last executing test programs: 30.234259887s ago: executing program 3 (id=510): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r4}) close(r2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x1, 0x785, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x35, 0xa6, 0x40, 0x867, 0x9812, 0x16e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5d, 0xc2, 0x97}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x4) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x1000) ioctl$VT_ACTIVATE(r9, 0x5606, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 29.619933434s ago: executing program 2 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)=ANY=[@ANYBLOB="01", @ANYRESHEX=r0, @ANYRES16=r0]) 28.368102163s ago: executing program 2 (id=513): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2}, 0x2b, [0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x4, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0x8, 0x9, 0x0, 0x200000], [0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, 0x0, 0x0, 0x3, 0xef86, 0x0, 0x0, 0x0, 0x9]}, 0x45c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001640)=ANY=[@ANYBLOB="5c00000000090300000000dfffffffff060000000900010073797a31000000003c0002002c00018014000300fc00000000000000000000000000000014000400fe8000000040000000000000000000aa0c0002800500010084000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x1070bd27, 0x7ffa, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0x71022c39d5e9904c, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x129000, 0x800}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x1a, 0x1, 0x0, "6906007722366ccee4ba568eb4f80102f5372f2c74f6024305f11fd3454ad23d", 0x3436324d}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000440)="9c74dfbf77572856c888a886", 0xc}, {&(0x7f0000000280)='hpN', 0x3}], 0x3) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) bind$xdp(r5, &(0x7f00000002c0)={0x2c, 0x8, r10}, 0x10) sendto$packet(r2, &(0x7f0000000600)="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", 0x1000, 0x4000801, &(0x7f0000001600)={0x11, 0x7, r10, 0x1, 0x3, 0x6, @remote}, 0x14) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(r1) 28.271590933s ago: executing program 0 (id=514): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 27.752023006s ago: executing program 0 (id=515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x41}}], 0x30}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000030305000000000000000000000000000c0002"], 0x20}}, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x8, 0xa0, 0x6b, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, "648c"}, {0x5, 0x24, 0x0, 0x44}, {0xd, 0x24, 0xf, 0x1, 0x10000b76, 0x0, 0xc35, 0xeb}, [@network_terminal={0x7, 0x24, 0xa, 0xf0, 0x4, 0xf9, 0x94}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9f, 0xff, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x1, 0x4c}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0x5, 0x3, 0x8, 0x7}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0xfa, 0x6, 0xa34, 0x78f, 0x1, [0xffc000, 0x3f00, 0xff0030, 0xc00f, 0x3f30, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e84aafea719d4679a1c3ae938e76b389"}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x143d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}]}) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) listen(r5, 0x0) r6 = socket$inet(0x2, 0x3, 0x8) r7 = socket$inet(0x2, 0x3, 0x6) dup3(r6, r7, 0x0) r8 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r9 = creat(&(0x7f00000002c0)='\x00', 0x109) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc4f187c6a707baf}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000015}, 0xc840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r11 = open$dir(&(0x7f0000000000)='./file0\x00', 0xc802, 0x16b) mlockall(0x7) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) 27.259299713s ago: executing program 4 (id=516): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000008c0)=0x7ff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @dev}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x5, 0x3, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x66, 0x0, 0x1, 0x4, 0x0, @empty, @remote, {[@cipso={0x86, 0x4d, 0x0, [{0x2, 0x10, "143f2299783624b57085c3815fe6"}, {0x7, 0x9, "c4ff138289142e"}, {0x5, 0x2}, {0x7, 0x7, "b971e38aa7"}, {0x1, 0x3, "ff"}, {0x6, 0x12, "24fb88c1e002f63384b93d334828c5c3"}, {0x7, 0x2}, {0x0, 0xe, "085a7a0c68a531bb05d45e9c"}]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x8, [0x5]}, @end, @cipso={0x86, 0x21, 0x3, [{0x7, 0x7, "1e9a478fe0"}, {0x2, 0x2}, {0x7, 0xc, "698350280a9a0c9e5d47"}, {0x0, 0x6, "63121d37"}]}, @noop]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x40, 0x700, 0x3, 0x1, {{0xd, 0x4, 0x0, 0x6, 0x34, 0x67, 0x0, 0x6a, 0x4, 0x0, @private=0xa010100, @multicast1, {[@lsrr={0x83, 0x1f, 0x50, [@broadcast, @multicast2, @multicast1, @broadcast, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 26.849042806s ago: executing program 4 (id=517): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$kcm(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1e) 26.408985504s ago: executing program 4 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x20, 0x1, [{0x7ad8, 0x6}]}}) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000100)='0.,:/', 0x0) listen(r1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0xff, 0x2a, 0x5}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) openat$mice(0xffffffffffffff9c, 0x0, 0x100000) r6 = syz_open_procfs(r5, &(0x7f00000000c0)='gid_map\x00') writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x1, 0x200, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x20, 0x10, 0x3, 0xfffffffd}}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r7, &(0x7f0000000080), 0x51) socket(0x2, 0x80805, 0x0) 25.188274233s ago: executing program 1 (id=520): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xffffffff, 0x4000, 0x1, 0xfffffffd}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xe255}}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0xb, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) io_setup(0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) setresuid(0x0, 0xee01, 0xee00) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r9, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000000}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0xfffffffffffffe7d) 25.111816637s ago: executing program 3 (id=521): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001a40)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100001, 0x0, 0x0, 0x0, 0x6}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x0, 'rlimit'}]}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) setitimer(0x1, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 24.536653236s ago: executing program 1 (id=522): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="050625bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000825bd7000fddbdf25180000000400018048000280080001000000000008000200090000000800020000020000040004000400040004000400080002000200000008000200060000000800010000000000080001000800000068000580070001006962000007000100696200000700010069620000440002800800040001040000080003000300000008000400feffffff080003000200000008000400000400000800040001000000080002000000000008000300feffffff"], 0xffffffffffffff29}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000) ftruncate(0xffffffffffffffff, 0xffffffffffff3467) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getrlimit(0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(r8, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000011003d000000460000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078fffc0a0300050200000000000000000002d58838068b"], 0x4e) 23.523984553s ago: executing program 0 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000680)=ANY=[@ANYBLOB="c90000000000000000003206bcb257f19205e0515fca94e6b6e42b5998e87ef9d905077686cf4eb272dab6289ecb52ef197ea4744d2679147a884d9d166f6f5cefb5e829708aa87f92d18024d2dbc49576e9d42de9dd57"]) r1 = socket(0x2b, 0x80801, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000002a00)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) write(r1, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x6, 0x5, 0xfffffffe, 0x9, 0x7, "04eccb1d3f3ae0b0e8534a5c3d6d564bf1e612bfdc69b72b561a63c5b0975cf89b81135abc248c93400817a6b1fa2fe06a64ca"}}, 0x14b) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) 23.14412122s ago: executing program 3 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r3, 0x5429, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008d469ce42d288bae754000060120000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000040)={0x5, 0x89, 0x9, 0x5}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) r7 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0xee00}}, './file0\x00'}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYBLOB="0200", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040007000000000008000200", @ANYRES32=0x0, @ANYBLOB="10000100000000002000070000000000"], 0x5c, 0x3) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000240)=@sg0, r6, &(0x7f0000000280)={0x9, 0xce, 0x0, 0x6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='afs_notify_call\x00', r8}, 0x18) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) socket$nl_route(0x10, 0x3, 0x0) 21.848437049s ago: executing program 0 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x0, {0x0, 0x0, 0x2}, {0x0, 0x1, 0x4}, 0xfe, 0x1}, {0x2, 0x0, {0x1, 0xff, 0x4}, {0x2, 0x0, 0x3}, 0x0, 0xfe}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r10, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 21.336962484s ago: executing program 3 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_INFO(0x0, 0xe, 0x0) socket(0x10, 0x80003, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102376, 0x18fe8) r2 = memfd_secret(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x4, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) mknodat(r5, 0x0, 0x8000, 0x3) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x40880) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x0, 0x0, 0x36314d4e, 0x9, 0x0, 0x0, 0x3, 0x7, 0x3, 0x0, 0x8002, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0xf, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000140)={0x3, 0x0, '\x00', {0x0, @bt={0x9, 0x74e, 0x1, 0x1, 0xff, 0x7, 0xfffffff8, 0x35e2, 0xc3c2, 0x0, 0x6, 0xfffffff8, 0xac, 0x6, 0x0, 0x10, {0xfff, 0x7ff}, 0x9, 0x8}}}) syz_usb_control_io$printer(r7, 0x0, 0x0) 21.188835908s ago: executing program 1 (id=527): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000008c0)=0x7ff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @dev}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x5, 0x3, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x66, 0x0, 0x1, 0x4, 0x0, @empty, @remote, {[@cipso={0x86, 0x4d, 0x0, [{0x2, 0x10, "143f2299783624b57085c3815fe6"}, {0x7, 0x9, "c4ff138289142e"}, {0x5, 0x2}, {0x7, 0x7, "b971e38aa7"}, {0x1, 0x3, "ff"}, {0x6, 0x12, "24fb88c1e002f63384b93d334828c5c3"}, {0x7, 0x2}, {0x0, 0xe, "085a7a0c68a531bb05d45e9c"}]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x8, [0x5]}, @end, @cipso={0x86, 0x21, 0x3, [{0x7, 0x7, "1e9a478fe0"}, {0x2, 0x2}, {0x7, 0xc, "698350280a9a0c9e5d47"}, {0x0, 0x6, "63121d37"}]}, @noop]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x40, 0x700, 0x3, 0x1, {{0xd, 0x4, 0x0, 0x6, 0x34, 0x67, 0x0, 0x6a, 0x4, 0x0, @private=0xa010100, @multicast1, {[@lsrr={0x83, 0x1f, 0x50, [@broadcast, @multicast2, @multicast1, @broadcast, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 21.126081033s ago: executing program 2 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x1, 0x1ff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r0, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x100004) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006dc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xff8c) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x24}}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000cc0)={r8, "b6639a193c6951901d474b036bf1114d"}) mknodat(0xffffffffffffff9c, &(0x7f0000000980)='./file0/file0\x00', 0x8, 0x8c) r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x3b7}) io_uring_setup(0x18a8, &(0x7f0000000600)={0x0, 0xcb8c, 0x400, 0x0, 0x2be, 0x0, r1}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) syz_fuse_handle_req(r4, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, r6, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x0, {0x5, 0x0, 0x2, 0x800000000000002, 0x81, 0x0, {0x1, 0x101, 0x7, 0x4, 0x6, 0x0, 0x3, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, r7, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.769981379s ago: executing program 1 (id=529): mmap(&(0x7f000093e000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000bc0)='qdisc_destroy\x00', 0xffffffffffffffff, 0x0, 0x2000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x5800e00, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002900)=ANY=[@ANYBLOB="88010000100001000000000000000000e00000020000000000010000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fc01000000000000000000000000000000000000000000080000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000010000000000000008000000000000000000000000000000000000000000000000000000000000000fd0000000000000000000000000000000a000000080000000000000008001e0001000000480002006374722d63616d656c6c69612d6165736e692d6176783200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048000100"], 0x188}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0xf000, 0x101, &(0x7f0000000780)=""/257}, {0x2, 0x51, &(0x7f0000000180)=""/81}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000b40)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000001c0)="9c8547a6df635f79edcca97fe313f9afcffdf391e45c53", 0x17}, {&(0x7f0000000380)="a878c8a41982c63a519842793b8919b9351071754f3aae757d6d26203712c6e6d4899d57b27876fc7938b7e0131f85d334998fac051b1f225c07c0a6733bd3be93ede31ac88d7d201c4acc8986932eae5087b208bba7da9e3cf10b1bbf98a8fc36fdb74ca4353fb09d02a64f486c878e6d7669c55de8fce3ec35da86f80bf38a2cd18aa0ba8b9c6df762887c85e5cdb979c945265ec8310c36b1ed5314b22bbe7fbbb1d8db665987", 0xa8}, {&(0x7f0000000440)}, {&(0x7f0000000480)="269fab5244f0f48e29f1c085a4a7a69af75d411972853c1c2d57a14cdb1389650083214d764238338d3b020790d7c3a91c96d2141c19fa2f5a8c917b7fa347916bf9bc3badaf0d596eb17213e88952db5945ecd677ea669d30654b93c4711ba18dc418e207461c2eb316508e74328334a885867bf64c434c906acfd8bd65e081c65109cd347bbd845e895401ce2ece07b6cbe7746defece109afbd52e4bf8b5290d4a44a18b430bd6df12a3de4096fa4540ba45ea1c5eba322d278a7af8bbf7e75c31cb856c572f618e1ef9c7663135be495cd1c0a11", 0xd6}, {&(0x7f0000000580)="e3cf5fc7b5895e38284571", 0xb}, {&(0x7f00000005c0)="0e08567acf766c2b5e9ee978f647d81edddd28716771a24ff4b3b0526728ddf9e7021234", 0x24}, {&(0x7f0000000600)="6ef19e0aa9ac34709ca485b443fb829b41218dd82951f9acf0a18a42289d06b822b03ce6519cfaf68abd9962cad73ef026193ae7e9864ac577590d3a1aad8ca5ef94379897f8d7e3490740f73c03733b56839fd3fbb68e91a02073d245a1c18bb79fc57319f293f7a37f8c87ceda042adbb4d12117fa8288ef6ee84daf0b219ad6d43e38aabd93a9925a0aa62f33642da8bcd4604aca87669ebbdefc40a2ae3737b7fb384c6def3237f6f7be8a6db61f92885d891c16d4f1ff9919a0409fc8", 0xbf}], 0x7}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="2e182e5dc8102d6cfc68eb90063bf05d1ccc16298c7291a22f25a14758fcff590def702aff0280f97b191a7c83303af8f0e9ae0ab4cd133897a014dbc6a12cf67f0b8012719159998871e91e827ba734acbaa9b3f2b3378c0f81a4b1198b9ef069b5b096c358bfbbc9cf14b72b53a351d7baa39a5e262cd0e0c43fb042e57b1534e3eadbe8cb7173f8017ce0aa1ad54ee0e1ed6e3ccbadcd77", 0x99}, {&(0x7f0000000c00)="b54af1b723e6c19035cc2b31ba8e8e5eb2c7d3f84ba43633137db849fa7ac82e", 0x20}, {&(0x7f00000008c0)="42cefa74576da103010b7db918bcb6090201c037c2b5ed04cf202a900513cad9c57b141a54b40b61ea0c48", 0x2b}, {&(0x7f0000000900)="3a533b0ee3051363183d9004e878fe04a96764d76e178036cd8d9c714793e8d64b913964168d9c4cb5f1361cbabacf4f918d8031c1162fdebc2ffe935a628550c8a15365b24e12f0eaa6a2ccf3c1c90742afafbb0da205cf26c32b1a873c8b3edafd118b4d278a24bf6b647c58d1b1d30cd9e05cf22b53b817c240e38a501b1d44ea3cd9e1acf86fe1359ce43a37855a7a4857022a21cc77580d2ee2143b99", 0x9f}, {&(0x7f00000009c0)="1a1fdd8f1f4b8570f6273cfdfe7ceb3c62260932e61a2d6d370f9fb224d8d7fa2d9e7483bb86bf89c4938565cd4fd8e00ee0342b81f98ad6c683152854d39efe63da65f34b3bb6a843f847802d53133aa8d6fd76c553550e78a165cb5190cb6a9e389506ae4c578bed71da2351297bef255c25dd879b528626ddb3f49998db7da59d822caa2ac8279842a17bf7167f07659aafe01403ea70cf335c5c6906874989b97e2f066115b227bd1dc719a4e250ffdd81c92203f084bf430d9389b0a6c814f908c8b20e0c0eb6bd342eb915c1732c2abaaaf09a", 0xd6}], 0x5, 0x0, 0x0, 0x80800}}], 0x2, 0x844) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100001000000004200420400"/42], &(0x7f0000001600)=""/4096, 0x2a, 0x1000, 0xa, 0x200000, 0x0, @void, @value}, 0x28) 19.74132503s ago: executing program 4 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x20, 0x1, [{0x3, 0x80003}]}}) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000100)='0.,:/', 0x0) listen(r1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0xff, 0x2a, 0x5}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) openat$mice(0xffffffffffffff9c, 0x0, 0x100000) r6 = syz_open_procfs(r5, &(0x7f00000000c0)='gid_map\x00') writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x1, 0x200, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x20, 0x10, 0x3, 0xfffffffd}}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r7, &(0x7f0000000080), 0x51) socket(0x2, 0x80805, 0x0) 19.671887301s ago: executing program 1 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r4, 0x500) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) setuid(0xee00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19.538592452s ago: executing program 2 (id=532): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x9, @remote, 0x6}], 0x1c) 19.368267877s ago: executing program 0 (id=533): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 18.403375108s ago: executing program 2 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002340)='L', 0x1}], 0x1}, 0x8c1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) r2 = getpid() socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff000040000000000000000100008408"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 18.232137283s ago: executing program 1 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r3, 0x5429, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008d469ce42d288bae754000060120000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000040)={0x5, 0x89, 0x9, 0x5}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) r7 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0xee00}}, './file0\x00'}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYBLOB="0200", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040007000000000008000200", @ANYRES32=0x0, @ANYBLOB="10000100000000002000070000000000"], 0x5c, 0x3) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000240)=@sg0, r6, &(0x7f0000000280)={0x9, 0xce, 0x0, 0x6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='afs_notify_call\x00', r8}, 0x18) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) socket$nl_route(0x10, 0x3, 0x0) 16.588432213s ago: executing program 3 (id=536): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x1, 0x0, 0x7f, "4041836dc400", '\x00\x00\a\x00', "0300", "185aad13", ["d5c2a7cdaeea2c6f8e00b600", "807fb3eacf821b00", "2971088d544f005a4e5200", "ff812500004000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000200)={0x8, 0x101, 0x9, 0x0, 0x7, 0x9, "b87fe12d00b800f6d72a89fea221d1af", 0x7, 0x6, 0x8e, 0x6, 0x7, 0x8}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/252, 0xfc}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_bond\x00'}]}]}]}]}, 0x4c}}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x38, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a000600"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x4}]}]}, 0x38}}, 0x10) 16.58439361s ago: executing program 2 (id=537): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="050625bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000825bd7000fddbdf25180000000400018048000280080001000000000008000200090000000800020000020000040004000400040004000400080002000200000008000200060000000800010000000000080001000800000068000580070001006962000007000100696200000700010069620000440002800800040001040000080003000300000008000400feffffff080003000200000008000400000400000800040001000000080002000000000008000300feffffff"], 0xffffffffffffff29}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000) ftruncate(0xffffffffffffffff, 0xffffffffffff3467) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getrlimit(0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(r8, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000011003d000000460000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078fffc0a0300050200000000000000000002d58838068b"], 0x4e) 16.063562001s ago: executing program 0 (id=538): socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$inet(0x2, 0x1, 0x9f46) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x55) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xf8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r2, r1) getpeername$packet(r1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x30, 0xffffffffffffffff, 0xdca12000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x5d0, 0x20050000) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9f0903, 0x0, '\x00', @p_u32=0x0}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0) 15.958948494s ago: executing program 4 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000680)=ANY=[@ANYBLOB="c90000000000000000003206bcb257f19205e0515fca94e6b6e42b5998e87ef9d905077686cf4eb272dab6289ecb52ef197ea4744d2679147a884d9d166f6f5cefb5e829708aa87f92d18024d2dbc49576e9d42de9dd57"]) socket(0x2b, 