last executing test programs: 35.197583362s ago: executing program 4 (id=834): ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, &(0x7f0000000140)={0x7}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x3447}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e5445240140000076a8a20122e4dbbe000000000000000000000000000064ac038d0000000000000000000000000000000000000000002000"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) accept4(r0, 0x0, 0x0, 0x80000) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xfe2a, 0x1200, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 32.20142895s ago: executing program 2 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, 0x0, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xf9e8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 28.119075526s ago: executing program 4 (id=847): syz_emit_ethernet(0x7a, &(0x7f0000001340)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x44, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x4}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x6b}}}}}}}}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) memfd_secret(0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) (async) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080), 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x7c65, 0xa334, 0x1, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000040)={0x0, 0x4, 0x927bf}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 28.060397552s ago: executing program 2 (id=848): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x9, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x6d12, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xf563, 0x101, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x1b2, 0xad, 0x2, 0x809, 0x40, 0xa3, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x5cc, 0x5, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x8, 0x20102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x200003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0xd, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f0904"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x8) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4041, &(0x7f00000010c0)=0xfc9) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 27.62192971s ago: executing program 4 (id=850): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000084081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x34}}, 0x24008080) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 26.582727755s ago: executing program 4 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000456000/0x1000)=nil, r3, 0x2, 0x12, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x25000, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.378808769s ago: executing program 1 (id=854): r0 = syz_open_procfs(0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e22, @remote}], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0xc07}, 0x90) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb4b4, 0x0, 0x0, 0x158, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x8000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000001840)=ANY=[@ANYBLOB="080008000400060000001400000046"], 0xfce) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) 24.361195663s ago: executing program 1 (id=856): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000084081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x34}}, 0x24008080) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 24.323514455s ago: executing program 2 (id=857): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r1, 0x6, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"1b000500", 0x100, 0x5, 0x2, 0x4, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", '\x00', "0000000000000000001000"]}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000940)={{r2}, "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"}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000480)={"06f47953", 0x9, 0x8, 0x0, 0x5, 0x60000, "4efdd41fced5b777f3897a87b7b2d5", "30001b2c", "0d115334", "108aee75", ["84b57f1898430018b45b2c0f", "27fbc555ce25c81c6d99c162", "2193df098013f69a860a8927", "9c9833c01fa7e47f90a0db05"]}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) getrlimit(0xd, &(0x7f0000000080)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xc) syz_open_dev$usbfs(0xfffffffffffffffd, 0x2, 0xa800) 23.28147211s ago: executing program 1 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, 0x0, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xf9e8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 23.054071207s ago: executing program 3 (id=859): setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0xcfa}], 0x1}, 0x4040000) 23.040861309s ago: executing program 0 (id=860): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2180) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xfffffffa, 0x6, 0x0, 'queue0\x00', 0x5}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0x604}], 0x1) pread64(r0, &(0x7f0000000040), 0x0, 0x96) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0100001900010028bd7000fedbdf251d0109004d0012803ffdf3f2028171a6fb780a54fe018b5e82a822e5be67607d02c08f034e3aabd5f926e2842504a4a4730c084a8dcec83fcf6d647b65c23e2635a87bf4a5d212e1d82a73e32decc319a8000000d80006"], 0x13c}, 0x1, 0x0, 0x0, 0x5}, 0x1806) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') preadv(r3, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000c00)={&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/116, 0x74}], 0x1, &(0x7f0000000380)=""/158, 0x9e}, 0x10100) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190ec) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRES32=r5, @ANYRES8=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="eac6753cfe5a677e5c1d98bfed680293750df203a576dc970634848b32cf387fde143c2493154413ec993423ae0756aa6aff6562df9a9f9ad6e6d37676e464369bbe78d34dad7496fee1c73479ec6b089869fe96b6a09ffc8fcf0f159c1a39c78e1f58cd118d071794f0f01d14c6051ca565e15bae77f6b3533238e03931821099e13e1ac8224452b68357c7681c1e85aa3c00973f9b05d13b65623ee8614fbf8a62f75579e1"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8932, &(0x7f0000000040)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) syz_usb_connect(0x0, 0x35, 0x0, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r7, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x99a7c3ab423f30d1, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 22.801945575s ago: executing program 3 (id=861): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000084081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x34}}, 0x24008080) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 21.76680137s ago: executing program 3 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000070000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f203020312031") 21.704488455s ago: executing program 2 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r2}) r4 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_procfs(r3, &(0x7f0000000380)='net/connector\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 21.614445223s ago: executing program 4 (id=864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0xf3b2, @loopback, 0x80000000}}, 0x0, 0x0, 0x4d, 0x3c, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 21.133634997s ago: executing program 2 (id=865): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write$P9_RREAD(r1, &(0x7f00000001c0)={0x32, 0x75, 0x2, {0x27, "dd39bec6c0df143cbebc975b7e3bd00cdc5e134c6b72b61d77c9b17e812882fb45b3c32e936f9a"}}, 0x32) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000340)={0x0, 0xa211, 0x10000, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) 21.115437485s ago: executing program 0 (id=866): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write(r0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000240), 0x12) (fail_nth: 1) 20.911188816s ago: executing program 0 (id=867): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000020000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) syz_io_uring_setup(0x2369, &(0x7f00000001c0)={0x0, 0xbc48, 0x20, 0x0, 0x189, 0x0, r0}, &(0x7f0000000280)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000380)={0x0, 0xe0a2, 0x200, 0x2, 0x5f, 0x0, r0}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x315b, 0x100, 0x3, 0x20d, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x32e9, 0x400, 0x1, 0x336, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ab, 0x2, 0x0, 0x35f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbfc, 0x1000, 0x0, 0x1c9, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000002100)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x1, 0x39d, 0x0, &(0x7f0000001100)=@buf_4k="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"}}, &(0x7f0000002180)) syz_ublk_setup_io_uring(0x410a, &(0x7f00000021c0)={0x0, 0x8741, 0x2000, 0x0, 0x15d, 0x0, r0}, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)=0x0) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000003300)=@ublk_io_need_get_data_sqe={0x2e, 0x5, 0x0, r0, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x0, 0x3fb, 0x7, &(0x7f0000002300)=@buf_max_buf="ba6d094806ec6d1d88e5d79ca54402725ae354745cf450bb7387e3614224149a2fa6a16cf7841847f769b2972d2c13b29fda3a891a75cb2987bf97f1c78b0614bfd01dffa2a36df38b6ec30c580467cd35bbfb51a7dc4668a114b120860f9b7206145e7ee5eca7f3c18a8d82de271eac80f9d377032fc97fcc996da6d7d19af07ae590dcc694be5f151c950adc6dceac84fc50d2d294b6513d1637a4dfcbf7ad1bd3c9bfe99c5876857ead1e729e8267ab7e6e91d95f5cd6de02f2a634223961faee7dcb84fa06659a91dd4c857cdef79992852d1fcf30936565d3234a6c2f53d291e4790eb34872abebbab19d3e682757480d80ff78e3d71cf33a67c4e90f947d5a3f7cdd4766acdba7fc0cc431e212b948d41b67669f7a2b530e12e448ed68b6d39ac71d6d09b2560b1f295845538369d7cc3c604980be3afdec0983f2cfb2c520d7121a599ea5e6e43c08af8c89eb35aff21d04f70353d945ad536bb23975551fa5a75bb6addfd96448c22c6376c9b8c540a5f2e42936e5a2fe5865c7acaed5a1d6800eb0cbd39d4198e48e5daa08df7e96cff5481370157361aea59d98634df1cf36747c925bb25de77fc1c31e616f129849d1503ee9573ce63655c58389836b52bf18a0e24d9689e480acc3b4870379a455fdc175139a6f925c03a47e8fd8a5aa19fc44129c0870c4dab3293a3703c6e2a0362803e4ec79e96ab52357032a450f47c656449f610a4cb020dcadec79ffe649e49961b1f33f3ea6a51e457157b682eed865e5b96636335ad364761a2caaefcf99541878689602bc5536e47d961b893b48f3aed9341f7975bc938ad366cec0d5c2a53bc97f489b8c220c1544593ff8f80a72158b38b1e253976d259458a993029bac722166bdc68be640fda56f5931382a0a2b20a0983a2b8579794c880f2bf0f6dada529334325f6f947169d8fd7e3872623b9eded97fbab30c6ace1f49427713bbe5346f647e6d8f5c362576ce907d3579430073e5bec55e7472038356e255efe11fafe7042fbb5147b42e6c94566beabb218b3030796ec9d250028c29777dadb3954fb33f14a4a5aad6550acc86cb3d8e9f89639a975c08378a038299d7e8a6232c22a253b180d35a3da7dbf6cb6b43eafefb43d08cc3238416de03dce4a1be08f94b1f395a7dc702b748ac1124fe83e1c6c46322489ffabe5d3bc6a39c88b32bcbcbcd6f863e5fcc27072ea54b9d1d285217707b5560bd051ece8d2d5b5f5faaec41df46c3c69c84d5db67f271b16fa55ec82d85e71ed03ac4677d3c969182abc9661e8da1bd1e542b3e6d60214549957fc037d03ce2ecf980a719cb1a833076b515e48c2cea6dec82c0edc4f09e2dc19abf99b827aad10526efeab67483615eb029a3713d238d0b2347a559d7f005bab5bdf07fe8be18fc4f94ad03634bb3fd2c36ff92df1e0c62359df35b60ebf93f0e48ad9abed568c30c4668a215581c7b77f6c54ad0ec228bc00d6ed459ef888971c3ac86d35d4488e241217f4cc82db9fe986ad52d8f67a113ee84aef6e1e6d0a501bbe4130ea70139bb0f8fb15a2786c6b23d4d8cfdc252c18881d5eb63def8cb2cd51920a71a0cb8a00715ee2f367eda4556ae22fa7e027676850f1c33c54564537812a1962a129f018657c20b06881ec65f2f423d55b4b85a820678df853084fe8598025d51a828910d2d36e4eb855eff09d35c5fee013ed9e711c425f54601edc6c6e0c4589280db6a81c68c4a9fe2007c5f430eebceab95481bef9e8d8d7f50c1de9dc39c0657ac57d049cdcadf0c48f123df58538a6528912b3cd6aeef9b0a107e4c922b773054e636d373a6df747ead2c084d329ee88314f8204bd1607cebdb83102f61948f4464502948d0a83858c7dc4125a5f8b74ed577eb36844e442fc8e444f661b7a3a018fb2ba3947b205841cf88b8b97e574388955beee8c6102a4cd4aa95354d55442158bd91870b1b6d808699f30158b39396d381321a347a1d16e272457e94e1795369b1da3bbf90838cd3906899e25b4c12aa5645eccc4c82e9a8ce3dfcb2f07efe1f8f2c0a50fc526d0cd6612a78b0573758ca530d3e9ccf7a5e3319640dd0cb07427124cfe287e034898d7d492d6ee8cedc323631a8681086647e1448af3528d2dfad714a57f39edd629cbb18c845c40c781693624aa043182d05cb52d3327ef4acaf6c4c63057f973d69b97eae381d19d7d40034419e0d37d4d7d953588dd339887c82aa8189205c19a79d3a84db349d3b412f02856629d8b09a5a21f58d645239c39e33b08544c1a7035059965596fc78e725e3a2c4cef3ffa4f07cc5c5bfe69eed776a60bdd5741dc1cc21f55bc4187a47461bf8cec7f453e4de7be399d513e29caeec19cde5f34372d9e692836528494a97abe1c04b67a0e1376ad39e6adcc4047dccb37f8ad076a5918fbd3a7153e9836d24d67dd16b8db3f16ee218b76c268801d1e883f37e9d58b21cda8355db237636693435fff2d520b78fe92ef43f90e738be506fc83fc8a2d3c90109b82f4abe33a2cf557936e0c0ed64405a53f2425d0219c149a916748df4cc91ad1990b8d1a4b24e51cb467801c14cff89a29ee0631ea017411b6d7ae2c2a8feeed6ef29270a102ad24afefadd44a492303205e7090c0f0ece574cb709ede5871e1e908e10718ecebb96c20d3a2ec889eb3ccdcfeb8e04572171fafb4dd78f6548dab807e9bed8e74b9859854d2260b039bf1542c218ef545096a336798ad732326f4cfe1920fd314896c9373ad49189329b6154ecdf13cb39021bef599ab6c21626ff37b3ec44dcddcc5e7a0bdadfe5025bc9117b0a783f44fe580581b5492176af8aed58a2364c0599d6f0e2d746fe54d6be8cfeb2f6fab7c2d2833eb99aea35419e95d6d4050bd258700e059e86b97f08d8be76c9849e21c3850d42ea65149791abbd966b40b691c4074a8ef1019c5db45c01dda1873a2f8555d3f54befbae8577fd11694c70828c87fec8f2b71de27c0b69d9a716104c8afad9ab6f50ce9573dab1b7a6c56b052e68552825cc1170512ca3ffb5dd5934e53d32cc7b8dd00a70413a1cf20cfa2645846d2d5a12f1d388262348a94406107a8b2012287a73ce5d7fa5672c49d557d28473e909b7f649784a9109d4cd082750a3ecd88936be6202e134879cf82d7992c01bfe0d5607b81fdc4ecaf1e4d01b252ea20462cd03aaa1ad611589602470738523de3fd99e3f68a92269c44bc0331f9dc48cac869ca637c200923a993b7461f63b3baa88c38541105a213a2878595a2ce169f955cc02ad3f25b2c9b9f02708d5039feb0cd7ecb04b733be6853c3a90f6160fcabcb85f138d7d23847d5bd39225b768a85341dae28e86609d4e536d0679021c0582c7b97560b74d03c40b67dff906e881a35663d4980091d932ea059695b12464fed6e3196cb9be4adab265f94cbd5ee13b866a346e476c0703811bdd2d329947e9f1ef428ac8a3f9abe13ac05a38f45c61ad76feabe046282d36badcadf502b76229d822813b9822c1b8b18371878fc501c5623edfeffd67e27a34994284f976f3ba9553a05aeab8705989a0bd73743a7dd0af9bf5d982947ea53ddab6ecbc8ba30cb534389ab469975049afb30161c5c529c66c4d00ce83775cdb9610fbc4e716aa35f5449b88f577f6551f41dd9f07f7b5e1cf4e56d65a5dbe400c892d2ee48d2442e56f110d6f5b4595d7f00443743aa205cb0c5d6842e418d7f0ca5992f256f6a5f4cbdbe3a0ee0b88e417596bf4612ac837015813e54db6279030dd258ed2fcdf8e80616745d49bf6561b3ea0448eb4a238e97a83d6be7daacb567c120ddcda1be2217fb0b877860d93dbe6255065cc7deaac546fca09e86c359a0598452b071151b053871b9322552321c62acec8e28b04c670e1757c069deec64df31d951c45b368fcd20a6208cfb9066fdf0c68d742bb86f8f42ece90c414c0cfabfeae4c2e2f415d05dc69d687b24e9ff66471ec850fc5427f8171cea0ed8c8b8aa874373cb7a0d4adc6a0f0ffabb21ef92aeececa12340f8d6dc5931b83c146306c1b92579f3053d0468ece21c520676cf882cc9cec17d8d5592f9e55239c8cb0da10d0d9c7cb9e97f18e587ace2c06042bc5dc47b64efd161c293755a5d57152b1c073c8075cb411dde564befca3c0b82266cfbd2af1cc57ec720f3cec6c1af96d0cedd83fb61d0ef122821fd072bf24654fb7bc9a78820cff0bd49c86a5f7ebb8181f41ee91f95833d571c8653c72874bab8edba952423cc9f598b8fae4563b19a5bbfbe7be84cbcc27e20fdaac152f3ea40f40a40ac4f3d58b7de5eceb9fb7c90e4819cd843ae2a00ff9512e4db52c0d9c254ada0f9775231324a325b75157588e5a1f064b6d65313a335222650c409c6de6661c979e4c8040d58a3220ab85fcd574226a6d1ec7fdc75f33d9074580be3ccb3e4d68c2e85efbbca8d8b1dce3100547f0c586dc427cb9793e18250e527603d74d26d89a120f4e59fe8bb9f0ed1ac60bc18c51d7e28e128e56a78364894a67a243165e331e7f8c25714829d2b54546b9b52c3c0f3ba32217d73cf0bf9f340f02a8e48d1e5ff31a0a82ea2a15b17b6be5ac88765c32eafa84c8a3d001ec5cd2e0564336b5dea5e9fd11f93252016a488b1d5c1ab9980165ebeed429949ab9de47e4e562326b7a49d2bd5656be130c08bfe16223bb8d7b6b9911b1c310e01d957c32b621e3f4fc887c2eeb33e5fa4704bd76fb3d96a318456857c4ebd210204b095ee5772cd2e147d81218706829d5a8b399cf0969a8ae99009e90a20fb7eec4283fa963613d969e9b63f4a8a3342f0a6aea8f9a6e9f5225736ee768a841650c8a47b617f65db43b6a66ba93bfb6d6ad308eee0b8650b2f03df5a09ab31bcbd9902e059bdf45b8213e0217fdc3c094ecbf31736a2e799d3dadfa91af86db4801d395ccf511585b31873b73b9a189a014e8da6473150fee5b84c8bee02e318757b3abfb758c786c22503a9e2532b3bcc0aae7b3075883b41a98f9c5c9fa747839f5a60f2862a60a10a2d85aef22f19797a687aaf261338e0c59a330157b1362b3c54a69f420aa8940081fb7a9bec9083cd75ad4bf8a27da7e50d16b6dcb2195d5d056c94d6a6098a10e633c1b26ebc5dc36f10d7a32f90ac347b2ce3daf96cde4f95794940d4f342c8eed7a2059c8b636ddf5b3d446014d9fefb9a1a9c4a0d0444544ea171f91a276c8992648c000cfcf1b8093237d3797f78d8cdbc6e45c14bd134d268c480691988a70264c10aff13ffc0a8b2463dd0d075507196d7e720d601b0caa36527d6549d676ac6e9296d08ff2a92c99478e01c46f9f60821c178d87521fa2fe95145e384a1082bfdd390793293ffdc3681a9afa78f7be02ae7d2b5f13b145e615c80fd98bd113988f3fcb21ef11d21e5415d821f7dfc90a8e57009a409b04b952644d889f43dd45c6f67f48604db0b6371ba51e18bbffb9960b9bf8832a918a8e2001c7805a13bd7f257a10e33c7182d57bc6849fd28cc0b5d0ba1dc12c534fd5bd32ed80ae097c50abaf7dd66b7b401178bacd3e40b09b10775e32699417a7d94299b9cedafd87941bb58dcb407280ba27d71ade9d84f868e04bd91e0107bff65e8f7009960d33e0ba04d856d2569024e6af92271b1236040f74297fa56dfc61fa6b987b49bfbca1ad8c784a9a9718d5a4a2d8b8cdef54a007935ad7b8b112f6fbb96c3b2a332038e2c4ce16401b295f58149c3deabb35db991297b13edbdd19203bc8fc90f571d33369ea90872b6"}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r3, 0x25, 0x0, @void}, 0x30) write(r0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="44001029", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000050004000100000006001a004e230000050021000100000008001800ac1414bb0600030007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x200000, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000000440)={@id={0x2, 0x0, @c}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) fcntl$F_GET_FILE_RW_HINT(r9, 0x40d, &(0x7f0000000180)) write$cgroup_pid(r0, &(0x7f0000000240), 0x12) 20.350195601s ago: executing program 4 (id=868): set_mempolicy(0x4000, 0x0, 0xef6) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl(r0, 0x3, 0x0) unshare(0x6a040000) 20.293174688s ago: executing program 0 (id=869): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x1d00b548472d5577, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x8, 0x5}, {0xfff2, 0x4}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4984}, 0x8840) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250400000008000200050000003400018008000300ac1414aa08000300640101010500020004000000060005004e000000500000000000000008000700773b1d5e8ee9603705420ea5e86656cf31c3140e618536a7782443608ac486d5c0a7c2ee9ce906809bab3e7ca12b21572083fccaaaa4e81b433815007e5fcba977175cbacc95a74a0cd4da7abc1c1e67fcf9cf6761113abe41", @ANYRES32=0x0, @ANYBLOB="5400068008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="14000400fe8000000000000000000000000000aa050002000000000008000700", @ANYRES8=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="14000400ff020000000000000000000000000001"], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x48, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="cd0b", 0x2) io_uring_setup(0x466c, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) writev(0xffffffffffffffff, &(0x7f0000000180), 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x353a02, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0xc102, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) socket$phonet_pipe(0x23, 0x5, 0x2) 20.287579257s ago: executing program 1 (id=870): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/sched/filter\x00', &(0x7f0000000100)={0x420000, 0x68, 0x12}, 0x18) mkdirat(r0, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b455220274344204361707475726527203030303030303030313337343338"], 0x4000) close(r2) mlockall(0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) write(0xffffffffffffffff, &(0x7f0000000080)='common_pid > 0', 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) read(0xffffffffffffffff, &(0x7f0000000140)=""/105, 0x69) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff6000/0xa000)=nil, 0xa000}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x5, 0x2) 19.019684728s ago: executing program 2 (id=871): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1, 0x7}, &(0x7f0000000a80)='\xf9\x8c\xe2bH2\xbd\xb5\x92\xfaz\b=\xff\xd2a\xcf\xb8\xf1Zk8\xf5\xdcI\xafC:.