last executing test programs: 21.740164585s ago: executing program 4 (id=538): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0), 0x6e) sendmmsg$unix(r5, &(0x7f0000002140)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)="3fcd1eb5e6802e746fceca9c30407506cfc5dc70581f4cffaa33b0c564468a55ef3457b46f7f10a4bcd54d9bc2fc27f5dfe140b326ee7ed0fc1dc8bd9037523c679ad8c055aa4b01060b929ed0de3c70e3b610050accbe88367b55f5c910a2b46aeb73a1af6eb24d5df4c887d7fb9759e716c7ae07c06aedba01a375f24f76503187b980bb8a41666f3a7ffe0e8e1ae3c7bfc2170ad719ff7f993616c4f0c7df82064bd2eb730b2334e63a517e89c8b12a12a84c4c1aceaa483b42add29a84cf031504a866", 0xc5}, {&(0x7f0000000680)="fec524c58ae7fd37a117eccc48a5666bbe", 0x11}], 0x2, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r1]}}], 0x20, 0x40}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000007c0)="a5bfc962984bf92462158429b38893e5f1cccfadd1559f4775263304ea2525165d6420e7a892b9a3fdda6bffd0637864a222ad17cf00d04020fb068865feedc5e05a2ae880642ac6e47da959bb00a152b9055fbc9c61a0eab67e05266f89bccd12b7971fa2eaeef9f743d1aa84eaacc0c2c3ce623bdd34b9bf73aef233d7d2b5d42806bd19cc542df61575f3b22668b5a33dc85b7b48b4a5afe39bf1594d3dbc912e2f93798a7956e3ef67f196f61f4d0e3f21624e8bd13be3440fb7888c1a03ecb5dcf8a567aa74beed6a8681c44e3efabb22d6c356", 0xd6}, {&(0x7f00000008c0)="c7ca2454cdb044b887f3225ecce03a94be0083ae52ad41c8bd3f18e5d7d79a2d1ab1b196dbcac346c0902f3fceb6b78bc0ce3052a84acb932c86b38d870263a33c7543e2c38d10ddc223a695fdf936d50462357e384131a5c68b74b164db38388a2b3e82c16829d7dcca48758e89072ed3", 0x71}, {&(0x7f0000000940)="41ce9a1ef10dc7d05e26807e73b6ff1efbcdbf079f868e300b2f6a87e6be", 0x1e}, {&(0x7f0000000980)="4f983d6ad7e31f4d1d9ebf5c895cff731f03743243df07f7b382548270d6e812b81368fb17848e15ea1dea874dc82f1ac14075f8e7135c8154474480c2d7", 0x3e}], 0x4, &(0x7f0000002300)=[@rights={{0x1c, 0x1, 0x1, [r0, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r5, r5, r2, r5, r5, r4]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r5, r2, r2, r0, r1, r1, r0, r5]}}], 0xe0, 0x8010}}, {{&(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000a00)="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", 0xfc}, {&(0x7f0000000e80)="81b07ee255dc0528aaf3f069e1e084fa7287d203e4511129a5a568de1b28a1b09ef06bbfa068df65a83ed92917a46ff58a7b5ab3f60f395a425293fe049690741acd63e58fa467f3f183c4d370b1b54981dd3ddbeaf6a968599c7958f7145535d7999c27e06567bac17e48948536f58d72233c3fa5fc5878e7b129d309c980dee82c9a6e4201391dc136e4d3ec37939aba9b7873879c6a7ff604c2f145a0156d25e709c62d56a8195b96a1749ba86075ce9e3271e02fd1e77922b1bb9063", 0xbe}], 0x2, &(0x7f0000001000)=[@rights={{0x24, 0x1, 0x1, [r2, r2, r4, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}], 0xa8, 0x4000}}], 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d6f59917020686173683d626c616b6532732d3232342d67650000000000000000000000000000000000000000000900"/65], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000180)=' hash=', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001f80)=r9, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 19.703542238s ago: executing program 4 (id=545): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x10, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000012a000/0x2000)=nil, &(0x7f000012a000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000041d000/0x4000)=nil, &(0x7f0000217000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003d1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400), 0x0, r2}, 0x68) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62, 0x0, 0xffffffffffffffff}, {0x200000, 0xa9, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1}, [@user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in=@rand_addr=0x64010101, 0x0, 0x2}}]}, 0xe4}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="e00000001500020026bd7000fedbdf25ff010000000000020000000000000000000000004e2400044e2400070200202032000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="b56b6e00000000002400090000000000000000000400000000000000000700000000000002000000000000002c001300ac1e0101000000000000000000000000ac1414aa000000000000000000000000000000000a0000000c000f00010000000000000034001700060000002cbd700026bd7000030000002cbd7000ff0f00008000000002000000060000000600000040000000fb770000"], 0xe0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x2f, "0c473547dde99a3e2030fc0754573d890e901492fde6e766c5cf4f4d831e2d924557b43ba33f198eec7f692c5abef19da09c557772653bbdcc5c378d48b718a30adc3a326d56ff054bc1b7f7aca17f4a62e755b09c0c938c650dd906d460fe07a78f364e171acf07a5acea609ec9e33ff6afcf915d9b9a05084ea7661f8e5f43"}) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0f22e30f3566b842000f00d8b805000000f9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) 15.235474297s ago: executing program 4 (id=553): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000084081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x34}}, 0x24008080) 14.14938014s ago: executing program 4 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x157) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000001e40)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x300, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) 11.748445261s ago: executing program 3 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r2}) r4 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x200a7a) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_procfs(r3, &(0x7f0000000380)='net/connector\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 10.037462137s ago: executing program 3 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000040)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000300)={0xd8cbab7520ef4fd0, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) dup(r1) 9.983516292s ago: executing program 1 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000040)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000300)={0xd8cbab7520ef4fd0, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) dup(r1) 9.12002808s ago: executing program 0 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fff0000}]}) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001300)=""/220, 0xdc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r5, @ANYBLOB="050033000200000008003200"], 0x44}}, 0x80) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 8.96311475s ago: executing program 1 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_open(0x0, 0x42, 0x174, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20) setuid(0xee00) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB], 0x50) 8.522760701s ago: executing program 2 (id=576): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0xe, &(0x7f0000000800)=[{0x2, '\x00', @st={0x4, [{0x1, @uvalue=0x2}, {0x3}, {0x0, @svalue=0x7fff}, {0x2, @uvalue=0x100000001}]}, 0x95}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x9520388457b6d5a6}, 0x28) open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400", @ANYBLOB="01032abd7000fddbdf2505040000"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x350, 0x10000) ptrace$pokeuser(0x6, r2, 0x358, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(0xffffffffffffffff, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x7c9) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x6}]}, 0x24}}, 0x0) 7.502881974s ago: executing program 1 (id=577): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000084081, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x34}}, 0x24008080) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 7.451173311s ago: executing program 0 (id=578): r0 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) syz_genetlink_get_family_id$team(0xfffffffffffffffd, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x7) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) pread64(r5, 0x0, 0x0, 0x6) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) fcntl$dupfd(r6, 0x0, r0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="0f20c035100000000f22c0f30fc7fb0f01c366420f3a0bfc2266ba6100b8cf5d0000ef430f32362e0fc4d8c3660f382a2e0f8fcf612753", 0x37}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7.138886357s ago: executing program 3 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(r3, &(0x7f0000000380)='net/connector\x00') bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 5.617562992s ago: executing program 0 (id=580): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0xa0000000, 0x0, r0}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9aa8, 0x400, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x80, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.524934581s ago: executing program 4 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 4.817708172s ago: executing program 3 (id=582): semtimedop(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x58) semop(0x0, &(0x7f0000000000), 0x1) 4.606579358s ago: executing program 1 (id=583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) userfaultfd(0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x208080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4.438173825s ago: executing program 2 (id=584): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) 3.959505763s ago: executing program 3 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r2}) r3 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 3.936334596s ago: executing program 2 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) shmat(0x0, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r1}) r3 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_procfs(r2, &(0x7f0000000380)='net/connector\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 3.308367187s ago: executing program 1 (id=587): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0xa0000000, 0x0, r0}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000003b00010000000000000000000a0000002500"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x40) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9aa8, 0x400, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x80, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.217286144s ago: executing program 4 (id=588): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x2, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x80, 0xf, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$uac2(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async, rerun: 32) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x20, 0x9, 0x1, "d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x0, 0x137, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x3, 0x1, 0xfe, 0x60, 0x7f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x25, 0x30, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x65, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x307, 0x1, 0x6, 0x3, 0x4, 0x1, 0x8, 0x5}, @mixer_unit={0xb, 0x24, 0x5, 0x3, 0x3, "56db73de2334"}, @extension_unit={0x19, 0x24, 0xa, 0x4, 0x2, [0x2, 0x3, 0x3, 0x0, 0x2]}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x100, 0x5, 0x2, 0x57, 0x5, 0x5, 0x1ff, 0xfff7}, @feature_unit={0x11, 0x24, 0x7, 0x5, 0x6, [0xe, 0x10, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0xa9, 0xfc, "1f00a9", "870ac5"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x10, 0x80, "c6aa24d3"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x10, 0x4, 0x6, 0x8}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd7, 0x2, 0x8, 0xd}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x3, 0x1, {0xa, 0x25, 0x25, 0x6, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0xf7, 0x3, "f8a51d58c9dc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x2, 0x0, 0x4, "", "74eccf"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0x5, 0x6, 0x4, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0xaf}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x0, 0x2, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x2, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xa4, 0x9, 0xff, 0xff, 0x6}, 0x13c, &(0x7f00000001c0)={0x5, 0xf, 0x13c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2a, 0x2a, 0x7fff}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x3, 0xff00, 0x8, [0xff00c0, 0xfe7f00, 0xc00f, 0xc0, 0xc000]}, @generic={0xe2, 0x10, 0x1, "e425a1a0183ed4486c6bb914503b59e9027afbb86fafa1b528e049f11e19069d8311577a37f633c619fe27dcc7e79de7f56da387b0f920a6bcbfaa132526a919cf4a8ef4be2b97050e388ed7c60aa131264aac33d65cf2d2641b39942648d04fafd35e07a4191760c1210007392544f74158e108d082edcd35240cdfdaff2620cb25adc19f694d225d9475fb36de16f8453f7af302a6c0a082f14498396d121c5efcfe7d3c5e6a85d409080e8d0406e702d81f39848fb5cefc5158c551bad27caef725c3733f3f70379add5fe5fdbf67762f1a0387a22f5b9656a839184ca8"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x1, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0x9, 0xf00, 0x2, [0xffc0, 0x3f30, 0x0, 0xff0000, 0xff3f6f, 0xff3f3f]}]}, 0x7, [{0xb, &(0x7f0000000300)=@string={0xb, 0x3, "a9b272f955557c3fe2"}}, {0xb5, &(0x7f0000000380)=@string={0xb5, 0x3, "52214f3da72b1906e6944e9e1cb8d72b723941f15afe84bb1f9faf39f2bfbfbc20b81b1f39e036fe1a9093fe2fe1850dcd1b0702fb7ed3f2208db9e80e4706c3d9ddc8621caf28f7bc86dacb5e7bc39f2e0cbe868cb7eff795f1f8a4d3fad36bde6392c1d8581ff1335eda19a01bc3813bafbb6a1698d858bb5f1403ef16aae021c5e889029d225d228aa59baa0347fce9cc7c699b233dd7bd0fe169ee3a0ddeee8ba9d6602ac97c4a666db807aed473d7f4b1"}}, {0xe6, &(0x7f0000000540)=@string={0xe6, 0x3, "a1ac3f33310c1e001324f95e0255bba8df767f7ca4154d87db78e3386e679d40662d6ebd1523372cf0eb275b402928956495941210835f14e939bc69c571c2acb65b88fff8514b715bc0386122229a0b7e5d89d47a486dff7d6479c9759d5ee01fe5bb2b660455be20e0dcc8a2541e2a77de4ac25f1869d98c6a4610dd65773c0c531f6bc43982b63318c83ad85871a5563cc74e0f56185572ac3bd00736c689b8de86e20583bfbbe187eec7570ea4bd2dbafdd87fd320f3360311546042a5414fc8d4d54f7f31bcc67a29ae6cbd5879dbada3ad3d5c28c73f1dc366c66107a8312b92b3"}}, {0x1f, &(0x7f0000000640)=@string={0x1f, 0x3, "c2ebb5ed2ad80cd30e68a7baa80c898de6b06d49a0693ab4e444cc9e05"}}, {0x82, &(0x7f0000000680)=@string={0x82, 0x3, "b473dec3a020f855784b7db5c82a9aac5c73c004f163ca2ac543fcd5fe4b68e1e8c54a7dabc09aeae014b6ddd08ea4518dbcb7e0c226ffa26ce967ad0883eac46d708cba8c5df5148062cc4734b3e87ca1f4b20afe6cd3e70ee340698e607c5ae3f2b10afe9c2bf15c5e013014ae4d788392e354944144047054021d7cf45517"}}, {0xda, &(0x7f0000000740)=@string={0xda, 0x3, "0af8fa345d4c92c8f3ddca3b342eaeeee53997f6b570506b77c2eae2fb203cad1d077ca29adcaf31f4227949c5dbc9c45dddf3ef973e8f40ac52234a349640c0d2e2c603b7d48cffd8ce7d252d3faf79069596b1f5432002a40880e015ef58c32f0cf7f12eec4f393bbd48776ddd226efdccb23ca18d14ebed1fa889c569919d988ffde5e76286a9eba670254d4c367fff35fb448ef65ed78d1224affa961d267c0866d5c98af9becbc7d27c0c02213abba203d91a2194cc5c387bb2b786332a2994b7a91abedb84fd34d60001b6165b399c28468c81cd5b"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x9, "7098615c0db74dfa1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.816020845s ago: executing program 2 (id=589): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r4) r5 = getpgrp(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000004e80)='./file0\x00', &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fstat(0xffffffffffffffff, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000004fc0)='./file0\x00', &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000ad200000000000000797a31000000000c000240000000000000000520000000080a010300000000000000000a0000030900010073797a3100000000140000001100010000000000000000000500000a"], 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000005080), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000005200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400c0c0}}, {{&(0x7f0000002740)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002a40)=[{&(0x7f00000027c0)="eff0f747062b5300057600b1a1822bb645cfb94503c877c57b090cc0ea661e04f64e38062dbf2fe08983a1cab863485702090afe25b7f141fcda68a269339227c4fe7a4c30423aaf13266e29dccf2baec63ee36c4ff7f3aa69113bf613c490c455841bf3318ad214c42d25eae87d3d9adcdb27627de954acb0b7b8abd235bfdb428b0cc8dfc9a68a4d77410c6306005cdc3d98067ae584716a2039808101ba1c6b0f85c5f5aa37d33f7ffc88c246c57061587d09a8e986e2", 