last executing test programs: 1m31.546661216s ago: executing program 3 (id=971): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x5) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m30.093587776s ago: executing program 2 (id=977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x5d4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001a}}, 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r9}}, 0x18) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 1m29.278408678s ago: executing program 4 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f00009d6000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x1ab65000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0x2, 0x1, 0x7, 0x0, 0x6}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 1m29.258345179s ago: executing program 0 (id=980): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000180)={0x10000000, 0x5, 0x6, 0x400, 0xffff7b03, 0x80000000, 0xf2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe01, 0x7aa, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x3, 0xffffffff, 0x8000000, 0x0, 0xe1a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x81, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40003, 0x10001, 0x62c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x83, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x7e67, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x880a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x1ff, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 1m29.162958834s ago: executing program 2 (id=981): r0 = syz_open_pts(0xffffffffffffffff, 0x105282) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x8, 0x0, 0x8001, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) timer_create(0x2, &(0x7f0000000280)={0x0, 0x23, 0x2, @thr={0x0, &(0x7f00000001c0)="e7c5fe3c9e389b524c660beec0b08fa1d7d91f263f2d2ce85258f5f0ec9fdd601fa06e5a1acf34d34973c0a51910b740d6da2cac0bdc89806a81ed5fd3b70f3de122951da595bf577becdc8ec40b20cf6830e86169048b2a03ebd753a68cf0b6c5de7677bac564a61fa537c30f8acdc5cb8b2aa66d0be3a7adadbc43956ca0e581d7f340f102de3ef1f8e392c374b0a8a8"}}, &(0x7f00000002c0)) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x6, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xa7) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000380)=0x11, 0x4) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000500)={0x8, 0x0, [{0x8001, 0x5, 0x0, 0x0, @adapter={0x7, 0x1532, 0x3, 0xfffffff8, 0xe}}, {0x10, 0x2, 0x1, 0x0, @msi={0x8001, 0x80000000, 0x4, 0x2}}, {0x4b94ba3b, 0x3, 0x1, 0x0, @adapter={0x80, 0x4, 0x699, 0x34, 0x4}}, {0xb, 0x2, 0x0, 0x0, @sint={0x3, 0xc864}}, {0x3, 0x0, 0x0, 0x0, @sint={0xfffffffa, 0x4}}, {0x3b118793, 0x3, 0x1, 0x0, @msi={0xfffff854, 0x9, 0x8000, 0x524}}, {0x5, 0x2, 0x1, 0x0, @sint={0x5, 0x10001}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x9f43, 0x3, 0x1, 0xffffffff, 0x4477}}]}) r7 = accept$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e) connect$unix(r7, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000800)={0x0, 0x0, 0xffffffffffffffff}) cachestat(r8, &(0x7f0000000840)={0x9, 0x101}, &(0x7f0000000880), 0x0) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0xf2, 0x7, 0xfffffff3, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x10, 0x8000, 0x6, 0x2}}) dup2(r7, r0) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) tee(r2, r10, 0xffffffffffff0001, 0x4) 1m28.680334778s ago: executing program 0 (id=982): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 1m28.521268766s ago: executing program 2 (id=983): openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x4805) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write(r5, &(0x7f0000000340)="4353c1a13eec4f1d88d27427cf3f5f88b5a1b61b0a1626ace8c8f2d2e664972e78209660faf1b55f2051ae9b63b8baf929", 0x31) io_setup(0x3ff, &(0x7f0000000500)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) gettid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m28.298844377s ago: executing program 0 (id=984): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1b923, r0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x8041, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2a) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x26) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x100}}}, 0x6) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1m28.279437607s ago: executing program 4 (id=985): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x4, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x20363159, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) getpid() setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = dup(r0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 1m28.183230789s ago: executing program 1 (id=986): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000480)=""/4081, 0x103a) getdents64(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r8 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r9 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ax25_int(r8, 0x101, 0xc, &(0x7f0000000180)=0x80000000, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0xce2) 1m27.291540367s ago: executing program 4 (id=987): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1200000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 1m26.894645584s ago: executing program 3 (id=988): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400), 0x88080, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/317], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000200)={0xa05, 0x2, 0x5}, 0x18, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000380)={0x7, 0x4f4d}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000004040a010141cbee77641179eacc31b768683356e3466fc3620cbdf8e89fc5dbd1a3f3bbd68da2ed23347269e575a9121f3104697a216b9dd316"], 0x14}}, 0x0) 1m26.889340875s ago: executing program 2 (id=989): r0 = socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x9, 0x840) mmap$snddsp(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x9, 0x12, r1, 0xc000) sendto$inet(r0, &(0x7f00000012c0)="09268a", 0x3, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703fbff07000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000000100)=0x7d3, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) recvfrom$l2tp(r0, 0x0, 0x3, 0x63, 0x0, 0x0) 1m26.327569468s ago: executing program 1 (id=990): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee0000", 0x4d}], 0x1) 1m26.164755235s ago: executing program 4 (id=991): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = socket$inet_udplite(0x2, 