+\xc8\xed\x82\xf55x,cmR\xb0?B\xde\xa5\xef\x97\xf4\x8fZHAF\x8c\xaa\'\xf2EU\xba;\xbc\xbe\xd2\xef\xcb\x99>*\x03\x1e)\x93\x059\x06\x00\x00\xb9\x11\xb7\xab\xe7&\xf2\xdc\xb58\xea\x13\x8b\xafh\xeb\x18<\xe9\xd1l\xb4t\xf1\xfb\xaa\xf0\x89\xe1_\x89\xa4\xf4\x00\x92\\\xa1d\xf9\xaf\xb3\x05\x01\x10\x1f\xf6z\x91{.\xb8\xfd-\xc4u\x01\x00\x00\x00\x00\x00\x00\x00-\xfb\x1a\xf0\xbb\xd5\x16QM\x9c\xaa\xd0n1\xf0\xe8\x86\x0f\x81\xbaa\x98\xd6\xa5\x13\xeb\xcd\x81\xfd\r\xc1\xe6\xc7z\xf6\xe0\x83D\xae^\x06\xb1f\x9f\xdf\x9fj\"\xcc\xd3n\x1d\n\x97\xd0\x15\x88Y\xa2P\xa83.\nT\x01\x00\x00\x00\x00\x00\x00\x00I\xaa\f\xb1`\xebJ\xc2b\xa3\xb2Hd\x8d\x9a\x8a\xcb\xa2]j\xf4\xe0N\x9b^Z\xa6s\xef\xc2}\xfb\xe5\x0f\xe2J\xbfb1\xa9\xc0D\x1c;\xf3c=\xa1\xc4U\x95\xce%\xd8`\x95\x1c\x93\x0fs\x15\x1eV\x97\xdaF\xd1\xc2\xb3\x86\xaa#B\xce\n\xb5\xe9\xac\x19\x1eF\x0f8\xcd-8\xf9\xbe\a\x87^\x01_\a\x118Lw<\xe6\x15Nk\xc6\x99\xd9R\b\xe7\x1bz\'|3L\xc0\x9a\x85Y\xd90x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES16=0x0, @ANYBLOB="16da0d8dd0f338755eb21f9d1bf5b5bf2bfc2bccd5d61ce86761610f904ee35938d59605966b7e65285cdafc2b2330f3e08712d4b96c362bfd904634a2655890d706b974e325500d8652427c69b03dc94cad88ead8452eb426dd6ca3045852b15fa3281370a3669758279b47017bf11d0bf76c7373870de9cceb293698696139e1010fd56a44186d4914b40acb9a949cd84b51caf94f3912a8f09559f69e49c357e2794251fc959c39a41314b9ba7e9e8108b7209fe6c6", @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES32=r0], 0xffe) syz_usb_control_io(r1, 0x0, 0x0) 19.018101148s ago: executing program 1 (id=872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fanotify_init(0x200, 0x0) read$FUSE(r7, &(0x7f00000002c0)={0x2020}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x1, 0x0) write$binfmt_script(r10, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}, {0x20, '\xff\xff'}, {0x20, '#($'}, {0x20, '@'}, {0x20, '}/:'}, {0x20, '@(,.&'}, {0x20, '!i@'}, {0x20, '#! '}, {}], 0xa, "3c7d3cea6f12a6e01869b6edbede91f7061fd638dcfe8ba2c02c472851f7ba82653e6b2f2ddac945458810a6b6fc69156500144d"}, 0x5f) 17.784329634s ago: executing program 1 (id=873): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='ns\x00') readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) (async) readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x84) (async) socket$kcm(0x2, 0x5, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) 17.644710913s ago: executing program 0 (id=874): r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2f, 0x13500, 0x4}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000012c"], 0xa8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000dc0)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000080)=[@rdmsr={0x66, 0x18, {0xb90}}, @wr_crn={0x67, 0x20, {0x3, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc08, 0x9, 0x5, 0x9d9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x482c, 0xffffffffffffffff, 0x1, 0x8}}], 0xa8}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="8c0572c3b944ae0000", @ANYRES16=r5, @ANYBLOB="00032dbd7000fbdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e0004008700040087002705330030980300ffffffffffffffffffffffff08021100000010080e0001000e000d00f8ff0101062d1a0c001508000000000000008000060004000000010000000100ffddd1f0338e8b903ff6143a42977c159c576099a4cedc5d80f543aad845bb10fbb66f6ffe2088693192f82fc19819b4ed79ee1e75dc8e4585f8b252a1fb2dc957f4714d94f2c56a9008db4d290e0b2338b3ccd0f3a0a6c64ba49d6b3d42db11c4d41a742f3ba3c99750a190bee99938acec38409b66e0940939aef5473495da3c70d13759fdefef5b67c7fb22bf848135a2ca7df22719f1f972a67a8cb005ec70e175f2f2683c2c84545487490df55a9fb4a2e410db20b4b23259bc2b32428c9f6b190b8e596fdcb6be5c2606ef76d76cfc39deddda0a354957c66116f88d5bae849d7fdf5a46c6c26a784bf8394d117722e958afa651ff8abda61e0640a653aafb1ffeef4b36337ae7b2b5b80af2b5a2313636bbde705cdf063497b5bc0f8dff70f57c6ab1060473f42e664082a8570bedf13d10dfd4061548c166a2730198ceb6945e5aa34dd788681ba02d280b8886bf371663ccc874bd6b150bc4c1c3913924589ef22a3f0089216ce11d6dd484fbd06a7771ad0bc0d09ef185eece86bed115eb286fff1efb73fc7079261f8de71abc04043eae233f410cf47a8fc67e586e5203f6ba626b4f8bfb6dd0e4d86309dd27cbbc22150fa2c7c65d72a9892705d2a3dc36a6f1c2d3788b2b1b597fe0c713bb361fae23d6548edd8b9d8e4b127c2d7811bbd8adba7dc538eda19781c8151a7de0f5049eb80a002b361dbf0e817b9192412e9432fd95ce4c2c74d2f5fadc32e38ae54bab0d41e4f90812decd564aa556c28ff2d07ec91445d2e28d65150757804b129f302419bbee9481d44e59f44353bac16068383e721399df810864543e48c56b115dc98860f64f88b3259b76f2c5a2f40cbfdd9cac88da5d1bf1d2c9277a4fab344334f9b19c2e698af36ace8a00dbde9eb8ff5f8a9fa2bcffadef8ac7b7b58516aec59e6ca6ef7782596850f6c9a93e2c1a8e360386b3fe32243f46a39d81ad0fecf638afabf69d372401e8a06f86ba65b03385b0f7ab56765f466d09bdcbaf2a71c8c0c0c1f595efb2fe6cb8260e0a8b9d50b14e974dd33016906e549203b54b53350a753ed91179f6bb0882ba0c79dd0e530d2090bc73b0668c6db3f6e1c6dd11018eb9143d0f056b8c52679b09073348d4dd60da0735dde315ccc53b28442a2a3e603d3beab28637db91d8619a9c64b328e1924b71434df2fa0cc1eb25de5d795340332b0483532e94fc9f8b457b3e1900423e5657d2adada31250ebc5bd90636998675d8ce74f34d881541e29729a39334585dd7aa8df6ad5e2f3e7796502fda13a8bb6424ee56b058c0d7fc966cb95b278fe41907eb4c2921dfb98309afac44a4437567dde38cedc81363158d8551c7f7a98088e795a4d7b468a03a1b9747f7e6a278b4a6edd09dbc62226e241e6e04edcb0acb603ab66494e4b9892ca411516a54283198729b7fd524046c105eedddc9d325c86c5a5cf1c1c20b99dc5b6aab8c2465342c213a4b9b43e18e5dc5b0d9adb50ca3c8a3b763def9897461472fe2a915634adee9eed797fb9ed7d18cbd5e10651052f662cdf30906c9ac79ad1e7ef14c702d68e218e3ebe80f42b89ee26352d073766dd13dfa7adcd2975472bdf0f94a1fd286f3d96e3ceb5d9026245f6fe7c64e4679a4678b17837e4602fbb0793df69bb3862a1ca3e1a32598cffe17eaa9fe0f48a13507c635696e0c0b65449d81374345620a9cf51a6f446dd22d42265360a20a559887910c56a2a097584850a6e03d7197a352b19fe8a622b0004008e000a00cd00ff07080002000000050018011200000008002700030000000800a1000d0000000800a10004000000080026003c14000004008e00"], 0x58c}, 0x1, 0x0, 0x0, 0x20000080}, 0xd0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 17.485919141s ago: executing program 3 (id=875): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000006c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 17.450175695s ago: executing program 3 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r2}) r4 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_procfs(r3, &(0x7f0000000380)='net/connector\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 16.96850339s ago: executing program 3 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="58010000100005000100000000000000000000000000000000000000000000010000000000000000467605a90c82c1a200000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="000000000000000000000000000000010000123433000000000000000000000000000000000000010000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000a000000800000000000000048000100686d6163287368613129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170001000000000000000000000002000000004000002000000000000000"], 0x158}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x4, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) remap_file_pages(&(0x7f000017c000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x10000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)={0x5c, r7, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f158fd10ddfb2e1d02368dd036"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf040}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) 16.85017713s ago: executing program 0 (id=878): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x4, 0x80) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9f00000000000c0000000c00000000300000"], &(0x7f00000001c0)=""/74, 0x28, 0x4a, 0x0, 0x4, 0x10000, @value=r2}, 0x28) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r5, 0x5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) accept(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000080), 0x4) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4e21, 0x4e20, [0x100007f], [0x100007f], 0x0, [0xffffffff, 0xffffffff]}}}, 0x4c}}, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e24, 0xa8b0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000740)={{r4}, 0x0, 0x14, @unused=[0x2, 0x101, 0xffffffffffffbc08, 0xa], @name="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"}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) socket$netlink(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x18, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x54, 0x30, 0x871a15abc695fb3d, 0x70bd2a}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004801) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801000000000000fecf127d76"], 0xfffffffffffffff3}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x80401) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x7}) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r10, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x1d, '\x00', @buffer={"316d22407d162a99771b320d434b4a22d94b83f92f20a7b0519109155043a913", 0x20}, 0x8}]}) 0s ago: executing program 32 (id=871): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1, 0x7}, &(0x7f0000000a80)='\xf9\x8c\xe2bH2\xbd\xb5\x92\xfaz\b=\xff\xd2a\xcf\xb8\xf1Zk8\xf5\xdcI\xafC:.+\xc8\xed\x82\xf55x,cmR\xb0?B\xde\xa5\xef\x97\xf4\x8fZHAF\x8c\xaa\'\xf2EU\xba;\xbc\xbe\xd2\xef\xcb\x99>*\x03\x1e)\x93\x059\x06\x00\x00\xb9\x11\xb7\xab\xe7&\xf2\xdc\xb58\xea\x13\x8b\xafh\xeb\x18<\xe9\xd1l\xb4t\xf1\xfb\xaa\xf0\x89\xe1_\x89\xa4\xf4\x00\x92\\\xa1d\xf9\xaf\xb3\x05\x01\x10\x1f\xf6z\x91{.\xb8\xfd-\xc4u\x01\x00\x00\x00\x00\x00\x00\x00-\xfb\x1a\xf0\xbb\xd5\x16QM\x9c\xaa\xd0n1\xf0\xe8\x86\x0f\x81\xbaa\x98\xd6\xa5\x13\xeb\xcd\x81\xfd\r\xc1\xe6\xc7z\xf6\xe0\x83D\xae^\x06\xb1f\x9f\xdf\x9fj\"\xcc\xd3n\x1d\n\x97\xd0\x15\x88Y\xa2P\xa83.\nT\x01\x00\x00\x00\x00\x00\x00\x00I\xaa\f\xb1`\xebJ\xc2b\xa3\xb2Hd\x8d\x9a\x8a\xcb\xa2]j\xf4\xe0N\x9b^Z\xa6s\xef\xc2}\xfb\xe5\x0f\xe2J\xbfb1\xa9\xc0D\x1c;\xf3c=\xa1\xc4U\x95\xce%\xd8`\x95\x1c\x93\x0fs\x15\x1eV\x97\xdaF\xd1\xc2\xb3\x86\xaa#B\xce\n\xb5\xe9\xac\x19\x1eF\x0f8\xcd-8\xf9\xbe\a\x87^\x01_\a\x118Lw<\xe6\x15Nk\xc6\x99\xd9R\b\xe7\x1bz\'|3L\xc0\x9a\x85Y\xd90x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES16=0x0, @ANYBLOB="16da0d8dd0f338755eb21f9d1bf5b5bf2bfc2bccd5d61ce86761610f904ee35938d59605966b7e65285cdafc2b2330f3e08712d4b96c362bfd904634a2655890d706b974e325500d8652427c69b03dc94cad88ead8452eb426dd6ca3045852b15fa3281370a3669758279b47017bf11d0bf76c7373870de9cceb293698696139e1010fd56a44186d4914b40acb9a949cd84b51caf94f3912a8f09559f69e49c357e2794251fc959c39a41314b9ba7e9e8108b7209fe6c6", @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES32=r0], 0xffe) syz_usb_control_io(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 [ 248.155814][ T7482] RSP: 002b:00007f5126686f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.155843][ T7482] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f512579ddeb [ 248.155858][ T7482] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 248.155872][ T7482] RBP: 00007f5126687fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 248.155886][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.155900][ T7482] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000000 [ 248.155931][ T7482] [ 248.239659][ T30] audit: type=1400 audit(1790817473.424:700): avc: denied { setopt } for pid=7484 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.244155][ T30] audit: type=1400 audit(1790817473.444:701): avc: denied { connect } for pid=7484 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.627633][ T190] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 248.757022][ T190] usb 5-1: device descriptor read/64, error -71 [ 248.907053][ T30] audit: type=1400 audit(1790817474.074:702): avc: denied { mount } for pid=7495 comm="syz.2.437" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 248.907105][ T30] audit: type=1400 audit(1790817474.084:703): avc: denied { read write } for pid=7495 comm="syz.2.437" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 248.907147][ T30] audit: type=1400 audit(1790817474.084:704): avc: denied { open } for pid=7495 comm="syz.2.437" path="/87/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 248.907188][ T30] audit: type=1400 audit(1790817474.084:705): avc: denied { ioctl } for pid=7495 comm="syz.2.437" path="/87/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 248.928511][ T30] audit: type=1400 audit(1790817474.114:706): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 249.020335][ T190] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 249.153844][ T190] usb 5-1: device descriptor read/64, error -71 [ 249.257380][ T190] usb usb5-port1: attempt power cycle [ 249.617747][ T190] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 249.649534][ T190] usb 5-1: device descriptor read/8, error -71 [ 249.907541][ T190] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 249.974549][ T190] usb 5-1: device descriptor read/8, error -71 [ 250.062100][ T7532] TC_ACT_REPEAT abuse ? [ 250.084703][ T190] usb usb5-port1: unable to enumerate USB device [ 250.233443][ T7539] tipc: Started in network mode [ 250.233475][ T7539] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 250.233668][ T7539] tipc: Enabled bearer , priority 0 [ 250.324896][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.324946][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.266576][ T190] tipc: Node number set to 43690 [ 253.552641][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 254.214216][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 254.214235][ T30] audit: type=1400 audit(1790817479.404:715): avc: denied { read write } for pid=7584 comm="syz.2.468" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 254.214281][ T30] audit: type=1400 audit(1790817479.404:716): avc: denied { open } for pid=7584 comm="syz.2.468" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 254.964419][ T30] audit: type=1400 audit(1790817479.784:717): avc: denied { mounton } for pid=7584 comm="syz.2.468" path="/94/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 255.657443][ T7597] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 255.657866][ T7597] ALSA: mixer_oss: invalid index 137438 [ 255.879415][ T30] audit: type=1400 audit(1790817481.074:718): avc: denied { create } for pid=7599 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.882066][ T7603] netlink: 'syz.2.472': attribute type 23 has an invalid length. [ 255.900859][ T5601] logitech-hidpp-device 0005:046D:B012.000B: item fetching failed at offset 3/4 [ 255.901346][ T5601] logitech-hidpp-device 0005:046D:B012.000B: hidpp_probe:parse failed [ 255.901408][ T5601] logitech-hidpp-device 0005:046D:B012.000B: probe with driver logitech-hidpp-device failed with error -22 [ 256.075369][ T30] audit: type=1400 audit(1790817481.264:719): avc: denied { open } for pid=7600 comm="syz.1.473" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 256.082960][ T30] audit: type=1400 audit(1790817481.274:720): avc: denied { ioctl } for pid=7600 comm="syz.1.473" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 256.862165][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 257.041735][ T7616] batman_adv: batadv0: Adding interface: veth0 [ 257.041753][ T7616] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.041781][ T7616] batman_adv: batadv0: Interface activated: veth0 [ 257.610417][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 258.177478][ T7621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.177503][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.211608][ T7621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.211630][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.215495][ T7621] batman_adv: batadv0: Interface deactivated: veth0 [ 258.215513][ T7621] batman_adv: batadv0: Removing interface: veth0 [ 258.559613][ T5718] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 258.827733][ T5718] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.829262][ T5718] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 258.829293][ T5718] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 258.829319][ T5718] usb 