0xb8}, {&(0x7f0000002880)="b1b9261f6dc5f35a2bb9f110e20adab17650cc01c143abf1da97af45a944b1b86edc9ff619c8841f69c7c156f316f1d780a80d481b1ba1ec07923948e27fe3d151d1c481126583f357da57edb2ed9b573c106e5ffc8f2546e6aa725eed4b0a797b0d5c20b0481f65f48716bff2aa372ce1059e6205cce9d814", 0x79}, {&(0x7f0000002900)="e67d13fdd434ebcf39b60f719730b13c6f8fde5266a122d279b8349622632d6a6a5f34", 0x23}, {&(0x7f0000002940)="383ddee80f5e3eefbc5bdcc91626224feb875e030042625290dbcf7668ac965ee0a466ae3332ccaab1e7dd7c0cc73c147f76ad9edcbe459df56e123431a7e375eac57ea5c81ff1a844b108d8388544cab95b799fe778aa966809cb6256adc073350b4300d627d58cce73666647ed77d3c53cd12072473773c0db379a410975c4bf171b2c1dde284de89c782a93ebaaa1b52184ebcef9e73a0ec6847d", 0x9c}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001c0000000000dfff0000000002000000b84ad0ec504cbdd260cc1977d973e0b09f49f75b1fa3fbb330734c997d383cd25ed08a7e91dafd06dbf9b4e0ba0cc02474b12d934c57a360ad2d68a21577aee7d1418c16ebf90d5941b786929a57a087ed1a152ee12ecac75c8691f88392bad02b9056f48871f3b8", @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x48001}}], 0x2, 0x7ee2e62fbcb7154d) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0x208e24b) 2.7440153s ago: executing program 0 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(0x0, &(0x7f0000000380)='net/connector\x00') bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 1.601165606s ago: executing program 2 (id=591): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x82801, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x4, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x141080) r3 = dup3(r2, r0, 0x80000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) timerfd_settime(r5, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r5, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x3ffffe, 0x2, 0x1000000000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x20000010) read(r0, &(0x7f00000005c0)=""/225, 0xe1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x3, 0xfffffffc, 0xfffff800, 0xfbdfffd3, 0x1, "65bd219f0000b3f800", 0x100009, 0x7fff}) write$9p(r1, &(0x7f0000000200)="cb18c6c58e1e5a06c06ddee7a565e85b608dff25f2", 0x15) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001380)=""/4083, 0xff3}], 0x1, 0x178, 0x402) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb00"/400], 0x190) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000053a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="b14408000003030102000000007736418721c90bdd0b940000000005000801086103400e0000000c000200fffffffd0000000108010340000000090c0002000000000000b89c6de0c1fcc127b82682cd0fd48f99"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000004001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e2229a8ce80cbe7550569362173775877ef7b806038fae2ed4a23aa8c53dd825b737ffe85ca8d8c620a5c82414d86968a60cb128bb7c8bde19597816e983cf4262a2454553da9482b4f77e367f313f3533b055c879d260c3d666f8a8203bc2eae09fe333abb0562fe6a669028b8a10906af223452c5a0a5a5e65121b2fc1f68607836d818d2dbc877b2de48173dd77e83b05ea73f250310d1bbd045ac31", @ANYRES8=r6, @ANYRES32=0x41424344, @ANYBLOB="60c297140000000000000000"], 0x0) 1.593251486s ago: executing program 0 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r1}) r2 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 1.422201471s ago: executing program 1 (id=593): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r0, 0xc008644e, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x3447}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e5445240140000076a8a20122e4dbbe000000000000000000000000000064ac038d0000000000000000000000000000000000000000002000"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x34, 0x0, &(0x7f00000004c0)="000000000000000000000000083345000028000000004006dfff7e0000017d000001c1f532659c07d243783c9422f16c779e1416", 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000700000013000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r6}, 0xc) listen(r1, 0x800) accept4(r1, 0x0, 0x0, 0x80000) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r8, 0x18000000000002a0, 0xfe2a, 0x1200, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 980.403385ms ago: executing program 0 (id=594): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1c8}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r3, &(0x7f0000000180)=""/145, 0x91) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019240)='net/vlan/config\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x8, 0x1000000000) keyctl$revoke(0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r2, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x1}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0xdf9, &(0x7f00000000c0)}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={r7, 0x2, 0x2, [0x7d7c, 0x3a]}, &(0x7f00000000c0)=0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 694.251689ms ago: executing program 2 (id=595): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x1, 0x70bd27, 0x800, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000091) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_setup(0x67d7, &(0x7f0000000180)={0x0, 0x7b30, 0x10, 0x1, 0x21f}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000340)) syz_ublk_setup_io_uring(0x1d09, &(0x7f0000000380)={0x0, 0x886e, 0xa0000, 0x1, 0xd1}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x6818, 0x800, 0x0, 0x1a2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e44, 0x8808, 0x3, 0x105}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5cb8, 0x800, 0x3, 0x2bd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8d9, 0x1000, 0x0, 0x1ce}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf678, 0x8, 0x0, 0xd6}}], 0x4, &(0x7f0000001900)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x3, 0x170, 0x0, &(0x7f0000000900)=@buf_1k="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"}}, &(0x7f0000001980)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001a00)={0x2e, 0x5a, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000019c0)=@any_dev={0x1, 0x5c9, 0x0, 0x0, 0x1000, 0x6, 0xffffffffffffffff, 0x0, 0xc}}}, &(0x7f0000001a80)) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000001cc0)={0x2e, 0x8, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001c80)=@new_dev={0x1, 0xdc3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x59}}}, &(0x7f0000001d40)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000200)={&(0x7f00000002c0)=[{0xff, 0x8009, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) 0s ago: executing program 3 (id=596): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) kernel console output (not intermixed with test programs): omm="syz.1.69" path="socket:[9760]" dev="sockfs" ino=9760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.546151][ T31] audit: type=1326 audit(1700000013.749:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.0.72" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb7f9e159 code=0x7ffc0000 [ 101.546866][ T31] audit: type=1326 audit(1700000013.749:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.0.72" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb7f9e159 code=0x7ffc0000 [ 101.612475][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 101.615418][ T6052] syz_tun: Device is already in use. [ 102.832487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.927540][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 103.532844][ T6064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.832099][ T5606] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.912119][ T3216] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 103.982093][ T5606] usb 4-1: Using ep0 maxpacket: 16 [ 103.982981][ T5606] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.983884][ T5606] usb 4-1: config index 0 descriptor too short (expected 548, got 36) [ 103.983913][ T5606] usb 4-1: config 255 has an invalid interface number: 0 but max is -1 [ 103.983933][ T5606] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 103.983973][ T5606] usb 4-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.983997][ T5606] usb 4-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.984047][ T5606] usb 4-1: config 255 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.984967][ T5606] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 103.984988][ T5606] usb 4-1: Manufacturer: syz [ 104.068627][ T3216] usb 2-1: device descriptor read/64, error -71 [ 104.092363][ T5606] usbhid 4-1:255.0: fixing wrong optional hid class descriptors count [ 104.092384][ T5606] usbhid 4-1:255.0: can't add hid device: -22 [ 104.092528][ T5606] usbhid 4-1:255.0: probe with driver usbhid failed with error -22 [ 104.322791][ T3216] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 104.452043][ T3216] usb 2-1: device descriptor read/64, error -71 [ 104.547951][ T9] usb 4-1: USB disconnect, device number 7 [ 104.672412][ T3216] usb usb2-port1: attempt power cycle [ 104.748753][ T6085] netlink: 'syz.0.78': attribute type 10 has an invalid length. [ 105.042221][ T3216] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 105.127686][ T3216] usb 2-1: device descriptor read/8, error -71 [ 105.362370][ T3216] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 105.382716][ T3216] usb 2-1: device descriptor read/8, error -71 [ 105.518044][ T3216] usb usb2-port1: unable to enumerate USB device [ 106.412707][ T6108] 9p: Bad value for 'wfdno' [ 107.225895][ T31] kauditd_printk_skb: 119 callbacks suppressed [ 107.225913][ T31] audit: type=1400 audit(1700000019.429:421): avc: denied { read } for pid=6099 comm="syz.4.82" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.226767][ T31] audit: type=1400 audit(1700000019.429:422): avc: denied { open } for pid=6099 comm="syz.4.82" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.287370][ T31] audit: type=1400 audit(1700000019.469:423): avc: denied { ioctl } for pid=6099 comm="syz.4.82" path="socket:[9877]" dev="sockfs" ino=9877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.287419][ T31] audit: type=1400 audit(1700000019.469:424): avc: denied { bind } for pid=6099 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.952498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.502437][ T6132] jffs2: notice: (6132) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 108.977170][ T31] audit: type=1400 audit(1700000021.179:425): avc: denied { setopt } for pid=6121 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.978043][ T6136] syz.0.89 (6136): attempted to duplicate a private mapping with mremap. This is not supported. [ 110.145960][ T6146] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 110.168290][ T6146] syz_tun: entered promiscuous mode [ 110.202921][ T6146] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.275535][ T31] audit: type=1400 audit(1700000022.459:426): avc: denied { create } for pid=6147 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.334084][ T31] audit: type=1400 audit(1700000022.539:427): avc: denied { prog_load } for pid=6152 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.496563][ T31] audit: type=1400 audit(1700000022.699:428): avc: denied { ioctl } for pid=6147 comm="syz.3.92" path="socket:[10644]" dev="sockfs" ino=10644 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.553163][ T31] audit: type=1400 audit(1700000022.759:429): avc: denied { read write } for pid=6160 comm="syz.2.98" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.553867][ T31] audit: type=1400 audit(1700000022.759:430): avc: denied { open } for pid=6160 comm="syz.2.98" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.684726][ T6158] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 110.793676][ T5827] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 110.943432][ T5827] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.945365][ T5827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 110.945408][ T5827] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 110.945433][ T5827] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 110.948562][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.948584][ T5827] usb 3-1: Product: syz [ 110.948599][ T5827] usb 3-1: Manufacturer: syz [ 110.948614][ T5827] usb 3-1: SerialNumber: syz [ 111.025516][ T6161] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.315916][ T6181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.316019][ T6181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.434533][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 112.742186][ T5615] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 112.742230][ T5615] Bluetooth: hci0: command 0x206a tx timeout [ 112.931161][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 113.525320][ T5827] cdc_ncm 3-1:1.0: bind() failure [ 113.530048][ T5827] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 113.530090][ T5827] cdc_ncm 3-1:1.1: bind() failure [ 113.553751][ T5827] usb 3-1: USB disconnect, device number 3 [ 113.817326][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 113.817361][ T31] audit: type=1400 audit(1700000026.019:437): avc: denied { setopt } for pid=6190 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.871066][ T6194] binfmt_misc: register: failed to install interpreter ./file2 [ 113.885163][ T6194] jffs2: notice: (6194) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 113.959471][ T31] audit: type=1400 audit(1700000026.159:438): avc: denied { map_read map_write } for pid=6190 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.411506][ T6206] jffs2: notice: (6206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 115.817603][ T31] audit: type=1400 audit(1700000028.019:439): avc: denied { mount } for pid=6212 comm="syz.2.114" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 115.992222][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.006087][ T31] audit: type=1400 audit(1700000028.209:440): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 116.046846][ T6215] No buffer was provided with the request [ 116.099919][ T6218] Zero length message leads to an empty skb [ 116.328447][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 116.382528][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.382550][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.420898][ T31] audit: type=1400 audit(1700000028.619:441): avc: denied { mount } for pid=6219 comm="syz.0.117" name="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.453205][ T31] audit: type=1400 audit(1700000028.629:442): avc: denied { mounton } for pid=6219 comm="syz.0.117" path="/23/my_configfs" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.471879][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 116.471905][ T9] usb 2-1: Product: syz [ 116.471920][ T9] usb 2-1: Manufacturer: syz [ 116.484728][ T9] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 116.923811][ T31] audit: type=1400 audit(1700000028.749:444): avc: denied { search } for pid=6219 comm="syz.0.117" name="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.923845][ T31] audit: type=1400 audit(1700000028.749:443): avc: denied { search } for pid=6219 comm="syz.0.117" name="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.923882][ T31] audit: type=1400 audit(1700000028.749:446): avc: denied { search } for pid=6219 comm="syz.0.117" name="usb_gadget" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.923904][ T31] audit: type=1400 audit(1700000028.749:445): avc: denied { search } for pid=6219 comm="syz.0.117" name="usb_gadget" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.256194][ T6234] jffs2: notice: (6234) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 118.602139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.467424][ T6245] binfmt_misc: register: failed to install interpreter ./file2 [ 119.681050][ T6248] jffs2: notice: (6248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 120.113894][ T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 120.782455][ T9] usb 2-1: USB disconnect, device number 7 [ 120.811167][ T9] mos7840 2-1:1.0: device