0x2, 0x88) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x1c, 0x2b, 0xb, 0x0, 0x0, {0x6}, [@typed={0x4, 0x3}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x119966ec, 0x69cf39a9dadd5612, 0x7}}, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 1m26.113270006s ago: executing program 0 (id=992): r0 = socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x9, 0x840) mmap$snddsp(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x9, 0x12, r1, 0xc000) sendto$inet(r0, &(0x7f00000012c0)="09268a", 0x3, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703fbff07000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000000100)=0x7d3, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) recvfrom$l2tp(r0, 0x0, 0x3, 0x63, 0x0, 0x0) 1m26.105176339s ago: executing program 3 (id=993): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000180)={0x10000000, 0x5, 0x6, 0x400, 0xffff7b03, 0x80000000, 0xf2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe01, 0x7aa, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x3, 0xffffffff, 0x8000000, 0x0, 0xe1a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x81, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40003, 0x10001, 0x62c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x83, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x7e67, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x880a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x1ff, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 1m25.699378317s ago: executing program 3 (id=994): listen(0xffffffffffffffff, 0x3) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da08"], 0x0, 0x0, 0x0, 0x0}) 1m25.680637732s ago: executing program 1 (id=995): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 1m25.136270354s ago: executing program 1 (id=996): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0xba01, 0x0, 0x800}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x47}, 0x404c080) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x15d8c0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) unshare(0x22020600) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) unshare(0x64000400) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'ip6tnl0\x00', 0x20}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xfc34) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022cbd7000fddbdf2502000000080002000500000008000800ac1e6d010800040002000000080002000500000014000500fe8000000000000000000000000000bb"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x90) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @multicast}) write$tun(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="03000800010000000008140016004600003c0065000000019001000009000000000001000000040c907800000000450000030000000100110000010000027f000001249033e0843233ae5462d8739c5b31919c8bb2af000a48dfb397fbdc272b6ed2f6b4ad193db4a0f40279e9318b2afe430be090798e57e7ac957d9ec0a150159200fdf12a341e79a37ae67bb6542c5bc7c1d9be3c298713a0bedad07bb58fe2908ac9f7577188a421f006f7ee6118c3b29720be5c595d441e1dfe85a582d9b3f1ace4a29cef7b0f8b76a5236ea0d6148ca4276cc8dcb95913e77c876e72a5cb"], 0x4a) 1m24.8609733s ago: executing program 1 (id=997): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x8041, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x2a) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x26) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x100}}}, 0x6) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m24.811795955s ago: executing program 4 (id=998): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1b923, r0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x8041, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2a) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x26) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x100}}}, 0x6) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1m24.262801263s ago: executing program 1 (id=999): openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x4805) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write(r5, &(0x7f0000000340)="4353c1a13eec4f1d88d27427cf3f5f88b5a1b61b0a1626ace8c8f2d2e664972e78209660faf1b55f2051ae9b63b8baf929", 0x31) io_setup(0x3ff, &(0x7f0000000500)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) gettid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m24.204255106s ago: executing program 2 (id=1000): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x9, &(0x7f00000007c0)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f00000001000000000000000000000007f000001"], 0xf0}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0xe651e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmdt(0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000180)={0xc, [0x1, 0x4], 0x2}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@private0}, &(0x7f0000000040)=0x20) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) iopl(0x3) ustat(0x801, &(0x7f0000000240)) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000100)={'veth0_vlan\x00', 0x8a}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000007c0)={0x52, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x8001, 0xb0, 0x12) 1m23.554673716s ago: executing program 4 (id=1001): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m23.157597182s ago: executing program 2 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000200)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write(r5, &(0x7f0000000340)="4353c1a13eec4f1d88d27427cf3f5f88b5a1b61b0a1626ace8c8f2d2e664972e78209660faf1b55f2051ae9b63b8baf929", 0x31) io_setup(0x3ff, &(0x7f0000000500)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) gettid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 0s ago: executing program 33 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000200)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.680937][ T7865] RSP: 002b:00007fd6aecd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.680953][ T7865] RAX: ffffffffffffffda RBX: 00007fd6adfb5fa0 RCX: 00007fd6add8e969 [ 203.680963][ T7865] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 203.680973][ T7865] RBP: 00007fd6aecd9090 R08: 0000000000000000 R09: 0000000000000000 [ 203.680983][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.680992][ T7865] R13: 0000000000000001 R14: 00007fd6adfb5fa0 R15: 00007ffc62794e38 [ 203.681015][ T7865] [ 203.922758][ T30] audit: type=1400 audit(1746178792.928:510): avc: denied { create } for pid=7858 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 