last executing test programs: 5m37.009707491s ago: executing program 3 (id=189): shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'netpci0\x00', {0x2, 0x4e26, @broadcast}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xfffffff8, 0x3, 0x20, "421bd444ec10e6d2f703327b29b7c470c4dfda883e7f61f39680576cb2f40918", 0x51424752}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0xa, 0xc, 0x4, 0x5, 0x2, 0x8, 0x7}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @any, 0x18}, 0xa) 5m33.186938595s ago: executing program 3 (id=199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0xd, &(0x7f0000000100)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) move_pages(0x0, 0x20a0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$radio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x5, [{@local, 0x4}, {@multicast2, 0x3}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4, r5}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r5, @ANYBLOB="ffff00"/18, @ANYRES32=r4], 0x50) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000680)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) bpf$ITER_CREATE(0xb, &(0x7f00000006c0), 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000700)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401016420"], 0x7) 5m30.803680064s ago: executing program 3 (id=203): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f0000000080)={0x1, 0x9, 0x100, 0x8, 0x4, 0x1, 0xaa, 0x9}, 0x0, &(0x7f00000000c0)={0x9, 0x8000000000000001, 0x8, 0x3, 0x5, 0x9, 0x9, 0x1000}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f046}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000005c0)={0x28, 0x6, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8001}) ioctl(r2, 0x3b92, &(0x7f0000000640)="10") mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000300)='./my_configfs\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/vlan/vlan0\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000480)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0), 0x200002, 0x0) 5m26.374312809s ago: executing program 3 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0xb27, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @tfcpad={0x8, 0x16, 0x200}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2}, 0x1c) listen(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000780)=""/106, 0x6a}], 0x2, 0x7, 0x20000000) write(r2, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) 5m24.682052565s ago: executing program 3 (id=212): r0 = socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a05004, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = accept$unix(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) getpeername$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000040)) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f000001fc80)=""/102396, &(0x7f0000038c80)=0x18ffc) 5m22.093988603s ago: executing program 3 (id=216): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040002000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000006000000040000000120000081000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r2, &(0x7f0000000400)}, 0x20) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0xffff1000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x4, 0xc2, 0x4f, 0x40, 0x1, 0x80, 0x1, 0x7f, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa7f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x22, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x68, 0x4}], 0x9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000500)={0x7, 0x100}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x140, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./dev/mapper/control\x00', 0x1dd) mount(0x0, &(0x7f0000002640)='./dev\x00', &(0x7f0000002680)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='./dev/mapper/control\x00', 0x2, 0x4) ioctl(r7, 0xc138fd03, &(0x7f0000002700)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r7, 0xc138fd09, &(0x7f0000002740)="040000000000000000000000a00100003801000001000008") r8 = fanotify_init(0x81, 0x40000) fanotify_mark(r8, 0x80, 0x800101b, r6, 0x0) read$FUSE(r8, &(0x7f0000000580)={0x2020}, 0x2020) write(r5, &(0x7f0000000300)="120000001c0000010011223344556600000101010101010101010101010101010100", 0x22) truncate(&(0x7f00000025c0)='./file0\x00', 0x8) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000400)="66baf80cb8f01ce68eef66bafc0c66edf30fa7d8f243aef265440fc78cd50400000048b80f000000000000000f23d80f21f835c00000c00f23f836660f38801046dbe226440f0766b8d4008ec8640f01f1", 0x51}], 0x1, 0x4, &(0x7f00000004c0)=[@cstype3={0x5, 0x6}, @flags={0x3, 0x100}], 0x2) 5m20.624141628s ago: executing program 32 (id=216): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040002000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000006000000040000000120000081000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r2, &(0x7f0000000400)}, 0x20) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0xffff1000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x4, 0xc2, 0x4f, 0x40, 0x1, 0x80, 0x1, 0x7f, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa7f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x22, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x68, 0x4}], 0x9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000500)={0x7, 0x100}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x140, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./dev/mapper/control\x00', 0x1dd) mount(0x0, &(0x7f0000002640)='./dev\x00', &(0x7f0000002680)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='./dev/mapper/control\x00', 0x2, 0x4) ioctl(r7, 0xc138fd03, &(0x7f0000002700)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r7, 0xc138fd09, &(0x7f0000002740)="040000000000000000000000a00100003801000001000008") r8 = fanotify_init(0x81, 0x40000) fanotify_mark(r8, 0x80, 0x800101b, r6, 0x0) read$FUSE(r8, &(0x7f0000000580)={0x2020}, 0x2020) write(r5, &(0x7f0000000300)="120000001c0000010011223344556600000101010101010101010101010101010100", 0x22) truncate(&(0x7f00000025c0)='./file0\x00', 0x8) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000400)="66baf80cb8f01ce68eef66bafc0c66edf30fa7d8f243aef265440fc78cd50400000048b80f000000000000000f23d80f21f835c00000c00f23f836660f38801046dbe226440f0766b8d4008ec8640f01f1", 0x51}], 0x1, 0x4, &(0x7f00000004c0)=[@cstype3={0x5, 0x6}, @flags={0x3, 0x100}], 0x2) 55.392241949s ago: executing program 4 (id=785): syz_open_dev$dvb_frontend(&(0x7f0000000d80), 0x0, 0x40) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x5, 0x103) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x40, 0x410280) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x7, 0x100}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000880)=0x7) sched_setscheduler(0x0, 0x7, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000a00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x6) r5 = fsopen(&(0x7f0000000a80)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4008000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="040feb00fa1b04"], 0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x1) fanotify_init(0xf00, 0x0) 49.12162267s ago: executing program 4 (id=801): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setns(0xc9, 0x0) clock_settime(0xc, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x220100, 0x1) openat(r2, &(0x7f0000000280)='./file0\x00', 0x30500, 0x158) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x5, 0x2, 0x4, 0x0, 0xd}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6) setns(0xc9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x480bc000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000400)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019400)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000019440)=0x9, 0x8, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) setrlimit(0x7, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 48.508871478s ago: executing program 4 (id=806): syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_usb_connect(0x5, 0x24, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="ff44000fc75823660f38829d00500f01c3f235000066b8180000000f23d80f21f86635000000400f23f866b9270b000066b840a8000066ba000000000f30672ac466b8019d66710f23d00f21f866353000000a0f23f8660f624d31", 0x5b}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7d, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0x8, 0x0, '\x00', 0x0, 0x7f}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r3, &(0x7f0000000340)=[{'DIGITAL1', @void}, {'IGAIN', @val={' \'', 'Synth Capture Switch'}}, {'SYNTH', @val={' \'', 'Synth Capture Switch'}}, {'LINE', @val={' \'', 'Line Capture Switch'}}], 0x9d) dup3(r4, r3, 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000440)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb08004500"], 0x0) syz_emit_ethernet(0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) unshare(0x42040400) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0x38, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x9, 0x18, 0x40, '\x00', 0xb}, {0xff, 0x83, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x77}, {0x4, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xee, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x6, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0x3, 0x7, '\x00', 0xc6}, {0x4, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xa7, 0x80, '\x00', 0x5}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x56, 0x23, 0xf3, '\x00', 0x5}, {0x7, 0x3, 0x4}]}}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000840), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000880)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000008c0)=0xdfe5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000a40)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000a80)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000002400010028bd7000fcdbdf250a000000060003002c"], 0x24}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 45.585951539s ago: executing program 1 (id=810): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) pread64(r1, &(0x7f00000038c0)=""/103, 0x67, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000080)) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) 44.68949885s ago: executing program 1 (id=813): openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self/make-it-fail\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='cgroup\x00') r1 = openat$full(0xffffffffffffff9c, 0x0, 0x20002, 0x0) pwritev(r1, 0x0, 0x0, 0x403, 0x20000000) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x5, 0x4, &(0x7f00000000c0)={0x9, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x17, 0x44, @random="85b4def362c5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000b90000000000000000000000000000000400"/112], 0xb8}}, 0x0) syz_clone3(&(0x7f0000000980)={0x20000000, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780), {0x2b}, &(0x7f00000007c0)=""/227, 0xe3, &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) fcntl$lock(r4, 0x6, &(0x7f0000000a00)={0x1, 0x3, 0x2, 0x4, r5}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x189802, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'veth0\x00', 0x0}) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000000580)='team0\x00') sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtclass={0x2c, 0x28, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xc, 0xa}, {0x6, 0x6}, {0xffff, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x2c}}, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x8, 0x0, 0x0}}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) lseek(r0, 0x2000, 0x0) 40.87306062s ago: executing program 2 (id=823): syz_open_dev$video(&(0x7f0000000300), 0xfffffffffffffff8, 0x40000) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x2, 0x30, 0xfffd, 0x4000, 0x0, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x80, 0x0, 0x0, 0x2d9}}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x48) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000200)='\'\x00', &(0x7f0000000240)='\xbb\xbb\xbb\xbb\xbb\xbb']}, &(0x7f0000000440)={[&(0x7f00000002c0)='{\x00', &(0x7f0000000340)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\xb5{\x00', &(0x7f0000000400)='/dev/video#\x00']}, 0x1000) syz_clone3(&(0x7f0000000180)={0x23800200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000500)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000540), 0x4000190, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1f}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x2}]}}, 0x0, 0x3e}, 0x28) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000580)=0x10, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r7, &(0x7f0000000700), &(0x7f0000000740)=@udp=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r7, &(0x7f00000007c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='tps6598x 0x20\n', 0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='autofs\x00', 0x0, &(0x7f0000000a40)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='mountinfo\x00') read$FUSE(r9, &(0x7f0000001340)={0x2020}, 0xcb22) clock_gettime(0x1, &(0x7f0000003380)) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 39.841209961s ago: executing program 5 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000180)) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1) 39.67797164s ago: executing program 2 (id=827): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) pread64(r1, &(0x7f00000038c0)=""/103, 0x67, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000080)) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) 38.772138457s ago: executing program 2 (id=829): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x94200, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/trace_marker\x00', 0x1, 0x1a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f0000002280)=""/16384, 0x4000) write$binfmt_script(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0xfffffffffffffe65, 0x3}, {0x0, [0x5f]}}, 0x0, 0x1b, 0x0, 0xffffffff}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r5, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) 38.117976293s ago: executing program 0 (id=831): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022220000009623130601ff03e7e036042a000827020000008304"], 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000380)={0xffffffff, "129e4cd75a6099e039e0134d3d578540211650db3cb01ab45eb078ec5c75878b", 0x10, 0x7, 0x0, 0x10, 0x4}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)={'b', ' *:* ', 'rw\x00'}, 0x9) read$dsp(0xffffffffffffffff, &(0x7f000000c2c0)=""/4086, 0xff6) write$dsp(r0, &(0x7f000000d2c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 38.010822087s ago: executing program 4 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000198c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019500)=0x7) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f000001a8c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000001a900)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f000001a940)='./rpc_pipe\x00', &(0x7f000001a980)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f000001a9c0)=@filename='127.0.0.1:/test\x00', &(0x7f000001aa00)='./mnt\x00', &(0x7f000001aa40)='nfs\x00', 0x0, &(0x7f000001aa80)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001ab00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f000001ab40)={0xa0000001}) setxattr$security_ima(0x0, &(0x7f000001ab80), &(0x7f000001abc0)=@v2={0x5, 0x3, 0xd, 0x8, 0x78, "a92c1fd1ffd2bf69fdcf69796f6a5c2c54184ac8e34d42e71c851a2a05240d77f03b138ee746c2245e3d0f2dfe70752fcd408ce566ddf3942a20590cec5ca74872eb062c41f6f03a098be5378600fa6cb1e46146669ac1c73621e1f0da6ed7c79910fbeb8ba774c0703ecc025563f8febfc88d607509de57"}, 0x81, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 37.006730742s ago: executing program 5 (id=833): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x80003, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1978, &(0x7f0000000340)={0x0, 0x2111, 0x40000, 0x0, 0x2000afb}) r3 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x130, 0x0, 0x4, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0x101, 0x2, {0x0, 0x2}, {0x0, 0x4}, {}, {0x1080000000}, 0x0, 0x5, 0x0, 0x2}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x6f4, 0x3c3, 0x50, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000080)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x10}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x38, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) bind$netlink(r6, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000840)={0x2, 0x0, @empty}, 0x10) connect$inet(r9, &(0x7f0000000880)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) 36.91383001s ago: executing program 4 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r4, 0xc008aeba, 0x0) setns(0xc9, 0x0) r5 = socket(0x8, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x4204000c, 0x0, &(0x7f0000000100)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 35.030174356s ago: executing program 5 (id=835): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000300)='./file0\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000006d40)='./file0\x00', 0x20c01, 0x0) 34.979038619s ago: executing program 2 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000198c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019500)=0x7) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f000001a8c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000001a900)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f000001a940)='./rpc_pipe\x00', &(0x7f000001a980)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f000001a9c0)=@filename='127.0.0.1:/test\x00', &(0x7f000001aa00)='./mnt\x00', &(0x7f000001aa40)='nfs\x00', 0x0, &(0x7f000001aa80)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001ab00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000001ab40)={0xa0000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f000001acc0)={0x6, 0x3, &(0x7f000001ad80)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], 0x0, 0x5, 0xe2, &(0x7f000001adc0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f000001aec0), 0x10}, 0x94) mount(&(0x7f000001af00)=@filename='127.0.0.1:/test\x00', &(0x7f000001af40)='./mnt\x00', &(0x7f000001af80)='nfs4\x00', 0x0, &(0x7f000001afc0)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 34.879695572s ago: executing program 5 (id=837): syz_open_dev$video(&(0x7f0000000300), 0xfffffffffffffff8, 0x40000) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x2, 0x30, 0xfffd, 0x4000, 0x0, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x80, 0x0, 0x0, 0x2d9}}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x48) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000200)='\'\x00', &(0x7f0000000240)='\xbb\xbb\xbb\xbb\xbb\xbb']}, &(0x7f0000000440)={[&(0x7f00000002c0)='{\x00', &(0x7f0000000340)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\xb5{\x00', &(0x7f0000000400)='/dev/video#\x00']}, 0x1000) syz_clone3(&(0x7f0000000180)={0x23800200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000500)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000540), 0x4000190, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1f}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x2}]}}, 0x0, 0x3e}, 0x28) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000580)=0x10, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r7, &(0x7f0000000700), &(0x7f0000000740)=@udp=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r7, &(0x7f00000007c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='tps6598x 0x20\n', 0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='autofs\x00', 0x0, &(0x7f0000000a40)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='mountinfo\x00') read$FUSE(r9, &(0x7f0000001340)={0x2020}, 