disconnected [ 121.137661][ T6259] jffs2: notice: (6259) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 121.202133][ T191] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.242137][ T1811] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 121.382837][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.412152][ T191] usb 3-1: Using ep0 maxpacket: 8 [ 121.419518][ T191] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.435708][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.435734][ T191] usb 3-1: Product: syz [ 121.435750][ T191] usb 3-1: Manufacturer: syz [ 121.435765][ T191] usb 3-1: SerialNumber: syz [ 121.446254][ T191] usb 3-1: config 0 descriptor?? [ 121.493076][ T1811] usb 4-1: Using ep0 maxpacket: 8 [ 121.493924][ T1811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.499735][ T1811] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 121.499781][ T1811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 121.499836][ T1811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.499860][ T1811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.499883][ T1811] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.499921][ T1811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.542842][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 121.557168][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.557198][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.572391][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.572416][ T9] usb 2-1: Product: syz [ 121.572431][ T9] usb 2-1: Manufacturer: syz [ 121.634502][ T9] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 121.670421][ T191] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.726514][ T1811] usb 4-1: GET_CAPABILITIES returned 0 [ 121.726583][ T1811] usbtmc 4-1:16.0: can't read capabilities [ 121.934542][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 121.934559][ T31] audit: type=1400 audit(1700000034.139:450): avc: denied { write } for pid=6253 comm="syz.3.126" name="usbtmc0" dev="devtmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.937909][ T6255] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 121.938680][ T31] audit: type=1400 audit(1700000034.139:451): avc: denied { read append } for pid=6253 comm="syz.3.126" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.938957][ T31] audit: type=1400 audit(1700000034.139:452): avc: denied { ioctl open } for pid=6253 comm="syz.3.126" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.939048][ T6255] random: crng reseeded on system resumption [ 122.082095][ T31] audit: type=1400 audit(1700000034.279:453): avc: denied { mount } for pid=6251 comm="syz.2.123" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 122.118687][ T31] audit: type=1400 audit(1700000034.319:454): avc: denied { bind } for pid=6251 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.141558][ T31] audit: type=1400 audit(1700000034.329:455): avc: denied { listen } for pid=6251 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.161446][ T31] audit: type=1400 audit(1700000034.349:456): avc: denied { write } for pid=6251 comm="syz.2.123" path="socket:[10936]" dev="sockfs" ino=10936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.195361][ T31] audit: type=1400 audit(1700000034.399:457): avc: denied { accept } for pid=6251 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.221698][ T31] audit: type=1400 audit(1700000034.409:458): avc: denied { read } for pid=6251 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.837723][ T6275] binfmt_misc: register: failed to install interpreter ./file2 [ 122.846301][ T6275] jffs2: notice: (6275) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 122.869792][ T31] audit: type=1400 audit(1700000035.069:459): avc: denied { write } for pid=6274 comm="syz.4.124" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.015760][ T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 123.038850][ T9] usb 2-1: USB disconnect, device number 8 [ 123.054276][ T9] mos7840 2-1:1.0: device disconnected [ 123.126275][ T6280] netlink: 'syz.0.132': attribute type 11 has an invalid length. [ 123.211457][ T6282] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.211678][ T6282] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 123.399858][ T191] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 123.404671][ T191] usb 3-1: USB disconnect, device number 4 [ 123.436162][ T984] usb 4-1: USB disconnect, device number 8 [ 123.913970][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 125.255335][ T6294] netlink: 'syz.1.137': attribute type 10 has an invalid length. [ 125.581775][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 127.969673][ T6314] jffs2: notice: (6314) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 128.896520][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.143'. [ 129.568544][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 129.568565][ T31] audit: type=1400 audit(1700000041.759:461): avc: denied { create } for pid=6323 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.544288][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.544339][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.761087][ T31] audit: type=1400 audit(1700000044.959:462): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.115887][ T31] audit: type=1400 audit(1700000045.319:463): avc: denied { write } for pid=6363 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.149004][ T31] audit: type=1400 audit(1700000045.349:464): avc: denied { create } for pid=6365 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.213697][ T31] audit: type=1326 audit(1700000045.419:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.155" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe82bd9e159 code=0x0 [ 133.274301][ T31] audit: type=1400 audit(1700000045.479:466): avc: denied { write } for pid=6369 comm="syz.0.149" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.274647][ T31] audit: type=1400 audit(1700000045.479:467): avc: denied { open } for pid=6369 comm="syz.0.149" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.277282][ T31] audit: type=1400 audit(1700000045.479:468): avc: denied { ioctl } for pid=6369 comm="syz.0.149" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.278356][ T31] audit: type=1400 audit(1700000045.479:469): avc: denied { allowed } for pid=6369 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.280601][ T31] audit: type=1400 audit(1700000045.479:470): avc: denied { setopt } for pid=6365 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.826680][ T1810] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.852222][ T191] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.989066][ T1810] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 135.990032][ T1810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.990074][ T1810] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.027485][ T1810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.027511][ T1810] usb 3-1: Product: syz [ 136.027525][ T1810] usb 3-1: Manufacturer: syz [ 136.027539][ T1810] usb 3-1: SerialNumber: syz [ 136.050081][ T191] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 136.066050][ T191] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 136.066088][ T191] usb 1-1: config 2 has no interface number 0 [ 136.066135][ T191] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 136.066160][ T191] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 136.066183][ T191] usb 1-1: config 2 interface 43 has no altsetting 0 [ 136.116417][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.116444][ T191] usb 1-1: Product: syz [ 136.116458][ T191] usb 1-1: Manufacturer: syz [ 136.116472][ T191] usb 1-1: SerialNumber: syz [ 136.129904][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 136.129919][ T31] audit: type=1400 audit(1700000048.329:474): avc: denied { mount } for pid=6403 comm="syz.3.167" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.187970][ T31] audit: type=1400 audit(1700000048.379:475): avc: denied { mounton } for pid=6403 comm="syz.3.167" path="/34/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.221585][ T6397] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.221687][ T6397] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.239788][ T6407] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 136.239788][ T6407] [ 136.385796][ T5606] usb 3-1: USB disconnect, device number 5 [ 136.391262][ T31] audit: type=1400 audit(1700000048.589:476): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.530154][ T31] audit: type=1400 audit(1700000048.729:477): avc: denied { cmd } for pid=6419 comm="iou-wrk-6421" path="socket:[12146]" dev="sockfs" ino=12146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 136.560118][ T191] ums-usbat 1-1:2.43: USB Mass Storage device detected [ 136.574297][ T191] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 136.627774][ T191] ums-usbat 1-1:2.43: probe with driver ums-usbat failed with error -5 [ 136.674707][ T191] usb 1-1: USB disconnect, device number 3 [ 136.695100][ T31] audit: type=1400 audit(1700000048.899:478): avc: denied { write } for pid=6406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.881843][ T31] audit: type=1400 audit(1700000050.079:479): avc: denied { write } for pid=6432 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.439910][ T31] audit: type=1400 audit(1700000050.559:480): avc: denied { read } for pid=6438 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.890698][ T6446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.175'. [ 140.273655][ T6463] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 140.496697][ T31] audit: type=1400 audit(1700000052.699:481): avc: denied { sqpoll } for pid=6451 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 140.713659][ T6466] jffs2: notice: (6466) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 140.732311][ T31] audit: type=1400 audit(1700000052.929:482): avc: denied { write } for pid=6460 comm="syz.2.178" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.732536][ T31] audit: type=1400 audit(1700000052.929:483): avc: denied { create } for pid=6460 comm="syz.2.178" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.039717][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 142.039734][ T31] audit: type=1400 audit(1700000054.239:486): avc: denied { write } for pid=6449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.703609][ T6491] jffs2: notice: (6491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 142.730305][ T31] audit: type=1400 audit(1700000054.909:487): avc: denied { write } for pid=6485 comm="syz.2.186" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.784426][ T31] audit: type=1400 audit(1700000054.989:488): avc: denied { write } for pid=6489 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.562573][ T31] audit: type=1400 audit(1700000057.729:489): avc: denied { write } for pid=6494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.958362][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 146.341538][ T31] audit: type=1400 audit(1700000058.539:490): avc: denied { write } for pid=6520 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.469632][ T6522] netlink: 'syz.2.192': attribute type 10 has an invalid length. [ 146.480207][ T6522] syz_tun: entered promiscuous mode [ 146.513104][ T6522] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 147.053943][ T31] audit: type=1400 audit(1700000059.119:491): avc: denied { mount } for pid=6524 comm="syz.4.191" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 147.054124][ T31] audit: type=1400 audit(1700000059.129:492): avc: denied { read } for pid=6524 comm="syz.4.191" name="sg0" dev="devtmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.401622][ T31] audit: type=1400 audit(1700000059.589:493): avc: denied { write } for pid=6525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.995707][ T31] audit: type=1400 audit(1700000061.199:494): avc: denied { write } for pid=6550 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.164502][ T6554] jffs2: notice: (6554) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 149.316107][ T984] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.573501][ T984] usb 1-1: Using ep0 maxpacket: 16 [ 149.574196][ T984] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.575130][ T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.575160][ T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.575182][ T984] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.575219][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.593071][ T984] usb 1-1: config 0 descriptor?? [ 149.656172][ T31] audit: type=1400 audit(1700000061.859:495): avc: denied { create } for pid=6556 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.701394][ T6559] tipc: Started in network mode [ 149.701424][ T6559] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 149.728845][ T6559] tipc: Enabled bearer , priority 0 [ 150.055121][ T31] audit: type=1400 audit(1700000062.139:496): avc: denied { nlmsg_read } for pid=6556 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.081891][ T31] audit: type=1400 audit(1700000062.269:497): avc: denied { read write } for pid=6556 comm="syz.4.198" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 150.083729][ T31] audit: type=1400 audit(1700000062.289:498): avc: denied { open } for pid=6556 comm="syz.4.198" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 150.207600][ T31] audit: type=1400 audit(1700000062.409:499): avc: denied { write } for pid=6560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.243606][ T6557] Process accounting resumed [ 150.410542][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410566][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410581][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410596][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410610][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410624][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410638][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410652][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410666][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.410680][ T984] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.518658][ T984] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5 [ 150.604435][ T31] audit: type=1400 audit(1700000062.799:500): avc: denied { write } for pid=6579 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.693936][ T6582] netlink: 'syz.4.200': attribute type 10 has an invalid length. [ 150.726887][ T984] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 150.881623][ T5606] tipc: Node number set to 12429994 [ 151.081797][ T5606] usb 1-1: USB disconnect, device number 4 [ 151.157218][ T6589] fido_id[6589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 152.121428][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 152.241216][ T31] audit: type=1400 audit(1700000001.110:501): avc: denied { view } for pid=6599 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 152.402382][ T6611] jffs2: notice: (6611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 152.404401][ T5787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.642020][ T5787] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 152.664435][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.664523][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.745559][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 152.745586][ T5787] usb 4-1: Product: syz [ 152.745602][ T5787] usb 4-1: Manufacturer: syz [ 152.799027][ T5787] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 152.850039][ T6617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.204'. [ 153.846248][ T31] audit: type=1400 audit(1700000002.720:502): avc: denied { write } for pid=6591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.245082][ T31] audit: type=1400 audit(1700000003.110:503): avc: denied { write } for pid=6632 