0x80801, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000002a00)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x20, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) 15.684158195s ago: executing program 3 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000380)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) 15.400864099s ago: executing program 4 (id=541): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f00000003c0)) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x204c00) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r4], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) 3.029369405s ago: executing program 32 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r3, 0x5429, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008d469ce42d288bae754000060120000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000040)={0x5, 0x89, 0x9, 0x5}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) r7 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0xee00}}, './file0\x00'}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYBLOB="0200", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040007000000000008000200", @ANYRES32=0x0, @ANYBLOB="10000100000000002000070000000000"], 0x5c, 0x3) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000240)=@sg0, r6, &(0x7f0000000280)={0x9, 0xce, 0x0, 0x6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='afs_notify_call\x00', r8}, 0x18) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) socket$nl_route(0x10, 0x3, 0x0) 1.041455187s ago: executing program 33 (id=538): socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$inet(0x2, 0x1, 0x9f46) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x55) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xf8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r2, r1) getpeername$packet(r1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x30, 0xffffffffffffffff, 0xdca12000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x5d0, 0x20050000) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9f0903, 0x0, '\x00', @p_u32=0x0}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0) 996.122153ms ago: executing program 34 (id=537): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="050625bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000825bd7000fddbdf25180000000400018048000280080001000000000008000200090000000800020000020000040004000400040004000400080002000200000008000200060000000800010000000000080001000800000068000580070001006962000007000100696200000700010069620000440002800800040001040000080003000300000008000400feffffff080003000200000008000400000400000800040001000000080002000000000008000300feffffff"], 0xffffffffffffff29}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000) ftruncate(0xffffffffffffffff, 0xffffffffffff3467) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getrlimit(0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(r8, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000011003d000000460000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078fffc0a0300050200000000000000000002d58838068b"], 0x4e) 35.583952ms ago: executing program 35 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000380)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) 0s ago: executing program 36 (id=541): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f00000003c0)) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x204c00) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r4], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) kernel console output (not intermixed with test programs): 6654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.157'. [ 116.576199][ T6610] netlink: 'syz.2.150': attribute type 8 has an invalid length. [ 116.657628][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 116.689560][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 116.725734][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 116.754276][ T6641] : renamed from bond0 (while UP) [ 116.775396][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 116.861178][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.117979][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.245215][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.264679][ T6663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.285182][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.330431][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.391897][ T5947] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 117.435883][ T5947] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 117.469382][ T5947] usb 3-1: USB disconnect, device number 6 [ 117.623762][ T6671] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 117.639024][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 117.650246][ T6671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.658558][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 117.658569][ T30] audit: type=1400 audit(1745426743.015:336): avc: denied { read } for pid=6670 comm="syz.4.163" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.089182][ T30] audit: type=1400 audit(1745426743.445:337): avc: denied { write } for pid=6668 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.117324][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.139223][ T5900] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 118.150403][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.213014][ T5900] usb 2-1: config 0 descriptor?? [ 119.271839][ T6689] tty tty28: ldisc open failed (-12), clearing slot 27 [ 119.305342][ T30] audit: type=1400 audit(1745426743.775:338): avc: denied { write } for pid=6685 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.381184][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.389976][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.418169][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.428669][ T30] audit: type=1400 audit(1745426744.765:339): avc: denied { bind } for pid=6668 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.448908][ T6696] FAULT_INJECTION: forcing a failure. [ 119.448908][ T6696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.464273][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.465198][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.0.169 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 119.465218][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.465226][ T6696] Call Trace: [ 119.465231][ T6696] [ 119.465237][ T6696] dump_stack_lvl+0x16c/0x1f0 [ 119.465267][ T6696] should_fail_ex+0x512/0x640 [ 119.465287][ T6696] _copy_to_user+0x32/0xd0 [ 119.465306][ T6696] simple_read_from_buffer+0xcb/0x170 [ 119.465330][ T6696] proc_fail_nth_read+0x197/0x270 [ 119.465353][ T6696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.465376][ T6696] ? rw_verify_area+0xcf/0x680 [ 119.465394][ T6696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.465416][ T6696] vfs_read+0x1de/0xc70 [ 119.465440][ T6696] ? __pfx___mutex_lock+0x10/0x10 [ 119.465460][ T6696] ? __pfx_vfs_read+0x10/0x10 [ 119.465487][ T6696] ? __fget_files+0x20e/0x3c0 [ 119.465507][ T6696] ksys_read+0x12a/0x240 [ 119.465519][ T6696] ? __pfx_ksys_read+0x10/0x10 [ 119.465538][ T6696] ? v4l2_ioctl+0x1c5/0x250 [ 119.465564][ T6696] do_syscall_64+0xcd/0x260 [ 119.465586][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.465601][ T6696] RIP: 0033:0x7f252cf8d37c [ 119.465613][ T6696] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.465626][ T6696] RSP: 002b:00007f252dea9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.465640][ T6696] RAX: ffffffffffffffda RBX: 00007f252d1b5fa0 RCX: 00007f252cf8d37c [ 119.465650][ T6696] RDX: 000000000000000f RSI: 00007f252dea90a0 RDI: 0000000000000004 [ 119.465658][ T6696] RBP: 00007f252dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 119.465666][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.465674][ T6696] R13: 0000000000000000 R14: 00007f252d1b5fa0 R15: 00007ffdd3fe2e08 [ 119.465694][ T6696] [ 119.467929][ T5900] usbhid 2-1:0.0: can't add hid device: -71 [ 119.676200][ T30] audit: type=1400 audit(1745426744.765:340): avc: denied { bind } for pid=6668 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.871473][ T6702] netlink: 'syz.4.170': attribute type 21 has an invalid length. [ 119.879591][ T6702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.170'. [ 120.237340][ T5900] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 120.272181][ T5900] usb 2-1: USB disconnect, device number 4 [ 120.314971][ T5948] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.426732][ T6707] FAULT_INJECTION: forcing a failure. [ 120.426732][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 120.457600][ T6707] CPU: 0 UID: 0 PID: 6707 Comm: syz.4.173 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 120.457625][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.457634][ T6707] Call Trace: [ 120.457640][ T6707] [ 120.457646][ T6707] dump_stack_lvl+0x16c/0x1f0 [ 120.457672][ T6707] should_fail_ex+0x512/0x640 [ 120.457692][ T6707] should_failslab+0xc2/0x120 [ 120.457711][ T6707] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 120.457727][ T6707] ? skb_clone+0x190/0x3f0 [ 120.457750][ T6707] skb_clone+0x190/0x3f0 [ 120.457771][ T6707] netlink_deliver_tap+0xabd/0xd30 [ 120.457797][ T6707] netlink_unicast+0x5df/0x7f0 [ 120.457822][ T6707] ? __pfx_netlink_unicast+0x10/0x10 [ 120.457841][ T6707] ? __build_skb_around+0x278/0x3b0 [ 120.457862][ T6707] netlink_sendmsg+0x8d1/0xdd0 [ 120.457887][ T6707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.457918][ T6707] ____sys_sendmsg+0xa95/0xc70 [ 120.457941][ T6707] ? copy_msghdr_from_user+0x10a/0x160 [ 120.457959][ T6707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.457993][ T6707] ___sys_sendmsg+0x134/0x1d0 [ 120.458013][ T6707] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.458063][ T6707] __sys_sendmsg+0x16d/0x220 [ 120.458083][ T6707] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.458109][ T6707] ? rcu_is_watching+0x12/0xc0 [ 120.458136][ T6707] do_syscall_64+0xcd/0x260 [ 120.458160][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.458176][ T6707] RIP: 0033:0x7f61d1b8e969 [ 120.458188][ T6707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.458203][ T6707] RSP: 002b:00007f61d2a3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.458218][ T6707] RAX: ffffffffffffffda RBX: 00007f61d1db5fa0 RCX: 00007f61d1b8e969 [ 120.458228][ T6707] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 120.458238][ T6707] RBP: 00007f61d2a3b090 R08: 0000000000000000 R09: 0000000000000000 [ 120.458247][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.458256][ T6707] R13: 0000000000000000 R14: 00007f61d1db5fa0 R15: 00007fff94f18658 [ 120.458278][ T6707] [ 120.998981][ T6712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.045276][ T5869] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.141377][ T30] audit: type=1400 audit(1745426746.495:341): avc: denied { create } for pid=6717 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.162212][ T30] audit: type=1400 audit(1745426746.495:342): avc: denied { setopt } for pid=6717 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.226798][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 121.242637][ T30] audit: type=1400 audit(1745426746.495:343): avc: denied { ioctl } for pid=6717 comm="syz.4.176" path="socket:[10402]" dev="sockfs" ino=10402 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.284433][ T6720] veth0_vlan: entered allmulticast mode [ 121.299263][ T5869] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.318307][ T5869] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 157, changing to 7 [ 121.333723][ T30] audit: type=1400 audit(1745426746.555:344): avc: denied { bind } for pid=6717 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.363591][ T5869] usb 1-1: config 1 interface 1 has no altsetting 0 [ 121.386845][ T5869] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.407089][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.418192][ T5869] usb 1-1: Product: syz [ 121.424778][ T6730] fuse: Bad value for 'fd' [ 121.463312][ T5869] usb 1-1: Manufacturer: syz [ 121.471235][ T5869] usb 1-1: SerialNumber: syz [ 122.047129][ T5869] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 122.123162][ T5869] usb 1-1: 2:1 : invalid channels 0 [ 123.199307][ T5869] usb 1-1: USB disconnect, device number 6 [ 123.250136][ T6748] lo speed is unknown, defaulting to 1000 [ 123.947293][ T6762] FAULT_INJECTION: forcing a failure. [ 123.947293][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 124.375443][ T6762] CPU: 0 UID: 0 PID: 6762 Comm: syz.0.185 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 124.375469][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.375479][ T6762] Call Trace: [ 124.375484][ T6762] [ 124.375491][ T6762] dump_stack_lvl+0x16c/0x1f0 [ 124.375518][ T6762] should_fail_ex+0x512/0x640 [ 124.375534][ T6762] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 124.375561][ T6762] should_failslab+0xc2/0x120 [ 124.375579][ T6762] __kmalloc_cache_noprof+0x6a/0x3e0 [ 124.375602][ T6762] ? rtnl_newlink+0x11b/0x2000 [ 124.375625][ T6762] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.375642][ T6762] rtnl_newlink+0x11b/0x2000 [ 124.375670][ T6762] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.375688][ T6762] ? find_held_lock+0x2b/0x80 [ 124.375708][ T6762] ? avc_has_perm_noaudit+0x117/0x3b0 [ 124.375728][ T6762] ? avc_has_perm_noaudit+0x149/0x3b0 [ 124.375750][ T6762] ? __lock_acquire+0x5ca/0x1ba0 [ 124.375777][ T6762] ? find_held_lock+0x2b/0x80 [ 124.375795][ T6762] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.375813][ T6762] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.375831][ T6762] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 124.375852][ T6762] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.375872][ T6762] rtnetlink_rcv_msg+0x95b/0xe90 [ 124.375894][ T6762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.375913][ T6762] ? __pfx_avc_has_perm+0x10/0x10 [ 124.375939][ T6762] netlink_rcv_skb+0x16a/0x440 [ 124.375960][ T6762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.375982][ T6762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.376015][ T6762] ? netlink_deliver_tap+0x1ae/0xd30 [ 124.376039][ T6762] netlink_unicast+0x53a/0x7f0 [ 124.376062][ T6762] ? __pfx_netlink_unicast+0x10/0x10 [ 124.376089][ T6762] netlink_sendmsg+0x8d1/0xdd0 [ 124.376114][ T6762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.376143][ T6762] ____sys_sendmsg+0xa95/0xc70 [ 124.376167][ T6762] ? copy_msghdr_from_user+0x10a/0x160 [ 124.376185][ T6762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.376218][ T6762] ___sys_sendmsg+0x134/0x1d0 [ 124.376238][ T6762] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.376286][ T6762] __sys_sendmsg+0x16d/0x220 [ 124.376304][ T6762] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.376330][ T6762] ? rcu_is_watching+0x12/0xc0 [ 124.376356][ T6762] do_syscall_64+0xcd/0x260 [ 124.376379][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.376396][ T6762] RIP: 0033:0x7f252cf8e969 [ 124.376414][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.376429][ T6762] RSP: 002b:00007f252dea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.376444][ T6762] RAX: ffffffffffffffda RBX: 00007f252d1b5fa0 RCX: 00007f252cf8e969 [ 124.376455][ T6762] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 124.376464][ T6762] RBP: 00007f252dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 124.376474][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.376483][ T6762] R13: 0000000000000000 R14: 00007f252d1b5fa0 R15: 00007ffdd3fe2e08 [ 124.376504][ T6762] [ 125.874524][ T6787] FAULT_INJECTION: forcing a failure. [ 125.874524][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 125.951343][ T6793] FAULT_INJECTION: forcing a failure. [ 125.951343][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 125.964214][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.3.194 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 125.964240][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.964250][ T6793] Call Trace: [ 125.964256][ T6793] [ 125.964263][ T6793] dump_stack_lvl+0x16c/0x1f0 [ 125.964291][ T6793] should_fail_ex+0x512/0x640 [ 125.964309][ T6793] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 125.964328][ T6793] should_failslab+0xc2/0x120 [ 125.964347][ T6793] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.964365][ T6793] ? skb_clone+0x190/0x3f0 [ 125.964389][ T6793] skb_clone+0x190/0x3f0 [ 125.964411][ T6793] nfnetlink_rcv_batch+0x1dd/0x2350 [ 125.964440][ T6793] ? kmem_cache_free+0x2d4/0x4d0 [ 125.964463][ T6793] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 125.964491][ T6793] ? find_held_lock+0x2b/0x80 [ 125.964511][ T6793] ? __dev_queue_xmit+0x896/0x43e0 [ 125.964543][ T6793] ? avc_has_perm_noaudit+0x149/0x3b0 [ 125.964563][ T6793] ? __asan_memset+0x23/0x50 [ 125.964587][ T6793] ? __nla_validate_parse+0x600/0x2880 [ 125.964615][ T6793] ? __pfx___nla_validate_parse+0x10/0x10 [ 125.964640][ T6793] ? cap_capable+0xb3/0x250 [ 125.964664][ T6793] ? __nla_parse+0x40/0x60 [ 125.964689][ T6793] nfnetlink_rcv+0x3c1/0x430 [ 125.964713][ T6793] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 125.964744][ T6793] netlink_unicast+0x53a/0x7f0 [ 125.964771][ T6793] ? __pfx_netlink_unicast+0x10/0x10 [ 125.964801][ T6793] netlink_sendmsg+0x8d1/0xdd0 [ 125.964828][ T6793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.964860][ T6793] ____sys_sendmsg+0xa95/0xc70 [ 125.964887][ T6793] ? copy_msghdr_from_user+0x10a/0x160 [ 125.964906][ T6793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.964943][ T6793] ___sys_sendmsg+0x134/0x1d0 [ 125.964965][ T6793] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.965015][ T6793] __sys_sendmsg+0x16d/0x220 [ 125.965036][ T6793] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.965063][ T6793] ? rcu_is_watching+0x12/0xc0 [ 125.965095][ T6793] do_syscall_64+0xcd/0x260 [ 125.965118][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.965134][ T6793] RIP: 0033:0x7fb80338e969 [ 125.965149][ T6793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.965170][ T6793] RSP: 002b:00007fb804274038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.965187][ T6793] RAX: ffffffffffffffda RBX: 00007fb8035b5fa0 RCX: 00007fb80338e969 [ 125.965197][ T6793] RDX: 0000000000008090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 125.965207][ T6793] RBP: 00007fb804274090 R08: 0000000000000000 R09: 0000000000000000 [ 125.965217][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.965226][ T6793] R13: 0000000000000000 R14: 00007fb8035b5fa0 R15: 00007fff1aa0f898 [ 125.965248][ T6793] [ 126.225186][ T5871] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.242458][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.4.192 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 126.242482][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.242490][ T6787] Call Trace: [ 126.242495][ T6787] [ 126.242501][ T6787] dump_stack_lvl+0x16c/0x1f0 [ 126.242524][ T6787] should_fail_ex+0x512/0x640 [ 126.242541][ T6787] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 126.242559][ T6787] should_failslab+0xc2/0x120 [ 126.242576][ T6787] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 126.242591][ T6787] ? __alloc_skb+0x2b2/0x380 [ 126.242615][ T6787] __alloc_skb+0x2b2/0x380 [ 126.242630][ T6787] ? __pfx___alloc_skb+0x10/0x10 [ 126.242654][ T6787] netlink_ack+0x15d/0xb80 [ 126.242681][ T6787] netlink_rcv_skb+0x347/0x440 [ 126.242700][ T6787] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 126.242722][ T6787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.242752][ T6787] ? bpf_lsm_capable+0x9/0x10 [ 126.242765][ T6787] ? security_capable+0x7e/0x260 [ 126.242782][ T6787] ? ns_capable+0xd7/0x110 [ 126.242802][ T6787] nfnetlink_rcv+0x1b3/0x430 [ 126.242823][ T6787] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 126.242843][ T6787] ? netlink_deliver_tap+0x1ae/0xd30 [ 126.242866][ T6787] netlink_unicast+0x53a/0x7f0 [ 126.242887][ T6787] ? __pfx_netlink_unicast+0x10/0x10 [ 126.242912][ T6787] netlink_sendmsg+0x8d1/0xdd0 [ 126.242934][ T6787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.242961][ T6787] ____sys_sendmsg+0xa95/0xc70 [ 126.242983][ T6787] ? copy_msghdr_from_user+0x10a/0x160 [ 126.243000][ T6787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.243030][ T6787] ___sys_sendmsg+0x134/0x1d0 [ 126.243048][ T6787] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.243091][ T6787] __sys_sendmsg+0x16d/0x220 [ 126.243109][ T6787] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.243132][ T6787] ? rcu_is_watching+0x12/0xc0 [ 126.243159][ T6787] do_syscall_64+0xcd/0x260 [ 126.243181][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.243195][ T6787] RIP: 0033:0x7f61d1b8e969 [ 126.243207][ T6787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.243221][ T6787] RSP: 002b:00007f61d2a3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.243236][ T6787] RAX: ffffffffffffffda RBX: 00007f61d1db5fa0 RCX: 00007f61d1b8e969 [ 126.243245][ T6787] RDX: 0000000020000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 126.243254][ T6787] RBP: 00007f61d2a3b090 R08: 0000000000000000 R09: 0000000000000000 [ 126.243262][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.243270][ T6787] R13: 0000000000000000 R14: 00007f61d1db5fa0 R15: 00007fff94f18658 [ 126.243289][ T6787] [ 127.698098][ T5869] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.955735][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 