0xcb22) clock_gettime(0x1, &(0x7f0000003380)) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 34.030055193s ago: executing program 1 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x2, 0x300) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="043e1f1b"], 0x22) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "00186371ae871c03"}}}}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r2, &(0x7f00000001c0)='$e', 0x2, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/210, 0xd2}], 0x1) recvfrom(r2, &(0x7f0000000380)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000080)={0xf000200a}) 33.981383289s ago: executing program 0 (id=839): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x802, 0x20ffff) r0 = syz_io_uring_setup(0x3142, &(0x7f0000019300)={0x0, 0xacb6, 0x80, 0xfffffffe, 0x8000d}, &(0x7f0000019180)=0x0, &(0x7f0000019140)=0x0, &(0x7f0000019240)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000019280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000191c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f00000010c0)=[0x57a9, 0x8000000, 0x3cd, 0x8, 0xc, 0x1, 0x101, 0x8]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2000000000000358, &(0x7f0000019200)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x64) write(r6, &(0x7f0000000100)='0', 0x1) 33.91485601s ago: executing program 2 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000180)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001740)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001a740)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000001a780)={0xd, 0x6, &(0x7f000001a840)=ANY=[@ANYBLOB="0500ffff000000006311a40000000000859d7746ccf017fd991ab700080000e895000007000000009500a50500000000"], &(0x7f000001a880)='GPL\x00', 0x9, 0x29e, &(0x7f000001a8c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r0, 0x400454dc, &(0x7f0000001700)) 32.409845034s ago: executing program 5 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000198c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019500)=0x7) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f000001a8c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f000001a940)='./rpc_pipe\x00', &(0x7f000001a980)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f000001a9c0)=@filename='127.0.0.1:/test\x00', &(0x7f000001aa00)='./mnt\x00', &(0x7f000001aa40)='nfs\x00', 0x0, &(0x7f000001aa80)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001ab00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f000001ab40)={0xa0000001}) setxattr$security_ima(0x0, &(0x7f000001ab80), &(0x7f000001abc0)=@v2={0x5, 0x3, 0xd, 0x8, 0x78, "a92c1fd1ffd2bf69fdcf69796f6a5c2c54184ac8e34d42e71c851a2a05240d77f03b138ee746c2245e3d0f2dfe70752fcd408ce566ddf3942a20590cec5ca74872eb062c41f6f03a098be5378600fa6cb1e46146669ac1c73621e1f0da6ed7c79910fbeb8ba774c0703ecc025563f8febfc88d607509de57"}, 0x81, 0x3) ppoll(&(0x7f000001ac80)=[{0xffffffffffffffff, 0x2000}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f000001acc0)={0x6, 0x3, &(0x7f000001ad80)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], 0x0, 0x5, 0xe2, &(0x7f000001adc0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f000001aec0), 0x10}, 0x94) mount(&(0x7f000001af00)=@filename='127.0.0.1:/test\x00', &(0x7f000001af40)='./mnt\x00', &(0x7f000001af80)='nfs4\x00', 0x0, &(0x7f000001afc0)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 32.357307423s ago: executing program 0 (id=842): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt_trace\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./mnt_trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140), 0x0, 0x200) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000600)={0xd, 0x9, 0x100, "518ba3fa2f26202c0a43a795ad948b4400346a97159e1eff930ed7d432082d61", 0x3247504d}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/213, 0xd5}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000700)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='sys_mnt\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='1', 0x1) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000040)={r4, 0x0, 0x25, 0x1, @void}, 0x30) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) 31.49569513s ago: executing program 0 (id=843): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) mkdir(&(0x7f0000000440)='./tracefs\x00', 0x1ff) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'ip_vti0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000500)=0xa7) write$cgroup_devices(r2, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYBLOB="4028f1"], 0xffdd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0382, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r5, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r7) sendmsg$IEEE802154_LLSEC_LIST_DEV(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r8, 0xb11, 0x70bd28, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) openat$urandom(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000940)=@ll, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/113, 0x71}], 0x1}, 0xd06}, {{&(0x7f0000000a80)=@tipc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000040)=""/195, 0xc3}, {&(0x7f0000000c80)=""/122, 0x7a}, {&(0x7f0000000d00)=""/244, 0xf4}, {&(0x7f0000000e00)=""/43, 0x2b}, {&(0x7f0000000e40)=""/133, 0x85}], 0x5, &(0x7f0000000f00)=""/10, 0xa}, 0xec6}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)=""/128, 0x80}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000000)=""/44, 0x2c}], 0x3, &(0x7f0000002040)=""/28, 0x1c}, 0x1000}], 0x3, 0xfc0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000002080)=0x1, 0x4) connect$inet(r9, &(0x7f0000002100)={0x2, 0x0, @remote}, 0x10) mount(0x0, &(0x7f0000002140)='./tracefs\x00', &(0x7f0000002180)='tracefs\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000180)=0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f00000001c0)=@isdn={0x22, 0xd, 0x5, 0x9, 0xa3}, 0x80, &(0x7f0000003200)=[{&(0x7f0000000240)="981a72a5d1d271322b032735c8d62298d84f03724c4ebcd3482fd6162a238e9f76ac1195b6bc9ae6017e682c00c360fb847dc075f3ccff9eb0a6a2a15acdee60bcbd06da1ce6e6fb74018d9d09a9ffeeaf77e38d837c6394bd295e20286a8cf0885413e83cf99d3f42ca527a00"/139, 0x8b}, {&(0x7f0000000b80)="4db72cf0241e93f09ee0d471a4bd874e0f841e9f5bb05675ca547990872387e2f9d9bfe29a6db38f107c044ac114ff8332912cbede2a2d0f51edff13de049338cd964a936200603894006d196abca321c4c86903cd8165987e2811fb325bd466e897de841b0f3faa8ab8d506ba8f0baed1ad0ce26e4a63803bf5af2ea41d06b1a0bab054b441f507014fb3a8944f7ad8b259ac8efda3eddbec53", 0x9a}, {&(0x7f0000003440)="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", 0x101f}], 0x3, &(0x7f0000002200)=[{0xf0, 0x111, 0x6, "9b89ef9d6196528c421d7e9cd08726d56aebaf63cf5ff22aa8624f64ac5be3de60d6a287e62f340f647603ec1e87f6a7397dd5de4307b7555ea9229cbe655ac875d06041ac261306b05b54e760c36a5b19c2014595f89287e510a4f346cb30c807657e07666870438e99e05d612defeceb6915f15be982ec5b6031d12ecedc891e131ede1ffa4506cc7753ad0d40737b1348b026e0a493bc04c2f89508d1026e000f45e00fb6981e2a2e10af6011472eeeb63533c7f9717308e667646a287d2399da62a7ff0f939e9b55156d1b1f8ade6d1c0ed4e7f82459b95c"}, {0x98, 0x110, 0xe4, "8329ba90b309fc3657d585fe6a842c73c2f0368bf6fe5efe7221ace68a955869cf0765d29a2b9f17c831aaf5364523508c6573040d9d8b46ec3153db845ba61f3e6164967cb5efff0860df2304822b71e79e8e4c16fb4c4d38dc2adc7c1b74095a879ae8c43fd5eec8795cd1b0ad5e95a9b93337beb9129a53abc1888b2f5f1f5c"}], 0x188}, 0x4040000) chmod(&(0x7f00000021c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x12) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x1, @empty, 0x80}, r1}}, 0x30) 31.437567547s ago: executing program 5 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000180)) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1) 31.298220551s ago: executing program 1 (id=845): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f00000003c0)="64000000420001000200000000000000030100000f0000002e00010000112233445566778899aabb15004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000280)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffee, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10) 31.246031567s ago: executing program 0 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ptrace(0x4207, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28000600) r3 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8e) unshare(0x8000280) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10) prlimit64(r0, 0x0, &(0x7f0000000240)={0x0, 0x80}, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00001a4000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$kcm(0x23, 0x5, 0x0) listen(r7, 0x800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) 29.085751801s ago: executing program 1 (id=847): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff, 0x1f2}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r2, 0x0, 0x22, &(0x7f0000000140)=0x28262df73c041336, 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0xfffffffffffffffd}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000440)=[@increfs, @request_freeze={0x400c6313, 0x0, 0x1}], 0x100, 0x0, &(0x7f0000000640)=""/256}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) 28.939933744s ago: executing program 0 (id=848): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x110, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000001c0)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(r1, 0x9) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4082, 0xff2}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) write(r0, &(0x7f0000000180)='p:s/p ./file0:0\n', 0x10) 28.870002351s ago: executing program 4 (id=849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000633fa640402000558b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) tkill(r1, 0x32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b002000000900020073797a32000000000900010073797a3100000000140005800800024000000002080001400000003c"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x24040840) 27.679503517s ago: executing program 1 (id=850): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) socket$kcm(0x21, 0x2, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="230000002b00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r5, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r6}, 0x38) sendmmsg$sock(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r10, &(0x7f00000005c0)={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, 'urn:nfc:sn:snep\x00', 0xf}, 0x60) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$kcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="2e00000010008188040f80ec59acbc0413010048100000005e140602ffffffe40e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89fa, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x0, 0x80000000, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x10, 0xc6e, 0x6}}) 26.736816699s ago: executing program 2 (id=851): syz_open_dev$video(&(0x7f0000000300), 0xfffffffffffffff8, 0x40000) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x2, 0x30, 0xfffd, 0x4000, 0x0, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x80, 0x0, 0x0, 0x2d9}}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x48) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000200)='\'\x00', &(0x7f0000000240)='\xbb\xbb\xbb\xbb\xbb\xbb']}, &(0x7f0000000440)={[&(0x7f00000002c0)='{\x00', &(0x7f0000000340)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\xb5{\x00', &(0x7f0000000400)='/dev/video#\x00']}, 0x1000) syz_clone3(&(0x7f0000000180)={0x23800200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000500)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000540), 0x4000190, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1f}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x2}]}}, 0x0, 0x3e}, 0x28) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000580)=0x10, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r7, &(0x7f0000000700), &(0x7f0000000740)=@udp=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r7, &(0x7f00000007c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='tps6598x 0x20\n', 0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='autofs\x00', 0x0, &(0x7f0000000a40)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='mountinfo\x00') read$FUSE(r9, &(0x7f0000001340)={0x2020}, 0xcb22) clock_gettime(0x1, &(0x7f0000003380)) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 0s ago: executing program 33 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000180)) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1) kernel console output (not intermixed with test programs): 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.575856][ T7966] RSP: 002b:00007f28b203c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 290.575868][ T7966] RAX: ffffffffffffffda RBX: 00007f28b1425fa0 RCX: 00007f28b119e1d9 [ 290.575875][ T7966] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 290.575882][ T7966] RBP: 00007f28b1235888 R08: 0000000000000000 R09: 0000000000000000 [ 290.575890][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.575898][ T7966] R13: 00007f28b1426038 R14: 00007f28b1425fa0 R15: 00007ffe52f47f08 [ 290.575915][ T7966] [ 291.185281][ T31] audit: type=1400 audit(1791740371.499:4506): avc: denied { setopt } for pid=7970 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.784721][ T31] audit: type=1400 audit(1791740372.089:4507): avc: denied { mount } for pid=7973 comm="syz.2.495" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 292.093624][ T5712] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 292.123954][ T983] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 292.245192][ T7987] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 292.263338][ T5712] usb 5-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=b5.55 [ 292.277599][ T7987] No control pipe specified [ 292.282374][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.282401][ T5712] usb 5-1: Product: syz [ 292.282415][ T5712] usb 5-1: Manufacturer: syz [ 292.282430][ T5712] usb 5-1: SerialNumber: syz [ 292.289339][ T5712] usb 5-1: config 0 descriptor?? [ 292.296926][ T983] usb 1-1: not running at top speed; connect to a high speed hub [ 292.296956][ T983] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 292.297859][ T983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.297886][ T983] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 292.297928][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.311992][ T5712] gspca_main: sonixb-2.14.0 probing 0c45:608c [ 292.323185][ T983] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 292.326923][ T983] uvcvideo 1-1:1.0: Failed to create links for entity 32769 [ 292.326961][ T983] uvcvideo 1-1:1.0: Failed to register entities (-22). [ 292.326977][ T983] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 292.514806][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.518234][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.536933][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.537354][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.568938][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.569291][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.572292][ T983] usb 1-1: USB disconnect, device number 21 [ 292.710928][ T5712] sonixb 5-1:0.0: Error reading register 00: -71 [ 292.729477][ T5712] usb 5-1: USB disconnect, device number 18 [ 292.861014][ T5600] Bluetooth: hci4: unexpected event for opcode 0x2064 [ 293.383612][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 294.239232][ T31] audit: type=1326 audit(1791740374.549:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 294.239450][ T31] audit: type=1326 audit(1791740374.549:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 294.239902][ T31] audit: type=1326 audit(1791740374.549:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 294.240112][ T31] audit: type=1326 audit(1791740374.549:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 294.240284][ T31] audit: type=1326 audit(1791740374.549:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 294.240473][ T31] audit: type=1326 audit(1791740374.549:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 294.240714][ T31] audit: type=1326 audit(1791740374.549:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 294.240890][ T31] audit: type=1326 audit(1791740374.549:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 294.241525][ T31] audit: type=1326 audit(1791740374.549:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 296.999603][ T31] kauditd_printk_skb: 395 callbacks suppressed [ 296.999627][ T31] audit: type=1326 audit(1791740376.819:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 296.999784][ T31] audit: type=1326 audit(1791740376.819:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 296.999975][ T31] audit: type=1326 audit(1791740376.819:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 297.000126][ T31] audit: type=1400 audit(1791740376.949:4915): avc: denied { firmware_load } for pid=8005 comm="syz.4.506" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 297.000303][ T31] audit: type=1326 audit(1791740377.269:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 297.000443][ T31] audit: type=1326 audit(1791740377.279:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 297.000613][ T31] audit: type=1326 audit(1791740377.279:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 297.000761][ T31] audit: type=1326 audit(1791740377.279:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 297.000912][ T31] audit: type=1326 audit(1791740377.279:4920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 297.001028][ T31] audit: type=1326 audit(1791740377.279:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.0.505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 297.314381][ T8011] syz.4.506 (8011) used greatest stack depth: 16664 bytes left [ 297.729686][ T8018] FAULT_INJECTION: forcing a failure. [ 297.729686][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 297.729720][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.4.509 Not tainted syzkaller #0 PREEMPT(full) [ 297.729746][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 297.729759][ T8018] Call Trace: [ 297.729766][ T8018] [ 297.729774][ T8018] dump_stack_lvl+0x100/0x190 [ 297.729812][ T8018] should_fail_ex.cold+0x5/0xa [ 297.729844][ T8018] should_failslab+0xc2/0x120 [ 297.729872][ T8018] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 297.729903][ T8018] ? key_alloc+0x423/0x1310 [ 297.729936][ T8018] kmemdup_noprof+0x29/0x60 [ 297.729957][ T8018] key_alloc+0x423/0x1310 [ 297.729994][ T8018] ? __pfx_key_alloc+0x10/0x10 [ 297.730022][ T8018] ? __pfx_key_default_cmp+0x10/0x10 [ 297.730043][ T8018] ? __pfx_keyring_search_iterator+0x10/0x10 [ 297.730068][ T8018] keyring_alloc+0x44/0xc0 [ 297.730092][ T8018] look_up_user_keyrings+0x465/0x790 [ 297.730124][ T8018] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 297.730156][ T8018] ? find_held_lock+0x2b/0x80 [ 297.730189][ T8018] lookup_user_key+0xbb1/0x1300 [ 297.730220][ T8018] ? __pfx_lookup_user_key+0x10/0x10 [ 297.730244][ T8018] ? futex_wait+0x11e/0x370 [ 297.730274][ T8018] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 297.730316][ T8018] keyctl_get_persistent+0x197/0x940 [ 297.730339][ T8018] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 297.730364][ T8018] ? __x64_sys_futex+0x34f/0x4d0 [ 297.730400][ T8018] ? __x64_sys_futex+0x358/0x4d0 [ 297.730434][ T8018] ? xfd_validate_state+0x129/0x190 [ 297.730467][ T8018] __do_sys_keyctl+0x3b2/0x5a0 [ 297.730496][ T8018] do_syscall_64+0x123/0x790 [ 297.730529][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.730550][ T8018] RIP: 0033:0x7f407339e1d9 [ 297.730568][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.730586][ T8018] RSP: 002b:00007f4074332028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 297.730606][ T8018] RAX: ffffffffffffffda RBX: 00007f4073625fa0 RCX: 00007f407339e1d9 [ 297.730620][ T8018] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 297.730633][ T8018] RBP: 00007f4073435888 R08: 0000000000000000 R09: 0000000000000000 [ 297.730646][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.730658][ T8018] R13: 00007f4073626038 R14: 00007f4073625fa0 R15: 00007ffccc2bc198 [ 297.730692][ T8018] [ 297.832895][ T8026] netlink: 'syz.5.511': attribute type 3 has an invalid length. [ 297.839826][ T8026] 9pnet_fd: p9_fd_create_tcp (8026): problem connecting socket to 127.0.0.1 [ 300.599479][ T8044] ipvlan2: entered allmulticast mode [ 300.599500][ T8044] ip6gretap0: entered allmulticast mode [ 300.629433][ T8044] batman_adv: batadv0: Adding interface: ipvlan2 [ 300.629458][ T8044] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.629492][ T8044] batman_adv: batadv0: Interface activated: ipvlan2 [ 301.011986][ T8054] netlink: 'syz.5.518': attribute type 2 has an invalid length. [ 302.137351][ T8062] xt_ecn: cannot match TCP bits for non-tcp packets [ 302.233823][ T5735] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 303.083807][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 303.088840][ T5735] usb 1-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice= 0.40 [ 303.093280][ T5735] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.093322][ T5735] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.093344][ T5735] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.569818][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.569844][ T5735] usb 1-1: Product: syz [ 304.591562][ T5735] usb 1-1: can't set config #1, error -71 [ 304.601888][ T5735] usb 1-1: USB disconnect, device number 22 [ 304.873906][ T5712] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 304.959540][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 304.959563][ T31] audit: type=1400 audit(1791740385.269:4939): avc: denied { bind } for pid=8074 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 304.962995][ T8075] mqueue: Unknown parameter 'usrquota' [ 305.045518][ T5712] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 305.046440][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.046492][ T5712] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 305.048408][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.048431][ T5712] usb 3-1: Product: syz [ 305.048445][ T5712] usb 3-1: Manufacturer: syz [ 305.048460][ T5712] usb 3-1: SerialNumber: syz [ 305.262407][ T31] audit: type=1400 audit(1791740385.569:4940): avc: denied { accept } for pid=8074 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 305.646587][ T5598] Bluetooth: hci3: unexpected event for opcode 0x2064 [ 306.577565][ C0] usb 3-1: received EP1 urb->status = -71 [ 307.227979][ T5712] usb 3-1: unable to init card! (ret=-19) [ 307.421534][ T5712] usb 3-1: USB disconnect, device number 18 [ 307.979300][ T31] audit: type=1326 audit(1791740388.289:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 307.979433][ T31] audit: type=1326 audit(1791740388.289:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 307.980264][ T31] audit: type=1326 audit(1791740388.289:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 307.980432][ T31] audit: type=1326 audit(1791740388.289:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 307.982959][ T31] audit: type=1326 audit(1791740388.289:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 307.983074][ T31] audit: type=1326 audit(1791740388.289:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 307.983208][ T31] audit: type=1326 audit(1791740388.289:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 308.013656][ T31] audit: type=1326 audit(1791740388.289:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 308.235958][ T5598] Bluetooth: hci3: unexpected event for opcode 0x2064 [ 310.095012][ T31] kauditd_printk_skb: 82 callbacks suppressed [ 310.095037][ T31] audit: type=1326 audit(1791740388.809:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 310.095228][ T31] audit: type=1326 audit(1791740388.809:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f28b119de6b code=0x7ffc0000 [ 310.095377][ T31] audit: type=1326 audit(1791740388.809:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 310.095538][ T31] audit: type=1326 audit(1791740388.809:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 310.095624][ T31] audit: type=1326 audit(1791740388.809:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 310.095742][ T31] audit: type=1326 audit(1791740388.809:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 310.095858][ T31] audit: type=1326 audit(1791740388.819:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 310.095990][ T31] audit: type=1326 audit(1791740388.819:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 310.096274][ T31] audit: type=1326 audit(1791740388.819:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 310.096461][ T31] audit: type=1326 audit(1791740388.829:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.5.524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b119e1d9 code=0x7ffc0000 [ 313.661114][ T8121] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 313.662905][ T8121] No control pipe specified [ 314.355820][ T5598] Bluetooth: hci3: unexpected event for opcode 0x2064 [ 316.931359][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.931418][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.322178][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 317.322196][ T31] audit: type=1400 audit(1791740397.629:5052): avc: denied { write } for pid=8147 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 317.352359][ T31] audit: type=1400 audit(1791740397.659:5053): avc: denied { read } for pid=8147 comm="syz.0.544" path="socket:[17403]" dev="sockfs" ino=17403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 317.438603][ T8152] netlink: 7 bytes leftover after parsing attributes in process `syz.1.536'. [ 317.583755][ T983] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 317.744466][ T983] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 317.745474][ T983] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.745528][ T983] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 317.747438][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.747462][ T983] usb 5-1: Product: syz [ 317.747477][ T983] usb 5-1: Manufacturer: syz [ 317.747492][ T983] usb 5-1: SerialNumber: syz [ 317.963605][ T5711] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 318.115567][ T5711] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40 [ 318.117201][ T5711] usb 2-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 318.117243][ T5711] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 318.117269][ T5711] usb 2-1: config 1 interface 0 has no altsetting 0 [ 318.119924][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.119947][ T5711] usb 2-1: Product: 텋▙鞲돱ꗏ㆜㛗ꢨ樆뛙 [ 318.119966][ T5711] usb 2-1: Manufacturer: 賸鄺渳䥮껬쳎얕氣㇅Ⴉ鹽쏘䧸ᯘĪ鯇寯ᨽ蟲ࢇ柫隶羜ﱥ鱈ꥆặ豔喒፿뇒蠈柊욷礊랻键⺫쑹냺ᄹ쟡铊㒞☶퍏Ⅸ郑㷗 [ 318.119991][ T5711] usb 2-1: SerialNumber: 잖ꓰ盼̻沲䧅到꾤鄨ꦍ痯ﾂ鶳䂀냬珃䵍迓△㧹ᩃᡄ땇럝ꑍ⿰냮촎緼扻촏ﺀ魿礻䅗歴薊祝卧ꥋ닖ȣ훞軏坒ㄼᝊ捘Ṹ葖ᩲ㋱솂๺귽ꛒ체瓁仒嵺ꄟ㬝겈ኪ段ԡ޾八퐲픢䪃꤂⠈练嚯覐砓犬꓍㨨ȕ⦤읙켓쟖鬎腤ꂽﶴ䅚⁒ᘷ篗邙ꬻ룃⨁륶櫁 [ 319.500315][ T5711] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 319.503083][ T5711] usb 2-1: USB disconnect, device number 23 [ 319.696796][ C0] usb 5-1: received EP1 urb->status = -71 [ 320.723890][ T5735] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 320.813992][ T31] audit: type=1400 audit(1791740401.109:5054): avc: denied { load_policy } for pid=8175 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 320.820706][ T8176] SELinux: policydb magic number 0xa78cff8c does not match expected magic number 0xf97cff8c [ 320.820969][ T8176] SELinux: failed to load policy [ 320.864236][ T983] usb 5-1: unable to init card! (ret=-19) [ 320.876089][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 320.876736][ T5735] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.877628][ T5735] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 320.877656][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.885763][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.885787][ T5735] usb 1-1: Product: syz [ 320.885802][ T5735] usb 1-1: Manufacturer: syz [ 320.885816][ T5735] usb 1-1: SerialNumber: syz [ 320.898930][ T5735] usb 1-1: config 0 descriptor?? [ 320.920446][ T5735] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.920480][ T5735] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 321.019180][ T30] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 321.283327][ T983] usb 5-1: USB disconnect, device number 19 [ 321.343772][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 321.348012][ T30] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 321.385388][ T8182] netlink: 'syz.4.553': attribute type 3 has an invalid length. [ 321.399523][ T8182] 9pnet_fd: p9_fd_create_tcp (8182): problem connecting socket to 127.0.0.1 [ 323.099597][ T5735] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 323.099807][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.099834][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.099912][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.099953][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.101839][ T5735] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 323.111242][ T5735] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 323.111260][ T5735] em28xx 1-1:0.0: No AC97 audio processor [ 323.191619][ T30] usb 2-1: config 0 descriptor?? [ 323.275899][ T5703] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 323.275965][ T5703] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 323.308001][ T5703] usb 6-1: USB disconnect, device number 8 [ 323.411285][ T8189] jffs2: notice: (8189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 323.442599][ T31] audit: type=1400 audit(1791740403.749:5055): avc: denied { write } for pid=8188 comm="syz.4.556" name="lower" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 323.631177][ T30] usbhid 2-1:0.0: can't add hid device: -71 [ 323.631795][ T30] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 323.679563][ T30] usb 2-1: USB disconnect, device number 24 [ 323.991988][ T31] audit: type=1400 audit(1791740404.299:5056): avc: denied { mounton } for pid=8197 comm="syz.4.559" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 324.157831][ T8202] jffs2: notice: (8202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 324.185166][ T5703] usb 1-1: USB disconnect, device number 23 [ 324.186604][ T5703] em28xx 1-1:0.0: Disconnecting em28xx [ 324.231987][ T5703] em28xx: Freeing device [ 324.901053][ T31] audit: type=1400 audit(1791740405.209:5057): avc: denied { write } for pid=8201 comm="syz.2.561" name="lower" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 325.494989][ T8217] jffs2: notice: (8217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 325.788299][ T8228] netlink: 300 bytes leftover after parsing attributes in process `syz.0.565'. [ 326.142057][ T31] audit: type=1400 audit(1791740406.449:5058): avc: denied { write } for pid=8215 comm="syz.5.564" name="lower" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 326.220692][ T5598] Bluetooth: hci2: unexpected event for opcode 0x2064 [ 327.604313][ T31] audit: type=1400 audit(1791740407.919:5059): avc: denied { ioctl } for pid=8234 comm="syz.0.569" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 327.818232][ T31] audit: type=1400 audit(1791740408.129:5060): avc: denied { setopt } for pid=8234 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 328.676039][ T31] audit: type=1400 audit(1791740408.959:5061): avc: denied { getopt } for pid=8241 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 329.025297][ T31] audit: type=1400 audit(1791740409.329:5062): avc: denied { bind } for pid=8244 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.888881][ T8260] jffs2: notice: (8260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 331.036604][ T5703] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 331.141049][ T31] audit: type=1400 audit(1791740411.429:5063): avc: denied { write } for pid=8259 comm="syz.0.577" name="lower" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 331.204081][ T5703] usb 5-1: Using ep0 maxpacket: 16 [ 331.207396][ T5703] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 331.244589][ T5703] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 331.245873][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 331.282649][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.282684][ T5703] usb 5-1: Product: syz [ 331.282919][ T5703] usb 5-1: Manufacturer: syz [ 331.319752][ T5703] usb 5-1: SerialNumber: syz [ 331.353394][ T5703] usb 5-1: config 0 descriptor?? [ 331.446765][ T5703] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 331.465071][ T5703] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 331.964245][ T31] audit: type=1400 audit(1791740412.269:5064): avc: denied { write } for pid=8265 comm="syz.0.578" name="sg0" dev="devtmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 331.966218][ T31] audit: type=1400 audit(1791740412.279:5065): avc: denied { read } for pid=8265 comm="syz.0.578" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.966250][ T31] audit: type=1400 audit(1791740412.279:5066): avc: denied { ioctl } for pid=8265 comm="syz.0.578" path="/dev/sg0" dev="devtmpfs" ino=1152 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 332.078786][ T5703] em28xx 5-1:0.0: unknown em28xx chip ID (243) [ 332.079089][ T8269] FAULT_INJECTION: forcing a failure. [ 332.079089][ T8269] name failslab, interval 1, probability 0, space 0, times 0 [ 332.079132][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.5.580 Not tainted syzkaller #0 PREEMPT(full) [ 332.079155][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 332.079170][ T8269] Call Trace: [ 332.079177][ T8269] [ 332.079185][ T8269] dump_stack_lvl+0x100/0x190 [ 332.079218][ T8269] should_fail_ex.cold+0x5/0xa [ 332.079246][ T8269] should_failslab+0xc2/0x120 [ 332.079274][ T8269] __kmalloc_noprof+0xfc/0x840 [ 332.079299][ T8269] ? ima_write_template_field_data+0x59/0x1d0 [ 332.079329][ T8269] ima_write_template_field_data+0x59/0x1d0 [ 332.079357][ T8269] ima_eventbuf_init+0x9a/0xc0 [ 332.079381][ T8269] ima_alloc_init_template+0x399/0x6d0 [ 332.079417][ T8269] process_buffer_measurement+0x471/0x810 [ 332.079451][ T8269] ? __pfx_process_buffer_measurement+0x10/0x10 [ 332.079483][ T8269] ? check_prev_add+0x354/0xe60 [ 332.079531][ T8269] ? ima_write_policy+0x154/0x480 [ 332.079583][ T8269] ? __pfx___mutex_lock+0x10/0x10 [ 332.079610][ T8269] ? lock_acquire+0x5e/0x380 [ 332.079649][ T8269] ima_measure_raw_policy+0x59/0x80 [ 332.079680][ T8269] ima_write_policy+0x20d/0x480 [ 332.079703][ T8269] ? __pfx_ima_write_policy+0x10/0x10 [ 332.079724][ T8269] ? ksys_write+0x12a/0x250 [ 332.079759][ T8269] vfs_write+0x2aa/0x1050 [ 332.079783][ T8269] ? __pfx_ima_write_policy+0x10/0x10 [ 332.079804][ T8269] ? lock_acquire+0x1d1/0x380 [ 332.079825][ T8269] ? __fget_files+0x34/0x3d0 [ 332.079851][ T8269] ? __pfx_vfs_write+0x10/0x10 [ 332.079871][ T8269] ? find_held_lock+0x2b/0x80 [ 332.079900][ T8269] ? __fget_files+0x215/0x3d0 [ 332.079931][ T8269] ? __fget_files+0x21f/0x3d0 [ 332.079966][ T8269] ksys_write+0x12a/0x250 [ 332.079989][ T8269] ? __pfx_ksys_write+0x10/0x10 [ 332.080021][ T8269] do_syscall_64+0x123/0x790 [ 332.080051][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.080072][ T8269] RIP: 0033:0x7f28b119e1d9 [ 332.080088][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.080107][ T8269] RSP: 002b:00007f28b203c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.080129][ T8269] RAX: ffffffffffffffda RBX: 00007f28b1425fa0 RCX: 00007f28b119e1d9 [ 332.080142][ T8269] RDX: 000000000000000f RSI: 0000200000000600 RDI: 0000000000000003 [ 332.080154][ T8269] RBP: 00007f28b203c090 R08: 0000000000000000 R09: 0000000000000000 [ 332.080166][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.080178][ T8269] R13: 00007f28b1426038 R14: 00007f28b1425fa0 R15: 00007ffe52f47f08 [ 332.080209][ T8269] [ 332.537041][ T8267] ima: policy update failed [ 332.613655][ T31] audit: type=1804 audit(1791740412.739:5067): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=alloc_entry comm="syz.5.580" name="ima_policy_written" res=0 errno=-12 [ 332.613705][ T31] audit: type=1807 audit(1791740412.849:5068): func=FILE_CHECK res=0 [ 332.613737][ T31] audit: type=1802 audit(1791740412.849:5069): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.580" res=0 errno=0 [ 332.613775][ T31] audit: type=1802 audit(1791740412.849:5070): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.580" res=0 errno=0 [ 333.046745][ T5703] em28xx 5-1:0.0: Config register raw data: 0xf3 [ 333.046763][ T5703] em28xx 5-1:0.0: I2S Audio (5 sample rate(s)) [ 333.046772][ T5703] em28xx 5-1:0.0: No AC97 audio processor [ 333.051603][ T5703] usb 5-1: USB disconnect, device number 20 [ 333.719259][ T31] kauditd_printk_skb: 104 callbacks suppressed [ 333.719283][ T31] audit: type=1326 audit(1791740413.949:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.719488][ T31] audit: type=1326 audit(1791740413.959:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.719631][ T31] audit: type=1326 audit(1791740413.959:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.719793][ T31] audit: type=1326 audit(1791740413.959:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.719876][ T31] audit: type=1326 audit(1791740413.959:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.719955][ T31] audit: type=1326 audit(1791740413.969:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.720075][ T31] audit: type=1326 audit(1791740413.969:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.720180][ T31] audit: type=1326 audit(1791740413.969:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.720352][ T31] audit: type=1326 audit(1791740413.969:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 333.720497][ T31] audit: type=1326 audit(1791740413.979:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.0.581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 334.857985][ T5598] Bluetooth: hci1: unexpected event for opcode 0x2064 [ 337.903639][ T5703] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 338.054377][ T5703] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 338.055328][ T5703] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 338.055356][ T5703] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 338.057843][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.057866][ T5703] usb 2-1: Product: syz [ 338.057881][ T5703] usb 2-1: Manufacturer: syz [ 338.057896][ T5703] usb 2-1: SerialNumber: syz [ 338.114495][ T5703] usb 2-1: config 0 descriptor?? [ 338.115205][ T8289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 338.115328][ T8289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 338.790774][ T8289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 338.790901][ T8289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 338.853369][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 338.935542][ T4930] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 339.098256][ T8305] jffs2: notice: (8305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 339.309067][ T5703] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 339.611975][ T4930] usb 6-1: Using ep0 maxpacket: 8 [ 339.612534][ T4930] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 339.698513][ T4930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 339.713160][ T4930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.713185][ T4930] usb 6-1: Product: syz [ 339.713199][ T4930] usb 6-1: Manufacturer: syz [ 339.713214][ T4930] usb 6-1: SerialNumber: syz [ 339.761656][ T4930] usb 6-1: config 