4-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.829346][ T5718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 258.830262][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 258.830284][ T5718] usb 4-1: SerialNumber: syz [ 258.857366][ T7623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.857459][ T7623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.950043][ T7629] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5595] was attempted by ""[7629] [ 259.369497][ T7623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.369599][ T7623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.412957][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 261.452733][ T5718] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 261.711643][ T30] audit: type=1400 audit(1790817486.904:721): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 261.721912][ T30] audit: type=1400 audit(1790817486.914:722): avc: denied { search } for pid=5261 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.722117][ T30] audit: type=1400 audit(1790817486.914:723): avc: denied { search } for pid=5261 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.722294][ T30] audit: type=1400 audit(1790817486.914:724): avc: denied { search } for pid=5261 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.722534][ T30] audit: type=1400 audit(1790817486.914:725): avc: denied { read } for pid=5261 comm="dhcpcd" name="n30" dev="tmpfs" ino=2629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.722840][ T30] audit: type=1400 audit(1790817486.914:726): avc: denied { open } for pid=5261 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.723130][ T30] audit: type=1400 audit(1790817486.914:727): avc: denied { getattr } for pid=5261 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.855634][ T30] audit: type=1400 audit(1790817487.054:728): avc: denied { mount } for pid=7622 comm="syz.3.470" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 261.912148][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.916747][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.040616][ T30] audit: type=1400 audit(1790817487.154:729): avc: denied { read } for pid=7650 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.040666][ T30] audit: type=1400 audit(1790817487.154:730): avc: denied { read open } for pid=7650 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.682556][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 263.533951][ T5601] usb 4-1: USB disconnect, device number 18 [ 263.545825][ T5601] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 263.576539][ T7648] gadgetfs: bound to dummy_udc driver [ 263.623017][ T7669] 9p: Bad value for 'wfdno' [ 263.837247][ T5332] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 263.837495][ C0] gadgetfs: connected [ 263.838617][ T5332] gadgetfs: disconnected [ 263.857952][ T7674] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 263.857972][ T7674] netlink: 224 bytes leftover after parsing attributes in process `syz.3.487'. [ 263.971660][ T7647] gadgetfs: suspended from state 2 [ 263.988175][ T5332] usb 1-1: device descriptor read/all, error -71 [ 264.169474][ T7680] x_tables: duplicate underflow at hook 3 [ 264.439687][ T7684] syzkaller1: entered allmulticast mode [ 264.625261][ T7699] bridge1: entered promiscuous mode [ 269.527047][ T5332] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 269.615267][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 269.615286][ T30] audit: type=1400 audit(1790817493.802:748): avc: denied { setattr } for pid=7747 comm="syz.3.500" name="seq" dev="devtmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 269.697552][ T5332] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 269.698484][ T5332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.698530][ T5332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.701082][ T5332] usb 2-1: config 0 descriptor?? [ 269.747253][ T5332] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 270.277724][ T7763] syzkaller1: entered allmulticast mode [ 270.783190][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 271.474644][ T7768] FAULT_INJECTION: forcing a failure. [ 271.474644][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 271.474676][ T7768] CPU: 1 UID: 0 PID: 7768 Comm: syz.3.503 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.474704][ T7768] Tainted: [L]=SOFTLOCKUP [ 271.474712][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 271.474723][ T7768] Call Trace: [ 271.474731][ T7768] [ 271.474739][ T7768] dump_stack_lvl+0x100/0x190 [ 271.474772][ T7768] should_fail_ex.cold+0x5/0xa [ 271.474802][ T7768] should_failslab+0xc2/0x120 [ 271.474836][ T7768] __kmalloc_noprof+0xfc/0x840 [ 271.474860][ T7768] ? tomoyo_encode2+0xfb/0x3c0 [ 271.474892][ T7768] tomoyo_encode2+0xfb/0x3c0 [ 271.474922][ T7768] tomoyo_encode+0x29/0x50 [ 271.474947][ T7768] tomoyo_realpath_from_path+0x18c/0x690 [ 271.474980][ T7768] tomoyo_path_perm+0x276/0x460 [ 271.475001][ T7768] ? tomoyo_path_perm+0x262/0x460 [ 271.475026][ T7768] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 271.475047][ T7768] ? __pfx_stack_trace_save+0x10/0x10 [ 271.475082][ T7768] ? avc_has_perm_noaudit+0x11e/0x470 [ 271.475111][ T7768] ? avc_has_perm_noaudit+0x11e/0x470 [ 271.475154][ T7768] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 271.475191][ T7768] tomoyo_sb_umount+0x8c/0xd0 [ 271.475218][ T7768] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 271.475253][ T7768] security_sb_umount+0xc4/0x210 [ 271.475276][ T7768] path_umount+0x328/0x1270 [ 271.475306][ T7768] ? putname+0xb1/0x110 [ 271.475332][ T7768] ? __pfx_path_umount+0x10/0x10 [ 271.475363][ T7768] ? putname+0xb6/0x110 [ 271.475391][ T7768] __x64_sys_umount+0x16a/0x1a0 [ 271.475418][ T7768] ? __pfx___x64_sys_umount+0x10/0x10 [ 271.475453][ T7768] do_syscall_64+0x123/0x790 [ 271.475477][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.475497][ T7768] RIP: 0033:0x7f38f7d9e159 [ 271.475513][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.475530][ T7768] RSP: 002b:00007f38f5fb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 271.475549][ T7768] RAX: ffffffffffffffda RBX: 00007f38f8026180 RCX: 00007f38f7d9e159 [ 271.475559][ T7768] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000080 [ 271.475566][ T7768] RBP: 00007f38f5fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 271.475573][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.475580][ T7768] R13: 00007f38f8026218 R14: 00007f38f8026180 R15: 00007ffc515696c8 [ 271.475597][ T7768] [ 271.476518][ T7768] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.484116][ T7768] netlink: del zone limit has 4 unknown bytes [ 271.852088][ T5332] pwc: send_video_command error -71 [ 271.852107][ T5332] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 271.852191][ T5332] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 271.855602][ T5332] usb 2-1: USB disconnect, device number 16 [ 273.738666][ T30] audit: type=1400 audit(1790817497.932:749): avc: denied { bind } for pid=7783 comm="syz.0.509" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.738879][ T30] audit: type=1400 audit(1790817497.932:750): avc: denied { name_bind } for pid=7783 comm="syz.0.509" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 273.739069][ T30] audit: type=1400 audit(1790817497.932:751): avc: denied { node_bind } for pid=7783 comm="syz.0.509" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 273.791152][ T30] audit: type=1400 audit(1790817497.982:752): avc: denied { listen } for pid=7783 comm="syz.0.509" laddr=224.0.0.1 lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.820540][ T30] audit: type=1400 audit(1790817498.012:753): avc: denied { ioctl } for pid=7783 comm="syz.0.509" path="socket:[19686]" dev="sockfs" ino=19686 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 273.850978][ T7784] overlayfs: failed to clone upperpath [ 273.933514][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 274.150548][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 274.183452][ T7792] vxlan0: entered allmulticast mode [ 274.197364][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.197491][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.197597][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.197701][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.262090][ T30] audit: type=1400 audit(1790817498.452:754): avc: denied { map } for pid=7791 comm="syz.3.514" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 274.262357][ T30] audit: type=1400 audit(1790817498.452:755): avc: denied { execute } for pid=7791 comm="syz.3.514" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 274.408847][ T7788] FAULT_INJECTION: forcing a failure. [ 274.408847][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.409870][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.1.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.409903][ T7788] Tainted: [L]=SOFTLOCKUP [ 274.409910][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.409923][ T7788] Call Trace: [ 274.409930][ T7788] [ 274.409939][ T7788] dump_stack_lvl+0x100/0x190 [ 274.409974][ T7788] should_fail_ex.cold+0x5/0xa [ 274.410002][ T7788] copy_fpstate_to_sigframe+0x82d/0xae0 [ 274.410034][ T7788] ? do_raw_spin_lock+0x128/0x260 [ 274.410065][ T7788] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 274.410101][ T7788] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 274.410133][ T7788] ? x86_task_fpu+0x5f/0x90 [ 274.410163][ T7788] get_sigframe+0x3fb/0x940 [ 274.410194][ T7788] ? __pfx_get_sigframe+0x10/0x10 [ 274.410219][ T7788] ? rcu_is_watching+0x13/0xc0 [ 274.410245][ T7788] ? siginfo_layout+0x156/0x290 [ 274.410272][ T7788] x64_setup_rt_frame+0x12f/0xce0 [ 274.410308][ T7788] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 274.410346][ T7788] arch_do_signal_or_restart+0x5ee/0x7e0 [ 274.410377][ T7788] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 274.410426][ T7788] exit_to_user_mode_loop+0x139/0x700 [ 274.410452][ T7788] ? rcu_is_watching+0x13/0xc0 [ 274.410480][ T7788] do_syscall_64+0x661/0x790 [ 274.410503][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.410522][ T7788] RIP: 0033:0x7faf7459e159 [ 274.410539][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.410558][ T7788] RSP: 002b:00007faf727f6028 EFLAGS: 00000246 [ 274.410573][ T7788] RAX: 0000200000000000 RBX: 00007faf74825fa0 RCX: 00007faf7459e159 [ 274.410586][ T7788] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 274.410599][ T7788] RBP: 00007faf7463506b R08: ffffffffffffffff R09: 0000000000000000 [ 274.410610][ T7788] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 274.410621][ T7788] R13: 00007faf74826038 R14: 00007faf74825fa0 R15: 00007ffcee336b28 [ 274.410653][ T7788] [ 274.594258][ T30] audit: type=1400 audit(1790817498.782:756): avc: denied { bind } for pid=7797 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.602574][ T30] audit: type=1400 audit(1790817498.792:757): avc: denied { listen } for pid=7797 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.622073][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 274.622089][ T30] audit: type=1400 audit(1790817498.812:759): avc: denied { write } for pid=7797 comm="syz.3.516" path="socket:[19716]" dev="sockfs" ino=19716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.639032][ T30] audit: type=1400 audit(1790817498.832:760): avc: denied { accept } for pid=7797 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.645765][ T30] audit: type=1400 audit(1790817498.832:761): avc: denied { read } for pid=7797 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.839984][ T30] audit: type=1400 audit(1790817500.032:762): avc: denied { mounton } for pid=7817 comm="syz.3.520" path="/116/file0" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 275.840145][ T7824] 9p: Bad value for 'rfdno' [ 276.849403][ T7826] FAULT_INJECTION: forcing a failure. [ 276.849403][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 276.849437][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.4.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.849464][ T7826] Tainted: [L]=SOFTLOCKUP [ 276.849472][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.849490][ T7826] Call Trace: [ 276.849497][ T7826] [ 276.849505][ T7826] dump_stack_lvl+0x100/0x190 [ 276.849538][ T7826] should_fail_ex.cold+0x5/0xa [ 276.849566][ T7826] should_failslab+0xc2/0x120 [ 276.849593][ T7826] __kmalloc_noprof+0xfc/0x840 [ 276.849616][ T7826] ? landlock_merge_ruleset+0x118/0xd10 [ 276.849644][ T7826] landlock_merge_ruleset+0x118/0xd10 [ 276.849670][ T7826] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 276.849704][ T7826] do_syscall_64+0x123/0x790 [ 276.849728][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.849748][ T7826] RIP: 0033:0x7f512579e159 [ 276.849765][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.849783][ T7826] RSP: 002b:00007f5126668028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 276.849802][ T7826] RAX: ffffffffffffffda RBX: 00007f5125a26090 RCX: 00007f512579e159 [ 276.849815][ T7826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 276.849827][ T7826] RBP: 00007f5126668090 R08: 0000000000000000 R09: 0000000000000000 [ 276.849839][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.849850][ T7826] R13: 00007f5125a26128 R14: 00007f5125a26090 R15: 00007fff4357d818 [ 276.849879][ T7826] [ 277.161832][ T30] audit: type=1400 audit(1790817501.352:763): avc: denied { name_bind } for pid=7834 comm="syz.2.526" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 277.407885][ T30] audit: type=1400 audit(1790817501.602:764): avc: denied { remount } for pid=7834 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 277.414749][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 277.695373][ T7844] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5595] was attempted by ""[7844] [ 278.374063][ T30] audit: type=1400 audit(1790817502.562:765): avc: denied { connect } for pid=7847 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.796058][ T30] audit: type=1400 audit(1790817502.982:766): avc: denied { read write } for pid=7861 comm="syz.2.533" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 278.822566][ T30] audit: type=1400 audit(1790817502.992:767): avc: denied { open } for pid=7861 comm="syz.2.533" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 279.041281][ T30] audit: type=1400 audit(1790817503.222:768): avc: denied { ioctl } for pid=7861 comm="syz.2.533" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 279.427023][ T5607] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 279.706853][ T7864] CacheFiles: Failed to register: -95 [ 280.603819][ T7878] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 280.614946][ T7878] ALSA: mixer_oss: invalid index 137438 [ 280.883684][ T7879] syzkaller1: entered allmulticast mode [ 281.676321][ T7882] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5595] was attempted by ""[7882] [ 282.828821][ T30] audit: type=1400 audit(1790817507.022:769): avc: denied { write } for pid=7886 comm="syz.1.541" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 283.008026][ T30] audit: type=1400 audit(1790817507.202:770): avc: denied { getopt } for pid=7894 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.416982][ T5718] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 283.587783][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 283.590687][ T5718] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 283.592470][ T5718] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 283.592493][ T5718] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.593713][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.593736][ T5718] usb 5-1: SerialNumber: syz [ 283.649907][ T5718] usb 5-1: 0:2 : does not exist [ 283.871924][ T5718] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 284.307046][ T30] audit: type=1400 audit(1790817508.152:771): avc: denied { bind } for pid=7907 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.350700][ T5718] usb 5-1: 5:0: failed to get current value for ch 2 (-22) [ 284.373980][ T5718] usb 5-1: 5:0: failed to get current value for ch 3 (-22) [ 284.399001][ T5718] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 284.406275][ T5718] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 284.457879][ T5718] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 284.494639][ T5718] usb 5-1: USB disconnect, device number 23 [ 284.640642][ T7910] udevd[7910]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.664101][ T7914] syz.2.549: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.664310][ T7914] CPU: 0 UID: 0 PID: 7914 Comm: syz.2.