last executing test programs: 23.97793593s ago: executing program 4 (id=57): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB='*'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.509941756s ago: executing program 4 (id=72): socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x28}}, 0x4000800) (async) accept4(r0, 0x0, 0x0, 0x80000) 20.509125739s ago: executing program 4 (id=73): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) 19.563078735s ago: executing program 4 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) pipe(&(0x7f0000000480)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="020000"], 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r7, &(0x7f0000000080)='3', 0x1, 0x0) 19.044031099s ago: executing program 3 (id=80): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x1, &(0x7f0000000100)=0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r10 = eventfd2(0x10000, 0x0) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0xff1a, r0, &(0x7f0000000140)="71859a737be911a0fe84a71b17466e9f0cec1c6bddad28c53f45a5333abc1a97a8f81a51b35c102370c79b7a2caef269b739c881e3338321832e2f37d3ec14fa4137440be439fdf19e4af17bc8fe47536cdd20ce5b51501c7af94ddc98869a0339194b5b744f76b258b4ffef47410c62933329b82f82c10054e8f0d1236b2ec7dbcb658dda12330cfbe8b6", 0x8b, 0xff, 0x0, 0x2, r10}, &(0x7f0000000240)) 17.667329804s ago: executing program 4 (id=85): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000020000000000000000000003000000000300000002000000ffffffff00000000000000010500000008000000000000000000"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x10000}, 0x28) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007b01"]) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x0, {0xffffffffffffffff}, {0xee01}, 0xe, 0x4}) r5 = gettid() r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX]) fallocate(r1, 0x13, 0x2, 0x7ff) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x28, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r7, 0x0, 0x7, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) gettid() syz_open_dev$dri(&(0x7f0000000740), 0x400, 0x30e82) r8 = syz_open_dev$dri(&(0x7f0000000780), 0x2, 0x8001) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000040)={0x0, 0x7, {r5}, {0xee01}, 0x4, 0x9}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10408, 0x800}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xffffffffffffffda, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000032680)=""/102392, 0x18ff8) 16.886065632s ago: executing program 4 (id=89): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5107], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x35) 15.421973497s ago: executing program 3 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfffffffc}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 15.054834661s ago: executing program 3 (id=95): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x8, 0xe}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fchown(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x2b, @private=0xa010101, 0x0, 0x2000, 'none\x00', 0x0, 0x8d, 0x7f}, 0x2c) 14.482452855s ago: executing program 3 (id=96): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) pipe(&(0x7f0000000480)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000"], 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r5, &(0x7f0000000080)='3', 0x1, 0x0) 14.217895026s ago: executing program 3 (id=99): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 12.730596577s ago: executing program 3 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) pwritev(r1, &(0x7f0000001680), 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}]}}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x4040004) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x802, 0x0) 8.654987128s ago: executing program 1 (id=115): r0 = io_uring_setup(0x400a, &(0x7f0000000000)={0x0, 0x4ba1, 0x8027, 0x3, 0x196}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8, 0x80080) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0xbcb6, r1, 0x1e, {0x9, 0x2}, 0x7}, 0x1) mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, 0x103) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x7fff, 0x500) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) r3 = accept4$llc(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x800) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) getsockname$l2tp(r2, &(0x7f0000001240), &(0x7f0000001280)=0x10) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) preadv2(r4, &(0x7f0000004dc0)=[{&(0x7f0000004c80)=""/202, 0xca}, {&(0x7f0000004d80)}], 0x2, 0x9, 0x9, 0x0) 8.517840939s ago: executing program 1 (id=116): syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket(0x1e, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001980)=ANY=[@ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r2, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000001640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', r4, r5, 0x1, 0x0, 0x3}, 0x50) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae504000905070020000508ce0905030210007501"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400d02000000e21db615f8cd85b027597f57"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.897912183s ago: executing program 2 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfffffffc}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 7.589439212s ago: executing program 2 (id=120): timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x2b, 0x0, @tid=r0}, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r1, 0x0, &(0x7f0000000140), 0x0) syz_usb_connect(0x2, 0x3c4, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xc0, 0x8f, 0xfc, 0x8, 0x1fe1, 0x5456, 0xf74b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b2, 0x1, 0x4, 0x48, 0x58, 0xc, [{{0x9, 0x4, 0x14, 0x80, 0x7, 0xea, 0x19, 0x89, 0x2f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1002}]}, @generic={0x1e, 0x24, "4b625d65c47d77f02b2cce9193b2d9ba98511f30f6ede930749dee46"}], [{{0x9, 0x5, 0x87, 0x1, 0x200, 0x8, 0x9, 0xbd, [@generic={0x81, 0x24, "cbc0f6ef51bf793e2b563f96b10f992398593eb7f99ef3b4e1d302d9e909a97e47ec7e4f25ad8ec0dace15aaa9d44c1b5a2cbbac0875abc85d5fe2a4ff2da6458ed5aea89639f1d298cb8965cfcdd7c7f14ad6ca8bdfd76beb4ec9f5ec764f570c85be0a62d534a61515834a5358539e107dc4fccce8dc06b31b87802d1b44"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0xb, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x587}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x83, 0x3, 0x4, [@generic={0x90, 0x31, "c87d3a72005b5798aafd1f36c530774e9fc4c3b5c245d84fabda774563f0925b654d4dea94d4c7620ed6b3e3ffc5f988d209e191fef22447f20ceb14437f76c4b912115b7e290cf628ff38df55666c80528b42eb0d886a0860bad25674aee8980e50be65bc4c8de9e3b167b1f2feb28da9b65f390a2dfbd66f9a0ead6e8afa0c57dca2625a7cde6e54ec5b01dac3"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x7ff, 0x71, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x1}, @generic={0x8, 0xb, "78bdca80a900"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x35, 0x6, 0xb3, [@generic={0xe, 0xd, "9981673c178c4e4910c3cdd9"}, @generic={0x66, 0x21, "10d5535c4de4200798d9484a473692e3cf621886cdb72fcbbc5858cd49676db377342be71c6f98bea18c9f85093e45c6f013686d3bce5543ee63b6a2bee23817e3d513299d74ab637baf20f9df5974d6ce9b7f647ed9ca541c6ae144c4b8d5631d0dad23"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0xb, 0x40, 0x10, [@generic={0xeb, 0x23, "ef09def57e933bb1e74f7d8189af1f2ccf63b9b34117206d61831bad8e62e466d2b8c3531ea5d4ac85d89d8fa50f1f607b1e55370f75f387515d388a4f85bbca7fcb95bcecd96bd0286d62fc26ccdc06eed27219f4901d873b1262879f320f83282c549d6fa0525b07f8c69cacfa12ce152bf245b3eb39cf160c796db0f69f445e1892156ebe04f60a864ae3244c1b989637dabd03dc953220adedee8e157b9f62a294c9d69f60c06416f4d41216e63a2d0f27a4916ad48a7bd2ac0375b0fa45dba6d7e6abbed247caf7ff903a0645e91f28418e8d99f4ba8c1e3cfe3854b068137185c89c14bce377"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x1, 0x5, 0xcf, [@generic={0xb6, 0x24, "7a4bc90206fe4411a221d4f63797b73a20211e708da50a5013ebcc9f8c1471108818fc5e4ca1aa1b1fe64bfd30092cb758c0b7928c5461dc3db8396513360dafd6567417cbbee0659f4c92d3651df099f485c95f93dcf6f91453a911d9491b3e06a03214bc4285f969f7912d37c7888d1349949f6fb33138d3843738319fa04e3b2e0095f01c7b6b8f5dbeb3a57be4a8d9f7c5c575935d414ff982ed9479ab2817352e67161fd859e57e30ec9e64304af0dc0172"}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x0, 0x93, 0xd8, 0x40, 0x5}, 0x8, &(0x7f00000005c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40d}}]}) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000001680)={&(0x7f0000001600)="5a80ae99e424ca11f21ffc85c270ed182777603c8a4b386a6381f319341c0751e2def5ce4976575f52829c4104f07e7993d45ff2198725b6fcedcae2a52c5ad8439391cd1948c254e745e1367674431051151d001504", 0x56}) 7.269565274s ago: executing program 0 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setns(r5, 0x20000000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x4000002, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc1ef}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 6.647479669s ago: executing program 1 (id=123): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x3, 0x0, 0x1000}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f0000000800340004c4700008000300", @ANYRES32=r7], 0x2c}}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_setup(0x9, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) 4.826123909s ago: executing program 2 (id=124): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0xfffffffc, 0x80, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10, 0x1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000003800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) open(&(0x7f0000000080)='./file0\x00', 0x2c280, 0x21) 4.745624377s ago: executing program 0 (id=125): syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000d8bbaaaaaaaaaaaa86dd67ff6b8c002c0003fe8000000000000000000000000000aaff020000000000000000000000000001f001000000000000c2"], 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4602d70000000000000000000003"], 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x5, @win={{0x4bd5, 0x38b, 0x2, 0x9}, 0x5, 0x800, &(0x7f0000000240)={{0x0, 0x2, 0xc00000, 0xc6}, &(0x7f0000000200)={{0x4, 0x2, 0x3, 0x1000}, &(0x7f0000000180)={{0x400, 0x1ff, 0x3ff, 0x10}}}}, 0x3226, &(0x7f0000000300)="123848c1b05208c36c029ce3aa6aad01f7d44bd3ca1c863a76a0b7136b3009fabd8b186f8736475ae9c12cb57624ccfeebe872814f8f2b26fcdb2b690ac5fdfd3d378cbf0700f58f016623f44f43766a46aef3cf61e88e04526fd0f017e267ffa2582dd2e4b2b923b1c243c1118a451be9286161369bc24048e62cf29d59c8c62091bb270d1caaf561c29a3562f01509181c2f447271c4d648ffd9d9adbcaa9b991e4bb05ab9ad", 0xf}}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() prlimit64(r4, 0x3, &(0x7f0000000040)={0xfffffffffffffffd}, &(0x7f0000000100)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$FUSE(r5, 0x0, 0x0) 4.291005109s ago: executing program 2 (id=126): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x3, 0x0, 0x1000}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f0000000800340004c4700008000300", @ANYRES32=r7], 0x2c}}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_setup(0x9, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) 3.840728219s ago: executing program 0 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000900)={0x10000, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x3000, 0x308000, 0x8}) 3.375988354s ago: executing program 0 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000900)={0x10000, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x3000, 0x308000, 0x8}) (fail_nth: 1) 2.701899594s ago: executing program 0 (id=129): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000440)={0xa0, 0xe, 0x4, "dbfc0406"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.037721856s ago: executing program 1 (id=130): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32], 0x50) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.96629041s ago: executing program 2 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfffffffc}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 1.194762804s ago: executing program 2 (id=132): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001480)={0x24, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "c0756615"}, @local=@item_4={0x3, 0x2, 0x5, "42dd07f6"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27f, 0xfd, 0x1, {0x22, 0xdad}}}}, &(0x7f0000001700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001600), 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000004c0)='P') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='net/netstat\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = epoll_create1(0x80000) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000100)={r3, r4, 0x359e}) 961.675973ms ago: executing program 1 (id=133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e50000000000000f180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="ea61f83f6cfc709f6ff5b30a4c973da57c988d5d742598909ca546473b271aca2adc02108f8119f2c67aa8e2c6f5e5c0b3b9ccc30c1c45867b8ee9821a21563ac023ec2be75b65483ef977ffc39f7f20ee820631962f80efcde3d40e2ecd3e56e128f83fcc2269f9b2fa84f6380edc0b2c822dcea784aca1c7e1f7f47f4d51f093824bc8ca681f82b90ff3e3b9cb9f2fd5f676d4af4e5daa05ec4f8b0bec7649c823f0116488050f23cacc27c7323411c60ed46aaf67ff4a936b420c5bc84c6e95eb1d76924162e238638492343f1d6af6113d7d19be84d0f50a33", 0xdb, 0x200448c4, 0x0, 0x0) 249.093985ms ago: executing program 0 (id=134): syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000d8bbaaaaaaaaaaaa86dd67ff6b8c002c0003fe8000000000000000000000000000aaff020000000000000000000000000001f001000000000000c2"], 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4602d70000000000000000000003"], 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x5, @win={{0x4bd5, 0x38b, 0x2, 0x9}, 0x5, 