127.962464][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.975292][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.986487][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.996523][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.009155][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.023624][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.077740][ T5869] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.090072][ T5869] usb 5-1: Manufacturer: syz [ 128.105644][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 128.120797][ T5871] usb 1-1: device descriptor read/all, error -71 [ 128.125327][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 128.211477][ T6814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.547677][ T6806] ceph: No mds server is up or the cluster is laggy [ 128.692681][ T5869] usb 5-1: config 0 descriptor?? [ 128.867183][ T30] audit: type=1400 audit(1745426754.225:345): avc: denied { block_suspend } for pid=6822 comm="syz.2.201" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.969836][ T6821] lo speed is unknown, defaulting to 1000 [ 129.767923][ T5869] rc_core: IR keymap rc-hauppauge not found [ 129.774005][ T5869] Registered IR keymap rc-empty [ 129.785254][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.799361][ T6832] netlink: 'syz.4.196': attribute type 8 has an invalid length. [ 129.826332][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.864822][ T6810] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.876559][ T6839] FAULT_INJECTION: forcing a failure. [ 129.876559][ T6839] name failslab, interval 1, probability 0, space 0, times 0 [ 129.876588][ T6839] CPU: 1 UID: 0 PID: 6839 Comm: syz.2.203 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 129.876608][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.876617][ T6839] Call Trace: [ 129.876622][ T6839] [ 129.876628][ T6839] dump_stack_lvl+0x16c/0x1f0 [ 129.876653][ T6839] should_fail_ex+0x512/0x640 [ 129.876670][ T6839] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 129.876690][ T6839] should_failslab+0xc2/0x120 [ 129.876709][ T6839] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 129.876727][ T6839] ? __alloc_skb+0x2b2/0x380 [ 129.876747][ T6839] __alloc_skb+0x2b2/0x380 [ 129.876764][ T6839] ? __pfx___alloc_skb+0x10/0x10 [ 129.876782][ T6839] ? genl_rcv_msg+0x4bb/0x800 [ 129.876812][ T6839] netlink_ack+0x15d/0xb80 [ 129.876835][ T6839] ? __lock_acquire+0xaa4/0x1ba0 [ 129.876855][ T6839] netlink_rcv_skb+0x347/0x440 [ 129.876876][ T6839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.876902][ T6839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.876938][ T6839] ? __pfx_down_read+0x10/0x10 [ 129.876963][ T6839] ? netlink_deliver_tap+0x1ae/0xd30 [ 129.876989][ T6839] genl_rcv+0x28/0x40 [ 129.877011][ T6839] netlink_unicast+0x53a/0x7f0 [ 129.877036][ T6839] ? __pfx_netlink_unicast+0x10/0x10 [ 129.877065][ T6839] netlink_sendmsg+0x8d1/0xdd0 [ 129.877089][ T6839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.877117][ T6839] ____sys_sendmsg+0xa95/0xc70 [ 129.877140][ T6839] ? copy_msghdr_from_user+0x10a/0x160 [ 129.877163][ T6839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.877195][ T6839] ___sys_sendmsg+0x134/0x1d0 [ 129.877213][ T6839] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.877258][ T6839] __sys_sendmsg+0x16d/0x220 [ 129.877275][ T6839] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.877298][ T6839] ? rcu_is_watching+0x12/0xc0 [ 129.877322][ T6839] do_syscall_64+0xcd/0x260 [ 129.877343][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.877358][ T6839] RIP: 0033:0x7ff7fed8e969 [ 129.877370][ T6839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.877385][ T6839] RSP: 002b:00007ff7ffc6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.877400][ T6839] RAX: ffffffffffffffda RBX: 00007ff7fefb5fa0 RCX: 00007ff7fed8e969 [ 129.877409][ T6839] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000004 [ 129.877418][ T6839] RBP: 00007ff7ffc6e090 R08: 0000000000000000 R09: 0000000000000000 [ 129.877426][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.877435][ T6839] R13: 0000000000000000 R14: 00007ff7fefb5fa0 R15: 00007ffcdad7d268 [ 129.877454][ T6839] [ 130.053058][ T6842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.205'. [ 130.054999][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 130.175478][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 130.212205][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.245753][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.265469][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.285208][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.305197][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.366461][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.405244][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.451569][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.476146][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.495256][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.565147][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 130.985322][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 131.086651][ T5869] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 131.094689][ T5869] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 131.117517][ T5869] usb 5-1: USB disconnect, device number 8 [ 131.146884][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 131.159189][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.212553][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.243913][ T6852] lo speed is unknown, defaulting to 1000 [ 132.183048][ T30] audit: type=1400 audit(1745426757.535:346): avc: denied { setopt } for pid=6851 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.209576][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.488562][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.600516][ T30] audit: type=1400 audit(1745426757.915:347): avc: denied { write } for pid=6862 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.620870][ T30] audit: type=1400 audit(1745426757.915:348): avc: denied { append } for pid=6862 comm="syz.4.210" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.948272][ T6878] lo speed is unknown, defaulting to 1000 [ 133.412537][ T24] usb 4-1: config 0 descriptor?? [ 133.430102][ T24] usb 4-1: can't set config #0, error -71 [ 133.548021][ T24] usb 4-1: USB disconnect, device number 14 [ 133.900779][ T6892] lo speed is unknown, defaulting to 1000 [ 133.970682][ T5869] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.004498][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 134.369930][ T5869] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 134.409937][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.454147][ T5869] usb 5-1: config 0 descriptor?? [ 134.803550][ T5869] kaweth 5-1:0.0: Firmware present in device. [ 134.855529][ T5876] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.368330][ T5869] kaweth 5-1:0.0: Statistics collection: 0 [ 135.374310][ T5869] kaweth 5-1:0.0: Multicast filter limit: 0 [ 135.384336][ T5871] IPVS: starting estimator thread 0... [ 135.426863][ T5869] kaweth 5-1:0.0: MTU: 0 [ 135.432179][ T5869] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 135.634516][ T6917] IPVS: using max 51 ests per chain, 122400 per kthread [ 136.085248][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 136.091654][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.101917][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.112821][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.127050][ T5876] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.137851][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.248865][ T5876] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.429255][ T5876] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.536790][ T30] audit: type=1400 audit(1745426761.875:349): avc: denied { ioctl } for pid=6930 comm="syz.2.223" path="socket:[11484]" dev="sockfs" ino=11484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.570158][ T30] audit: type=1400 audit(1745426761.875:350): avc: denied { connect } for pid=6930 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.593217][ T30] audit: type=1400 audit(1745426761.875:351): avc: denied { write } for pid=6930 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.633288][ T5876] usb 4-1: Manufacturer: syz [ 136.646487][ T5876] usb 4-1: config 0 descriptor?? [ 136.664042][ T30] audit: type=1400 audit(1745426762.015:352): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.733984][ T30] audit: type=1400 audit(1745426762.015:353): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 136.781226][ T30] audit: type=1400 audit(1745426762.015:354): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.808403][ T30] audit: type=1400 audit(1745426762.015:355): avc: denied { open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.831109][ T30] audit: type=1400 audit(1745426762.015:356): avc: denied { getattr } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.854493][ T30] audit: type=1400 audit(1745426762.115:357): avc: denied { read write } for pid=6932 comm="syz.0.224" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.943209][ T30] audit: type=1400 audit(1745426762.115:358): avc: denied { open } for pid=6932 comm="syz.0.224" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.977329][ T6935] fuse: Unknown parameter 'guoep_)ú›d' [ 137.295350][ T5876] rc_core: IR keymap rc-hauppauge not found [ 137.306561][ T5876] Registered IR keymap rc-empty [ 137.328291][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.341408][ T5869] kaweth 5-1:0.0: Error setting SOFS wait [ 137.359199][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.360151][ T5869] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 137.433297][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 137.450365][ T6943] lo speed is unknown, defaulting to 1000 [ 137.468535][ T5869] usb 5-1: USB disconnect, device number 9 [ 137.540774][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 137.570242][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.601484][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.666860][ T6946] netlink: 'syz.3.220': attribute type 8 has an invalid length. [ 137.809429][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.078393][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.175537][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.336800][ T6956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.477168][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.525531][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.710669][ T6964] netlink: 'syz.2.230': attribute type 21 has an invalid length. [ 138.710955][ T6964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.230'. [ 139.036546][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.070741][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.115228][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.151180][ T5876] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 139.202939][ T5876] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 139.326536][ T5876] usb 4-1: USB disconnect, device number 15 [ 139.351931][ T6953] lo speed is unknown, defaulting to 1000 [ 140.296883][ T6984] capability: warning: `syz.2.235' uses 32-bit capabilities (legacy support in use) [ 140.360250][ T6987] xt_TCPMSS: Only works on TCP SYN packets [ 141.620002][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 141.620016][ T30] audit: type=1400 audit(1745426766.975:438): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 141.698975][ T30] audit: type=1400 audit(1745426767.055:439): avc: denied { setopt } for pid=7000 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.725697][ T7001] ======================================================= [ 141.725697][ T7001] WARNING: The mand mount option has been deprecated and [ 141.725697][ T7001] and is ignored by this kernel. Remove the mand [ 141.725697][ T7001] option from the mount to silence this warning. [ 141.725697][ T7001] ======================================================= [ 141.773345][ T30] audit: type=1400 audit(1745426767.075:440): avc: denied { bind } for pid=7000 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.827560][ T30] audit: type=1400 audit(1745426767.075:441): avc: denied { name_bind } for pid=7000 comm="syz.4.239" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 141.849537][ T30] audit: type=1400 audit(1745426767.075:442): avc: denied { node_bind } for pid=7000 comm="syz.4.239" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 141.871255][ T30] audit: type=1400 audit(1745426767.075:443): avc: denied { mount } for pid=7000 comm="syz.4.239" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 141.937796][ T30] audit: type=1400 audit(1745426767.075:444): avc: denied { mounton } for pid=7000 comm="syz.4.239" path="/43/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 141.961588][ T30] audit: type=1400 audit(1745426767.085:445): avc: denied { remount } for pid=7000 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 142.055600][ T7006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.276872][ T30] audit: type=1400 audit(1745426767.295:446): avc: denied { append } for pid=7000 comm="syz.4.239" name="cec4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.503833][ T30] audit: type=1400 audit(1745426767.675:447): avc: denied { create } for pid=7007 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.085232][ T5871] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.389758][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 143.611920][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.713551][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.047189][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.074128][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 145.053714][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.069196][ T5871] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.078756][ T5871] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.087080][ T5871] usb 5-1: Manufacturer: syz [ 145.094245][ T5871] usb 5-1: config 0 descriptor?? [ 145.866312][ T5871] rc_core: IR keymap rc-hauppauge not found [ 145.886942][ T7053] netlink: 'syz.4.242': attribute type 8 has an invalid length. [ 145.898010][ T5871] Registered IR keymap rc-empty [ 145.978368][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.077759][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.100023][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 146.220961][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 146.295008][ T7062] usb usb8: usbfs: process 7062 (syz.1.255) did not claim interface 0 before use [ 147.223879][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.255186][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.263608][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 147.263624][ T30] audit: type=1400 audit(1745426772.545:468): avc: denied { create } for pid=7060 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.291694][ T30] audit: type=1326 audit(1745426772.605:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.1.255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17e7b8e969 code=0x0 [ 147.352021][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.365042][ T7064] lo speed is unknown, defaulting to 1000 [ 147.380729][ T7075] FAULT_INJECTION: forcing a failure. [ 147.380729][ T7075] name failslab, interval 1, probability 0, space 0, times 0 [ 147.434823][ T7075] CPU: 0 UID: 0 PID: 7075 Comm: syz.3.259 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 147.434849][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.434859][ T7075] Call Trace: [ 147.434866][ T7075] [ 147.434873][ T7075] dump_stack_lvl+0x16c/0x1f0 [ 147.434900][ T7075] should_fail_ex+0x512/0x640 [ 147.434918][ T7075] ? fs_reclaim_acquire+0xae/0x150 [ 147.434943][ T7075] ? tomoyo_encode2+0x100/0x3e0 [ 147.434965][ T7075] should_failslab+0xc2/0x120 [ 147.434984][ T7075] __kmalloc_noprof+0xd2/0x510 [ 147.435000][ T7075] ? d_absolute_path+0x136/0x1a0 [ 147.435025][ T7075] tomoyo_encode2+0x100/0x3e0 [ 147.435051][ T7075] tomoyo_encode+0x29/0x50 [ 147.435074][ T7075] tomoyo_realpath_from_path+0x18f/0x6e0 [ 147.435104][ T7075] tomoyo_path_number_perm+0x245/0x580 [ 147.435123][ T7075] ? tomoyo_path_number_perm+0x237/0x580 [ 147.435151][ T7075] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.435172][ T7075] ? find_held_lock+0x2b/0x80 [ 147.435213][ T7075] ? find_held_lock+0x2b/0x80 [ 147.435232][ T7075] ? hook_file_ioctl_common+0x145/0x410 [ 147.435255][ T7075] ? __fget_files+0x20e/0x3c0 [ 147.435275][ T7075] security_file_ioctl+0x9b/0x240 [ 147.435298][ T7075] __x64_sys_ioctl+0xb7/0x200 [ 147.435322][ T7075] do_syscall_64+0xcd/0x260 [ 147.435345][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.435362][ T7075] RIP: 0033:0x7fb80338e969 [ 147.435376][ T7075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.435391][ T7075] RSP: 002b:00007fb804274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.435406][ T7075] RAX: ffffffffffffffda RBX: 00007fb8035b5fa0 RCX: 00007fb80338e969 [ 147.435417][ T7075] RDX: 0000200000000100 RSI: 00000000c040565f RDI: 0000000000000003 [ 147.435427][ T7075] RBP: 00007fb804274090 R08: 0000000000000000 R09: 0000000000000000 [ 147.435436][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.435446][ T7075] R13: 0000000000000000 R14: 00007fb8035b5fa0 R15: 00007fff1aa0f898 [ 147.435468][ T7075] [ 147.438112][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.447645][ T7075] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.755288][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.775609][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.795236][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.796057][ T30] audit: type=1400 audit(1745426773.155:471): avc: denied { ioctl } for pid=7076 comm="syz.2.258" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11757 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 147.815294][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.863532][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.905757][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.915593][ T7083] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 147.923785][ T7082] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 147.953651][ T5871] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 148.098597][ T5871] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 148.221881][ T5871] usb 5-1: USB disconnect, device number 10 [ 148.247217][ T30] audit: type=1400 audit(1745426773.145:470): avc: denied { create } for pid=7060 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.403311][ T30] audit: type=1400 audit(1745426773.335:472): avc: denied { read } for pid=7076 comm="syz.2.258" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.428800][ T30] audit: type=1400 audit(1745426773.355:473): avc: denied { open } for pid=7076 comm="syz.2.258" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.934899][ T30] audit: type=1400 audit(1745426773.905:474): avc: denied { create } for pid=7076 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.967411][ T30] audit: type=1400 audit(1745426773.995:475): avc: denied { ioctl } for pid=7076 comm="syz.2.258" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.193941][ T30] audit: type=1400 audit(1745426775.425:476): avc: denied { getopt } for pid=7106 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.797195][ T30] audit: type=1400 audit(1745426775.645:477): avc: denied { setopt } for pid=7106 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.039302][ T7117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.316883][ T7119] trusted_key: encrypted_key: insufficient parameters specified [ 151.548893][ T7131] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 151.601601][ T7126] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 151.774550][ T7128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.849960][ T7135] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 152.961074][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 152.961089][ T30] audit: type=1400 audit(1745426778.315:480): avc: denied { ioctl } for pid=7141 comm="syz.4.276" path="socket:[11863]" dev="sockfs" ino=11863 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.002926][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 153.019140][ T30] audit: type=1400 audit(1745426778.375:481): avc: denied { setopt } for pid=7150 comm="syz.0.278" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.047936][ T30] audit: type=1400 audit(1745426778.395:482): avc: denied { connect } for pid=7150 comm="syz.0.278" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.055263][ T5871] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.068780][ T30] audit: type=1400 audit(1745426778.395:483): avc: denied { write } for pid=7150 comm="syz.0.278" path="socket:[11872]" dev="sockfs" ino=11872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.099899][ T30] audit: type=1400 audit(1745426778.395:484): avc: denied { read } for pid=7150 comm="syz.0.278" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.123290][ T30] audit: type=1400 audit(1745426778.395:485): avc: denied { open } for pid=7150 comm="syz.0.278" path="/dev/nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.147704][ T30] audit: type=1400 audit(1745426778.395:486): avc: denied { ioctl } for pid=7150 comm="syz.0.278" path="/dev/nbd0" dev="devtmpfs" ino=679 ioctlcmd=0xab00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.148012][ T7152] block nbd0: shutting down sockets [ 153.390391][ T5871] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 153.455687][ T5871] usb 3-1: config 0 has no interface number 1 [ 153.528312][ T7161] block nbd0: shutting down sockets [ 153.578544][ T5871] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 153.742907][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.809841][ T5871] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 154.032830][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.723725][ T30] audit: type=1400 audit(1745426780.075:487): avc: denied { create } for pid=7168 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.865145][ T5871] usb 3-1: SerialNumber: syz [ 155.102803][ T5871] usb 3-1: config 0 descriptor?? [ 155.140348][ T7175] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 155.149009][ T7174] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 155.442447][ T7180] lo speed is unknown, defaulting to 1000 [ 155.594292][ T30] audit: type=1400 audit(1745426780.945:488): avc: denied { write } for pid=7183 comm="syz.1.287" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 155.691829][ T5871] usb 3-1: Found UVC 0.00 device (0002:0000) [ 155.712314][ T5871] usb 3-1: No valid video chain found. [ 155.743654][ T30] audit: type=1400 audit(1745426780.985:489): avc: denied { map } for pid=7183 comm="syz.1.287" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.789020][ T5871] usb 3-1: USB disconnect, device number 8 [ 155.959076][ T7190] block nbd4: shutting down sockets [ 156.990441][ T5871] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 157.466843][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 157.619616][ T5871] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 157.638137][ T5871] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 158.030690][ T5871] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 158.071161][ T7232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.546622][ T5871] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 158.577175][ T7235] FAULT_INJECTION: forcing a failure. [ 158.577175][ T7235] name failslab, interval 1, probability 0, space 0, times 0 [ 158.577866][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 158.603226][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 158.628815][ T5871] usb 5-1: string descriptor 0 read error: -22 [ 158.646640][ T7235] CPU: 0 UID: 0 PID: 7235 Comm: syz.1.300 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 158.646667][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.646677][ T7235] Call Trace: [ 158.646682][ T7235] [ 158.646688][ T7235] dump_stack_lvl+0x16c/0x1f0 [ 158.646717][ T7235] should_fail_ex+0x512/0x640 [ 158.646734][ T7235] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 158.646752][ T7235] should_failslab+0xc2/0x120 [ 158.646769][ T7235] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 158.646785][ T7235] ? __alloc_skb+0x2b2/0x380 [ 158.646807][ T7235] __alloc_skb+0x2b2/0x380 [ 158.646823][ T7235] ? __pfx___alloc_skb+0x10/0x10 [ 158.646842][ T7235] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 158.646867][ T7235] netlink_alloc_large_skb+0x69/0x130 [ 158.646890][ T7235] netlink_sendmsg+0x6a1/0xdd0 [ 158.646914][ T7235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.646941][ T7235] ____sys_sendmsg+0xa95/0xc70 [ 158.646964][ T7235] ? copy_msghdr_from_user+0x10a/0x160 [ 158.646982][ T7235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.647015][ T7235] ___sys_sendmsg+0x134/0x1d0 [ 158.647035][ T7235] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.647089][ T7235] __sys_sendmsg+0x16d/0x220 [ 158.647108][ T7235] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.647132][ T7235] ? rcu_is_watching+0x12/0xc0 [ 158.647159][ T7235] do_syscall_64+0xcd/0x260 [ 158.647183][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.647200][ T7235] RIP: 0033:0x7f17e7b8e969 [ 158.647213][ T7235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.647227][ T7235] RSP: 002b:00007f17e59f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.647242][ T7235] RAX: ffffffffffffffda RBX: 00007f17e7db5fa0 RCX: 00007f17e7b8e969 [ 158.647252][ T7235] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 158.647262][ T7235] RBP: 00007f17e59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.647271][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.647280][ T7235] R13: 0000000000000000 R14: 00007f17e7db5fa0 R15: 00007ffe7f1b91f8 [ 158.647301][ T7235] [ 158.665289][ T5871] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 158.665317][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.667413][ T5871] usb 5-1: config 0 descriptor?? [ 158.669510][ T5871] hub 5-1:0.0: bad descriptor, ignoring hub [ 158.669533][ T5871] hub 5-1:0.0: probe with driver hub failed with error -5 [ 158.885909][ T5870] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.441271][ T7255] block nbd1: shutting down sockets [ 160.551555][ T7239] tty tty1: ldisc open failed (-12), clearing slot 0 [ 160.716310][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 160.716325][ T30] audit: type=1400 audit(1745426785.985:495): avc: denied { bind } for pid=7256 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.743892][ T30] audit: type=1400 audit(1745426785.985:496): avc: denied { create } for pid=7256 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.763555][ T30] audit: type=1400 audit(1745426785.985:497): avc: denied { bind } for pid=7256 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.532067][ T7267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.065416][ T5869] usb 5-1: USB disconnect, device number 11 [ 162.659611][ T7279] FAULT_INJECTION: forcing a failure. [ 162.659611][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 162.672626][ T7279] CPU: 0 UID: 0 PID: 7279 Comm: syz.4.311 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 162.672649][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.672659][ T7279] Call Trace: [ 162.672664][ T7279] [ 162.672671][ T7279] dump_stack_lvl+0x16c/0x1f0 [ 162.672698][ T7279] should_fail_ex+0x512/0x640 [ 162.672716][ T7279] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 162.672744][ T7279] should_failslab+0xc2/0x120 [ 162.672762][ T7279] __kmalloc_cache_noprof+0x6a/0x3e0 [ 162.672787][ T7279] ? lockdep_init_map_type+0x5c/0x280 [ 162.672802][ T7279] ? register_netdevice+0x4eb/0x2270 [ 162.672828][ T7279] register_netdevice+0x4eb/0x2270 [ 162.672853][ T7279] ? __pfx_validate_linkmsg+0x10/0x10 [ 162.672873][ T7279] ? __pfx_register_netdevice+0x10/0x10 [ 162.672902][ T7279] br_dev_newlink+0x6a/0x170 [ 162.672924][ T7279] ? __pfx_br_dev_newlink+0x10/0x10 [ 162.672949][ T7279] rtnl_newlink+0xc42/0x2000 [ 162.672977][ T7279] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.672997][ T7279] ? find_held_lock+0x2b/0x80 [ 162.673018][ T7279] ? avc_has_perm_noaudit+0x117/0x3b0 [ 162.673039][ T7279] ? avc_has_perm_noaudit+0x149/0x3b0 [ 162.673078][ T7279] ? find_held_lock+0x2b/0x80 [ 162.673096][ T7279] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.673115][ T7279] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.673134][ T7279] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 162.673155][ T7279] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.673177][ T7279] rtnetlink_rcv_msg+0x95b/0xe90 [ 162.673200][ T7279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.673234][ T7279] netlink_rcv_skb+0x16a/0x440 [ 162.673256][ T7279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.673279][ T7279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.673316][ T7279] ? netlink_deliver_tap+0x1ae/0xd30 [ 162.673349][ T7279] netlink_unicast+0x53a/0x7f0 [ 162.673374][ T7279] ? __pfx_netlink_unicast+0x10/0x10 [ 162.673404][ T7279] netlink_sendmsg+0x8d1/0xdd0 [ 162.673431][ T7279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.673462][ T7279] ____sys_sendmsg+0xa95/0xc70 [ 162.673488][ T7279] ? copy_msghdr_from_user+0x10a/0x160 [ 162.673508][ T7279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.673545][ T7279] ___sys_sendmsg+0x134/0x1d0 [ 162.673567][ T7279] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.673619][ T7279] __sys_sendmsg+0x16d/0x220 [ 162.673640][ T7279] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.673668][ T7279] ? rcu_is_watching+0x12/0xc0 [ 162.673696][ T7279] do_syscall_64+0xcd/0x260 [ 162.673721][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.673738][ T7279] RIP: 0033:0x7f61d1b8e969 [ 162.673753][ T7279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.673768][ T7279] RSP: 002b:00007f61d2a3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.673785][ T7279] RAX: ffffffffffffffda RBX: 00007f61d1db5fa0 RCX: 00007f61d1b8e969 [ 162.673795][ T7279] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 162.673805][ T7279] RBP: 00007f61d2a3b090 R08: 0000000000000000 R09: 0000000000000000 [ 162.673814][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.673823][ T7279] R13: 0000000000000000 R14: 00007f61d1db5fa0 R15: 00007fff94f18658 [ 162.673847][ T7279] [ 163.184505][ T7285] block nbd2: shutting down sockets [ 164.173507][ T30] audit: type=1400 audit(1745426789.525:498): avc: denied { read write } for pid=7314 comm="syz.2.322" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.212971][ T30] audit: type=1400 audit(1745426789.525:499): avc: denied { open } for pid=7314 comm="syz.2.322" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.255290][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.395170][ T5871] usb 2-1: device descriptor read/64, error -71 [ 164.685259][ T5871] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.860659][ T30] audit: type=1400 audit(1745426790.215:500): avc: denied { create } for pid=7327 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 165.201082][ T5871] usb 2-1: device descriptor read/64, error -71 [ 165.208379][ T30] audit: type=1400 audit(1745426790.215:501): avc: denied { nlmsg_write } for pid=7327 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 165.229492][ T30] audit: type=1400 audit(1745426790.215:502): avc: denied { connect } for pid=7327 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.318806][ T5871] usb usb2-port1: attempt power cycle [ 165.461067][ T7333] netlink: 'syz.0.326': attribute type 2 has an invalid length. [ 165.735551][ T7335] block nbd2: shutting down sockets [ 165.925877][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.075858][ T7341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.775730][ T5871] usb 2-1: device descriptor read/8, error -71 [ 167.030274][ T5871] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.038110][ T30] audit: type=1400 audit(1745426792.345:503): avc: denied { override_creds } for pid=7344 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 167.313525][ T30] audit: type=1400 audit(1745426792.665:504): avc: denied { append } for pid=7351 comm="syz.3.332" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.378206][ T5871] usb 2-1: device not accepting address 8, error -71 [ 167.436769][ T5871] usb usb2-port1: unable to enumerate USB device [ 167.571422][ T30] audit: type=1400 audit(1745426792.695:505): avc: denied { setopt } for pid=7352 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 167.711988][ T7362] syz_tun: entered allmulticast mode [ 167.791132][ T30] audit: type=1400 audit(1745426792.955:506): avc: denied { name_bind } for pid=7355 comm="syz.1.334" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 167.813763][ C0] hrtimer: interrupt took 1647327 ns [ 167.825569][ T30] audit: type=1400 audit(1745426792.965:507): avc: denied { map } for pid=7357 comm="syz.2.335" path="pipe:[12615]" dev="pipefs" ino=12615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 168.770319][ T7355] syz_tun: left allmulticast mode [ 168.955150][ T30] audit: type=1400 audit(1745426794.295:508): avc: denied { append } for pid=7371 comm="syz.0.338" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 169.023704][ T30] audit: type=1400 audit(1745426794.295:509): avc: denied { shutdown } for pid=7371 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.053352][ T30] audit: type=1400 audit(1745426794.295:510): avc: denied { ioctl } for pid=7371 comm="syz.0.338" path="socket:[12654]" dev="sockfs" ino=12654 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.208742][ T30] audit: type=1400 audit(1745426794.295:511): avc: denied { read } for pid=7371 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.228614][ T30] audit: type=1400 audit(1745426794.365:512): avc: denied { create } for pid=7375 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.357786][ T7383] block nbd0: shutting down sockets [ 170.548429][ T7378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.206488][ T7411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.982901][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 173.982930][ T30] audit: type=1400 audit(1745426799.335:523): avc: denied { write } for pid=7420 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.305426][ T5871] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.566757][ T5871] usb 3-1: config 3 has an invalid interface number: 7 but max is 0 [ 174.591369][ T5871] usb 3-1: config 3 has no interface number 0 [ 174.609643][ T5871] usb 3-1: config 3 interface 7 altsetting 6 has an endpoint descriptor with address 0x1A, changing to 0xA [ 174.650407][ T5871] usb 3-1: config 3 interface 7 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.965452][ T5900] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 175.279765][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 175.428464][ T5900] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 175.520374][ T5900] usb 1-1: config 8 has no interface number 0 [ 175.569786][ T5900] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 175.655497][ T5871] usb 3-1: config 3 interface 7 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.665375][ T5871] usb 3-1: config 3 interface 7 has no altsetting 0 [ 175.676725][ T5871] usb 3-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b [ 175.681044][ T5900] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 3 [ 175.701609][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.709731][ T5871] usb 3-1: Product: syz [ 175.713926][ T5871] usb 3-1: Manufacturer: syz [ 175.718671][ T5871] usb 3-1: SerialNumber: syz [ 175.755919][ T30] audit: type=1326 audit(1745426801.095:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d1b8e969 code=0x7ffc0000 [ 175.760096][ T7440] netlink: 44 bytes leftover after parsing attributes in process `syz.4.357'. [ 175.803321][ T5900] usb 1-1: config 8 interface 39 has no altsetting 0 [ 175.831284][ T30] audit: type=1326 audit(1745426801.095:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d1b8e969 code=0x7ffc0000 [ 175.858795][ T30] audit: type=1326 audit(1745426801.095:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61d1b8e969 code=0x7ffc0000 [ 175.892361][ T7443] syz_tun: entered allmulticast mode [ 175.898618][ T5900] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 175.901021][ T30] audit: type=1326 audit(1745426801.095:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d1b8e969 code=0x7ffc0000 [ 175.912402][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.951409][ T7443] lo: entered allmulticast mode [ 175.976504][ T5900] usb 1-1: Product: syz [ 175.980775][ T30] audit: type=1326 audit(1745426801.095:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61d1b8e969 code=0x7ffc0000 [ 175.980821][ T30] audit: type=1326 audit(1745426801.105:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d1b8e969 code=0x7ffc0000 [ 175.980877][ T30] audit: type=1326 audit(1745426801.105:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d1b8e969 code=0x7ffc0000 [ 175.980913][ T30] audit: type=1326 audit(1745426801.105:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f61d1b8e969 code=0x7ffc0000 [ 175.980949][ T30] audit: type=1326 audit(1745426801.105:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f61d1b85927 code=0x7ffc0000 [ 176.221455][ T5900] usb 1-1: Manufacturer: syz [ 176.422769][ T5900] usb 1-1: SerialNumber: syz [ 176.432569][ T7433] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 176.490671][ T5871] radio-si470x 3-1:3.7: si470x_get_report: usb_control_msg returned -71 [ 176.504130][ T5871] radio-si470x 3-1:3.7: probe with driver radio-si470x failed with error -5 [ 176.523214][ T5871] usb 3-1: USB disconnect, device number 10 [ 176.734686][ T7441] syz_tun: left allmulticast mode [ 176.747978][ T7441] lo: left allmulticast mode [ 176.748490][ T5900] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 177.132170][ T5900] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 177.159300][ T5900] usb 1-1: USB disconnect, device number 9 [ 177.785189][ T5871] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.963275][ T5871] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 178.052217][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.144859][ T5871] usb 5-1: Product: syz [ 178.193808][ T5871] usb 5-1: Manufacturer: syz [ 178.261284][ T5871] usb 5-1: SerialNumber: syz [ 178.375594][ T5871] usb 5-1: config 0 descriptor?? [ 178.576182][ T5871] comedi comedi0: Wrong number of endpoints [ 178.633465][ T5871] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 182.005886][ T5869] usb 5-1: USB disconnect, device number 12 [ 184.245324][ T5871] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 184.319383][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 184.321589][ T30] audit: type=1400 audit(1745426809.665:600): avc: denied { read write } for pid=7504 comm="syz.0.375" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.455577][ T30] audit: type=1400 audit(1745426809.665:601): avc: denied { open } for pid=7504 comm="syz.0.375" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.483368][ T30] audit: type=1400 audit(1745426809.775:602): avc: denied { ioctl } for pid=7504 comm="syz.0.375" path="socket:[13026]" dev="sockfs" ino=13026 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.537164][ T5871] usb 3-1: not running at top speed; connect to a high speed hub [ 184.568540][ T5871] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.595298][ T5871] usb 3-1: config 1 has no interface number 1 [ 184.601440][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 184.969919][ T5871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.999902][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.031581][ T5871] usb 3-1: Product: syz [ 185.048636][ T5871] usb 3-1: Manufacturer: syz [ 185.052976][ T7529] bridge_slave_0: left allmulticast mode [ 185.057869][ T5871] usb 3-1: SerialNumber: syz [ 185.079418][ T7529] bridge_slave_0: left promiscuous mode [ 185.152457][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.881079][ T5871] usb 3-1: failed to enable PITCH for EP 0x82 [ 185.897855][ T30] audit: type=1400 audit(1745426811.255:603): avc: denied { accept } for pid=7528 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 185.920900][ T7529] bridge_slave_1: left allmulticast mode [ 185.938761][ T7529] bridge_slave_1: left promiscuous mode [ 185.945316][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.046018][ T30] audit: type=1400 audit(1745426811.405:604): avc: denied { ioctl } for pid=7528 comm="syz.1.381" path="socket:[13609]" dev="sockfs" ino=13609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.086984][ T5871] usb 3-1: USB disconnect, device number 11 [ 186.113503][ T7529] bond0: (slave bond_slave_0): Releasing backup interface [ 188.111281][ T7529] bond0: (slave bond_slave_1): Releasing backup interface [ 188.119810][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.607259][ T7529] team0: Port device team_slave_0 removed [ 188.653643][ T7529] team0: Port device team_slave_1 removed [ 188.668295][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.691034][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.711659][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.755630][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.202880][ T7536] vlan2: entered allmulticast mode [ 189.217748][ T7536] bond0: entered allmulticast mode [ 189.234655][ T7536] bridge0: port 1(vlan2) entered blocking state [ 189.234962][ T7563] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 189.250511][ T7536] bridge0: port 1(vlan2) entered disabled state [ 189.361575][ T30] audit: type=1400 audit(1745426814.705:605): avc: denied { watch watch_reads } for pid=7562 comm="syz.0.388" path="/59" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 189.409544][ T7563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.442379][ T7565] bridge_slave_0: left promiscuous mode [ 189.469176][ T5900] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 189.476152][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.504051][ T7565] bridge_slave_1: left promiscuous mode [ 189.557568][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.601984][ T30] audit: type=1400 audit(1745426814.955:606): avc: denied { write } for pid=7571 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.638929][ T7565] bond0: (slave bond_slave_0): Releasing backup interface [ 189.655444][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 189.895861][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.972964][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.974688][ T7565] bond0: (slave bond_slave_1): Releasing backup interface [ 189.995370][ T5900] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 190.014616][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.048232][ T5900] usb 3-1: config 0 descriptor?? [ 190.075586][ T7574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.138607][ T7565] team0: Port device team_slave_0 removed [ 190.162711][ T7565] team0: Port device team_slave_1 removed [ 190.173471][ T7565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.181858][ T7565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.202443][ T7568] bond0: left allmulticast mode [ 190.262634][ T5871] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 190.380136][ T7568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.535032][ T7568] bond0: entered allmulticast mode [ 190.544714][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.569401][ T5900] hid-picolcd 0003:04D8:F002.0004: item fetching failed at offset 3/5 [ 190.577469][ T5871] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 190.579860][ T5900] hid-picolcd 0003:04D8:F002.0004: device report parse failed [ 190.587212][ T7568] team0: Port device bond0 added [ 190.617484][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.625396][ T5900] hid-picolcd 0003:04D8:F002.0004: probe with driver hid-picolcd failed with error -22 [ 190.659383][ T5871] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 190.687616][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.697500][ T7563] ip6erspan0: entered promiscuous mode [ 190.725357][ T5871] usb 5-1: Product: syz [ 190.737381][ T5871] usb 5-1: Manufacturer: syz [ 190.745159][ T5871] usb 5-1: SerialNumber: syz [ 190.800974][ T5871] usb 5-1: config 0 descriptor?? [ 190.832463][ T5871] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 190.840598][ T7582] lo speed is unknown, defaulting to 1000 [ 190.863934][ T5871] usb 5-1: No valid video chain found. [ 191.034156][ T30] audit: type=1400 audit(1745426816.385:607): avc: denied { getopt } for pid=7586 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.908505][ T5868] usb 3-1: USB disconnect, device number 12 [ 192.521280][ T5871] usb 5-1: USB disconnect, device number 13 [ 192.782526][ T7598] xt_policy: neither incoming nor outgoing policy selected [ 193.728311][ T7599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.873070][ T7611] FAULT_INJECTION: forcing a failure. [ 193.873070][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.891470][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz.2.404 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 193.891498][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.891508][ T7611] Call Trace: [ 193.891514][ T7611] [ 193.891521][ T7611] dump_stack_lvl+0x16c/0x1f0 [ 193.891549][ T7611] should_fail_ex+0x512/0x640 [ 193.891572][ T7611] _copy_to_user+0x32/0xd0 [ 193.891593][ T7611] simple_read_from_buffer+0xcb/0x170 [ 193.891620][ T7611] proc_fail_nth_read+0x197/0x270 [ 193.891647][ T7611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.891674][ T7611] ? rw_verify_area+0xcf/0x680 [ 193.891695][ T7611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.891720][ T7611] vfs_read+0x1de/0xc70 [ 193.891748][ T7611] ? __pfx___mutex_lock+0x10/0x10 [ 193.891771][ T7611] ? __pfx_vfs_read+0x10/0x10 [ 193.891801][ T7611] ? __fget_files+0x20e/0x3c0 [ 193.891825][ T7611] ksys_read+0x12a/0x240 [ 193.891839][ T7611] ? __pfx_ksys_read+0x10/0x10 [ 193.891861][ T7611] ? rcu_is_watching+0x12/0xc0 [ 193.891889][ T7611] do_syscall_64+0xcd/0x260 [ 193.891913][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.891930][ T7611] RIP: 0033:0x7ff7fed8d37c [ 193.891944][ T7611] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 193.891960][ T7611] RSP: 002b:00007ff7ffc6e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.891977][ T7611] RAX: ffffffffffffffda RBX: 00007ff7fefb5fa0 RCX: 00007ff7fed8d37c [ 193.892008][ T7611] RDX: 000000000000000f RSI: 00007ff7ffc6e0a0 RDI: 0000000000000004 [ 193.892018][ T7611] RBP: 00007ff7ffc6e090 R08: 0000000000000000 R09: 0000000000000000 [ 193.892027][ T7611] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 193.892037][ T7611] R13: 0000000000000000 R14: 00007ff7fefb5fa0 R15: 00007ffcdad7d268 [ 193.892060][ T7611] [ 194.096796][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.145784][ T30] audit: type=1400 audit(1745426819.495:608): avc: denied { write } for pid=7613 comm="syz.2.406" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.270624][ T7626] overlayfs: failed to resolve './file0': -2 [ 197.834221][ T30] audit: type=1400 audit(1745426823.185:609): avc: denied { accept } for pid=7651 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.033428][ T7653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.416'. [ 198.535493][ T5868] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.871231][ T30] audit: type=1400 audit(1745426824.225:610): avc: denied { setopt } for pid=7661 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.895949][ T30] audit: type=1400 audit(1745426824.225:611): avc: denied { read } for pid=7661 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.921241][ T30] audit: type=1400 audit(1745426824.275:612): avc: denied { ioctl } for pid=7661 comm="syz.0.417" path="socket:[14391]" dev="sockfs" ino=14391 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 200.002758][ T30] audit: type=1400 audit(1745426824.695:613): avc: denied { mount } for pid=7648 comm="syz.2.415" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 200.102437][ T30] audit: type=1400 audit(1745426824.695:614): avc: denied { remount } for pid=7648 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 200.316166][ T7675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.735649][ T7682] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 201.757946][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.766440][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 201.774018][ T5868] usb 3-1: can't read configurations, error -71 [ 201.819704][ T30] audit: type=1400 audit(1745426827.145:615): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.933355][ T30] audit: type=1400 audit(1745426827.145:616): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.020699][ T30] audit: type=1400 audit(1745426827.145:617): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.160947][ T30] audit: type=1400 audit(1745426827.145:618): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.321781][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 203.321809][ T30] audit: type=1400 audit(1745426828.675:624): avc: denied { write } for pid=7704 comm="syz.3.429" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.380319][ T7698] xt_policy: neither incoming nor outgoing policy selected [ 203.405226][ T30] audit: type=1400 audit(1745426828.705:625): avc: denied { open } for pid=7704 comm="syz.3.429" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.754614][ T30] audit: type=1400 audit(1745426828.745:626): avc: denied { read } for pid=7704 comm="syz.3.429" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 203.780788][ T30] audit: type=1400 audit(1745426828.745:627): avc: denied { open } for pid=7704 comm="syz.3.429" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 203.810643][ T7710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.825767][ T30] audit: type=1400 audit(1745426828.755:628): avc: denied { read } for pid=7704 comm="syz.3.429" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.851909][ T30] audit: type=1400 audit(1745426828.795:629): avc: denied { ioctl } for pid=7707 comm="syz.0.430" path="socket:[14589]" dev="sockfs" ino=14589 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.883031][ T30] audit: type=1400 audit(1745426828.795:630): avc: denied { connect } for pid=7707 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.961457][ T30] audit: type=1400 audit(1745426828.795:631): avc: denied { write } for pid=7707 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.041572][ T30] audit: type=1400 audit(1745426828.795:632): avc: denied { read } for pid=7707 comm="syz.0.430" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.195484][ T30] audit: type=1400 audit(1745426828.795:633): avc: denied { open } for pid=7707 comm="syz.0.430" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.260744][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 204.283850][ T7719] TCP: out of memory -- consider tuning tcp_mem [ 204.688939][ T7727] xt_policy: neither incoming nor outgoing policy selected [ 205.535267][ T5900] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 205.645518][ T5870] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.787020][ T5948] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.860381][ T5870] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 206.079257][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.118223][ T5870] usb 3-1: Product: syz [ 206.145550][ T5870] usb 3-1: Manufacturer: syz [ 206.164986][ T5870] usb 3-1: SerialNumber: syz [ 206.186432][ T5870] usb 3-1: config 0 descriptor?? [ 206.208179][ T5870] comedi comedi0: Wrong number of endpoints [ 206.218492][ T5870] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 206.489403][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 207.559198][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 207.577106][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 207.594970][ T5948] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 207.604529][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.730811][ T5948] usb 2-1: Product: syz [ 207.825151][ T5948] usb 2-1: Manufacturer: syz [ 208.580485][ T5948] usb 2-1: SerialNumber: syz [ 208.588880][ T5948] usb 2-1: config 0 descriptor?? [ 208.615153][ T5869] usb 3-1: USB disconnect, device number 15 [ 208.698819][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 208.698836][ T30] audit: type=1400 audit(1745426833.995:635): avc: denied { read } for pid=7735 comm="syz.1.439" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 208.838650][ T30] audit: type=1400 audit(1745426833.995:636): avc: denied { open } for pid=7735 comm="syz.1.439" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 208.889845][ T7764] block nbd2: shutting down sockets [ 209.051261][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 209.225587][ T5948] usb 2-1: can't set config #0, error -71 [ 209.315779][ T5948] usb 2-1: USB disconnect, device number 9 [ 209.673929][ T30] audit: type=1400 audit(1745426835.025:637): avc: denied { getopt } for pid=7771 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.746936][ T30] audit: type=1400 audit(1745426835.095:638): avc: denied { setopt } for pid=7782 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.463739][ T5948] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.535951][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 210.665394][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 210.740137][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.929774][ T30] audit: type=1400 audit(1745426836.255:639): avc: denied { write } for pid=7793 comm="syz.4.456" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 211.016198][ T5870] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 211.039557][ T30] audit: type=1400 audit(1745426836.385:640): avc: denied { create } for pid=7797 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 211.111771][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.179599][ T5870] usb 4-1: Product: syz [ 211.227947][ T5870] usb 4-1: Manufacturer: syz [ 211.252869][ T30] audit: type=1400 audit(1745426836.425:641): avc: denied { bind } for pid=7797 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 211.284269][ T5870] usb 4-1: SerialNumber: syz [ 211.327313][ T5870] usb 4-1: config 0 descriptor?? [ 211.350365][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.362257][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 211.372783][ T5948] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 211.468678][ T30] audit: type=1400 audit(1745426836.665:642): avc: denied { read } for pid=7802 comm="syz.2.458" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 211.480842][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.510513][ T5870] comedi comedi0: Wrong number of endpoints [ 211.510550][ T5870] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 211.533901][ T30] audit: type=1400 audit(1745426836.665:643): avc: denied { open } for pid=7802 comm="syz.2.458" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 211.562192][ T30] audit: type=1400 audit(1745426836.675:644): avc: denied { ioctl } for pid=7802 comm="syz.2.458" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 211.636470][ T5948] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 211.647016][ T5948] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 211.655990][ T5948] usb 2-1: Manufacturer: syz [ 211.664578][ T5948] usb 2-1: config 0 descriptor?? [ 211.745249][ T5900] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 212.075458][ T5900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 212.101682][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.141906][ T5900] usb 3-1: config 0 descriptor?? [ 212.197910][ T5948] rc_core: IR keymap rc-hauppauge not found [ 212.214001][ T5948] Registered IR keymap rc-empty [ 212.228105][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.500800][ T7816] netlink: 'syz.1.451': attribute type 8 has an invalid length. [ 212.502027][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.553777][ T5900] [drm] vendor descriptor length:6 data:06 5f 01 6f 33 36 00 00 00 00 00 [ 212.563312][ T5900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 212.586511][ T5948] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 212.618132][ T5948] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 212.637503][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.668819][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.721019][ T5900] [drm:udl_init] *ERROR* Selecting channel failed [ 212.746115][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.795301][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.810288][ T5900] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 212.817741][ T5900] [drm] Initialized udl on minor 2 [ 212.827002][ T5900] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.835976][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.848658][ T5900] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 212.868502][ T5947] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.879744][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.888339][ T5947] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 212.900457][ T5900] usb 3-1: USB disconnect, device number 16 [ 212.925298][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.966778][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.985429][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.005247][ T5948] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.029166][ T5948] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 213.038568][ T5948] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 213.055049][ T5948] usb 2-1: USB disconnect, device number 10 [ 213.104619][ T24] usb 4-1: USB disconnect, device number 16 [ 213.112754][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.305813][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 213.358173][ T5870] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 213.378131][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.405171][ T5870] usb 5-1: Product: syz [ 213.411253][ T5870] usb 5-1: Manufacturer: syz [ 213.421101][ T5870] usb 5-1: SerialNumber: syz [ 213.438737][ T5870] usb 5-1: config 0 descriptor?? [ 213.459078][ T5870] gspca_main: sq930x-2.14.0 probing 2770:930c [ 213.850139][ T7835] netlink: 'syz.1.467': attribute type 21 has an invalid length. [ 213.858154][ T7835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.467'. [ 215.445931][ T7847] block nbd2: shutting down sockets [ 215.675208][ T5868] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 215.850150][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 215.866973][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.885133][ T5870] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 215.899431][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.911690][ T5870] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 215.942653][ T5870] usb 5-1: USB disconnect, device number 15 [ 215.952528][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.980494][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.991028][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.034745][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 216.055543][ T5868] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.074818][ T5868] usb 2-1: Manufacturer: syz [ 216.091037][ T5868] usb 2-1: config 0 descriptor?? [ 216.881260][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 216.881292][ T30] audit: type=1400 audit(1745426842.235:647): avc: denied { write } for pid=7866 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.504761][ T7880] netlink: 'syz.1.469': attribute type 8 has an invalid length. [ 217.535322][ T5868] rc_core: IR keymap rc-hauppauge not found [ 217.555163][ T5871] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 218.518519][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 218.545310][ T5868] Registered IR keymap rc-empty [ 218.550303][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.583397][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.612378][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.632779][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.666014][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 218.685211][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.764397][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 218.780622][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 218.810304][ T5871] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 218.867585][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.885708][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.902765][ T5871] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.913241][ T5871] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.922280][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.950232][ T5871] usb 4-1: Manufacturer: syz [ 219.025591][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 219.065286][ T5871] usb 4-1: config 0 descriptor?? [ 219.378221][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 219.389180][ T30] audit: type=1400 audit(1745426844.715:648): avc: denied { bind } for pid=7902 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.414750][ T30] audit: type=1400 audit(1745426844.715:649): avc: denied { name_bind } for pid=7902 comm="syz.2.486" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 219.436271][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 219.470911][ T30] audit: type=1400 audit(1745426844.715:650): avc: denied { node_bind } for pid=7902 comm="syz.2.486" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 219.794209][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 219.845347][ T30] audit: type=1400 audit(1745426844.725:651): avc: denied { listen } for pid=7902 comm="syz.2.486" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.875197][ T30] audit: type=1400 audit(1745426844.725:652): avc: denied { setopt } for pid=7902 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.875543][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 219.960326][ T30] audit: type=1400 audit(1745426844.825:653): avc: denied { connect } for pid=7902 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.995237][ T5871] rc_core: IR keymap rc-hauppauge not found [ 220.001176][ T5871] Registered IR keymap rc-empty [ 220.005222][ T30] audit: type=1400 audit(1745426844.825:654): avc: denied { name_connect } for pid=7902 comm="syz.2.486" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 220.010298][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.070431][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.090305][ T30] audit: type=1400 audit(1745426845.185:655): avc: denied { write } for pid=7902 comm="syz.2.486" laddr=172.20.20.170 lport=57024 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 220.118234][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.146190][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.154247][ T5871] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 220.183232][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input16 [ 220.195769][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.236753][ T5868] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 220.249339][ T5868] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 220.311145][ T7916] xt_policy: neither incoming nor outgoing policy selected [ 220.364316][ T5868] usb 2-1: USB disconnect, device number 11 [ 220.385594][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.430577][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.517682][ T7920] netlink: 'syz.3.477': attribute type 8 has an invalid length. [ 220.568018][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.619107][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.748164][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.796379][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.865244][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 221.013479][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 221.064813][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 221.119841][ T5871] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 221.243374][ T5871] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 221.360830][ T5871] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.942563][ T30] audit: type=1400 audit(1745426847.085:656): avc: denied { listen } for pid=7934 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.998212][ T5871] usb 4-1: USB disconnect, device number 17 [ 222.005437][ T5900] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.195173][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 