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.664341][ T7914] Tainted: [L]=SOFTLOCKUP [ 284.664348][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 284.664371][ T7914] Call Trace: [ 284.664379][ T7914] [ 284.664387][ T7914] dump_stack_lvl+0x100/0x190 [ 284.664423][ T7914] warn_alloc.cold+0x9e/0xb2 [ 284.664448][ T7914] ? __pfx_warn_alloc+0x10/0x10 [ 284.664467][ T7914] ? __kasan_kmalloc+0xaa/0xb0 [ 284.664492][ T7914] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 284.664511][ T7914] ? xskq_create+0x52/0x290 [ 284.664539][ T7914] ? do_sock_setsockopt+0xf3/0x1d0 [ 284.664572][ T7914] ? do_syscall_64+0x123/0x790 [ 284.664593][ T7914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.664627][ T7914] ? xsk_setsockopt+0x743/0xab0 [ 284.664654][ T7914] __vmalloc_node_range_noprof+0x123b/0x1420 [ 284.664694][ T7914] ? xsk_setsockopt+0x743/0xab0 [ 284.664727][ T7914] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.664757][ T7914] ? kasan_save_track+0x14/0x30 [ 284.664782][ T7914] ? __kasan_kmalloc+0xaa/0xb0 [ 284.664823][ T7914] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 284.664846][ T7914] ? xskq_create+0x52/0x290 [ 284.664875][ T7914] ? xsk_setsockopt+0x743/0xab0 [ 284.664901][ T7914] xskq_create+0x18f/0x290 [ 284.664929][ T7914] ? xsk_setsockopt+0x743/0xab0 [ 284.664959][ T7914] xsk_setsockopt+0x743/0xab0 [ 284.664987][ T7914] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.665014][ T7914] ? find_held_lock+0x2b/0x80 [ 284.665043][ T7914] ? __fget_files+0x215/0x3d0 [ 284.665073][ T7914] ? selinux_socket_setsockopt+0x6a/0x80 [ 284.665098][ T7914] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.665127][ T7914] do_sock_setsockopt+0xf3/0x1d0 [ 284.665162][ T7914] __sys_setsockopt+0x195/0x220 [ 284.665195][ T7914] __x64_sys_setsockopt+0xbd/0x160 [ 284.665221][ T7914] ? do_syscall_64+0xae/0x790 [ 284.665240][ T7914] ? lockdep_hardirqs_on+0x7d/0x110 [ 284.665261][ T7914] do_syscall_64+0x123/0x790 [ 284.665284][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.665306][ T7914] RIP: 0033:0x7f54b959e159 [ 284.665324][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.665342][ T7914] RSP: 002b:00007f54ba47b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.665367][ T7914] RAX: ffffffffffffffda RBX: 00007f54b9826090 RCX: 00007f54b959e159 [ 284.665383][ T7914] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 284.665396][ T7914] RBP: 00007f54b963506b R08: 0000000000000004 R09: 0000000000000000 [ 284.665409][ T7914] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.665422][ T7914] R13: 00007f54b9826128 R14: 00007f54b9826090 R15: 00007ffe3b1f8848 [ 284.665454][ T7914] [ 284.667777][ T7914] Mem-Info: [ 284.667793][ T7914] active_anon:18827 inactive_anon:4 isolated_anon:0 [ 284.667793][ T7914] active_file:355 inactive_file:62547 isolated_file:0 [ 284.667793][ T7914] unevictable:0 dirty:208 writeback:0 [ 284.667793][ T7914] slab_reclaimable:12147 slab_unreclaimable:97440 [ 284.667793][ T7914] mapped:33628 shmem:13019 pagetables:1233 [ 284.667793][ T7914] sec_pagetables:0 bounce:0 [ 284.667793][ T7914] kernel_misc_reclaimable:0 [ 284.667793][ T7914] free:1274058 free_pcp:18039 free_cma:0 [ 284.667850][ T7914] Node 0 active_anon:75308kB inactive_anon:16kB active_file:1420kB inactive_file:249980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134512kB dirty:828kB writeback:0kB shmem:52076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12568kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.667902][ T7914] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.667951][ T7914] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.668005][ T7914] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 284.668040][ T7914] Node 0 DMA32 free:1141816kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:75308kB inactive_anon:16kB active_file:1420kB inactive_file:249980kB unevictable:0kB writepending:828kB zspages:0kB present:3129332kB managed:2530388kB mlocked:0kB bounce:0kB free_pcp:72156kB local_pcp:23396kB free_cma:0kB [ 284.668097][ T7914] lowmem_reserve[]: 0 0 0 0 0 [ 284.668129][ T7914] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.668181][ T7914] lowmem_reserve[]: 0 0 0 0 0 [ 284.668213][ T7914] Node 1 Normal free:3939056kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.668268][ T7914] lowmem_reserve[]: 0 0 0 0 0 [ 284.668301][ T7914] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.668453][ T7914] Node 0 DMA32: 101*4kB (UM) 9*8kB (UE) 284*16kB (UME) 236*32kB (UME) 543*64kB (UME) 251*128kB (UM) 98*256kB (UM) 72*512kB (UM) 45*1024kB (UM) 24*2048kB (UME) 221*4096kB (UM) = 1141852kB [ 284.668616][ T7914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 284.668712][ T7914] Node 1 Normal: 6*4kB (UM) 7*8kB (UM) 8*16kB (UM) 13*32kB (UM) 10*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 958*4096kB (M) = 3939056kB [ 284.668882][ T7914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.668900][ T7914] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 284.668916][ T7914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.668932][ T7914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.668948][ T7914] 75917 total pagecache pages [ 284.668955][ T7914] 0 pages in swap cache [ 284.668962][ T7914] Free swap = 124996kB [ 284.668969][ T7914] Total swap = 124996kB [ 284.668976][ T7914] 2097051 pages RAM [ 284.668983][ T7914] 0 pages HighMem/MovableOnly [ 284.668989][ T7914] 432822 pages reserved [ 284.668996][ T7914] 0 pages cma reserved [ 284.685618][ T7913] block device autoloading is deprecated and will be removed. [ 285.287244][ T5332] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 285.578038][ T5332] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 285.635091][ T5332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.635123][ T5332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.635136][ T5332] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.635149][ T5332] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.635173][ T5332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.739163][ T7934] syzkaller1: entered allmulticast mode [ 286.789878][ T5812] usb 3-1: USB disconnect, device number 21 [ 287.582524][ T5812] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 287.767846][ T5812] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 287.769828][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.769874][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.821927][ T5812] usb 2-1: config 0 descriptor?? [ 287.849655][ T5812] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 288.174957][ T7960] FAULT_INJECTION: forcing a failure. [ 288.174957][ T7960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.174990][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.4.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.175019][ T7960] Tainted: [L]=SOFTLOCKUP [ 288.175026][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.175043][ T7960] Call Trace: [ 288.175050][ T7960] [ 288.175057][ T7960] dump_stack_lvl+0x100/0x190 [ 288.175090][ T7960] should_fail_ex.cold+0x5/0xa [ 288.175117][ T7960] _copy_from_user+0x2e/0xd0 [ 288.175142][ T7960] copy_msghdr_from_user+0x9f/0x4c0 [ 288.175165][ T7960] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 288.175193][ T7960] ? lock_acquire+0x1d1/0x380 [ 288.175215][ T7960] ? get_pid_task+0x2a/0x250 [ 288.175243][ T7960] ___sys_sendmsg+0x106/0x1e0 [ 288.175266][ T7960] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.175287][ T7960] ? get_pid_task+0x106/0x250 [ 288.175323][ T7960] ? find_held_lock+0x2b/0x80 [ 288.175367][ T7960] __sys_sendmsg+0x160/0x210 [ 288.175395][ T7960] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.175436][ T7960] do_syscall_64+0x123/0x790 [ 288.175459][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.175479][ T7960] RIP: 0033:0x7f512579e159 [ 288.175496][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.175513][ T7960] RSP: 002b:00007f5126689028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.175532][ T7960] RAX: ffffffffffffffda RBX: 00007f5125a25fa0 RCX: 00007f512579e159 [ 288.175545][ T7960] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 288.175557][ T7960] RBP: 00007f5126689090 R08: 0000000000000000 R09: 0000000000000000 [ 288.175569][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.175580][ T7960] R13: 00007f5125a26038 R14: 00007f5125a25fa0 R15: 00007fff4357d818 [ 288.175609][ T7960] [ 288.362172][ T30] audit: type=1400 audit(1790817512.552:772): avc: denied { setopt } for pid=7954 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.429244][ T5812] pwc: send_video_command error -71 [ 288.429259][ T5812] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 288.429338][ T5812] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 288.434457][ T5812] usb 2-1: USB disconnect, device number 17 [ 288.527935][ T7967] binder_alloc: 7965: binder_alloc_buf, no vma [ 288.735349][ T7976] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 288.735369][ T7976] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 289.309614][ T7976] process 'syz.2.572' launched './file0' with NULL argv: empty string added [ 289.312978][ T30] audit: type=1400 audit(1790817513.502:773): avc: denied { execute_no_trans } for pid=7975 comm="syz.2.572" path="/113/file0" dev="tmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.348271][ T7976] bond1 (unregistering): Released all slaves [ 289.439018][ T7976] syzkaller1: entered promiscuous mode [ 289.439033][ T7976] syzkaller1: entered allmulticast mode [ 289.450009][ T7976] bond1: Removing last arp target with arp_interval on [ 289.451189][ T7976] bond1: entered promiscuous mode [ 289.451202][ T7976] bond1: entered allmulticast mode [ 289.451384][ T7976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.487649][ T5807] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 289.504931][ T30] audit: type=1400 audit(1790817513.702:774): avc: denied { create } for pid=7973 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 289.546259][ T30] audit: type=1400 audit(1790817513.732:775): avc: denied { read } for pid=7973 comm="syz.4.571" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 289.546469][ T30] audit: type=1400 audit(1790817513.732:776): avc: denied { open } for pid=7973 comm="syz.4.571" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 289.652485][ T30] audit: type=1400 audit(1790817513.842:777): avc: denied { bind } for pid=7983 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.693763][ T5807] usb 4-1: unable to get BOS descriptor or descriptor too short [ 289.693806][ T5807] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 289.695155][ T5807] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 289.695176][ T5807] usb 4-1: can't read configurations, error -71 [ 290.712767][ T30] audit: type=1400 audit(1790817514.572:778): avc: denied { ioctl } for pid=7971 comm="syz.3.570" path="socket:[19055]" dev="sockfs" ino=19055 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.067027][ T30] audit: type=1400 audit(1790817515.212:779): avc: denied { shutdown } for pid=7990 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.636992][ T5332] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 291.956240][ T7993] netlink: 'syz.1.577': attribute type 23 has an invalid length. [ 292.329290][ T30] audit: type=1400 audit(1790817516.522:780): avc: denied { read write } for pid=8008 comm="syz.4.583" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 292.330140][ T30] audit: type=1400 audit(1790817516.522:781): avc: denied { open } for pid=8008 comm="syz.4.583" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 293.112038][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.112665][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.374159][ T8016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.391144][ T8016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.757195][ T8032] binder_alloc: 8031: binder_alloc_buf, no vma [ 293.763708][ T8015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.781672][ T8015] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.801059][ T8015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.855339][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.855442][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.878246][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.878369][ T8015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.909804][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.912740][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.944589][ T8015] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 294.038581][ T1358] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.038623][ T1358] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.038655][ T1358] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.038687][ T1358] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.173912][ T8038] capability: warning: `syz.4.591' uses deprecated v2 capabilities in a way that may be insecure [ 296.167662][ T8052] serio: Serial port ptm0 [ 296.333988][ T30] audit: type=1400 audit(1790817520.082:782): avc: denied { append } for pid=8048 comm="syz.1.595" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 296.368234][ T5718] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 296.516989][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 296.519018][ T5718] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 296.521403][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.525565][ T5718] usb 4-1: config 0 descriptor?? [ 296.745964][ T5718] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 296.803024][ T5718] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 296.807745][ T30] audit: type=1400 audit(1790817520.992:783): avc: denied { firmware_load } for pid=5718 comm="kworker/0:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 296.810160][ T5718] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 298.946973][ C1] net_ratelimit: 39 callbacks suppressed [ 298.956288][ T30] audit: type=1400 audit(1790817523.142:784): avc: denied { mount } for pid=8071 comm="syz.0.602" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 299.158220][ T8079] ip6_vti0: Master is either lo or non-ether device [ 299.177363][ T30] audit: type=1326 audit(1790817523.372:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b959e159 code=0x7ffc0000 [ 299.178421][ T30] audit: type=1326 audit(1790817523.372:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b959e159 code=0x7ffc0000 [ 299.180389][ T30] audit: type=1326 audit(1790817523.372:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54b955e98e code=0x7ffc0000 [ 299.180892][ T30] audit: type=1326 audit(1790817523.372:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54b959ddeb code=0x7ffc0000 [ 299.186384][ T30] audit: type=1326 audit(1790817523.372:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54b959ddeb code=0x7ffc0000 [ 299.194574][ T30] audit: type=1326 audit(1790817523.372:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54b959ddeb code=0x7ffc0000 [ 299.194836][ T30] audit: type=1326 audit(1790817523.382:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54b959ddeb code=0x7ffc0000 [ 299.449513][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 299.493676][ T5690] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 299.701320][ T5690] usb 3-1: Using ep0 maxpacket: 8 [ 299.735342][ T5690] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 299.800285][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.138135][ T5690] pvrusb2: Hardware description: Terratec Grabster AV400 [ 301.138154][ T5690] pvrusb2: ********** [ 301.138160][ T5690] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 301.138171][ T5690] pvrusb2: Important functionality might not be entirely working. [ 301.138178][ T5690] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 301.138188][ T5690] pvrusb2: ********** [ 301.347008][ T5607] Bluetooth: hci5: command 0x1003 tx timeout [ 301.347102][ T5603] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 301.783308][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 301.783323][ T30] audit: type=1326 audit(1790817525.972:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54b959ddeb code=0x7ffc0000 [ 301.785974][ T30] audit: type=1326 audit(1790817525.972:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f54b955e98e code=0x7ffc0000 [ 301.786222][ T2348] pvrusb2: Invalid write control endpoint [ 301.986342][ T30] audit: type=1326 audit(1790817526.172:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b959e159 code=0x7ffc0000 [ 301.991273][ T30] audit: type=1326 audit(1790817526.182:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b959e159 code=0x7ffc0000 [ 302.468145][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 303.079854][ T8103] overlayfs: failed to clone upperpath [ 303.112668][ T30] audit: type=1400 audit(1790817527.302:816): avc: denied { connect } for pid=8100 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.150124][ T2348] pvrusb2: Invalid write control endpoint [ 303.150135][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 303.150141][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 303.150145][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 303.150151][ T2348] pvrusb2: Device being rendered inoperable [ 303.154294][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 303.154327][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 303.238958][ T2348] pvrusb2: Attached sub-driver cx25840 [ 303.238974][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 303.238980][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 304.066997][ C1] net_ratelimit: 67 callbacks suppressed [ 304.088505][ T5332] usb 3-1: USB disconnect, device number 22 [ 304.226655][ T30] audit: type=1400 audit(1790817528.412:817): avc: denied { getopt } for pid=8121 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.252947][ T30] audit: type=1400 audit(1790817528.442:818): avc: denied { read write } for pid=8124 comm="syz.4.619" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 304.253231][ T30] audit: type=1400 audit(1790817528.442:819): avc: denied { open } for pid=8124 comm="syz.4.619" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 304.255250][ T30] audit: type=1400 audit(1790817528.442:820): avc: denied { ioctl } for pid=8124 comm="syz.4.619" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 304.332244][ T8133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 304.436617][ T8137] overlayfs: failed to resolve './file2': -2 [ 307.315901][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 308.473487][ T30] audit: type=1400 audit(1790817532.662:821): avc: denied { relabelfrom } for pid=8164 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 308.487066][ T30] audit: type=1400 audit(1790817532.672:822): avc: denied { relabelto } for pid=8164 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 308.583245][ T30] audit: type=1400 audit(1790817532.772:823): avc: denied { write } for pid=8168 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 308.647113][ T5807] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 308.724361][ T30] audit: type=1400 audit(1790817532.912:824): avc: denied { append } for pid=8179 comm="syz.3.635" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.777904][ T5807] usb 2-1: device descriptor read/64, error -71 [ 309.746994][ C0] net_ratelimit: 48 callbacks suppressed [ 310.047266][ T5807] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 310.137156][ T8199] SELinux: DCCP has been removed, pid=8199 comm=syz.0.640 [ 310.177798][ T5807] usb 2-1: device