0x800, &(0x7f0000000240)={{0x0, 0x2, 0xc00000, 0xc6}, &(0x7f0000000200)={{0x4, 0x2, 0x3, 0x1000}, &(0x7f0000000180)={{0x400, 0x1ff, 0x3ff, 0x10}}}}, 0x3226, &(0x7f0000000300)="123848c1b05208c36c029ce3aa6aad01f7d44bd3ca1c863a76a0b7136b3009fabd8b186f8736475ae9c12cb57624ccfeebe872814f8f2b26fcdb2b690ac5fdfd3d378cbf0700f58f016623f44f43766a46aef3cf61e88e04526fd0f017e267ffa2582dd2e4b2b923b1c243c1118a451be9286161369bc24048e62cf29d59c8c62091bb270d1caaf561c29a3562f01509181c2f447271c4d648ffd9d9adbcaa9b991e4bb05ab9ad", 0xf}}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() prlimit64(r4, 0x3, &(0x7f0000000040)={0xfffffffffffffffd}, &(0x7f0000000100)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$FUSE(r5, 0x0, 0x0) 0s ago: executing program 1 (id=135): socket(0x10, 0x80003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='devlink_hwerr\x00', 0xffffffffffffffff, 0x0, 0xfffffffdfffffffd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000005fc6", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002080)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="04"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r6, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="808000000000000004002b8008001b00000000004bbb1d6a210ac61016401e5c882b79c950c9934c81aba145e3cfaaa0ba15b2c979b9644f47daaba70fa7afe43b505c929573c9ac4b739b96da5171949dbb9940ef733862b45e7b4930049761c12e4796eae5e537dcdfd890905d0ab02679ba46c90cdadb09da2600f6be47580418c597747c2a485912f9fd466809df808209aed8adc1f6f2bb048622e277d46e65cc056beadf156b5504782738d83552140100010008f32186f622de3f1e3b27059d084ce95c507b983de62d2a89da7e0174ae00ea90000000157b1d64741e19ef07c367f3dcea"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000280)={0x2}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.219' (ED25519) to the list of known hosts. [ 65.963197][ T30] audit: type=1400 audit(1752427762.554:62): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.966968][ T5815] cgroup: Unknown subsys name 'net' [ 65.985956][ T30] audit: type=1400 audit(1752427762.554:63): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.013415][ T30] audit: type=1400 audit(1752427762.584:64): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.128653][ T5815] cgroup: Unknown subsys name 'cpuset' [ 66.136989][ T5815] cgroup: Unknown subsys name 'rlimit' [ 66.281671][ T30] audit: type=1400 audit(1752427762.874:65): avc: denied { setattr } for pid=5815 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.304999][ T30] audit: type=1400 audit(1752427762.874:66): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.341005][ T30] audit: type=1400 audit(1752427762.874:67): avc: denied { write } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.361648][ T30] audit: type=1400 audit(1752427762.874:68): avc: denied { read } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.382161][ T30] audit: type=1400 audit(1752427762.904:69): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.407309][ T30] audit: type=1400 audit(1752427762.904:70): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.410069][ T5817] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.430768][ T30] audit: type=1400 audit(1752427762.924:71): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.326938][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.986502][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.992943][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.290723][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 71.290738][ T30] audit: type=1400 audit(1752427767.884:78): avc: denied { create } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.345834][ T30] audit: type=1400 audit(1752427767.884:79): avc: denied { read write } for pid=5829 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.405988][ T30] audit: type=1400 audit(1752427767.884:80): avc: denied { open } for pid=5829 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.443122][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.459949][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.460822][ T30] audit: type=1400 audit(1752427767.934:81): avc: denied { ioctl } for pid=5829 comm="syz-executor" path="socket:[3908]" dev="sockfs" ino=3908 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.469025][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.492656][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.501131][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.507670][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.513755][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.521641][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.528808][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.534937][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.541375][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.549567][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.568066][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.579710][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.593080][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.625269][ T30] audit: type=1400 audit(1752427768.164:82): avc: denied { read } for pid=5829 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.655474][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.664189][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.673014][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.688505][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.689194][ T30] audit: type=1400 audit(1752427768.164:83): avc: denied { open } for pid=5829 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.696295][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.719249][ T30] audit: type=1400 audit(1752427768.164:84): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.728134][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.748056][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.764082][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.771939][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.786682][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.043701][ T30] audit: type=1400 audit(1752427768.634:85): avc: denied { module_request } for pid=5832 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.194176][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.264785][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 72.279642][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.317194][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 72.430058][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.438980][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.446346][ T5832] bridge_slave_0: entered allmulticast mode [ 72.453093][ T5832] bridge_slave_0: entered promiscuous mode [ 72.471373][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.479021][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.486237][ T5832] bridge_slave_1: entered allmulticast mode [ 72.492919][ T5832] bridge_slave_1: entered promiscuous mode [ 72.531398][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 72.577343][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.588970][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.604418][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.613837][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.621022][ T5843] bridge_slave_0: entered allmulticast mode [ 72.628644][ T5843] bridge_slave_0: entered promiscuous mode [ 72.655670][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.662872][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.672116][ T5829] bridge_slave_0: entered allmulticast mode [ 72.678953][ T5829] bridge_slave_0: entered promiscuous mode [ 72.686981][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.694102][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.701268][ T5843] bridge_slave_1: entered allmulticast mode [ 72.708256][ T5843] bridge_slave_1: entered promiscuous mode [ 72.714673][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.722569][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.729945][ T5839] bridge_slave_0: entered allmulticast mode [ 72.736641][ T5839] bridge_slave_0: entered promiscuous mode [ 72.758863][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.766406][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.773561][ T5829] bridge_slave_1: entered allmulticast mode [ 72.782393][ T5829] bridge_slave_1: entered promiscuous mode [ 72.804882][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.812813][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.820209][ T5839] bridge_slave_1: entered allmulticast mode [ 72.827134][ T5839] bridge_slave_1: entered promiscuous mode [ 72.839352][ T5832] team0: Port device team_slave_0 added [ 72.873252][ T5832] team0: Port device team_slave_1 added [ 72.886345][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.898349][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.910934][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.943833][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.977680][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.990299][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.023465][ T5843] team0: Port device team_slave_0 added [ 73.032125][ T5843] team0: Port device team_slave_1 added [ 73.045044][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.052519][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.078946][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.090321][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.097568][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.104742][ T5847] bridge_slave_0: entered allmulticast mode [ 73.112841][ T5847] bridge_slave_0: entered promiscuous mode [ 73.122072][ T5829] team0: Port device team_slave_0 added [ 73.145083][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.152431][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.178683][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.198496][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.205575][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.212857][ T5847] bridge_slave_1: entered allmulticast mode [ 73.219590][ T5847] bridge_slave_1: entered promiscuous mode [ 73.227089][ T5829] team0: Port device team_slave_1 added [ 73.241961][ T5839] team0: Port device team_slave_0 added [ 73.251386][ T5839] team0: Port device team_slave_1 added [ 73.272970][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.280193][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.307010][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.340726][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.349331][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.376056][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.402941][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.409967][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.436487][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.449029][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.456163][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.482177][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.494762][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.506707][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.529377][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.536441][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.562356][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.594838][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.602562][ T5840] Bluetooth: hci0: command tx timeout [ 73.602636][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.634717][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.654287][ T5832] hsr_slave_0: entered promiscuous mode [ 73.660382][ T5832] hsr_slave_1: entered promiscuous mode [ 73.675906][ T5840] Bluetooth: hci2: command tx timeout [ 73.675910][ T5842] Bluetooth: hci1: command tx timeout [ 73.713356][ T5847] team0: Port device team_slave_0 added [ 73.720678][ T5847] team0: Port device team_slave_1 added [ 73.781370][ T5839] hsr_slave_0: entered promiscuous mode [ 73.789289][ T5839] hsr_slave_1: entered promiscuous mode [ 73.795125][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.803541][ T5839] Cannot create hsr debugfs directory [ 73.812519][ T5829] hsr_slave_0: entered promiscuous mode [ 73.819077][ T5829] hsr_slave_1: entered promiscuous mode [ 73.824943][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.832644][ T5829] Cannot create hsr debugfs directory [ 73.838095][ T5840] Bluetooth: hci4: command tx timeout [ 73.838112][ T5842] Bluetooth: hci3: command tx timeout [ 73.854136][ T5843] hsr_slave_0: entered promiscuous mode [ 73.860267][ T5843] hsr_slave_1: entered promiscuous mode [ 73.866877][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.874441][ T5843] Cannot create hsr debugfs directory [ 73.920673][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.928245][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.954248][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.996347][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.003348][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.029451][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.178863][ T5847] hsr_slave_0: entered promiscuous mode [ 74.184907][ T5847] hsr_slave_1: entered promiscuous mode [ 74.190947][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.198628][ T5847] Cannot create hsr debugfs directory [ 