222.457808][ T5900] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 222.493981][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.559634][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.589457][ T5900] usb 1-1: config 0 descriptor?? [ 222.608992][ T5900] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 222.668284][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 223.302102][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.495307][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.697215][ T5900] gspca_sonixj: reg_w1 err -110 [ 223.703112][ T5900] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 223.753009][ T7955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.849691][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 225.555227][ T5823] usb 1-1: USB disconnect, device number 10 [ 225.688525][ T7979] xt_policy: neither incoming nor outgoing policy selected [ 226.498877][ T30] audit: type=1400 audit(1745426851.835:657): avc: denied { connect } for pid=7986 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.581215][ T7989] FAULT_INJECTION: forcing a failure. [ 226.581215][ T7989] name failslab, interval 1, probability 0, space 0, times 0 [ 226.612517][ T7978] lo speed is unknown, defaulting to 1000 [ 227.179247][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.1.506 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 227.179274][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.179283][ T7989] Call Trace: [ 227.179288][ T7989] [ 227.179294][ T7989] dump_stack_lvl+0x16c/0x1f0 [ 227.179321][ T7989] should_fail_ex+0x512/0x640 [ 227.179343][ T7989] should_failslab+0xc2/0x120 [ 227.179363][ T7989] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 227.179381][ T7989] ? skb_clone+0x190/0x3f0 [ 227.179405][ T7989] skb_clone+0x190/0x3f0 [ 227.179427][ T7989] netlink_deliver_tap+0xabd/0xd30 [ 227.179454][ T7989] netlink_unicast+0x5df/0x7f0 [ 227.179480][ T7989] ? __pfx_netlink_unicast+0x10/0x10 [ 227.179510][ T7989] netlink_sendmsg+0x8d1/0xdd0 [ 227.179537][ T7989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.179569][ T7989] ____sys_sendmsg+0xa95/0xc70 [ 227.179594][ T7989] ? copy_msghdr_from_user+0x10a/0x160 [ 227.179613][ T7989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.179649][ T7989] ___sys_sendmsg+0x134/0x1d0 [ 227.179670][ T7989] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.179722][ T7989] __sys_sendmsg+0x16d/0x220 [ 227.179742][ T7989] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.179769][ T7989] ? rcu_is_watching+0x12/0xc0 [ 227.179796][ T7989] do_syscall_64+0xcd/0x260 [ 227.179817][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.179833][ T7989] RIP: 0033:0x7f17e7b8e969 [ 227.179846][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.179860][ T7989] RSP: 002b:00007f17e59f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.179876][ T7989] RAX: ffffffffffffffda RBX: 00007f17e7db5fa0 RCX: 00007f17e7b8e969 [ 227.179885][ T7989] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 227.179894][ T7989] RBP: 00007f17e59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.179903][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.179912][ T7989] R13: 0000000000000000 R14: 00007f17e7db5fa0 R15: 00007ffe7f1b91f8 [ 227.179933][ T7989] [ 227.477698][ T7989] vlan3: entered allmulticast mode [ 227.482861][ T7989] vlan0: entered allmulticast mode [ 227.797392][ T7999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.829677][ T7989] veth0_vlan: entered allmulticast mode [ 227.887526][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 228.465276][ T5823] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 228.515362][ T5871] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 228.760700][ T5823] usb 5-1: no configurations [ 228.769079][ T5823] usb 5-1: can't read configurations, error -22 [ 228.781664][ T5871] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 228.795264][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.813581][ T5871] usb 4-1: Product: syz [ 228.827965][ T5871] usb 4-1: Manufacturer: syz [ 228.833205][ T5871] usb 4-1: SerialNumber: syz [ 228.890786][ T5871] usb 4-1: config 0 descriptor?? [ 228.916051][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 228.935507][ T5823] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.968366][ T5871] comedi comedi0: Wrong number of endpoints [ 228.974300][ T5871] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 229.107762][ T5823] usb 5-1: no configurations [ 229.112403][ T5823] usb 5-1: can't read configurations, error -22 [ 229.132846][ T5823] usb usb5-port1: attempt power cycle [ 229.665193][ T5823] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 229.747079][ T5823] usb 5-1: no configurations [ 229.761680][ T5823] usb 5-1: can't read configurations, error -22 [ 229.939711][ T5823] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 229.962244][ T8021] netlink: 256 bytes leftover after parsing attributes in process `syz.2.513'. [ 230.006520][ T5823] usb 5-1: no configurations [ 230.030810][ T5823] usb 5-1: can't read configurations, error -22 [ 230.064699][ T5823] usb usb5-port1: unable to enumerate USB device [ 230.285868][ T30] audit: type=1400 audit(1745426855.645:658): avc: denied { bind } for pid=8020 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 230.664533][ T30] audit: type=1400 audit(1745426856.015:659): avc: denied { bind } for pid=8029 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.721893][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 230.767322][ T30] audit: type=1400 audit(1745426856.045:660): avc: denied { write } for pid=8029 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.355166][ T5823] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 231.418657][ T30] audit: type=1400 audit(1745426856.765:661): avc: denied { connect } for pid=8036 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.516351][ T30] audit: type=1400 audit(1745426856.855:662): avc: denied { write } for pid=8036 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.525388][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 231.558181][ T5823] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 231.577854][ T5823] usb 1-1: config 0 has no interface number 0 [ 231.583995][ T5823] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.613406][ T30] audit: type=1400 audit(1745426856.965:663): avc: denied { ioctl } for pid=8036 comm="syz.4.517" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.619014][ T5823] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.724512][ T5823] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 231.744141][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 231.766181][ T5823] usb 1-1: Product: syz [ 231.790062][ T5868] usb 4-1: USB disconnect, device number 18 [ 231.796205][ T5823] usb 1-1: SerialNumber: syz [ 231.833350][ T5823] usb 1-1: config 0 descriptor?? [ 231.859158][ T5823] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 231.903690][ T5823] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input18 [ 232.061227][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.867333][ T30] audit: type=1400 audit(1745426857.525:664): avc: denied { unlink } for pid=8041 comm="syz.1.519" name="#5" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.905942][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.078907][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 233.526405][ T8031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.569364][ T8048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.074518][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 234.074832][ T5900] usb 1-1: USB disconnect, device number 11 [ 234.081496][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 234.150176][ T5900] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 235.549922][ T8073] netlink: 'syz.3.524': attribute type 21 has an invalid length. [ 236.188411][ T8072] tty tty27: ldisc open failed (-12), clearing slot 26 [ 236.595020][ T8043] lo speed is unknown, defaulting to 1000 [ 236.755324][ T8073] netlink: 132 bytes leftover after parsing attributes in process `syz.3.524'. [ 236.757453][ T30] audit: type=1400 audit(1745426862.115:665): avc: denied { bind } for pid=8076 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.864877][ T30] audit: type=1400 audit(1745426862.215:666): avc: denied { setopt } for pid=8076 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.897211][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 237.415961][ T30] audit: type=1400 audit(1745426862.775:667): avc: denied { ioctl } for pid=8090 comm="syz.2.528" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 237.535305][ T30] audit: type=1400 audit(1745426862.875:668): avc: denied { ioctl } for pid=8090 comm="syz.2.528" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 238.500808][ T5870] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 238.801184][ T5870] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 238.869378][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.013229][ T5870] usb 4-1: Product: syz [ 239.027398][ T5870] usb 4-1: Manufacturer: syz [ 239.032036][ T5870] usb 4-1: SerialNumber: syz [ 239.055982][ T5870] usb 4-1: config 0 descriptor?? [ 239.764329][ T8104] lo speed is unknown, defaulting to 1000 [ 240.204056][ T30] audit: type=1400 audit(1745426865.545:669): avc: denied { create } for pid=8116 comm="syz.2.534" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.301310][ T8123] netlink: 'syz.1.535': attribute type 21 has an invalid length. [ 240.309428][ T8123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.535'. [ 240.944113][ T30] audit: type=1400 audit(1745426866.275:670): avc: denied { mounton } for pid=8116 comm="syz.2.534" path="/129/file0" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.090294][ T30] audit: type=1400 audit(1745426866.275:671): avc: denied { create } for pid=8116 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 241.175621][ T5870] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 241.595886][ T5870] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 241.619508][ T5870] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 241.651846][ T5870] usb 4-1: USB disconnect, device number 19 [ 255.349191][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.359599][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.370342][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.374979][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.388211][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.395960][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.417553][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.427246][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.439379][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.449982][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.463975][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.481595][ T30] audit: type=1400 audit(1745426880.835:672): avc: denied { mounton } for pid=8141 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 255.532900][ T8141] lo speed is unknown, defaulting to 1000 [ 255.785113][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 255.856840][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.864041][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.871327][ T8141] bridge_slave_0: entered allmulticast mode [ 255.878622][ T8141] bridge_slave_0: entered promiscuous mode [ 255.890587][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.898148][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.905354][ T8141] bridge_slave_1: entered allmulticast mode [ 255.912537][ T8141] bridge_slave_1: entered promiscuous mode [ 255.942189][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.953904][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.990374][ T8141] team0: Port device team_slave_0 added [ 255.998568][ T8141] team0: Port device team_slave_1 added [ 256.029270][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.036637][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.062624][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.074730][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.081778][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.108040][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.154804][ T8141] hsr_slave_0: entered promiscuous mode [ 256.161140][ T8141] hsr_slave_1: entered promiscuous mode [ 256.167356][ T8141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.174906][ T8141] Cannot create hsr debugfs directory [ 257.369365][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.380614][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.390345][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.400310][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.413381][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.445349][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.454017][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.463359][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.473678][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.481893][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.525364][ T5833] Bluetooth: hci5: command tx timeout [ 258.397559][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 258.409750][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 258.419381][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 258.429216][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 258.437471][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 258.471352][ T5835] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 258.481226][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 258.490096][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 258.498719][ T5835] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 258.510698][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 259.445168][ T5833] Bluetooth: hci6: command tx timeout [ 259.525291][ T5833] Bluetooth: hci7: command tx timeout [ 259.605224][ T5833] Bluetooth: hci5: command tx timeout [ 260.488154][ T5833] Bluetooth: hci8: command tx timeout [ 260.565302][ T5833] Bluetooth: hci9: command tx timeout [ 261.525316][ T5833] Bluetooth: hci6: command tx timeout [ 261.605324][ T5833] Bluetooth: hci7: command tx timeout [ 261.685185][ T5833] Bluetooth: hci5: command tx timeout [ 262.565211][ T5833] Bluetooth: hci8: command tx timeout [ 262.645216][ T5833] Bluetooth: hci9: command tx timeout [ 263.605192][ T5833] Bluetooth: hci6: command tx timeout [ 263.685208][ T5833] Bluetooth: hci7: command tx timeout [ 263.765198][ T5833] Bluetooth: hci5: command tx timeout [ 264.645171][ T5833] Bluetooth: hci8: command tx timeout [ 264.725124][ T5833] Bluetooth: hci9: command tx timeout [ 265.685225][ T5833] Bluetooth: hci6: command tx timeout [ 265.765222][ T5833] Bluetooth: hci7: command tx timeout [ 266.736467][ T5833] Bluetooth: hci8: command tx timeout [ 266.805145][ T5833] Bluetooth: hci9: command tx timeout [ 315.961008][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 315.970177][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 315.979068][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 315.988816][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 315.998194][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 316.811311][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.946050][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 317.954780][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 317.962868][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 317.970772][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 317.978566][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 318.052840][ T5835] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 318.061472][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 318.070597][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 318.079572][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 318.085333][ T54] Bluetooth: hci10: command tx timeout [ 318.093144][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 318.974141][ T5833] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 318.988391][ T5833] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 318.997816][ T5833] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 319.007051][ T5833] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 319.014757][ T5833] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 319.044879][ T5835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 319.054724][ T5835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 319.066567][ T5835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 319.078548][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 319.087765][ T5835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 320.005218][ T5833] Bluetooth: hci11: command tx timeout [ 320.165292][ T5833] Bluetooth: hci10: command tx timeout [ 320.175261][ T5833] Bluetooth: hci12: command tx timeout [ 321.045268][ T5833] Bluetooth: hci13: command tx timeout [ 321.135193][ T5833] Bluetooth: hci14: command tx timeout [ 322.085261][ T5833] Bluetooth: hci11: command tx timeout [ 322.245177][ T5833] Bluetooth: hci12: command tx timeout [ 322.245263][ T5835] Bluetooth: hci10: command tx timeout [ 323.135122][ T5835] Bluetooth: hci13: command tx timeout [ 323.205214][ T5835] Bluetooth: hci14: command tx timeout [ 324.175199][ T5835] Bluetooth: hci11: command tx timeout [ 324.325264][ T5833] Bluetooth: hci12: command tx timeout [ 324.331157][ T5835] Bluetooth: hci10: command tx timeout [ 325.205263][ T5835] Bluetooth: hci13: command tx timeout [ 325.285216][ T5835] Bluetooth: hci14: command tx timeout [ 326.245319][ T5835] Bluetooth: hci11: command tx timeout [ 326.405164][ T5835] Bluetooth: hci12: command tx timeout [ 327.285250][ T5835] Bluetooth: hci13: command tx timeout [ 327.365114][ T5835] Bluetooth: hci14: command tx timeout [ 376.037995][ T5833] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 376.047854][ T5833] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 376.055954][ T5833] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 376.066194][ T5833] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 376.074516][ T5833] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 378.043042][ T5833] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 378.056372][ T5833] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 378.064495][ T5833] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 378.075856][ T5833] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 378.084363][ T5833] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 378.095296][ T5833] Bluetooth: hci15: command tx timeout [ 378.143730][ T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 378.152658][ T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 378.161794][ T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 378.170773][ T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 378.179367][ T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 378.253066][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.069785][ T8204] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 379.079868][ T8204] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 379.088978][ T8204] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 379.102682][ T8204] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 379.112979][ T8204] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 379.127243][ T8199] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 379.137151][ T8199] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 379.148308][ T8199] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 379.158703][ T8199] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 379.168011][ T8199] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 380.165084][ T8204] Bluetooth: hci15: command tx timeout [ 380.175313][ T8204] Bluetooth: hci16: command tx timeout [ 380.255264][ T8204] Bluetooth: hci17: command tx timeout [ 380.325199][ T8204] Bluetooth: hci6: command 0x0406 tx timeout [ 380.336556][ T8204] Bluetooth: hci7: command 0x0406 tx timeout [ 380.336565][ T8199] Bluetooth: hci5: command 0x0406 tx timeout [ 381.205261][ T8195] Bluetooth: hci18: command tx timeout [ 381.205264][ T54] Bluetooth: hci19: command tx timeout [ 382.245168][ T54] Bluetooth: hci16: command tx timeout [ 382.246949][ T8195] Bluetooth: hci15: command tx timeout [ 382.335187][ T8195] Bluetooth: hci17: command tx timeout [ 383.285193][ T8195] Bluetooth: hci18: command tx timeout [ 383.295217][ T8195] Bluetooth: hci19: command tx timeout [ 384.325186][ T5835] Bluetooth: hci16: command tx timeout [ 384.328881][ T8204] Bluetooth: hci15: command tx timeout [ 384.405112][ T8204] Bluetooth: hci17: command tx timeout [ 385.365196][ T8204] Bluetooth: hci18: command tx timeout [ 385.375134][ T8204] Bluetooth: hci19: command tx timeout [ 385.445194][ T8204] Bluetooth: hci8: command 0x0406 tx timeout [ 385.456626][ T8204] Bluetooth: hci9: command 0x0406 tx timeout [ 386.405109][ T8195] Bluetooth: hci16: command tx timeout [ 386.485154][ T8195] Bluetooth: hci17: command tx timeout [ 387.445117][ T8195] Bluetooth: hci19: command tx timeout [ 387.445128][ T8204] Bluetooth: hci18: command tx timeout [ 401.285826][ T31] INFO: task kdevtmpfs:26 blocked for more than 143 seconds. [ 401.293606][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 401.301342][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.313952][ T31] task:kdevtmpfs state:D stack:25912 pid:26 tgid:26 ppid:2 task_flags:0x208140 flags:0x00004000 [ 401.326069][ T31] Call