650 [ 258.481247][ T7495] ? down_write+0x146/0x1f0 [ 258.481274][ T7495] ? __pfx_down_write+0x10/0x10 [ 258.481301][ T7495] ? __pfx_locks_remove_file+0x10/0x10 [ 258.481325][ T7495] __sock_release+0xb3/0x260 [ 258.481344][ T7495] ? __pfx_sock_close+0x10/0x10 [ 258.481364][ T7495] sock_close+0x1c/0x30 [ 258.481379][ T7495] __fput+0x400/0xb60 [ 258.481406][ T7495] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.481427][ T7495] task_work_run+0x150/0x240 [ 258.481453][ T7495] ? __pfx_task_work_run+0x10/0x10 [ 258.481484][ T7495] exit_to_user_mode_loop+0x1d8/0x700 [ 258.481506][ T7495] ? rcu_is_watching+0x13/0xc0 [ 258.481531][ T7495] do_syscall_64+0x661/0x790 [ 258.481555][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.481572][ T7495] RIP: 0033:0x7f1b1899e559 [ 258.481587][ T7495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.481603][ T7495] RSP: 002b:00007f1b1984c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 258.481619][ T7495] RAX: 0000000000000000 RBX: 00007f1b18c25fa0 RCX: 00007f1b1899e559 [ 258.481630][ T7495] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 258.481640][ T7495] RBP: 00007f1b18a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 258.481649][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.481658][ T7495] R13: 00007f1b18c26038 R14: 00007f1b18c25fa0 R15: 00007ffc2783c9d8 [ 258.481681][ T7495] [ 258.483530][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.372'. [ 258.565935][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.367'. [ 259.045480][ T7497] FAULT_INJECTION: forcing a failure. [ 259.045480][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 259.045538][ T7497] CPU: 0 UID: 0 PID: 7497 Comm: syz.0.375 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.045570][ T7497] Tainted: [L]=SOFTLOCKUP [ 259.045577][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 259.045589][ T7497] Call Trace: [ 259.045596][ T7497] [ 259.045605][ T7497] dump_stack_lvl+0x100/0x190 [ 259.045643][ T7497] should_fail_ex.cold+0x5/0xa [ 259.045673][ T7497] should_failslab+0xc2/0x120 [ 259.045704][ T7497] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 259.045732][ T7497] ? alloc_inode+0x68/0x250 [ 259.045757][ T7497] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 259.045790][ T7497] alloc_inode+0x68/0x250 [ 259.045816][ T7497] new_inode+0x22/0x1c0 [ 259.045844][ T7497] rpc_new_dir+0x96/0x420 [ 259.045872][ T7497] rpc_fill_super+0x33c/0x4f0 [ 259.045900][ T7497] ? __pfx_rpc_fill_super+0x10/0x10 [ 259.045924][ T7497] get_tree_keyed+0x10e/0x1d0 [ 259.045952][ T7497] vfs_get_tree+0x92/0x320 [ 259.045974][ T7497] path_mount+0x7d0/0x2850 [ 259.045999][ T7497] ? __pfx_path_mount+0x10/0x10 [ 259.046020][ T7497] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.046051][ T7497] ? putname+0xb1/0x110 [ 259.046070][ T7497] ? kmem_cache_free+0x127/0x6c0 [ 259.046101][ T7497] ? __x64_sys_mount+0x293/0x310 [ 259.046120][ T7497] __x64_sys_mount+0x293/0x310 [ 259.046141][ T7497] ? __pfx___x64_sys_mount+0x10/0x10 [ 259.046173][ T7497] do_syscall_64+0x123/0x790 [ 259.046205][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.046226][ T7497] RIP: 0033:0x7fb10939e559 [ 259.046244][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.046264][ T7497] RSP: 002b:00007fb10a1dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 259.046285][ T7497] RAX: ffffffffffffffda RBX: 00007fb109625fa0 RCX: 00007fb10939e559 [ 259.046299][ T7497] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 259.046312][ T7497] RBP: 00007fb1094358b0 R08: 0000000000000000 R09: 0000000000000000 [ 259.046324][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.046336][ T7497] R13: 00007fb109626038 R14: 00007fb109625fa0 R15: 00007ffc007cbcc8 [ 259.046380][ T7497] [ 259.323913][ T31] audit: type=1400 audit(1792110122.910:613): avc: denied { append } for pid=7499 comm="syz.4.374" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 260.071096][ T30] libceph: connect (1)[c::]:6789 error -101 [ 260.071524][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 260.073962][ T30] libceph: connect (1)[c::]:6789 error -101 [ 260.074332][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 260.126918][ T7520] ceph: No mds server is up or the cluster is laggy [ 260.331583][ T25] libceph: connect (1)[c::]:6789 error -101 [ 260.332230][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 260.660129][ T52] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 260.673648][ T31] audit: type=1400 audit(1792110124.250:614): avc: denied { write } for pid=7525 comm="syz.1.381" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.670645][ T31] audit: type=1400 audit(1792110126.250:615): avc: denied { execute } for pid=7537 comm="syz.1.383" name="file1" dev="tmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 263.371317][ T7550] /dev/sg0: Can't lookup blockdev [ 263.573185][ T31] audit: type=1400 audit(1792110127.160:616): avc: denied { mount } for pid=7544 comm="syz.4.385" name="/" dev="rpc_pipefs" ino=15286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 263.861434][ T31] audit: type=1400 audit(1792110127.450:617): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 263.968807][ T7553] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 263.969149][ T7553] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 264.142161][ T7556] futex_wake_op: syz.1.389 tries to shift op by 144; fix this program [ 264.145156][ T31] audit: type=1400 audit(1792110127.730:618): avc: denied { ioctl } for pid=7555 comm="syz.1.389" path="socket:[15337]" dev="sockfs" ino=15337 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 264.186109][ T31] audit: type=1400 audit(1792110127.770:619): avc: denied { map } for pid=7555 comm="syz.1.389" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 264.186158][ T31] audit: type=1400 audit(1792110127.770:620): avc: denied { read write } for pid=7555 comm="syz.1.389" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 264.188187][ T31] audit: type=1400 audit(1792110127.770:621): avc: denied { map } for pid=7555 comm="syz.1.389" path="socket:[15343]" dev="sockfs" ino=15343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 265.210794][ T52] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 265.309869][ T31] audit: type=1400 audit(1792110128.470:622): avc: denied { write } for pid=7554 comm="syz.0.390" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 265.680065][ T52] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 265.683709][ T31] audit: type=1400 audit(1792110129.270:623): avc: denied { write } for pid=7569 comm="syz.1.393" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 265.839494][ T1214] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.004077][ T1214] usb 3-1: unable to get BOS descriptor or descriptor too short [ 266.004116][ T1214] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 266.007811][ T1214] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.007844][ T1214] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.007893][ T1214] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 266.007940][ T1214] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 266.007959][ T1214] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 266.007983][ T1214] usb 3-1: config 1 interface 1 has no altsetting 0 [ 266.115527][ T1214] usb 3-1: string descriptor 0 read error: -22 [ 266.115723][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.284249][ T7575] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 266.405882][ T7575] team0: Device wg2 is of different type [ 266.455387][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 266.497954][ T7568] openvswitch: netlink: Flow key attribute not present in set flow. [ 266.501011][ T31] audit: type=1400 audit(1792110130.091:624): avc: denied { setopt } for pid=7567 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.505005][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.505308][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.511697][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.512000][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.565719][ T7580] FAULT_INJECTION: forcing a failure. [ 266.565719][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 266.565777][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.1.395 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.565804][ T7580] Tainted: [L]=SOFTLOCKUP [ 266.565811][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 266.565822][ T7580] Call Trace: [ 266.565829][ T7580] [ 266.565836][ T7580] dump_stack_lvl+0x100/0x190 [ 266.565868][ T7580] should_fail_ex.cold+0x5/0xa [ 266.565892][ T7580] should_failslab+0xc2/0x120 [ 266.565917][ T7580] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 266.565939][ T7580] ? __alloc_skb+0x5b7/0x710 [ 266.565966][ T7580] ? __alloc_skb+0x140/0x710 [ 266.565995][ T7580] __alloc_skb+0x140/0x710 [ 266.566026][ T7580] ? __alloc_skb+0x5b7/0x710 [ 266.566052][ T7580] ? __pfx___alloc_skb+0x10/0x10 [ 266.566079][ T7580] ? find_held_lock+0x2b/0x80 [ 266.566104][ T7580] ? is_bpf_text_address+0x8a/0x1a0 [ 266.566130][ T7580] ? is_bpf_text_address+0x8a/0x1a0 [ 266.566156][ T7580] alloc_skb_with_frags+0xdd/0x760 [ 266.566184][ T7580] sock_alloc_send_pskb+0x801/0x980 [ 266.566210][ T7580] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 266.566237][ T7580] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 266.566263][ T7580] ? find_held_lock+0x2b/0x80 [ 266.566289][ T7580] ? dev_get_by_index+0x180/0x380 [ 266.566306][ T7580] ? dev_get_by_index+0x180/0x380 [ 266.566330][ T7580] packet_sendmsg+0x1e2d/0x5040 [ 266.566353][ T7580] ? avc_has_perm_noaudit+0x450/0x470 [ 266.566382][ T7580] ? sock_has_perm+0x25a/0x2f0 [ 266.566405][ T7580] ? __pfx_sock_has_perm+0x10/0x10 [ 266.566434][ T7580] ? __pfx_packet_sendmsg+0x10/0x10 [ 266.566453][ T7580] ? __might_fault+0xc5/0x140 [ 266.566476][ T7580] ? selinux_socket_sendmsg+0x198/0x2f0 [ 266.566504][ T7580] __sys_sendto+0x48b/0x4e0 [ 266.566527][ T7580] ? __pfx_packet_sendmsg+0x10/0x10 [ 266.566547][ T7580] ? __pfx___sys_sendto+0x10/0x10 [ 266.566602][ T7580] __x64_sys_sendto+0xe0/0x1c0 [ 266.566626][ T7580] ? do_syscall_64+0xae/0x790 [ 266.566649][ T7580] ? lockdep_hardirqs_on+0x7d/0x110 [ 266.566673][ T7580] do_syscall_64+0x123/0x790 [ 266.566700][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.566720][ T7580] RIP: 0033:0x7fa9b1f9e559 [ 266.566736][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.566753][ T7580] RSP: 002b:00007fa9b2ec9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 266.566772][ T7580] RAX: ffffffffffffffda RBX: 00007fa9b2226090 RCX: 00007fa9b1f9e559 [ 266.566785][ T7580] RDX: 0000000000000029 RSI: 0000200000000540 RDI: 0000000000000003 [ 266.566796][ T7580] RBP: 00007fa9b2ec9090 R08: 0000200000000580 R09: 0000000000000014 [ 266.566807][ T7580] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 266.566816][ T7580] R13: 00007fa9b2226128 R14: 00007fa9b2226090 R15: 00007ffdbf10e8b8 [ 266.566841][ T7580] [ 266.962073][ T1214] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 266.962129][ T1214] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 266.962160][ T1214] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 266.992680][ T31] audit: type=1400 audit(1792110130.581:625): avc: denied { execute } for pid=7574 comm="syz.0.394" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 267.246905][ T7589] FAULT_INJECTION: forcing a failure. [ 267.246905][ T7589] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 267.246981][ T7589] CPU: 0 UID: 0 PID: 7589 Comm: syz.0.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.247009][ T7589] Tainted: [L]=SOFTLOCKUP [ 267.247015][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 267.247026][ T7589] Call Trace: [ 267.247038][ T7589] [ 267.247047][ T7589] dump_stack_lvl+0x100/0x190 [ 267.247078][ T7589] should_fail_ex.cold+0x5/0xa [ 267.247105][ T7589] _copy_from_user+0x2e/0xd0 [ 267.247131][ T7589] memdup_user+0x6b/0xe0 [ 267.247153][ T7589] strndup_user+0x78/0xe0 [ 267.247173][ T7589] __x64_sys_mount+0x136/0x310 [ 267.247194][ T7589] ? __pfx___x64_sys_mount+0x10/0x10 [ 267.247221][ T7589] do_syscall_64+0x123/0x790 [ 267.247251][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.247271][ T7589] RIP: 0033:0x7fb10939e559 [ 267.247287][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.247304][ T7589] RSP: 002b:00007fb10a1dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 267.247322][ T7589] RAX: ffffffffffffffda RBX: 00007fb109625fa0 RCX: 00007fb10939e559 [ 267.247334][ T7589] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 267.247346][ T7589] RBP: 00007fb10a1dd090 R08: 00002000000004c0 R09: 0000000000000000 [ 267.247357][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.247368][ T7589] R13: 00007fb109626038 R14: 00007fb109625fa0 R15: 00007ffc007cbcc8 [ 267.247394][ T7589] [ 267.492421][ T52] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 267.585061][ T1214] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 267.656202][ T1214] usb 3-1: USB disconnect, device number 14 [ 268.562414][ T7619] FAULT_INJECTION: forcing a failure. [ 268.562414][ T7619] name failslab, interval 1, probability 0, space 0, times 0 [ 268.562446][ T7619] CPU: 1 UID: 0 PID: 7619 Comm: syz.0.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.562466][ T7619] Tainted: [L]=SOFTLOCKUP [ 268.562471][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 268.562480][ T7619] Call Trace: [ 268.562485][ T7619] [ 268.562491][ T7619] dump_stack_lvl+0x100/0x190 [ 268.562521][ T7619] should_fail_ex.cold+0x5/0xa [ 268.562543][ T7619] should_failslab+0xc2/0x120 [ 268.562573][ T7619] __kmalloc_noprof+0xfc/0x840 [ 268.562593][ T7619] ? tomoyo_encode2+0xfb/0x3c0 [ 268.562621][ T7619] tomoyo_encode2+0xfb/0x3c0 [ 268.562651][ T7619] tomoyo_encode+0x29/0x50 [ 268.562677][ T7619] tomoyo_realpath_from_path+0x18c/0x690 [ 268.562710][ T7619] tomoyo_path_number_perm+0x23c/0x580 [ 268.562733][ T7619] ? tomoyo_path_number_perm+0x22e/0x580 [ 268.562764][ T7619] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.562792][ T7619] ? __lock_acquire+0x5c0/0x1f40 [ 268.562822][ T7619] ? __fget_files+0x34/0x3d0 [ 268.562847][ T7619] ? find_held_lock+0x2b/0x80 [ 268.562870][ T7619] ? hook_file_ioctl_common+0x140/0x440 [ 268.562893][ T7619] ? __fget_files+0x21f/0x3d0 [ 268.562922][ T7619] security_file_ioctl+0xd3/0x230 [ 268.562949][ T7619] __x64_sys_ioctl+0xb7/0x210 [ 268.562974][ T7619] do_syscall_64+0x123/0x790 [ 268.563002][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.563020][ T7619] RIP: 0033:0x7fb10939e559 [ 268.563036][ T7619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.563052][ T7619] RSP: 002b:00007fb10a1dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.563070][ T7619] RAX: ffffffffffffffda RBX: 00007fb109625fa0 RCX: 00007fb10939e559 [ 268.563082][ T7619] RDX: 0000200000000d80 RSI: 00000000c020662a RDI: 0000000000000004 [ 268.563093][ T7619] RBP: 00007fb10a1dd090 R08: 0000000000000000 R09: 0000000000000000 [ 268.563104][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.563114][ T7619] R13: 00007fb109626038 R14: 00007fb109625fa0 R15: 00007ffc007cbcc8 [ 268.563140][ T7619] [ 268.566073][ T7619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.970040][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 268.970072][ T31] audit: type=1400 audit(1792110132.561:636): avc: denied { write } for pid=7625 comm="syz.4.406" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.436518][ T31] audit: type=1400 audit(1792110133.021:637): avc: denied { write } for pid=7627 comm="syz.0.407" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 269.436773][ T31] audit: type=1400 audit(1792110133.021:638): avc: denied { open } for pid=7627 comm="syz.0.407" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 269.436882][ T7629] random: crng reseeded on system resumption [ 269.633729][ T7629] jffs2: notice: (7629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 269.651044][ T31] audit: type=1400 audit(1792110133.231:639): avc: denied { write } for pid=7627 comm="syz.0.407" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.651128][ T31] audit: type=1400 audit(1792110133.231:640): avc: denied { create } for pid=7627 comm="syz.0.407" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 269.809795][ T31] audit: type=1400 audit(1792110133.381:641): avc: denied { read write open } for pid=7627 comm="syz.0.407" path="/79/mnt/fillfile" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 270.053680][ T7647] FAULT_INJECTION: forcing a failure. [ 270.053680][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 270.053747][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.4.