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.920848][ T5787] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 154.964641][ T5787] usb 4-1: USB disconnect, device number 9 [ 154.975917][ T5787] mos7840 4-1:1.0: device disconnected [ 155.410371][ T31] audit: type=1400 audit(1700000004.280:504): avc: denied { getopt } for pid=6633 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.440988][ T31] audit: type=1400 audit(1700000004.310:505): avc: denied { read } for pid=6642 comm="syz.1.202" name="video8" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 155.441497][ T31] audit: type=1400 audit(1700000004.310:506): avc: denied { open } for pid=6642 comm="syz.1.202" path="/dev/video8" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 155.466599][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 155.855460][ T6648] ./cgroup.cpu/memory.limit_in_bytes: Can't lookup blockdev [ 155.858737][ T31] audit: type=1400 audit(1700000004.720:507): avc: denied { mounton } for pid=6647 comm="syz.3.210" path="/syzcgroup/cpu/syz3/memory.limit_in_bytes" dev="cgroup" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 156.183933][ T1810] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.373360][ T1810] usb 4-1: Using ep0 maxpacket: 32 [ 156.394572][ T1810] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 156.440773][ T1810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.441015][ T1810] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.551599][ T1810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.551661][ T1810] usb 4-1: Product: syz [ 156.551965][ T1810] usb 4-1: Manufacturer: syz [ 156.552005][ T1810] usb 4-1: SerialNumber: syz [ 157.208898][ T1810] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.208936][ T1810] usb 4-1: MIDIStreaming interface descriptor not found [ 157.872118][ T6664] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 157.877941][ T6657] binfmt_misc: register: failed to install interpreter ./file2 [ 157.903253][ T6657] jffs2: notice: (6657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 158.641841][ T1810] usb 4-1: USB disconnect, device number 10 [ 158.927801][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 159.148594][ T6680] udevd[6680]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.178123][ T6679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.217'. [ 159.366888][ T6684] jffs2: notice: (6684) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 159.700471][ T31] audit: type=1400 audit(1700000001.770:508): avc: denied { create } for pid=6687 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.151274][ T31] audit: type=1400 audit(1700000003.220:509): avc: denied { write } for pid=6702 comm="syz.0.222" name="usb_gadget" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.187568][ T31] audit: type=1400 audit(1700000003.260:510): avc: denied { add_name } for pid=6702 comm="syz.0.222" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.187617][ T31] audit: type=1400 audit(1700000003.260:511): avc: denied { create } for pid=6702 comm="syz.0.222" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 161.291019][ T31] audit: type=1400 audit(1700000003.360:512): avc: denied { write } for pid=6702 comm="syz.0.222" name="video36" dev="devtmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.817548][ T31] audit: type=1400 audit(1700000003.890:513): avc: denied { connect } for pid=6687 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.973459][ T31] audit: type=1400 audit(1700000004.050:514): avc: denied { write } for pid=6687 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.384926][ T6721] 9p: Bad value for 'wfdno' [ 163.840235][ T6731] FAULT_INJECTION: forcing a failure. [ 163.840235][ T6731] name failslab, interval 1, probability 0, space 0, times 0 [ 163.840273][ T6731] CPU: 1 UID: 0 PID: 6731 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) [ 163.840296][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.840308][ T6731] Call Trace: [ 163.840315][ T6731] [ 163.840323][ T6731] dump_stack_lvl+0x100/0x190 [ 163.840374][ T6731] should_fail_ex.cold+0x5/0xa [ 163.840403][ T6731] should_failslab+0xc2/0x120 [ 163.840430][ T6731] __kmalloc_noprof+0xfc/0x840 [ 163.840453][ T6731] ? tomoyo_encode2+0xfb/0x3c0 [ 163.840485][ T6731] tomoyo_encode2+0xfb/0x3c0 [ 163.840515][ T6731] tomoyo_encode+0x29/0x50 [ 163.840541][ T6731] tomoyo_realpath_from_path+0x18c/0x690 [ 163.840575][ T6731] tomoyo_path_number_perm+0x23c/0x580 [ 163.840597][ T6731] ? tomoyo_path_number_perm+0x22e/0x580 [ 163.840621][ T6731] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.840643][ T6731] ? trace_sched_exit_tp+0x120/0x160 [ 163.840671][ T6731] ? __schedule+0x126b/0x6920 [ 163.840706][ T6731] ? __lock_acquire+0x5c0/0x1f40 [ 163.840742][ T6731] ? __fget_files+0x34/0x3d0 [ 163.840768][ T6731] ? find_held_lock+0x2b/0x80 [ 163.840796][ T6731] ? hook_file_ioctl_common+0x140/0x440 [ 163.840831][ T6731] ? __fget_files+0x21f/0x3d0 [ 163.840861][ T6731] security_file_ioctl+0xd3/0x230 [ 163.840893][ T6731] __x64_sys_ioctl+0xb7/0x210 [ 163.840918][ T6731] do_syscall_64+0x123/0x790 [ 163.840941][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.840962][ T6731] RIP: 0033:0x7f7cb7f9e159 [ 163.840984][ T6731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.841001][ T6731] RSP: 002b:00007f7cb8e3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.841021][ T6731] RAX: ffffffffffffffda RBX: 00007f7cb8225fa0 RCX: 00007f7cb7f9e159 [ 163.841034][ T6731] RDX: 0000200000000180 RSI: 00000000c040564a RDI: 0000000000000003 [ 163.841046][ T6731] RBP: 00007f7cb8e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 163.841057][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.841069][ T6731] R13: 00007f7cb8226038 R14: 00007f7cb8225fa0 R15: 00007fff930de398 [ 163.841097][ T6731] [ 163.841586][ T6731] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.368113][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 164.753594][ T31] audit: type=1400 audit(1700000001.410:515): avc: denied { read } for pid=6735 comm="syz.0.231" name="event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.783809][ T31] audit: type=1400 audit(1700000001.410:516): avc: denied { open } for pid=6735 comm="syz.0.231" path="/dev/input/event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 166.379148][ T6744] netlink: 48 bytes leftover after parsing attributes in process `syz.4.233'. [ 167.815045][ T31] audit: type=1400 audit(1700000004.470:517): avc: denied { ioctl } for pid=6752 comm="syz.0.236" path="/dev/radio1" dev="devtmpfs" ino=952 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.978772][ T6756] jffs2: notice: (6756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 168.018890][ T31] audit: type=1400 audit(1700000004.660:518): avc: denied { write } for pid=6754 comm="syz.4.239" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.153622][ T6753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.364551][ T6753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.401985][ T6753] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 168.420737][ T6753] bond0 (unregistering): Released all slaves [ 168.563835][ T6760] jffs2: notice: (6760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 169.008439][ T6766] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5602] was attempted by ""[6766] [ 169.597314][ T6768] 9p: Bad value for 'wfdno' [ 170.251273][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 170.407666][ T6785] binfmt_misc: register: failed to install interpreter ./file2 [ 170.425582][ T6785] jffs2: notice: (6785) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 171.084103][ T31] audit: type=1400 audit(1700000001.830:519): avc: denied { read } for pid=6799 comm="syz.3.250" name="usbmon3" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 171.084393][ T31] audit: type=1400 audit(1700000001.830:520): avc: denied { open } for pid=6799 comm="syz.3.250" path="/dev/usbmon3" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 171.263572][ T31] audit: type=1400 audit(1700000002.010:521): avc: denied { create } for pid=6799 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 171.756826][ T6798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.249'. [ 171.783115][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'. [ 171.976939][ T6813] binfmt_misc: register: failed to install interpreter ./file2 [ 171.994437][ T6813] jffs2: notice: (6813) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 172.797637][ T6823] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5602] was attempted by ""[6823] [ 174.661365][ T31] audit: type=1400 audit(1700000005.410:522): avc: denied { write } for pid=6834 comm="syz.3.258" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.662785][ T31] audit: type=1400 audit(1700000005.410:523): avc: denied { create } for pid=6836 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.732276][ T6835] loop0: detected capacity change from 0 to 3904 [ 174.758139][ T31] audit: type=1400 audit(1700000005.500:524): avc: denied { bind } for pid=6836 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.846573][ T6841] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 174.846591][ T6841] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 174.846598][ T6841] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 174.846631][ T6841] loop0: [ 174.868651][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 175.280725][ T5787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 175.363711][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 175.841214][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 175.842458][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.842488][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.873652][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 175.873677][ T9] usb 5-1: Product: syz [ 175.873692][ T9] usb 5-1: Manufacturer: syz [ 175.876897][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 175.917515][ T5787] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 175.918693][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.946470][ T5787] usb 1-1: config 0 descriptor?? [ 175.971614][ T9] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 176.156992][ T5787] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 176.345141][ T6866] netlink: 56 bytes leftover after parsing attributes in process `syz.1.267'. [ 176.937564][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 177.140398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 177.649010][ T5787] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 177.649035][ T5787] [drm] Initialized udl on minor 1 [ 177.682905][ T6845] syz_tun: entered allmulticast mode [ 177.893070][ T6844] syz_tun: left allmulticast mode [ 178.730288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.046086][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 179.310259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.470252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.700234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.922099][ T1107] rpcbind: server 127.0.0.1 not responding, timed out [ 180.095283][ T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 180.117770][ T9] usb 5-1: USB disconnect, device number 2 [ 180.150999][ T9] mos7840 5-1:1.0: device disconnected [ 180.336575][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 180.336598][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 180.358917][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 180.358936][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 180.587460][ T31] audit: type=1400 audit(1700000006.720:525): avc: denied { block_suspend } for pid=6887 comm="syz.4.273" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.636825][ T6897] 9p: Bad value for 'wfdno' [ 181.936394][ T31] audit: type=1400 audit(1700000007.490:526): avc: denied { create } for pid=6898 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 182.246878][ T31] audit: type=1400 audit(1700000008.380:527): avc: denied { append } for pid=6904 comm="syz.4.277" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 182.436313][ T31] audit: type=1400 audit(1700000008.570:528): avc: denied { listen } for pid=6904 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.796296][ T5787] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 182.896068][ T5787] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 183.185406][ T5787] usb 1-1: USB disconnect, device number 5 [ 183.941233][ T31] audit: type=1400 audit(1700000010.070:529): avc: denied { name_bind } for pid=6921 comm="syz.4.280" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 183.941283][ T31] audit: type=1400 audit(1700000010.080:530): avc: denied { node_bind } for pid=6921 comm="syz.4.280" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 184.009024][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 185.163398][ T6933] jffs2: notice: (6933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 185.238074][ T31] audit: type=1400 audit(1700000011.370:531): avc: denied { write } for pid=6930 comm="syz.2.283" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.031453][ T6941] binfmt_misc: register: failed to install interpreter ./file2 [ 186.125596][ T6941] jffs2: notice: (6941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 186.596539][ T6947] jffs2: notice: (6947) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 187.134601][ T31] audit: type=1400 audit(1700000013.270:532): avc: denied { create } for pid=6949 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.145653][ T6958] jffs2: notice: (6958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 188.635689][ T6968] jffs2: notice: (6968) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 188.695098][ T31] audit: type=1400 audit(1700000014.810:533): avc: denied { write } for pid=6966 comm="syz.1.290" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.545481][ T6977] 9p: Bad value for 'wfdno' [ 190.235748][ T6978] binfmt_misc: register: failed to install interpreter ./file2 [ 190.240812][ T6981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.293'. [ 190.246072][ T6978] jffs2: notice: (6978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 190.259745][ T31] audit: type=1400 audit(1700000016.390:534): avc: denied { write } for pid=6975 comm="syz.3.295" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.460626][ T6989] binfmt_misc: register: failed to install interpreter ./file2 [ 190.479909][ T6989] jffs2: notice: (6989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 190.491773][ T31] audit: type=1400 audit(1700000016.631:535): avc: denied { write } for pid=6983 comm="syz.4.288" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.861190][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 192.291875][ T31] audit: type=1400 audit(1700000002.430:536): avc: denied { write } for pid=7003 comm="syz.0.302" name="softnet_stat" dev="proc" ino=4026533042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 193.613479][ T7017] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5599] was attempted by ""[7017] [ 193.990705][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.990795][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.779412][ T7033] jffs2: notice: (7033) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 194.851552][ T31] audit: type=1400 audit(1700000004.960:537): avc: denied { write } for pid=7032 comm="syz.1.307" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.063716][ T7039] 9p: Bad value for 'wfdno' [ 195.187234][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 195.209839][ T7043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.310'. [ 196.088067][ T4921] Bluetooth: hci0: command 0x206a tx timeout [ 196.088068][ T5618] Bluetooth: hci2: command 0x206a tx timeout [ 196.088106][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 196.088116][ T4921] Bluetooth: hci3: command 0x0406 tx timeout [ 196.088129][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 