Trace: [ 401.329346][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 401.332279][ T31] __schedule+0x116f/0x5de0 [ 401.336887][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 401.341847][ T30] audit: type=1400 audit(1745427026.695:673): avc: denied { write } for pid=5804 comm="syz-executor" path="pipe:[3820]" dev="pipefs" ino=3820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 401.371104][ T31] ? __pfx___schedule+0x10/0x10 [ 401.376583][ T31] ? find_held_lock+0x2b/0x80 [ 401.381284][ T31] ? schedule+0x2d7/0x3a0 [ 401.388270][ T31] schedule+0xe7/0x3a0 [ 401.392366][ T31] schedule_preempt_disabled+0x13/0x30 [ 401.430698][ T31] __mutex_lock+0x6c7/0xb90 [ 401.439092][ T31] ? find_inode_fast+0x1da/0x600 [ 401.444066][ T31] ? blk_probe_dev+0x25/0x1a0 [ 401.449004][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 401.454050][ T31] ? __pfx_ilookup+0x10/0x10 [ 401.458835][ T31] ? make_vfsgid+0xf1/0x140 [ 401.463353][ T31] ? blk_probe_dev+0x25/0x1a0 [ 401.469144][ T31] blk_probe_dev+0x25/0x1a0 [ 401.473674][ T31] blk_request_module+0x16/0xb0 [ 401.478716][ T31] blkdev_get_no_open+0x7a/0xe0 [ 401.483579][ T31] bdev_statx+0x98/0x5c0 [ 401.487930][ T31] vfs_getattr_nosec+0x38d/0x430 [ 401.492876][ T31] ? __pfx_shmem_getattr+0x10/0x10 [ 401.498058][ T31] vfs_getattr+0x4a/0x60 [ 401.502302][ T31] handle_remove+0x12e/0x6f0 [ 401.507536][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 401.513036][ T31] ? __pfx_handle_remove+0x10/0x10 [ 401.518233][ T31] ? trace_sched_exit_tp+0xde/0x130 [ 401.523437][ T31] ? __schedule+0x1186/0x5de0 [ 401.528216][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 401.533161][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 401.538254][ T31] ? find_held_lock+0x2b/0x80 [ 401.542933][ T31] ? devtmpfs_work_loop+0xe1/0x900 [ 401.548088][ T31] devtmpfs_work_loop+0x350/0x900 [ 401.553121][ T31] ? __pfx_devtmpfs_work_loop+0x10/0x10 [ 401.558727][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 401.564535][ T31] ? try_to_wake_up+0x157/0x1680 [ 401.569519][ T31] ? rcu_is_watching+0x12/0xc0 [ 401.574286][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 401.580136][ T31] ? __pfx_devtmpfsd+0x10/0x10 [ 401.584901][ T31] devtmpfsd+0x4c/0x50 [ 401.589036][ T31] kthread+0x3c2/0x780 [ 401.593110][ T31] ? __pfx_kthread+0x10/0x10 [ 401.597746][ T31] ? __pfx_kthread+0x10/0x10 [ 401.602338][ T31] ? __pfx_kthread+0x10/0x10 [ 401.606970][ T31] ? __pfx_kthread+0x10/0x10 [ 401.611565][ T31] ? rcu_is_watching+0x12/0xc0 [ 401.616372][ T31] ? __pfx_kthread+0x10/0x10 [ 401.620963][ T31] ret_from_fork+0x45/0x80 [ 401.625432][ T31] ? __pfx_kthread+0x10/0x10 [ 401.630016][ T31] ret_from_fork_asm+0x1a/0x30 [ 401.634799][ T31] [ 401.637888][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 401.645549][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 401.653170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.661871][ T31] task:kworker/u8:2 state:D stack:23512 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 401.673915][ T31] Workqueue: events_unbound linkwatch_event [ 401.679883][ T31] Call Trace: [ 401.683156][ T31] [ 401.686140][ T31] __schedule+0x116f/0x5de0 [ 401.690656][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 401.695643][ T31] ? __pfx___schedule+0x10/0x10 [ 401.700505][ T31] ? find_held_lock+0x2b/0x80 [ 401.705220][ T31] ? schedule+0x2d7/0x3a0 [ 401.709565][ T31] schedule+0xe7/0x3a0 [ 401.713639][ T31] schedule_preempt_disabled+0x13/0x30 [ 401.719156][ T31] __mutex_lock+0x6c7/0xb90 [ 401.723668][ T31] ? linkwatch_event+0x51/0xc0 [ 401.728474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 401.733501][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 401.738490][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 401.744137][ T31] ? linkwatch_event+0x51/0xc0 [ 401.748954][ T31] ? rtnl_lock+0x9/0x20 [ 401.753102][ T31] linkwatch_event+0x51/0xc0 [ 401.757747][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 401.763039][ T31] ? rcu_is_watching+0x12/0xc0 [ 401.767925][ T31] process_one_work+0x9cc/0x1b70 [ 401.772881][ T31] ? __pfx_process_one_work+0x10/0x10 [ 401.778337][ T31] ? assign_work+0x1a0/0x250 [ 401.782935][ T31] worker_thread+0x6c8/0xf10 [ 401.787582][ T31] ? __kthread_parkme+0x19e/0x250 [ 401.792614][ T31] ? __pfx_worker_thread+0x10/0x10 [ 401.797765][ T31] kthread+0x3c2/0x780 [ 401.801834][ T31] ? __pfx_kthread+0x10/0x10 [ 401.806460][ T31] ? __pfx_kthread+0x10/0x10 [ 401.811063][ T31] ? __pfx_kthread+0x10/0x10 [ 401.815736][ T31] ? __pfx_kthread+0x10/0x10 [ 401.820330][ T31] ? rcu_is_watching+0x12/0xc0 [ 401.825154][ T31] ? __pfx_kthread+0x10/0x10 [ 401.829754][ T31] ret_from_fork+0x45/0x80 [ 401.834170][ T31] ? __pfx_kthread+0x10/0x10 [ 401.838837][ T31] ret_from_fork_asm+0x1a/0x30 [ 401.843619][ T31] [ 401.846779][ T31] INFO: task syz-executor:5819 blocked for more than 143 seconds. [ 401.854581][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 401.862255][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.870977][ T31] task:syz-executor state:D stack:22824 pid:5819 tgid:5819 ppid:1 task_flags:0x400140 flags:0x00004004 [ 401.882934][ T31] Call Trace: [ 401.886266][ T31] [ 401.889195][ T31] __schedule+0x116f/0x5de0 [ 401.893707][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 401.898707][ T31] ? __pfx___schedule+0x10/0x10 [ 401.903579][ T31] ? find_held_lock+0x2b/0x80 [ 401.908305][ T31] ? schedule+0x2d7/0x3a0 [ 401.912643][ T31] schedule+0xe7/0x3a0 [ 401.916778][ T31] schedule_timeout+0x257/0x290 [ 401.921627][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 401.927385][ T31] ? _raw_spin_unlock_irq+0x29/0x50 [ 401.932874][ T31] __wait_for_common+0x2fc/0x4e0 [ 401.937882][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 401.943281][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 401.948796][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 401.954090][ T31] devtmpfs_submit_req+0xa8/0x100 [ 401.959175][ T31] devtmpfs_create_node+0x18a/0x230 [ 401.964382][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 401.970147][ T31] ? up_write+0x1b2/0x520 [ 401.974487][ T31] ? kernfs_create_link+0x1bd/0x240 [ 401.979730][ T31] ? kernfs_put+0x35/0x60 [ 401.984058][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 401.989647][ T31] device_add+0x10bd/0x1a70 [ 401.994150][ T31] ? __pfx_device_add+0x10/0x10 [ 401.999041][ T31] ? __pfx_sprintf+0x10/0x10 [ 402.003649][ T31] add_disk_fwnode+0x468/0x13a0 [ 402.008570][ T31] loop_add+0x909/0xb70 [ 402.012735][ T31] ? rcu_is_watching+0x12/0xc0 [ 402.017570][ T31] ? __pfx_loop_add+0x10/0x10 [ 402.022252][ T31] ? __mutex_lock+0x1ca/0xb90 [ 402.026993][ T31] ? __pfx_ilookup+0x10/0x10 [ 402.031602][ T31] ? make_vfsgid+0xf1/0x140 [ 402.036208][ T31] loop_probe+0x70/0x90 [ 402.040375][ T31] ? __pfx_loop_probe+0x10/0x10 [ 402.045263][ T31] blk_probe_dev+0x116/0x1a0 [ 402.049865][ T31] blk_request_module+0x16/0xb0 [ 402.054715][ T31] blkdev_get_no_open+0x7a/0xe0 [ 402.059616][ T31] bdev_statx+0x98/0x5c0 [ 402.063857][ T31] vfs_getattr_nosec+0x38d/0x430 [ 402.068876][ T31] ? __pfx_shmem_getattr+0x10/0x10 [ 402.073998][ T31] vfs_statx+0x1a3/0x3e0 [ 402.078314][ T31] ? __pfx_vfs_statx+0x10/0x10 [ 402.083082][ T31] ? getname_flags.part.0+0x1c5/0x550 [ 402.088601][ T31] vfs_fstatat+0x7b/0xf0 [ 402.092848][ T31] __do_sys_newfstatat+0xa1/0x130 [ 402.097929][ T31] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 402.103578][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 402.109001][ T31] do_syscall_64+0xcd/0x260 [ 402.113513][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.119453][ T31] RIP: 0033:0x7ff7fed8d17a [ 402.123865][ T31] RSP: 002b:00007ffcdad7c4f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 402.132320][ T31] RAX: ffffffffffffffda RBX: 00007ff7fee1089d RCX: 00007ff7fed8d17a [ 402.140338][ T31] RDX: 00007ffcdad7c520 RSI: 00007ffcdad7c5b0 RDI: 00000000ffffff9c [ 402.148333][ T31] RBP: 00007ffcdad7c5b0 R08: 0000000000000000 R09: 0000000000000000 [ 402.156342][ T31] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffcdad7d640 [ 402.164309][ T31] R13: 00007ff7fee1089d R14: 000000000003adea R15: 00007ffcdad7d680 [ 402.176525][ T31] [ 402.179574][ T31] INFO: task syz-executor:5820 blocked for more than 144 seconds. [ 402.190237][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 402.197918][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.206599][ T31] task:syz-executor state:D stack:24056 pid:5820 tgid:5820 ppid:1 task_flags:0x400140 flags:0x00000004 [ 402.218578][ T31] Call Trace: [ 402.221849][ T31] [ 402.224777][ T31] __schedule+0x116f/0x5de0 [ 402.229334][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 402.234274][ T31] ? __pfx___schedule+0x10/0x10 [ 402.239193][ T31] ? find_held_lock+0x2b/0x80 [ 402.243870][ T31] ? schedule+0x2d7/0x3a0 [ 402.248265][ T31] schedule+0xe7/0x3a0 [ 402.252333][ T31] schedule_preempt_disabled+0x13/0x30 [ 402.257842][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 402.263394][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 402.269524][ T31] ? __pfx___might_resched+0x10/0x10 [ 402.274815][ T31] ? find_held_lock+0x2b/0x80 [ 402.279545][ T31] down_read+0xef/0x480 [ 402.283706][ T31] ? mnt_get_write_access+0x54/0x300 [ 402.289042][ T31] ? __pfx_down_read+0x10/0x10 [ 402.293810][ T31] ? mnt_get_write_access+0x20c/0x300 [ 402.299242][ T31] path_openat+0x88a/0x2d40 [ 402.303753][ T31] ? __pfx_path_openat+0x10/0x10 [ 402.308734][ T31] do_filp_open+0x20b/0x470 [ 402.313244][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 402.318345][ T31] ? alloc_fd+0x471/0x7d0 [ 402.322685][ T31] do_sys_openat2+0x11b/0x1d0 [ 402.327469][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.332671][ T31] ? putname+0x154/0x1a0 [ 402.337076][ T31] ? putname+0x154/0x1a0 [ 402.341320][ T31] __x64_sys_openat+0x174/0x210 [ 402.346245][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 402.351618][ T31] ? rcu_is_watching+0x12/0xc0 [ 402.356434][ T31] do_syscall_64+0xcd/0x260 [ 402.360945][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.366878][ T31] RIP: 0033:0x7f252cf8d2d0 [ 402.371289][ T31] RSP: 002b:00007ffdd3fe3110 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 402.379762][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f252cf8d2d0 [ 402.387757][ T31] RDX: 0000000000000002 RSI: 00007ffdd3fe3220 RDI: 00000000ffffff9c [ 402.395774][ T31] RBP: 00007ffdd3fe3220 R08: 0000000000000000 R09: 00007ffdd3fe2ed7 [ 402.403739][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000058 [ 402.411928][ T31] R13: 00000000000927c0 R14: 000000000003b12a R15: 00007ffdd3fe3220 [ 402.419942][ T31] [ 402.422986][ T31] INFO: task syz-executor:5829 blocked for more than 144 seconds. [ 402.430811][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 402.438461][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.449012][ T31] task:syz-executor state:D stack:24312 pid:5829 tgid:5829 ppid:1 task_flags:0x400140 flags:0x00004004 [ 402.461030][ T31] Call Trace: [ 402.464307][ T31] [ 402.467267][ T31] __schedule+0x116f/0x5de0 [ 402.471780][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 402.477210][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 402.482675][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 402.487720][ T31] ? __pfx___schedule+0x10/0x10 [ 402.492582][ T31] ? find_held_lock+0x2b/0x80 [ 402.497430][ T31] ? schedule+0x2d7/0x3a0 [ 402.501770][ T31] schedule+0xe7/0x3a0 [ 402.506001][ T31] schedule_preempt_disabled+0x13/0x30 [ 402.511463][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 402.517122][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 402.523202][ T31] ? __pfx___might_resched+0x10/0x10 [ 402.528562][ T31] ? find_held_lock+0x2b/0x80 [ 402.533246][ T31] down_read+0xef/0x480 [ 402.537463][ T31] ? mnt_get_write_access+0x54/0x300 [ 402.542751][ T31] ? __pfx_down_read+0x10/0x10 [ 402.547550][ T31] ? mnt_get_write_access+0x20c/0x300 [ 402.553191][ T31] path_openat+0x88a/0x2d40 [ 402.557752][ T31] ? __pfx_path_openat+0x10/0x10 [ 402.562691][ T31] do_filp_open+0x20b/0x470 [ 402.567284][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 402.572324][ T31] ? alloc_fd+0x471/0x7d0 [ 402.576707][ T31] do_sys_openat2+0x11b/0x1d0 [ 402.582640][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.587942][ T31] ? putname+0x154/0x1a0 [ 402.592194][ T31] ? putname+0x154/0x1a0 [ 402.596483][ T31] __x64_sys_openat+0x174/0x210 [ 402.601348][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 402.606815][ T31] do_syscall_64+0xcd/0x260 [ 402.611326][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.617267][ T31] RIP: 0033:0x7fb80338d2d0 [ 402.621679][ T31] RSP: 002b:00007fff1aa0fba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 402.630136][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb80338d2d0 [ 402.638147][ T31] RDX: 0000000000000002 RSI: 00007fff1aa0fcb0 RDI: 00000000ffffff9c [ 402.646266][ T31] RBP: 00007fff1aa0fcb0 R08: 0000000000000000 R09: 00007fff1aa0f967 [ 402.654253][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000006d [ 402.662267][ T31] R13: 00000000000927c0 R14: 000000000003b318 R15: 00007fff1aa0fcb0 [ 402.670285][ T31] [ 402.673316][ T31] INFO: task kworker/1:5:5870 blocked for more than 144 seconds. [ 402.681544][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 402.689211][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.697949][ T31] task:kworker/1:5 state:D stack:25576 pid:5870 tgid:5870 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 402.710012][ T31] Workqueue: usb_hub_wq hub_event [ 402.715094][ T31] Call Trace: [ 402.718373][ T31] [ 402.721302][ T31] __schedule+0x116f/0x5de0 [ 402.725867][ T31] ? find_held_lock+0x2b/0x80 [ 402.730562][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 402.736429][ T31] ? __pfx___schedule+0x10/0x10 [ 402.741287][ T31] ? find_held_lock+0x2b/0x80 [ 402.746003][ T31] ? schedule+0x2d7/0x3a0 [ 402.750335][ T31] schedule+0xe7/0x3a0 [ 402.754402][ T31] schedule_timeout+0x257/0x290 [ 402.759306][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 402.764681][ T31] ? mark_held_locks+0x49/0x80 [ 402.769479][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.774685][ T31] __wait_for_common+0x2fc/0x4e0 [ 402.779682][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 402.785174][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 402.790638][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 402.795898][ T31] devtmpfs_submit_req+0xa8/0x100 [ 402.800929][ T31] devtmpfs_delete_node+0xf6/0x160 [ 402.806113][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 402.811851][ T31] ? kobject_put+0xab/0x5a0 [ 402.816403][ T31] ? __pfx_klist_children_put+0x10/0x10 [ 402.821948][ T31] ? klist_children_put+0x44/0x60 [ 402.827007][ T31] ? klist_put+0xf9/0x1b0 [ 402.831341][ T31] device_del+0x734/0x9f0 [ 402.835753][ T31] ? __pfx_device_del+0x10/0x10 [ 402.840629][ T31] usb_disconnect+0x594/0x920 [ 402.845376][ T31] hub_event+0x1c57/0x4fa0 [ 402.849897][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 402.854836][ T31] ? __pfx_hub_event+0x10/0x10 [ 402.859666][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 402.865343][ T31] ? rcu_is_watching+0x12/0xc0 [ 402.870112][ T31] process_one_work+0x9cc/0x1b70 [ 402.875115][ T31] ? __pfx_hub_event+0x10/0x10 [ 402.879878][ T31] ? __pfx_process_one_work+0x10/0x10 [ 402.885422][ T31] ? assign_work+0x1a0/0x250 [ 402.890019][ T31] worker_thread+0x6c8/0xf10 [ 402.894616][ T31] ? __kthread_parkme+0x19e/0x250 [ 402.899734][ T31] ? __pfx_worker_thread+0x10/0x10 [ 402.904884][ T31] kthread+0x3c2/0x780 [ 402.909003][ T31] ? __pfx_kthread+0x10/0x10 [ 402.913597][ T31] ? __pfx_kthread+0x10/0x10 [ 402.918262][ T31] ? __pfx_kthread+0x10/0x10 [ 402.922852][ T31] ? __pfx_kthread+0x10/0x10 [ 402.927514][ T31] ? rcu_is_watching+0x12/0xc0 [ 402.932291][ T31] ? __pfx_kthread+0x10/0x10 [ 402.936940][ T31] ret_from_fork+0x45/0x80 [ 402.941356][ T31] ? __pfx_kthread+0x10/0x10 [ 402.945985][ T31] ret_from_fork_asm+0x1a/0x30 [ 402.950770][ T31] [ 402.953809][ T31] INFO: task syz.1.535:8123 blocked for more than 145 seconds. [ 402.961414][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 402.969104][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.977833][ T31] task:syz.1.535 state:D stack:25672 pid:8123 tgid:8118 ppid:5826 task_flags:0x480140 flags:0x00004004 [ 402.989837][ T31] Call Trace: [ 402.993123][ T31] [ 402.996116][ T31] __schedule+0x116f/0x5de0 [ 403.000642][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 403.005628][ T31] ? __pfx___schedule+0x10/0x10 [ 403.010486][ T31] ? find_held_lock+0x2b/0x80 [ 403.015230][ T31] ? schedule+0x2d7/0x3a0 [ 403.019581][ T31] schedule+0xe7/0x3a0 [ 403.023656][ T31] schedule_timeout+0x257/0x290 [ 403.028563][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 403.033946][ T31] ? rcu_is_watching+0x12/0xc0 [ 403.038811][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 403.044013][ T31] __wait_for_common+0x2fc/0x4e0 [ 403.048997][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 403.054374][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 403.059895][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 403.065150][ T31] devtmpfs_submit_req+0xa8/0x100 [ 403.070190][ T31] devtmpfs_delete_node+0xf6/0x160 [ 403.075352][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 403.081082][ T31] ? rcu_is_watching+0x12/0xc0 [ 403.085904][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 403.092078][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.097374][ T31] ? kernfs_put+0x4e/0x60 [ 403.101715][ T31] ? sysfs_remove_group+0xc6/0x180 [ 403.106880][ T31] device_del+0x734/0x9f0 [ 403.111219][ T31] ? __pfx_device_del+0x10/0x10 [ 403.116131][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.121336][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 403.126616][ T31] del_gendisk+0x486/0xc40 [ 403.131043][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 403.136033][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 403.141342][ T31] loop_control_ioctl+0x4eb/0x630 [ 403.146449][ T31] ? __pfx_loop_control_ioctl+0x10/0x10 [ 403.152005][ T31] ? selinux_file_ioctl+0x180/0x270 [ 403.157268][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 403.162393][ T31] ? __pfx_loop_control_ioctl+0x10/0x10 [ 403.167971][ T31] __x64_sys_ioctl+0x190/0x200 [ 403.172740][ T31] do_syscall_64+0xcd/0x260 [ 403.177305][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.183195][ T31] RIP: 0033:0x7f17e7b8e969 [ 403.187664][ T31] RSP: 002b:00007f17e59b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.196117][ T31] RAX: ffffffffffffffda RBX: 00007f17e7db6160 RCX: 00007f17e7b8e969 [ 403.204087][ T31] RDX: 0000000000000009 RSI: 0000000000004c81 RDI: 0000000000000007 [ 403.213213][ T31] RBP: 00007f17e7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 403.222206][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.230708][ T31] R13: 0000000000000000 R14: 00007f17e7db6160 R15: 00007ffe7f1b91f8 [ 403.239031][ T31] [ 403.242248][ T31] INFO: task syz.4.541:8137 blocked for more than 145 seconds. [ 403.249832][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 403.257617][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.266318][ T31] task:syz.4.541 state:D stack:26696 pid:8137 tgid:8136 ppid:5818 task_flags:0x400140 flags:0x00000004 [ 403.278287][ T31] Call Trace: [ 403.281563][ T31] [ 403.284490][ T31] __schedule+0x116f/0x5de0 [ 403.289058][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 403.294002][ T31] ? __pfx___schedule+0x10/0x10 [ 403.298918][ T31] ? find_held_lock+0x2b/0x80 [ 403.303598][ T31] ? schedule+0x2d7/0x3a0 [ 403.307971][ T31] schedule+0xe7/0x3a0 [ 403.312044][ T31] schedule_preempt_disabled+0x13/0x30 [ 403.317567][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 403.323122][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 403.329244][ T31] ? __pfx___might_resched+0x10/0x10 [ 403.334532][ T31] ? try_to_unlazy+0x24e/0x660 [ 403.339347][ T31] down_read+0xef/0x480 [ 403.343510][ T31] ? __pfx_down_read+0x10/0x10 [ 403.348309][ T31] ? lookup_fast+0x156/0x610 [ 403.352910][ T31] walk_component+0x345/0x5b0 [ 403.357649][ T31] path_lookupat+0x17e/0x780 [ 403.362249][ T31] path_openat+0x1758/0x2d40 [ 403.366892][ T31] ? __x64_sys_openat+0x174/0x210 [ 403.371923][ T31] ? do_syscall_64+0xcd/0x260 [ 403.376676][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.382756][ T31] ? __pfx_path_openat+0x10/0x10 [ 403.387733][ T31] do_filp_open+0x20b/0x470 [ 403.392254][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 403.397353][ T31] ? alloc_fd+0x471/0x7d0 [ 403.401691][ T31] do_sys_openat2+0x11b/0x1d0 [ 403.406406][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 403.411641][ T31] __x64_sys_openat+0x174/0x210 [ 403.416565][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 403.421949][ T31] do_syscall_64+0xcd/0x260 [ 403.426505][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.432394][ T31] RIP: 0033:0x7f61d1b8d2d0 [ 403.436888][ T31] RSP: 002b:00007f61d2a3ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 403.445341][ T31] RAX: ffffffffffffffda RBX: 0000000000204c00 RCX: 00007f61d1b8d2d0 [ 403.453325][ T31] RDX: 0000000000204c00 RSI: 00007f61d2a3ac10 RDI: 00000000ffffff9c [ 403.461337][ T31] RBP: 00007f61d2a3ac10 R08: 0000000000000000 R09: 002367732f766564 [ 403.469344][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 403.477357][ T31] R13: 0000000000000000 R14: 00007f61d1db5fa0 R15: 00007fff94f18658 [ 403.485371][ T31] [ 403.488389][ T31] INFO: task syz-executor:8141 blocked for more than 145 seconds. [ 403.496239][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 403.503870][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.512559][ T31] task:syz-executor state:D stack:23816 pid:8141 tgid:8141 