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.053774][ T7647] Tainted: [L]=SOFTLOCKUP [ 270.053780][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 270.053789][ T7647] Call Trace: [ 270.053796][ T7647] [ 270.053803][ T7647] dump_stack_lvl+0x100/0x190 [ 270.053835][ T7647] should_fail_ex.cold+0x5/0xa [ 270.053862][ T7647] should_failslab+0xc2/0x120 [ 270.053889][ T7647] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 270.053913][ T7647] ? __alloc_skb+0x5b7/0x710 [ 270.053938][ T7647] ? __alloc_skb+0x140/0x710 [ 270.053966][ T7647] __alloc_skb+0x140/0x710 [ 270.053996][ T7647] ? __alloc_skb+0x5b7/0x710 [ 270.054021][ T7647] ? __pfx___alloc_skb+0x10/0x10 [ 270.054055][ T7647] netlink_alloc_large_skb+0x69/0x150 [ 270.054086][ T7647] netlink_sendmsg+0x680/0xda0 [ 270.054118][ T7647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.054148][ T7647] ? selinux_socket_sendmsg+0x198/0x2f0 [ 270.054178][ T7647] ____sys_sendmsg+0xa4d/0xbe0 [ 270.054199][ T7647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.054229][ T7647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.054257][ T7647] ? lock_acquire+0x1d1/0x380 [ 270.054278][ T7647] ? get_pid_task+0x2a/0x250 [ 270.054305][ T7647] ___sys_sendmsg+0x190/0x1e0 [ 270.054331][ T7647] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.054355][ T7647] ? get_pid_task+0x106/0x250 [ 270.054389][ T7647] ? find_held_lock+0x2b/0x80 [ 270.054433][ T7647] __sys_sendmsg+0x160/0x210 [ 270.054452][ T7647] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.054482][ T7647] do_syscall_64+0x123/0x790 [ 270.054510][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.054529][ T7647] RIP: 0033:0x7f1b1899e559 [ 270.054544][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.054558][ T7647] RSP: 002b:00007f1b1984c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.054572][ T7647] RAX: ffffffffffffffda RBX: 00007f1b18c25fa0 RCX: 00007f1b1899e559 [ 270.054581][ T7647] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 270.054589][ T7647] RBP: 00007f1b1984c090 R08: 0000000000000000 R09: 0000000000000000 [ 270.054597][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.054605][ T7647] R13: 00007f1b18c26038 R14: 00007f1b18c25fa0 R15: 00007ffc2783c9d8 [ 270.054624][ T7647] [ 270.275709][ T31] audit: type=1400 audit(1792110133.871:642): avc: denied { map } for pid=7649 comm="syz.4.413" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 270.284778][ T7650] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 270.549105][ T5910] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 270.699752][ T5910] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 270.702568][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.702596][ T5910] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.702633][ T5910] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.707966][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.707993][ T5910] usb 4-1: Product: syz [ 270.708002][ T5910] usb 4-1: Manufacturer: syz [ 270.708010][ T5910] usb 4-1: SerialNumber: syz [ 270.782766][ T7656] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 271.020641][ T5910] usb 4-1: 0:2 : does not exist [ 271.040951][ T5764] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 271.113072][ T5910] usb 4-1: USB disconnect, device number 10 [ 271.190533][ T5764] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 271.191675][ T5764] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.191697][ T5764] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.191741][ T5764] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.197704][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.197728][ T5764] usb 3-1: Product: syz [ 271.197742][ T5764] usb 3-1: Manufacturer: syz [ 271.197755][ T5764] usb 3-1: SerialNumber: syz [ 271.289685][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.502416][ T5764] usb 3-1: 0:2 : does not exist [ 271.563480][ T5764] usb 3-1: USB disconnect, device number 15 [ 271.632468][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.830931][ T31] audit: type=1400 audit(1792110135.421:643): avc: denied { read } for pid=7661 comm="syz.1.416" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 271.831736][ T7660] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 272.118790][ T5716] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 272.363249][ T5764] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 272.378912][ T5716] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 272.379827][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.379849][ T5716] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.379891][ T5716] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.381567][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.381589][ T5716] usb 4-1: Product: syz [ 272.381602][ T5716] usb 4-1: Manufacturer: syz [ 272.381616][ T5716] usb 4-1: SerialNumber: syz [ 272.438514][ T31] audit: type=1400 audit(1792110136.021:644): avc: denied { connect } for pid=7664 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.513496][ T5764] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 272.513532][ T5764] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 272.517674][ T5764] usb 2-1: config index 0 descriptor too short (expected 45, got 28) [ 272.517699][ T5764] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 272.517734][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.520980][ T5764] usb 2-1: config index 1 descriptor too short (expected 45, got 28) [ 272.521001][ T5764] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 272.521050][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.521870][ T5764] usb 2-1: config index 2 descriptor too short (expected 45, got 28) [ 272.521889][ T5764] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 272.521918][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.522741][ T5764] usb 2-1: config index 3 descriptor too short (expected 45, got 28) [ 272.522759][ T5764] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 272.522789][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.523606][ T5764] usb 2-1: config index 4 descriptor too short (expected 45, got 28) [ 272.523623][ T5764] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 272.523656][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.524513][ T5764] usb 2-1: config index 5 descriptor too short (expected 45, got 28) [ 272.524581][ T5764] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 272.524635][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.526670][ T5764] usb 2-1: config index 6 descriptor too short (expected 45, got 28) [ 272.526689][ T5764] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 272.526736][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.527787][ T5764] usb 2-1: config index 7 descriptor too short (expected 45, got 28) [ 272.527808][ T5764] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 272.527840][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.534088][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.534112][ T5764] usb 2-1: Product: syz [ 272.534125][ T5764] usb 2-1: Manufacturer: syz [ 272.534137][ T5764] usb 2-1: SerialNumber: syz [ 272.543501][ T5764] rtl8150 2-1:1.0: couldn't find required endpoints [ 272.543675][ T5764] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 272.694954][ T5716] usb 4-1: 0:2 : does not exist [ 272.782242][ T5716] usb 4-1: USB disconnect, device number 11 [ 272.837878][ T5764] usb 2-1: USB disconnect, device number 15 [ 272.947744][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.018437][ T5741] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 273.169356][ T5741] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 273.174162][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 273.174186][ T5741] usb 3-1: Product: syz [ 273.174199][ T5741] usb 3-1: Manufacturer: syz [ 273.538442][ T31] audit: type=1400 audit(1792110137.121:645): avc: denied { create } for pid=7680 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.624249][ T7677] fuse: Unknown parameter 'ÿ0xffffffffffffffff01777777777777777777777000000000000000000000000000000000000000300000000000000000000' [ 273.714384][ T52] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 273.732013][ T5741] hid (null): report_id 0 is invalid [ 273.745954][ T5741] logitech-djreceiver 0003:046D:C52B.000B: report_id 0 is invalid [ 273.745975][ T5741] logitech-djreceiver 0003:046D:C52B.000B: item 0 1 1 8 parsing failed [ 273.746565][ T5741] logitech-djreceiver 0003:046D:C52B.000B: logi_dj_probe: parse failed [ 273.746620][ T5741] logitech-djreceiver 0003:046D:C52B.000B: probe with driver logitech-djreceiver failed with error -22 [ 274.685920][ T25] usb 3-1: USB disconnect, device number 16 [ 275.089737][ T7690] FAULT_INJECTION: forcing a failure. [ 275.089737][ T7690] name failslab, interval 1, probability 0, space 0, times 0 [ 275.089774][ T7690] CPU: 1 UID: 0 PID: 7690 Comm: syz.1.