descriptor read/64, error -71 [ 310.289874][ T5807] usb usb2-port1: attempt power cycle [ 310.637545][ T5807] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.679374][ T5807] usb 2-1: device descriptor read/8, error -71 [ 310.920058][ T5807] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 310.959865][ T5807] usb 2-1: device descriptor read/8, error -71 [ 311.086737][ T5807] usb usb2-port1: unable to enumerate USB device [ 311.302265][ T8206] xt_hashlimit: max too large, truncated to 1048576 [ 311.320705][ T8206] xt_IDLETIMER: timeout value is zero [ 311.450232][ T30] audit: type=1400 audit(1790817535.642:825): avc: denied { map } for pid=8210 comm="syz.2.645" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 311.534685][ T8211] syz.2.645 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 311.534719][ T8211] CPU: 1 UID: 0 PID: 8211 Comm: syz.2.645 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.534747][ T8211] Tainted: [L]=SOFTLOCKUP [ 311.534755][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.534774][ T8211] Call Trace: [ 311.534782][ T8211] [ 311.534791][ T8211] dump_stack_lvl+0x100/0x190 [ 311.534820][ T8211] dump_header+0xfb/0x606 [ 311.534839][ T8211] out_of_memory.cold+0xd/0x170 [ 311.534860][ T8211] ? __pfx_out_of_memory+0x10/0x10 [ 311.534891][ T8211] mem_cgroup_out_of_memory+0xc6/0x130 [ 311.534911][ T8211] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 311.534929][ T8211] ? find_held_lock+0x2b/0x80 [ 311.534959][ T8211] ? do_raw_spin_unlock+0x145/0x1e0 [ 311.534980][ T8211] ? _raw_spin_unlock+0x28/0x50 [ 311.535005][ T8211] try_charge_memcg+0x783/0xf60 [ 311.535026][ T8211] ? __pfx_try_charge_memcg+0x10/0x10 [ 311.535052][ T8211] ? find_held_lock+0x2b/0x80 [ 311.535074][ T8211] ? rcu_read_unlock+0x17/0x60 [ 311.535090][ T8211] ? rcu_read_unlock+0x17/0x60 [ 311.535116][ T8211] obj_cgroup_charge_pages+0x2b/0x1f0 [ 311.535139][ T8211] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 311.535163][ T8211] ? kasan_unpoison+0x27/0x60 [ 311.535183][ T8211] __kmalloc_cache_noprof+0x52a/0x6d0 [ 311.535200][ T8211] ? mem_cgroup_css_alloc+0x11f/0x1d10 [ 311.535223][ T8211] ? mem_cgroup_css_alloc+0x8cd/0x1d10 [ 311.535249][ T8211] mem_cgroup_css_alloc+0x8cd/0x1d10 [ 311.535277][ T8211] cgroup_apply_control_enable+0x602/0xdd0 [ 311.535305][ T8211] cgroup_mkdir+0x57f/0x1330 [ 311.535327][ T8211] ? __pfx_cgroup_mkdir+0x10/0x10 [ 311.535349][ T8211] kernfs_iop_mkdir+0x111/0x190 [ 311.535365][ T8211] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 311.535387][ T8211] vfs_mkdir+0x364/0x850 [ 311.535409][ T8211] filename_mkdirat+0x48b/0x5e0 [ 311.535436][ T8211] ? __pfx_filename_mkdirat+0x10/0x10 [ 311.535459][ T8211] ? strncpy_from_user+0x19d/0x2d0 [ 311.535485][ T8211] ? do_getname+0x191/0x390 [ 311.535505][ T8211] __x64_sys_mkdirat+0x89/0xc0 [ 311.535527][ T8211] do_syscall_64+0x123/0x790 [ 311.535547][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.535565][ T8211] RIP: 0033:0x7f54b959e159 [ 311.535581][ T8211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.535595][ T8211] RSP: 002b:00007f54ba49c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 311.535610][ T8211] RAX: ffffffffffffffda RBX: 00007f54b9825fa0 RCX: 00007f54b959e159 [ 311.535621][ T8211] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 311.535630][ T8211] RBP: 00007f54b963506b R08: 0000000000000000 R09: 0000000000000000 [ 311.535639][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.535657][ T8211] R13: 00007f54b9826038 R14: 00007f54b9825fa0 R15: 00007ffe3b1f8848 [ 311.535683][ T8211] [ 311.707537][ T8211] memory: usage 0kB, limit 0kB, failcnt 19 [ 311.707551][ T8211] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 311.707564][ T8211] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 311.707576][ T8211] Memory cgroup stats for /syz2/test: [ 311.707716][ T8211] cache 0 [ 311.707725][ T8211] rss 0 [ 311.707732][ T8211] rss_huge 0 [ 311.707739][ T8211] shmem 0 [ 311.707746][ T8211] mapped_file 0 [ 311.707753][ T8211] dirty 0 [ 311.707760][ T8211] writeback 0 [ 311.707767][ T8211] workingset_refault_anon 0 [ 311.707775][ T8211] workingset_refault_file 0 [ 311.707783][ T8211] swap 0 [ 311.707790][ T8211] swapcached 0 [ 311.707797][ T8211] pgpgin 0 [ 311.707804][ T8211] pgpgout 0 [ 311.707811][ T8211] pgfault 0 [ 311.707818][ T8211] pgmajfault 0 [ 311.707825][ T8211] inactive_anon 0 [ 311.707833][ T8211] active_anon 0 [ 311.707840][ T8211] inactive_file 0 [ 311.707848][ T8211] active_file 0 [ 311.707855][ T8211] unevictable 0 [ 311.707862][ T8211] hierarchical_memory_limit 0 [ 311.707870][ T8211] hierarchical_memsw_limit 9223372036854771712 [ 311.707879][ T8211] total_cache 0 [ 311.707886][ T8211] total_rss 0 [ 311.707893][ T8211] total_rss_huge 0 [ 311.707900][ T8211] total_shmem 0 [ 311.707908][ T8211] total_mapped_file 0 [ 311.707915][ T8211] total_dirty 0 [ 311.707922][ T8211] total_writeback 0 [ 311.707930][ T8211] total_workingset_refault_anon 0 [ 311.707938][ T8211] total_workingset_refault_file 0 [ 311.707946][ T8211] total_swap 0 [ 311.707954][ T8211] total_swapcached 0 [ 311.707961][ T8211] total_pgpgin 0 [ 311.707968][ T8211] total_pgpgout 0 [ 311.707975][ T8211] total_pgfault 0 [ 311.707982][ T8211] total_pgmajfault 0 [ 311.707989][ T8211] total_inactive_anon 0 [ 311.707997][ T8211] total_active_anon 0 [ 311.708005][ T8211] total_inactive_file 0 [ 311.708013][ T8211] total_active_file 0 [ 311.708020][ T8211] total_unevictable 0 [ 311.708028][ T8211] anon_cost 0 [ 311.708035][ T8211] file_cost 0 [ 311.708042][ T8211] Out of memory and no killable processes... [ 311.762111][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.963112][ T8217] syzkaller0: entered promiscuous mode [ 311.963127][ T8217] syzkaller0: entered allmulticast mode [ 312.134076][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.649'. [ 313.306425][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.308590][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.594947][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.615775][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.846289][ T30] audit: type=1400 audit(1790817538.032:826): avc: denied { write } for pid=8243 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 313.911810][ T8251] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 313.911832][ T8251] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 313.916656][ T8251] vhci_hcd vhci_hcd.0: Device attached [ 313.945054][ T30] audit: type=1400 audit(1790817538.132:827): avc: denied { write } for pid=8234 comm="syz.3.651" name="nbd3" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.959795][ T8254] FAULT_INJECTION: forcing a failure. [ 313.959795][ T8254] name failslab, interval 1, probability 0, space 0, times 0 [ 313.959824][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.2.655 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.959855][ T8254] Tainted: [L]=SOFTLOCKUP [ 313.959864][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 313.959877][ T8254] Call Trace: [ 313.959884][ T8254] [ 313.959892][ T8254] dump_stack_lvl+0x100/0x190 [ 313.959929][ T8254] should_fail_ex.cold+0x5/0xa [ 313.959960][ T8254] should_failslab+0xc2/0x120 [ 313.959991][ T8254] kmem_cache_alloc_noprof+0x92/0x6a0 [ 313.960017][ T8254] ? security_file_alloc+0x34/0x2c0 [ 313.960049][ T8254] security_file_alloc+0x34/0x2c0 [ 313.960076][ T8254] init_file+0x95/0x480 [ 313.960103][ T8254] alloc_empty_file+0x79/0x1c0 [ 313.960133][ T8254] alloc_file_pseudo+0x183/0x290 [ 313.960163][ T8254] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 313.960192][ T8254] ? alloc_fd+0x471/0x7a0 [ 313.960224][ T8254] sock_alloc_file+0x50/0x210 [ 313.960254][ T8254] __sys_socket+0x1c0/0x260 [ 313.960277][ T8254] ? __pfx___sys_socket+0x10/0x10 [ 313.960306][ T8254] __x64_sys_socket+0x72/0xb0 [ 313.960328][ T8254] ? lockdep_hardirqs_on+0x7d/0x110 [ 313.960349][ T8254] do_syscall_64+0x123/0x790 [ 313.960373][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.960393][ T8254] RIP: 0033:0x7f54b959e159 [ 313.960411][ T8254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.960430][ T8254] RSP: 002b:00007f54ba49bfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 313.960450][ T8254] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f54b959e159 [ 313.960464][ T8254] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 000000000000001f [ 313.960476][ T8254] RBP: 00007f54b963506b R08: 0000000000000000 R09: 0000000000000000 [ 313.960489][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.960501][ T8254] R13: 00007f54b9826038 R14: 00007f54b9825fa0 R15: 00007ffe3b1f8848 [ 313.960529][ T8254] [ 314.157856][ T5807] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 314.417169][ T984] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 314.549562][ T984] usb 3-1: device descriptor read/64, error -71 [ 315.274858][ T8263] jffs2: notice: (8263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 315.275681][ T1358] net_ratelimit: 56 callbacks suppressed [ 315.476960][ T984] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 315.608574][ T984] usb 3-1: device descriptor read/64, error -71 [ 315.719744][ T984] usb usb3-port1: attempt power cycle [ 315.723710][ T8253] vhci_hcd: connection reset by peer [ 315.747846][ T1358] vhci_hcd vhci_hcd.3: stop threads [ 315.748352][ T1358] vhci_hcd vhci_hcd.3: release socket [ 315.755230][ T1358] vhci_hcd vhci_hcd.3: disconnect device [ 316.077020][ T984] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 316.097618][ T984] usb 3-1: device descriptor read/8, error -71 [ 316.158586][ T8274] FAULT_INJECTION: forcing a failure. [ 316.158586][ T8274] name failslab, interval 1, probability 0, space 0, times 0 [ 316.158630][ T8274] CPU: 0 UID: 0 PID: 8274 Comm: syz.3.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.158658][ T8274] Tainted: [L]=SOFTLOCKUP [ 316.158666][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.158678][ T8274] Call Trace: [ 316.158685][ T8274] [ 316.158693][ T8274] dump_stack_lvl+0x100/0x190 [ 316.158719][ T8274] should_fail_ex.cold+0x5/0xa [ 316.158737][ T8274] should_failslab+0xc2/0x120 [ 316.158753][ T8274] kmem_cache_alloc_noprof+0x92/0x6a0 [ 316.158768][ T8274] ? vm_area_dup+0x27/0x9d0 [ 316.158789][ T8274] vm_area_dup+0x27/0x9d0 [ 316.158806][ T8274] __split_vma+0x19c/0x1de0 [ 316.158817][ T8274] ? __css_rstat_updated+0x1ce/0x590 [ 316.158834][ T8274] ? __pfx___css_rstat_updated+0x10/0x10 [ 316.158850][ T8274] ? __pfx___split_vma+0x10/0x10 [ 316.158861][ T8274] ? can_vma_merge_after+0x2b5/0x6f0 [ 316.158888][ T8274] vma_modify+0x137b/0x29b0 [ 316.158905][ T8274] ? __pfx_vma_modify+0x10/0x10 [ 316.158916][ T8274] ? update_sd_lb_stats.constprop.0+0x2d30/0x46f0 [ 316.158936][ T8274] ? kvm_sched_clock_read+0x11/0x20 [ 316.158947][ T8274] ? sched_clock+0x3a/0x60 [ 316.158958][ T8274] ? sched_clock_cpu+0x6c/0x570 [ 316.158978][ T8274] vma_modify_flags+0x2c3/0x460 [ 316.158990][ T8274] ? __pfx_vma_modify_flags+0x10/0x10 [ 316.159010][ T8274] ? __pfx_ima_file_mprotect+0x10/0x10 [ 316.159029][ T8274] mprotect_fixup+0x27a/0xe00 [ 316.159043][ T8274] ? __pfx_mprotect_fixup+0x10/0x10 [ 316.159070][ T8274] ? selinux_file_mprotect+0x152/0x6c0 [ 316.159093][ T8274] do_mprotect_pkey+0xa51/0xdd0 [ 316.159108][ T8274] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 316.159120][ T8274] ? __pfx___schedule+0x10/0x10 [ 316.159141][ T8274] ? irqentry_exit+0x24d/0xa10 [ 316.159152][ T8274] ? lockdep_hardirqs_on+0x7d/0x110 [ 316.159163][ T8274] ? irqentry_exit+0x24d/0xa10 [ 316.159185][ T8274] __x64_sys_mprotect+0x78/0xc0 [ 316.159196][ T8274] do_syscall_64+0x123/0x790 [ 316.159210][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.159222][ T8274] RIP: 0033:0x7f38f7d9e159 [ 316.159234][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.159245][ T8274] RSP: 002b:00007f38f5fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 316.159257][ T8274] RAX: ffffffffffffffda RBX: 00007f38f8026090 RCX: 00007f38f7d9e159 [ 316.159265][ T8274] RDX: 0000000000000001 RSI: 000000000000f000 RDI: 0000200000000000 [ 316.159272][ T8274] RBP: 00007f38f5fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 316.159279][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.159286][ T8274] R13: 00007f38f8026128 R14: 00007f38f8026090 R15: 00007ffc515696c8 [ 316.159302][ T8274] [ 316.506839][ T984] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 316.527446][ T984] usb 3-1: device descriptor read/8, error -71 [ 316.637332][ T984] usb usb3-port1: unable to enumerate USB device [ 316.744426][ T5809] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 316.935173][ T5809] usb 5-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 317.024589][ T8287] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 317.025504][ T8287] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 317.025607][ T8287] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 317.026587][ T8287] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 317.026615][ T8287] page dumped because: unmovable page [ 317.054369][ T8287] page_owner info is not present (never set?) [ 317.167161][ T30] audit: type=1400 audit(1790817541.352:828): avc: denied { read } for pid=4948 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 317.168408][ T30] audit: type=1400 audit(1790817541.362:829): avc: denied { search } for pid=4948 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.281262][ T30] audit: type=1400 audit(1790817541.472:830): avc: denied { write search } for pid=4948 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.284851][ T30] audit: type=1400 audit(1790817541.472:831): avc: denied { add_name } for pid=4948 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.342679][ T30] audit: type=1400 audit(1790817541.532:832): avc: denied { create } for pid=4948 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.449774][ T30] audit: type=1400 audit(1790817541.622:833): avc: denied { append open } for pid=4948 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.496028][ T30] audit: type=1400 audit(1790817541.642:834): avc: denied { getattr } for pid=4948 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.547708][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.547729][ T5809] usb 5-1: Product: syz [ 317.547745][ T5809] usb 5-1: Manufacturer: syz [ 317.547761][ T5809] usb 5-1: SerialNumber: syz [ 317.768710][ T5809] digi_acceleport 5-1:1.0: Digi 2 port USB adapter converter detected [ 317.777875][ T5809] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 317.787922][ T5809] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 317.792199][ T5809] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 318.083340][ T5809] usb 5-1: USB disconnect, device number 24 [ 318.229969][ T5809] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 318.257897][ T30] audit: type=1400 audit(1790817542.293:835): avc: denied { write } for pid=8289 comm="syz.2.668" name="usb_gadget" dev="configfs" ino=3743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 318.264469][ T5809] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 318.273113][ T5809] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 318.275276][ T5809] digi_acceleport 5-1:1.0: device disconnected [ 318.341026][ T8299] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5595] was attempted by ""[8299] [ 318.719047][ T8301] ucma_write: process 452 (syz.3.670) changed security contexts after opening file descriptor, this is not allowed. [ 319.222370][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 319.222385][ T30] audit: type=1400 audit(1790817543.413:838): avc: denied { load_policy } for pid=8302 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 319.222743][ T8304] SELinux: policydb magic number 0xc535accc does not match expected magic number 0xf97cff8c [ 319.224527][ T8304] SELinux: failed to load policy [ 319.263430][ T5807] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 319.323091][ T30] audit: type=1400 audit(1790817543.513:839): avc: denied { bind } for pid=8302 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 319.347054][ T30] audit: type=1400 audit(1790817543.543:840): avc: denied { listen } for pid=8302 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 319.766950][ T984] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 320.223020][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 320.716634][ C1] net_ratelimit: 73 callbacks suppressed [ 321.545688][ T984] usb 5-1: device descriptor read/all, error -71 [ 322.697111][ T30] audit: type=1400 audit(1790817546.363:841): avc: denied { create } for pid=8332 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 322.697155][ T30] audit: type=1400 audit(1790817546.373:842): avc: denied { write } for pid=8332 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 325.322524][ T30] audit: type=1400 audit(1790817549.513:843): avc: denied { setopt } for pid=8357 comm="syz.0.688" lport=59660 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 325.630179][ T30] audit: type=1400 audit(1790817549.823:844): avc: denied { read } for pid=8359 comm="syz.3.690" path="socket:[21419]" dev="sockfs" ino=21419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.826297][ C0] net_ratelimit: 34 callbacks suppressed [ 325.966319][ T5332] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 325.995382][ T8382] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5598] was attempted by ""[8382] [ 326.170773][ T5332] usb 3-1: Using ep0 maxpacket: 8 [ 326.172259][ T5332] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 326.172294][ T5332] usb 3-1: no configurations [ 326.172309][ T5332] usb 3-1: can't read configurations, error -22 [ 326.316574][ T5332] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 326.859515][ T8392] FAULT_INJECTION: forcing a failure. [ 326.859515][ T8392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.860914][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.1.