0 descriptor?? [ 339.846764][ T4930] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 341.462745][ T8296] use of bytesused == 0 is deprecated and will be removed in the future, [ 341.462755][ T8296] use the actual size instead. [ 341.476720][ T4930] snd_usb_toneport 6-1:0.0: set_interface failed [ 341.492605][ T4930] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 341.493150][ T4930] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 341.562107][ T4930] usb 6-1: USB disconnect, device number 9 [ 341.680271][ T5703] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 341.708949][ T5703] usb 2-1: USB disconnect, device number 25 [ 343.243612][ T5703] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 343.272529][ T5598] Bluetooth: hci2: unexpected event for opcode 0x2064 [ 343.618659][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 343.657473][ T5703] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 343.700087][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 343.700118][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 343.801844][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.801862][ T5703] usb 2-1: Product: syz [ 343.801871][ T5703] usb 2-1: Manufacturer: syz [ 343.801879][ T5703] usb 2-1: SerialNumber: syz [ 344.563013][ T5703] usb 2-1: config 0 descriptor?? [ 344.575575][ T5703] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 344.575608][ T5703] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 344.911094][ T8335] jffs2: notice: (8335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 344.930188][ T31] kauditd_printk_skb: 134 callbacks suppressed [ 344.930205][ T31] audit: type=1400 audit(1791740425.229:5319): avc: denied { write } for pid=8334 comm="syz.4.589" name="lower" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 345.203424][ T5703] em28xx 2-1:0.0: unknown em28xx chip ID (243) [ 345.353877][ T31] audit: type=1400 audit(1791740425.669:5320): avc: denied { watch watch_reads } for pid=8337 comm="syz.4.599" path="/118" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 345.392994][ T8342] netlink: 'syz.5.595': attribute type 3 has an invalid length. [ 345.394193][ T8342] 9pnet_fd: p9_fd_create_tcp (8342): problem connecting socket to 127.0.0.1 [ 345.410697][ T5703] em28xx 2-1:0.0: Config register raw data: 0xf3 [ 345.410719][ T5703] em28xx 2-1:0.0: I2S Audio (5 sample rate(s)) [ 345.410733][ T5703] em28xx 2-1:0.0: No AC97 audio processor [ 345.772196][ T5703] usb 2-1: USB disconnect, device number 26 [ 347.749248][ T5798] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 348.122797][ T8358] jffs2: notice: (8358) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 348.735898][ T5798] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 348.926469][ T5798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 348.926501][ T5798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 348.933600][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.933626][ T5798] usb 2-1: Product: syz [ 348.933639][ T5798] usb 2-1: Manufacturer: syz [ 348.933653][ T5798] usb 2-1: SerialNumber: syz [ 348.968239][ T5798] usb 2-1: config 0 descriptor?? [ 348.970833][ T8352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 348.970937][ T8352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.197034][ T8369] FAULT_INJECTION: forcing a failure. [ 349.197034][ T8369] name failslab, interval 1, probability 0, space 0, times 0 [ 349.197056][ T8369] CPU: 1 UID: 0 PID: 8369 Comm: syz.5.605 Not tainted syzkaller #0 PREEMPT(full) [ 349.197072][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 349.197079][ T8369] Call Trace: [ 349.197083][ T8369] [ 349.197087][ T8369] dump_stack_lvl+0x100/0x190 [ 349.197109][ T8369] should_fail_ex.cold+0x5/0xa [ 349.197127][ T8369] should_failslab+0xc2/0x120 [ 349.197145][ T8369] kmem_cache_alloc_noprof+0x92/0x6a0 [ 349.197159][ T8369] ? d_instantiate+0x8a/0xb0 [ 349.197171][ T8369] ? alloc_empty_file+0x5b/0x1c0 [ 349.197184][ T8369] alloc_empty_file+0x5b/0x1c0 [ 349.197195][ T8369] alloc_file_pseudo+0x183/0x290 [ 349.197207][ T8369] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 349.197219][ T8369] ? alloc_fd+0x471/0x7a0 [ 349.197238][ T8369] sock_alloc_file+0x50/0x210 [ 349.197251][ T8369] __sys_socket+0x1c0/0x260 [ 349.197265][ T8369] ? handle_softirqs+0x7ee/0x9d0 [ 349.197278][ T8369] ? __pfx___sys_socket+0x10/0x10 [ 349.197297][ T8369] __x64_sys_socket+0x72/0xb0 [ 349.197312][ T8369] ? lockdep_hardirqs_on+0x7d/0x110 [ 349.197328][ T8369] do_syscall_64+0x123/0x790 [ 349.197345][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.197357][ T8369] RIP: 0033:0x7f28b119e1d9 [ 349.197368][ T8369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.197379][ T8369] RSP: 002b:00007f28b203bfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 349.197395][ T8369] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f28b119e1d9 [ 349.197403][ T8369] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001f [ 349.197410][ T8369] RBP: 00007f28b1235888 R08: 0000000000000000 R09: 0000000000000000 [ 349.197417][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.197424][ T8369] R13: 00007f28b1426038 R14: 00007f28b1425fa0 R15: 00007ffe52f47f08 [ 349.197441][ T8369] [ 349.267647][ T8352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.267743][ T8352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.675623][ T5598] Bluetooth: hci3: unexpected event for opcode 0x2064 [ 350.220101][ T5798] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 352.430758][ T5798] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 352.479251][ T5798] usb 2-1: USB disconnect, device number 27 [ 352.630999][ T5598] Bluetooth: Unexpected start frame (len 12) [ 352.639596][ T31] audit: type=1400 audit(1791740432.949:5321): avc: denied { mounton } for pid=8380 comm="syz.5.610" path="/proc/222/task" dev="proc" ino=19296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 352.716140][ T8387] 8021q: VLANs not supported on gre0 [ 354.655956][ T8403] jffs2: notice: (8403) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 354.689886][ T31] audit: type=1400 audit(1791740434.999:5322): avc: denied { write } for pid=8402 comm="syz.5.616" name="lower" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 354.773239][ T31] audit: type=1400 audit(1791740435.079:5323): avc: denied { connect } for pid=8405 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 356.711663][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.619'. [ 356.751247][ T31] audit: type=1400 audit(1791740437.059:5324): avc: denied { mount } for pid=8413 comm="syz.2.620" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 356.838694][ T31] audit: type=1400 audit(1791740437.149:5325): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 357.233744][ T5719] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 357.316220][ T8426] 8021q: VLANs not supported on gre0 [ 358.835780][ T5719] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 358.838253][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 358.838283][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 358.840136][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.840161][ T5719] usb 3-1: Product: syz [ 358.840176][ T5719] usb 3-1: Manufacturer: syz [ 358.840192][ T5719] usb 3-1: SerialNumber: syz [ 358.842848][ T5719] usb 3-1: config 0 descriptor?? [ 358.844178][ T8422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 358.844296][ T8422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 360.103173][ T31] audit: type=1400 audit(1791740439.769:5326): avc: denied { write } for pid=8432 comm="syz.4.627" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 360.257502][ T5719] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71 [ 361.292231][ T5719] usb 3-1: USB disconnect, device number 19 [ 361.653835][ T983] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 361.713757][ T5719] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 361.804761][ T983] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 361.805719][ T983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 361.805748][ T983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 361.808006][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.808028][ T983] usb 2-1: Product: syz [ 361.808044][ T983] usb 2-1: Manufacturer: syz [ 361.808059][ T983] usb 2-1: SerialNumber: syz [ 361.810818][ T983] usb 2-1: config 0 descriptor?? [ 361.811538][ T8444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.811659][ T8444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.876499][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 361.889334][ T5719] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 361.899577][ T5719] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.899610][ T5719] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.899638][ T5719] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.899670][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.915319][ T5719] usb 3-1: config 0 descriptor?? [ 362.026275][ T8444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 362.026415][ T8444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 362.451242][ T983] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 362.555116][ T5719] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 362.555155][ T5719] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 362.722008][ T5719] usb 3-1: USB disconnect, device number 20 [ 363.501453][ T983] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 363.530791][ T983] usb 2-1: USB disconnect, device number 28 [ 363.554809][ T31] audit: type=1326 audit(1791740443.869:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 363.555035][ T31] audit: type=1326 audit(1791740443.869:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 363.563121][ T31] audit: type=1326 audit(1791740443.869:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 363.563175][ T31] audit: type=1326 audit(1791740443.869:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 363.565197][ T31] audit: type=1326 audit(1791740443.879:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 363.565240][ T31] audit: type=1326 audit(1791740443.879:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 363.565274][ T31] audit: type=1326 audit(1791740443.879:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 363.565323][ T31] audit: type=1326 audit(1791740443.879:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 363.591826][ T31] audit: type=1326 audit(1791740443.879:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f407339e1d9 code=0x7ffc0000 [ 365.108091][ T31] kauditd_printk_skb: 627 callbacks suppressed [ 365.108115][ T31] audit: type=1326 audit(1791740445.409:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.108276][ T31] audit: type=1326 audit(1791740445.409:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.108375][ T31] audit: type=1326 audit(1791740445.409:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.108538][ T31] audit: type=1326 audit(1791740445.419:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.108707][ T31] audit: type=1326 audit(1791740445.419:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.112000][ T31] audit: type=1326 audit(1791740445.419:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.112051][ T31] audit: type=1326 audit(1791740445.419:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.112945][ T31] audit: type=1326 audit(1791740445.419:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.121665][ T31] audit: type=1326 audit(1791740445.429:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 365.121843][ T31] audit: type=1326 audit(1791740445.429:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f407335ea0e code=0x7ffc0000 [ 367.590387][ T8477] 8021q: VLANs not supported on gre0 [ 369.064017][ T4930] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 369.244342][ T4930] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 369.245469][ T4930] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 369.245497][ T4930] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 369.247369][ T4930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.247392][ T4930] usb 3-1: Product: syz [ 369.247407][ T4930] usb 3-1: Manufacturer: syz [ 369.247423][ T4930] usb 3-1: SerialNumber: syz [ 369.251900][ T4930] usb 3-1: config 0 descriptor?? [ 369.253075][ T8479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.253190][ T8479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.313613][ T983] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 369.464913][ T983] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 369.465821][ T983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.465873][ T983] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 369.469925][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.469948][ T983] usb 1-1: Product: syz [ 369.469963][ T983] usb 1-1: Manufacturer: syz [ 369.469978][ T983] usb 1-1: SerialNumber: syz [ 369.531086][ T8479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.531222][ T8479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.714978][ T8495] bond1: entered promiscuous mode [ 369.716729][ T8495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.800566][ T8495] nfs: Unknown parameter 'sysfs' [ 369.989178][ T4930] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 370.865490][ T8512] FAULT_INJECTION: forcing a failure. [ 370.865490][ T8512] name failslab, interval 1, probability 0, space 0, times 0 [ 370.865609][ T8512] CPU: 0 UID: 0 PID: 8512 Comm: syz.4.646 Not tainted syzkaller #0 PREEMPT(full) [ 370.865633][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 370.865644][ T8512] Call Trace: [ 370.865651][ T8512] [ 370.865659][ T8512] dump_stack_lvl+0x100/0x190 [ 370.865694][ T8512] should_fail_ex.cold+0x5/0xa [ 370.865723][ T8512] should_failslab+0xc2/0x120 [ 370.865751][ T8512] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 370.865779][ T8512] ? key_alloc+0x423/0x1310 [ 370.865812][ T8512] kmemdup_noprof+0x29/0x60 [ 370.865834][ T8512] key_alloc+0x423/0x1310 [ 370.865869][ T8512] ? __kmalloc_noprof+0x350/0x840 [ 370.865893][ T8512] ? __pfx_key_alloc+0x10/0x10 [ 370.865922][ T8512] ? hook_cred_prepare+0x177/0x370 [ 370.865944][ T8512] keyring_alloc+0x44/0xc0 [ 370.865972][ T8512] lookup_user_key+0x9b8/0x1300 [ 370.866004][ T8512] ? __pfx_lookup_user_key+0x10/0x10 [ 370.866033][ T8512] ? lock_acquire+0x1d1/0x380 [ 370.866058][ T8512] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 370.866097][ T8512] __do_sys_add_key+0x2a6/0x460 [ 370.866122][ T8512] ? __pfx___do_sys_add_key+0x10/0x10 [ 370.866142][ T8512] ? ksys_write+0x1ac/0x250 [ 370.866176][ T8512] do_syscall_64+0x123/0x790 [ 370.866205][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.866225][ T8512] RIP: 0033:0x7f407339e1d9 [ 370.866241][ T8512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.866259][ T8512] RSP: 002b:00007f4074311028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 370.866277][ T8512] RAX: ffffffffffffffda RBX: 00007f4073626090 RCX: 00007f407339e1d9 [ 370.866291][ T8512] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000000 [ 370.866302][ T8512] RBP: 00007f4074311090 R08: ffffffffffffffff R09: 0000000000000000 [ 370.866315][ T8512] R10: 00000000000000bd R11: 0000000000000246 R12: 0000000000000001 [ 370.866327][ T8512] R13: 00007f4073626128 R14: 00007f4073626090 R15: 00007ffccc2bc198 [ 370.866355][ T8512] [ 371.981560][ C0] usb 1-1: received EP1 urb->status = -2 [ 371.982733][ T983] usb 1-1: unable to init card! (ret=-19) [ 372.686163][ T983] usb 1-1: USB disconnect, device number 24 [ 372.704999][ T4930] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 372.730673][ T4930] usb 3-1: USB disconnect, device number 21 [ 372.803934][ T8522] FAULT_INJECTION: forcing a failure. [ 372.803934][ T8522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.803966][ T8522] CPU: 1 UID: 0 PID: 8522 Comm: syz.1.648 Not tainted syzkaller #0 PREEMPT(full) [ 372.803989][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.804001][ T8522] Call Trace: [ 372.804007][ T8522] [ 372.804015][ T8522] dump_stack_lvl+0x100/0x190 [ 372.804049][ T8522] should_fail_ex.cold+0x5/0xa [ 372.804078][ T8522] _copy_from_user+0x2e/0xd0 [ 372.804109][ T8522] copy_mount_options+0x76/0x190 [ 372.804136][ T8522] __x64_sys_mount+0x1ab/0x310 [ 372.804158][ T8522] ? __pfx___x64_sys_mount+0x10/0x10 [ 372.804188][ T8522] do_syscall_64+0x123/0x790 [ 372.804220][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.804249][ T8522] RIP: 0033:0x7f909dd9e1d9 [ 372.804267][ T8522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.804287][ T8522] RSP: 002b:00007f909eba6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.804306][ T8522] RAX: ffffffffffffffda RBX: 00007f909e025fa0 RCX: 00007f909dd9e1d9 [ 372.804321][ T8522] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.804333][ T8522] RBP: 00007f909de35888 R08: 0000200000000f80 R09: 0000000000000000 [ 372.804346][ T8522] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 372.804358][ T8522] R13: 00007f909e026038 R14: 00007f909e025fa0 R15: 00007fff89d058c8 [ 372.804388][ T8522] [ 374.199684][ T8534] jffs2: notice: (8534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 374.204012][ T8537] overlay: Unknown parameter 'uid>00000000000000000000' [ 374.230616][ T31] kauditd_printk_skb: 319 callbacks suppressed [ 374.230631][ T31] audit: type=1400 audit(1791740454.539:6292): avc: denied { write } for pid=8532 comm="syz.0.653" name="lower" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 374.643699][ T4930] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 374.698492][ T31] audit: type=1400 audit(1791740455.009:6293): avc: denied { ioctl } for pid=8544 comm="syz.4.649" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20603 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 374.804656][ T4930] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 374.805608][ T4930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.834872][ T4930] usb 1-1: config 0 descriptor?? [ 374.841233][ T4930] pwc: Samsung MPC-C10 USB webcam detected. [ 374.915359][ T8537] overlayfs: statfs failed on './file0' [ 375.198475][ T4930] pwc: send_video_command error -71 [ 375.198491][ T4930] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 375.198598][ T4930] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 375.516573][ T4930] usb 1-1: USB disconnect, device number 25 [ 376.383749][ T31] audit: type=1400 audit(1791740456.169:6294): avc: denied { write } for pid=8554 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 377.030543][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.663'. [ 377.034461][ T4930] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 377.091833][ T8569] bond_slave_0: entered promiscuous mode [ 377.091855][ T8569] bond_slave_0: entered allmulticast mode [ 377.299329][ T8563] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 377.513644][ T4930] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 377.564047][ T30] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 377.660891][ T4930] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 377.660920][ T4930] usb 1-1: can't read configurations, error -71 [ 377.695005][ T30] usb 3-1: device descriptor read/64, error -71 [ 377.791736][ T8584] jffs2: notice: (8584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 377.943719][ T30] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 378.020381][ T31] audit: type=1400 audit(1791740458.329:6295): avc: denied { write } for pid=8577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.103621][ T30] usb 3-1: device descriptor read/64, error -71 [ 379.129984][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.130037][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.133307][ T30] usb usb3-port1: attempt power cycle [ 379.222084][ T8602] FAULT_INJECTION: forcing a failure. [ 379.222084][ T8602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.222115][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.5.668 Not tainted syzkaller #0 PREEMPT(full) [ 379.222137][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 379.222148][ T8602] Call Trace: [ 379.222155][ T8602] [ 379.222163][ T8602] dump_stack_lvl+0x100/0x190 [ 379.222197][ T8602] should_fail_ex.cold+0x5/0xa [ 379.222225][ T8602] _copy_to_user+0x32/0xd0 [ 379.222255][ T8602] simple_read_from_buffer+0xcb/0x170 [ 379.222287][ T8602] proc_fail_nth_read+0x1af/0x230 [ 379.222317][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.222347][ T8602] ? rw_verify_area+0xce/0x6d0 [ 379.222369][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.222397][ T8602] vfs_read+0x1e4/0xb40 [ 379.222419][ T8602] ? lock_acquire+0x1d1/0x380 [ 379.222441][ T8602] ? __fget_files+0x34/0x3d0 [ 379.222467][ T8602] ? __pfx_vfs_read+0x10/0x10 [ 379.222487][ T8602] ? find_held_lock+0x2b/0x80 [ 379.222515][ T8602] ? __fget_files+0x215/0x3d0 [ 379.222546][ T8602] ? __fget_files+0x21f/0x3d0 [ 379.222580][ T8602] ksys_read+0x12a/0x250 [ 379.222600][ T8602] ? __pfx_ksys_read+0x10/0x10 [ 379.222631][ T8602] do_syscall_64+0x123/0x790 [ 379.222667][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.222685][ T8602] RIP: 0033:0x7f28b115ea0e [ 379.222702][ T8602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 379.222719][ T8602] RSP: 002b:00007f28b203bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.222739][ T8602] RAX: ffffffffffffffda RBX: 00007f28b203c6c0 RCX: 00007f28b115ea0e [ 379.222752][ T8602] RDX: 000000000000000f RSI: 00007f28b203c0a0 RDI: 0000000000000004 [ 379.222763][ T8602] RBP: 00007f28b203c090 R08: 0000000000000000 R09: 0000000000000000 [ 379.222775][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.222787][ T8602] R13: 00007f28b1426038 R14: 00007f28b1425fa0 R15: 00007ffe52f47f08 [ 379.222816][ T8602] [ 379.361831][ T31] audit: type=1400 audit(1791740459.669:6296): avc: denied { write } for pid=8596 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.524694][ T30] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 379.563742][ T30] usb 3-1: device descriptor read/8, error -71 [ 380.703925][ T30] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 380.752526][ T30] usb 3-1: device descriptor read/8, error -71 [ 380.854008][ T30] usb usb3-port1: unable to enumerate USB device [ 381.481216][ T6693] Bluetooth: hci5: Frame reassembly failed (-84) [ 381.504108][ T6693] Bluetooth: hci5: Frame reassembly failed (-84) [ 381.745602][ T8627] netlink: 'syz.1.661': attribute type 3 has an invalid length. [ 381.747958][ T8627] 9pnet_fd: p9_fd_create_tcp (8627): problem connecting socket to 127.0.0.1 [ 381.830351][ T31] audit: type=1400 audit(1791740462.139:6297): avc: denied { write } for pid=8610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.952561][ T31] audit: type=1400 audit(1791740462.259:6298): avc: denied { write } for pid=8632 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.043630][ T30] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 382.204255][ T30] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 382.205679][ T30] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 382.205696][ T30] usb 3-1: config 0 has no interface number 0 [ 382.208641][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.208656][ T30] usb 3-1: Product: syz [ 382.208664][ T30] usb 3-1: Manufacturer: syz [ 382.208672][ T30] usb 3-1: SerialNumber: syz [ 382.211285][ T30] usb 3-1: config 0 descriptor?? [ 382.657761][ T31] audit: type=1400 audit(1791740462.969:6299): avc: denied { write } for pid=8636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.662654][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'. [ 382.704066][ T8629] Bluetooth: MGMT ver 1.23 [ 382.707423][ T30] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 382.707453][ T30] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 382.709735][ T30] asix 3-1:0.251: probe with driver asix failed with error -5 [ 382.754159][ T30] usb 3-1: USB disconnect, device number 26 [ 382.810993][ T8649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.675'. [ 382.835118][ T8646] Invalid option length (1048314) for dns_resolver key [ 382.893937][ T31] audit: type=1400 audit(1791740463.209:6300): avc: denied { write } for pid=8650 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.235680][ T5598] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 384.571614][ T8663] jffs2: notice: (8663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 385.631245][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 385.714583][ T8671] FAULT_INJECTION: forcing a failure. [ 385.714583][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 385.714614][ T8671] CPU: 1 UID: 0 PID: 8671 Comm: syz.4.679 Not tainted syzkaller #0 PREEMPT(full) [ 385.714637][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 385.714651][ T8671] Call Trace: [ 385.714658][ T8671] [ 385.714667][ T8671] dump_stack_lvl+0x100/0x190 [ 385.714704][ T8671] should_fail_ex.cold+0x5/0xa [ 385.714735][ T8671] should_failslab+0xc2/0x120 [ 385.714765][ T8671] __kmalloc_noprof+0xfc/0x840 [ 385.714793][ T8671] ? x509_key_preparse+0x22b/0x9c0 [ 385.714827][ T8671] x509_key_preparse+0x22b/0x9c0 [ 385.714859][ T8671] asymmetric_key_preparse+0xce/0x1d0 [ 385.714881][ T8671] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 385.714905][ T8671] __key_create_or_update+0x413/0xe30 [ 385.714941][ T8671] ? __pfx___key_create_or_update+0x10/0x10 [ 385.714975][ T8671] ? lookup_user_key+0x3f3/0x1300 [ 385.715031][ T8671] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 385.715070][ T8671] key_create_or_update+0x42/0x60 [ 385.715107][ T8671] __do_sys_add_key+0x2e8/0x460 [ 385.715135][ T8671] ? __pfx___do_sys_add_key+0x10/0x10 [ 385.715170][ T8671] do_syscall_64+0x123/0x790 [ 385.715203][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.715225][ T8671] RIP: 0033:0x7f407339e1d9 [ 385.715243][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.715262][ T8671] RSP: 002b:00007f4074332028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 385.715283][ T8671] RAX: ffffffffffffffda RBX: 00007f4073625fa0 RCX: 00007f407339e1d9 [ 385.715297][ T8671] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 385.715310][ T8671] RBP: 00007f4073435888 R08: ffffffffffffffff R09: 0000000000000000 [ 385.715323][ T8671] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 385.715336][ T8671] R13: 00007f4073626038 R14: 00007f4073625fa0 R15: 00007ffccc2bc198 [ 385.715367][ T8671] [ 386.081371][ T8676] netlink: 140 bytes leftover after parsing attributes in process `syz.4.682'. [ 386.183646][ T4930] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 386.343946][ T4930] usb 3-1: Using ep0 maxpacket: 16 [ 386.344818][ T4930] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 386.348553][ T4930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 386.348583][ T4930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 386.353040][ T4930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.353053][ T4930] usb 3-1: Product: syz [ 386.353062][ T4930] usb 3-1: Manufacturer: syz [ 386.353070][ T4930] usb 3-1: SerialNumber: syz [ 386.415347][ T4930] usb 3-1: config 0 descriptor?? [ 386.423228][ T4930] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 386.423247][ T4930] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 387.232032][ T8679] jffs2: notice: (8679) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 387.743720][ T8679] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 387.985319][ T4930] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 387.986903][ T4930] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 387.987253][ T4930] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 387.987268][ T4930] em28xx 3-1:0.0: No AC97 audio processor [ 388.049875][ T4930] usb 3-1: USB disconnect, device number 27 [ 388.051283][ T4930] em28xx 3-1:0.0: Disconnecting em28xx [ 388.136317][ T4930] em28xx: Freeing device [ 388.459755][ T8685] FAULT_INJECTION: forcing a failure. [ 388.459755][ T8685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.459796][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(full) [ 388.459821][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 388.459835][ T8685] Call Trace: [ 388.459842][ T8685] [ 388.459851][ T8685] dump_stack_lvl+0x100/0x190 [ 388.459887][ T8685] should_fail_ex.cold+0x5/0xa [ 388.459917][ T8685] strncpy_from_user+0x3b/0x2d0 [ 388.459952][ T8685] do_getname+0x78/0x390 [ 388.459978][ T8685] user_path_at+0x26/0x60 [ 388.460006][ T8685] __x64_sys_mount+0x1fb/0x310 [ 388.460029][ T8685] ? __pfx___x64_sys_mount+0x10/0x10 [ 388.460059][ T8685] do_syscall_64+0x123/0x790 [ 388.460091][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.460112][ T8685] RIP: 0033:0x7f3b7039e1d9 [ 388.460130][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.460149][ T8685] RSP: 002b:00007f3b71302028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.460168][ T8685] RAX: ffffffffffffffda RBX: 00007f3b70625fa0 RCX: 00007f3b7039e1d9 [ 388.460181][ T8685] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.460194][ T8685] RBP: 00007f3b70435888 R08: 0000200000000f80 R09: 0000000000000000 [ 388.460207][ T8685] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 388.460218][ T8685] R13: 00007f3b70626038 R14: 00007f3b70625fa0 R15: 00007ffe91e6fac8 [ 388.460248][ T8685] [ 389.115954][ T31] audit: type=1400 audit(1791740469.329:6301): avc: denied { bind } for pid=8698 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.021125][ T31] audit: type=1400 audit(1791740470.329:6302): avc: denied { mount } for pid=8697 comm="syz.0.687" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 390.600595][ T8718] jffs2: notice: (8718) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 393.962637][ T8738] FAULT_INJECTION: forcing a failure. [ 393.962637][ T8738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.963384][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.5.696 Not tainted syzkaller #0 PREEMPT(full) [ 393.963411][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 393.963422][ T8738] Call Trace: [ 393.963428][ T8738] [ 393.963435][ T8738] dump_stack_lvl+0x100/0x190 [ 393.963468][ T8738] should_fail_ex.cold+0x5/0xa [ 393.963496][ T8738] _copy_to_user+0x32/0xd0 [ 393.963527][ T8738] simple_read_from_buffer+0xcb/0x170 [ 393.963556][ T8738] proc_fail_nth_read+0x1af/0x230 [ 393.963585][ T8738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.963614][ T8738] ? rw_verify_area+0xce/0x6d0 [ 393.963635][ T8738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.963663][ T8738] vfs_read+0x1e4/0xb40 [ 393.963684][ T8738] ? lock_acquire+0x1d1/0x380 [ 393.963706][ T8738] ? __fget_files+0x34/0x3d0 [ 393.963731][ T8738] ? __pfx_vfs_read+0x10/0x10 [ 393.963751][ T8738] ? find_held_lock+0x2b/0x80 [ 393.963787][ T8738] ? __fget_files+0x215/0x3d0 [ 393.963818][ T8738] ? __fget_files+0x21f/0x3d0 [ 393.963852][ T8738] ksys_read+0x12a/0x250 [ 393.963873][ T8738] ? __pfx_ksys_read+0x10/0x10 [ 393.963904][ T8738] do_syscall_64+0x123/0x790 [ 393.963935][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.963954][ T8738] RIP: 0033:0x7f28b115ea0e [ 393.963971][ T8738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 393.963987][ T8738] RSP: 002b:00007f28b201afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.964004][ T8738] RAX: ffffffffffffffda RBX: 00007f28b201b6c0 RCX: 00007f28b115ea0e [ 393.964015][ T8738] RDX: 000000000000000f RSI: 00007f28b201b0a0 RDI: 0000000000000005 [ 393.964026][ T8738] RBP: 00007f28b201b090 R08: 0000000000000000 R09: 0000000000000000 [ 393.964038][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.964049][ T8738] R13: 00007f28b1426128 R14: 00007f28b1426090 R15: 00007ffe52f47f08 [ 393.964079][ T8738] [ 394.594090][ T8751] ip_tables: iptables: counters copy to user failed while replacing table [ 394.824025][ T3104] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 394.922309][ T8762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.939080][ T8748] FAULT_INJECTION: forcing a failure. [ 394.939080][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.939114][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.5.698 Not tainted syzkaller #0 PREEMPT(full) [ 394.939139][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 394.939151][ T8748] Call Trace: [ 394.939158][ T8748] [ 394.939168][ T8748] dump_stack_lvl+0x100/0x190 [ 394.939212][ T8748] should_fail_ex.cold+0x5/0xa [ 394.939243][ T8748] _copy_from_user+0x2e/0xd0 [ 394.939274][ T8748] copy_mount_options+0x76/0x190 [ 394.939301][ T8748] __x64_sys_mount+0x1ab/0x310 [ 394.939323][ T8748] ? __pfx___x64_sys_mount+0x10/0x10 [ 394.939352][ T8748] do_syscall_64+0x123/0x790 [ 394.939385][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.939406][ T8748] RIP: 0033:0x7f28b119e1d9 [ 394.939423][ T8748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.939442][ T8748] RSP: 002b:00007f28b203c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 394.939462][ T8748] RAX: ffffffffffffffda RBX: 00007f28b1425fa0 RCX: 00007f28b119e1d9 [ 394.939476][ T8748] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.939487][ T8748] RBP: 00007f28b1235888 R08: 0000200000000f80 R09: 0000000000000000 [ 394.939500][ T8748] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 394.939511][ T8748] R13: 00007f28b1426038 R14: 00007f28b1425fa0 R15: 00007ffe52f47f08 [ 394.939540][ T8748] [ 395.115618][ T3104] usb 1-1: not running at top speed; connect to a high speed hub [ 395.116037][ T3104] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 395.168765][ T3104] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.169190][ T3104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.733134][ T3104] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 395.929925][ T31] audit: type=1400 audit(1791740476.239:6303): avc: denied { write } for pid=8755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.315266][ T5704] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 398.605234][ T31] audit: type=1400 audit(1791740478.919:6304): avc: denied { write } for pid=8780 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.666306][ T5704] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 398.670254][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 398.670301][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.677935][ T5704] usb 3-1: config 0 descriptor?? [ 398.681632][ T8775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 398.722125][ T3104] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 398.722839][ T3104] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 398.722897][ T3104] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 398.751961][ T3104] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 398.764751][ T3104] usb 1-1: USB disconnect, device number 28 [ 398.960544][ T5704] usbhid 3-1:0.0: can't add hid device: -71 [ 398.960641][ T5704] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 398.972229][ T5704] usb 3-1: USB disconnect, device number 28 [ 399.158599][ T31] audit: type=1400 audit(1791740479.469:6305): avc: denied { ioctl } for pid=8799 comm="syz.0.710" path="socket:[21153]" dev="sockfs" ino=21153 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 400.757126][ T31] audit: type=1400 audit(1791740481.069:6306): avc: denied { write } for pid=8795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.925038][ T5712] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 401.084652][ T5712] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 401.090278][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.090335][ T5712] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 401.090364][ T5712] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.091762][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 401.091785][ T5712] usb 1-1: Product: syz [ 401.091801][ T5712] usb 1-1: Manufacturer: syz [ 401.108902][ T8821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.111980][ T5712] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 401.207752][ T5712] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 401.261292][ T31] audit: type=1400 audit(1791740481.569:6307): avc: denied { write } for pid=8824 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.380376][ T983] usb 1-1: USB disconnect, device number 29 [ 401.430542][ T983] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 401.431142][ T983] garmin_gps 1-1:1.0: device disconnected [ 401.490788][ T31] audit: type=1400 audit(1791740481.799:6308): avc: denied { write } for pid=8826 comm="syz.4.707" name="usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 401.550370][ T31] audit: type=1400 audit(1791740481.859:6309): avc: denied { read } for pid=8826 comm="syz.4.707" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 401.550569][ T31] audit: type=1400 audit(1791740481.859:6310): avc: denied { open } for pid=8826 comm="syz.4.707" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 401.675833][ T31] audit: type=1400 audit(1791740481.979:6311): avc: denied { ioctl } for pid=8826 comm="syz.4.707" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 403.190477][ T23] process 8839 (syz.4.717) no longer affine to cpu1 [ 404.584202][ T8842] smpboot: CPU 1 is now offline [ 404.931341][ T8854] jffs2: notice: (8854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 404.979962][ T31] audit: type=1400 audit(1791740485.289:6312): avc: denied { write } for pid=8847 comm="syz.5.708" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.376634][ T31] audit: type=1400 audit(1791740485.689:6313): avc: denied { write } for pid=8864 comm="syz.5.723" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 406.545128][ T31] audit: type=1400 audit(1791740486.849:6314): avc: denied { connect } for pid=8864 comm="syz.5.