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.089803][ T7690] Tainted: [L]=SOFTLOCKUP [ 275.089810][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 275.089822][ T7690] Call Trace: [ 275.089829][ T7690] [ 275.089838][ T7690] dump_stack_lvl+0x100/0x190 [ 275.089875][ T7690] should_fail_ex.cold+0x5/0xa [ 275.089907][ T7690] should_failslab+0xc2/0x120 [ 275.089937][ T7690] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 275.089964][ T7690] ? alloc_inode+0x183/0x250 [ 275.089991][ T7690] alloc_inode+0x183/0x250 [ 275.090015][ T7690] iget_locked+0x1d9/0x6d0 [ 275.090040][ T7690] ? __pfx_iget_locked+0x10/0x10 [ 275.090062][ T7690] ? down_read+0x13b/0x4c0 [ 275.090081][ T7690] ? __pfx_down_read+0x10/0x10 [ 275.090097][ T7690] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 275.090123][ T7690] kernfs_get_inode+0x46/0x470 [ 275.090145][ T7690] kernfs_get_tree+0x636/0xbb0 [ 275.090178][ T7690] ? __pfx_kernfs_get_tree+0x10/0x10 [ 275.090214][ T7690] ? bpf_lsm_capable+0x9/0x10 [ 275.090233][ T7690] ? security_capable+0x80/0x260 [ 275.090261][ T7690] vfs_get_tree+0x92/0x320 [ 275.090292][ T7690] path_mount+0x7d0/0x2850 [ 275.090321][ T7690] ? __pfx_path_mount+0x10/0x10 [ 275.090344][ T7690] ? lockdep_hardirqs_on+0x7d/0x110 [ 275.090375][ T7690] ? putname+0xb1/0x110 [ 275.090391][ T7690] ? kmem_cache_free+0x127/0x6c0 [ 275.090420][ T7690] ? __x64_sys_mount+0x293/0x310 [ 275.090439][ T7690] __x64_sys_mount+0x293/0x310 [ 275.090460][ T7690] ? __pfx___x64_sys_mount+0x10/0x10 [ 275.090495][ T7690] do_syscall_64+0x123/0x790 [ 275.090530][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.090556][ T7690] RIP: 0033:0x7fa9b1f9e559 [ 275.090575][ T7690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.090594][ T7690] RSP: 002b:00007fa9b2eea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.090615][ T7690] RAX: ffffffffffffffda RBX: 00007fa9b2225fa0 RCX: 00007fa9b1f9e559 [ 275.090629][ T7690] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 275.090641][ T7690] RBP: 00007fa9b20358b0 R08: 0000000000000000 R09: 0000000000000000 [ 275.090654][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.090666][ T7690] R13: 00007fa9b2226038 R14: 00007fa9b2225fa0 R15: 00007ffdbf10e8b8 [ 275.090692][ T7690] [ 275.168342][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 275.168370][ T31] audit: type=1400 audit(1792110138.721:651): avc: denied { setopt } for pid=7691 comm="syz.3.424" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.168429][ T31] audit: type=1400 audit(1792110138.731:652): avc: denied { read } for pid=7691 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.628961][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 275.633940][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 275.656738][ T7702] ceph: No mds server is up or the cluster is laggy [ 278.272205][ T7711] ceph: No mds server is up or the cluster is laggy [ 278.362055][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 278.363791][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 279.810432][ T7728] ceph: No mds server is up or the cluster is laggy [ 279.847318][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 279.860889][ T7727] ceph: No mds server is up or the cluster is laggy [ 279.884284][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 279.913708][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 280.038095][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 280.303408][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 280.307632][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 280.363989][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 280.383655][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 280.952792][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 280.977499][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 281.278925][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 281.279082][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 281.538221][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 281.538389][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 282.133978][ T7739] ceph: No mds server is up or the cluster is laggy [ 282.186703][ T25] libceph: connect (1)[c::]:6789 error -101 [ 282.186875][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 282.223375][ T7749] ceph: No mds server is up or the cluster is laggy [ 282.246440][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 282.270072][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 282.532234][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 282.533540][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 282.803063][ T31] audit: type=1400 audit(1792110146.391:653): avc: denied { create } for pid=7754 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 282.809182][ T31] audit: type=1400 audit(1792110146.401:654): avc: denied { getopt } for pid=7754 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 282.853347][ T31] audit: type=1400 audit(1792110146.441:655): avc: denied { mount } for pid=7750 comm="syz.2.435" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 282.853680][ T31] audit: type=1400 audit(1792110146.441:656): avc: denied { search } for pid=7750 comm="syz.2.435" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 282.853855][ T31] audit: type=1400 audit(1792110146.441:657): avc: denied { search } for pid=7750 comm="syz.2.435" name="per_cpu" dev="tracefs" ino=3686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 282.854022][ T31] audit: type=1400 audit(1792110146.441:658): avc: denied { search } for pid=7750 comm="syz.2.435" name="cpu0" dev="tracefs" ino=3687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 282.856076][ T31] audit: type=1400 audit(1792110146.441:659): avc: denied { read append } for pid=7750 comm="syz.2.435" name="trace_pipe_raw" dev="tracefs" ino=3690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 282.856120][ T31] audit: type=1400 audit(1792110146.441:660): avc: denied { open } for pid=7750 comm="syz.2.435" path="/87/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 283.105471][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 283.107661][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 283.135015][ T7762] ceph: No mds server is up or the cluster is laggy [ 283.371994][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 283.373488][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 284.803637][ T31] audit: type=1400 audit(1792110148.392:661): avc: denied { read write } for pid=7774 comm="syz.3.439" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 284.837827][ T31] audit: type=1400 audit(1792110148.402:662): avc: denied { open } for pid=7774 comm="syz.3.439" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 285.302267][ T7784] ceph: No mds server is up or the cluster is laggy [ 285.311964][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 285.312204][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 285.651302][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 285.653336][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 286.465240][ T7794] jffs2: notice: (7794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 287.352781][ T7813] FAULT_INJECTION: forcing a failure. [ 287.352781][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 287.352814][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.4.451 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.352840][ T7813] Tainted: [L]=SOFTLOCKUP [ 287.352846][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 287.352855][ T7813] Call Trace: [ 287.352861][ T7813] [ 287.352868][ T7813] dump_stack_lvl+0x100/0x190 [ 287.352898][ T7813] should_fail_ex.cold+0x5/0xa [ 287.352923][ T7813] should_failslab+0xc2/0x120 [ 287.352950][ T7813] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 287.352973][ T7813] ? sock_alloc_inode+0x26/0x2c0 [ 287.352996][ T7813] ? __pfx_sock_alloc_inode+0x10/0x10 [ 287.353018][ T7813] sock_alloc_inode+0x26/0x2c0 [ 287.353039][ T7813] ? __pfx_sock_alloc_inode+0x10/0x10 [ 287.353058][ T7813] alloc_inode+0x68/0x250 [ 287.353079][ T7813] sock_alloc+0x44/0x280 [ 287.353100][ T7813] do_accept+0xf9/0x530 [ 287.353125][ T7813] ? do_raw_spin_lock+0x128/0x260 [ 287.353150][ T7813] ? __pfx_do_accept+0x10/0x10 [ 287.353189][ T7813] __sys_accept4+0x108/0x200 [ 287.353215][ T7813] ? __pfx___sys_accept4+0x10/0x10 [ 287.353239][ T7813] ? ksys_write+0x1ac/0x250 [ 287.353261][ T7813] ? __pfx_ksys_write+0x10/0x10 [ 287.353287][ T7813] __x64_sys_accept+0x74/0xb0 [ 287.353311][ T7813] ? lockdep_hardirqs_on+0x7d/0x110 [ 287.353337][ T7813] do_syscall_64+0x123/0x790 [ 287.353371][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.353390][ T7813] RIP: 0033:0x7f1b1899e559 [ 287.353405][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.353422][ T7813] RSP: 002b:00007f1b1980a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 287.353441][ T7813] RAX: ffffffffffffffda RBX: 00007f1b18c26180 RCX: 00007f1b1899e559 [ 287.353453][ T7813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 287.353464][ T7813] RBP: 00007f1b1980a090 R08: 0000000000000000 R09: 0000000000000000 [ 287.353474][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.353484][ T7813] R13: 00007f1b18c26218 R14: 00007f1b18c26180 R15: 00007ffc2783c9d8 [ 287.353509][ T7813] [ 288.022136][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 288.022168][ T31] audit: type=1400 