196.373282][ T7046] netlink: 'syz.0.314': attribute type 10 has an invalid length. [ 197.110133][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 197.723674][ T7059] tipc: Started in network mode [ 197.723707][ T7059] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 197.723838][ T7059] tipc: Enabled bearer , priority 0 [ 198.174107][ T7063] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5599] was attempted by ""[7063] [ 198.289228][ T31] audit: type=1400 audit(1700000008.400:538): avc: denied { ioctl } for pid=7048 comm="syz.3.313" path="socket:[15510]" dev="sockfs" ino=15510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.289465][ T31] audit: type=1400 audit(1700000008.410:539): avc: denied { bind } for pid=7048 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.339383][ T31] audit: type=1400 audit(1700000008.470:540): avc: denied { setopt } for pid=7048 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.964176][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 200.543700][ T5787] tipc: Node number set to 43690 [ 200.952268][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 200.956195][ T7084] syz_tun: Device is already in use. [ 201.053165][ T7086] 9p: Bad value for 'rfdno' [ 202.027961][ T31] audit: type=1400 audit(1700000012.160:541): avc: denied { create } for pid=7091 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.110880][ T5827] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.259536][ T5827] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 202.260452][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.260493][ T5827] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 202.263877][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.263901][ T5827] usb 1-1: Product: syz [ 202.263916][ T5827] usb 1-1: Manufacturer: syz [ 202.263932][ T5827] usb 1-1: SerialNumber: syz [ 202.680881][ T7103] netlink: 'syz.2.326': attribute type 10 has an invalid length. [ 203.183172][ T7105] netlink: 60 bytes leftover after parsing attributes in process `syz.3.324'. [ 203.228528][ T5827] ath6kl: Failed to submit usb control message: -71 [ 203.228577][ T5827] ath6kl: unable to send the bmi data to the device: -71 [ 203.228592][ T5827] ath6kl: Unable to send get target info: -71 [ 203.289182][ T5827] ath6kl: Failed to init ath6kl core: -71 [ 203.292024][ T5827] ath6kl_usb 1-1:1.0: probe with driver ath6kl_usb failed with error -71 [ 203.324676][ T5827] usb 1-1: USB disconnect, device number 6 [ 203.498048][ T7112] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5600] was attempted by ""[7112] [ 204.046154][ T7115] netlink: 'syz.4.322': attribute type 13 has an invalid length. [ 204.046175][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 204.085841][ T7115] netlink: 'syz.4.322': attribute type 13 has an invalid length. [ 204.085861][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 204.126450][ T1174] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.132521][ T1019] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.134755][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.134789][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.771661][ T7128] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 205.344068][ T31] audit: type=1400 audit(1700000015.480:542): avc: denied { accept } for pid=7133 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.628574][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.335'. [ 205.679118][ T7128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.847914][ T7139] syz_tun: Device is already in use. [ 206.368873][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 207.132652][ T7150] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 207.822555][ T3216] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 207.970246][ T3216] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 207.971381][ T3216] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.971408][ T3216] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 207.974432][ T3216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.974447][ T3216] usb 1-1: Product: syz [ 207.974455][ T3216] usb 1-1: Manufacturer: syz [ 207.974464][ T3216] usb 1-1: SerialNumber: syz [ 208.208488][ T5827] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 208.371297][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 208.371979][ T5827] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 208.375714][ T5827] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.375778][ T5827] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.375800][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.375830][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.387439][ T5827] usb 2-1: config 0 descriptor?? [ 208.593560][ T7161] binfmt_misc: register: failed to install interpreter ./file2 [ 208.595409][ T7161] jffs2: notice: (7161) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 208.652815][ T31] audit: type=1400 audit(1700000018.791:543): avc: denied { name_connect } for pid=7153 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 208.711146][ T31] audit: type=1400 audit(1700000018.851:544): avc: denied { accept } for pid=7153 comm="syz.1.338" lport=51737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.941898][ T31] audit: type=1400 audit(1700000019.081:545): avc: denied { setopt } for pid=7153 comm="syz.1.338" lport=51737 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 208.966415][ T7168] binfmt_misc: register: failed to install interpreter ./file2 [ 209.008675][ T5787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 209.020429][ T31] audit: type=1400 audit(1700000019.161:546): avc: denied { write } for pid=7163 comm="syz.3.343" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.101181][ T3216] ath6kl: Failed to submit usb control message: -110 [ 209.103488][ T3216] ath6kl: unable to send the bmi data to the device: -110 [ 209.103777][ T3216] ath6kl: Unable to send get target info: -110 [ 209.137128][ T3216] ath6kl: Failed to init ath6kl core: -110 [ 209.142985][ T3216] ath6kl_usb 1-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 209.222261][ T5787] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 209.235923][ T5787] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.235974][ T5787] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.240682][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 209.240706][ T5787] usb 5-1: Product: syz [ 209.240720][ T5787] usb 5-1: Manufacturer: syz [ 209.274742][ T5787] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 209.394803][ T5827] hid_parser_main: 5 callbacks suppressed [ 209.394846][ T5827] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 209.394874][ T5827] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 209.394898][ T5827] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 209.394922][ T5827] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 209.394946][ T5827] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 209.437089][ T5827] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 209.490808][ T5827] nzxt-smart2 0003:1E71:2009.0002: init_device failed: -38 [ 209.504929][ T5827] nzxt-smart2 0003:1E71:2009.0002: probe with driver nzxt-smart2 failed with error -38 [ 209.684075][ T5827] usb 2-1: USB disconnect, device number 9 [ 210.394494][ T31] audit: type=1400 audit(1700000020.531:547): avc: denied { ioctl } for pid=7178 comm="syz.2.346" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.396381][ T31] audit: type=1400 audit(1700000020.531:548): avc: denied { set_context_mgr } for pid=7178 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 210.462386][ T31] audit: type=1400 audit(1700000020.601:549): avc: denied { map } for pid=7178 comm="syz.2.346" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.465245][ T31] audit: type=1400 audit(1700000020.601:550): avc: denied { call } for pid=7178 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 210.465955][ T31] audit: type=1400 audit(1700000020.601:551): avc: denied { transfer } for pid=7178 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 210.595677][ T5787] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 210.739745][ T7183] jffs2: notice: (7183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 210.762091][ T5787] usb 5-1: USB disconnect, device number 3 [ 210.789662][ T9] usb 1-1: USB disconnect, device number 7 [ 210.979998][ T5787] mos7840 5-1:1.0: device disconnected [ 211.109248][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.348'. [ 211.799089][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 211.805129][ T7193] syz_tun: Device is already in use. [ 212.244594][ T7195] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 213.138691][ T7204] FAULT_INJECTION: forcing a failure. [ 213.138691][ T7204] name failslab, interval 1, probability 0, space 0, times 0 [ 213.138725][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.4.354 Not tainted syzkaller #0 PREEMPT(full) [ 213.138749][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.138779][ T7204] Call Trace: [ 213.138786][ T7204] [ 213.138795][ T7204] dump_stack_lvl+0x100/0x190 [ 213.138834][ T7204] should_fail_ex.cold+0x5/0xa [ 213.138864][ T7204] should_failslab+0xc2/0x120 [ 213.138894][ T7204] __kmalloc_noprof+0xfc/0x840 [ 213.138919][ T7204] ? snd_midi_event_new+0xa1/0x210 [ 213.138953][ T7204] snd_midi_event_new+0xa1/0x210 [ 213.138982][ T7204] snd_virmidi_output_open+0x106/0x670 [ 213.139016][ T7204] open_substream+0x480/0x970 [ 213.139040][ T7204] rawmidi_open_priv+0x595/0x6f0 [ 213.139068][ T7204] snd_rawmidi_open+0x4b4/0xb90 [ 213.139098][ T7204] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 213.139124][ T7204] ? __pfx_default_wake_function+0x10/0x10 [ 213.139151][ T7204] ? lock_acquire+0x1d1/0x380 [ 213.139175][ T7204] ? kobject_get_unless_zero+0x156/0x200 [ 213.139205][ T7204] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 213.139228][ T7204] snd_open+0x201/0x450 [ 213.139257][ T7204] ? __pfx_snd_open+0x10/0x10 [ 213.139285][ T7204] chrdev_open+0x234/0x6a0 [ 213.139313][ T7204] ? __pfx_chrdev_open+0x10/0x10 [ 213.139341][ T7204] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 213.139369][ T7204] do_dentry_open+0x6ab/0x14d0 [ 213.139392][ T7204] ? __pfx_chrdev_open+0x10/0x10 [ 213.139420][ T7204] vfs_open+0x82/0x3f0 [ 213.139451][ T7204] path_openat+0x19fa/0x2440 [ 213.139485][ T7204] ? __pfx_path_openat+0x10/0x10 [ 213.139520][ T7204] do_file_open+0x20e/0x430 [ 213.139550][ T7204] ? __pfx_do_file_open+0x10/0x10 [ 213.139598][ T7204] ? _raw_spin_unlock+0x28/0x50 [ 213.139627][ T7204] ? alloc_fd+0x471/0x7a0 [ 213.139664][ T7204] do_sys_openat2+0x10f/0x1e0 [ 213.139702][ T7204] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.139732][ T7204] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 213.139771][ T7204] __x64_sys_openat+0x12d/0x210 [ 213.139801][ T7204] ? __pfx___x64_sys_openat+0x10/0x10 [ 213.139843][ T7204] do_syscall_64+0x123/0x790 [ 213.139868][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.139890][ T7204] RIP: 0033:0x7ffbb855e98e [ 213.139907][ T7204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.139926][ T7204] RSP: 002b:00007ffbb9473b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.139947][ T7204] RAX: ffffffffffffffda RBX: 00007ffbb94746c0 RCX: 00007ffbb855e98e [ 213.139961][ T7204] RDX: 0000000000141102 RSI: 00007ffbb9473c00 RDI: ffffffffffffff9c [ 213.139975][ T7204] RBP: 00007ffbb9473c00 R08: 0000000000000000 R09: 0000000000000000 [ 213.139987][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 213.140000][ T7204] R13: 00007ffbb8826038 R14: 00007ffbb8825fa0 R15: 00007fff2c792228 [ 213.140030][ T7204] [ 213.324061][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.354'. [ 214.618078][ T3216] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 214.686950][ T31] audit: type=1400 audit(1700000024.821:552): avc: denied { accept } for pid=7217 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 214.687333][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.359'. [ 214.688689][ T7218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59904 sclass=netlink_route_socket pid=7218 comm=syz.2.359 [ 214.861612][ T31] audit: type=1400 audit(1700000025.001:553): avc: denied { append } for pid=7219 comm="syz.0.360" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.868329][ T7221] comedi comedi3: pcm3724: I/O base address not correctly aligned [ 214.915766][ T31] audit: type=1400 audit(1700000025.051:554): avc: denied { write } for pid=7219 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.948810][ T3216] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 214.951094][ T3216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.951126][ T3216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.958332][ T3216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 214.958357][ T3216] usb 5-1: Product: syz [ 214.958372][ T3216] usb 5-1: Manufacturer: syz [ 214.967686][ T3216] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 215.990768][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'. [ 216.626432][ T7236] jffs2: notice: (7236) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 216.675907][ T31] audit: type=1400 audit(1700000026.791:555): avc: denied { write } for pid=7233 comm="syz.3.358" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.969372][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 217.022508][ T31] audit: type=1400 audit(1700000001.050:556): avc: denied { write } for pid=7240 comm="syz.3.364" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 217.047949][ T31] audit: type=1400 audit(1700000001.060:557): avc: denied { write } for pid=7240 comm="syz.3.364" name="usb_gadget" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.048004][ T31] audit: type=1400 audit(1700000001.070:558): avc: denied { remove_name } for pid=7240 comm="syz.3.364" name="g1" dev="configfs" ino=13250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.048043][ T31] audit: type=1400 audit(1700000001.070:559): avc: denied { rmdir } for pid=7240 comm="syz.3.364" name="g1" dev="configfs" ino=13250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.072058][ T31] audit: type=1400 audit(1700000001.100:560): avc: denied { ioctl } for pid=7240 comm="syz.3.364" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x556b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 217.217787][ T7245] jffs2: notice: (7245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 217.247948][ T31] audit: type=1400 audit(1700000001.270:561): avc: denied { write } for pid=7241 comm="syz.1.366" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.321802][ T3216] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 217.456134][ T7248] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 217.464021][ T3216] usb 5-1: USB disconnect, device number 4 [ 217.601570][ T3216] mos7840 5-1:1.0: device disconnected [ 217.637878][ T1811] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 217.790447][ T1811] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 217.791304][ T1811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.791331][ T1811] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 217.793688][ T1811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.793704][ T1811] usb 4-1: Product: syz [ 217.793712][ T1811] usb 4-1: Manufacturer: syz [ 217.793721][ T1811] usb 4-1: SerialNumber: syz [ 218.987142][ T1811] ath6kl: Failed to submit usb control message: -110 [ 218.987188][ T1811] ath6kl: unable to send the bmi data to the device: -110 [ 218.987203][ T1811] ath6kl: Unable to send get target info: -110 [ 219.004096][ T7266] binfmt_misc: register: failed to install interpreter ./file2 [ 219.005742][ T7266] jffs2: notice: (7266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 219.015149][ T31] audit: type=1400 audit(1700000003.040:562): avc: denied { write } for pid=7262 comm="syz.2.371" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.076087][ T1811] ath6kl: Failed to init ath6kl