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.860944][ T8392] Tainted: [L]=SOFTLOCKUP [ 326.860952][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.860964][ T8392] Call Trace: [ 326.860971][ T8392] [ 326.860979][ T8392] dump_stack_lvl+0x100/0x190 [ 326.861014][ T8392] should_fail_ex.cold+0x5/0xa [ 326.861042][ T8392] _copy_to_user+0x32/0xd0 [ 326.861069][ T8392] simple_read_from_buffer+0xcb/0x170 [ 326.861100][ T8392] proc_fail_nth_read+0x1af/0x230 [ 326.861128][ T8392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.861156][ T8392] ? vfs_read+0x16b/0xb40 [ 326.861178][ T8392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.861205][ T8392] vfs_read+0x1e4/0xb40 [ 326.861227][ T8392] ? irqentry_exit+0x24d/0xa10 [ 326.861249][ T8392] ? __pfx_vfs_read+0x10/0x10 [ 326.861269][ T8392] ? irqentry_exit+0x24d/0xa10 [ 326.861301][ T8392] ? ksys_read+0xcd/0x250 [ 326.861327][ T8392] ksys_read+0x12a/0x250 [ 326.861349][ T8392] ? __pfx_ksys_read+0x10/0x10 [ 326.861379][ T8392] do_syscall_64+0x123/0x790 [ 326.861404][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.861426][ T8392] RIP: 0033:0x7faf7455e98e [ 326.861443][ T8392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 326.861461][ T8392] RSP: 002b:00007faf727d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.861482][ T8392] RAX: ffffffffffffffda RBX: 00007faf727d56c0 RCX: 00007faf7455e98e [ 326.861496][ T8392] RDX: 000000000000000f RSI: 00007faf727d50a0 RDI: 0000000000000005 [ 326.861508][ T8392] RBP: 00007faf727d5090 R08: 0000000000000000 R09: 0000000000000000 [ 326.861521][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.861533][ T8392] R13: 00007faf74826128 R14: 00007faf74826090 R15: 00007ffcee336b28 [ 326.861562][ T8392] [ 327.416198][ T5332] usb 3-1: Using ep0 maxpacket: 8 [ 327.435431][ T5332] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.435467][ T5332] usb 3-1: no configurations [ 327.435479][ T5332] usb 3-1: can't read configurations, error -22 [ 327.435902][ T5332] usb usb3-port1: attempt power cycle [ 327.796009][ T5332] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 327.821453][ T5332] usb 3-1: Using ep0 maxpacket: 8 [ 327.822037][ T5332] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.822074][ T5332] usb 3-1: no configurations [ 327.822087][ T5332] usb 3-1: can't read configurations, error -22 [ 327.947236][ T5332] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 327.969018][ T5332] usb 3-1: Using ep0 maxpacket: 8 [ 327.970505][ T5332] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.970543][ T5332] usb 3-1: no configurations [ 327.970556][ T5332] usb 3-1: can't read configurations, error -22 [ 327.971050][ T5332] usb usb3-port1: unable to enumerate USB device [ 328.246539][ T8407] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 328.258579][ T8407] ALSA: mixer_oss: invalid index 137438 [ 329.310156][ T30] audit: type=1400 audit(1790817553.503:845): avc: denied { write } for pid=8416 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 329.367520][ T8421] fuse: Bad value for 'group_id' [ 329.367532][ T8421] fuse: Bad value for 'group_id' [ 330.619618][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 330.804675][ T8435] netlink: 'syz.1.701': attribute type 28 has an invalid length. [ 330.804708][ T8435] netlink: 'syz.1.701': attribute type 29 has an invalid length. [ 330.804715][ T8435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.701'. [ 331.199454][ T30] audit: type=1400 audit(1790817555.393:846): avc: denied { ioctl } for pid=8446 comm="syz.4.716" path="socket:[22582]" dev="sockfs" ino=22582 ioctlcmd=0x891f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.199500][ T30] audit: type=1400 audit(1790817555.393:847): avc: denied { ioctl } for pid=8446 comm="syz.4.716" path="socket:[22582]" dev="sockfs" ino=22582 ioctlcmd=0x891f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.745950][ C1] net_ratelimit: 225 callbacks suppressed [ 332.335923][ T5332] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 332.495936][ T5332] usb 2-1: Using ep0 maxpacket: 8 [ 332.497146][ T5332] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 332.497237][ T5332] usb 2-1: no configurations [ 332.497287][ T5332] usb 2-1: can't read configurations, error -22 [ 332.637683][ T5332] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 332.786028][ T5332] usb 2-1: Using ep0 maxpacket: 8 [ 332.790369][ T5332] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 332.790468][ T5332] usb 2-1: no configurations [ 332.790538][ T5332] usb 2-1: can't read configurations, error -22 [ 332.791656][ T5332] usb usb2-port1: attempt power cycle [ 333.256131][ T5332] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 333.295618][ T5332] usb 2-1: Using ep0 maxpacket: 8 [ 333.321738][ T5332] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 333.321873][ T5332] usb 2-1: no configurations [ 333.321913][ T5332] usb 2-1: can't read configurations, error -22 [ 334.495860][ T5332] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 334.560287][ T5332] usb 2-1: device descriptor read/8, error -71 [ 334.666321][ T5332] usb usb2-port1: unable to enumerate USB device [ 336.811355][ T5722] net_ratelimit: 72 callbacks suppressed [ 336.912805][ T30] audit: type=1400 audit(1790817561.104:848): avc: denied { wake_alarm } for pid=8489 comm="syz.0.731" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 337.171687][ T8493] FAULT_INJECTION: forcing a failure. [ 337.171687][ T8493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.171715][ T8493] CPU: 1 UID: 0 PID: 8493 Comm: syz.2.723 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.171732][ T8493] Tainted: [L]=SOFTLOCKUP [ 337.171736][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.171744][ T8493] Call Trace: [ 337.171749][ T8493] [ 337.171754][ T8493] dump_stack_lvl+0x100/0x190 [ 337.171775][ T8493] should_fail_ex.cold+0x5/0xa [ 337.171793][ T8493] _copy_from_user+0x2e/0xd0 [ 337.171809][ T8493] copy_msghdr_from_user+0x9f/0x4c0 [ 337.171829][ T8493] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 337.171844][ T8493] ? rcu_is_watching+0x13/0xc0 [ 337.171862][ T8493] ? ___sys_sendmsg+0x19d/0x1e0 [ 337.171873][ T8493] ? kfree+0x1e5/0x6d0 [ 337.171887][ T8493] ___sys_sendmsg+0x106/0x1e0 [ 337.171900][ T8493] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.171919][ T8493] ? __fget_files+0x34/0x3d0 [ 337.171941][ T8493] ? __pfx___might_resched+0x10/0x10 [ 337.171956][ T8493] __sys_sendmmsg+0x20c/0x440 [ 337.171975][ T8493] ? __pfx___sys_sendmmsg+0x10/0x10 [ 337.171991][ T8493] ? ksys_write+0x190/0x250 [ 337.172015][ T8493] ? fput+0x7c/0x100 [ 337.172031][ T8493] ? ksys_write+0x1ac/0x250 [ 337.172049][ T8493] ? __pfx_ksys_write+0x10/0x10 [ 337.172074][ T8493] __x64_sys_sendmmsg+0x9c/0x100 [ 337.172090][ T8493] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.172103][ T8493] do_syscall_64+0x123/0x790 [ 337.172116][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.172128][ T8493] RIP: 0033:0x7f54b959e159 [ 337.172138][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.172150][ T8493] RSP: 002b:00007f54ba49c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 337.172162][ T8493] RAX: ffffffffffffffda RBX: 00007f54b9825fa0 RCX: 00007f54b959e159 [ 337.172170][ T8493] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000004 [ 337.172177][ T8493] RBP: 00007f54ba49c090 R08: 0000000000000000 R09: 0000000000000000 [ 337.172184][ T8493] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000001 [ 337.172191][ T8493] R13: 00007f54b9826038 R14: 00007f54b9825fa0 R15: 00007ffe3b1f8848 [ 337.172207][ T8493] [ 337.412886][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.425233][ T30] audit: type=1800 audit(1790817562.622:849): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.732" name="bus" dev="tmpfs" ino=779 res=0 errno=0 [ 337.706459][ T8502] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 337.719028][ T8502] ALSA: mixer_oss: invalid index 137438 [ 339.000552][ T190] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 339.178284][ T190] usb 3-1: Using ep0 maxpacket: 8 [ 339.217747][ T190] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 339.221650][ T190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.221711][ T190] usb 3-1: config 0 has no interfaces? [ 339.268001][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.268030][ T190] usb 3-1: Product: syz [ 339.268097][ T190] usb 3-1: Manufacturer: syz [ 339.268134][ T190] usb 3-1: SerialNumber: syz [ 339.408216][ T190] usb 3-1: config 0 descriptor?? ** 819 printk messages dropped ** ** 1643 printk messages dropped ** ** 243 printk messages dropped ** ** 510 printk messages dropped ** ** 237 printk messages dropped ** ** 296 printk messages dropped ** ** 252 printk messages dropped ** ** 234 printk messages dropped ** ** 257 printk messages dropped ** ** 228 printk messages dropped ** ** 202 printk messages dropped ** ** 226 printk messages dropped ** ** 211 printk messages dropped ** ** 256 printk messages dropped ** ** 239 printk messages dropped ** ** 227 printk messages dropped ** ** 228 printk messages dropped ** ** 240 printk messages dropped ** ** 258 printk messages dropped ** ** 255 printk messages dropped ** ** 248 printk messages dropped ** ** 249 printk messages dropped ** ** 238 printk messages dropped ** ** 156 printk messages dropped ** [ 341.372198][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 341.825392][ C1] net_ratelimit: 28 callbacks suppressed [ 342.039277][ T984] usb 3-1: USB disconnect, device number 31 ** 89 printk messages dropped ** [ 343.175177][ T30] audit: type=1400 audit(1790817568.362:850): avc: denied { ioctl } for pid=8536 comm="syz.2.746" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.291586][ T8541] FAULT_INJECTION: forcing a failure. [ 343.291586][ T8541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.291619][ T8541] CPU: 0 UID: 0 PID: 8541 Comm: syz.2.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.291650][ T8541] Tainted: [L]=SOFTLOCKUP [ 343.291658][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.291671][ T8541] Call Trace: [ 343.291679][ T8541] [ 343.291688][ T8541] dump_stack_lvl+0x100/0x190 [ 343.291722][ T8541] should_fail_ex.cold+0x5/0xa [ 343.291750][ T8541] _copy_from_user+0x2e/0xd0 [ 343.291776][ T8541] core_sys_select+0x2d0/0xbb0 [ 343.291808][ T8541] ? get_pid_task+0x2a/0x250 [ 343.291835][ T8541] ? __pfx_core_sys_select+0x10/0x10 [ 343.291858][ T8541] ? find_held_lock+0x2b/0x80 [ 343.291892][ T8541] ? get_pid_task+0xfc/0x250 [ 343.291946][ T8541] ? __pfx_set_user_sigmask+0x10/0x10 [ 343.291966][ T8541] ? __mutex_unlock_slowpath+0x35d/0x930 [ 343.291994][ T8541] do_pselect.constprop.0+0x238/0x270 [ 343.292023][ T8541] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 343.292054][ T8541] ? ksys_write+0x1ac/0x250 [ 343.292080][ T8541] __x64_sys_pselect6+0x149/0x1c0 [ 343.292108][ T8541] do_syscall_64+0x123/0x790 [ 343.292132][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.292153][ T8541] RIP: 0033:0x7f54b959e159 [ 343.292170][ T8541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.292188][ T8541] RSP: 002b:00007f54ba47b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 343.292207][ T8541] RAX: ffffffffffffffda RBX: 00007f54b9826090 RCX: 00007f54b959e159 [ 343.292221][ T8541] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 343.292234][ T8541] RBP: 00007f54ba47b090 R08: 0000000000000000 R09: 0000000000000000 [ 343.292246][ T8541] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 343.292259][ T8541] R13: 00007f54b9826128 R14: 00007f54b9826090 R15: 00007ffe3b1f8848 ** 49 printk messages dropped ** ** 86 printk messages dropped ** ** 86 printk messages dropped ** ** 231 printk messages dropped ** ** 224 printk messages dropped ** ** 216 printk messages dropped ** ** 225 printk messages dropped ** ** 239 printk messages dropped ** ** 228 printk messages dropped ** ** 219 printk messages dropped ** ** 225 printk messages dropped ** ** 213 printk messages dropped ** ** 328 printk messages dropped ** ** 219 printk messages dropped ** ** 233 printk messages dropped ** ** 297 printk messages dropped ** ** 230 printk messages dropped ** ** 216 printk messages dropped ** ** 304 printk messages dropped ** ** 236 printk messages dropped ** ** 214 printk messages dropped ** ** 77 printk messages dropped ** [ 343.788619][ T30] audit: type=1400 audit(1790817568.882:851): avc: denied { read } for pid=8540 comm="syz.0.747" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 ** 76 printk messages dropped ** ** 1 printk messages dropped ** [ 344.398495][ T30] audit: type=1400 audit(1790817569.582:852): avc: denied { append } for pid=8549 comm="syz.2.750" name="event3" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 ** 393 printk messages dropped ** ** 231 printk messages dropped ** ** 241 printk messages dropped ** ** 236 printk messages dropped ** ** 225 printk messages dropped ** ** 239 printk messages dropped ** ** 237 printk messages dropped ** ** 223 printk messages dropped ** ** 230 printk messages dropped ** ** 223 printk messages dropped ** ** 236 printk messages dropped ** ** 257 printk messages dropped ** ** 235 printk messages dropped ** ** 240 printk messages dropped ** ** 225 printk messages dropped ** ** 228 printk messages dropped ** ** 213 printk messages dropped ** ** 108 printk messages dropped ** ** 220 printk messages dropped ** ** 230 printk messages dropped ** ** 234 printk messages dropped ** ** 215 printk messages dropped ** ** 212 printk messages dropped ** ** 209 printk messages dropped ** ** 215 printk messages dropped ** ** 213 printk messages dropped ** ** 215 printk messages dropped ** ** 211 printk messages dropped ** ** 213 printk messages dropped ** ** 215 printk messages dropped ** ** 211 printk messages dropped ** ** 209 printk messages dropped ** ** 219 printk messages dropped ** ** 207 printk messages dropped ** ** 178 printk messages dropped ** [ 345.468941][ T8574] FAULT_INJECTION: forcing a failure. [ 345.468941][ T8574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.469001][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.1.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.469030][ T8574] Tainted: [L]=SOFTLOCKUP [ 345.469038][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 345.469050][ T8574] Call Trace: [ 345.469059][ T8574] [ 345.469067][ T8574] dump_stack_lvl+0x100/0x190 [ 345.469101][ T8574] should_fail_ex.cold+0x5/0xa [ 345.469130][ T8574] _copy_from_user+0x2e/0xd0 [ 345.469156][ T8574] bpf_prog_load+0x1490/0x2a80 [ 345.469191][ T8574] ? __pfx_bpf_prog_load+0x10/0x10 [ 345.469221][ T8574] ? lockdep_hardirqs_on+0x7d/0x110 [ 345.469262][ T8574] __sys_bpf+0x1f46/0x4a30 [ 345.469287][ T8574] ? lock_acquire+0x1d1/0x380 [ 345.469316][ T8574] ? __pfx___sys_bpf+0x10/0x10 [ 345.469337][ T8574] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 345.469361][ T8574] ? lockdep_hardirqs_on+0x7d/0x110 [ 345.469381][ T8574] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 345.469408][ T8574] ? rcu_is_watching+0x13/0xc0 [ 345.469436][ T8574] ? trace_sched_exit_tp+0x120/0x160 [ 345.469463][ T8574] ? __schedule+0x126b/0x6920 [ 345.469502][ T8574] ? rcu_is_watching+0x13/0xc0 [ 345.469532][ T8574] ? __pfx___schedule+0x10/0x10 [ 345.469577][ T8574] ? fput+0xea/0x100 [ 345.469603][ T8574] ? fput+0x7c/0x100 [ 345.469629][ T8574] ? ksys_write+0x1ac/0x250 [ 345.469654][ T8574] ? __x64_sys_bpf+0xce/0x140 [ 345.469675][ T8574] __x64_sys_bpf+0xce/0x140 [ 345.469697][ T8574] ? do_syscall_64+0xae/0x790 [ 345.469720][ T8574] do_syscall_64+0x123/0x790 [ 345.469748][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.469769][ T8574] RIP: 0033:0x7faf7459e159 [ 345.469786][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.469805][ T8574] RSP: 002b:00007faf727b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.469825][ T8574] RAX: ffffffffffffffda RBX: 00007faf74826180 RCX: 00007faf7459e159 [ 345.469839][ T8574] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 345.469852][ T8574] RBP: 00007faf727b4090 R08: 0000000000000000 R09: 0000000000000000 [ 345.469864][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.469877][ T8574] R13: 00007faf74826218 R14: 00007faf74826180 R15: 00007ffcee336b28 [ 345.469906][ T8574] [ 346.450268][ T30] audit: type=1400 audit(1790817571.642:853): avc: denied { mounton } for pid=8589 comm="syz.2.761" path="/144/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 346.747511][ T5807] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 346.837238][ T8593] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 346.904624][ T5807] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.926676][ T5807] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.926693][ T5807] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 346.926726][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.955099][ C0] net_ratelimit: 52 callbacks suppressed [ 346.972925][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.999765][ T5807] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.307844][ T8604] FAULT_INJECTION: forcing a failure. [ 347.307844][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 347.307890][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.4.