audit(1792110150.932:668): avc: denied { sqpoll } for pid=7808 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 288.022234][ T31] audit: type=1326 audit(1792110150.952:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.4.451" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b1899e559 code=0x0 [ 288.059138][ T52] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 288.429622][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.448'. [ 288.525027][ T7824] bridge0: port 3(veth0_to_bridge) entered blocking state [ 288.525110][ T7824] bridge0: port 3(veth0_to_bridge) entered disabled state [ 288.525230][ T7824] veth0_to_bridge: entered allmulticast mode [ 288.553137][ T7824] veth0_to_bridge: entered promiscuous mode [ 288.553268][ T7824] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.555222][ T7824] bridge0: port 3(veth0_to_bridge) entered blocking state [ 288.555344][ T7824] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 288.558466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.559245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.559969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.560282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.560518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.560826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.561071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.561380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.561614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.561926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.739103][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 289.739422][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 293.567231][ C1] net_ratelimit: 25116 callbacks suppressed [ 293.567251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.567586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.567652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:9f:00:67:2b, vlan:0) [ 293.567872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.568118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.568237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:9f:00:67:2b, vlan:0) [ 293.568408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.568731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.568856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:99:9f:00:67:2b, vlan:0) [ 293.569038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.836562][ T7828] veth0_to_bridge: left allmulticast mode [ 294.856816][ T7828] veth0_to_bridge: left promiscuous mode [ 294.897949][ T7828] bridge0: port 3(veth0_to_bridge) entered disabled state [ 295.161339][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 295.161617][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 295.185030][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 295.185306][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 295.221409][ T7825] ceph: No mds server is up or the cluster is laggy [ 295.385570][ T31] audit: type=1400 audit(1792110158.972:670): avc: denied { read } for pid=7837 comm="syz.0.454" name="sg0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 295.414935][ T31] audit: type=1400 audit(1792110159.012:671): avc: denied { ioctl } for pid=7837 comm="syz.0.454" path="/dev/sg0" dev="devtmpfs" ino=1074 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 296.255602][ T31] audit: type=1400 audit(1792110159.842:672): avc: denied { write } for pid=7846 comm="syz.1.455" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 296.487078][ T5764] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 296.637734][ T5764] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 296.638786][ T5764] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 296.639789][ T5764] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 296.656490][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.656517][ T5764] usb 2-1: Product: syz [ 296.656530][ T5764] usb 2-1: Manufacturer: syz [ 296.656544][ T5764] usb 2-1: SerialNumber: syz [ 296.738873][ T5764] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 297.137093][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 297.209549][ T31] audit: type=1400 audit(1792110160.492:673): avc: denied { write } for pid=7850 comm="syz.4.456" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 297.504896][ T5764] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 297.844313][ T5764] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 297.852643][ T5764] usb 2-1: USB disconnect, device number 16 [ 297.877318][ T5764] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 297.955953][ T5764] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 297.972666][ T5764] ti_usb_3410_5052 2-1:2.0: device disconnected [ 298.267029][ T5741] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 298.361982][ T7864] syzkaller0: entered promiscuous mode [ 298.362033][ T7864] syzkaller0: entered allmulticast mode [ 298.420477][ T5741] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 298.437903][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.437929][ T5741] usb 3-1: Product: syz [ 298.437943][ T5741] usb 3-1: Manufacturer: syz [ 298.437957][ T5741] usb 3-1: SerialNumber: syz [ 298.450264][ T5741] usb 3-1: config 0 descriptor?? [ 298.461364][ T5741] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 298.509255][ T7868] syzkaller0: entered promiscuous mode [ 298.509279][ T7868] syzkaller0: entered allmulticast mode [ 298.537109][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.538331][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.538394][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.538452][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.677066][ T5910] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 299.257460][ T5741] gspca_stk1135: reg_w 0x0 err -110 [ 299.258547][ T5741] gspca_stk1135: serial bus timeout: status=0x00 [ 299.258573][ T5741] gspca_stk1135: Sensor write failed [ 299.258643][ T5741] gspca_stk1135: serial bus timeout: status=0x00 [ 299.258667][ T5741] gspca_stk1135: Sensor write failed [ 299.258793][ T5741] gspca_stk1135: serial bus timeout: status=0x00 [ 299.258816][ T5741] gspca_stk1135: Sensor read failed [ 299.258871][ T5741] gspca_stk1135: serial bus timeout: status=0x00 [ 299.258894][ T5741] gspca_stk1135: Sensor read failed [ 299.258916][ T5741] gspca_stk1135: Detected sensor type unknown (0x0) [ 299.259004][ T5741] gspca_stk1135: serial bus timeout: status=0x00 [ 299.259028][ T5741] gspca_stk1135: Sensor read failed [ 299.259100][ T5741] gspca_stk1135: serial bus timeout: status=0x00 [ 299.259123][ T5741] gspca_stk1135: Sensor read failed [ 299.259208][ T5741] gspca_stk1135: serial bus timeout: status=0x00 [ 299.259232][ T5741] gspca_stk1135: Sensor write failed [ 299.259315][ T5741] gspca_stk1135: serial bus timeout: status=0x00 [ 299.259343][ T5741] gspca_stk1135: Sensor write failed [ 299.259525][ T5741] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 299.680879][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 299.687016][ T5910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.691862][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.691896][ T5910] usb 1-1: Product: syz [ 299.691922][ T5910] usb 1-1: Manufacturer: syz [ 299.691934][ T5910] usb 1-1: SerialNumber: syz [ 299.846729][ T5910] ipheth 1-1:1.0: Unable to find alternate settings interface [ 299.886047][ T7878] net_ratelimit: 6455 callbacks suppressed [ 299.886067][ T7878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.905568][ T31] audit: type=1400 audit(1792110163.492:674): avc: denied { setopt } for pid=7877 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 299.958743][ T7878] bond0: (slave bond_slave_0): Releasing backup interface [ 300.014757][ T7878] bond0: (slave bond_slave_1): Releasing backup interface [ 300.043655][ T31] audit: type=1400 audit(1792110163.632:675): avc: denied { create } for pid=7880 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 300.081492][ T31] audit: type=1400 audit(1792110163.672:676): avc: denied { read write } for pid=7859 comm="syz.2.458" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 300.085959][ T31] audit: type=1400 audit(1792110163.672:677): avc: denied { open } for pid=7859 comm="syz.2.458" path="/89/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 300.110463][ T31] audit: type=1400 audit(1792110163.692:678): avc: denied { ioctl } for pid=7859 comm="syz.2.458" path="/89/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 300.164731][ T7862] capability: warning: `syz.2.458' uses deprecated v2 capabilities in a way that may be insecure [ 300.184349][ T5764] apple-mfi-fastcharge 1-1: USB disconnect, device number 16 [ 300.211115][ T7881] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 300.212922][ T7882] pimreg: tun_chr_ioctl cmd 1074025672 [ 300.212956][ T7882] pimreg: ignored: set checksum enabled [ 300.225413][ T5741] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 300.231696][ T31] audit: type=1400 audit(1792110163.822:679): avc: denied { bind } for pid=7880 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 300.398979][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 300.399137][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 300.657094][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 300.657300][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 300.726942][ T5607] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 301.112181][ T5607] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 301.114576][ T5607] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.114648][ T5607] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.114703][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.167167][ T30] libceph: connect (1)[c::]:6789 error -101 [ 301.168163][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 301.206440][ T7894] FAULT_INJECTION: forcing a failure. [ 301.206440][ T7894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.206488][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: syz.0.467 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.206512][ T7894] Tainted: [L]=SOFTLOCKUP [ 301.206518][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 301.206530][ T7894] Call Trace: [ 301.206536][ T7894] [ 301.206543][ T7894] dump_stack_lvl+0x100/0x190 [ 301.206573][ T7894] should_fail_ex.cold+0x5/0xa [ 301.206599][ T7894] _copy_from_iter+0x1f4/0x1690 [ 301.206629][ T7894] ? __pfx__copy_from_iter+0x10/0x10 [ 301.206654][ T7894] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.206683][ T7894] ? lock_acquire+0x1d1/0x380 [ 301.206708][ T7894] copy_page_from_iter+0x238/0x300 [ 301.206733][ T7894] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 301.206767][ T7894] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 301.206792][ T7894] ? unwind_get_return_address+0x59/0xa0 [ 301.206817][ T7894] ? arch_stack_walk+0xa6/0xf0 [ 301.206857][ T7894] ? _kstrtoull+0x144/0x200 [ 301.206873][ T7894] ? __pfx__kstrtoull+0x10/0x10 [ 301.206893][ T7894] tun_get_user+0x17b4/0x3da0 [ 301.206928][ T7894] ? __lock_acquire+0x5c0/0x1f40 [ 301.206947][ T7894] ? __pfx_tun_get_user+0x10/0x10 [ 301.206974][ T7894] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 301.207001][ T7894] ? find_held_lock+0x2b/0x80 [ 301.207025][ T7894] ? tun_get+0x191/0x370 [ 301.207047][ T7894] ? tun_get+0x191/0x370 [ 301.207077][ T7894] tun_chr_write_iter+0xdc/0x200 [ 301.207106][ T7894] vfs_write+0x6af/0x1050 [ 301.207128][ T7894] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 301.207158][ T7894] ? __pfx_vfs_write+0x10/0x10 [ 301.207177][ T7894] ? find_held_lock+0x2b/0x80 [ 301.207216][ T7894] ksys_write+0x12a/0x250 [ 301.207237][ T7894] ? __pfx_ksys_write+0x10/0x10 [ 301.207266][ T7894] do_syscall_64+0x123/0x790 [ 301.207294][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.207313][ T7894] RIP: 0033:0x7fb10935ed8e [ 301.207327][ T7894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.207344][ T7894] RSP: 002b:00007fb10a1dcfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.207362][ T7894] RAX: ffffffffffffffda RBX: 00007fb10a1dd6c0 RCX: 00007fb10935ed8e [ 301.207373][ T7894] RDX: 000000000000004e RSI: 0000200000000080 RDI: 00000000000000c8 [ 301.207383][ T7894] RBP: 00007fb10a1dd090 R08: 0000000000000000 R09: 0000000000000000 [ 301.207393][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.207403][ T7894] R13: 00007fb109626038 R14: 00007fb109625fa0 R15: 00007ffc007cbcc8 [ 301.207427][ T7894] [ 301.258246][ T7884] ceph: No mds server is up or the cluster is laggy [ 301.381566][ T5741] usb 2-1: unable to get BOS descriptor or descriptor too short [ 301.381608][ T5741] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 301.412889][ T5741] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 301.412925][ T5741] usb 2-1: can't read configurations, error -71 [ 301.611691][ T5607] rtsx_usb 5-1:1.0: probe with driver rtsx_usb failed with error -71 [ 301.645610][ T5607] usb 5-1: USB disconnect, device number 9 [ 303.481076][ T7907] ceph: No mds server is up or the cluster is laggy [ 304.149768][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 304.150212][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 304.747261][ T30] usb 3-1: USB disconnect, device number 17 [ 305.958259][ T5910] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 306.124491][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 306.124551][ T31] audit: type=1400 audit(1792110169.693:682): avc: denied { mount } for pid=7923 comm="syz.3.478" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 306.136910][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 306.375846][ T7925] ceph: No mds server is up or the cluster is laggy [ 306.420144][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 306.448033][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 306.712685][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 306.714198][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 307.135783][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.224709][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 307.264317][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 307.267394][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.685706][ T7914] syz_tun: entered allmulticast mode [ 307.710168][ T7914] syz_tun: left allmulticast mode [ 307.720276][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 307.720347][ T5910] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 307.721351][ T5910] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 307.721392][ T5910] usb 5-1: can't read configurations, error -71 [ 308.764499][ T31] audit: type=1400 audit(1792110172.353:683): avc: denied { bind } for pid=7936 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.809512][ T31] audit: type=1400 audit(1792110172.403:684): avc: denied { setopt } for pid=7936 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.848220][ T31] audit: type=1400 audit(1792110172.443:685): avc: denied { listen } for pid=7936 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 310.029336][ T31] audit: type=1400 audit(1792110173.623:686): avc: denied { accept } for pid=7936 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 310.030070][ T31] audit: type=1400 audit(1792110173.623:687): avc: denied { connect } for pid=7936 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 310.127229][ T7923] ima: policy update failed [ 310.127376][ T31] audit: type=1802 audit(1792110173.723:688): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.478" res=0 errno=0 [ 310.235051][ T31] audit: type=1400 audit(1792110173.823:689): avc: denied { create } for pid=7944 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 310.303875][ T31] audit: type=1400 audit(1792110173.893:690): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 310.465705][ T31] audit: type=1400 audit(1792110174.053:691): avc: denied { cmd } for pid=7946 comm="syz.4.481" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 310.471259][ T7947] FAULT_INJECTION: forcing a failure. [ 310.471259][ T7947] name failslab, interval 1, probability 0, space 0, times 0 [ 310.471288][ T7947] CPU: 1 UID: 0 PID: 7947 Comm: syz.4.