204.024028][ T30] audit: type=1400 audit(1746178793.028:511): avc: denied { create } for pid=7858 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 204.098594][ T30] audit: type=1400 audit(1746178793.098:512): avc: denied { read write } for pid=7872 comm="syz.4.482" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.605586][ T5892] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 204.629248][ T5892] ath9k_htc: Failed to initialize the device [ 204.773986][ T5892] usb 1-1: ath9k_htc: USB layer deinitialized [ 204.783711][ T5850] usb 1-1: USB disconnect, device number 19 [ 204.896534][ T7888] overlayfs: workdir and upperdir must be separate subtrees [ 204.922247][ T7887] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 205.700608][ T971] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 205.873601][ T971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.884527][ T971] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 205.908542][ T971] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.928569][ T7911] FAULT_INJECTION: forcing a failure. [ 205.928569][ T7911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.936137][ T971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 205.942671][ T5850] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 205.957984][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.960613][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.3.492 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 205.960634][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.960643][ T7911] Call Trace: [ 205.960648][ T7911] [ 205.960654][ T7911] dump_stack_lvl+0x16c/0x1f0 [ 205.960681][ T7911] should_fail_ex+0x512/0x640 [ 205.960703][ T7911] _copy_from_user+0x2e/0xd0 [ 205.960724][ T7911] __sys_bpf+0x21d/0x4d80 [ 205.960744][ T7911] ? __pfx___sys_bpf+0x10/0x10 [ 205.960762][ T7911] ? ksys_write+0x190/0x240 [ 205.960787][ T7911] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 205.960819][ T7911] ? fput+0x70/0xf0 [ 205.960834][ T7911] ? ksys_write+0x1b9/0x240 [ 205.960853][ T7911] ? __pfx_ksys_write+0x10/0x10 [ 205.960877][ T7911] __x64_sys_bpf+0x78/0xc0 [ 205.960895][ T7911] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.960912][ T7911] do_syscall_64+0xcd/0x260 [ 205.960931][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.960945][ T7911] RIP: 0033:0x7fe43d78e969 [ 205.960957][ T7911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.960972][ T7911] RSP: 002b:00007fe43e638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.960987][ T7911] RAX: ffffffffffffffda RBX: 00007fe43d9b5fa0 RCX: 00007fe43d78e969 [ 205.960997][ T7911] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 205.961006][ T7911] RBP: 00007fe43e638090 R08: 0000000000000000 R09: 0000000000000000 [ 205.961015][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.961023][ T7911] R13: 0000000000000001 R14: 00007fe43d9b5fa0 R15: 00007ffd36140b38 [ 205.961043][ T7911] [ 206.159323][ T7909] binder: BINDER_SET_CONTEXT_MGR already set [ 206.168017][ T7909] binder: 7908:7909 ioctl 4018620d 200000000040 returned -16 [ 206.220296][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 206.226859][ T5850] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 206.235409][ T5850] usb 5-1: config 0 has no interface number 0 [ 206.254348][ T971] usb 1-1: Product: syz [ 206.258531][ T971] usb 1-1: Manufacturer: syz [ 206.264205][ T971] usb 1-1: SerialNumber: syz [ 206.301154][ T5850] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.322496][ T5850] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 206.331991][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.502336][ T5850] usb 5-1: Product: syz [ 206.508249][ T5850] usb 5-1: Manufacturer: syz [ 206.736948][ T5850] usb 5-1: SerialNumber: syz [ 206.758364][ T5850] usb 5-1: config 0 descriptor?? [ 207.307635][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.413965][ T971] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 207.439494][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.443876][ T5850] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 207.710846][ T5850] usb 5-1: USB disconnect, device number 14 [ 207.720682][ T6808] usb 5-1: Failed to submit usb control message: -71 [ 207.765407][ T6808] usb 5-1: unable to send the bmi data to the device: -71 [ 207.840389][ T6808] usb 5-1: unable to get target info from device [ 207.870230][ T6808] usb 5-1: could not get target info (-71) [ 207.889456][ T6808] usb 5-1: could not probe fw (-71) [ 208.215731][ T7937] bridge0: port 3(batadv0) entered blocking state [ 208.222639][ T7937] bridge0: port 3(batadv0) entered disabled state [ 208.229634][ T7937] batadv0: entered allmulticast mode [ 208.242206][ T7937] batadv0: entered promiscuous mode [ 208.249045][ T7937] bridge0: port 3(batadv0) entered blocking state [ 208.255538][ T7937] bridge0: port 3(batadv0) entered forwarding state [ 208.273296][ T7937] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 208.285173][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 208.285199][ T30] audit: type=1400 audit(1746178797.218:517): avc: granted { setsecparam } for pid=7934 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 208.488270][ T971] usb 1-1: USB disconnect, device number 20 [ 208.506299][ T971] usblp0: removed [ 208.518097][ T5996] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 208.527590][ T5996] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 208.573258][ T7913] lo speed is unknown, defaulting to 1000 [ 208.582766][ T7913] lo speed is unknown, defaulting to 1000 [ 208.656734][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.499'. [ 208.669146][ T7943] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 208.904556][ T7952] FAULT_INJECTION: forcing a failure. [ 208.904556][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 208.944199][ T7952] CPU: 1 UID: 0 PID: 7952 Comm: syz.2.502 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 208.944223][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 208.944232][ T7952] Call Trace: [ 208.944237][ T7952] [ 208.944244][ T7952] dump_stack_lvl+0x16c/0x1f0 [ 208.944265][ T7952] should_fail_ex+0x512/0x640 [ 208.944280][ T7952] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 208.944298][ T7952] should_failslab+0xc2/0x120 [ 208.944309][ T7952] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 208.944326][ T7952] ? __d_alloc+0x31/0xaa0 [ 208.944338][ T7952] __d_alloc+0x31/0xaa0 [ 208.944348][ T7952] ? file_init_path+0x4fe/0x760 [ 208.944360][ T7952] d_alloc_pseudo+0x1c/0xc0 [ 208.944373][ T7952] alloc_file_pseudo+0xcf/0x230 [ 208.944386][ T7952] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 208.944397][ T7952] ? bpf_lsm_socket_post_create+0x9/0x10 [ 208.944414][ T7952] sock_alloc_file+0x50/0x210 [ 208.944426][ T7952] __sys_socketpair+0x34e/0x5a0 [ 208.944441][ T7952] ? __pfx___sys_socketpair+0x10/0x10 [ 208.944455][ T7952] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 208.944473][ T7952] ? syscall_user_dispatch+0x78/0x140 [ 208.944487][ T7952] __x64_sys_socketpair+0x96/0x100 [ 208.944501][ T7952] do_syscall_64+0xcd/0x260 [ 208.944516][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.944526][ T7952] RIP: 0033:0x7f3fb598e969 [ 208.944535][ T7952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.944545][ T7952] RSP: 002b:00007f3fb68a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 208.944555][ T7952] RAX: ffffffffffffffda RBX: 00007f3fb5bb5fa0 RCX: 00007f3fb598e969 [ 208.944561][ T7952] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 208.944567][ T7952] RBP: 00007f3fb68a8090 R08: 0000000000000000 R09: 0000000000000000 [ 208.944573][ T7952] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 208.944579][ T7952] R13: 0000000000000000 R14: 00007f3fb5bb5fa0 R15: 00007ffec1b9ba18 [ 208.944592][ T7952] [ 209.172962][ T7955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.503'. [ 209.242121][ T7916] lo speed is unknown, defaulting to 1000 [ 209.248508][ T7916] lo speed is unknown, defaulting to 1000 [ 209.260296][ T971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.482815][ T971] usb 4-1: device descriptor read/64, error -71 [ 209.833468][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 209.910452][ T971] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 210.012669][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 210.045911][ T24] usb 1-1: can't read configurations, error -61 [ 210.100509][ T971] usb 4-1: device descriptor read/64, error -71 [ 210.435742][ T971] usb usb4-port1: attempt power cycle [ 210.443430][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 210.524016][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 210.600396][ T7974] input: syz1 as /devices/virtual/input/input18 [ 210.787445][ T7976] input: syz1 as /devices/virtual/input/input19 [ 210.916329][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 210.975358][ T24] usb 1-1: can't read configurations, error -61 [ 211.030867][ T24] usb usb1-port1: attempt power cycle [ 211.060643][ T971] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 211.124826][ T971] usb 4-1: device descriptor read/8, error -71 [ 211.150912][ T5863] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 211.280184][ T5850] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 211.287846][ T5863] usb 5-1: device descriptor read/64, error -71 [ 211.370242][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 211.377893][ T971] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 211.390212][ T974] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 211.400900][ T971] usb 4-1: device descriptor read/8, error -71 [ 211.408355][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 211.415983][ T24] usb 1-1: can't read configurations, error -61 [ 211.430366][ T5850] usb 3-1: device descriptor read/64, error -71 [ 211.510510][ T971] usb usb4-port1: unable to enumerate USB device [ 211.550203][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 211.550275][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 211.563195][ T5863] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.574605][ T974] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 211.582365][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 211.582734][ T974] usb 2-1: config 0 has no interface number 0 [ 211.596402][ T974] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.598209][ T24] usb 1-1: can't read configurations, error -61 [ 211.609219][ T974] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 211.623329][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.631494][ T974] usb 2-1: Product: syz [ 211.631649][ T24] usb usb1-port1: unable to enumerate USB device [ 211.635692][ T974] usb 2-1: Manufacturer: syz [ 211.647520][ T974] usb 2-1: SerialNumber: syz [ 211.654730][ T974] usb 2-1: config 0 descriptor?? [ 211.664017][ T974] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 211.700207][ T5863] usb 5-1: device descriptor read/64, error -71 [ 211.706537][ T5850] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 211.821219][ T5863] usb usb5-port1: attempt power cycle [ 211.841941][ T5850] usb 3-1: device descriptor read/64, error -71 [ 211.926682][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.936772][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.950462][ T5850] usb usb3-port1: attempt power cycle [ 212.170236][ T5863] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.211229][ T5863] usb 5-1: device descriptor read/8, error -71 [ 212.220204][ T974] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 212.290164][ T5850] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 212.306315][ T7990] lo speed is unknown, defaulting to 1000 [ 212.323591][ T7990] lo speed is unknown, defaulting to 1000 [ 212.331128][ T5850] usb 3-1: device descriptor read/8, error -71 [ 212.390227][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 212.399097][ T974] usb 4-1: config 0 has no interfaces? [ 212.408722][ T974] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 212.418954][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.433692][ T974] usb 4-1: Product: syz [ 212.439722][ T974] usb 4-1: Manufacturer: syz [ 212.448029][ T974] usb 4-1: SerialNumber: syz [ 212.460239][ T5863] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 212.468515][ T974] usb 4-1: config 0 descriptor?? [ 212.490719][ T5863] usb 5-1: device descriptor read/8, error -71 [ 212.580208][ T5850] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 212.600372][ T5863] usb usb5-port1: unable to enumerate USB device [ 212.607434][ T5850] usb 3-1: device descriptor read/8, error -71 [ 212.692379][ T6796] usb 2-1: Failed to submit usb control message: -110 [ 212.699361][ T6796] usb 2-1: unable to send the bmi data to the device: -110 [ 212.707235][ T6796] usb 2-1: unable to get target info from device [ 212.716044][ T24] usb 4-1: USB disconnect, device number 13 [ 212.720388][ T5850] usb usb3-port1: unable to enumerate USB device [ 212.732490][ T6796] usb 