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 406.605766][ T8868] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 406.623861][ T8868] No control pipe specified [ 407.054442][ T31] audit: type=1400 audit(1791740487.369:6315): avc: denied { append } for pid=8880 comm="syz.1.728" name="uprobe_events" dev="tracefs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 408.852630][ T31] audit: type=1400 audit(1791740489.159:6316): avc: denied { ioctl } for pid=8885 comm="syz.1.730" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 409.360468][ T8890] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 409.375330][ T8892] ve: renamed from veth0_vlan [ 410.858577][ T31] audit: type=1400 audit(1791740491.169:6317): avc: denied { mounton } for pid=8908 comm="syz.0.736" path="/159/sec" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 411.232617][ T31] audit: type=1400 audit(1791740491.539:6318): avc: denied { write } for pid=8897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.334925][ T8919] loop9: detected capacity change from 0 to 16392 [ 411.464834][ C0] I/O error, dev loop9, sector 16376 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.464971][ C0] Buffer I/O error on dev loop9, logical block 2047, async page read [ 411.508001][ T8921] loop9: detected capacity change from 16392 to 0 [ 411.547280][ T31] audit: type=1400 audit(1791740491.859:6319): avc: denied { write } for pid=8924 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.013465][ T5263] ve: left promiscuous mode [ 412.020335][ T8930] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 412.617804][ T5704] ve: entered promiscuous mode [ 412.639540][ T8937] No control pipe specified [ 413.587101][ T8947] 8021q: VLANs not supported on gre0 [ 415.187556][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 415.187669][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 415.328976][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 415.328995][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 415.363911][ T8959] ceph: No mds server is up or the cluster is laggy [ 415.815685][ T31] audit: type=1400 audit(1791740496.119:6320): avc: denied { write } for pid=8953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.684496][ T31] audit: type=1400 audit(1791740496.999:6321): avc: denied { write } for pid=8982 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.380837][ T8986] FAULT_INJECTION: forcing a failure. [ 417.380837][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 417.380858][ T8986] CPU: 0 UID: 0 PID: 8986 Comm: syz.0.750 Not tainted syzkaller #0 PREEMPT(full) [ 417.380872][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.380880][ T8986] Call Trace: [ 417.380884][ T8986] [ 417.380889][ T8986] dump_stack_lvl+0x100/0x190 [ 417.380910][ T8986] should_fail_ex.cold+0x5/0xa [ 417.380928][ T8986] should_failslab+0xc2/0x120 [ 417.380946][ T8986] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 417.380961][ T8986] ? lock_acquire+0x1d1/0x380 [ 417.380975][ T8986] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 417.380988][ T8986] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 417.381004][ T8986] kstrdup+0x51/0xe0 [ 417.381018][ T8986] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 417.381033][ T8986] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 417.381050][ T8986] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 417.381069][ T8986] security_mptcp_add_subflow+0x91/0x210 [ 417.381085][ T8986] mptcp_subflow_create_socket+0x1a9/0xa30 [ 417.381101][ T8986] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 417.381114][ T8986] ? avc_has_perm_noaudit+0x145/0x470 [ 417.381127][ T8986] ? look_up_lock_class+0x64/0x120 [ 417.381146][ T8986] __mptcp_nmpc_sk+0x17f/0x880 [ 417.381160][ T8986] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 417.381172][ T8986] ? __lock_acquire+0x5c0/0x1f40 [ 417.381190][ T8986] mptcp_connect+0x7e/0xa20 [ 417.381208][ T8986] __inet_stream_connect+0x208/0xf90 [ 417.381227][ T8986] ? lock_acquire+0x1d1/0x380 [ 417.381241][ T8986] ? __pfx___inet_stream_connect+0x10/0x10 [ 417.381257][ T8986] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 417.381277][ T8986] ? __local_bh_enable_ip+0xa5/0x120 [ 417.381292][ T8986] inet_stream_connect+0x57/0xa0 [ 417.381309][ T8986] __sys_connect_file+0x146/0x1a0 [ 417.381329][ T8986] __sys_connect+0x141/0x170 [ 417.381345][ T8986] ? __pfx___sys_connect+0x10/0x10 [ 417.381360][ T8986] ? __fget_files+0x21f/0x3d0 [ 417.381383][ T8986] ? __pfx_ksys_write+0x10/0x10 [ 417.381401][ T8986] __x64_sys_connect+0x72/0xb0 [ 417.381417][ T8986] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.381432][ T8986] do_syscall_64+0x123/0x790 [ 417.381450][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.381462][ T8986] RIP: 0033:0x7f3b7039e1d9 [ 417.381472][ T8986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.381485][ T8986] RSP: 002b:00007f3b71302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 417.381496][ T8986] RAX: ffffffffffffffda RBX: 00007f3b70625fa0 RCX: 00007f3b7039e1d9 [ 417.381504][ T8986] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000008 [ 417.381510][ T8986] RBP: 00007f3b71302090 R08: 0000000000000000 R09: 0000000000000000 [ 417.381517][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.381523][ T8986] R13: 00007f3b70626038 R14: 00007f3b70625fa0 R15: 00007ffe91e6fac8 [ 417.381540][ T8986] [ 417.914105][ T8993] sctp: [Deprecated]: syz.1.751 (pid 8993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.914105][ T8993] Use struct sctp_sack_info instead [ 417.963114][ T31] audit: type=1326 audit(1791740498.269:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 417.963456][ T31] audit: type=1326 audit(1791740498.269:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 418.026651][ T31] audit: type=1326 audit(1791740498.339:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 418.026684][ T31] audit: type=1326 audit(1791740498.339:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 418.026890][ T31] audit: type=1326 audit(1791740498.339:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 418.027039][ T31] audit: type=1326 audit(1791740498.339:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 418.027149][ T31] audit: type=1326 audit(1791740498.339:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 418.153987][ T983] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 418.300956][ T31] audit: type=1326 audit(1791740498.609:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7039e1d9 code=0x7ffc0000 [ 418.472328][ T983] usb 5-1: Using ep0 maxpacket: 16 [ 418.489811][ T983] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 418.535661][ T983] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 418.535680][ T983] usb 5-1: config 0 has no interface number 0 [ 418.536022][ T983] usb 5-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 418.536045][ T983] usb 5-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 418.536062][ T983] usb 5-1: config 0 interface 48 has no altsetting 0 [ 419.071206][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.071224][ T983] usb 5-1: Product: syz [ 419.071233][ T983] usb 5-1: Manufacturer: syz [ 419.071242][ T983] usb 5-1: SerialNumber: syz [ 419.299636][ T983] usb 5-1: config 0 descriptor?? [ 420.020459][ T983] dvb_usb_dtv5100 5-1:0.48: probe with driver dvb_usb_dtv5100 failed with error -71 [ 420.039299][ T983] usb 5-1: USB disconnect, device number 21 [ 420.152260][ T9013] sctp: [Deprecated]: syz.1.758 (pid 9013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.152260][ T9013] Use struct sctp_sack_info instead [ 420.290977][ T9016] x_tables: duplicate underflow at hook 2 [ 420.522602][ T983] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 420.863811][ T9020] 8021q: VLANs not supported on gre0 [ 421.356801][ T31] kauditd_printk_skb: 177 callbacks suppressed [ 421.356813][ T31] audit: type=1326 audit(1791740501.669:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.0.754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b7035ea0e code=0x7ffc0000 [ 421.361169][ T31] audit: type=1326 audit(1791740501.669:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.4.753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f407339de6b code=0x7ffc0000 [ 421.693093][ T983] usb 5-1: device descriptor read/all, error -71 [ 421.955953][ T9037] jffs2: notice: (9037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 7 of xref (0 dead, 0 orphan) found. [ 423.820316][ T9049] No source specified [ 423.869838][ T5704] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 424.019704][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 424.037428][ T5704] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 424.039711][ T5704] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 424.063361][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.063376][ T5704] usb 2-1: Product: syz [ 424.063384][ T5704] usb 2-1: Manufacturer: syz [ 424.063392][ T5704] usb 2-1: SerialNumber: syz [ 424.087264][ T5704] usb 2-1: config 0 descriptor?? [ 424.089880][ T5704] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 424.089909][ T5704] usb 2-1: setting power ON [ 424.132490][ T5704] dvb-usb: bulk message failed: -22 (2/0) [ 424.160876][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.162682][ T5704] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 424.162711][ T5704] usb 2-1: media controller created [ 424.214200][ T5703] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 424.238368][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.068349][ T5704] usb 2-1: selecting invalid altsetting 6 [ 425.073752][ T5703] usb 6-1: Using ep0 maxpacket: 16 [ 425.074241][ T5703] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 425.076047][ T5703] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 425.076066][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 425.077571][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.077585][ T5703] usb 6-1: Product: syz [ 425.077593][ T5703] usb 6-1: Manufacturer: syz [ 425.077601][ T5703] usb 6-1: SerialNumber: syz [ 425.107943][ T5703] usb 6-1: config 0 descriptor?? [ 425.219740][ T5703] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 425.219762][ T5703] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 425.245045][ T5704] usb 2-1: digital interface selection failed (-22) [ 425.245067][ T5704] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 425.271070][ T5704] usb 2-1: setting power OFF [ 425.271105][ T5704] dvb-usb: bulk message failed: -22 (2/0) [ 425.271114][ T5704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 425.271134][ T5704] (NULL device *): no alternate interface [ 425.299583][ T31] audit: type=1400 audit(1791740505.609:6509): avc: denied { shutdown } for pid=9054 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 425.336690][ T31] audit: type=1400 audit(1791740505.649:6510): avc: denied { cmd } for pid=9054 comm="iou-wrk-9055" path="socket:[23126]" dev="sockfs" ino=23126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 425.337181][ T9057] FAULT_INJECTION: forcing a failure. [ 425.337181][ T9057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.337199][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: syz.0.773 Not tainted syzkaller #0 PREEMPT(full) [ 425.337212][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.337220][ T9057] Call Trace: [ 425.337224][ T9057] [ 425.337229][ T9057] dump_stack_lvl+0x100/0x190 [ 425.337251][ T9057] should_fail_ex.cold+0x5/0xa [ 425.337272][ T9057] _copy_from_iter+0x1f4/0x1690 [ 425.337293][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 425.337311][ T9057] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.337330][ T9057] ? lock_acquire+0x1d1/0x380 [ 425.337347][ T9057] copy_page_from_iter+0x238/0x300 [ 425.337366][ T9057] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 425.337389][ T9057] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 425.337409][ T9057] ? lock_acquire+0x1d1/0x380 [ 425.337421][ T9057] ? avc_has_perm_noaudit+0x56/0x470 [ 425.337435][ T9057] ? find_held_lock+0x2b/0x80 [ 425.337456][ T9057] ? avc_has_perm_noaudit+0x145/0x470 [ 425.337472][ T9057] tun_get_user+0x17b4/0x3da0 [ 425.337495][ T9057] ? __lock_acquire+0x5c0/0x1f40 [ 425.337508][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 425.337526][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 425.337544][ T9057] ? find_held_lock+0x2b/0x80 [ 425.337560][ T9057] ? tun_get+0x191/0x370 [ 425.337575][ T9057] ? tun_get+0x191/0x370 [ 425.337594][ T9057] tun_chr_write_iter+0xdc/0x200 [ 425.337613][ T9057] vfs_write+0x6af/0x1050 [ 425.337627][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 425.337646][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 425.337659][ T9057] ? find_held_lock+0x2b/0x80 [ 425.337685][ T9057] ksys_write+0x12a/0x250 [ 425.337699][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 425.337717][ T9057] do_syscall_64+0x123/0x790 [ 425.337735][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.337747][ T9057] RIP: 0033:0x7f3b7035ea0e [ 425.337757][ T9057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 425.337767][ T9057] RSP: 002b:00007f3b712e0fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.337779][ T9057] RAX: ffffffffffffffda RBX: 00007f3b712e16c0 RCX: 00007f3b7035ea0e [ 425.337786][ T9057] RDX: 0000000000000066 RSI: 0000200000000780 RDI: 00000000000000c8 [ 425.337793][ T9057] RBP: 00007f3b712e1090 R08: 0000000000000000 R09: 0000000000000000 [ 425.337800][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.337807][ T9057] R13: 00007f3b70626128 R14: 00007f3b70626090 R15: 00007ffe91e6fac8 [ 425.337822][ T9057] [ 426.149486][ T5703] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 426.153669][ T5703] em28xx 6-1:0.0: Config register raw data: 0xf3 [ 426.153682][ T5703] em28xx 6-1:0.0: I2S Audio (3 sample rate(s)) [ 426.153691][ T5703] em28xx 6-1:0.0: No AC97 audio processor [ 426.912101][ T5704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 426.956229][ T5704] usb 2-1: USB disconnect, device number 29 [ 427.025849][ T6703] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 427.076121][ T5703] usb 6-1: USB disconnect, device number 10 [ 427.952642][ T31] audit: type=1400 audit(1791740508.259:6511): avc: denied { read } for pid=9072 comm="syz.1.778" name="/" dev="configfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 427.952683][ T31] audit: type=1400 audit(1791740508.259:6512): avc: denied { read open } for pid=9072 comm="syz.1.778" path="/" dev="configfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 430.466315][ T5712] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 430.515526][ T5704] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 430.694146][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 430.695380][ T5704] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 430.696211][ T5712] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 430.696338][ T5704] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 430.696353][ T5704] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.696365][ T5704] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.696381][ T5704] usb 2-1: config 0 interface 0 has no altsetting 0 [ 430.696398][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.698149][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.698179][ T5712] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 430.700121][ T5704] usb 2-1: config 0 descriptor?? [ 430.700931][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.700944][ T5712] usb 3-1: Product: syz [ 430.700953][ T5712] usb 3-1: Manufacturer: syz [ 430.700962][ T5712] usb 3-1: SerialNumber: syz [ 431.053740][ T9104] 8021q: VLANs not supported on gre0 [ 431.842319][ T31] audit: type=1400 audit(1791740512.149:6513): avc: denied { write } for pid=9082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.045769][ T5704] usbhid 2-1:0.0: can't add hid device: -71 [ 432.045828][ T5704] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 432.080412][ T5704] usb 2-1: USB disconnect, device number 30 [ 433.254509][ T31] audit: type=1400 audit(1791740513.569:6514): avc: denied { write } for pid=9112 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.349769][ C0] usb 3-1: received EP1 urb->status = -71 [ 433.516637][ T9119] FAULT_INJECTION: forcing a failure. [ 433.516637][ T9119] name failslab, interval 1, probability 0, space 0, times 0 [ 433.516658][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.0.787 Not tainted syzkaller #0 PREEMPT(full) [ 433.516671][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 433.516678][ T9119] Call Trace: [ 433.516683][ T9119] [ 433.516687][ T9119] dump_stack_lvl+0x100/0x190 [ 433.516709][ T9119] should_fail_ex.cold+0x5/0xa [ 433.516726][ T9119] should_failslab+0xc2/0x120 [ 433.516744][ T9119] kmem_cache_alloc_noprof+0x92/0x6a0 [ 433.516759][ T9119] ? alloc_empty_file+0x5b/0x1c0 [ 433.516773][ T9119] alloc_empty_file+0x5b/0x1c0 [ 433.516784][ T9119] path_openat+0xdb/0x2440 [ 433.516803][ T9119] ? __pfx_path_openat+0x10/0x10 [ 433.516824][ T9119] do_file_open+0x20e/0x430 [ 433.516842][ T9119] ? __pfx_do_file_open+0x10/0x10 [ 433.516869][ T9119] ? _raw_spin_unlock+0x28/0x50 [ 433.516883][ T9119] ? alloc_fd+0x471/0x7a0 [ 433.516905][ T9119] do_sys_openat2+0x10f/0x1e0 [ 433.516916][ T9119] ? __pfx_do_sys_openat2+0x10/0x10 [ 433.516927][ T9119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 433.516944][ T9119] ? __fget_files+0x21f/0x3d0 [ 433.516963][ T9119] __x64_sys_openat+0x12d/0x210 [ 433.516974][ T9119] ? __pfx___x64_sys_openat+0x10/0x10 [ 433.516984][ T9119] ? ksys_write+0x1ac/0x250 [ 433.517003][ T9119] do_syscall_64+0x123/0x790 [ 433.517021][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.517033][ T9119] RIP: 0033:0x7f3b7039e1d9 [ 433.517043][ T9119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.517054][ T9119] RSP: 002b:00007f3b71302028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 433.517065][ T9119] RAX: ffffffffffffffda RBX: 00007f3b70625fa0 RCX: 00007f3b7039e1d9 [ 433.517073][ T9119] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 433.517080][ T9119] RBP: 00007f3b71302090 R08: 0000000000000000 R09: 0000000000000000 [ 433.517087][ T9119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.517094][ T9119] R13: 00007f3b70626038 R14: 00007f3b70625fa0 R15: 00007ffe91e6fac8 [ 433.517110][ T9119] [ 433.865635][ T5712] usb 3-1: unable to init card! (ret=-19) [ 433.883618][ T5712] usb 3-1: USB disconnect, device number 29 [ 434.036964][ T31] audit: type=1400 audit(1791740514.349:6515): avc: denied { ioctl } for pid=9127 comm="syz.0.790" path="socket:[24440]" dev="sockfs" ino=24440 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.412816][ T9143] Cannot find set identified by id 0 to match [ 434.436515][ T31] audit: type=1400 audit(1791740514.749:6516): avc: denied { setopt } for pid=9141 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 434.561820][ T5712] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 434.923732][ T9148] 8021q: VLANs not supported on gre0 [ 435.523588][ T983] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 435.533762][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 435.548896][ T5712] usb 6-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 435.549730][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 435.549748][ T5712] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 435.551213][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.551226][ T5712] usb 6-1: Product: ꗡ∷﫰Ҁ﬉煟ˤ೺뗴옛饈뵕朹㧄혱꼘ᵭ횐ᑴ騰䴥맏곊Ỹ拊譧鍆㧸겥풿龏燫ⷦ⡏ꫨ踓ꠑ囹⥅씫잳ড籣輈胵닆啃롄퀀ꛊ钖뿍Ἆ⨴㦓䡭﻾嶡셶越㠨駠徜䅩历ퟝ뮺ߢ叒ร埬玳邜嶂뀵襅팀莞힆軳̨ⶨ⻮陌㥥䩯廠ڹꪠ娓䁽Ꝟ첎蠀힇ﬤђ⇹砵 [ 435.551246][ T5712] usb 6-1: Manufacturer: ᐄ [ 435.551254][ T5712] usb 6-1: SerialNumber: syz [ 435.713635][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 435.715137][ T983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 435.715163][ T983] usb 1-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=97.15 [ 435.715928][ T983] usb 1-1: config 7 has an invalid interface number: 85 but max is 0 [ 435.715955][ T983] usb 1-1: config 7 has no interface number 0 [ 435.715976][ T983] usb 1-1: config 7 interface 85 has no altsetting 0 [ 435.720855][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.720870][ T983] usb 1-1: Product: 䋴䱾켋闺佸ꌧ즘﷖ு [ 435.720879][ T983] usb 1-1: Manufacturer: ဉ [ 435.720887][ T983] usb 1-1: SerialNumber: syz [ 435.986184][ T31] audit: type=1400 audit(1791740516.299:6517): avc: denied { bind } for pid=9158 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.444760][ T983] ums-sddr55 1-1:7.85: USB Mass Storage device detected [ 437.524829][ T5712] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.524874][ T5712] usb 6-1: MIDIStreaming interface descriptor not found [ 437.629075][ T983] usb 1-1: USB disconnect, device number 30 [ 437.702200][ T9175] ip_tables: iptables: counters copy to user failed while replacing table [ 437.919917][ T5712] usb 6-1: USB disconnect, device number 11 [ 438.022122][ T8276] udevd[8276]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.097588][ T31] audit: type=1400 audit(1791740518.409:6518): avc: denied { write } for pid=9152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.253466][ T31] audit: type=1400 audit(1791740518.559:6519): avc: denied { map } for pid=9188 comm="syz.4.801" path="/dev/video3" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 438.431971][ T31] audit: type=1400 audit(1791740518.739:6520): avc: denied { write } for pid=9196 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.683654][ T5712] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 438.835560][ T5712] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 