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.471311][ T7947] Tainted: [L]=SOFTLOCKUP [ 310.471316][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 310.471326][ T7947] Call Trace: [ 310.471332][ T7947] [ 310.471338][ T7947] dump_stack_lvl+0x100/0x190 [ 310.471366][ T7947] should_fail_ex.cold+0x5/0xa [ 310.471389][ T7947] should_failslab+0xc2/0x120 [ 310.471413][ T7947] __kmalloc_cache_noprof+0x91/0x6d0 [ 310.471430][ T7947] ? __might_fault+0xc5/0x140 [ 310.471445][ T7947] ? xdp_umem_create+0x4f/0x1200 [ 310.471469][ T7947] xdp_umem_create+0x4f/0x1200 [ 310.471495][ T7947] xsk_setsockopt+0x7d8/0xab0 [ 310.471514][ T7947] ? __pfx_xsk_setsockopt+0x10/0x10 [ 310.471532][ T7947] ? find_held_lock+0x2b/0x80 [ 310.471555][ T7947] ? __fget_files+0x215/0x3d0 [ 310.471581][ T7947] ? selinux_socket_setsockopt+0x6a/0x80 [ 310.471603][ T7947] ? __pfx_xsk_setsockopt+0x10/0x10 [ 310.471622][ T7947] do_sock_setsockopt+0xf3/0x1d0 [ 310.471644][ T7947] __sys_setsockopt+0x195/0x220 [ 310.471665][ T7947] __x64_sys_setsockopt+0xbd/0x160 [ 310.471679][ T7947] ? do_syscall_64+0xae/0x790 [ 310.471700][ T7947] ? lockdep_hardirqs_on+0x7d/0x110 [ 310.471722][ T7947] do_syscall_64+0x123/0x790 [ 310.471746][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.471763][ T7947] RIP: 0033:0x7f1b1899e559 [ 310.471777][ T7947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.471792][ T7947] RSP: 002b:00007f1b1984c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 310.471808][ T7947] RAX: ffffffffffffffda RBX: 00007f1b18c25fa0 RCX: 00007f1b1899e559 [ 310.471818][ T7947] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a [ 310.471828][ T7947] RBP: 00007f1b1984c090 R08: 000000000000001c R09: 0000000000000000 [ 310.471838][ T7947] R10: 000020000000ab00 R11: 0000000000000246 R12: 0000000000000001 [ 310.471847][ T7947] R13: 00007f1b18c26038 R14: 00007f1b18c25fa0 R15: 00007ffc2783c9d8 [ 310.471870][ T7947] [ 312.410329][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.410384][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.492649][ T5734] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 312.797261][ T5734] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 312.799181][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.799228][ T5734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.804830][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.804884][ T5734] usb 3-1: Product: syz [ 312.804943][ T5734] usb 3-1: Manufacturer: syz [ 312.804957][ T5734] usb 3-1: SerialNumber: syz [ 312.937452][ T31] audit: type=1400 audit(1792110176.533:692): avc: denied { read } for pid=7970 comm="syz.1.486" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 312.938533][ T31] audit: type=1400 audit(1792110176.533:693): avc: denied { open } for pid=7970 comm="syz.1.486" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 312.942936][ T31] audit: type=1400 audit(1792110176.533:694): avc: denied { write } for pid=7970 comm="syz.1.486" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 313.243269][ T5734] usb 3-1: 0:1 : does not exist [ 313.243565][ T5734] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 313.620344][ T5734] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 313.643227][ T5734] usb 3-1: USB disconnect, device number 18 [ 313.712114][ T7961] udevd[7961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.732960][ T7982] warning: `syz.3.488' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 313.733082][ T31] audit: type=1400 audit(1792110177.313:695): avc: denied { map } for pid=7978 comm="syz.3.488" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 313.733148][ T31] audit: type=1400 audit(1792110177.323:696): avc: denied { mount } for pid=7977 comm="syz.4.487" name="/" dev="autofs" ino=17537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 316.590904][ T31] audit: type=1400 audit(1792110179.973:697): avc: denied { write } for pid=7994 comm="syz.4.490" name="core" dev="configfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.785703][ T8005] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 316.876285][ T5734] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 316.977636][ T5741] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 317.027050][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 317.032965][ T5734] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 317.035919][ T5734] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 317.035944][ T5734] usb 3-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 317.035960][ T5734] usb 3-1: config 0 has no interface number 0 [ 317.035990][ T5734] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.061468][ T5910] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 317.102357][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.102383][ T5734] usb 3-1: Product: syz [ 317.102397][ T5734] usb 3-1: Manufacturer: syz [ 317.102410][ T5734] usb 3-1: SerialNumber: syz [ 317.108256][ T5734] usb 3-1: config 0 descriptor?? [ 317.126795][ T5741] usb 1-1: Using ep0 maxpacket: 8 [ 317.127337][ T5741] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 317.128422][ T5741] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 317.128445][ T5741] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.128471][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.142368][ T5741] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 317.153861][ T5734] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input5 [ 317.163499][ T5741] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 317.237651][ T5910] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 317.238970][ T5910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.239009][ T5910] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 317.239099][ T5910] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.242144][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.242180][ T5910] usb 2-1: Product: syz [ 317.242208][ T5910] usb 2-1: Manufacturer: syz [ 317.242221][ T5910] usb 2-1: SerialNumber: syz [ 422.339907][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 422.346878][ C1] rcu: 0-...!: (1 GPs behind) idle=620c/1/0x4000000000000000 softirq=28271/28272 fqs=0 [ 422.356594][ C1] rcu: (detected by 1, t=10502 jiffies, g=30373, q=183 ncpus=2) [ 422.364314][ C1] Sending NMI from CPU 1 to CPUs 0: [ 422.369515][ C0] NMI backtrace for cpu 0 [ 422.369530][ C0] CPU: 0 UID: 0 PID: 7961 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 422.369551][ C0] Tainted: [L]=SOFTLOCKUP [ 422.369556][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 422.369565][ C0] RIP: 0010:do_raw_spin_lock+0x139/0x260 [ 422.369590][ C0] Code: 28 00 00 00 00 e8 57 c3 98 00 be 04 00 00 00 48 8d 7c 24 28 e8 48 c3 98 00 8b 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 <0f> 85 93 00 00 00 48 89 ea 65 44 8b 35 5e c5 a5 13 48 b8 00 00 00 [ 422.369603][ C0] RSP: 0018:ffffc90000007df8 EFLAGS: 00000046 [ 422.369617][ C0] RAX: 0000000000000000 RBX: ffff8880b8228500 RCX: ffffffff81e7dab8 [ 422.369626][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007e20 [ 422.369635][ C0] RBP: ffff8880b8228508 R08: 0000000000000001 R09: fffff52000000fc4 [ 422.369645][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92000000fc0 [ 422.369654][ C0] R13: ffff8880b8228510 R14: ffff8880b8228640 R15: ffff8880b8228690 [ 422.369664][ C0] FS: 00007f73747de880(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 422.369679][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.369689][ C0] CR2: 00007f73736dc3a0 CR3: 000000005bce5000 CR4: 00000000003526f0 [ 422.369699][ C0] Call Trace: [ 422.369705][ C0] [ 422.369718][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.369740][ C0] __hrtimer_run_queues+0x1b7/0x9c0 [ 422.369768][ C0] ? rcu_is_watching+0x13/0xc0 [ 422.369802][ C0] hrtimer_interrupt+0x441/0xaa0 [ 422.369821][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 422.369840][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 422.369865][ C0] [ 422.369870][ C0] [ 422.369875][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.369890][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 422.369911][ C0] Code: 05 8f 1e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e6 5d 10 0f 82 c9 02 00 00 8b 35 3e 18 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 1e a6 13 0f 85 09 03 00 00 48 83 c4 [ 422.369923][ C0] RSP: 0018:ffffc900038074e0 EFLAGS: 00000206 [ 422.369935][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 422.369944][ C0] RDX: 0000000000000000 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 422.369952][ C0] RBP: ffffffff8fdec5e0 R08: 00000000497ff113 R09: 0000000000000007 [ 422.369961][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 422.369970][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.369984][ C0] ? unwind_next_frame+0x3be/0x2090 [ 422.370003][ C0] ? unwind_next_frame+0x3be/0x2090 [ 422.370021][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 422.370037][ C0] unwind_next_frame+0xd1/0x2090 [ 422.370054][ C0] ? unwind_next_frame+0xbd/0x2090 [ 422.370071][ C0] ? kasan_save_stack+0x30/0x50 [ 422.370091][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 422.370106][ C0] arch_stack_walk+0x94/0xf0 [ 422.370125][ C0] ? kasan_save_stack+0x30/0x50 [ 422.370144][ C0] stack_trace_save+0x8e/0xc0 [ 422.370157][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 422.370174][ C0] kasan_save_stack+0x30/0x50 [ 422.370190][ C0] ? kasan_save_stack+0x30/0x50 [ 422.370220][ C0] kasan_save_track+0x14/0x30 [ 422.370236][ C0] __kasan_slab_alloc+0x89/0x90 [ 422.370254][ C0] kmem_cache_alloc_lru_noprof+0x265/0x6a0 [ 422.370272][ C0] ? __d_alloc+0x35/0xa50 [ 422.370287][ C0] __d_alloc+0x35/0xa50 [ 422.370299][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 422.370314][ C0] d_alloc_parallel+0x105/0x14c0 [ 422.370338][ C0] ? lock_acquire+0x1d1/0x380 [ 422.370352][ C0] ? lookup_slow+0x42/0x70 [ 422.370366][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 422.370382][ C0] ? __pfx___might_resched+0x10/0x10 [ 422.370397][ C0] ? find_held_lock+0x2b/0x80 [ 422.370417][ C0] ? down_read+0x13b/0x4c0 [ 422.370429][ C0] ? __pfx_down_read+0x10/0x10 [ 422.370442][ C0] __lookup_slow+0x98/0x320 [ 422.370457][ C0] lookup_slow+0x50/0x70 [ 422.370471][ C0] path_lookupat+0x5e8/0xc40 [ 422.370489][ C0] filename_lookup+0x202/0x590 [ 422.370507][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 422.370531][ C0] ? strncpy_from_user+0x19d/0x2d0 [ 422.370554][ C0] do_readlinkat+0xd3/0x370 [ 422.370579][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 422.370601][ C0] __x64_sys_readlink+0x78/0xc0 [ 422.370614][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 422.370631][ C0] do_syscall_64+0x123/0x790 [ 422.370651][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.370664][ C0] RIP: 0033:0x7f73741153a7 [ 422.370676][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 422.370688][ C0] RSP: 002b:00007ffef9db05d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 422.370701][ C0] RAX: ffffffffffffffda RBX: 00007ffef9db0e20 RCX: 00007f73741153a7 [ 422.370710][ C0] RDX: 0000000000000400 RSI: 00007ffef9db09e0 RDI: 00007ffef9db05e0 [ 422.370719][ C0] RBP: 0000000000000200 R08: 0000564843371c29 R09: 0000000000000000 [ 422.370727][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffef9db05e0 [ 422.370735][ C0] R13: 00007ffef9db09e0 R14: 00007ffef9db1511 R15: 000056484336e00c [ 422.370750][ C0] [ 422.882820][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g30373 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 422.893836][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 422.903970][ C1] rcu: RCU grace-period kthread stack dump: [ 422.909863][ C1] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 422.923366][ C1] Call Trace: [ 422.926655][ C1] [ 422.929587][ C1] __schedule+0x1259/0x6920 [ 422.934178][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 422.939138][ C1] ? __pfx___schedule+0x10/0x10 [ 422.943982][ C1] ? find_held_lock+0x2b/0x80 [ 422.948782][ C1] ? schedule+0x225/0x2c0 [ 422.953111][ C1] schedule+0xdd/0x2c0 [ 422.957176][ C1] schedule_timeout+0x127/0x280 [ 422.962027][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 422.967412][ C1] ? __pfx_process_timeout+0x10/0x10 [ 422.972693][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.978497][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 422.984057][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 422.988909][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 422.994192][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 422.999126][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 423.004316][ C1] ? rcu_is_watching+0x13/0xc0 [ 423.009078][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.014882][ C1] rcu_gp_kthread+0x17a/0x220 [ 423.019552][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 423.024740][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.030546][ C1] ? __kthread_parkme+0x18f/0x230 [ 423.035567][ C1] ? kthread+0x13a/0x450 [ 423.039804][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 423.044995][ C1] kthread+0x373/0x450 [ 423.049148][ C1] ? __pfx_kthread+0x10/0x10 [ 423.053737][ C1] ret_from_fork+0x730/0xd60 [ 423.058334][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 423.063438][ C1] ? __switch_to+0x800/0x10f0 [ 423.068112][ C1] ? __pfx_kthread+0x10/0x10 [ 423.072699][ C1] ret_from_fork_asm+0x1a/0x30 [ 423.077468][ C1] [ 423.080475][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 423.086797][ C1] CPU: 1 UID: 0 PID: 8009 Comm: syz.3.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.097554][ C1] Tainted: [L]=SOFTLOCKUP [ 423.101864][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 423.111910][ C1] RIP: 0010:smp_call_function_many_cond+0x8f0/0x18c0 [ 423.118591][ C1] Code: 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 08 49 89 ce 83 e1 07 49 c1 ee 03 49 89 cd 49 01 c6 41 83 c5 03 e8 92 c4 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 ca 0d 00 00 8b 45 08 31 ff [ 423.138212][ C1] RSP: 0018:ffffc90003696dc8 EFLAGS: 00000246 [ 423.144291][ C1] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90006f52000 [ 423.152251][ C1] RDX: 0000000000080000 RSI: ffffffff81ff91fe RDI: ffff88803286a580 [ 423.160211][ C1] RBP: ffff8880b8243e20 R08: 0000000000000005 R09: 0000000000000000 [ 423.168173][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed100650d763 [ 423.176131][ C1] R13: 0000000000000003 R14: ffffed10170487c5 R15: 0000000000000001 [ 423.184092][ C1] FS: 00007fb23670f6c0(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 423.193021][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.199620][ C1] CR2: 00007ffef9daeae8 CR3: 000000007d9c9000 CR4: 00000000003526f0 [ 423.207600][ C1] Call Trace: [ 423.210891][ C1] [ 423.213823][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 423.219803][ C1] ? lock_acquire+0x1d1/0x380 [ 423.224473][ C1] ? __virt_addr_valid+0x161/0x430 [ 423.229591][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 423.235917][ C1] ? find_held_lock+0x2b/0x80 [ 423.240595][ C1] ? __virt_addr_valid+0x22a/0x430 [ 423.245696][ C1] ? __virt_addr_valid+0x22a/0x430 [ 423.250800][ C1] ? pfn_range_is_mapped+0xef/0x150 [ 423.256015][ C1] __change_page_attr_set_clr+0x1686/0x2da0 [ 423.261926][ C1] ? __pfx___change_page_attr_set_clr+0x10/0x10 [ 423.268261][ C1] ? lock_acquire+0x1d1/0x380 [ 423.272934][ C1] ? change_page_attr_set_clr+0x33d/0x10f0 [ 423.278739][ C1] ? _vm_unmap_aliases+0x433/0x630 [ 423.283862][ C1] change_page_attr_set_clr+0x354/0x10f0 [ 423.289495][ C1] ? pat_pagerange_is_ram+0xa6/0x140 [ 423.294772][ C1] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 423.300835][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 423.306900][ C1] ? memtype_reserve+0x15e/0x860 [ 423.311842][ C1] _set_pages_array+0x1ab/0x2c0 [ 423.316690][ C1] drm_gem_shmem_get_pages_locked+0x380/0x4b0 [ 423.322948][ C1] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 423.329535][ C1] ? __pfx___might_resched+0x10/0x10 [ 423.334905][ C1] drm_gem_shmem_mmap.part.0+0xe9/0x3c0 [ 423.340464][ C1] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 423.346611][ C1] drm_gem_shmem_object_mmap+0x146/0x1b0 [ 423.352242][ C1] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 423.358392][ C1] drm_gem_mmap_obj+0x1b5/0x520 [ 423.363246][ C1] drm_gem_mmap+0x103/0x1e0 [ 423.367753][ C1] __mmap_region+0x1527/0x32e0 [ 423.372517][ C1] ? __pfx___mmap_region+0x10/0x10 [ 423.377637][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 423.382579][ C1] ? do_raw_spin_lock+0x128/0x260 [ 423.387599][ C1] ? debug_object_activate+0x343/0x4b0 [ 423.393069][ C1] ? debug_object_activate+0x343/0x4b0 [ 423.398543][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 423.404359][ C1] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 423.410640][ C1] ? mm_get_unmapped_area_vmaflags+0x147/0x1d0 [ 423.416791][ C1] ? __pfx_mm_get_unmapped_area_vmaflags+0x10/0x10 [ 423.423295][ C1] mmap_region+0x3db/0x6d0 [ 423.427710][ C1] ? __pfx_mmap_region+0x10/0x10 [ 423.432638][ C1] ? shmem_mapping+0xd/0x50 [ 423.437148][ C1] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 423.443045][ C1] ? bpf_lsm_mmap_addr+0x9/0x30 [ 423.447923][ C1] ? security_mmap_addr+0x71/0x1e0 [ 423.453058][ C1] ? __get_unmapped_area+0x255/0x3e0 [ 423.458362][ C1] do_mmap+0x12c7/0x1c30 [ 423.462624][ C1] ? lock_acquire+0x1d1/0x380 [ 423.467303][ C1] ? __pfx_do_mmap+0x10/0x10 [ 423.471893][ C1] ? ima_file_mmap+0x1bb/0x1e0 [ 423.476660][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 423.482297][ C1] vm_mmap_pgoff+0x28d/0x470 [ 423.486890][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 423.491995][ C1] ? __fget_files+0x215/0x3d0 [ 423.496677][ C1] ? __fget_files+0x21f/0x3d0 [ 423.501355][ C1] ksys_mmap_pgoff+0x3cb/0x610 [ 423.506116][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 423.511052][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 423.516351][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 423.521637][ C1] ? selinux_file_ioctl+0xb6/0x290 [ 423.526753][ C1] __x64_sys_mmap+0x125/0x190 [ 423.531442][ C1] do_syscall_64+0x123/0x790 [ 423.536033][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.541916][ C1] RIP: 0033:0x7fb23579e559 [ 423.546342][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.565951][ C1] RSP: 002b:00007fb23670f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 423.574357][ C1] RAX: ffffffffffffffda RBX: 00007fb235a25fa0 RCX: 00007fb23579e559 [ 423.582670][ C1] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 00002000003e9000 [ 423.590637][ C1] RBP: 00007fb2358358b0 R08: 0000000000000004 R09: 0000000100000000 [ 423.598597][ C1] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 423.606557][ C1] R13: 00007fb235a26038 R14: 00007fb235a25fa0 R15: 00007ffe03339198 [ 423.614536][ C1]