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.307916][ T8604] Tainted: [L]=SOFTLOCKUP [ 347.307923][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 347.307935][ T8604] Call Trace: [ 347.307942][ T8604] [ 347.307950][ T8604] dump_stack_lvl+0x100/0x190 [ 347.307983][ T8604] should_fail_ex.cold+0x5/0xa [ 347.308011][ T8604] should_failslab+0xc2/0x120 [ 347.308040][ T8604] __kmalloc_noprof+0xfc/0x840 [ 347.308064][ T8604] ? tomoyo_encode2+0xfb/0x3c0 [ 347.308099][ T8604] tomoyo_encode2+0xfb/0x3c0 [ 347.308130][ T8604] tomoyo_encode+0x29/0x50 [ 347.308154][ T8604] tomoyo_realpath_from_path+0x18c/0x690 [ 347.308188][ T8604] tomoyo_path2_perm+0x29f/0x700 [ 347.308210][ T8604] ? tomoyo_path2_perm+0x291/0x700 [ 347.308233][ T8604] ? d_splice_alias_ops+0x62b/0x15b0 [ 347.308258][ T8604] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 347.308280][ T8604] ? current_check_refer_path+0x2cc/0xf80 [ 347.308304][ T8604] ? ext4_fname_free_filename+0xc2/0x130 [ 347.308325][ T8604] ? kfree+0x1e0/0x6d0 [ 347.308351][ T8604] ? ext4_lookup+0xd3/0x730 [ 347.308385][ T8604] ? do_raw_spin_unlock+0x145/0x1e0 [ 347.308413][ T8604] ? _raw_spin_unlock+0x28/0x50 [ 347.308448][ T8604] tomoyo_path_link+0xae/0x100 [ 347.308476][ T8604] ? __pfx_tomoyo_path_link+0x10/0x10 [ 347.308501][ T8604] ? make_vfsgid+0xf1/0x140 [ 347.308525][ T8604] ? __pfx_make_vfsgid+0x10/0x10 [ 347.308555][ T8604] security_path_link+0x12f/0x2a0 [ 347.308581][ T8604] filename_linkat+0x33a/0x640 [ 347.308613][ T8604] ? __pfx_filename_linkat+0x10/0x10 [ 347.308655][ T8604] ? do_getname+0x191/0x390 [ 347.308678][ T8604] __x64_sys_linkat+0xf6/0x150 [ 347.308709][ T8604] do_syscall_64+0x123/0x790 [ 347.308734][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.308754][ T8604] RIP: 0033:0x7f512579e159 [ 347.308772][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.308790][ T8604] RSP: 002b:00007f5126689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 347.308810][ T8604] RAX: ffffffffffffffda RBX: 00007f5125a25fa0 RCX: 00007f512579e159 [ 347.308824][ T8604] RDX: ffffffffffffff9c RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 347.308837][ T8604] RBP: 00007f5126689090 R08: 0000000000001000 R09: 0000000000000000 [ 347.308850][ T8604] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 347.308862][ T8604] R13: 00007f5125a26038 R14: 00007f5125a25fa0 R15: 00007fff4357d818 [ 347.308893][ T8604] [ 347.352360][ T8604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.393011][ T8607] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 347.393038][ T8607] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 347.393109][ T8607] vhci_hcd vhci_hcd.0: Device attached [ 347.411264][ T8608] vhci_hcd: cannot find the pending unlink 67 [ 347.685142][ T5690] usb 40-1: SetAddress Request (2) to port 0 [ 347.685179][ T5690] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 347.736556][ T30] audit: type=1400 audit(1790817572.933:854): avc: denied { getopt } for pid=8610 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.530359][ T5807] usb 2-1: USB disconnect, device number 27 [ 349.682733][ T8625] binder: BINDER_SET_CONTEXT_MGR already set [ 349.682744][ T8625] binder: 8624:8625 ioctl 4018620d 200000000040 returned -16 [ 350.450512][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 350.450538][ T8629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.772'. [ 350.602813][ T8608] vhci_hcd: connection reset by peer [ 350.603398][ T13] vhci_hcd vhci_hcd.3: stop threads [ 350.603417][ T13] vhci_hcd vhci_hcd.3: release socket [ 350.605428][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 351.698086][ T5807] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 352.064810][ C0] net_ratelimit: 66 callbacks suppressed [ 352.480721][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 352.484818][ T5807] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 352.500583][ T5807] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 352.500605][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.502161][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.502183][ T5807] usb 2-1: SerialNumber: syz [ 352.550666][ T5807] usb 2-1: 0:2 : does not exist [ 352.706457][ T30] audit: type=1400 audit(1790817577.883:855): avc: denied { map } for pid=8643 comm="syz.3.777" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 352.706500][ T30] audit: type=1400 audit(1790817577.883:856): avc: denied { execute } for pid=8643 comm="syz.3.777" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 352.753668][ T5807] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 352.774823][ T5807] usb 2-1: 5:0: failed to get current value for ch 2 (-22) [ 352.784915][ T5690] usb 40-1: device descriptor read/8, error -110 [ 352.803396][ T5807] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 352.838626][ T5807] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 352.850620][ T5807] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 352.907947][ T5807] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 353.091524][ T5807] usb 2-1: USB disconnect, device number 28 [ 353.687609][ T5690] usb usb40-port1: attempt power cycle [ 354.300093][ T5690] usb usb40-port1: unable to enumerate USB device [ 357.134799][ T5809] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 357.184589][ C0] net_ratelimit: 178 callbacks suppressed [ 357.284627][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 357.321717][ T5809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.321743][ T5809] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0037, bcdDevice=58.26 [ 357.322780][ T5809] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 357.322794][ T5809] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 357.379097][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.379114][ T5809] usb 2-1: Product: syz [ 357.379127][ T5809] usb 2-1: Manufacturer: syz [ 357.379141][ T5809] usb 2-1: SerialNumber: syz [ 358.014043][ T5718] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 358.014100][ T5718] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 358.074264][ T5718] usb 4-1: USB disconnect, device number 21 [ 360.571136][ T5809] usb 2-1: USB disconnect, device number 29 [ 361.381023][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.793'. [ 362.214499][ T5702] net_ratelimit: 36 callbacks suppressed [ 362.380490][ T8731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.796'. [ 362.380503][ T8731] netlink: 13 bytes leftover after parsing attributes in process `syz.4.796'. [ 362.380512][ T8731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.796'. [ 362.380520][ T8731] netlink: 13 bytes leftover after parsing attributes in process `syz.4.796'. [ 362.380528][ T8731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.796'. [ 362.382628][ T8731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.796'. [ 362.382645][ T8731] netlink: 13 bytes leftover after parsing attributes in process `syz.4.796'. [ 362.382660][ T8731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.796'. [ 362.382672][ T8731] netlink: 13 bytes leftover after parsing attributes in process `syz.4.796'. [ 363.762143][ T8754] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 363.762624][ T8754] ALSA: mixer_oss: invalid index 137438 [ 366.624110][ T984] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 366.785027][ T984] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 366.786070][ T984] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.786086][ T984] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.786115][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.787845][ T984] usb 2-1: config 0 descriptor?? [ 367.219068][ T984] holtek_mouse 0003:04D9:A070.000C: ignoring exceeding usage max [ 367.234851][ T984] holtek_mouse 0003:04D9:A070.000C: global environment stack underflow [ 367.234871][ T984] holtek_mouse 0003:04D9:A070.000C: item 0 4 1 11 parsing failed [ 367.237050][ T984] holtek_mouse 0003:04D9:A070.000C: hid parse failed: -22 [ 367.237118][ T984] holtek_mouse 0003:04D9:A070.000C: probe with driver holtek_mouse failed with error -22 [ 367.268594][ C1] net_ratelimit: 40 callbacks suppressed [ 368.986698][ T8790] FAULT_INJECTION: forcing a failure. [ 368.986698][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.986726][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.3.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.986753][ T8790] Tainted: [L]=SOFTLOCKUP [ 368.986761][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 368.986785][ T8790] Call Trace: [ 368.986792][ T8790] [ 368.986801][ T8790] dump_stack_lvl+0x100/0x190 [ 368.986834][ T8790] should_fail_ex.cold+0x5/0xa [ 368.986862][ T8790] _copy_to_user+0x32/0xd0 [ 368.986888][ T8790] rng_dev_read+0x223/0x910 [ 368.986909][ T8790] ? __pfx_virtio_read+0x10/0x10 [ 368.986932][ T8790] ? __pfx_rng_dev_read+0x10/0x10 [ 368.986950][ T8790] ? avc_policy_seqno+0x9/0x20 [ 368.986990][ T8790] ? bpf_lsm_file_permission+0x9/0x10 [ 368.987017][ T8790] ? security_file_permission+0x76/0x210 [ 368.987045][ T8790] ? rw_verify_area+0xce/0x6d0 [ 368.987065][ T8790] ? __pfx_rng_dev_read+0x10/0x10 [ 368.987086][ T8790] vfs_read+0x1e4/0xb40 [ 368.987109][ T8790] ? lock_acquire+0x1d1/0x380 [ 368.987131][ T8790] ? __fget_files+0x34/0x3d0 [ 368.987156][ T8790] ? __pfx_vfs_read+0x10/0x10 [ 368.987175][ T8790] ? find_held_lock+0x2b/0x80 [ 368.987202][ T8790] ? __fget_files+0x215/0x3d0 [ 368.987226][ T8790] ? __fget_files+0x215/0x3d0 [ 368.987256][ T8790] ? __fget_files+0x21f/0x3d0 [ 368.987290][ T8790] ksys_read+0x12a/0x250 [ 368.987311][ T8790] ? __pfx_ksys_read+0x10/0x10 [ 368.987341][ T8790] do_syscall_64+0x123/0x790 [ 368.987365][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.987386][ T8790] RIP: 0033:0x7f38f7d9e159 [ 368.987403][ T8790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.987422][ T8790] RSP: 002b:00007f38f5fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.987442][ T8790] RAX: ffffffffffffffda RBX: 00007f38f8026090 RCX: 00007f38f7d9e159 [ 368.987456][ T8790] RDX: 00000000fffffe9c RSI: 00002000000005c0 RDI: 0000000000000004 [ 368.987469][ T8790] RBP: 00007f38f5fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 368.987481][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.987493][ T8790] R13: 00007f38f8026128 R14: 00007f38f8026090 R15: 00007ffc515696c8 [ 368.987522][ T8790] [ 368.995966][ T5332] usb 2-1: USB disconnect, device number 30 [ 369.513073][ T8795] __nla_validate_parse: 72 callbacks suppressed [ 369.513091][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 370.611865][ T8822] fuse: Bad value for 'fd' [ 371.713932][ T30] audit: type=1400 audit(1790817596.454:857): avc: denied { setattr } for pid=8823 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 371.788407][ T8830] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5610] was attempted by "&l/Fy#Is1\x1b\x0cDj\x0as*ZG\x22pz?a?Gtg²A\x0d|IGG\x0d}\x0bav0T)xʰzx6&m#䍛kv^8o\x0d7!VI.b4 Aؒ5g*r&\x22ԟm4v{4u:nR6\x0c\x07ZM9]n5Wq}e:Z\x0cMU\x5cX85\x09omv &9c]e#~Sy2K*MWr%J\x07=\x0cLؔ\x09G\x07עZ{qwX\x07](LdpLo5ƞBƀX\x09{w|#S&=s[g\x5cĸ/^~$-+2\x0d4s|?noIJ\x07ľ`'AW_!\x0d.UQ7&`)#!ҋSC%9f\x0dKw\x07^蛈qimꛆ\x22f9ﭘx./liqZWn!9Kkp5BWC®=-u<0,F1,vᴛ`OI_Fl&ti*Dan}PHB`]&\x0cJu-tAOfՁK痷 <>f.nr`{ҴbkDMk.J.9\x07?\x0bCY>\x1baI?q\x09OiT\x070Alo\x1b@mDu^\x0dH)[;w RW\x0d[x}uv*IM K̿ڝ*.M֌qgtOH$rO [ 372.029069][ T5332] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 372.162042][ T8834] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 372.184365][ T5332] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 372.185511][ T5332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.185538][ T5332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.185593][ T5332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.246820][ T5332] usb 4-1: config 0 descriptor?? [ 372.302439][ T8838] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 372.345394][ T8838] bond2: entered promiscuous mode [ 372.345763][ T8838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.380586][ T8838] macvtap1: entered allmulticast mode [ 372.409762][ T8838] bond2: (slave bridge1): making interface the new active one [ 372.409784][ T8838] bridge1: entered promiscuous mode [ 372.411519][ T8838] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 372.509203][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.524523][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.765215][ T984] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 372.783625][ C1] net_ratelimit: 43 callbacks suppressed [ 372.829833][ T5332] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 372.829852][ T5332] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 372.829869][ T5332] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 372.829884][ T5332] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 372.829899][ T5332] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 372.829915][ T5332] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 372.829930][ T5332] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 372.895395][ T5332] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 372.943674][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 372.944512][ T984] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 372.945780][ T984] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 372.945815][ T984] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 372.945842][ T984] usb 5-1: config 0 interface 0 has no altsetting 0 [ 372.945892][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.948690][ T984] usb 5-1: config 0 descriptor?? [ 373.033813][ T5718] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 373.035081][ T5332] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 373.194181][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.259843][ T5718] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 373.263314][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.263377][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.297618][ T5718] usb 3-1: config 0 descriptor?? [ 373.316285][ T5718] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 373.455981][ T984] wacom 0003:056A:00C5.000E: ignoring exceeding usage max [ 373.468222][ T984] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 373.468257][ T984] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 373.468292][ T984] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 373.534889][ T984] wacom 0003:056A:00C5.000E: hidraw1: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0 [ 373.550516][ T30] audit: type=1400 audit(1790817598.744:858): avc: denied { connect } for pid=8849 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.587847][ T30] audit: type=1400 audit(1790817598.784:859): avc: denied { read } for pid=8849 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.653951][ T5332] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 373.674377][ T5332] usb 4-1: USB disconnect, device number 22 [ 374.696026][ T5690] usb 5-1: USB disconnect, device number 27 [ 374.979558][ T8856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.077566][ T8856] bridge0: port 3(bond1) entered blocking state [ 375.077730][ T8856] bridge0: port 3(bond1) entered disabled state [ 375.077891][ T8856] bond1: entered allmulticast mode [ 375.106637][ T8856] bond1: entered promiscuous mode [ 375.113138][ T8856] bridge0: port 3(bond1) entered blocking state [ 375.113238][ T8856] bridge0: port 3(bond1) entered forwarding state [ 375.157571][ T59] bridge0: port 3(bond1) entered disabled state [ 375.472971][ T5718] pwc: send_video_command error -71 [ 375.472986][ T5718] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 375.473045][ T5718] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 375.504018][ T5718] usb 3-1: USB disconnect, device number 32 [ 377.659015][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 377.824166][ C0] net_ratelimit: 34 callbacks suppressed [ 381.370024][ T5882] Bluetooth: hci5: Frame reassembly failed (-90) [ 381.580052][ T8895] capability: warning: `syz.0.843' uses 32-bit capabilities (legacy support in use) [ 381.676273][ T8897] FAULT_INJECTION: forcing a failure. [ 381.676273][ T8897] name failslab, interval 1, probability 0, space 0, times 0 [ 381.676306][ T8897] CPU: 0 UID: 0 PID: 8897 Comm: syz.3.844 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.676334][ T8897] Tainted: [L]=SOFTLOCKUP [ 381.676342][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 381.676354][ T8897] Call Trace: [ 381.676361][ T8897] [ 381.676370][ T8897] dump_stack_lvl+0x100/0x190 [ 381.676403][ T8897] should_fail_ex.cold+0x5/0xa [ 381.676431][ T8897] should_failslab+0xc2/0x120 [ 381.676458][ T8897] kmem_cache_alloc_noprof+0x92/0x6a0 [ 381.676483][ T8897] ? skb_clone+0x190/0x400 [ 381.676514][ T8897] skb_clone+0x190/0x400 [ 381.676548][ T8897] netlink_deliver_tap+0xaed/0xcc0 [ 381.676579][ T8897] netlink_unicast+0x6a5/0x850 [ 381.676609][ T8897] ? __pfx_netlink_unicast+0x10/0x10 [ 381.676643][ T8897] netlink_ack+0x655/0xb80 [ 381.676679][ T8897] netlink_rcv_skb+0x333/0x420 [ 381.676704][ T8897] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.676737][ T8897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.676773][ T8897] ? netlink_deliver_tap+0x1ae/0xcc0 [ 381.676803][ T8897] netlink_unicast+0x585/0x850 [ 381.676832][ T8897] ? __pfx_netlink_unicast+0x10/0x10 [ 381.676866][ T8897] netlink_sendmsg+0x8b0/0xda0 [ 381.676895][ T8897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.676923][ T8897] ? selinux_socket_sendmsg+0x198/0x2f0 [ 381.676954][ T8897] ____sys_sendmsg+0xa4d/0xbe0 [ 381.676973][ T8897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.677000][ T8897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.677028][ T8897] ? lock_acquire+0x1d1/0x380 [ 381.677051][ T8897] ? get_pid_task+0x2a/0x250 [ 381.677079][ T8897] ___sys_sendmsg+0x190/0x1e0 [ 381.677102][ T8897] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.677124][ T8897] ? get_pid_task+0x106/0x250 [ 381.677162][ T8897] ? find_held_lock+0x2b/0x80 [ 381.677209][ T8897] __sys_sendmsg+0x160/0x210 [ 381.677236][ T8897] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.677279][ T8897] do_syscall_64+0x123/0x790 [ 381.677304][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.677325][ T8897] RIP: 0033:0x7f38f7d9e159 [ 381.677343][ T8897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.677361][ T8897] RSP: 002b:00007f38f5ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.677381][ T8897] RAX: ffffffffffffffda RBX: 00007f38f8025fa0 RCX: 00007f38f7d9e159 [ 381.677395][ T8897] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 381.677408][ T8897] RBP: 00007f38f5ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.677420][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.677446][ T8897] R13: 00007f38f8026038 R14: 00007f38f8025fa0 R15: 00007ffc515696c8 [ 381.677476][ T8897] [ 382.293147][ T5332] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 382.663532][ T5332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 382.663641][ T5332] usb 4-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28 [ 382.695259][ T5332] usb 4-1: config 3 has an invalid interface number: 67 but max is 0 [ 382.695283][ T5332] usb 4-1: config 3 has no interface number 0 [ 382.695330][ T5332] usb 4-1: config 3 