ppid:1 task_flags:0x400140 flags:0x00004004 [ 403.524510][ T31] Call Trace: [ 403.527856][ T31] [ 403.530789][ T31] __schedule+0x116f/0x5de0 [ 403.535370][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 403.540311][ T31] ? __pfx___schedule+0x10/0x10 [ 403.545208][ T31] ? find_held_lock+0x2b/0x80 [ 403.549885][ T31] ? schedule+0x2d7/0x3a0 [ 403.554216][ T31] schedule+0xe7/0x3a0 [ 403.558357][ T31] schedule_timeout+0x257/0x290 [ 403.563203][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 403.568622][ T31] ? mark_held_locks+0x49/0x80 [ 403.573383][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 403.578635][ T31] __wait_for_common+0x2fc/0x4e0 [ 403.583574][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 403.588998][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 403.594459][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 403.599703][ T31] devtmpfs_submit_req+0xa8/0x100 [ 403.604728][ T31] devtmpfs_create_node+0x18a/0x230 [ 403.609978][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 403.615735][ T31] ? up_write+0x1b2/0x520 [ 403.620071][ T31] ? kernfs_create_link+0x1bd/0x240 [ 403.625307][ T31] ? kernfs_put+0x35/0x60 [ 403.629638][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 403.635230][ T31] device_add+0x10bd/0x1a70 [ 403.639737][ T31] ? __pfx_device_add+0x10/0x10 [ 403.644578][ T31] ? kfree+0x252/0x4d0 [ 403.648703][ T31] ? kstrdup+0xb5/0x100 [ 403.652869][ T31] device_create_groups_vargs+0x1f8/0x270 [ 403.658631][ T31] device_create+0xed/0x130 [ 403.663134][ T31] ? __pfx_device_create+0x10/0x10 [ 403.668281][ T31] ? find_held_lock+0x2b/0x80 [ 403.672963][ T31] ? tap_get_minor+0x1b3/0x360 [ 403.677808][ T31] macvtap_device_event+0x301/0x3e0 [ 403.683016][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 403.688773][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.694662][ T31] ? ipmr_device_event+0x1bc/0x230 [ 403.699825][ T31] ? bond_netdev_event+0xe7/0xd30 [ 403.704863][ T31] notifier_call_chain+0xb9/0x410 [ 403.709950][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 403.715715][ T31] call_netdevice_notifiers_info+0xbe/0x140 [ 403.721615][ T31] register_netdevice+0x182e/0x2270 [ 403.726860][ T31] ? __pfx_register_netdevice+0x10/0x10 [ 403.732415][ T31] macvlan_common_newlink+0x10e7/0x1a20 [ 403.738010][ T31] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 403.743906][ T31] ? lockdep_rtnl_is_held+0x26/0x40 [ 403.749144][ T31] ? netdev_is_rx_handler_busy+0x83/0x160 [ 403.754888][ T31] macvtap_newlink+0x17a/0x240 [ 403.759697][ T31] ? __pfx_macvtap_newlink+0x10/0x10 [ 403.764987][ T31] rtnl_newlink+0xc42/0x2000 [ 403.769635][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.774655][ T31] ? find_held_lock+0x2b/0x80 [ 403.779380][ T31] ? avc_has_perm_noaudit+0x117/0x3b0 [ 403.784755][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 403.790197][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.795280][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.800323][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 403.805504][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.810544][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 403.815566][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.821027][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 403.826108][ T31] netlink_rcv_skb+0x16a/0x440 [ 403.830905][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.836432][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.841737][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 403.848147][ T31] netlink_unicast+0x53a/0x7f0 [ 403.852938][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 403.858337][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 403.863112][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.868467][ T31] __sys_sendto+0x495/0x510 [ 403.872977][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 403.878076][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 403.883385][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 403.888253][ T31] ? do_syscall_64+0x91/0x260 [ 403.892949][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.898236][ T31] do_syscall_64+0xcd/0x260 [ 403.902750][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.908686][ T31] RIP: 0033:0x7f41cef907fc [ 403.913099][ T31] RSP: 002b:00007ffec22a6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 403.921571][ T31] RAX: ffffffffffffffda RBX: 00007f41cfce4620 RCX: 00007f41cef907fc [ 403.929586][ T31] RDX: 0000000000000044 RSI: 00007f41cfce4670 RDI: 0000000000000003 [ 403.937604][ T31] RBP: 0000000000000000 R08: 00007ffec22a6f14 R09: 000000000000000c [ 403.945628][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 403.953599][ T31] R13: 0000000000000000 R14: 00007f41cfce4670 R15: 0000000000000000 [ 403.961620][ T31] [ 403.964648][ T31] INFO: task syz-executor:8156 blocked for more than 146 seconds. [ 403.972498][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 403.980198][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.988892][ T31] task:syz-executor state:D stack:26824 pid:8156 tgid:8156 ppid:1 task_flags:0x400140 flags:0x00000004 [ 404.000865][ T31] Call Trace: [ 404.004138][ T31] [ 404.007102][ T31] __schedule+0x116f/0x5de0 [ 404.011613][ T31] ? find_held_lock+0x2b/0x80 [ 404.016347][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 404.021288][ T31] ? __pfx___schedule+0x10/0x10 [ 404.026180][ T31] ? find_held_lock+0x2b/0x80 [ 404.030861][ T31] ? schedule+0x2d7/0x3a0 [ 404.035258][ T31] schedule+0xe7/0x3a0 [ 404.039333][ T31] schedule_preempt_disabled+0x13/0x30 [ 404.044791][ T31] __mutex_lock+0x6c7/0xb90 [ 404.049342][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 404.054472][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 404.059564][ T31] ? find_held_lock+0x2b/0x80 [ 404.064259][ T31] ? __nla_parse+0x40/0x60 [ 404.068747][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 404.073866][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 404.078861][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 404.083808][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.089228][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.094603][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.100044][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 404.105183][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.110559][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 404.115550][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.121013][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 404.126101][ T31] netlink_rcv_skb+0x16a/0x440 [ 404.130870][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.136391][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.141694][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 404.147036][ T31] netlink_unicast+0x53a/0x7f0 [ 404.151808][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 404.157149][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 404.161923][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.167340][ T31] __sys_sendto+0x495/0x510 [ 404.171852][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 404.176933][ T31] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 404.183459][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 404.188257][ T31] ? do_syscall_64+0x91/0x260 [ 404.192941][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.198197][ T31] do_syscall_64+0xcd/0x260 [ 404.202706][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.208660][ T31] RIP: 0033:0x7fb5f21907fc [ 404.213075][ T31] RSP: 002b:00007ffe936852e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.221686][ T31] RAX: ffffffffffffffda RBX: 00007fb5f2ee4620 RCX: 00007fb5f21907fc [ 404.229752][ T31] RDX: 0000000000000028 RSI: 00007fb5f2ee4670 RDI: 0000000000000003 [ 404.238562][ T31] RBP: 0000000000000000 R08: 00007ffe93685334 R09: 000000000000000c [ 404.246992][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 404.255970][ T31] R13: 0000000000000000 R14: 00007fb5f2ee4670 R15: 0000000000000000 [ 404.264342][ T31] [ 404.267418][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 404.276573][ T31] INFO: task syz-executor:8158 blocked for more than 146 seconds. [ 404.284401][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 404.292083][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.300795][ T31] task:syz-executor state:D stack:27368 pid:8158 tgid:8158 ppid:1 task_flags:0x400140 flags:0x00000004 [ 404.312775][ T31] Call Trace: [ 404.316103][ T31] [ 404.319036][ T31] __schedule+0x116f/0x5de0 [ 404.323550][ T31] ? find_held_lock+0x2b/0x80 [ 404.328318][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 404.333259][ T31] ? __pfx___schedule+0x10/0x10 [ 404.338175][ T31] ? find_held_lock+0x2b/0x80 [ 404.342854][ T31] ? schedule+0x2d7/0x3a0 [ 404.347236][ T31] schedule+0xe7/0x3a0 [ 404.351321][ T31] schedule_preempt_disabled+0x13/0x30 [ 404.356817][ T31] __mutex_lock+0x6c7/0xb90 [ 404.361327][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 404.366485][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 404.371522][ T31] ? find_held_lock+0x2b/0x80 [ 404.376250][ T31] ? __nla_parse+0x40/0x60 [ 404.380669][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 404.385825][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 404.390763][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 404.395763][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.401144][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.406559][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.411929][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 404.417088][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 404.422462][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 404.427441][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.432904][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 404.437984][ T31] netlink_rcv_skb+0x16a/0x440 [ 404.442755][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.448273][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.453581][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 404.458924][ T31] netlink_unicast+0x53a/0x7f0 [ 404.463696][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 404.469052][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 404.473825][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.479176][ T31] __sys_sendto+0x495/0x510 [ 404.483681][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 404.488817][ T31] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 404.495383][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 404.500149][ T31] ? do_syscall_64+0x91/0x260 [ 404.504831][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.510081][ T31] do_syscall_64+0xcd/0x260 [ 404.514590][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.520533][ T31] RIP: 0033:0x7f1828d907fc [ 404.524947][ T31] RSP: 002b:00007ffcaad58540 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.533408][ T31] RAX: ffffffffffffffda RBX: 00007f1829ae4620 RCX: 00007f1828d907fc [ 404.541424][ T31] RDX: 0000000000000028 RSI: 00007f1829ae4670 RDI: 0000000000000003 [ 404.549416][ T31] RBP: 0000000000000000 R08: 00007ffcaad58594 R09: 000000000000000c [ 404.557432][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 404.565437][ T31] R13: 0000000000000000 R14: 00007f1829ae4670 R15: 0000000000000000 [ 404.573419][ T31] [ 404.576506][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 404.585589][ T31] [ 404.585589][ T31] Showing all locks held in the system: [ 404.593297][ T31] 3 locks held by kworker/u8:0/12: [ 404.598446][ T31] #0: ffff88814d649148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 404.609528][ T31] #1: ffffc90000117d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 404.622644][ T31] #2: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 404.632188][ T31] 3 locks held by kworker/1:0/24: [ 404.637250][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 404.647750][ T31] #1: ffffc900001e7d18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 404.658168][ T31] #2: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 404.668577][ T31] 2 locks held by kdevtmpfs/26: [ 404.673419][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 404.684190][ T31] #1: ffffffff8eef43a8 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 404.693744][ T31] 1 lock held by khungtaskd/31: [ 404.698629][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 404.708508][ T31] 3 locks held by kworker/u8:2/36: [ 404.713609][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 404.724808][ T31] #1: ffffc90000ad7d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 404.735202][ T31] #2: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 404.744291][ T31] 2 locks held by getty/5583: [ 404.748996][ T31] #0: ffff88814d9670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 404.758798][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 404.768964][ T31] 1 lock held by syz-executor/5819: [ 404.774152][ T31] #0: ffffffff8eef43a8 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 404.783720][ T31] 2 locks held by syz-executor/5820: [ 404.789019][ T31] #0: ffff88814128e420 (sb_writers){.+.+}-{0:0}, at: path_openat+0x1f3e/0x2d40 [ 404.798129][ T31] #1: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: path_openat+0x88a/0x2d40 [ 404.808354][ T31] 2 locks held by syz-executor/5829: [ 404.813632][ T31] #0: ffff88814128e420 (sb_writers){.+.+}-{0:0}, at: path_openat+0x1f3e/0x2d40 [ 404.822740][ T31] #1: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: path_openat+0x88a/0x2d40 [ 404.832963][ T31] 3 locks held by kworker/1:5/5870: [ 404.838191][ T31] #0: ffff8881456c9148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 404.849027][ T31] #1: ffffc90003197d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 404.860298][ T31] #2: ffff888029823198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 404.869216][ T31] 1 lock held by syz.4.541/8137: [ 404.874139][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 404.884569][ T31] 2 locks held by syz-executor/8141: [ 404.890150][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 404.899791][ T31] #1: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 404.908880][ T31] 1 lock held by syz-executor/8156: [ 404.914064][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 404.923527][ T31] 1 lock held by syz-executor/8158: [ 404.928773][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 404.938234][ T31] 1 lock held by syz-executor/8162: [ 404.943421][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 404.952863][ T31] 1 lock held by syz-executor/8164: [ 404.958095][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 404.967554][ T31] 1 lock held by syz-executor/8167: [ 404.972747][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 404.982296][ T31] 1 lock held by syz-executor/8172: [ 404.987531][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 404.996989][ T31] 1 lock held by syz-executor/8174: [ 405.002177][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 405.011672][ T31] 1 lock held by syz-executor/8178: [ 405.016924][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 405.026386][ T31] 1 lock held by syz-executor/8180: [ 405.031578][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 405.041054][ T31] 1 lock held by syz-executor/8188: [ 405.046284][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 405.055749][ T31] 1 lock held by syz-executor/8193: [ 405.060934][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 405.070553][ T31] 1 lock held by syz-executor/8197: [ 405.076890][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 405.086431][ T31] 1 lock held by syz-executor/8202: [ 405.091628][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 405.101102][ T31] 1 lock held by syz-executor/8205: [ 405.106339][ T31] #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 405.115821][ T31] [ 405.118138][ T31] ============================================= [ 405.118138][ T31] [ 405.126685][ T31] NMI backtrace for cpu 1 [ 405.126698][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 405.126717][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.126727][ T31] Call Trace: [ 405.126732][ T31] [ 405.126738][ T31] dump_stack_lvl+0x116/0x1f0 [ 405.126766][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 405.126784][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 405.126802][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 405.126820][ T31] watchdog+0xf70/0x12c0 [ 405.126842][ T31] ? __pfx_watchdog+0x10/0x10 [ 405.126856][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 405.126878][ T31] ? __kthread_parkme+0x19e/0x250 [ 405.126902][ T31] ? __pfx_watchdog+0x10/0x10 [ 405.126918][ T31] kthread+0x3c2/0x780 [ 405.126935][ T31] ? __pfx_kthread+0x10/0x10 [ 405.126949][ T31] ? __pfx_kthread+0x10/0x10 [ 405.126963][ T31] ? __pfx_kthread+0x10/0x10 [ 405.126978][ T31] ? __pfx_kthread+0x10/0x10 [ 405.126993][ T31] ? rcu_is_watching+0x12/0xc0 [ 405.127013][ T31] ? __pfx_kthread+0x10/0x10 [ 405.127029][ T31] ret_from_fork+0x45/0x80 [ 405.127046][ T31] ? __pfx_kthread+0x10/0x10 [ 405.127061][ T31] ret_from_fork_asm+0x1a/0x30 [ 405.127095][ T31] [ 405.127102][ T31] Sending NMI from CPU 1 to CPUs 0: [ 405.258537][ C0] NMI backtrace for cpu 0 [ 405.258551][ C0] CPU: 0 UID: 0 PID: 2980 Comm: kworker/u8:7 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 405.258567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.258576][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 405.258594][ C0] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20 [ 405.258610][ C0] Code: 16 85 72 0a e9 61 06 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 26 84 72 0a e9 41 06 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 f1 04 00 00 48 89 c4 48 89 e7 e8 [ 405.258623][ C0] RSP: 0018:ffffc9000be87a08 EFLAGS: 00000002 [ 405.258632][ C0] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000007 [ 405.258640][ C0] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffff888023774e00 [ 405.258648][ C0] RBP: ffffc9000be87a98 R08: 00000000ffffffff R09: 0000000000000000 [ 405.258656][ C0] R10: ffff888023774000 R11: 0000000000002be0 R12: 0000000000082820 [ 405.258664][ C0] R13: 0000000000001000 R14: 00000000ffffffff R15: ffff88801b442140 [ 405.258672][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 405.258685][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.258693][ C0] CR2: 000055fa3fab1008 CR3: 000000000e180000 CR4: 00000000003526f0 [ 405.258702][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.258709][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 405.258716][ C0] Call Trace: [ 405.258721][ C0] [ 405.258725][ C0] RIP: 0010:memset_orig+0x46/0xb0 [ 405.258743][ C0] Code: 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 <48> 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 [ 405.258753][ C0] RSP: 0018:ffffc9000be87a38 EFLAGS: 00000202 [ 405.258762][ C0] __kmalloc_node_track_caller_noprof+0x1f4/0x510 [ 405.258778][ C0] ? __alloc_skb+0x166/0x380 [ 405.258793][ C0] kmalloc_reserve+0xef/0x2c0 [ 405.258816][ C0] __alloc_skb+0x166/0x380 [ 405.258829][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 405.258841][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 405.258853][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 405.258864][ C0] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 405.258880][ C0] process_one_work+0x9cc/0x1b70 [ 405.258898][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 405.258909][ C0] ? __pfx_process_one_work+0x10/0x10 [ 405.258926][ C0] ? assign_work+0x1a0/0x250 [ 405.258939][ C0] worker_thread+0x6c8/0xf10 [ 405.258955][ C0] ? __kthread_parkme+0x19e/0x250 [ 405.258973][ C0] ? __pfx_worker_thread+0x10/0x10 [ 405.258986][ C0] kthread+0x3c2/0x780 [ 405.258998][ C0] ? __pfx_kthread+0x10/0x10 [ 405.259009][ C0] ? __pfx_kthread+0x10/0x10 [ 405.259020][ C0] ? __pfx_kthread+0x10/0x10 [ 405.259032][ C0] ? __pfx_kthread+0x10/0x10 [ 405.259043][ C0] ? rcu_is_watching+0x12/0xc0 [ 405.259058][ C0] ? __pfx_kthread+0x10/0x10 [ 405.259070][ C0] ret_from_fork+0x45/0x80 [ 405.259083][ C0] ? __pfx_kthread+0x10/0x10 [ 405.259095][ C0] ret_from_fork_asm+0x1a/0x30 [ 405.259118][ C0] [ 405.259536][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 405.571055][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 405.582843][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.592892][ T31] Call Trace: [ 405.596158][ T31] [ 405.599074][ T31] dump_stack_lvl+0x3d/0x1f0 [ 405.603668][ T31] panic+0x71c/0x800 [ 405.607553][ T31] ? __pfx_panic+0x10/0x10 [ 405.611952][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 405.617315][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 405.623280][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 405.628650][ T31] ? watchdog+0xdda/0x12c0 [ 405.633052][ T31] ? watchdog+0xdcd/0x12c0 [ 405.637454][ T31] watchdog+0xdeb/0x12c0 [ 405.641685][ T31] ? __pfx_watchdog+0x10/0x10 [ 405.646346][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 405.651532][ T31] ? __kthread_parkme+0x19e/0x250 [ 405.656569][ T31] ? __pfx_watchdog+0x10/0x10 [ 405.661229][ T31] kthread+0x3c2/0x780 [ 405.665281][ T31] ? __pfx_kthread+0x10/0x10 [ 405.669854][ T31] ? __pfx_kthread+0x10/0x10 [ 405.674433][ T31] ? __pfx_kthread+0x10/0x10 [ 405.679006][ T31] ? __pfx_kthread+0x10/0x10 [ 405.683583][ T31] ? rcu_is_watching+0x12/0xc0 [ 405.688335][ T31] ? __pfx_kthread+0x10/0x10 [ 405.692912][ T31] ret_from_fork+0x45/0x80 [ 405.697312][ T31] ? __pfx_kthread+0x10/0x10 [ 405.701885][ T31] ret_from_fork_asm+0x1a/0x30 [ 405.706649][ T31] [ 405.709854][ T31] Kernel Offset: disabled [ 405.714159][ T31] Rebooting in 86400 seconds..