core: -110 [ 219.715947][ T7276] jffs2: notice: (7276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 220.033802][ T1811] ath6kl_usb 4-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 220.607896][ T5787] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 220.728094][ T1811] usb 4-1: USB disconnect, device number 11 [ 220.762407][ T5787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 220.763695][ T5787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.763740][ T5787] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 220.765874][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.765897][ T5787] usb 2-1: Product: syz [ 220.765912][ T5787] usb 2-1: Manufacturer: syz [ 220.765927][ T5787] usb 2-1: SerialNumber: syz [ 220.847081][ T7286] netlink: 'syz.2.377': attribute type 10 has an invalid length. [ 220.975741][ T7293] FAULT_INJECTION: forcing a failure. [ 220.975741][ T7293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.975775][ T7293] CPU: 0 UID: 0 PID: 7293 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 220.975801][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.975815][ T7293] Call Trace: [ 220.975823][ T7293] [ 220.975831][ T7293] dump_stack_lvl+0x100/0x190 [ 220.975869][ T7293] should_fail_ex.cold+0x5/0xa [ 220.975892][ T7293] ? prepare_alloc_pages+0x16d/0x5b0 [ 220.975925][ T7293] should_fail_alloc_page+0xeb/0x140 [ 220.975957][ T7293] prepare_alloc_pages+0x1f0/0x5b0 [ 220.975989][ T7293] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 220.976022][ T7293] ? __lock_acquire+0x5c0/0x1f40 [ 220.976049][ T7293] ? lock_acquire+0x1d1/0x380 [ 220.976073][ T7293] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 220.976108][ T7293] ? __lock_acquire+0x5c0/0x1f40 [ 220.976132][ T7293] ? __lock_acquire+0x5c0/0x1f40 [ 220.976155][ T7293] ? __css_rstat_updated+0x1ce/0x590 [ 220.976188][ T7293] ? lock_acquire+0x1d1/0x380 [ 220.976211][ T7293] ? page_table_check_set+0x11d/0x580 [ 220.976241][ T7293] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.976266][ T7293] ? policy_nodemask+0xed/0x4f0 [ 220.976295][ T7293] alloc_pages_mpol+0x201/0x550 [ 220.976325][ T7293] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 220.976354][ T7293] ? __page_table_check_ptes_set+0x1d5/0x530 [ 220.976390][ T7293] folio_alloc_mpol_noprof+0x36/0x260 [ 220.976412][ T7293] vma_alloc_folio_noprof+0xed/0x1d0 [ 220.976432][ T7293] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 220.976453][ T7293] ? rcu_read_unlock+0x2d/0xb0 [ 220.976489][ T7293] do_anonymous_page+0xac9/0x2050 [ 220.976533][ T7293] ? __pfx_do_anonymous_page+0x10/0x10 [ 220.976564][ T7293] ? rcu_read_unlock+0x2d/0xb0 [ 220.976582][ T7293] ? rcu_read_unlock+0x2d/0xb0 [ 220.976601][ T7293] ? __pte_offset_map+0x179/0x310 [ 220.976630][ T7293] __handle_mm_fault+0x1ff3/0x2f60 [ 220.976664][ T7293] ? lock_vma_under_rcu+0x11d/0x590 [ 220.976694][ T7293] ? __pfx___handle_mm_fault+0x10/0x10 [ 220.976729][ T7293] ? lock_vma_under_rcu+0x17c/0x590 [ 220.976775][ T7293] handle_mm_fault+0x363/0xa20 [ 220.976811][ T7293] do_user_addr_fault+0x59c/0x12f0 [ 220.976848][ T7293] exc_page_fault+0x6f/0xd0 [ 220.976871][ T7293] asm_exc_page_fault+0x26/0x30 [ 220.976893][ T7293] RIP: 0033:0x7f7cb7e65c2a [ 220.976913][ T7293] Code: 00 4c 89 e7 31 c0 48 8d 35 53 ff 1c 00 e8 ce 6a 0e 00 66 0f 6f 05 16 f8 1e 00 4c 89 e6 48 8d bc 24 f0 10 00 00 ba 80 00 00 00 <0f> 29 84 24 70 10 00 00 66 0f ef c0 0f 29 84 24 80 10 00 00 0f 29 [ 220.976933][ T7293] RSP: 002b:00007f7cb8e39f60 EFLAGS: 00010202 [ 220.976953][ T7293] RAX: 000000000000000b RBX: 0000000000000005 RCX: 0000000000000000 [ 220.976965][ T7293] RDX: 0000000000000080 RSI: 00007f7cb8e39fa0 RDI: 00007f7cb8e3b050 [ 220.976977][ T7293] RBP: 00007f7cb8e3afd0 R08: 0000000000000001 R09: 00000000ffffffff [ 220.976990][ T7293] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f7cb8e39fa0 [ 220.977003][ T7293] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.977029][ T7293] [ 220.978768][ T7293] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 221.271981][ T1811] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 221.590745][ T1811] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 221.722225][ T1811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.722274][ T1811] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.843865][ T1811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.843895][ T1811] usb 1-1: Product: syz [ 221.843909][ T1811] usb 1-1: Manufacturer: syz [ 221.843925][ T1811] usb 1-1: SerialNumber: syz [ 221.948543][ T5787] ath6kl: Failed to submit usb control message: -110 [ 221.948618][ T5787] ath6kl: unable to send the bmi data to the device: -110 [ 221.948631][ T5787] ath6kl: Unable to send get target info: -110 [ 222.122636][ T5787] ath6kl: Failed to init ath6kl core: -110 [ 222.200979][ T5787] ath6kl_usb 2-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 222.412523][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 222.423065][ T1811] usb 1-1: USB disconnect, device number 8 [ 222.446338][ T5787] usb 2-1: USB disconnect, device number 10 [ 222.539436][ T7310] binfmt_misc: register: failed to install interpreter ./file2 [ 222.549962][ T7310] jffs2: notice: (7310) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 222.587089][ T31] audit: type=1400 audit(1700000001.160:563): avc: denied { write } for pid=7304 comm="syz.2.381" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.889684][ T7313] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 222.970991][ T31] audit: type=1400 audit(1700000001.550:564): avc: denied { mounton } for pid=7314 comm="syz.2.385" path="/81/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 223.095412][ T7318] binfmt_misc: register: failed to install interpreter ./file2 [ 223.111331][ T7318] jffs2: notice: (7318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 224.507436][ T31] audit: type=1400 audit(1700000002.520:565): avc: denied { read write } for pid=7320 comm="syz.0.387" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.507493][ T31] audit: type=1400 audit(1700000002.530:566): avc: denied { open } for pid=7320 comm="syz.0.387" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.507535][ T31] audit: type=1400 audit(1700000002.550:567): avc: denied { ioctl } for pid=7320 comm="syz.0.387" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.507575][ T31] audit: type=1400 audit(1700000002.560:568): avc: denied { map } for pid=7320 comm="syz.0.387" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 226.405280][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 227.072326][ T7334] syz_tun: Device is already in use. [ 228.092911][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 228.208587][ T7347] FAULT_INJECTION: forcing a failure. [ 228.208587][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 228.208626][ T7347] CPU: 1 UID: 0 PID: 7347 Comm: syz.1.395 Not tainted syzkaller #0 PREEMPT(full) [ 228.208651][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.208664][ T7347] Call Trace: [ 228.208671][ T7347] [ 228.208680][ T7347] dump_stack_lvl+0x100/0x190 [ 228.208715][ T7347] should_fail_ex.cold+0x5/0xa [ 228.208754][ T7347] should_failslab+0xc2/0x120 [ 228.208785][ T7347] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 228.208814][ T7347] ? __d_alloc+0x35/0xa50 [ 228.208848][ T7347] __d_alloc+0x35/0xa50 [ 228.208881][ T7347] d_alloc_pseudo+0x1c/0xc0 [ 228.208905][ T7347] alloc_file_pseudo+0x118/0x290 [ 228.208938][ T7347] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 228.208970][ T7347] ? _raw_spin_unlock+0x28/0x50 [ 228.209000][ T7347] ? alloc_fd+0x471/0x7a0 [ 228.209030][ T7347] __anon_inode_getfile+0xe8/0x280 [ 228.209059][ T7347] __anon_inode_getfd+0x5c/0xe0 [ 228.209087][ T7347] __x64_sys_fsopen+0x190/0x220 [ 228.209115][ T7347] do_syscall_64+0x123/0x790 [ 228.209139][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.209161][ T7347] RIP: 0033:0x7fe82bd9e159 [ 228.209178][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.209198][ T7347] RSP: 002b:00007fe82cc8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 228.209234][ T7347] RAX: ffffffffffffffda RBX: 00007fe82c026090 RCX: 00007fe82bd9e159 [ 228.209250][ T7347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 228.209264][ T7347] RBP: 00007fe82be3506b R08: 0000000000000000 R09: 0000000000000000 [ 228.209277][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.209290][ T7347] R13: 00007fe82c026128 R14: 00007fe82c026090 R15: 00007ffc0f0ef728 [ 228.209321][ T7347] [ 229.185074][ T7347] input: syz0 as /devices/virtual/input/input7 [ 229.233623][ T31] audit: type=1400 audit(1700000002.120:569): avc: denied { read } for pid=4957 comm="acpid" name="event4" dev="devtmpfs" ino=2871 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.235611][ T31] audit: type=1400 audit(1700000002.120:570): avc: denied { open } for pid=4957 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2871 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.236642][ T31] audit: type=1400 audit(1700000002.120:571): avc: denied { ioctl } for pid=4957 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2871 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.644414][ T31] audit: type=1400 audit(1700000002.550:572): avc: denied { write } for pid=7352 comm="syz.2.396" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 229.677512][ T31] audit: type=1400 audit(1700000002.580:573): avc: denied { map } for pid=7352 comm="syz.2.396" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 229.773406][ T7357] tmpfs: Bad value for 'mpol' [ 229.806810][ T31] audit: type=1400 audit(1700000002.710:574): avc: denied { create } for pid=7352 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.816552][ T31] audit: type=1400 audit(1700000002.720:575): avc: denied { bind } for pid=7352 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.912175][ T31] audit: type=1400 audit(1700000002.820:576): avc: denied { mount } for pid=7356 comm="syz.1.398" name="/" dev="autofs" ino=16732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 230.458798][ T7375] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 230.615438][ T31] audit: type=1400 audit(1700000003.520:577): avc: denied { read write } for pid=7363 comm="syz.3.391" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 230.615758][ T31] audit: type=1400 audit(1700000003.520:578): avc: denied { open } for pid=7363 comm="syz.3.391" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 231.566638][ T7387] o2cb: This node has not been configured. [ 231.566652][ T7387] o2cb: Cluster check failed. Fix errors before retrying. [ 231.566677][ T7387] (syz.4.402,7387,0):user_dlm_register:674 ERROR: status = -22 [ 231.566700][ T7387] (syz.4.402,7387,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 232.150388][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 235.020382][ T7404] jffs2: notice: (7404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 235.086814][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 235.086852][ T31] audit: type=1400 audit(1700000007.970:583): avc: denied { write } for pid=7402 comm="syz.3.410" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.788181][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 235.972599][ T7424] jffs2: notice: (7424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 235.993391][ T31] audit: type=1400 audit(1700000001.240:584): avc: denied { write } for pid=7417 comm="syz.0.415" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.946666][ T31] audit: type=1400 audit(1700000002.140:585): avc: denied { ioctl } for pid=7416 comm="syz.4.413" path="/dev/sg0" dev="devtmpfs" ino=1065 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.106226][ T7430] jffs2: notice: (7430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 237.137647][ T31] audit: type=1400 audit(1700000002.400:586): avc: denied { write } for pid=7428 comm="syz.1.418" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.229340][ T7435] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 237.506063][ T31] audit: type=1400 audit(1700000002.760:587): avc: denied { execute } for pid=7439 comm="syz.2.421" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 237.527434][ T31] audit: type=1400 audit(1700000002.770:588): avc: denied { bind } for pid=7440 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.568566][ T31] audit: type=1400 audit(1700000002.830:589): avc: denied { read write } for pid=7439 comm="syz.2.421" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 237.571037][ T31] audit: type=1400 audit(1700000002.830:590): avc: denied { open } for pid=7439 comm="syz.2.421" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 237.966650][ T1810] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 238.131564][ T1810] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 238.134854][ T1810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.134899][ T1810] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.134923][ T1810] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.134947][ T1810] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.134987][ T1810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.310233][ T31] audit: type=1400 audit(1700000004.570:591): avc: denied { ioctl } for pid=7439 comm="syz.2.421" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.352266][ T7462] Trying to write to read-only block-device nullb0 [ 239.549472][ T1811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.059530][ T7470] jffs2: notice: (7470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 240.914433][ T31] audit: type=1400 audit(1700000006.170:592): avc: denied { ioctl } for pid=7439 comm="syz.2.421" path="socket:[16379]" dev="sockfs" ino=16379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.803079][ T7483] jffs2: notice: (7483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 241.809043][ T31] audit: type=1400 audit(1700000007.070:593): avc: denied { write } for pid=7481 comm="syz.0.428" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.993753][ T984] usb 3-1: USB disconnect, device number 6 [ 243.019895][ T7498] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 243.340230][ T7503] 9p: Bad value for 'wfdno' [ 243.556240][ T1811] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 243.624709][ T31] audit: type=1400 audit(1700000008.880:594): avc: denied { bind } for pid=7506 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.647925][ T31] audit: type=1400 audit(1700000008.910:595): avc: denied { getopt } for pid=7506 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.728787][ T1811] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 243.730063][ T1811] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.730102][ T1811] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.730137][ T1811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.730169][ T1811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.741305][ T1811] usb 3-1: config 0 descriptor?? [ 244.169881][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 244.213328][ T1811] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 244.213392][ T1811] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 244.235610][ T1811] input: HID 046d:c286 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C286.0003/input/input8 [ 244.320049][ T1811] logitech 0003:046D:C286.0003: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 244.320124][ T1811] logitech 0003:046D:C286.0003: not enough fields in HID_OUTPUT_REPORT 0 [ 245.433305][ T5605] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 245.433366][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 245.610837][ T3216] usb 3-1: USB disconnect, device number 7 [ 247.270288][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 247.759172][ T5787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.759203][ T5787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.759227][ T5787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.759249][ T5787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.759273][ T5787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.759295][ T5787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.759318][ T5787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.759341][ T5787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.772205][ T5787] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 248.311444][ T31] audit: type=1400 audit(1700000005.130:596): avc: denied { mount } for pid=7545 comm="syz.0.446" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 248.450644][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 248.550273][ T7549] 9p: Bad value for 'wfdno' [ 248.883056][ T31] audit: type=1400 audit(1700000005.700:597): avc: denied { append } for pid=7552 comm="syz.4.448" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.031489][ T1810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.370402][ T7556] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 249.772362][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 250.180671][ T7567] binfmt_misc: register: failed to install interpreter ./file2 [ 250.189079][ T7567] jffs2: notice: (7567) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 250.217135][ T31] audit: type=1400 audit(1700000001.440:598): avc: denied { write } for pid=7566 comm="syz.1.451" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.507099][ T7571] jffs2: notice: (7571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 250.508443][ T31] audit: type=1400 audit(1700000001.730:599): avc: denied { write } for pid=7570 comm="syz.3.442" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.955997][ T3216] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.744453][ T3216] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 251.765854][ T3216] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.765873][ T3216] usb 2-1: config 0 has no interface number 0 [ 251.774197][ T3216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.774214][ T3216] usb 2-1: Product: syz [ 251.774223][ T3216] usb 2-1: Manufacturer: syz [ 251.774232][ T3216] usb 2-1: SerialNumber: syz [ 251.807155][ T3216] usb 2-1: config 0 descriptor?? [ 251.932112][ T31] audit: type=1400 audit(1700000003.150:600): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 251.935716][ T1812] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 252.042123][ T3216] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 252.092763][ T3216] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 252.093030][ T3216] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 252.093060][ T3216] usb 2-1: media controller created [ 252.135668][ T1812] usb 5-1: Using ep0 maxpacket: 8 [ 252.143251][ T1812] usb 5-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 252.161974][ T1812] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.162009][ T1812] usb 5-1: config 1 interface 0 has no altsetting 0 [ 252.162504][ T1812] usb 5-1: language id specifier not provided by device, defaulting to English [ 252.195066][ T1812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 252.195084][ T1812] usb 5-1: SerialNumber: syz [ 252.319398][ T3216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.418658][ T3216] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 252.609671][ T3216] usb 2-1: USB disconnect, device number 11 [ 252.619499][ T7583] 9p: Bad value for 'rfdno' [ 252.689894][ T1812] usbhid 5-1:1.0: can't add hid device: -71 [ 252.689954][ T1812] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 252.747069][ T1812] usb 5-1: USB disconnect, device number 5 [ 253.476311][ T1810] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 253.628423][ T1810] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 253.629576][ T1810] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 253.629602][ T1810] usb 1-1: config 0 has no interface number 0 [ 253.629641][ T1810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.632046][ T1810] usb 1-1: config 0 descriptor?? [ 253.677777][ T1810] cp210x 1-1:0.16: cp210x converter detected [ 253.707123][ T7601] netlink: 46 bytes leftover after parsing attributes in process `syz.1.459'. [ 253.707153][ T7601] netlink: 'syz.1.459': attribute type 2 has an invalid length. [ 253.716127][ T31] audit: type=1400 audit(1700000004.930:601): avc: denied { write } for pid=7599 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 254.095957][ T1810] cp210x 1-1:0.16: failed to get vendor val 0x000e size 3: -32 [ 254.157856][ T7600] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.195366][ T7600] block device autoloading is deprecated and will be removed. [ 254.309178][ T1810] cp210x 1-1:0.16: GPIO initialisation failed: -19 [ 254.349643][ T1810] usb 1-1: cp210x converter now attached to ttyUSB0 [ 254.825019][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 254.967472][ T5729] usb 1-1: USB disconnect, device number 9 [ 255.053924][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 255.352074][ T5729] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.352590][ T5729] cp210x 1-1:0.16: device disconnected [ 255.418148][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.418200][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.494522][ T31] audit: type=1400 audit(1700000001.670:602): avc: denied { listen } for pid=7617 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 255.543178][ T31] audit: type=1400 audit(1700000001.720:603): avc: denied { ioctl } for pid=7617 comm="syz.4.462" path="socket:[17372]" dev="sockfs" ino=17372 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 255.561837][ T7618] syz.4.462 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 255.899566][ T7624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.899919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.900147][ T7624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.174277][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.185460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.209964][ T7621] binfmt_misc: register: failed to install interpreter ./file2 [ 256.258824][ T7621] jffs2: notice: (7621) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 256.285938][ T7617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.286153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.367154][ T31] audit: type=1400 audit(1700000002.550:604): avc: denied { write } for pid=7619 comm="syz.1.465" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.363202][ T31] audit: type=1400 audit(1700000004.540:605): avc: denied { create } for pid=7645 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.402978][ T31] audit: type=1400 audit(1700000004.580:606): avc: denied { connect } for pid=7645 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.404433][ T31] audit: type=1400 audit(1700000004.580:607): avc: denied { write } for pid=7645 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.562064][ T31] audit: type=1400 audit(1700000004.740:608): avc: denied { watch watch_reads } for pid=7645 comm="syz.2.470" path="/94/file0" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 258.616560][ T1811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.248254][ T3216] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 262.415951][ T3216] usb 4-1: device descriptor read/64, error -71 [ 262.894655][ T3216] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 263.436681][ T3216] usb 4-1: device descriptor read/64, error -71 [ 263.555152][ T3216] usb usb4-port1: attempt power cycle [ 263.814911][ T7680] FAULT_INJECTION: forcing a failure. [ 263.814911][ T7680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.814943][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.2.480 Not tainted syzkaller #0 PREEMPT(full) [ 263.814969][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.814982][ T7680] Call Trace: [ 263.814989][ T7680] [ 263.814998][ T7680] dump_stack_lvl+0x100/0x190 [ 263.815036][ T7680] should_fail_ex.cold+0x5/0xa [ 263.815065][ T7680] ? prepare_alloc_pages+0x16d/0x5b0 [ 263.815098][ T7680] should_fail_alloc_page+0xeb/0x140 [ 263.815131][ T7680] prepare_alloc_pages+0x1f0/0x5b0 [ 263.815165][ T7680] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 263.815191][ T7680] ? __lock_acquire+0x5c0/0x1f40 [ 263.815222][ T7680] ? __lock_acquire+0x5c0/0x1f40 [ 263.815249][ T7680] ? lock_acquire+0x1d1/0x380 [ 263.815272][ T7680] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.815300][ T7680] ? lock_acquire+0x1d1/0x380 [ 263.815322][ T7680] ? is_bpf_text_address+0x25/0x1a0 [ 263.815353][ T7680] ? find_held_lock+0x2b/0x80 [ 263.815382][ T7680] ? is_bpf_text_address+0x8a/0x1a0 [ 263.815409][ T7680] ? is_bpf_text_address+0x8a/0x1a0 [ 263.815438][ T7680] ? bpf_ksym_find+0x128/0x1c0 [ 263.815466][ T7680] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.815494][ T7680] ? kernel_text_address+0x8d/0x100 [ 263.815529][ T7680] ? __kernel_text_address+0xd/0x30 [ 263.815549][ T7680] ? unwind_get_return_address+0x59/0xa0 [ 263.815579][ T7680] ? arch_stack_walk+0xa6/0xf0 [ 263.815607][ T7680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.815635][ T7680] ? policy_nodemask+0xed/0x4f0 [ 263.815667][ T7680] alloc_pages_mpol+0x201/0x550 [ 263.815697][ T7680] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 263.815727][ T7680] ? __lock_acquire+0x5c0/0x1f40 [ 263.815757][ T7680] folio_alloc_mpol_noprof+0x36/0x260 [ 263.815780][ T7680] vma_alloc_folio_noprof+0xed/0x1d0 [ 263.815801][ T7680] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 263.815832][ T7680] do_anonymous_page+0xac9/0x2050 [ 263.815872][ T7680] ? __pfx_do_anonymous_page+0x10/0x10 [ 263.815901][ T7680] ? rcu_read_unlock+0x2d/0xb0 [ 263.815920][ T7680] ? rcu_read_unlock+0x2d/0xb0 [ 263.815940][ T7680] ? __pte_offset_map+0x179/0x310 [ 263.815968][ T7680] __handle_mm_fault+0x1ff3/0x2f60 [ 263.816004][ T7680] ? lock_vma_under_rcu+0x11d/0x590 [ 263.816034][ T7680] ? __pfx___handle_mm_fault+0x10/0x10 [ 263.816069][ T7680] ? lock_vma_under_rcu+0x17c/0x590 [ 263.816117][ T7680] handle_mm_fault+0x363/0xa20 [ 263.816155][ T7680] do_user_addr_fault+0x59c/0x12f0 [ 263.816190][ T7680] exc_page_fault+0x6f/0xd0 [ 263.816214][ T7680] asm_exc_page_fault+0x26/0x30 [ 263.816236][ T7680] RIP: 0033:0x7f5807265a50 [ 263.816254][ T7680] Code: 76 13 00 89 c3 85 c0 0f 88 ad 07 00 00 83 f8 1d 0f 8f 9d 09 00 00 48 8d 3d ad 5f 1a 00 31 c0 41 bf 01 00 00 00 e8 70 ca fe ff 44 0f c1 3d a7 a8 4e 00 41 83 ff 05 7f 06 49 83 fc 1a 77 1b 48 [ 263.816273][ T7680] RSP: 002b:00007f5808339f60 EFLAGS: 00010202 [ 263.816291][ T7680] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 263.816305][ T7680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f580740b9f0 [ 263.816318][ T7680] RBP: 00007f580743506b R08: 0000000000000000 R09: 0000000000000000 [ 263.816332][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 263.816346][ T7680] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000001 [ 263.816376][ T7680] [ 263.821893][ T7680] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 264.108147][ T3216] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 264.221557][ T3216] usb 4-1: device descriptor read/8, error -71 [ 264.454994][ T5827] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 264.547438][ T7690] binfmt_misc: register: failed to install interpreter ./file2 [ 264.567533][ T7690] jffs2: notice: (7690) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 264.859669][ T5827] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 264.878961][ T5827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.879006][ T5827] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.881044][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.881068][ T5827] usb 3-1: Product: syz [ 264.881083][ T5827] usb 3-1: Manufacturer: syz [ 264.881098][ T5827] usb 3-1: SerialNumber: syz [ 266.108741][ T5827] usb 3-1: USB disconnect, device number 8 [ 266.218715][ T7701] binfmt_misc: register: failed to install interpreter ./file2 [ 266.228509][ T7701] jffs2: notice: (7701) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 266.314520][ T31] audit: type=1400 audit(1700000012.490:609): avc: denied { write } for pid=7693 comm="syz.4.485" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.612319][ T7705] binfmt_misc: register: failed to install interpreter ./file2 [ 268.536263][ T1811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.282760][ T7723] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 270.325653][ T7723] team0: Port device dummy0 added [ 270.349914][ T7723] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 270.506640][ T7723] team0: Port device dummy0 removed [ 270.553582][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 270.689163][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.495'. [ 271.422267][ T7736] overlayfs: upper fs does not support file handles, falling back to index=off. [ 271.422284][ T7736] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 272.698381][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 272.729927][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 272.733517][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 272.734435][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 272.735236][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 272.735934][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 272.736722][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 272.737454][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 274.120860][ T7756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.566533][ T31] audit: type=1400 audit(1700000001.200:610): avc: denied { ioctl } for pid=7755 comm="syz.0.503" path="socket:[18327]" dev="sockfs" ino=18327 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 275.785336][ T7773] __nla_validate_parse: 7 callbacks suppressed [ 275.785366][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 276.223269][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 277.902487][ T1810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.367627][ T31] audit: type=1400 audit(1700000007.120:611): avc: denied { bind } for pid=7806 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.369501][ T31] audit: type=1400 audit(1700000007.120:612): avc: denied { setopt } for pid=7806 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.379418][ T31] audit: type=1400 audit(1700000007.130:613): avc: denied { accept } for pid=7806 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.446931][ T7807] xt_connbytes: Forcing CT accounting to be enabled [ 280.447091][ T7807] Cannot find set identified by id 0 to match [ 281.476023][ T7822] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 281.528674][ T1811] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 281.703846][ T1811] usb 1-1: Using ep0 maxpacket: 32 [ 281.707736][ T1811] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 281.739255][ T1811] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 281.739320][ T1811] usb 1-1: config 0 has no interface number 0 [ 281.739662][ T1811] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.739696][ T1811] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 281.739731][ T1811] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 55854, setting to 64 [ 281.739762][ T1811] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.829953][ T1811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.830355][ T1811] usb 1-1: Product: syz [ 281.830640][ T1811] usb 1-1: Manufacturer: syz [ 281.830903][ T1811] usb 1-1: SerialNumber: syz [ 282.051343][ T1811] usb 1-1: config 0 descriptor?? [ 283.819557][ T1811] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input11 [ 284.384566][ T1811] usb 1-1: USB disconnect, device number 10 [ 285.606844][ T31] audit: type=1400 audit(1700000011.940:614): avc: denied { connect } for pid=7830 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.667061][ T7835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 285.669471][ T7835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59904 sclass=netlink_route_socket