74.332364][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.343419][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.369966][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.397299][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.461290][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.473167][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.489949][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.507805][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.544569][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.554517][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.564736][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.577071][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.661260][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.690430][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.709286][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.725095][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.741412][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.794259][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.838521][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.850108][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.860707][ T964] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.868060][ T964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.879678][ T964] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.886758][ T964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.903802][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.921006][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.936804][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.981391][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.002685][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.030286][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.056548][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.063616][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.073546][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.080635][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.090339][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.097415][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.143039][ T964] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.150220][ T964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.173481][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.181497][ T30] audit: type=1400 audit(1752427771.774:86): avc: denied { sys_module } for pid=5829 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.200063][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.218715][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.293240][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.352146][ T5003] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.359338][ T5003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.391467][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.422663][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.434200][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.441417][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.470442][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.477606][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.541091][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.559739][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.566894][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.612841][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.663296][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.676886][ T5840] Bluetooth: hci0: command tx timeout [ 75.734202][ T5829] veth0_vlan: entered promiscuous mode [ 75.756467][ T5840] Bluetooth: hci1: command tx timeout [ 75.756473][ T5842] Bluetooth: hci2: command tx timeout [ 75.777920][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.810382][ T5829] veth1_vlan: entered promiscuous mode [ 75.888723][ T5839] veth0_vlan: entered promiscuous mode [ 75.902431][ T5829] veth0_macvtap: entered promiscuous mode [ 75.913844][ T5839] veth1_vlan: entered promiscuous mode [ 75.922211][ T5840] Bluetooth: hci4: command tx timeout [ 75.927852][ T5840] Bluetooth: hci3: command tx timeout [ 75.948976][ T5829] veth1_macvtap: entered promiscuous mode [ 75.985579][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.041295][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.062752][ T5839] veth0_macvtap: entered promiscuous mode [ 76.119152][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.139997][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.151716][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.161003][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.176709][ T5839] veth1_macvtap: entered promiscuous mode [ 76.199605][ T5832] veth0_vlan: entered promiscuous mode [ 76.261099][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.269661][ T5832] veth1_vlan: entered promiscuous mode [ 76.291960][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.339115][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.360753][ T5832] veth0_macvtap: entered promiscuous mode [ 76.411372][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.421380][ T5832] veth1_macvtap: entered promiscuous mode [ 76.459299][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.468243][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.477941][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.486697][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.520423][ T5843] veth0_vlan: entered promiscuous mode [ 76.531344][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.540994][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.547012][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.581608][ T5847] veth0_vlan: entered promiscuous mode [ 76.588985][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.600611][ T5843] veth1_vlan: entered promiscuous mode [ 76.641951][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.650940][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.659947][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.668768][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.682868][ T5847] veth1_vlan: entered promiscuous mode [ 76.692643][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.704011][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.745711][ T30] audit: type=1400 audit(1752427773.334:87): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.9FU3WN/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.770550][ T30] audit: type=1400 audit(1752427773.334:88): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.795681][ T30] audit: type=1400 audit(1752427773.344:89): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.9FU3WN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.811446][ T5847] veth0_macvtap: entered promiscuous mode [ 76.827846][ T30] audit: type=1400 audit(1752427773.344:90): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.854455][ T30] audit: type=1400 audit(1752427773.344:91): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.9FU3WN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.882494][ T30] audit: type=1400 audit(1752427773.344:92): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.9FU3WN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.884011][ T5843] veth0_macvtap: entered promiscuous mode [ 76.919532][ T30] audit: type=1400 audit(1752427773.344:93): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.951637][ T30] audit: type=1400 audit(1752427773.394:94): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.977883][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.981138][ T30] audit: type=1400 audit(1752427773.394:95): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="gadgetfs" ino=6315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.017446][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.026627][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.038977][ T5847] veth1_macvtap: entered promiscuous mode [ 77.047612][ T30] audit: type=1400 audit(1752427773.394:96): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.081731][ T5843] veth1_macvtap: entered promiscuous mode [ 77.168581][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.180723][ T964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.198184][ T964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.205951][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.215139][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.235174][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.243891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.307441][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.329836][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.339202][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.351603][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.362304][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.373772][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.382708][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.387137][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.401352][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.410948][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.427715][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.573477][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.744190][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.763465][ T5840] Bluetooth: hci0: command tx timeout [ 77.778412][ T5885] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 77.788159][ T5954] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.797704][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.805666][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.824557][ T5885] usb 2-1: config 0 has no interface number 0 [ 77.830983][ T5885] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 183, changing to 7 [ 77.842762][ T5840] Bluetooth: hci1: command tx timeout [ 77.846171][ T5842] Bluetooth: hci2: command tx timeout [ 77.849738][ T5954] Zero length message leads to an empty skb [ 77.880026][ T5885] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 77.904002][ T964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.914511][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.914562][ T5885] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 77.938061][ T964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.941021][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.954947][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.980260][ T5885] usb 2-1: config 0 descriptor?? [ 77.996546][ T5840] Bluetooth: hci4: command tx timeout [ 77.996745][ T5842] Bluetooth: hci3: command tx timeout [ 78.030342][ T5885] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 78.058044][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.082703][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.106364][ T5947] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.200330][ T5949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.225053][ T13] usb 2-1: Failed to submit usb control message: -71 [ 78.226094][ T5888] usb 2-1: USB disconnect, device number 2 [ 78.243625][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 78.263953][ T13] usb 2-1: unable to get target info from device [ 78.297760][ T13] usb 2-1: could not get target info (-71) [ 78.311357][ T13] usb 2-1: could not probe fw (-71) [ 78.365907][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 78.379214][ T5947] usb 5-1: config 2 has an invalid interface number: 173 but max is 0 [ 78.386414][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.423911][ T5947] usb 5-1: config 2 has no interface number 0 [ 78.442944][ T5947] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 78.454711][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.463727][ T5947] usb 5-1: Product: syz [ 78.470413][ T5947] usb 5-1: Manufacturer: syz [ 78.479415][ T5947] usb 5-1: SerialNumber: syz [ 78.558319][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.586458][ T5885] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.596617][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.639355][ T5885] usb 1-1: config 0 descriptor?? [ 78.878488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.890061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.900698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.089477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.192048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.384839][ T5947] option 5-1:2.173: GSM modem (1-port) converter detected [ 79.402552][ T5947] usb 5-1: USB disconnect, device number 2 [ 79.410802][ T5947] option 5-1:2.173: device disconnected [ 79.495889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.607538][ T5973] geneve2: entered promiscuous mode [ 79.624113][ T5977] mmap: syz.2.7 (5977) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.635662][ T5973] geneve2: entered allmulticast mode [ 79.647148][ T5885] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 79.674362][ T5977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 79.692244][ T5885] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 79.725626][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 79.735148][ T5976] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.9'. [ 79.837507][ T5840] Bluetooth: hci0: command tx timeout [ 79.898308][ T5915] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.916159][ T5840] Bluetooth: hci1: command tx timeout [ 79.919315][ T5842] Bluetooth: hci2: command tx timeout [ 79.971316][ T5885] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 80.067592][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.078610][ T5842] Bluetooth: hci4: command tx timeout [ 80.085978][ T5842] Bluetooth: hci3: command tx timeout [ 80.104235][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.149618][ T5915] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 80.176960][ T975] usb 1-1: USB disconnect, device number 2 [ 80.211394][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.324542][ T5915] usb 2-1: config 0 