2-1: could not get target info (-110) [ 212.739779][ T6796] usb 2-1: could not probe fw (-110) [ 214.538683][ T5863] usb 2-1: USB disconnect, device number 26 [ 215.104063][ T8028] netlink: 45 bytes leftover after parsing attributes in process `syz.2.520'. [ 215.587752][ T30] audit: type=1400 audit(1746178804.588:518): avc: denied { listen } for pid=8023 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 215.790221][ T8036] FAULT_INJECTION: forcing a failure. [ 215.790221][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 215.803525][ T8036] CPU: 1 UID: 0 PID: 8036 Comm: syz.2.526 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 215.803549][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 215.803559][ T8036] Call Trace: [ 215.803565][ T8036] [ 215.803572][ T8036] dump_stack_lvl+0x16c/0x1f0 [ 215.803598][ T8036] should_fail_ex+0x512/0x640 [ 215.803619][ T8036] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 215.803646][ T8036] should_failslab+0xc2/0x120 [ 215.803664][ T8036] __kmalloc_cache_noprof+0x6a/0x3e0 [ 215.803688][ T8036] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xd4/0x510 [ 215.803712][ T8036] ? kasan_save_track+0x14/0x30 [ 215.803740][ T8036] snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xd4/0x510 [ 215.803765][ T8036] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 215.803787][ T8036] snd_mixer_oss_ioctl1+0xaf0/0x1cf0 [ 215.803803][ T8036] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.803825][ T8036] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 215.803845][ T8036] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 215.803870][ T8036] ? tomoyo_path_number_perm+0x18d/0x580 [ 215.803895][ T8036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.803930][ T8036] ? do_vfs_ioctl+0x512/0x1990 [ 215.803952][ T8036] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 215.803978][ T8036] snd_mixer_oss_ioctl_card+0x102/0x170 [ 215.803996][ T8036] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 215.804017][ T8036] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 215.804048][ T8036] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 215.804072][ T8036] ? hook_file_ioctl_common+0x145/0x410 [ 215.804088][ T8036] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 215.804114][ T8036] ? selinux_file_ioctl+0x180/0x270 [ 215.804137][ T8036] ? selinux_file_ioctl+0xb4/0x270 [ 215.804162][ T8036] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 215.804185][ T8036] __x64_sys_ioctl+0x190/0x200 [ 215.804208][ T8036] do_syscall_64+0xcd/0x260 [ 215.804232][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.804249][ T8036] RIP: 0033:0x7f3fb598e969 [ 215.804264][ T8036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.804281][ T8036] RSP: 002b:00007f3fb6887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.804297][ T8036] RAX: ffffffffffffffda RBX: 00007f3fb5bb6080 RCX: 00007f3fb598e969 [ 215.804308][ T8036] RDX: 0000200000000100 RSI: 00000000c0044dff RDI: 0000000000000008 [ 215.804318][ T8036] RBP: 00007f3fb6887090 R08: 0000000000000000 R09: 0000000000000000 [ 215.804328][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.804338][ T8036] R13: 0000000000000000 R14: 00007f3fb5bb6080 R15: 00007ffec1b9ba18 [ 215.804362][ T8036] [ 216.072368][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.520342][ T971] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 216.831659][ T971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.883561][ T30] audit: type=1400 audit(1746178805.888:519): avc: denied { nlmsg_read } for pid=8056 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.907170][ T8057] netlink: 48 bytes leftover after parsing attributes in process `syz.1.534'. [ 217.547860][ T971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.559492][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.567636][ T971] usb 1-1: Product: syz [ 217.572183][ T971] usb 1-1: Manufacturer: syz [ 217.576856][ T971] usb 1-1: SerialNumber: syz [ 217.597718][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.535'. [ 217.630473][ T8063] siw: device registration error -23 [ 217.656930][ T30] audit: type=1400 audit(1746178806.648:520): avc: denied { remount } for pid=8062 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 217.846361][ T8066] FAULT_INJECTION: forcing a failure. [ 217.846361][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 217.859399][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.1.537 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 217.859422][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.859432][ T8066] Call Trace: [ 217.859438][ T8066] [ 217.859444][ T8066] dump_stack_lvl+0x16c/0x1f0 [ 217.859469][ T8066] should_fail_ex+0x512/0x640 [ 217.859493][ T8066] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 217.859518][ T8066] should_failslab+0xc2/0x120 [ 217.859536][ T8066] __kmalloc_cache_noprof+0x6a/0x3e0 [ 217.859559][ T8066] ? alloc_pipe_info+0x10e/0x590 [ 217.859578][ T8066] alloc_pipe_info+0x10e/0x590 [ 217.859596][ T8066] splice_direct_to_actor+0x77d/0xa30 [ 217.859621][ T8066] ? __lock_acquire+0x5ca/0x1ba0 [ 217.859644][ T8066] ? __pfx_direct_splice_actor+0x10/0x10 [ 217.859671][ T8066] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 217.859697][ T8066] ? __pfx___might_resched+0x10/0x10 [ 217.859722][ T8066] do_splice_direct+0x174/0x240 [ 217.859746][ T8066] ? __pfx_do_splice_direct+0x10/0x10 [ 217.859770][ T8066] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 217.859794][ T8066] ? bpf_lsm_file_permission+0x9/0x10 [ 217.859816][ T8066] ? security_file_permission+0x71/0x210 [ 217.859840][ T8066] ? rw_verify_area+0xcf/0x680 [ 217.859863][ T8066] do_sendfile+0xafd/0xe50 [ 217.859889][ T8066] ? __pfx_do_sendfile+0x10/0x10 [ 217.859911][ T8066] ? __fget_files+0x20e/0x3c0 [ 217.859942][ T8066] __x64_sys_sendfile64+0x1d8/0x220 [ 217.859958][ T8066] ? ksys_write+0x1b9/0x240 [ 217.859985][ T8066] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 217.860010][ T8066] do_syscall_64+0xcd/0x260 [ 217.860033][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.860049][ T8066] RIP: 0033:0x7fd6add8e969 [ 217.860064][ T8066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.860080][ T8066] RSP: 002b:00007fd6aec97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 217.860096][ T8066] RAX: ffffffffffffffda RBX: 00007fd6adfb6160 RCX: 00007fd6add8e969 [ 217.860106][ T8066] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 217.860116][ T8066] RBP: 00007fd6aec97090 R08: 