438.836448][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.836479][ T5712] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 438.876478][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.876493][ T5712] usb 6-1: Product: syz [ 438.876502][ T5712] usb 6-1: Manufacturer: syz [ 438.876509][ T5712] usb 6-1: SerialNumber: syz [ 439.278002][ T9220] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 439.385245][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 439.785880][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.785914][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.884841][ C0] usb 6-1: received EP1 urb->status = -71 [ 440.507914][ T5712] usb 6-1: unable to init card! (ret=-19) [ 440.528151][ T5712] usb 6-1: USB disconnect, device number 12 [ 440.787964][ T31] audit: type=1400 audit(1791740521.099:6521): avc: denied { setattr } for pid=9223 comm="syz.5.808" name="format" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 442.527326][ T31] audit: type=1400 audit(1791740522.839:6522): avc: denied { setopt } for pid=9231 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 442.647814][ T31] audit: type=1400 audit(1791740522.959:6523): avc: denied { read } for pid=9231 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 443.373647][ T9247] netlink: 'syz.2.815': attribute type 3 has an invalid length. [ 443.524206][ T9247] 9pnet_fd: p9_fd_create_tcp (9247): problem connecting socket to 127.0.0.1 [ 444.418081][ T9257] usb usb7: usbfs: process 9257 (syz.0.818) did not claim interface 0 before use [ 445.883011][ T9265] FAULT_INJECTION: forcing a failure. [ 445.883011][ T9265] name failslab, interval 1, probability 0, space 0, times 0 [ 445.883035][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.0.821 Not tainted syzkaller #0 PREEMPT(full) [ 445.883052][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.883061][ T9265] Call Trace: [ 445.883065][ T9265] [ 445.883070][ T9265] dump_stack_lvl+0x100/0x190 [ 445.883096][ T9265] should_fail_ex.cold+0x5/0xa [ 445.883116][ T9265] should_failslab+0xc2/0x120 [ 445.883136][ T9265] kmem_cache_alloc_noprof+0x92/0x6a0 [ 445.883155][ T9265] ? __asan_memcpy+0x3c/0x60 [ 445.883170][ T9265] ? __kernfs_new_node+0xd2/0xa10 [ 445.883188][ T9265] __kernfs_new_node+0xd2/0xa10 [ 445.883206][ T9265] ? __pfx___kernfs_new_node+0x10/0x10 [ 445.883224][ T9265] ? lock_acquire+0x1d1/0x380 [ 445.883239][ T9265] ? kernfs_root+0x23/0x2a0 [ 445.883252][ T9265] ? find_held_lock+0x2b/0x80 [ 445.883271][ T9265] ? kernfs_root+0xee/0x2a0 [ 445.883283][ T9265] ? kernfs_root+0xee/0x2a0 [ 445.883300][ T9265] kernfs_new_node+0x117/0x150 [ 445.883318][ T9265] __kernfs_create_file+0x53/0x350 [ 445.883338][ T9265] cgroup_addrm_files+0x4ef/0xdb0 [ 445.883365][ T9265] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 445.883390][ T9265] ? idr_replace+0xfa/0x170 [ 445.883413][ T9265] css_populate_dir+0x161/0x590 [ 445.883435][ T9265] cgroup_apply_control_enable+0x441/0xdd0 [ 445.883457][ T9265] cgroup_mkdir+0x57f/0x1330 [ 445.883476][ T9265] ? __pfx_cgroup_mkdir+0x10/0x10 [ 445.883493][ T9265] kernfs_iop_mkdir+0x111/0x190 [ 445.883507][ T9265] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 445.883529][ T9265] vfs_mkdir+0x364/0x850 [ 445.883549][ T9265] filename_mkdirat+0x48b/0x5e0 [ 445.883572][ T9265] ? __pfx_filename_mkdirat+0x10/0x10 [ 445.883592][ T9265] ? strncpy_from_user+0x19d/0x2d0 [ 445.883614][ T9265] ? do_getname+0x191/0x390 [ 445.883629][ T9265] __x64_sys_mkdirat+0x89/0xc0 [ 445.883650][ T9265] do_syscall_64+0x123/0x790 [ 445.883671][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.883684][ T9265] RIP: 0033:0x7f3b7039e1d9 [ 445.883696][ T9265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.883708][ T9265] RSP: 002b:00007f3b71302028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 445.883721][ T9265] RAX: ffffffffffffffda RBX: 00007f3b70625fa0 RCX: 00007f3b7039e1d9 [ 445.883730][ T9265] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 445.883739][ T9265] RBP: 00007f3b70435888 R08: 0000000000000000 R09: 0000000000000000 [ 445.883747][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.883755][ T9265] R13: 00007f3b70626038 R14: 00007f3b70625fa0 R15: 00007ffe91e6fac8 [ 445.883773][ T9265] [ 446.023378][ T9265] cgroup: cgroup_addrm_files: failed to add usage_percpu, err=-12 [ 447.185519][ T9276] No control pipe specified [ 448.261036][ T5712] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 448.420437][ T5712] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 448.442931][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.442948][ T5712] usb 2-1: Product: syz [ 448.442957][ T5712] usb 2-1: Manufacturer: syz [ 448.442965][ T5712] usb 2-1: SerialNumber: syz [ 448.466511][ T5712] usb 2-1: config 0 descriptor?? [ 448.610784][ T9290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.663239][ T9289] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 448.684770][ T5712] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 031 [ 449.971136][ T5719] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 450.123959][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 450.124391][ T5719] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 450.194556][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.194590][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.194603][ T5719] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.194626][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.245063][ T5719] usb 1-1: config 0 descriptor?? [ 450.483918][ T31] audit: type=1400 audit(1791740530.799:6524): avc: denied { lock } for pid=9281 comm="syz.1.813" path="socket:[25136]" dev="sockfs" ino=25136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.193679][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.193974][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.193990][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.194005][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.194021][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.194035][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.383806][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.383826][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.383841][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.383856][ T5719] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 451.809189][ T5719] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input32 [ 451.899124][ T5719] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 451.939415][ T5719] usb 1-1: USB disconnect, device number 31 [ 451.970137][ T5703] usb 2-1: USB disconnect, device number 31 [ 452.138707][ T9314] fido_id[9314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 453.233854][ T9328] No control pipe specified [ 455.417053][ T5600] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 455.417085][ T5600] Bluetooth: hci4: command 0x0405 tx timeout [ 455.563767][ T31] audit: type=1400 audit(1791740535.879:6525): avc: denied { getopt } for pid=9336 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 456.879604][ T9347] xt_ecn: cannot match TCP bits for non-tcp packets [ 457.027960][ T31] audit: type=1400 audit(1791740537.339:6526): avc: denied { getopt } for pid=9342 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 457.990182][ T9350] netlink: 'syz.0.846': attribute type 2 has an invalid length. [ 457.990617][ T31] audit: type=1400 audit(1791740538.299:6527): avc: denied { listen } for pid=9346 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 459.206139][ T31] audit: type=1400 audit(1791740539.519:6528): avc: denied { listen } for pid=9354 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.239448][ T31] audit: type=1400 audit(1791740539.549:6529): avc: denied { read } for pid=9354 comm="syz.0.848" path="socket:[25440]" dev="sockfs" ino=25440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.347740][ T31] audit: type=1400 audit(1791740539.659:6530): avc: denied { accept } for pid=9352 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.448865][ T5703] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 460.524260][ T5703] usb 5-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=4d.8b [ 460.525030][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 460.525045][ T5703] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 460.525059][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 460.525078][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.528560][ T5703] usb 5-1: config 0 descriptor?? [ 460.530299][ T5703] smsusb:smsusb_probe: board id=8, interface number 0 [ 460.789938][ T9367] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 461.305906][ T5703] smsusb:smsusb_probe: Device initialized with return code -19 [ 461.945738][ T9367] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.424963][ C0] sched: DL replenish lagged too much [ 501.626394][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.627761][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.588861][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.590205][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 616.843529][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 616.850485][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5337/1:b..l P5262/1:b..l P6713/1:b..l P5711/1:b..l P4968/1:b..l [ 616.862902][ C0] rcu: (detected by 0, t=10502 jiffies, g=46445, q=652 ncpus=1) [ 616.870584][ C0] task:udevd state:R running task stack:24568 pid:4968 tgid:4968 ppid:1 task_flags:0x400140 flags:0x00080000 [ 616.884033][ C0] Call Trace: [ 616.887283][ C0] [ 616.890188][ C0] __schedule+0x1259/0x6920 [ 616.894675][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 616.899585][ C0] ? __pfx___schedule+0x10/0x10 [ 616.904409][ C0] ? mark_held_locks+0x40/0x70 [ 616.909144][ C0] preempt_schedule_irq+0x4e/0x90 [ 616.914141][ C0] irqentry_exit+0x205/0xa10 [ 616.918706][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.924654][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x2e/0x40 [ 616.930879][ C0] Code: 8b 05 e6 07 71 06 85 c0 74 20 8b 05 70 38 71 06 85 c0 74 16 65 48 8b 05 78 3e b9 09 8b 80 a4 0b 00 00 85 c0 0f 94 c0 0f b6 c0 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 [ 616.950454][ C0] RSP: 0018:ffffc9000326f638 EFLAGS: 00000246 [ 616.956489][ C0] RAX: 0000000000000001 RBX: 00007ffec71351c0 RCX: ffffffff92de8722 [ 616.964428][ C0] RDX: 1ffff9200064ded8 RSI: 0000000000000006 RDI: ffffc9000326f6c0 [ 616.972380][ C0] RBP: 0000000000000001 R08: ffffffff92de8726 R09: 0000000000000007 [ 616.980319][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: ffffc9000326f700 [ 616.988258][ C0] R13: ffffc9000326f6b0 R14: ffffc9000326ff48 R15: 0000000003270001 [ 616.996218][ C0] unwind_next_frame+0x3a8/0x2090 [ 617.001234][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.007294][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.013426][ C0] arch_stack_walk+0x94/0xf0 [ 617.018005][ C0] stack_trace_save+0x8e/0xc0 [ 617.022656][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 617.028013][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 617.032923][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 617.037844][ C0] save_stack+0x162/0x1e0 [ 617.042157][ C0] ? __pfx_save_stack+0x10/0x10 [ 617.046980][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 617.052324][ C0] ? qlist_free_all+0x47/0xf0 [ 617.056971][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 617.062573][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 617.067573][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 617.073186][ C0] ? alloc_empty_file+0x5b/0x1c0 [ 617.078105][ C0] ? path_openat+0xdb/0x2440 [ 617.082686][ C0] ? do_file_open+0x20e/0x430 [ 617.087344][ C0] ? do_sys_openat2+0x10f/0x1e0 [ 617.092170][ C0] ? __x64_sys_openat+0x12d/0x210 [ 617.097167][ C0] ? do_syscall_64+0x123/0x790 [ 617.101923][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.107965][ C0] ? page_ext_put+0x3e/0xd0 [ 617.112449][ C0] __reset_page_owner+0x84/0x190 [ 617.117365][ C0] __free_frozen_pages+0x79f/0x10f0 [ 617.122539][ C0] ? __free_slab+0xd0/0x220 [ 617.127014][ C0] qlist_free_all+0x47/0xf0 [ 617.131502][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 617.136945][ C0] __kasan_slab_alloc+0x69/0x90 [ 617.141775][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 617.147215][ C0] ? alloc_empty_file+0x5b/0x1c0 [ 617.152127][ C0] alloc_empty_file+0x5b/0x1c0 [ 617.156936][ C0] path_openat+0xdb/0x2440 [ 617.161348][ C0] ? __pfx_path_openat+0x10/0x10 [ 617.166277][ C0] do_file_open+0x20e/0x430 [ 617.170768][ C0] ? __pfx_do_file_open+0x10/0x10 [ 617.175779][ C0] ? _raw_spin_unlock+0x28/0x50 [ 617.180604][ C0] ? alloc_fd+0x471/0x7a0 [ 617.184911][ C0] do_sys_openat2+0x10f/0x1e0 [ 617.189571][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 617.194744][ C0] ? ktime_get_ts64+0x306/0x420 [ 617.199572][ C0] __x64_sys_openat+0x12d/0x210 [ 617.204390][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 617.209736][ C0] do_syscall_64+0x123/0x790 [ 617.214298][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.220157][ C0] RIP: 0033:0x7f2019aa7407 [ 617.224546][ C0] RSP: 002b:00007ffec71351c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 617.232929][ C0] RAX: ffffffffffffffda RBX: 00007f20199bb880 RCX: 00007f2019aa7407 [ 617.240867][ C0] RDX: 0000000000080141 RSI: 0000558e5567102e RDI: ffffffffffffff9c [ 617.248815][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.256753][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 617.264692][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 617.272641][ C0] [ 617.275634][ C0] task:kworker/0:6 state:R running task stack:21016 pid:5711 tgid:5711 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 617.289188][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 617.296363][ C0] Call Trace: [ 617.299611][ C0] [ 617.302524][ C0] __schedule+0x1259/0x6920 [ 617.307004][ C0] ? chacha_block_generic+0x265/0x360 [ 617.312344][ C0] ? __pfx_chacha_block_generic+0x10/0x10 [ 617.318032][ C0] ? __pfx___schedule+0x10/0x10 [ 617.322852][ C0] ? mark_held_locks+0x40/0x70 [ 617.327597][ C0] preempt_schedule_irq+0x4e/0x90 [ 617.332594][ C0] irqentry_exit+0x205/0xa10 [ 617.337159][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 617.343106][ C0] RIP: 0010:rcu_is_watching+0x85/0xc0 [ 617.348448][ C0] Code: ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 25 8b 03 c1 e8 02 83 e0 01 65 48 ff 0d 76 ac 9d 13 74 07 5b <5d> c3 cc cc cc cc e8 b0 a9 86 ff 5b 5d e9 d9 b3 e7 09 48 89 df e8 [ 617.368020][ C0] RSP: 0018:ffffc90004ebf488 EFLAGS: 00000286 [ 617.374053][ C0] RAX: 0000000000000001 RBX: ffffffff8fdec5a0 RCX: ffffffff92e9c501 [ 617.381993][ C0] RDX: 0000000000000000 RSI: ffffffff8c625500 RDI: ffffffff8e6af920 [ 617.389930][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000007 [ 617.397868][ C0] R10: 0000000000000200 R11: 000000000000d11e R12: ffffc90004ebf5a0 [ 617.405806][ C0] R13: ffffc90004ebf550 R14: ffffc90004ebfe60 R15: ffffc90004ebf584 [ 617.413755][ C0] ? unwind_next_frame+0x3be/0x2090 [ 617.418930][ C0] lock_release+0x24d/0x310 [ 617.423406][ C0] unwind_next_frame+0x3c3/0x2090 [ 617.428403][ C0] ? worker_thread+0x5ef/0xe50 [ 617.433135][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.439257][ C0] arch_stack_walk+0x94/0xf0 [ 617.443821][ C0] ? kthread+0x373/0x450 [ 617.448048][ C0] stack_trace_save+0x8e/0xc0 [ 617.452694][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 617.458034][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 617.462941][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 617.467846][ C0] save_stack+0x162/0x1e0 [ 617.472147][ C0] ? __pfx_save_stack+0x10/0x10 [ 617.476968][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 617.482311][ C0] ? qlist_free_all+0x47/0xf0 [ 617.486958][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 617.492568][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 617.497302][ C0] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 617.502824][ C0] ? wg_noise_handshake_begin_session+0xe5/0xe40 [ 617.509119][ C0] ? wg_packet_send_handshake_response+0x219/0x310 [ 617.515600][ C0] ? wg_receive_handshake_packet+0x7dd/0xc20 [ 617.521559][ C0] ? wg_packet_handshake_receive_worker+0x15e/0x370 [ 617.528126][ C0] ? process_one_work+0xac7/0x1b10 [ 617.533211][ C0] ? worker_thread+0x5ef/0xe50 [ 617.537956][ C0] ? page_ext_put+0x3e/0xd0 [ 617.542438][ C0] __reset_page_owner+0x84/0x190 [ 617.547350][ C0] __free_frozen_pages+0x79f/0x10f0 [ 617.552523][ C0] ? __free_slab+0xd0/0x220 [ 617.556996][ C0] qlist_free_all+0x47/0xf0 [ 617.561473][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 617.566905][ C0] __kasan_kmalloc+0x8a/0xb0 [ 617.571476][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 617.576817][ C0] ? __pfx_down_write+0x10/0x10 [ 617.581641][ C0] ? wg_noise_handshake_begin_session+0xe5/0xe40 [ 617.587941][ C0] wg_noise_handshake_begin_session+0xe5/0xe40 [ 617.594067][ C0] wg_packet_send_handshake_response+0x219/0x310 [ 617.600374][ C0] ? wg_socket_set_peer_endpoint+0x324/0xbe0 [ 617.606328][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 617.613157][ C0] ? kfree_skbmem+0x19a/0x210 [ 617.617806][ C0] wg_receive_handshake_packet+0x7dd/0xc20 [ 617.623586][ C0] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 617.629893][ C0] ? lock_acquire+0x1d1/0x380 [ 617.634555][ C0] ? do_raw_spin_lock+0x128/0x260 [ 617.639582][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 617.644845][ C0] wg_packet_handshake_receive_worker+0x15e/0x370 [ 617.651247][ C0] process_one_work+0xac7/0x1b10 [ 617.656183][ C0] ? __pfx_process_one_work+0x10/0x10 [ 617.661538][ C0] ? lock_acquire+0x1d1/0x380 [ 617.666192][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 617.673113][ C0] worker_thread+0x5ef/0xe50 [ 617.677681][ C0] ? __pfx_worker_thread+0x10/0x10 [ 617.682764][ C0] ? kthread+0x13a/0x450 [ 617.686978][ C0] ? __pfx_worker_thread+0x10/0x10 [ 617.692057][ C0] kthread+0x373/0x450 [ 617.696099][ C0] ? __pfx_kthread+0x10/0x10 [ 617.700667][ C0] ret_from_fork+0x730/0xd60 [ 617.705229][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 617.710310][ C0] ? __switch_to+0x800/0x10f0 [ 617.714960][ C0] ? __pfx_kthread+0x10/0x10 [ 617.719524][ C0] ret_from_fork_asm+0x1a/0x30 [ 617.724268][ C0] [ 617.727261][ C0] task:kworker/u8:42 state:R running task stack:23720 pid:6713 tgid:6713 ppid:2 task_flags:0x24248060 flags:0x00080000 [ 617.740879][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 617.746840][ C0] Call Trace: [ 617.750088][ C0] [ 617.752992][ C0] __schedule+0x1259/0x6920 [ 617.757473][ C0] ? mark_held_locks+0x40/0x70 [ 617.762216][ C0] ? __pfx___schedule+0x10/0x10 [ 617.767040][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 617.773079][ C0] preempt_schedule_notrace+0x57/0xd0 [ 617.778423][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.784547][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 617.790417][ C0] rcu_is_watching+0x90/0xc0 [ 617.794980][ C0] unwind_next_frame+0x6fa/0x2090 [ 617.799977][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 617.805593][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.811717][ C0] arch_stack_walk+0x94/0xf0 [ 617.816285][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 617.821890][ C0] stack_trace_save+0x8e/0xc0 [ 617.826537][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 617.831881][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 617.836789][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 617.841697][ C0] save_stack+0x162/0x1e0 [ 617.846001][ C0] ? __pfx_save_stack+0x10/0x10 [ 617.850827][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 617.856172][ C0] ? qlist_free_all+0x47/0xf0 [ 617.860992][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 617.866593][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 