descriptor?? [ 80.363108][ T5986] fido_id[5986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 80.795603][ T5915] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 80.876116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.957107][ T6001] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13'. [ 80.967112][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 80.976210][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 81.035901][ T5915] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 81.256360][ T92] cfg80211: failed to load regulatory.db [ 81.264769][ T5915] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 81.437294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 81.546093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.585998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.823954][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.832070][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.300337][ T5915] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 82.312177][ T5915] usb 2-1: USB disconnect, device number 3 [ 82.336643][ T6003] fido_id[6003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 82.431488][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 82.431505][ T30] audit: type=1400 audit(1752427779.024:155): avc: denied { create } for pid=6013 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.557736][ T30] audit: type=1400 audit(1752427779.054:156): avc: denied { setopt } for pid=6013 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.283563][ T30] audit: type=1400 audit(1752427779.874:157): avc: denied { execute } for pid=6016 comm="syz.2.15" path="/5/cpu.stat" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.451330][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.468948][ T30] audit: type=1400 audit(1752427780.064:158): avc: denied { bind } for pid=6023 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.086319][ T30] audit: type=1400 audit(1752427780.314:159): avc: denied { kexec_image_load } for pid=6023 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 84.089028][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.105984][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.145552][ T30] audit: type=1400 audit(1752427780.334:160): avc: denied { unlink } for pid=6023 comm="syz.1.18" name="#1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.322090][ T30] audit: type=1400 audit(1752427780.344:161): avc: denied { mount } for pid=6023 comm="syz.1.18" name="/" dev="overlay" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.475372][ T30] audit: type=1400 audit(1752427780.354:162): avc: denied { create } for pid=6023 comm="syz.1.18" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.516045][ T30] audit: type=1400 audit(1752427780.354:163): avc: denied { rename } for pid=6023 comm="syz.1.18" name="file1" dev="overlay" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.538310][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.659106][ T30] audit: type=1400 audit(1752427780.354:164): avc: denied { unlink } for pid=6023 comm="syz.1.18" name="file1" dev="overlay" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.668936][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 84.806490][ T6006] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.840859][ T6006] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.870084][ T6006] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.879857][ T6006] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.003128][ T6028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.133179][ T6028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.215155][ T6028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.493644][ T6028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.684692][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'. [ 85.701373][ T6043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=6043 comm=syz.0.22 [ 86.032367][ T6028] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.049855][ T6028] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.067425][ T6028] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.084015][ T6028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.559826][ T6047] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23'. [ 86.577658][ T6047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=6047 comm=syz.4.23 [ 86.802268][ T6051] FAULT_INJECTION: forcing a failure. [ 86.802268][ T6051] name failslab, interval 1, probability 0, space 0, times 1 [ 86.818409][ T6051] CPU: 1 UID: 0 PID: 6051 Comm: syz.1.24 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 86.818436][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.818446][ T6051] Call Trace: [ 86.818452][ T6051] [ 86.818459][ T6051] dump_stack_lvl+0x16c/0x1f0 [ 86.818488][ T6051] should_fail_ex+0x512/0x640 [ 86.818511][ T6051] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 86.818534][ T6051] should_failslab+0xc2/0x120 [ 86.818559][ T6051] __kmalloc_cache_noprof+0x6a/0x3e0 [ 86.818580][ T6051] ? p9_client_create+0xc7/0x11c0 [ 86.818610][ T6051] p9_client_create+0xc7/0x11c0 [ 86.818642][ T6051] ? __pfx_p9_client_create+0x10/0x10 [ 86.818673][ T6051] ? rcu_is_watching+0x12/0xc0 [ 86.818697][ T6051] ? trace_kmalloc+0x2b/0xd0 [ 86.818722][ T6051] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 86.818746][ T6051] ? kasan_save_stack+0x33/0x60 [ 86.818767][ T6051] ? kasan_save_track+0x14/0x30 [ 86.818787][ T6051] ? __kasan_kmalloc+0x71/0xb0 [ 86.818809][ T6051] ? lockdep_init_map_type+0x5c/0x280 [ 86.818827][ T6051] ? __raw_spin_lock_init+0x3a/0x110 [ 86.818858][ T6051] v9fs_session_init+0x1f7/0x1a80 [ 86.818901][ T6051] ? __pfx_v9fs_session_init+0x10/0x10 [ 86.818948][ T6051] v9fs_mount+0xc5/0xa30 [ 86.818969][ T6051] ? __pfx_v9fs_mount+0x10/0x10 [ 86.818991][ T6051] ? cap_capable+0xb3/0x250 [ 86.819012][ T6051] ? __pfx_v9fs_mount+0x10/0x10 [ 86.819031][ T6051] legacy_get_tree+0x10c/0x220 [ 86.819058][ T6051] vfs_get_tree+0x8b/0x340 [ 86.819077][ T6051] path_mount+0x1414/0x2020 [ 86.819105][ T6051] ? kmem_cache_free+0x2d1/0x4d0 [ 86.819126][ T6051] ? __pfx_path_mount+0x10/0x10 [ 86.819156][ T6051] ? putname+0x154/0x1a0 [ 86.819175][ T6051] __x64_sys_mount+0x28d/0x310 [ 86.819203][ T6051] ? __pfx___x64_sys_mount+0x10/0x10 [ 86.819236][ T6051] do_syscall_64+0xcd/0x4c0 [ 86.819263][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.819280][ T6051] RIP: 0033:0x7f316778e929 [ 86.819295][ T6051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.819311][ T6051] RSP: 002b:00007f31686c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.819327][ T6051] RAX: ffffffffffffffda RBX: 00007f31679b5fa0 RCX: 00007f316778e929 [ 86.819339][ T6051] RDX: 0000200000000080 RSI: 00002000000002c0 RDI: 0000000000000000 [ 86.819349][ T6051] RBP: 00007f31686c1090 R08: 0000200000000400 R09: 0000000000000000 [ 86.819364][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.819374][ T6051] R13: 0000000000000000 R14: 00007f31679b5fa0 R15: 00007ffe99345d18 [ 86.819397][ T6051] [ 87.086324][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.872465][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 87.872480][ T30] audit: type=1400 audit(1752427784.464:172): avc: denied { create } for pid=6057 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.493627][ T30] audit: type=1400 audit(1752427784.474:173): avc: denied { create } for pid=6059 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.578630][ T30] audit: type=1400 audit(1752427784.484:174): avc: denied { create } for pid=6059 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.667387][ T6062] No buffer was provided with the request [ 88.871683][ T6060] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.892225][ T6060] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 88.975868][ T30] audit: type=1400 audit(1752427784.484:175): avc: denied { create } for pid=6059 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.064538][ T30] audit: type=1400 audit(1752427784.564:176): avc: denied { write } for pid=6054 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.121499][ T30] audit: type=1400 audit(1752427785.334:177): avc: denied { bind } for pid=6057 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.132215][ T6071] ======================================================= [ 89.132215][ T6071] WARNING: The mand mount option has been deprecated and [ 89.132215][ T6071] and is ignored by this kernel. Remove the mand [ 89.132215][ T6071] option from the mount to silence this warning. [ 89.132215][ T6071] ======================================================= [ 89.222351][ T6071] FAULT_INJECTION: forcing a failure. [ 89.222351][ T6071] name failslab, interval 1, probability 0, space 0, times 0 [ 89.293627][ T30] audit: type=1400 audit(1752427785.334:178): avc: denied { name_bind } for pid=6057 comm="syz.0.27" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.316116][ T30] audit: type=1400 audit(1752427785.334:179): avc: denied { node_bind } for pid=6057 comm="syz.0.27" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 89.335955][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.4.29 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 89.335979][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.335988][ T6071] Call Trace: [ 89.335993][ T6071] [ 89.335999][ T6071] dump_stack_lvl+0x16c/0x1f0 [ 89.336025][ T6071] should_fail_ex+0x512/0x640 [ 89.336050][ T6071] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 89.336071][ T6071] should_failslab+0xc2/0x120 [ 89.336093][ T6071] __kmalloc_cache_noprof+0x6a/0x3e0 [ 89.336111][ T6071] ? alloc_fs_context+0x57/0x9c0 [ 89.336137][ T6071] alloc_fs_context+0x57/0x9c0 [ 89.336164][ T6071] path_mount+0xaf8/0x2020 [ 89.336188][ T6071] ? kmem_cache_free+0x2d1/0x4d0 [ 89.336207][ T6071] ? __pfx_path_mount+0x10/0x10 [ 89.336233][ T6071] ? putname+0x154/0x1a0 [ 89.336250][ T6071] __x64_sys_mount+0x28d/0x310 [ 89.336273][ T6071] ? __pfx___x64_sys_mount+0x10/0x10 [ 89.336304][ T6071] do_syscall_64+0xcd/0x4c0 [ 89.336327][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.336342][ T6071] RIP: 0033:0x7efca958e929 [ 89.336354][ T6071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.336368][ T6071] RSP: 002b:00007efcaa452038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.336383][ T6071] RAX: ffffffffffffffda RBX: 00007efca97b6080 RCX: 00007efca958e929 [ 89.336392][ T6071] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 89.336401][ T6071] RBP: 00007efcaa452090 R08: 0000000000000000 R09: 0000000000000000 [ 89.336410][ T6071] R10: 00000000000000c2 R11: 0000000000000246 R12: 0000000000000001 [ 89.336418][ T6071] R13: 0000000000000000 R14: 00007efca97b6080 R15: 00007ffc27326dc8 [ 89.336438][ T6071] [ 89.345963][ T975] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.351368][ T30] audit: type=1400 audit(1752427785.354:180): avc: denied { write } for pid=6057 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.856176][ T30] audit: type=1400 audit(1752427785.634:181): avc: denied { create } for pid=6065 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.020341][ T6085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.116599][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 90.123568][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.139653][ T975] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 90.175942][ T975] usb 2-1: config 7 has no interface number 0 [ 90.182097][ T975] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 90.205950][ T975] usb 2-1: config 7 interface 187 has no altsetting 0 [ 90.218051][ T975] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 90.256438][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.264481][ T975] usb 2-1: Product: syz [ 90.272017][ T975] usb 2-1: Manufacturer: syz [ 90.286442][ T975] usb 2-1: SerialNumber: syz [ 90.293987][ T6067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.596377][ T975] usb 2-1: Limiting number of CPorts to U8_MAX [ 90.621672][ T975] usb 2-1: Unknown endpoint type found, address 0x07 [ 90.639948][ T975] usb 2-1: Not enough endpoints found in device, aborting! [ 90.656646][ T6105] siw: device registration error -23 [ 90.849466][ T5947] usb 2-1: USB disconnect, device number 4 [ 90.916216][ T5941] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.078511][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 91.090440][ T5941] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.101087][ T5941] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 91.118234][ T5941] usb 4-1: config 7 has no interface number 0 [ 91.124571][ T5941] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 91.138514][ T5941] usb 4-1: config 7 interface 187 has no altsetting 0 [ 91.151240][ T5941] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 91.163571][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.175707][ T5941] usb 4-1: Product: syz [ 91.182938][ T5941] usb 4-1: Manufacturer: syz [ 91.187929][ T5941] usb 4-1: SerialNumber: syz [ 91.204339][ T6105] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.427967][ T5941] usb 4-1: Limiting number of CPorts to U8_MAX [ 91.464849][ T5941] usb 4-1: Unknown endpoint type found, address 0x07 [ 91.492059][ T5941] usb 4-1: Not enough endpoints found in device, aborting! [ 91.571378][ T6123] FAULT_INJECTION: forcing a failure. [ 91.571378][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 91.585444][ T6123] CPU: 1 UID: 0 PID: 6123 Comm: syz.0.44 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 91.585471][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.585481][ T6123] Call Trace: [ 91.585487][ T6123] [ 91.585494][ T6123] dump_stack_lvl+0x16c/0x1f0 [ 91.585524][ T6123] should_fail_ex+0x512/0x640 [ 91.585546][ T6123] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 