interface 67 has no altsetting 0 [ 382.706961][ T5332] usb 4-1: string descriptor 0 read error: -22 [ 382.707088][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.863105][ C0] net_ratelimit: 38 callbacks suppressed [ 383.297421][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 383.771555][ T8893] Bluetooth: hci5: command 0x1003 tx timeout [ 383.773212][ T5603] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 384.003051][ T5807] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 384.779129][ T5807] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 384.782816][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.803005][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.807447][ T5807] usb 3-1: config 0 descriptor?? [ 384.832254][ T5807] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 385.156588][ T8934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.854'. [ 385.378693][ T5807] pwc: send_video_command error -71 [ 385.378707][ T5807] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 385.378796][ T5807] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 385.409826][ T5807] usb 3-1: USB disconnect, device number 33 [ 385.756132][ T30] audit: type=1400 audit(1790817610.955:860): avc: denied { write } for pid=8938 comm="syz.3.855" name="functions" dev="configfs" ino=21766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.760102][ T30] audit: type=1400 audit(1790817610.955:861): avc: denied { write } for pid=8938 comm="syz.3.855" name="target" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.815876][ T30] audit: type=1400 audit(1790817611.015:862): avc: denied { write } for pid=8938 comm="syz.3.855" name="usb_gadget" dev="configfs" ino=25055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.821268][ T30] audit: type=1400 audit(1790817611.015:863): avc: denied { write } for pid=8938 comm="syz.3.855" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 386.686431][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 387.059036][ T30] audit: type=1400 audit(1790817612.265:864): avc: denied { read } for pid=8943 comm="syz.2.857" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 387.141731][ T30] audit: type=1400 audit(1790817612.335:865): avc: denied { open } for pid=8943 comm="syz.2.857" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 387.258139][ T30] audit: type=1400 audit(1790817612.455:866): avc: denied { ioctl } for pid=8943 comm="syz.2.857" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 387.619060][ T8956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 388.126596][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.861'. [ 388.152760][ C1] net_ratelimit: 40 callbacks suppressed [ 388.692103][ T8959] fuse: Bad value for 'fd' [ 388.965109][ T8967] binfmt_misc: register: failed to install interpreter ./file2 [ 388.984343][ T8967] jffs2: notice: (8967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 390.052353][ T5332] usb 4-1: USB disconnect, device number 23 [ 390.190791][ T8987] program syz.4.868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.372354][ T8992] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 390.380460][ T8992] ALSA: mixer_oss: invalid index 137438 [ 392.646630][ T8993] netlink: 'syz.0.869': attribute type 2 has an invalid length. [ 392.859455][ T9010] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 392.859474][ T9010] device-mapper: ioctl: error adding target to table [ 392.935519][ T5809] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 393.082699][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 393.147106][ T9017] binfmt_misc: register: failed to install interpreter ./file2 [ 393.162547][ T5809] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 393.182622][ C0] net_ratelimit: 64 callbacks suppressed [ 393.219252][ T5809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.219391][ T5809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.300318][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.300373][ T5809] usb 3-1: Product: syz [ 393.300422][ T5809] usb 3-1: Manufacturer: syz [ 393.300471][ T5809] usb 3-1: SerialNumber: syz [ 393.449666][ T5809] usb 3-1: config 0 descriptor?? [ 393.476360][ T5809] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 393.907126][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 398.246235][ T6792] net_ratelimit: 12 callbacks suppressed [ 399.392485][ T5809] snd_usb_toneport 3-1:0.0: set_interface failed [ 399.392805][ T5809] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 399.393088][ T5809] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -110 [ 403.907040][ C1] net_ratelimit: 29 callbacks suppressed [ 409.028123][ C0] net_ratelimit: 20 callbacks suppressed [ 409.659842][ C1] sched: DL replenish lagged too much [ 414.084155][ T10] net_ratelimit: 12 callbacks suppressed [ 419.271029][ C1] net_ratelimit: 5 callbacks suppressed [ 424.356193][ T50] net_ratelimit: 21 callbacks suppressed [ 429.404563][ T190] net_ratelimit: 13 callbacks suppressed [ 434.552260][ T5882] net_ratelimit: 18 callbacks suppressed [ 435.065315][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.612790][ T5711] net_ratelimit: 23 callbacks suppressed [ 445.501433][ T6792] net_ratelimit: 23 callbacks suppressed [ 450.545346][ C0] net_ratelimit: 50 callbacks suppressed [ 454.833970][ T4966] udevd[4966]: worker [8919] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 455.686184][ T6789] net_ratelimit: 13 callbacks suppressed [ 460.929151][ T59] net_ratelimit: 27 callbacks suppressed [ 466.261873][ T6790] net_ratelimit: 29 callbacks suppressed [ 471.411869][ T6791] net_ratelimit: 30 callbacks suppressed [ 476.726471][ T5912] net_ratelimit: 20 callbacks suppressed [ 481.829241][ T5332] net_ratelimit: 17 callbacks suppressed [ 487.097371][ T5809] net_ratelimit: 17 callbacks suppressed [ 492.169449][ T12] net_ratelimit: 12 callbacks suppressed [ 497.099020][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.369167][ T5718] net_ratelimit: 2 callbacks suppressed [ 503.410611][ T5690] net_ratelimit: 21 callbacks suppressed [ 508.608348][ T1358] net_ratelimit: 24 callbacks suppressed [ 513.836572][ T50] net_ratelimit: 25 callbacks suppressed [ 519.053627][ T135] net_ratelimit: 23 callbacks suppressed [ 524.158419][ T10] net_ratelimit: 19 callbacks suppressed [ 529.325532][ T135] net_ratelimit: 20 callbacks suppressed [ 534.459242][ T5798] net_ratelimit: 26 callbacks suppressed [ 539.679721][ T984] net_ratelimit: 12 callbacks suppressed [ 544.904716][ T25] net_ratelimit: 23 callbacks suppressed [ 550.006004][ T6789] net_ratelimit: 14 callbacks suppressed [ 555.103783][ T135] net_ratelimit: 30 callbacks suppressed [ 558.377332][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.146827][ T59] net_ratelimit: 21 callbacks suppressed [ 565.314007][ T5332] net_ratelimit: 18 callbacks suppressed [ 568.776447][ C0] virtqueue callback for ffff888027a3aa00 (ffffffff86ec69d0) [ 568.779767][ C0] No more buffers in queue [ 568.779802][ C0] Receiving skb proto 0x0800 len 140 type 0 [ 568.779831][ C0] No more buffers in queue [ 568.779850][ C0] Added buffer head 2399 to ffff888027a3aa00 [ 568.779871][ C0] Added buffer head 2398 to ffff888027a3aa00 [ 568.779891][ C0] Added buffer head 2397 to ffff888027a3aa00 [ 568.779912][ C0] Added buffer head 2396 to ffff888027a3aa00 [ 568.779933][ C0] Added buffer head 2395 to ffff888027a3aa00 [ 568.779953][ C0] Added buffer head 2394 to ffff888027a3aa00 [ 568.779974][ C0] Added buffer head 2393 to ffff888027a3aa00 [ 568.779994][ C0] Added buffer head 2392 to ffff888027a3aa00 [ 568.780015][ C0] Added buffer head 2391 to ffff888027a3aa00 [ 568.780035][ C0] Added buffer head 2390 to ffff888027a3aa00 [ 568.780056][ C0] Added buffer head 2389 to ffff888027a3aa00 [ 568.780077][ C0] Added buffer head 2388 to ffff888027a3aa00 [ 568.780098][ C0] Added buffer head 2387 to ffff888027a3aa00 [ 568.780118][ C0] Added buffer head 2386 to ffff888027a3aa00 [ 568.780139][ C0] Added buffer head 2385 to ffff888027a3aa00 [ 568.780160][ C0] Added buffer head 2384 to ffff888027a3aa00 [ 568.780180][ C0] Added buffer head 2383 to ffff888027a3aa00 [ 568.780200][ C0] Added buffer head 2382 to ffff888027a3aa00 [ 568.780221][ C0] Added buffer head 2381 to ffff888027a3aa00 [ 568.780241][ C0] Added buffer head 2380 to ffff888027a3aa00 [ 568.780262][ C0] Added buffer head 2379 to ffff888027a3aa00 [ 568.780282][ C0] Added buffer head 2378 to ffff888027a3aa00 [ 568.780303][ C0] Added buffer head 2377 to ffff888027a3aa00 [ 568.780324][ C0] Added buffer head 2376 to ffff888027a3aa00 [ 568.780345][ C0] Added buffer head 2441 to ffff888027a3aa00 [ 568.780371][ C0] Added buffer head 2440 to ffff888027a3aa00 [ 568.780392][ C0] Added buffer head 2439 to ffff888027a3aa00 [ 568.780413][ C0] Added buffer head 2438 to ffff888027a3aa00 [ 568.780434][ C0] Added buffer head 2437 to ffff888027a3aa00 [ 568.780454][ C0] Added buffer head 2436 to ffff888027a3aa00 [ 568.780475][ C0] Added buffer head 2435 to ffff888027a3aa00 [ 568.780494][ C0] Added buffer head 2434 to ffff888027a3aa00 [ 568.780513][ C0] Added buffer head 2433 to ffff888027a3aa00 [ 568.973547][ C0] eth0: xmit ffff8881c8747780 42:01:0a:80:00:01 [ 568.973588][ C0] Added buffer head 17 to ffff888027a3a800 [ 568.973624][ C0] virtqueue callback for ffff888027a3a800 (ffffffff86ecf780) [ 568.980828][ C0] Sent skb ffff8881c8747780 [ 568.980877][ C0] No more buffers in queue [ 569.081522][ T31] INFO: task syz.4.868:8987 blocked for more than 154 seconds. [ 569.081550][ T31] Tainted: G L syzkaller #0 [ 569.081562][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.081571][ T31] task:syz.4.868 state:D stack:25352 pid:8987 tgid:8986 ppid:5598 task_flags:0x400140 flags:0x00080002 [ 569.081627][ T31] Call Trace: [ 569.081634][ T31] [ 569.081648][ T31] __schedule+0x1259/0x6920 [ 569.081682][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 569.081718][ T31] ? do_raw_spin_lock+0x128/0x260 [ 569.081753][ T31] ? __pfx___schedule+0x10/0x10 [ 569.081780][ T31] ? find_held_lock+0x2b/0x80 [ 569.081809][ T31] ? schedule+0x225/0x2c0 [ 569.081842][ T31] schedule+0xdd/0x2c0 [ 569.081871][ T31] schedule_preempt_disabled+0x13/0x30 [ 569.081899][ T31] __mutex_lock+0xccb/0x1bd0 [ 569.081921][ T31] ? exp_funnel_lock+0x19e/0x3c0 [ 569.081949][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 569.081976][ T31] ? lock_acquire+0x1d1/0x380 [ 569.082001][ T31] ? find_held_lock+0x2b/0x80 [ 569.082028][ T31] ? exp_funnel_lock+0x16b/0x3c0 [ 569.082048][ T31] ? exp_funnel_lock+0x16b/0x3c0 [ 569.082075][ T31] ? exp_funnel_lock+0x19e/0x3c0 [ 569.082095][ T31] exp_funnel_lock+0x19e/0x3c0 [ 569.082116][ T31] ? __pfx_exp_funnel_lock+0x10/0x10 [ 569.082142][ T31] ? __pfx___might_resched+0x10/0x10 [ 569.082170][ T31] synchronize_rcu_expedited+0x298/0x450 [ 569.082196][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 569.082232][ T31] ? __pfx___might_resched+0x10/0x10 [ 569.082254][ T31] ? rcu_read_lock_any_held+0x6a/0x90 [ 569.082288][ T31] unregister_netdevice_many_notify+0x15d4/0x2150 [ 569.082331][ T31] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 569.082367][ T31] ? __pfx___might_resched+0x10/0x10 [ 569.082395][ T31] default_device_exit_batch+0x6c6/0x890 [ 569.082430][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 569.082463][ T31] ? __pfx___might_resched+0x10/0x10 [ 569.082487][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 569.097969][ T31] ops_undo_list+0x363/0xab0 [ 569.098011][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 569.098043][ T31] ? ops_init+0x2fa/0x5f0 [ 569.098073][ T31] setup_net+0x1fa/0x3a0 [ 569.098102][ T31] ? __pfx_setup_net+0x10/0x10 [ 569.098139][ T31] copy_net_ns+0x345/0x7a0 [ 569.098163][ T31] create_new_namespaces+0x3ea/0xac0 [ 569.098194][ T31] unshare_nsproxy_namespaces+0xf2/0x220 [ 569.098221][ T31] ksys_unshare+0x4a2/0xa70 [ 569.098247][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 569.098283][ T31] __x64_sys_unshare+0x31/0x40 [ 569.098306][ T31] do_syscall_64+0x123/0x790 [ 569.098331][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.098352][ T31] RIP: 0033:0x7f512579e159 [ 569.098371][ T31] RSP: 002b:00007f5126689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 569.098393][ T31] RAX: ffffffffffffffda RBX: 00007f5125a25fa0 RCX: 00007f512579e159 [ 569.098407][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 569.098420][ T31] RBP: 00007f512583506b R08: 0000000000000000 R09: 0000000000000000 [ 569.098433][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.098446][ T31] R13: 00007f5125a26038 R14: 00007f5125a25fa0 R15: 00007fff4357d818 [ 569.098476][ T31] [ 569.098487][ T31] INFO: task syz.2.871:9002 blocked for more than 154 seconds. [ 569.098505][ T31] Tainted: G L syzkaller #0 [ 569.098517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.098526][ T31] task:syz.2.871 state:D stack:26840 pid:9002 tgid:8998 ppid:5596 task_flags:0x400040 flags:0x00080002 [ 569.098581][ T31] Call Trace: [ 569.098588][ T31] [ 569.098600][ T31] __schedule+0x1259/0x6920 [ 569.098629][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 569.098668][ T31] ? __pfx___schedule+0x10/0x10 [ 569.098702][ T31] ? find_held_lock+0x2b/0x80 [ 569.098732][ T31] ? schedule+0x225/0x2c0 [ 569.098765][ T31] schedule+0xdd/0x2c0 [ 569.098793][ T31] schedule_preempt_disabled+0x13/0x30 [ 569.098821][ T31] __mutex_lock+0xccb/0x1bd0 [ 569.098844][ T31] ? __tun_chr_ioctl+0x23d/0x4880 [ 569.098872][ T31] ? irqentry_exit+0x24d/0xa10 [ 569.098895][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 569.098938][ T31] ? __tun_chr_ioctl+0x23d/0x4880 [ 569.098961][ T31] ? rtnl_lock+0x9/0x20 [ 569.098982][ T31] __tun_chr_ioctl+0x23d/0x4880 [ 569.099006][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 569.099028][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 569.099061][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 569.099086][ T31] ? __fget_files+0x34/0x3d0 [ 569.099125][ T31] ? selinux_file_ioctl+0x13b/0x290 [ 569.099148][ T31] ? selinux_file_ioctl+0xb6/0x290 [ 569.099175][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 569.099203][ T31] __x64_sys_ioctl+0x18e/0x210 [ 569.099228][ T31] do_syscall_64+0x123/0x790 [ 569.099252][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.099273][ T31] RIP: 0033:0x7f54b959e159 [ 569.099289][ T31] RSP: 002b:00007f54ba47b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.099309][ T31] RAX: ffffffffffffffda RBX: 00007f54b9826090 RCX: 00007f54b959e159 [ 569.099323][ T31] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000005 [ 569.099337][ T31] RBP: 00007f54b963506b R08: 0000000000000000 R09: 0000000000000000 [ 569.099350][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.099363][ T31] R13: 00007f54b9826128 R14: 00007f54b9826090 R15: 00007ffe3b1f8848 [ 569.099393][ T31] [ 569.099402][ T31] INFO: task syz.3.877:9019 blocked for more than 154 seconds. [ 569.099418][ T31] Tainted: G L syzkaller #0 [ 569.099430][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.099438][ T31] task:syz.3.877 state:D stack:26216 pid:9019 tgid:9018 ppid:5597 task_flags:0x400140 flags:0x00080003 [ 569.099492][ T31] Call Trace: [ 569.099499][ T31] [ 569.099511][ T31] __schedule+0x1259/0x6920 [ 569.099540][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 569.099580][ T31] ? __pfx___schedule+0x10/0x10 [ 569.099607][ T31] ? find_held_lock+0x2b/0x80 [ 569.099635][ T31] ? schedule+0x225/0x2c0 [ 569.099669][ T31] schedule+0xdd/0x2c0 [ 569.099703][ T31] exp_funnel_lock+0x344/0x3c0 [ 569.099725][ T31] ? __pfx_exp_funnel_lock+0x10/0x10 [ 569.099749][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 569.099772][ T31] ? __pfx___might_resched+0x10/0x10 [ 569.099800][ T31] synchronize_rcu_expedited+0x298/0x450 [ 569.099825][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 569.099869][ T31] snd_virmidi_input_close+0x1a8/0x2d0 [ 569.099898][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 569.099929][ T31] close_substream.part.0+0x16b/0x860 [ 569.099959][ T31] ? __pfx_close_substream.part.0+0x10/0x10 [ 569.099984][ T31] ? locks_remove_file+0xd1/0x600 [ 569.100012][ T31] rawmidi_release_priv+0x1d5/0x260 [ 569.100038][ T31] snd_rawmidi_release+0x6e/0x110 [ 569.100061][ T31] ? __pfx_snd_rawmidi_release+0x10/0x10 [ 569.100084][ T31] __fput+0x3ff/0xb50 [ 569.100119][ T31] task_work_run+0x150/0x240 [ 569.100150][ T31] ? __pfx_task_work_run+0x10/0x10 [ 569.100188][ T31] get_signal+0x1bd/0x21e0 [ 569.100217][ T31] ? task_work_add+0x201/0x3b0 [ 569.100248][ T31] ? __pfx_task_work_add+0x10/0x10 [ 569.100277][ T31] ? __pfx_get_signal+0x10/0x10 [ 569.100298][ T31] ? __fget_files+0x34/0x3d0 [ 569.100331][ T31] arch_do_signal_or_restart+0x91/0x7e0 [ 569.100361][ T31] ? __pfx___fput_deferred+0x10/0x10 [ 569.100389][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 569.100428][ T31] ? do_writev+0x234/0x340 [ 569.100455][ T31] exit_to_user_mode_loop+0x139/0x700 [ 569.100482][ T31] ? rcu_is_watching+0x13/0xc0 [ 569.100512][ T31] do_syscall_64+0x661/0x790 [ 569.100536][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.100557][ T31] RIP: 0033:0x7f38f7d9e159 [ 569.100574][ T31] RSP: 002b:00007f38f5ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 569.100593][ T31] RAX: 000000000000cb13 RBX: 00007f38f8025fa0 RCX: 00007f38f7d9e159 [ 569.100607][ T31] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 569.100620][ T31] RBP: 00007f38f7e3506b R08: 0000000000000000 R09: 0000000000000000 [ 569.100633][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.100645][ T31] R13: 00007f38f8026038 R14: 00007f38f8025fa0 R15: 00007ffc515696c8 [ 569.100675][ T31] [ 569.100684][ T31] INFO: task syz.3.877:9022 blocked for more than 154 seconds. [ 569.100705][ T31] Tainted: G L syzkaller #0 [ 569.100717][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.100725][ T31] task:syz.3.877 state:D stack:25144 pid:9022 tgid:9018 ppid:5597 task_flags:0x400140 flags:0x00080002 [ 569.100778][ T31] Call Trace: [ 569.100785][ T31] [ 569.100796][ T31] __schedule+0x1259/0x6920 [ 569.100825][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 569.100854][ T31] ? do_raw_spin_lock+0x128/0x260 [ 569.100889][ T31] ? __pfx___schedule+0x10/0x10