pid=7835 comm=syz.0.519 [ 285.982438][ T31] audit: type=1400 audit(1700000012.710:615): avc: denied { write } for pid=7840 comm="syz.4.514" name="nullb" dev="configfs" ino=3565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 286.045188][ T31] audit: type=1400 audit(1700000012.800:616): avc: denied { write } for pid=7840 comm="syz.4.514" name="power" dev="configfs" ino=18957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 286.047437][ T31] audit: type=1400 audit(1700000012.800:617): avc: denied { open } for pid=7840 comm="syz.4.514" path="/107/config/nullb/nullb1/power" dev="configfs" ino=18957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 286.509494][ T7843] null_blk: disk nullb1 created [ 287.453492][ T1810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.642718][ T7855] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 289.494365][ T1107] IPVS: starting estimator thread 0... [ 289.593370][ T7873] IPVS: using max 37 ests per chain, 88800 per kthread [ 290.219255][ T7880] binfmt_misc: register: failed to install interpreter ./file2 [ 290.236013][ T7880] jffs2: notice: (7880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 290.267324][ T31] audit: type=1400 audit(1700000017.021:618): avc: denied { write } for pid=7876 comm="syz.3.522" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.729794][ T7883] binfmt_misc: register: failed to install interpreter ./file2 [ 290.894655][ T7890] binfmt_misc: register: failed to install interpreter ./file2 [ 290.915232][ T7890] jffs2: notice: (7890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 291.460528][ T7901] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5601] was attempted by ""[7901] [ 292.081680][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 293.024835][ T7915] hub 8-0:1.0: USB hub found [ 293.025827][ T7915] hub 8-0:1.0: 1 port detected [ 293.098866][ T31] audit: type=1400 audit(1700000019.851:619): avc: denied { read } for pid=7917 comm="syz.0.539" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 293.170721][ T31] audit: type=1400 audit(1700000019.921:620): avc: denied { getopt } for pid=7917 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.410234][ T7924] binfmt_misc: register: failed to install interpreter ./file2 [ 293.430800][ T7924] jffs2: notice: (7924) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 293.855410][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 293.859007][ T7930] syz_tun: Device is already in use. [ 293.910828][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 296.508033][ T7944] binfmt_misc: register: failed to install interpreter ./file2 [ 296.524839][ T7944] jffs2: notice: (7944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 296.550775][ T31] audit: type=1400 audit(1700000003.780:621): avc: denied { write } for pid=7940 comm="syz.3.547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.735850][ T1810] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 296.927139][ T1810] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.928029][ T1810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.928052][ T1810] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.932202][ T1810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.932225][ T1810] usb 1-1: SerialNumber: syz [ 297.004386][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 297.055075][ T1811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.694146][ T52] Bluetooth: hci0: unexpected subevent 0x2b length: 16 < 253 [ 297.932422][ T1810] usb 1-1: 0:2 : does not exist [ 297.932507][ T1810] usb 1-1: unit 5: unexpected type 0x0a [ 298.127209][ T1810] usb 1-1: USB disconnect, device number 11 [ 298.286887][ T7945] udevd[7945]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.261401][ T31] audit: type=1400 audit(1700000008.490:622): avc: denied { connect } for pid=7991 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 301.324175][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 301.324296][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.397466][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.141445][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 303.216736][ T8004] ALSA: mixer_oss: invalid OSS volume '' [ 303.764879][ T8014] jffs2: notice: (8014) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 303.771867][ T31] audit: type=1400 audit(1700000011.000:623): avc: denied { write } for pid=8011 comm="syz.3.563" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.835971][ T8044] jffs2: notice: (8044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 304.863475][ T31] audit: type=1400 audit(1700000012.100:624): avc: denied { write } for pid=8042 comm="syz.2.572" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.821184][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.573'. [ 306.424468][ T8061] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 306.615668][ T1811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.189651][ T8074] jffs2: notice: (8074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 308.277354][ T8060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.342293][ T8094] binfmt_misc: register: failed to install interpreter ./file2 [ 310.361691][ T8094] jffs2: notice: (8094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 310.384328][ T31] audit: type=1400 audit(1700000017.621:625): avc: denied { write } for pid=8081 comm="syz.4.581" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.718858][ T8096] binfmt_misc: register: failed to install interpreter ./file2 [ 310.736326][ T8096] jffs2: notice: (8096) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 310.761615][ T31] audit: type=1400 audit(1700000017.991:626): avc: denied { write } for pid=8089 comm="syz.2.586" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.334100][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'. [ 311.904738][ T5827] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 312.294273][ T5827] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 312.295182][ T5827] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 312.295198][ T5827] usb 5-1: config 253 has no interface number 0 [ 312.295220][ T5827] usb 5-1: config 253 interface 130 has no altsetting 0 [ 312.323914][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.323940][ T5827] usb 5-1: Product: syz [ 312.323955][ T5827] usb 5-1: Manufacturer: syz [ 312.323969][ T5827] usb 5-1: SerialNumber: syz [ 312.892808][ T5827] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 312.915756][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.916169][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.916963][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.925493][ T5827] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 312.925540][ T5827] usb 5-1: media controller created [ 312.972424][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.082969][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 313.114429][ T5827] DVB: Unable to find symbol dib8000_attach() [ 313.114441][ T5827] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 313.282591][ T5827] rc_core: IR keymap rc-dib0700-nec not found [ 313.282649][ T5827] Registered IR keymap rc-empty [ 313.296082][ T5827] dvb-usb: could not initialize remote control. [ 313.296096][ T5827] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 313.461753][ T1811] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 313.594415][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.595066][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.620112][ T1811] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 313.621324][ T1811] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.621361][ T1811] usb 3-1: config 0 has no interface number 0 [ 313.652881][ T1811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.652908][ T1811] usb 3-1: Product: syz [ 313.652923][ T1811] usb 3-1: Manufacturer: syz [ 313.652939][ T1811] usb 3-1: SerialNumber: syz [ 313.706928][ T1811] usb 3-1: config 0 descriptor?? [ 313.913000][ T1811] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 313.930836][ T1811] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.930996][ T1811] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 313.931019][ T1811] usb 3-1: media controller created [ 313.992503][ T1811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.998573][ T8126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.082761][ T8126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.145305][ T8135] ------------[ cut here ]------------ [ 314.145327][ T8135] usb 5-1: BOGUS control dir, pipe 80000680 doesn't match bRequestType c0 [ 314.145348][ T8135] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.2.595/8135 [ 314.173220][ T8135] Modules linked in: [ 314.178428][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.2.595 Not tainted syzkaller #0 PREEMPT(full) [ 314.187677][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.197848][ T8135] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 314.203562][ T8135] Code: 48 89 54 24 40 e8 73 0c 7c fa 4c 89 e7 e8 7b d5 da fe 48 89 c6 48 8d 3d 31 4c c2 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 44 0c 7c fa 89 ee bf ff 00 00 00 [ 314.223348][ T8135] RSP: 0018:ffffc9000692f970 EFLAGS: 00010283 [ 314.229426][ T8135] RAX: ffffffff8cc86d40 RBX: ffff88802c7d1e00 RCX: 0000000080000680 [ 314.237471][ T8135] RDX: ffff88802d640fc0 RSI: ffffffff8cc86d40 RDI: ffffffff915284a0 [ 314.245532][ T8135] RBP: ffff8880379e2058 R08: 00000000000000c0 R09: 0000000000000000 [ 314.253587][ T8135] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880379e20b0 [ 314.261570][ T8135] R13: ffff888023ab5860 R14: ffff888023ab5866 R15: ffff888023ab5867 [ 314.269602][ T8135] FS: 00007f580833c6c0(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000 [ 314.278588][ T8135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.285249][ T8135] CR2: 00007fbf771eb840 CR3: 0000000074df7000 CR4: 00000000003526f0 [ 314.293369][ T8135] Call Trace: [ 314.296653][ T8135] [ 314.299597][ T8135] ? __init_swait_queue_head+0xca/0x150 [ 314.306188][ T8135] usb_start_wait_urb+0x10e/0x580 [ 314.311241][ T8135] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 314.316926][ T8135] ? __asan_memset+0x23/0x50 [ 314.321532][ T8135] usb_control_msg+0x328/0x4b0 [ 314.326367][ T8135] ? __pfx_usb_control_msg+0x10/0x10 [ 314.330224][ T1812] usb 5-1: USB disconnect, device number 6 [ 314.337509][ T8135] ? check_prev_add+0xfe/0xe60 [ 314.342373][ T8135] dib0700_ctrl_rd+0x1b5/0x320 [ 314.347157][ T8135] dib0700_i2c_xfer+0x460/0xd90 [ 314.352083][ T8135] __i2c_transfer+0x5d4/0x1740 [ 314.356851][ T8135] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 314.362734][ T8135] ? __pfx___i2c_transfer+0x10/0x10 [ 314.367938][ T8135] ? rt_mutex_slowtrylock+0x93/0x100 [ 314.373353][ T8135] i2c_transfer+0x158/0x380 [ 314.377859][ T8135] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 314.382850][ T8135] i2cdev_ioctl+0x19d/0x830 [ 314.387360][ T8135] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 314.392469][ T8135] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 314.397503][ T8135] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 314.402622][ T8135] __x64_sys_ioctl+0x18e/0x210 [ 314.407405][ T8135] do_syscall_64+0x123/0x790 [ 314.412059][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.417957][ T8135] RIP: 0033:0x7f580739e159 [ 314.422459][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.442131][ T8135] RSP: 002b:00007f580833c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.450554][ T8135] RAX: ffffffffffffffda RBX: 00007f5807625fa0 RCX: 00007f580739e159 [ 314.458602][ T8135] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000006 [ 314.466628][ T8135] RBP: 00007f580743506b R08: 0000000000000000 R09: 0000000000000000 [ 314.474683][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.482781][ T8135] R13: 00007f5807626038 R14: 00007f5807625fa0 R15: 00007ffc379a4d48 [ 314.490777][ T8135] [ 314.493974][ T8135] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.501253][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.2.595 Not tainted syzkaller #0 PREEMPT(full) [ 314.510442][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.520480][ T8135] Call Trace: [ 314.523747][ T8135] [ 314.526673][ T8135] dump_stack_lvl+0x100/0x190 [ 314.531346][ T8135] vpanic+0x553/0x970 [ 314.535311][ T8135] ? __pfx_vpanic+0x10/0x10 [ 314.539817][ T8135] panic+0xd1/0xe0 [ 314.543524][ T8135] ? __pfx_panic+0x10/0x10 [ 314.547936][ T8135] check_panic_on_warn.cold+0x19/0x34 [ 314.553297][ T8135] ? usb_submit_urb+0x15ff/0x19b0 [ 314.558320][ T8135] __warn.cold+0x191/0x318 [ 314.562717][ T8135] __report_bug+0x30f/0x440 [ 314.567210][ T8135] ? usb_submit_urb+0x15ff/0x19b0 [ 314.572236][ T8135] ? __pfx___report_bug+0x10/0x10 [ 314.577239][ T8135] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 314.583047][ T8135] ? lockdep_hardirqs_on+0x7d/0x110 [ 314.588250][ T8135] ? kasan_save_stack+0x3f/0x50 [ 314.593092][ T8135] report_bug_entry+0xe2/0x290 [ 314.597843][ T8135] ? usb_submit_urb+0x160d/0x19b0 [ 314.602851][ T8135] handle_bug+0x1cd/0x2a0 [ 314.607179][ T8135] exc_invalid_op+0x17/0x50 [ 314.611679][ T8135] asm_exc_invalid_op+0x1a/0x20 [ 314.616515][ T8135] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 314.622139][ T8135] Code: 48 89 54 24 40 e8 73 0c 7c fa 4c 89 e7 e8 7b d5 da fe 48 89 c6 48 8d 3d 31 4c c2 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 44 0c 7c fa 89 ee bf ff 00 00 00 [ 314.641734][ T8135] RSP: 0018:ffffc9000692f970 EFLAGS: 00010283 [ 314.647798][ T8135] RAX: ffffffff8cc86d40 RBX: ffff88802c7d1e00 RCX: 0000000080000680 [ 314.655773][ T8135] RDX: ffff88802d640fc0 RSI: ffffffff8cc86d40 RDI: ffffffff915284a0 [ 314.663746][ T8135] RBP: ffff8880379e2058 R08: 00000000000000c0 R09: 0000000000000000 [ 314.671713][ T8135] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880379e20b0 [ 314.679680][ T8135] R13: ffff888023ab5860 R14: ffff888023ab5866 R15: ffff888023ab5867 [ 314.687669][ T8135] ? __init_swait_queue_head+0xca/0x150 [ 314.693226][ T8135] usb_start_wait_urb+0x10e/0x580 [ 314.698248][ T8135] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 314.703798][ T8135] ? __asan_memset+0x23/0x50 [ 314.708380][ T8135] usb_control_msg+0x328/0x4b0 [ 314.713141][ T8135] ? __pfx_usb_control_msg+0x10/0x10 [ 314.718437][ T8135] ? check_prev_add+0xfe/0xe60 [ 314.723204][ T8135] dib0700_ctrl_rd+0x1b5/0x320 [ 314.727971][ T8135] dib0700_i2c_xfer+0x460/0xd90 [ 314.732833][ T8135] __i2c_transfer+0x5d4/0x1740 [ 314.737583][ T8135] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 314.743391][ T8135] ? __pfx___i2c_transfer+0x10/0x10 [ 314.748573][ T8135] ? rt_mutex_slowtrylock+0x93/0x100 [ 314.753869][ T8135] i2c_transfer+0x158/0x380 [ 314.758370][ T8135] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 314.763311][ T8135] i2cdev_ioctl+0x19d/0x830 [ 314.767818][ T8135] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 314.772835][ T8135] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 314.777850][ T8135] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 314.782857][ T8135] __x64_sys_ioctl+0x18e/0x210 [ 314.787612][ T8135] do_syscall_64+0x123/0x790 [ 314.792186][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.798067][ T8135] RIP: 0033:0x7f580739e159 [ 314.802469][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.822070][ T8135] RSP: 002b:00007f580833c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.830465][ T8135] RAX: ffffffffffffffda RBX: 00007f5807625fa0 RCX: 00007f580739e159 [ 314.838414][ T8135] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000006 [ 314.846369][ T8135] RBP: 00007f580743506b R08: 0000000000000000 R09: 0000000000000000 [ 314.854331][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.862317][ T8135] R13: 00007f5807626038 R14: 00007f5807625fa0 R15: 00007ffc379a4d48 [ 314.870278][ T8135] [ 314.873522][ T8135] Kernel Offset: disabled [ 314.877839][ T8135] Rebooting in 86400 seconds..