91.585570][ T6123] should_failslab+0xc2/0x120 [ 91.585596][ T6123] __kmalloc_cache_noprof+0x6a/0x3e0 [ 91.585615][ T6123] ? lockdep_init_map_type+0x5c/0x280 [ 91.585632][ T6123] ? tracefs_init_fs_context+0x43/0x110 [ 91.585659][ T6123] ? __pfx_tracefs_init_fs_context+0x10/0x10 [ 91.585681][ T6123] tracefs_init_fs_context+0x43/0x110 [ 91.585704][ T6123] ? __pfx_tracefs_init_fs_context+0x10/0x10 [ 91.585728][ T6123] alloc_fs_context+0x54a/0x9c0 [ 91.585757][ T6123] path_mount+0xaf8/0x2020 [ 91.585785][ T6123] ? kmem_cache_free+0x2d1/0x4d0 [ 91.585805][ T6123] ? __pfx_path_mount+0x10/0x10 [ 91.585833][ T6123] ? putname+0x154/0x1a0 [ 91.585852][ T6123] __x64_sys_mount+0x28d/0x310 [ 91.585879][ T6123] ? __pfx___x64_sys_mount+0x10/0x10 [ 91.585912][ T6123] do_syscall_64+0xcd/0x4c0 [ 91.585938][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.585955][ T6123] RIP: 0033:0x7f9848f8e929 [ 91.585969][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.585984][ T6123] RSP: 002b:00007f9849d10038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.586000][ T6123] RAX: ffffffffffffffda RBX: 00007f98491b6080 RCX: 00007f9848f8e929 [ 91.586011][ T6123] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 91.586021][ T6123] RBP: 00007f9849d10090 R08: 0000000000000000 R09: 0000000000000000 [ 91.586031][ T6123] R10: 00000000000000c2 R11: 0000000000000246 R12: 0000000000000002 [ 91.586045][ T6123] R13: 0000000000000000 R14: 00007f98491b6080 R15: 00007fff26d53508 [ 91.586069][ T6123] [ 91.901818][ T5941] usb 4-1: USB disconnect, device number 2 [ 92.617611][ T6130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.745875][ T5885] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.909370][ T5885] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 92.922490][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.933263][ T5885] usb 3-1: config 0 has no interface number 0 [ 92.944646][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 92.954776][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.967117][ T5885] usb 3-1: Product: syz [ 92.971637][ T5885] usb 3-1: Manufacturer: syz [ 92.979365][ T5885] usb 3-1: SerialNumber: syz [ 93.122964][ T5885] usb 3-1: config 0 descriptor?? [ 93.136483][ T5885] hub 3-1:0.31: bad descriptor, ignoring hub [ 93.142542][ T5885] hub 3-1:0.31: probe with driver hub failed with error -5 [ 93.154490][ T5885] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 93.161253][ T5885] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 93.172853][ T5885] usb 3-1: Failed to create links for entity 6 [ 93.401642][ T6156] Bluetooth: MGMT ver 1.23 [ 93.408426][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 93.408455][ T30] audit: type=1400 audit(1752427789.974:205): avc: denied { append } for pid=6151 comm="syz.0.56" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.449312][ T6128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.450811][ T30] audit: type=1400 audit(1752427789.984:206): avc: denied { bind } for pid=6151 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.460270][ T5885] usb 3-1: Failed to register entities (-22). [ 93.478563][ T30] audit: type=1400 audit(1752427789.994:207): avc: denied { write } for pid=6151 comm="syz.0.56" path="socket:[9278]" dev="sockfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.495763][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.514829][ T30] audit: type=1400 audit(1752427790.074:208): avc: denied { create } for pid=6127 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.519038][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.546892][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.619744][ T30] audit: type=1400 audit(1752427790.214:209): avc: denied { mounton } for pid=6160 comm="syz.1.58" path="/9/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.716162][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 93.723675][ T5915] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 93.734493][ T5915] usb 5-1: config 1 has no interface number 0 [ 93.743887][ T5915] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 93.787944][ T5941] usb 3-1: USB disconnect, device number 2 [ 93.820686][ T5915] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.832028][ T5915] usb 5-1: config 1 interface 105 has no altsetting 0 [ 93.845002][ T5915] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 93.888952][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.920332][ T5915] usb 5-1: Product: syz [ 93.932975][ T30] audit: type=1400 audit(1752427790.524:210): avc: denied { create } for pid=6166 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 93.956610][ T5915] usb 5-1: Manufacturer: syz [ 93.968454][ T5915] usb 5-1: SerialNumber: syz [ 93.979965][ T6169] siw: device registration error -23 [ 93.989651][ T6170] FAULT_INJECTION: forcing a failure. [ 93.989651][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 93.990510][ T6150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.016539][ T6150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.017579][ T30] audit: type=1400 audit(1752427790.554:211): avc: denied { write } for pid=6166 comm="syz.3.61" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.055852][ T30] audit: type=1400 audit(1752427790.554:212): avc: denied { open } for pid=6166 comm="syz.3.61" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.078983][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.0.62 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 94.079012][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.079022][ T6170] Call Trace: [ 94.079027][ T6170] [ 94.079033][ T6170] dump_stack_lvl+0x16c/0x1f0 [ 94.079062][ T6170] should_fail_ex+0x512/0x640 [ 94.079085][ T6170] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 94.079113][ T6170] should_failslab+0xc2/0x120 [ 94.079138][ T6170] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 94.079159][ T6170] ? alloc_vfsmnt+0x23/0x730 [ 94.079179][ T6170] alloc_vfsmnt+0x23/0x730 [ 94.079197][ T6170] vfs_create_mount.part.0+0x44/0x4b0 [ 94.079220][ T6170] path_mount+0x1a9e/0x2020 [ 94.079245][ T6170] ? kmem_cache_free+0x2d1/0x4d0 [ 94.079265][ T6170] ? __pfx_path_mount+0x10/0x10 [ 94.079293][ T6170] ? putname+0x154/0x1a0 [ 94.079312][ T6170] __x64_sys_mount+0x28d/0x310 [ 94.079337][ T6170] ? __pfx___x64_sys_mount+0x10/0x10 [ 94.079370][ T6170] do_syscall_64+0xcd/0x4c0 [ 94.079396][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.079414][ T6170] RIP: 0033:0x7f9848f8e929 [ 94.079429][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.079444][ T6170] RSP: 002b:00007f9849d10038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.079461][ T6170] RAX: ffffffffffffffda RBX: 00007f98491b6080 RCX: 00007f9848f8e929 [ 94.079472][ T6170] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 94.079482][ T6170] RBP: 00007f9849d10090 R08: 0000000000000000 R09: 0000000000000000 [ 94.079492][ T6170] R10: 00000000000000c2 R11: 0000000000000246 R12: 0000000000000002 [ 94.079502][ T6170] R13: 0000000000000000 R14: 00007f98491b6080 R15: 00007fff26d53508 [ 94.079525][ T6170] [ 94.083395][ T30] audit: type=1400 audit(1752427790.564:213): avc: denied { ioctl } for pid=6166 comm="syz.3.61" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.342607][ T30] audit: type=1400 audit(1752427790.934:214): avc: denied { write } for pid=6171 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.355843][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.535935][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 94.573691][ T6150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.682569][ T6150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.697984][ T5941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.717110][ T5941] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 94.740359][ T5941] usb 3-1: config 7 has no interface number 0 [ 94.747270][ T5941] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 94.757539][ T5941] usb 3-1: config 7 interface 187 has no altsetting 0 [ 94.769350][ T5941] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 94.778634][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.792909][ T5941] usb 3-1: Product: syz [ 94.817204][ T5941] usb 3-1: Manufacturer: syz [ 94.838773][ T5941] usb 3-1: SerialNumber: syz [ 94.870162][ T6169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.015981][ T5915] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 95.027107][ T5915] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 95.041715][ T6175] capability: warning: `syz.1.59' uses 32-bit capabilities (legacy support in use) [ 95.525986][ T5840] Bluetooth: hci0: command 0x0401 tx timeout [ 95.535960][ T5842] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 95.685895][ T5941] usb 3-1: Cannot retrieve CPort count: -110 [ 95.696481][ T5941] usb 3-1: Cannot retrieve CPort count: -110 [ 95.754758][ T5941] es2_ap_driver 3-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 95.797380][ T5915] usb 5-1: USB disconnect, device number 3 [ 96.153287][ T6193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6193 comm=syz.1.67 [ 96.169112][ T6193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6193 comm=syz.1.67 [ 96.535915][ T5915] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.697752][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.714359][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.731661][ T5915] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 96.742667][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.762963][ T5915] usb 1-1: config 0 descriptor?? [ 96.924973][ T975] usb 3-1: USB disconnect, device number 3 [ 97.620254][ T5915] cp2112 0003:10C4:EA90.0003: unknown global tag 0xc [ 97.631069][ T5915] cp2112 0003:10C4:EA90.0003: item 0 0 1 12 parsing failed [ 97.639160][ T5915] cp2112 0003:10C4:EA90.0003: parse failed [ 97.645110][ T5915] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -22 [ 98.010528][ T6231] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1 [ 98.046423][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.054745][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.265430][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 98.440424][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 98.440443][ T30] audit: type=1400 audit(1752427794.944:246): avc: denied { execmem } for pid=6243 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 99.189389][ T30] audit: type=1400 audit(1752427795.454:247): avc: denied { allowed } for pid=6243 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.285834][ T30] audit: type=1400 audit(1752427795.454:248): avc: denied { create } for pid=6243 comm="syz.1.84" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.319664][ T92] usb 1-1: USB disconnect, device number 3 [ 99.404499][ T30] audit: type=1400 audit(1752427795.654:249): avc: denied { read } for pid=6243 comm="syz.1.84" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.523155][ T30] audit: type=1400 audit(1752427795.654:250): avc: denied { open } for pid=6243 comm="syz.1.84" path="net:[4026532810]" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.546742][ T30] audit: type=1400 audit(1752427795.654:251): avc: denied { create } for pid=6243 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.606254][ T30] audit: type=1400 audit(1752427795.784:252): avc: denied { write } for pid=6243 comm="syz.1.84" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.632430][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6253 comm=syz.0.86 [ 99.645139][ T6253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6253 comm=syz.0.86 [ 99.785336][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 100.140117][ T30] audit: type=1400 audit(1752427795.834:253): avc: denied { mounton } for pid=6243 comm="syz.1.84" path="/15/file0" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.196764][ T30] audit: type=1400 audit(1752427795.834:254): avc: denied { mount } for pid=6243 comm="syz.1.84" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.219023][ T30] audit: type=1400 audit(1752427795.984:255): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.222570][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.435854][ T5885] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 100.460355][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.599906][ T5885] usb 3-1: not running at top speed; connect to a high speed hub [ 101.066450][ T5885] usb 3-1: config 4 has an invalid interface number: 20 but max is 0 [ 101.074565][ T5885] usb 3-1: config 4 has no interface number 0 [ 101.096027][ T5885] usb 3-1: config 4 interface 20 altsetting 128 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 101.160746][ T5885] usb 3-1: config 4 interface 20 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 101.212610][ T5885] usb 3-1: config 4 interface 20 altsetting 128 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 101.225058][ T5885] usb 3-1: config 4 interface 20 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 101.323041][ T5885] usb 3-1: config 4 interface 20 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 101.336450][ T5885] usb 3-1: config 4 interface 20 has no altsetting 0 [ 101.377181][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.406563][ T5885] usb 3-1: New USB device found, idVendor=1fe1, idProduct=5456, bcdDevice=f7.4b [ 101.418234][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.430764][ T6270] block nbd0: NBD_DISCONNECT [ 101.451286][ T5885] usb 3-1: Product: syz [ 101.455505][ T5885] usb 3-1: Manufacturer: syz [ 101.480573][ T5885] usb 3-1: SerialNumber: syz [ 101.557433][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.577808][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.586607][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.598675][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.606893][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.615011][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.835229][ T5885] dvb-usb: found a 'GOTVIEW Satellite HD' in warm state. [ 101.867926][ T5885] dw2102: su3000_power_ctrl: 1, initialized 0 [ 101.904012][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 101.960289][ T5885] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 101.971759][ T975] IPVS: starting estimator thread 0... [ 102.027408][ T6285] xt_hashlimit: max too large, truncated to 1048576 [ 102.034577][ T5885] dvb-usb: GOTVIEW Satellite HD error while loading driver (-19) [ 102.034987][ T13] bridge_slave_1: left allmulticast mode [ 102.082024][ T5885] usb 3-1: USB disconnect, device number 4 [ 102.096239][ T6283] IPVS: using max 42 ests per chain, 100800 per kthread [ 102.118955][ T13] bridge_slave_1: left promiscuous mode [ 102.130149][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.239153][ T13] bridge_slave_0: left allmulticast mode [ 102.244815][ T13] bridge_slave_0: left promiscuous mode [ 102.282897][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.321705][ T6282] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:0 [ 102.541662][ T6291] siw: device registration error -23 [ 102.984088][ T6302] sctp: [Deprecated]: syz.2.97 (pid 6302) Use of int in max_burst socket option deprecated. [ 102.984088][ T6302] Use struct sctp_assoc_value instead [ 103.304971][ T6305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6305 comm=syz.1.100 [ 103.317878][ T6305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6305 comm=syz.1.100 [ 103.551269][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.580396][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.604268][ T13] bond0 (unregistering): Released all slaves [ 103.613546][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 103.613560][ T30] audit: type=1400 audit(1752427800.214:327): avc: denied { read } for pid=6309 comm="syz.0.102" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.644322][ T30] audit: type=1400 audit(1752427800.214:328): avc: denied { open } for pid=6309 comm="syz.0.102" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.648250][ T6310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.669354][ T30] audit: type=1400 audit(1752427800.234:329): avc: denied { ioctl } for pid=6309 comm="syz.0.102" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.685410][ T5842] Bluetooth: hci1: command tx timeout [ 103.701248][ T6311] FAULT_INJECTION: forcing a failure. [ 103.701248][ T6311] name failslab, interval 1, probability 0, space 0, times 0 [ 103.719354][ T6311] CPU: 1 UID: 0 PID: 6311 Comm: syz.0.102 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 103.719380][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.719390][ T6311] Call Trace: [ 103.719395][ T6311] [ 103.719402][ T6311] dump_stack_lvl+0x16c/0x1f0 [ 103.719430][ T6311] should_fail_ex+0x512/0x640 [ 103.719453][ T6311] ? fs_reclaim_acquire+0xae/0x150 [ 103.719473][ T6311] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 103.719496][ T6311] should_failslab+0xc2/0x120 [ 103.719522][ T6311] __kmalloc_noprof+0xd2/0x510 [ 103.719551][ T6311] tomoyo_realpath_from_path+0xc2/0x6e0 [ 103.719578][ T6311] ? tomoyo_profile+0x47/0x60 [ 103.719607][ T6311] tomoyo_path_number_perm+0x245/0x580 [ 103.719627][ T6311] ? tomoyo_path_number_perm+0x237/0x580 [ 103.719650][ T6311] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.719672][ T6311] ? find_held_lock+0x2b/0x80 [ 103.719727][ T6311] ? find_held_lock+0x2b/0x80 [ 103.719748][ T6311] ? hook_file_ioctl_common+0x145/0x410 [ 103.719770][ T6311] ? __fget_files+0x20e/0x3c0 [ 103.719798][ T6311] security_file_ioctl+0x9b/0x240 [ 103.719824][ T6311] __x64_sys_ioctl+0xb7/0x210 [ 103.719846][ T6311] do_syscall_64+0xcd/0x4c0 [ 103.719873][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.719890][ T6311] RIP: 0033:0x7f9848f8e929 [ 103.719904][ T6311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.719920][ T6311] RSP: 002b:00007f9849d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.719936][ T6311] RAX: ffffffffffffffda RBX: 00007f98491b6080 RCX: 00007f9848f8e929 [ 103.719946][ T6311] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 103.719956][ T6311] RBP: 00007f9849d10090 R08: 0000000000000000 R09: 0000000000000000 [ 103.719965][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.719973][ T6311] R13: 0000000000000000 R14: 00007f98491b6080 R15: 00007fff26d53508 [ 103.719997][ T6311] [ 103.720004][ T6311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.027317][ T30] audit: type=1400 audit(1752427800.604:330): avc: denied { create } for pid=6313 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.090995][ T30] audit: type=1400 audit(1752427800.614:331): avc: denied { connect } for pid=6313 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.110984][ T30] audit: type=1400 audit(1752427800.614:332): avc: denied { write } for pid=6313 comm="syz.2.103" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.160562][ T30] audit: type=1400 audit(1752427800.674:333): avc: denied { search } for pid=6312 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.215800][ T30] audit: type=1400 audit(1752427800.784:334): avc: denied { create } for pid=6319 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.256313][ T30] audit: type=1400 audit(1752427800.784:335): avc: denied { write } for pid=6319 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.276489][ T5885] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.325827][ T30] audit: type=1400 audit(1752427800.784:336): avc: denied { nlmsg_write } for pid=6319 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.404087][ T6274] chnl_net:caif_netlink_parms(): no params data found [ 104.455876][ T5885] usb 3-1: device descriptor read/64, error -71 [ 104.697983][ T13] hsr_slave_0: left promiscuous mode [ 104.728048][ T5885] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.738186][ T13] hsr_slave_1: left promiscuous mode [ 104.764599][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.794464][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.819160][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.835870][ T5962] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 104.837187][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.891943][ T13] veth1_macvtap: left promiscuous mode [ 104.905289][ T13] veth0_macvtap: left promiscuous mode [ 104.908131][ T5885] usb 3-1: device descriptor read/64, error -71 [ 104.922674][ T13] veth1_vlan: left promiscuous mode [ 104.928395][ T13] veth0_vlan: left promiscuous mode [ 104.993237][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.004834][ T5962] usb 1-1: not running at top speed; connect to a high speed hub [ 105.013817][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.021783][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.029652][ T5885] usb usb3-port1: attempt power cycle [ 105.035288][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.044573][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.056259][ T975] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.065261][ T5962] usb 1-1: config 4 has an invalid interface number: 20 but max is 0 [ 105.073477][ T5962] usb 1-1: config 4 has no interface number 0 [ 105.084432][ T5962] usb 1-1: config 4 interface 20 altsetting 128 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 105.102114][ T5962] usb 1-1: config 4 interface 20 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 105.114113][ T5962] usb 1-1: config 4 interface 20 altsetting 128 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 105.128558][ T5962] usb 1-1: config 4 interface 20 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 105.140073][ T5962] usb 1-1: config 4 interface 20 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 105.151814][ T5962] usb 1-1: config 4 interface 20 has no altsetting 0 [ 105.160504][ T5962] usb 1-1: New USB device found, idVendor=1fe1, idProduct=5456, bcdDevice=f7.4b [ 105.169627][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.177840][ T5962] usb 1-1: Product: syz [ 105.182017][ T5962] usb 1-1: Manufacturer: syz [ 105.186671][ T5962] usb 1-1: SerialNumber: syz [ 105.236090][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 105.244553][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.253933][ T975] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 105.265295][ T975] usb 2-1: config 7 has no interface number 0 [ 105.272262][ T975] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 105.283804][ T975] usb 2-1: config 7 interface 187 has no altsetting 0 [ 105.293381][ T975] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 105.304817][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.313006][ T975] usb 2-1: Product: syz [ 105.318420][ T975] usb 2-1: Manufacturer: syz [ 105.324929][ T975] usb 2-1: SerialNumber: syz [ 105.341320][ T6341] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 105.395952][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.417746][ T5962] dvb-usb: found a 'GOTVIEW Satellite HD' in warm state. [ 105.428666][ T5962] dw2102: su3000_power_ctrl: 1, initialized 0 [ 105.434803][ T5962] dvb-usb: bulk message failed: -22 (2/0) [ 105.455047][ T5885] usb 3-1: device descriptor read/8, error -71 [ 105.464234][ T5962] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 105.475461][ T13] team0 (unregistering): Port device team_slave_1 removed [ 105.485619][ T5962] dvb-usb: GOTVIEW Satellite HD error while loading driver (-19) [ 105.510479][ T5962] usb 1-1: USB disconnect, device number 4 [ 105.522963][ T13] team0 (unregistering): Port device team_slave_0 removed [ 105.796638][ T5840] Bluetooth: hci1: command tx timeout [ 105.866016][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 105.880530][ T975] usb 2-1: Cannot retrieve CPort count: -110 [ 105.910103][ T975] usb 2-1: Cannot retrieve CPort count: -110 [ 105.984043][ T5885] usb 3-1: device descriptor read/8, error -71 [ 106.007833][ T975] es2_ap_driver 2-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 106.136013][ T5885] usb usb3-port1: unable to enumerate USB device [ 106.205004][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 106.235607][ T6349] FAULT_INJECTION: forcing a failure. [ 106.235607][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 106.251320][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.0.110 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 106.251343][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.251353][ T6349] Call Trace: [ 106.251359][ T6349] [ 106.251365][ T6349] dump_stack_lvl+0x16c/0x1f0 [ 106.251393][ T6349] should_fail_ex+0x512/0x640 [ 106.251414][ T6349] ? fs_reclaim_acquire+0xae/0x150 [ 106.251434][ T6349] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 106.251457][ T6349] should_failslab+0xc2/0x120 [ 106.251481][ T6349] __kmalloc_noprof+0xd2/0x510 [ 106.251508][ T6349] tomoyo_realpath_from_path+0xc2/0x6e0 [ 106.251533][ T6349] ? tomoyo_profile+0x47/0x60 [ 106.251561][ T6349] tomoyo_path_number_perm+0x245/0x580 [ 106.251580][ T6349] ? tomoyo_path_number_perm+0x237/0x580 [ 106.251602][ T6349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.251623][ T6349] ? find_held_lock+0x2b/0x80 [ 106.251674][ T6349] ? find_held_lock+0x2b/0x80 [ 106.251694][ T6349] ? hook_file_ioctl_common+0x145/0x410 [ 106.251714][ T6349] ? __fget_files+0x20e/0x3c0 [ 106.251741][ T6349] security_file_ioctl+0x9b/0x240 [ 106.251765][ T6349] __x64_sys_ioctl+0xb7/0x210 [ 106.251787][ T6349] do_syscall_64+0xcd/0x4c0 [ 106.251812][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.251828][ T6349] RIP: 0033:0x7f9848f8e929 [ 106.251841][ T6349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.251857][ T6349] RSP: 002b:00007f9849d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.251872][ T6349] RAX: ffffffffffffffda RBX: 00007f98491b5fa0 RCX: 00007f9848f8e929 [ 106.251882][ T6349] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000004 [ 106.251892][ T6349] RBP: 00007f9849d31090 R08: 0000000000000000 R09: 0000000000000000 [ 106.251900][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.251909][ T6349] R13: 0000000000000000 R14: 00007f98491b5fa0 R15: 00007fff26d53508 [ 106.251931][ T6349] [ 106.251939][ T6349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.500958][ T6347] can: request_module (can-proto-3) failed. [ 107.116051][ T5840] Bluetooth: hci2: command tx timeout [ 107.624921][ T975] usb 2-1: USB disconnect, device number 5 [ 107.798411][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.807149][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.815582][ T6274] bridge_slave_0: entered allmulticast mode [ 107.827101][ T6274] bridge_slave_0: entered promiscuous mode [ 107.835989][ T5840] Bluetooth: hci1: command tx timeout [ 107.891946][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.993804][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.001623][ T6274] bridge_slave_1: entered allmulticast mode [ 108.009286][ T6274] bridge_slave_1: entered promiscuous mode [ 108.039671][ T6373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6373 comm=syz.0.114 [ 108.052453][ T6373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6373 comm=syz.0.114 [ 108.139325][ T6274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.177763][ T6274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.370326][ T6274] team0: Port device team_slave_0 added [ 108.459724][ T6274] team0: Port device team_slave_1 added [ 108.550524][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.576593][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.666384][ T6274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.717390][ T5835] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.863497][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.905282][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.943012][ T6274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.958128][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 108.965087][ T5835] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.008374][ T5835] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 109.016950][ T5835] usb 2-1: config 7 has no interface number 0 [ 109.023341][ T5835] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 109.033232][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 109.033246][ T30] audit: type=1400 audit(1752427805.614:379): avc: denied { mounton } for pid=6397 comm="syz.0.119" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 109.035610][ T6398] syz.0.119: attempt to access beyond end of device [ 109.035610][ T6398] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 109.050155][ T5835] usb 2-1: config 7 interface 187 has no altsetting 0 [ 109.070356][ T6398] qnx6: unable to read the first superblock [ 109.080628][ T5835] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 109.118343][ T6398] syz.0.119: attempt to access beyond end of device [ 109.118343][ T6398] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 109.153805][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.168043][ T6274] hsr_slave_0: entered promiscuous mode [ 109.174369][ T6274] hsr_slave_1: entered promiscuous mode [ 109.182211][ T5835] usb 2-1: Product: syz [ 109.187177][ T5835] usb 2-1: Manufacturer: syz [ 109.191790][ T5835] usb 2-1: SerialNumber: syz [ 109.196588][ T5840] Bluetooth: hci2: command tx timeout [ 109.204085][ T6398] qnx6: unable to read the first superblock [ 109.213806][ T6381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.224130][ T6398] qnx6: unable to read the first superblock [ 109.255035][ T6180] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.347359][ T30] audit: type=1400 audit(1752427805.944:380): avc: denied { accept } for pid=6404 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.413425][ T6180] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.427407][ T5835] usb 2-1: Limiting number of CPorts to U8_MAX [ 109.434399][ T5835] usb 2-1: Unknown endpoint type found, address 0x07 [ 109.441747][ T5835] usb 2-1: Not enough endpoints found in device, aborting! [ 109.488859][ T6344] chnl_net:caif_netlink_parms(): no params data found [ 109.531419][ T6180] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.642638][ T9] usb 2-1: USB disconnect, device number 6 [ 109.737632][ T5941] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 109.773882][ T6180] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.880853][ T6419] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 109.987336][ T5842] Bluetooth: hci1: command tx timeout [ 109.994695][ T1110] Bluetooth: hci5: Frame reassembly failed (-84) [ 110.079202][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.099219][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.122700][ T6344] bridge_slave_0: entered allmulticast mode [ 110.154169][ T6344] bridge_slave_0: entered promiscuous mode [ 110.238509][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.278791][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.321968][ T6344] bridge_slave_1: entered allmulticast mode [ 110.354738][ T6344] bridge_slave_1: entered promiscuous mode [ 110.661306][ T5941] usb 3-1: not running at top speed; connect to a high speed hub [ 110.673389][ T5941] usb 3-1: config 4 has an invalid interface number: 20 but max is 0 [ 110.683007][ T5941] usb 3-1: config 4 has no interface number 0 [ 110.747434][ T5941] usb 3-1: config 4 interface 20 altsetting 128 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 110.759300][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 110.891060][ T5941] usb 3-1: config 4 interface 20 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 111.037517][ T5941] usb 3-1: config 4 interface 20 altsetting 128 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 111.052540][ T5941] usb 3-1: config 4 interface 20 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 111.066072][ T5941] usb 3-1: config 4 interface 20 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 111.078290][ T5941] usb 3-1: config 4 interface 20 has no altsetting 0 [ 111.108921][ T5941] usb 3-1: New USB device found, idVendor=1fe1, idProduct=5456, bcdDevice=f7.4b [ 111.132096][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.141405][ T5941] usb 3-1: Product: syz [ 111.148753][ T6344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.149840][ T5941] usb 3-1: Manufacturer: syz [ 111.168390][ T5941] usb 3-1: SerialNumber: syz [ 111.216704][ T6344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.275780][ T5842] Bluetooth: hci2: command tx timeout [ 111.311308][ T6180] bridge_slave_1: left allmulticast mode [ 111.318706][ T6180] bridge_slave_1: left promiscuous mode [ 111.324670][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.340024][ T6180] bridge_slave_0: left allmulticast mode [ 111.346832][ T6180] bridge_slave_0: left promiscuous mode [ 111.352687][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.408073][ T5941] dvb-usb: found a 'GOTVIEW Satellite HD' in warm state. [ 111.428922][ T5941] dw2102: su3000_power_ctrl: 1, initialized 0 [ 111.435185][ T5941] dvb-usb: bulk message failed: -22 (2/0) [ 111.457519][ T5941] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 111.475473][ T5941] dvb-usb: GOTVIEW Satellite HD error while loading driver (-19) [ 111.508534][ T5941] usb 3-1: USB disconnect, device number 9 [ 111.770394][ T6180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.783972][ T6180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.794757][ T6180] bond0 (unregistering): Released all slaves [ 111.920914][ T6344] team0: Port device team_slave_0 added [ 111.970138][ T6344] team0: Port device team_slave_1 added [ 112.000131][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.453162][ T30] audit: type=1400 audit(1752427808.894:381): avc: denied { read write } for pid=6439 comm="syz.0.125" name="mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 112.485602][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.521466][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.550626][ T30] audit: type=1400 audit(1752427808.904:382): avc: denied { open } for pid=6439 comm="syz.0.125" path="/dev/input/mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 112.579605][ T6344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.673332][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.683718][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.711019][ T6344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.852100][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 113.126970][ T6274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.140139][ T30] audit: type=1400 audit(1752427809.734:383): avc: denied { write } for pid=6450 comm="syz.0.127" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.240359][ T30] audit: type=1400 audit(1752427809.734:384): avc: denied { open } for pid=6450 comm="syz.0.127" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.283389][ T6344] hsr_slave_0: entered promiscuous mode [ 113.314365][ T6344] hsr_slave_1: entered promiscuous mode [ 113.336608][ T6344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.345331][ T6344] Cannot create hsr debugfs directory [ 113.352249][ T6274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.365987][ T5842] Bluetooth: hci2: command tx timeout [ 113.374162][ T6274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.376280][ T30] audit: type=1400 audit(1752427809.754:385): avc: denied { ioctl } for pid=6450 comm="syz.0.127" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.438032][ T6180] hsr_slave_0: left promiscuous mode [ 113.448941][ T6180] hsr_slave_1: left promiscuous mode [ 113.460984][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.504718][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.542623][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.578712][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.648536][ T6180] veth1_macvtap: left promiscuous mode [ 113.658642][ T6180] veth0_macvtap: left promiscuous mode [ 113.665558][ T6180] veth1_vlan: left promiscuous mode [ 113.671691][ T6180] veth0_vlan: left promiscuous mode [ 113.724495][ T6459] FAULT_INJECTION: forcing a failure. [ 113.724495][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 113.786273][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.0.128 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 113.786300][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.786310][ T6459] Call Trace: [ 113.786315][ T6459] [ 113.786322][ T6459] dump_stack_lvl+0x16c/0x1f0 [ 113.786353][ T6459] should_fail_ex+0x512/0x640 [ 113.786376][ T6459] ? fs_reclaim_acquire+0xae/0x150 [ 113.786397][ T6459] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 113.786421][ T6459] should_failslab+0xc2/0x120 [ 113.786448][ T6459] __kmalloc_noprof+0xd2/0x510 [ 113.786478][ T6459] tomoyo_realpath_from_path+0xc2/0x6e0 [ 113.786505][ T6459] ? tomoyo_profile+0x47/0x60 [ 113.786530][ T6459] tomoyo_path_number_perm+0x245/0x580 [ 113.786548][ T6459] ? tomoyo_path_number_perm+0x237/0x580 [ 113.786569][ T6459] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.786589][ T6459] ? find_held_lock+0x2b/0x80 [ 113.786639][ T6459] ? find_held_lock+0x2b/0x80 [ 113.786659][ T6459] ? hook_file_ioctl_common+0x145/0x410 [ 113.786680][ T6459] ? __fget_files+0x20e/0x3c0 [ 113.786708][ T6459] security_file_ioctl+0x9b/0x240 [ 113.786734][ T6459] __x64_sys_ioctl+0xb7/0x210 [ 113.786755][ T6459] do_syscall_64+0xcd/0x4c0 [ 113.786781][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.786799][ T6459] RIP: 0033:0x7f9848f8e929 [ 113.786813][ T6459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.786829][ T6459] RSP: 002b:00007f9849d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.786847][ T6459] RAX: ffffffffffffffda RBX: 00007f98491b5fa0 RCX: 00007f9848f8e929 [ 113.786858][ T6459] RDX: 0000200000000000 RSI: 000000004020aed2 RDI: 0000000000000004 [ 113.786868][ T6459] RBP: 00007f9849d31090 R08: 0000000000000000 R09: 0000000000000000 [ 113.786878][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.786887][ T6459] R13: 0000000000000000 R14: 00007f98491b5fa0 R15: 00007fff26d53508 [ 113.786911][ T6459] [ 113.786919][ T6459] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.320842][ T6180] team0 (unregistering): Port device team_slave_1 removed [ 114.358052][ T6180] team0 (unregistering): Port device team_slave_0 removed [ 114.439524][ T5941] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 114.602722][ T6274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.632118][ T5941] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 114.641117][ T5941] usb 1-1: config 0 has no interface number 0 [ 114.660158][ T5941] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 114.684123][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.692231][ T5941] usb 1-1: Product: syz [ 114.703028][ T5941] usb 1-1: Manufacturer: syz [ 114.709120][ T5941] usb 1-1: SerialNumber: syz [ 114.738193][ T5941] usb 1-1: config 0 descriptor?? [ 114.950962][ T30] audit: type=1400 audit(1752427811.544:386): avc: denied { create } for pid=6476 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.973129][ T6274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.019695][ T30] audit: type=1400 audit(1752427811.574:387): avc: denied { setopt } for pid=6476 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.153658][ T6180] IPVS: stop unused estimator thread 0... [ 115.174655][ T6274] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.292147][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.299326][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.406745][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.413932][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.665504][ T6468] warning: `syz.0.