617.871587][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 617.877195][ C0] ? page_ext_put+0x3e/0xd0 [ 617.881675][ C0] __reset_page_owner+0x84/0x190 [ 617.886591][ C0] __free_frozen_pages+0x79f/0x10f0 [ 617.891763][ C0] ? __free_slab+0xd0/0x220 [ 617.896255][ C0] qlist_free_all+0x47/0xf0 [ 617.900732][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 617.906163][ C0] __kasan_slab_alloc+0x69/0x90 [ 617.910987][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 617.916428][ C0] ? ext4_init_io_end+0x24/0x170 [ 617.921368][ C0] ext4_init_io_end+0x24/0x170 [ 617.926118][ C0] ext4_do_writepages+0x992/0x3e80 [ 617.931208][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 617.936130][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 617.941660][ C0] ? ext4_writepages+0x34a/0x750 [ 617.946569][ C0] ext4_writepages+0x34a/0x750 [ 617.951301][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 617.956572][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 617.961481][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 617.966736][ C0] do_writepages+0x278/0x600 [ 617.971299][ C0] ? __pfx_do_writepages+0x10/0x10 [ 617.976383][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 617.981642][ C0] ? writeback_sb_inodes+0x3e1/0x1c50 [ 617.986990][ C0] __writeback_single_inode+0x164/0x1560 [ 617.992612][ C0] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 617.998482][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 618.004523][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 618.009701][ C0] writeback_sb_inodes+0x766/0x1c50 [ 618.014882][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 618.020497][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 618.025444][ C0] ? _raw_spin_unlock+0x28/0x50 [ 618.030269][ C0] ? move_expired_inodes+0x5ea/0x8f0 [ 618.035534][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 618.040711][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 618.046490][ C0] ? queue_io+0x287/0x530 [ 618.050798][ C0] wb_writeback+0x6f6/0xb50 [ 618.055289][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 618.060303][ C0] ? get_nr_inodes+0x100/0x150 [ 618.065055][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.070232][ C0] wb_workfn+0x93f/0xc80 [ 618.074457][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 618.079634][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 618.084390][ C0] ? process_one_work+0x906/0x1b10 [ 618.089486][ C0] ? process_one_work+0x906/0x1b10 [ 618.094595][ C0] process_one_work+0xac7/0x1b10 [ 618.099522][ C0] ? __pfx_process_one_work+0x10/0x10 [ 618.104870][ C0] ? lock_acquire+0x1d1/0x380 [ 618.109525][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 618.114271][ C0] worker_thread+0x5ef/0xe50 [ 618.118847][ C0] ? __pfx_worker_thread+0x10/0x10 [ 618.123931][ C0] ? kthread+0x13a/0x450 [ 618.128147][ C0] ? __pfx_worker_thread+0x10/0x10 [ 618.133229][ C0] kthread+0x373/0x450 [ 618.137300][ C0] ? __pfx_kthread+0x10/0x10 [ 618.141873][ C0] ret_from_fork+0x730/0xd60 [ 618.146451][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 618.151541][ C0] ? __switch_to+0x800/0x10f0 [ 618.156195][ C0] ? __pfx_kthread+0x10/0x10 [ 618.160761][ C0] ret_from_fork_asm+0x1a/0x30 [ 618.165507][ C0] [ 618.168497][ C0] task:dhcpcd state:R running task stack:25768 pid:5262 tgid:5262 ppid:1 task_flags:0x400140 flags:0x00080000 [ 618.181941][ C0] Call Trace: [ 618.185194][ C0] [ 618.188099][ C0] __schedule+0x1259/0x6920 [ 618.192585][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 618.197493][ C0] ? __pfx___schedule+0x10/0x10 [ 618.202314][ C0] ? mark_held_locks+0x40/0x70 [ 618.207057][ C0] preempt_schedule_irq+0x4e/0x90 [ 618.212063][ C0] irqentry_exit+0x205/0xa10 [ 618.216631][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.222585][ C0] RIP: 0010:kasan_byte_accessible+0x1a/0x30 [ 618.228454][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f b6 07 3c 07 <0f> 96 c0 e9 8e 24 57 09 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 618.248035][ C0] RSP: 0018:ffffc90004a97118 EFLAGS: 00000297 [ 618.254074][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 618.262031][ C0] RDX: 0000000000000000 RSI: ffffffff81b9b261 RDI: fffffbfff1fbd8b4 [ 618.269984][ C0] RBP: ffffffff8fdec5a0 R08: 0000000000000000 R09: 0000000000000000 [ 618.277926][ C0] R10: 0000000000000200 R11: 000000000001809f R12: ffffffff81b9b261 [ 618.285870][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.293817][ C0] ? unwind_next_frame+0xd1/0x2090 [ 618.298910][ C0] ? unwind_next_frame+0xd1/0x2090 [ 618.303996][ C0] __kasan_check_byte+0x13/0x50 [ 618.308824][ C0] lock_acquire+0x132/0x380 [ 618.313299][ C0] ? unwind_next_frame+0x3be/0x2090 [ 618.318469][ C0] ? unwind_next_frame+0x3be/0x2090 [ 618.323642][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.329764][ C0] unwind_next_frame+0xd1/0x2090 [ 618.334685][ C0] ? unwind_next_frame+0xbd/0x2090 [ 618.339770][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 618.344508][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.350641][ C0] arch_stack_walk+0x94/0xf0 [ 618.355207][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 618.359943][ C0] stack_trace_save+0x8e/0xc0 [ 618.364591][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 618.369938][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 618.374846][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 618.379753][ C0] save_stack+0x162/0x1e0 [ 618.384058][ C0] ? __pfx_save_stack+0x10/0x10 [ 618.388879][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 618.394223][ C0] ? qlist_free_all+0x47/0xf0 [ 618.398867][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 618.404468][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 618.409208][ C0] ? page_ext_put+0x3e/0xd0 [ 618.413699][ C0] __reset_page_owner+0x84/0x190 [ 618.418611][ C0] __free_frozen_pages+0x79f/0x10f0 [ 618.423796][ C0] ? __free_slab+0xd0/0x220 [ 618.428268][ C0] qlist_free_all+0x47/0xf0 [ 618.432741][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 618.438183][ C0] __kasan_kmalloc+0x8a/0xb0 [ 618.442744][ C0] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 618.449141][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 618.454574][ C0] ? __alloc_skb+0x185/0x710 [ 618.459139][ C0] kmalloc_reserve+0xe8/0x350 [ 618.463805][ C0] __alloc_skb+0x185/0x710 [ 618.468197][ C0] ? __alloc_skb+0x5b7/0x710 [ 618.472768][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 618.477676][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 618.482596][ C0] alloc_skb_with_frags+0xdd/0x760 [ 618.487686][ C0] ? lock_acquire+0x1d1/0x380 [ 618.492350][ C0] ? avc_has_perm_noaudit+0x56/0x470 [ 618.497626][ C0] ? find_held_lock+0x2b/0x80 [ 618.502295][ C0] sock_alloc_send_pskb+0x801/0x980 [ 618.507484][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 618.513192][ C0] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 618.519508][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 618.526166][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 618.531083][ C0] unix_dgram_sendmsg+0x3c7/0x1810 [ 618.536171][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 618.541707][ C0] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 618.547067][ C0] sock_write_iter+0x53a/0x5b0 [ 618.551805][ C0] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 618.557669][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 618.562930][ C0] ? __pfx___file_has_perm+0x10/0x10 [ 618.568191][ C0] do_iter_readv_writev+0x6f7/0x930 [ 618.573362][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 618.579063][ C0] ? selinux_file_permission+0x8f/0x6d0 [ 618.584595][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 618.589944][ C0] ? security_file_permission+0x76/0x210 [ 618.595549][ C0] ? rw_verify_area+0xce/0x6d0 [ 618.600285][ C0] vfs_writev+0x360/0xdd0 [ 618.604590][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 618.609411][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 618.614505][ C0] ? __pfx___seccomp_filter+0x10/0x10 [ 618.619856][ C0] ? do_writev+0x28a/0x340 [ 618.624242][ C0] do_writev+0x28a/0x340 [ 618.628485][ C0] ? __pfx_do_writev+0x10/0x10 [ 618.633222][ C0] do_syscall_64+0x123/0x790 [ 618.637789][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.643652][ C0] RIP: 0033:0x7f19209e7407 [ 618.648035][ C0] RSP: 002b:00007ffe529d28d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 618.656417][ C0] RAX: ffffffffffffffda RBX: 00007f192095d780 RCX: 00007f19209e7407 [ 618.664371][ C0] RDX: 0000000000000005 RSI: 00007ffe529d2930 RDI: 000000000000000a [ 618.672319][ C0] RBP: 000056218587b260 R08: 0000000000000000 R09: 0000000000000000 [ 618.680256][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000056218587b260 [ 618.688198][ C0] R13: 000000000000012c R14: 00000000ffffffff R15: 0000000000000000 [ 618.696150][ C0] [ 618.699143][ C0] task:crond state:R running task stack:24904 pid:5337 tgid:5337 ppid:1 task_flags:0x400000 flags:0x00080000 [ 618.712586][ C0] Call Trace: [ 618.715836][ C0] [ 618.718740][ C0] __schedule+0x1259/0x6920 [ 618.723218][ C0] ? find_held_lock+0x2b/0x80 [ 618.727874][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.734010][ C0] ? kernel_text_address+0x8d/0x100 [ 618.739180][ C0] ? __pfx___schedule+0x10/0x10 [ 618.744015][ C0] ? mark_held_locks+0x40/0x70 [ 618.748751][ C0] preempt_schedule_irq+0x4e/0x90 [ 618.753748][ C0] irqentry_exit+0x205/0xa10 [ 618.758313][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.764259][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 618.769512][ C0] Code: ff 65 0f c1 05 9b 6e a6 13 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 9d 27 a6 13 0f 85 4d 01 00 00 48 83 c4 [ 618.789088][ C0] RSP: 0018:ffffc90002e3fad8 EFLAGS: 00000206 [ 618.795124][ C0] RAX: 0000000000000046 RBX: ffffffff8fdec5a0 RCX: ffffc90002e3fae4 [ 618.803064][ C0] RDX: 0000000000000000 RSI: ffffffff8e3bd310 RDI: ffffffff8c625580 [ 618.811003][ C0] RBP: ffffffff828b555d R08: 0000000000000001 R09: 0000000000000000 [ 618.818943][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888035668000 [ 618.826894][ C0] R13: 0000000006e801d4 R14: 0000000000000202 R15: 0000000000000002 [ 618.834837][ C0] ? __update_page_owner_free_handle.isra.0+0x2fd/0x4b0 [ 618.841761][ C0] __update_page_owner_free_handle.isra.0+0x302/0x4b0 [ 618.848497][ C0] ? page_ext_put+0x3e/0xd0 [ 618.852976][ C0] __reset_page_owner+0x93/0x190 [ 618.857901][ C0] __free_frozen_pages+0x79f/0x10f0 [ 618.863090][ C0] ? __free_slab+0xd0/0x220 [ 618.867566][ C0] qlist_free_all+0x47/0xf0 [ 618.872041][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 618.877480][ C0] __kasan_slab_alloc+0x69/0x90 [ 618.882308][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 618.887741][ C0] ? do_getname+0x35/0x390 [ 618.892131][ C0] do_getname+0x35/0x390 [ 618.896346][ C0] do_sys_openat2+0xc7/0x1e0 [ 618.900905][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 618.906077][ C0] __x64_sys_openat+0x12d/0x210 [ 618.910907][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 618.916268][ C0] do_syscall_64+0x123/0x790 [ 618.920844][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.926714][ C0] RIP: 0033:0x7f7bf6401407 [ 618.931102][ C0] RSP: 002b:00007fff828be0c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 618.939488][ C0] RAX: ffffffffffffffda RBX: 00007f7bf62b1c80 RCX: 00007f7bf6401407 [ 618.947444][ C0] RDX: 0000000000000000 RSI: 00007f7bf65f4764 RDI: ffffffffffffff9c [ 618.955384][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 618.963323][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f7bf6600492 [ 618.971273][ C0] R13: 00007f7bf6600492 R14: 0000000000000001 R15: 0000000000000035 [ 618.979235][ C0] [ 618.982239][ C0] rcu: rcu_preempt kthread starved for 298 jiffies! g46445 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 618.993047][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 619.002982][ C0] rcu: RCU grace-period kthread stack dump: [ 619.008845][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 619.022296][ C0] Call Trace: [ 619.025547][ C0] [ 619.028459][ C0] __schedule+0x1259/0x6920 [ 619.032940][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 619.037856][ C0] ? lock_acquire+0x1d1/0x380 [ 619.042514][ C0] ? __pfx___schedule+0x10/0x10 [ 619.047335][ C0] ? find_held_lock+0x2b/0x80 [ 619.051999][ C0] ? schedule+0x225/0x2c0 [ 619.056301][ C0] schedule+0xdd/0x2c0 [ 619.060360][ C0] schedule_timeout+0x127/0x280 [ 619.065180][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 619.070522][ C0] ? __pfx_process_timeout+0x10/0x10 [ 619.075779][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 619.081571][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 619.087003][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 619.091748][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 619.097011][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 619.101925][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 619.107100][ C0] ? rcu_is_watching+0x13/0xc0 [ 619.111864][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 619.117663][ C0] rcu_gp_kthread+0x17a/0x220 [ 619.122325][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 619.127502][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 619.133293][ C0] ? __kthread_parkme+0x18f/0x230 [ 619.138296][ C0] ? kthread+0x13a/0x450 [ 619.142514][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 619.147688][ C0] kthread+0x373/0x450 [ 619.151750][ C0] ? __pfx_kthread+0x10/0x10 [ 619.156315][ C0] ret_from_fork+0x730/0xd60 [ 619.160885][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 619.165969][ C0] ? __switch_to+0x800/0x10f0 [ 619.170619][ C0] ? __pfx_kthread+0x10/0x10 [ 619.175184][ C0] ret_from_fork_asm+0x1a/0x30 [ 619.179930][ C0] [ 619.182921][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 619.189220][ C0] CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 619.198927][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.208969][ C0] Workqueue: bat_events batadv_tt_purge [ 619.214537][ C0] RIP: 0010:rcu_is_watching+0x72/0xc0 [ 619.219889][ C0] Code: 20 f9 6a 8e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 25 <8b> 03 c1 e8 02 83 e0 01 65 48 ff 0d 76 ac 9d 13 74 07 5b 5d c3 cc [ 619.239469][ C0] RSP: 0018:ffffc90000007370 EFLAGS: 00000246 [ 619.245509][ C0] RAX: 0000000000000003 RBX: ffff8880b8233de8 RCX: ffffffff92e9c401 [ 619.253449][ C0] RDX: 0000000000000000 RSI: ffffffff8c625500 RDI: ffffffff8e6af920 [ 619.261428][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000007 [ 619.269371][ C0] R10: 0000000000000200 R11: 000000000000d0ea R12: ffffc90000007448 [ 619.277318][ C0] R13: ffffc900000073f8 R14: ffffc9000e56fd10 R15: ffffc9000000742c [ 619.285258][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 619.294159][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.300710][ C0] CR2: 00007f9f0bc00000 CR3: 000000007914a000 CR4: 00000000003526f0 [ 619.308651][ C0] Call Trace: [ 619.311913][ C0] [ 619.314732][ C0] unwind_next_frame+0x745/0x2090 [ 619.319737][ C0] ? process_one_work+0xac7/0x1b10 [ 619.324834][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 619.329746][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 619.335935][ C0] arch_stack_walk+0x94/0xf0 [ 619.340509][ C0] ? rescuer_thread+0x918/0x14e0 [ 619.345420][ C0] ? kfree_skbmem+0x19a/0x210 [ 619.350070][ C0] stack_trace_save+0x8e/0xc0 [ 619.354717][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 619.360059][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 619.364976][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 619.369884][ C0] kasan_save_stack+0x30/0x50 [ 619.374531][ C0] ? kasan_save_stack+0x30/0x50 [ 619.379357][ C0] ? kasan_save_track+0x14/0x30 [ 619.384177][ C0] ? kasan_save_free_info+0x3b/0x70 [ 619.389343][ C0] ? __kasan_slab_free+0x5f/0x80 [ 619.394266][ C0] ? kmem_cache_free+0x127/0x6c0 [ 619.399172][ C0] ? kfree_skbmem+0x19a/0x210 [ 619.403840][ C0] ? consume_skb+0xd1/0x110 [ 619.408322][ C0] ? vcan_tx+0x379/0xba0 [ 619.412552][ C0] ? dev_hard_start_xmit+0x121/0x760 [ 619.417811][ C0] ? __dev_queue_xmit+0x1c25/0x4a40 [ 619.422990][ C0] ? can_send+0x5d7/0xbd0 [ 619.427291][ C0] ? bcm_can_tx+0x4e8/0xa30 [ 619.431766][ C0] ? bcm_tx_timeout_handler+0x522/0x5d0 [ 619.437284][ C0] ? __hrtimer_run_queues+0x462/0x9c0 [ 619.442642][ C0] ? hrtimer_run_softirq+0x1ca/0x360 [ 619.447903][ C0] ? handle_softirqs+0x1e6/0x9d0 [ 619.452809][ C0] ? do_softirq+0xaf/0xf0 [ 619.457105][ C0] ? __local_bh_enable_ip+0xff/0x120 [ 619.462360][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 619.467268][ C0] ? process_one_work+0xac7/0x1b10 [ 619.472374][ C0] kasan_save_track+0x14/0x30 [ 619.477027][ C0] kasan_save_free_info+0x3b/0x70 [ 619.482021][ C0] __kasan_slab_free+0x5f/0x80 [ 619.486757][ C0] kmem_cache_free+0x127/0x6c0 [ 619.491501][ C0] ? skb_release_data+0x65e/0x860 [ 619.496497][ C0] kfree_skbmem+0x19a/0x210 [ 619.500976][ C0] consume_skb+0xd1/0x110 [ 619.505281][ C0] vcan_tx+0x379/0xba0 [ 619.509325][ C0] ? __pfx_vcan_tx+0x10/0x10 [ 619.513894][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 619.520019][ C0] dev_hard_start_xmit+0x121/0x760 [ 619.525106][ C0] __dev_queue_xmit+0x1c25/0x4a40 [ 619.530108][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 619.535459][ C0] ? rcu_is_watching+0x13/0xc0 [ 619.540195][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 619.545626][ C0] ? __asan_memcpy+0x3c/0x60 [ 619.550198][ C0] ? __asan_memcpy+0x3c/0x60 [ 619.554759][ C0] ? __skb_clone+0x570/0x760 [ 619.559324][ C0] can_send+0x5d7/0xbd0 [ 619.563457][ C0] ? __pfx_can_send+0x10/0x10 [ 619.568105][ C0] bcm_can_tx+0x4e8/0xa30 [ 619.572407][ C0] ? __pfx_bcm_can_tx+0x10/0x10 [ 619.577234][ C0] ? mark_held_locks+0x40/0x70 [ 619.581966][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 619.587223][ C0] bcm_tx_timeout_handler+0x522/0x5d0 [ 619.592567][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 619.598173][ C0] ? __pfx_bcm_tx_timeout_handler+0x10/0x10 [ 619.604041][ C0] ? mark_held_locks+0x40/0x70 [ 619.608773][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 619.614550][ C0] ? __pfx_bcm_tx_timeout_handler+0x10/0x10 [ 619.620414][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 619.625592][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 619.630672][ C0] handle_softirqs+0x1e6/0x9d0 [ 619.635423][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 619.640689][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 619.645596][ C0] do_softirq+0xaf/0xf0 [ 619.649723][ C0] [ 619.652635][ C0] [ 619.655547][ C0] __local_bh_enable_ip+0xff/0x120 [ 619.660629][ C0] batadv_tt_purge+0x25d/0xbd0 [ 619.665365][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 619.670619][ C0] ? lock_acquire+0x1d1/0x380 [ 619.675266][ C0] ? process_one_work+0xa2c/0x1b10 [ 619.680357][ C0] ? process_one_work+0x906/0x1b10 [ 619.685443][ C0] ? process_one_work+0x906/0x1b10 [ 619.690530][ C0] process_one_work+0xac7/0x1b10 [ 619.695445][ C0] ? __pfx_process_one_work+0x10/0x10 [ 619.700791][ C0] ? lock_acquire+0x1d1/0x380 [ 619.705662][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 619.710919][ C0] rescuer_thread+0x918/0x14e0 [ 619.715654][ C0] ? rescuer_thread+0x256/0x14e0 [ 619.720560][ C0] ? rescuer_thread+0x118/0x14e0 [ 619.725464][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 619.730643][ C0] ? __kthread_parkme+0x18f/0x230 [ 619.735639][ C0] ? kthread+0x13a/0x450 [ 619.739850][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 619.745033][ C0] kthread+0x373/0x450 [ 619.749077][ C0] ? __pfx_kthread+0x10/0x10 [ 619.753642][ C0] ret_from_fork+0x730/0xd60 [ 619.758203][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 619.763282][ C0] ? __switch_to+0x800/0x10f0 [ 619.767938][ C0] ? __pfx_kthread+0x10/0x10 [ 619.772500][ C0] ret_from_fork_asm+0x1a/0x30 [ 619.777238][ C0]