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.667694][ T5941] usb 1-1: Firmware: major: 219, minor: 252, hardware type: HULUSB (4) [ 115.709164][ T5941] usb 1-1: failed to fetch extended address, random address set [ 115.745470][ T6274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.852973][ T5941] usb 1-1: USB disconnect, device number 5 [ 116.166683][ T92] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 116.375989][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 116.426696][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.586801][ T92] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 116.635622][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.690638][ T92] usb 3-1: config 0 descriptor?? [ 117.091118][ T6274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.211229][ T92] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 117.347354][ T30] audit: type=1400 audit(1752427813.924:388): avc: denied { kexec_image_load } for pid=6515 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 117.391059][ C1] ================================================================== [ 117.399166][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xf94/0x1030 [ 117.407063][ C1] Read of size 1 at addr ffff888059ce3fff by task syz.2.132/6490 [ 117.414761][ C1] [ 117.417072][ C1] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.132 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 117.417092][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.417101][ C1] Call Trace: [ 117.417106][ C1] [ 117.417113][ C1] dump_stack_lvl+0x116/0x1f0 [ 117.417139][ C1] print_report+0xcd/0x610 [ 117.417163][ C1] ? __virt_addr_valid+0x81/0x610 [ 117.417183][ C1] ? __phys_addr+0xe8/0x180 [ 117.417202][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 117.417226][ C1] kasan_report+0xe0/0x110 [ 117.417248][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 117.417274][ C1] mcp2221_raw_event+0xf94/0x1030 [ 117.417295][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 117.417317][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 117.417336][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 117.417361][ C1] hid_irq_in+0x35e/0x870 [ 117.417386][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 117.417409][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 117.417432][ C1] dummy_timer+0x180e/0x3a20 [ 117.417462][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 117.417476][ C1] ? rcu_is_watching+0x12/0xc0 [ 117.417496][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 117.417516][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 117.417529][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 117.417554][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 117.417576][ C1] ? read_tsc+0x9/0x20 [ 117.417597][ C1] hrtimer_run_softirq+0x17d/0x350 [ 117.417615][ C1] handle_softirqs+0x219/0x8e0 [ 117.417636][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 117.417657][ C1] __irq_exit_rcu+0x109/0x170 [ 117.417674][ C1] irq_exit_rcu+0x9/0x30 [ 117.417692][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 117.417712][ C1] [ 117.417717][ C1] [ 117.417722][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.417738][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 117.417760][ C1] Code: fb 09 00 00 44 8b 05 09 cb 1f 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 df d5 39 00 fb 65 48 8b 1d be e2 46 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 117.417774][ C1] RSP: 0018:ffffc900043bf910 EFLAGS: 00000206 [ 117.417788][ C1] RAX: 0000000000001fff RBX: ffff88807b790000 RCX: ffffffff81c3c22f [ 117.417798][ C1] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 117.417808][ C1] RBP: ffffc900043bf958 R08: 0000000000000001 R09: 0000000000000001 [ 117.417817][ C1] R10: ffffffff90a98657 R11: 0000000000000001 R12: ffff8880b853a2c0 [ 117.417827][ C1] R13: ffff888079c28000 R14: 0000000000000001 R15: ffff8880b853b130 [ 117.417839][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 117.417861][ C1] ? __switch_to+0x783/0x1170 [ 117.417879][ C1] __schedule+0x1172/0x5de0 [ 117.417896][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 117.417915][ C1] ? sched_clock+0x38/0x60 [ 117.417935][ C1] ? lock_acquire+0x179/0x350 [ 117.417950][ C1] ? find_held_lock+0x2b/0x80 [ 117.417971][ C1] ? __pfx___schedule+0x10/0x10 [ 117.417992][ C1] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 117.418010][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 117.418030][ C1] preempt_schedule_common+0x44/0xc0 [ 117.418050][ C1] preempt_schedule_thunk+0x16/0x30 [ 117.418071][ C1] try_to_wake_up+0xa2f/0x1680 [ 117.418091][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 117.418109][ C1] ? plist_check_head+0xa3/0x150 [ 117.418126][ C1] ? find_held_lock+0x2b/0x80 [ 117.418146][ C1] wake_up_q+0xa3/0x160 [ 117.418162][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 117.418180][ C1] futex_wake+0x43c/0x4e0 [ 117.418197][ C1] ? __pfx_futex_wake+0x10/0x10 [ 117.418213][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 117.418233][ C1] do_futex+0x1e3/0x350 [ 117.418255][ C1] ? __pfx_do_futex+0x10/0x10 [ 117.418276][ C1] ? rcu_is_watching+0x12/0xc0 [ 117.418295][ C1] ? ktime_get+0x200/0x310 [ 117.418316][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.418336][ C1] ? read_tsc+0x9/0x20 [ 117.418354][ C1] __x64_sys_futex+0x1e0/0x4c0 [ 117.418377][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.418400][ C1] ? xfd_validate_state+0x61/0x180 [ 117.418425][ C1] do_syscall_64+0xcd/0x4c0 [ 117.418446][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.418461][ C1] RIP: 0033:0x7f9ff378e929 [ 117.418473][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.418488][ C1] RSP: 002b:00007ffd802dba48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.418502][ C1] RAX: ffffffffffffffda RBX: 00007f9ff39b5fa8 RCX: 00007f9ff378e929 [ 117.418511][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9ff39b5fa8 [ 117.418521][ C1] RBP: 0000000000000000 R08: 0000000000000013 R09: 00000005802dbd3f [ 117.418530][ C1] R10: 00007f9ff39b5fa0 R11: 0000000000000246 R12: 00007f9ff39b5fac [ 117.418539][ C1] R13: 00007f9ff39b5fa0 R14: 0000000000001d5e R15: 0000000000000004 [ 117.418553][ C1] [ 117.418558][ C1] [ 117.903539][ C1] Allocated by task 5847: [ 117.907855][ C1] kasan_save_stack+0x33/0x60 [ 117.912533][ C1] kasan_save_track+0x14/0x30 [ 117.917209][ C1] __kasan_kmalloc+0xaa/0xb0 [ 117.921784][ C1] device_add+0xccc/0x1a70 [ 117.926182][ C1] netdev_register_kobject+0x182/0x3a0 [ 117.931629][ C1] register_netdevice+0x13dc/0x2270 [ 117.936822][ C1] veth_newlink+0x30f/0xa00 [ 117.941309][ C1] rtnl_newlink+0xc42/0x2000 [ 117.945887][ C1] rtnetlink_rcv_msg+0x95b/0xe90 [ 117.950812][ C1] netlink_rcv_skb+0x158/0x420 [ 117.955560][ C1] netlink_unicast+0x58a/0x850 [ 117.960305][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 117.965047][ C1] __sys_sendto+0x4a0/0x520 [ 117.969536][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 117.974301][ C1] do_syscall_64+0xcd/0x4c0 [ 117.978792][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.984669][ C1] [ 117.986975][ C1] The buggy address belongs to the object at ffff888059ce3c00 [ 117.986975][ C1] which belongs to the cache kmalloc-512 of size 512 [ 118.001022][ C1] The buggy address is located 751 bytes to the right of [ 118.001022][ C1] allocated 272-byte region [ffff888059ce3c00, ffff888059ce3d10) [ 118.015668][ C1] [ 118.017977][ C1] The buggy address belongs to the physical page: [ 118.024366][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59ce0 [ 118.033106][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.041585][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 118.049119][ C1] page_type: f5(slab) [ 118.053082][ C1] raw: 00fff00000000040 ffff88801b841c80 dead000000000122 0000000000000000 [ 118.061646][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 118.070216][ C1] head: 00fff00000000040 ffff88801b841c80 dead000000000122 0000000000000000 [ 118.078879][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 118.087530][ C1] head: 00fff00000000002 ffffea0001673801 00000000ffffffff 00000000ffffffff [ 118.096186][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 118.104833][ C1] page dumped because: kasan: bad access detected [ 118.111225][ C1] page_owner tracks the page as allocated [ 118.116918][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 72869768728, free_ts 16252349529 [ 118.138259][ C1] post_alloc_hook+0x1c0/0x230 [ 118.143011][ C1] get_page_from_freelist+0x1321/0x3890 [ 118.148540][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 118.154421][ C1] alloc_pages_mpol+0x1fb/0x550 [ 118.159259][ C1] new_slab+0x23b/0x330 [ 118.163407][ C1] ___slab_alloc+0xd9c/0x1940 [ 118.168069][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 118.173423][ C1] __kmalloc_cache_noprof+0xfb/0x3e0 [ 118.178690][ C1] __ipv6_dev_mc_inc+0x2b9/0xc10 [ 118.183615][ C1] ipv6_add_dev+0xbce/0x15f0 [ 118.188206][ C1] addrconf_notify+0x53e/0x19e0 [ 118.193212][ C1] notifier_call_chain+0xbc/0x410 [ 118.198225][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 118.204100][ C1] register_netdevice+0x182e/0x2270 [ 118.209286][ C1] veth_newlink+0x446/0xa00 [ 118.213771][ C1] rtnl_newlink+0xc42/0x2000 [ 118.218351][ C1] page last free pid 1 tgid 1 stack trace: [ 118.224132][ C1] __free_frozen_pages+0x7fe/0x1180 [ 118.229334][ C1] free_contig_range+0x183/0x4b0 [ 118.234271][ C1] destroy_args+0x7f6/0xa60 [ 118.238767][ C1] debug_vm_pgtable+0x13b8/0x2d00 [ 118.243780][ C1] do_one_initcall+0x120/0x6e0 [ 118.248531][ C1] kernel_init_freeable+0x5c2/0x900 [ 118.253719][ C1] kernel_init+0x1c/0x2b0 [ 118.258031][ C1] ret_from_fork+0x5d7/0x6f0 [ 118.262616][ C1] ret_from_fork_asm+0x1a/0x30 [ 118.267365][ C1] [ 118.269675][ C1] Memory state around the buggy address: [ 118.275283][ C1] ffff888059ce3e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.283339][ C1] ffff888059ce3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.291379][ C1] >ffff888059ce3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.299415][ C1] ^ [ 118.307371][ C1] ffff888059ce4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.315421][ C1] ffff888059ce4080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.323467][ C1] ================================================================== [ 118.331507][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.338684][ C1] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.132 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 118.350562][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.360607][ C1] Call Trace: [ 118.363871][ C1] [ 118.366701][ C1] dump_stack_lvl+0x3d/0x1f0 [ 118.371287][ C1] panic+0x71c/0x800 [ 118.375199][ C1] ? __pfx_panic+0x10/0x10 [ 118.379613][ C1] ? __pfx__printk+0x10/0x10 [ 118.384203][ C1] ? end_report+0x4c/0x170 [ 118.388615][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 118.393822][ C1] check_panic_on_warn+0xab/0xb0 [ 118.398757][ C1] end_report+0x107/0x170 [ 118.403079][ C1] kasan_report+0xee/0x110 [ 118.407487][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 118.412681][ C1] mcp2221_raw_event+0xf94/0x1030 [ 118.417720][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 118.423553][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 118.429626][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 118.435084][ C1] hid_irq_in+0x35e/0x870 [ 118.439411][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 118.444780][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 118.450247][ C1] dummy_timer+0x180e/0x3a20 [ 118.454837][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 118.459757][ C1] ? rcu_is_watching+0x12/0xc0 [ 118.464514][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.470314][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 118.475233][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 118.480424][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 118.486130][ C1] ? read_tsc+0x9/0x20 [ 118.490189][ C1] hrtimer_run_softirq+0x17d/0x350 [ 118.495291][ C1] handle_softirqs+0x219/0x8e0 [ 118.500045][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 118.505322][ C1] __irq_exit_rcu+0x109/0x170 [ 118.509988][ C1] irq_exit_rcu+0x9/0x30 [ 118.514220][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 118.519845][ C1] [ 118.522761][ C1] [ 118.525689][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.531668][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 118.538077][ C1] Code: fb 09 00 00 44 8b 05 09 cb 1f 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 df d5 39 00 fb 65 48 8b 1d be e2 46 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 118.557689][ C1] RSP: 0018:ffffc900043bf910 EFLAGS: 00000206 [ 118.563751][ C1] RAX: 0000000000001fff RBX: ffff88807b790000 RCX: ffffffff81c3c22f [ 118.571711][ C1] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 118.579667][ C1] RBP: ffffc900043bf958 R08: 0000000000000001 R09: 0000000000000001 [ 118.587623][ C1] R10: ffffffff90a98657 R11: 0000000000000001 R12: ffff8880b853a2c0 [ 118.595580][ C1] R13: ffff888079c28000 R14: 0000000000000001 R15: ffff8880b853b130 [ 118.603558][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 118.609535][ C1] ? __switch_to+0x783/0x1170 [ 118.614213][ C1] __schedule+0x1172/0x5de0 [ 118.618720][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 118.623912][ C1] ? sched_clock+0x38/0x60 [ 118.628321][ C1] ? lock_acquire+0x179/0x350 [ 118.632984][ C1] ? find_held_lock+0x2b/0x80 [ 118.637653][ C1] ? __pfx___schedule+0x10/0x10 [ 118.642508][ C1] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 118.649175][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 118.654537][ C1] preempt_schedule_common+0x44/0xc0 [ 118.659817][ C1] preempt_schedule_thunk+0x16/0x30 [ 118.665006][ C1] try_to_wake_up+0xa2f/0x1680 [ 118.669759][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 118.674945][ C1] ? plist_check_head+0xa3/0x150 [ 118.679870][ C1] ? find_held_lock+0x2b/0x80 [ 118.684538][ C1] wake_up_q+0xa3/0x160 [ 118.688684][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 118.693872][ C1] futex_wake+0x43c/0x4e0 [ 118.698190][ C1] ? __pfx_futex_wake+0x10/0x10 [ 118.703024][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 118.708214][ C1] do_futex+0x1e3/0x350 [ 118.712360][ C1] ? __pfx_do_futex+0x10/0x10 [ 118.717036][ C1] ? rcu_is_watching+0x12/0xc0 [ 118.721802][ C1] ? ktime_get+0x200/0x310 [ 118.726210][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.731399][ C1] ? read_tsc+0x9/0x20 [ 118.735457][ C1] __x64_sys_futex+0x1e0/0x4c0 [ 118.740215][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.745490][ C1] ? xfd_validate_state+0x61/0x180 [ 118.750595][ C1] do_syscall_64+0xcd/0x4c0 [ 118.755091][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.760970][ C1] RIP: 0033:0x7f9ff378e929 [ 118.765369][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.784962][ C1] RSP: 002b:00007ffd802dba48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.793362][ C1] RAX: ffffffffffffffda RBX: 00007f9ff39b5fa8 RCX: 00007f9ff378e929 [ 118.801317][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9ff39b5fa8 [ 118.809273][ C1] RBP: 0000000000000000 R08: 0000000000000013 R09: 00000005802dbd3f [ 118.817231][ C1] R10: 00007f9ff39b5fa0 R11: 0000000000000246 R12: 00007f9ff39b5fac [ 118.825207][ C1] R13: 00007f9ff39b5fa0 R14: 0000000000001d5e R15: 0000000000000004 [ 118.833168][ C1] [ 118.836373][ C1] Kernel Offset: disabled [ 118.840685][ C1] Rebooting in 86400 seconds..