0000000000000000 R09: 0000000000000000 [ 217.860125][ T8066] R10: 0000000000040008 R11: 0000000000000246 R12: 0000000000000001 [ 217.860134][ T8066] R13: 0000000000000000 R14: 00007fd6adfb6160 R15: 00007ffc62794e38 [ 217.860157][ T8066] [ 218.095787][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.521786][ T8069] pim6reg1: entered allmulticast mode [ 218.631620][ T8074] fuse: Unknown parameter '00000000000000000000010' [ 219.099241][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.139483][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.863335][ T971] cdc_ncm 1-1:1.0: failed to get mac address [ 219.897866][ T971] cdc_ncm 1-1:1.0: bind() failure [ 220.059017][ T8100] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 220.090753][ T30] audit: type=1400 audit(1746178809.058:521): avc: granted { setsecparam } for pid=8094 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 220.347953][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 220.365663][ T8098] bridge0: port 4(macsec0) entered blocking state [ 220.374579][ T971] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 220.383759][ T971] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 220.383960][ T8098] bridge0: port 4(macsec0) entered disabled state [ 220.394863][ T971] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 220.411244][ T8098] macsec0: entered allmulticast mode [ 220.418970][ T8098] veth1_macvtap: entered allmulticast mode [ 220.429940][ T971] usb 1-1: USB disconnect, device number 25 [ 220.497219][ T8098] macsec0: entered promiscuous mode [ 220.505421][ T8098] bridge0: port 4(macsec0) entered blocking state [ 220.512056][ T8098] bridge0: port 4(macsec0) entered forwarding state [ 220.613592][ T5850] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.724742][ T8106] binder_alloc: 8105: binder_alloc_buf, no vma [ 220.791569][ T5850] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 220.825178][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.862627][ T5850] usb 4-1: config 0 descriptor?? [ 220.880708][ T5850] usb 4-1: Invalid firmware size=18. [ 220.883666][ T8113] FAULT_INJECTION: forcing a failure. [ 220.883666][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 220.903138][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.4.549 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 220.903161][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 220.903171][ T8113] Call Trace: [ 220.903177][ T8113] [ 220.903184][ T8113] dump_stack_lvl+0x16c/0x1f0 [ 220.903210][ T8113] should_fail_ex+0x512/0x640 [ 220.903231][ T8113] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 220.903260][ T8113] should_failslab+0xc2/0x120 [ 220.903278][ T8113] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 220.903304][ T8113] ? prepare_creds+0x2c/0x7d0 [ 220.903326][ T8113] prepare_creds+0x2c/0x7d0 [ 220.903345][ T8113] ovl_setup_cred_for_create+0x25/0x300 [ 220.903366][ T8113] ovl_create_or_link+0x617/0x800 [ 220.903386][ T8113] ? inode_init_owner+0x2d6/0x3e0 [ 220.903407][ T8113] ovl_create_object+0x266/0x300 [ 220.903425][ T8113] ? __pfx_ovl_create_object+0x10/0x10 [ 220.903445][ T8113] ? bpf_lsm_inode_permission+0x9/0x10 [ 220.903465][ T8113] ? security_inode_permission+0xbf/0x260 [ 220.903491][ T8113] ? __pfx_ovl_create+0x10/0x10 [ 220.903510][ T8113] lookup_open.isra.0+0x11d0/0x1580 [ 220.903539][ T8113] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 220.903576][ T8113] ? __pfx_down_write+0x10/0x10 [ 220.903597][ T8113] ? mnt_get_write_access+0x20c/0x300 [ 220.903623][ T8113] path_openat+0x905/0x2d40 [ 220.903659][ T8113] ? __pfx_path_openat+0x10/0x10 [ 220.903686][ T8113] ? __lock_acquire+0xaa4/0x1ba0 [ 220.903714][ T8113] do_filp_open+0x20b/0x470 [ 220.903740][ T8113] ? __pfx_do_filp_open+0x10/0x10 [ 220.903785][ T8113] ? _raw_spin_unlock+0x28/0x50 [ 220.903801][ T8113] ? alloc_fd+0x471/0x7d0 [ 220.903833][ T8113] do_sys_openat2+0x11b/0x1d0 [ 220.903858][ T8113] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.903878][ T8113] ? __fget_files+0x20e/0x3c0 [ 220.903910][ T8113] __x64_sys_creat+0xcc/0x120 [ 220.903930][ T8113] ? __pfx___x64_sys_creat+0x10/0x10 [ 220.903949][ T8113] ? __pfx_ksys_write+0x10/0x10 [ 220.903975][ T8113] ? rcu_is_watching+0x12/0xc0 [ 220.903994][ T8113] ? do_syscall_64+0x91/0x260 [ 220.904016][ T8113] do_syscall_64+0xcd/0x260 [ 220.904039][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.904056][ T8113] RIP: 0033:0x7fcc3f78e969 [ 220.904070][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.904085][ T8113] RSP: 002b:00007fcc3d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 220.904100][ T8113] RAX: ffffffffffffffda RBX: 00007fcc3f9b5fa0 RCX: 00007fcc3f78e969 [ 220.904111][ T8113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 220.904120][ T8113] RBP: 00007fcc3d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.904130][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.904141][ T8113] R13: 0000000000000000 R14: 00007fcc3f9b5fa0 R15: 00007fffb9822b08 [ 220.904165][ T8113] [ 221.527082][ T8124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.004315][ T8127] FAULT_INJECTION: forcing a failure. [ 222.004315][ T8127] name failslab, interval 1, probability 0, space 0, times 0 [ 222.017103][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.2.551 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 222.017126][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 222.017136][ T8127] Call Trace: [ 222.017141][ T8127] [ 222.017147][ T8127] dump_stack_lvl+0x16c/0x1f0 [ 222.017172][ T8127] should_fail_ex+0x512/0x640 [ 222.017192][ T8127] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 222.017220][ T8127] should_failslab+0xc2/0x120 [ 222.017238][ T8127] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 222.017264][ T8127] ? __alloc_skb+0x2b2/0x380 [ 222.017293][ T8127] __alloc_skb+0x2b2/0x380 [ 222.017318][ T8127] ? __pfx___alloc_skb+0x10/0x10 [ 222.017345][ T8127] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 222.017368][ T8127] netlink_alloc_large_skb+0x69/0x130 [ 222.017388][ T8127] netlink_sendmsg+0x6a1/0xdd0 [ 222.017410][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.017431][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.017454][ T8127] ____sys_sendmsg+0xa95/0xc70 [ 222.017475][ T8127] ? copy_msghdr_from_user+0x10a/0x160 [ 222.017491][ T8127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.017523][ T8127] ___sys_sendmsg+0x134/0x1d0 [ 222.017541][ T8127] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.017587][ T8127] __sys_sendmsg+0x16d/0x220 [ 222.017604][ T8127] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.017636][ T8127] do_syscall_64+0xcd/0x260 [ 222.017659][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.017676][ T8127] RIP: 0033:0x7f3fb598e969 [ 222.017690][ T8127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.017705][ T8127] RSP: 002b:00007f3fb6887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.017722][ T8127] RAX: ffffffffffffffda RBX: 00007f3fb5bb6080 RCX: 00007f3fb598e969 [ 222.017733][ T8127] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 222.017743][ T8127] RBP: 00007f3fb6887090 R08: 0000000000000000 R09: 0000000000000000 [ 222.017753][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.017762][ T8127] R13: 0000000000000000 R14: 00007f3fb5bb6080 R15: 00007ffec1b9ba18 [ 222.017785][ T8127] [ 223.373789][ T5821] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 223.404443][ T5892] usb 4-1: USB disconnect, device number 14 [ 223.450178][ T5863] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 223.461769][ T8141] binder_alloc: 8140: binder_alloc_buf, no vma [ 223.540893][ T5850] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.623587][ T8143] FAULT_INJECTION: forcing a failure. [ 223.623587][ T8143] name failslab, interval 1, probability 0, space 0, times 0 [ 223.639461][ T8143] CPU: 0 UID: 0 PID: 8143 Comm: syz.2.560 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 223.639486][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 223.639496][ T8143] Call Trace: [ 223.639501][ T8143] [ 223.639508][ T8143] dump_stack_lvl+0x16c/0x1f0 [ 223.639534][ T8143] should_fail_ex+0x512/0x640 [ 223.639555][ T8143] ? fs_reclaim_acquire+0xae/0x150 [ 223.639578][ T8143] ? tomoyo_encode2+0x100/0x3e0 [ 223.639599][ T8143] should_failslab+0xc2/0x120 [ 223.639616][ T8143] __kmalloc_noprof+0xd2/0x510 [ 223.639647][ T8143] tomoyo_encode2+0x100/0x3e0 [ 223.639673][ T8143] tomoyo_encode+0x29/0x50 [ 223.639694][ T8143] tomoyo_realpath_from_path+0x18f/0x6e0 [ 223.639719][ T8143] ? tomoyo_profile+0x47/0x60 [ 223.639747][ T8143] tomoyo_path_number_perm+0x245/0x580 [ 223.639765][ T8143] ? tomoyo_path_number_perm+0x237/0x580 [ 223.639787][ T8143] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.639809][ T8143] ? find_held_lock+0x2b/0x80 [ 223.639842][ T8143] ? find_held_lock+0x2b/0x80 [ 223.639856][ T8143] ? hook_file_ioctl_common+0x145/0x410 [ 223.639875][ T8143] ? __fget_files+0x20e/0x3c0 [ 223.639904][ T8143] security_file_ioctl+0x9b/0x240 [ 223.639929][ T8143] __x64_sys_ioctl+0xb7/0x200 [ 223.639952][ T8143] do_syscall_64+0xcd/0x260 [ 223.639974][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.639990][ T8143] RIP: 0033:0x7f3fb598e969 [ 223.640004][ T8143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.640019][ T8143] RSP: 002b:00007f3fb68a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.640035][ T8143] RAX: ffffffffffffffda RBX: 00007f3fb5bb5fa0 RCX: 00007f3fb598e969 [ 223.640045][ T8143] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 223.640055][ T8143] RBP: 00007f3fb68a8090 R08: 0000000000000000 R09: 0000000000000000 [ 223.640064][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.640152][ T8143] R13: 0000000000000000 R14: 00007f3fb5bb5fa0 R15: 00007ffec1b9ba18 [ 223.640176][ T8143] [ 223.859357][ T8143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.945505][ T8149] input: syz1 as /devices/virtual/input/input21 [ 224.102585][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 224.120430][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 224.155822][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.180230][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.190268][ T5863] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.206386][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.215798][ T5850] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=43.a2 [ 224.225657][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.234880][ T5863] usb 1-1: config 0 descriptor?? [ 224.251460][ T5863] hub 1-1:0.0: USB hub found [ 224.256252][ T5850] usb 5-1: Product: syz [ 224.260865][ T5850] usb 5-1: Manufacturer: syz [ 224.265485][ T5850] usb 5-1: SerialNumber: syz [ 224.275844][ T5850] usb 5-1: config 0 descriptor?? [ 224.341615][ T30] audit: type=1400 audit(1746178813.338:522): avc: denied { append } for pid=8152 comm="syz.3.562" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 224.370177][ T974] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 224.444718][ T5863] hub 1-1:0.0: 1 port detected [ 224.483083][ T5850] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 224.531103][ T974] usb 2-1: device descriptor read/64, error -71 [ 224.650262][ T5901] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 224.683796][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 224.696076][ T8138] team0: No ports can be present during mode change [ 224.704309][ T8138] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 224.718440][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.726500][ T8138] team0: Port device bond0 added [ 224.734226][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 224.790290][ T974] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 224.801393][ T5901] usb 4-1: device descriptor read/64, error -71 [ 224.824957][ T8138] team0 (unregistering): Port device team_slave_0 removed [ 224.835973][ T8138] team0 (unregistering): Port device team_slave_1 removed [ 224.846701][ T8133] FAULT_INJECTION: forcing a failure. [ 224.846701][ T8133] name failslab, interval 1, probability 0, space 0, times 0 [ 224.847000][ T8138] team0 (unregistering): Port device bond0 removed [ 224.860043][ T8133] CPU: 1 UID: 0 PID: 8133 Comm: syz.0.557 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 224.860063][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 224.860071][ T8133] Call Trace: [ 224.860077][ T8133] [ 224.860082][ T8133] dump_stack_lvl+0x16c/0x1f0 [ 224.860110][ T8133] should_fail_ex+0x512/0x640 [ 224.860133][ T8133] ? fs_reclaim_acquire+0xae/0x150 [ 224.860154][ T8133] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 224.860174][ T8133] should_failslab+0xc2/0x120 [ 224.860190][ T8133] __kmalloc_noprof+0xd2/0x510 [ 224.860217][ T8133] tomoyo_realpath_from_path+0xc2/0x6e0 [ 224.860239][ T8133] ? tomoyo_profile+0x47/0x60 [ 224.860263][ T8133] tomoyo_path_number_perm+0x245/0x580 [ 224.860279][ T8133] ? tomoyo_path_number_perm+0x237/0x580 [ 224.860298][ T8133] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.860316][ T8133] ? find_held_lock+0x2b/0x80 [ 224.860353][ T8133] ? find_held_lock+0x2b/0x80 [ 224.860369][ T8133] ? hook_file_ioctl_common+0x145/0x410 [ 224.860388][ T8133] ? __fget_files+0x20e/0x3c0 [ 224.860414][ T8133] security_file_ioctl+0x9b/0x240 [ 224.860434][ T8133] __x64_sys_ioctl+0xb7/0x200 [ 224.860454][ T8133] do_syscall_64+0xcd/0x260 [ 224.860474][ T8133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.860489][ T8133] RIP: 0033:0x7fdc6c58e969 [ 224.860501][ T8133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.860515][ T8133] RSP: 002b:00007fdc6d3aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.860530][ T8133] RAX: ffffffffffffffda RBX: 00007fdc6c7b5fa0 RCX: 00007fdc6c58e969 [ 224.860539][ T8133] RDX: 0000200000000580 RSI: 00000000c06864a2 RDI: 0000000000000004 [ 224.860548][ T8133] RBP: 00007fdc6d3aa090 R08: 0000000000000000 R09: 0000000000000000 [ 224.860556][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.860564][ T8133] R13: 0000000000000000 R14: 00007fdc6c7b5fa0 R15: 00007ffd653ed5b8 [ 224.860585][ T8133] [ 224.864541][ T8133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.930165][ T974] usb 2-1: device descriptor read/64, error -71 [ 225.190857][ T974] usb usb2-port1: attempt power cycle [ 225.220218][ T5901] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 225.360216][ T5901] usb 4-1: device descriptor read/64, error -71 [ 225.404037][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.408216][ T5898] usb 1-1: USB disconnect, device number 26 [ 225.415457][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.480918][ T5901] usb usb4-port1: attempt power cycle [ 225.540207][ T974] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 225.564227][ T974] usb 2-1: device descriptor read/8, error -71 [ 225.640290][ T971] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 225.790253][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 225.798377][ T971] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 225.807830][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.812388][ T974] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 225.815913][ T971] usb 3-1: Product: syz [ 225.823750][ T5901] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 225.827526][ T971] usb 3-1: Manufacturer: syz [ 225.839850][ T971] usb 3-1: SerialNumber: syz [ 225.847472][ T971] r8152-cfgselector 3-1: Unknown version 0x0000 [ 225.853189][ T974] usb 2-1: device descriptor read/8, error -71 [ 225.854524][ T971] r8152-cfgselector 3-1: config 0 descriptor?? [ 225.860030][ T5901] usb 4-1: device descriptor read/8, error -71 [ 225.980430][ T974] usb usb2-port1: unable to enumerate USB device [ 226.082142][ T971] r8152-cfgselector 3-1: Unknown version 0x0000 [ 226.089083][ T971] r8152-cfgselector 3-1: bad CDC descriptors [ 226.098552][ T971] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 226.130656][ T5901] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 226.150704][ T5901] usb 4-1: device descriptor read/8, error -71 [ 226.180261][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 226.260753][ T5901] usb usb4-port1: unable to enumerate USB device [ 226.332872][ T5892] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.340927][ T5892] usb 1-1: config 0 has no interface number 0 [ 226.346994][ T5892] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.358225][ T5892] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.368085][ T5892] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 226.377131][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.386657][ T5892] usb 1-1: config 0 descriptor?? [ 226.441264][ T5850] usb write operation failed. (-71) [ 226.449721][ T5850] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 226.462157][ T5850] dvbdev: DVB: registering new adapter (Terratec H7) [ 226.468837][ T5850] usb 5-1: media controller created [ 226.474422][ T5850] usb read operation failed. (-71) [ 226.479839][ T5850] usb write operation failed. (-71) [ 226.489085][ T5850] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 226.504958][ T5850] usb 5-1: USB disconnect, device number 19 [ 226.892571][ T5892] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 226.905355][ T5892] hid_prodikeys: hid-prodikeys: failed to find output report [ 226.905355][ T5892] [ 227.032867][ T8179] FAULT_INJECTION: forcing a failure. [ 227.032867][ T8179] name failslab, interval 1, probability 0, space 0, times 0 [ 227.140231][ T8179] CPU: 1 UID: 0 PID: 8179 Comm: syz.4.569 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 227.140259][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 227.140268][ T8179] Call Trace: [ 227.140274][ T8179] [ 227.140281][ T8179] dump_stack_lvl+0x16c/0x1f0 [ 227.140307][ T8179] should_fail_ex+0x512/0x640 [ 227.140328][ T8179] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 227.140354][ T8179] should_failslab+0xc2/0x120 [ 227.140371][ T8179] __kmalloc_cache_noprof+0x6a/0x3e0 [ 227.140393][ T8179] ? find_held_lock+0x2b/0x80 [ 227.140412][ T8179] ? alloc_pipe_info+0x10e/0x590 [ 227.140432][ T8179] alloc_pipe_info+0x10e/0x590 [ 227.140451][ T8179] splice_direct_to_actor+0x77d/0xa30 [ 227.140475][ T8179] ? __lock_acquire+0x5ca/0x1ba0 [ 227.140497][ T8179] ? __pfx_direct_splice_actor+0x10/0x10 [ 227.140525][ T8179] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 227.140551][ T8179] ? __pfx___might_resched+0x10/0x10 [ 227.140576][ T8179] do_splice_direct+0x174/0x240 [ 227.140600][ T8179] ? __pfx_do_splice_direct+0x10/0x10 [ 227.140624][ T8179] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 227.140648][ T8179] ? bpf_lsm_file_permission+0x9/0x10 [ 227.140670][ T8179] ? security_file_permission+0x71/0x210 [ 227.140694][ T8179] ? rw_verify_area+0xcf/0x680 [ 227.140717][ T8179] do_sendfile+0xafd/0xe50 [ 227.140744][ T8179] ? __pfx_do_sendfile+0x10/0x10 [ 227.140772][ T8179] ? __fget_files+0x20e/0x3c0 [ 227.140804][ T8179] __x64_sys_sendfile64+0x1d8/0x220 [ 227.140820][ T8179] ? ksys_write+0x1b9/0x240 [ 227.140842][ T8179] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 227.140858][ T8179] ? rcu_is_watching+0x12/0xc0 [ 227.140885][ T8179] do_syscall_64+0xcd/0x260 [ 227.140908][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.140925][ T8179] RIP: 0033:0x7fcc3f78e969 [ 227.140939][ T8179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.140955][ T8179] RSP: 002b:00007fcc3d5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 227.140972][ T8179] RAX: ffffffffffffffda RBX: 00007fcc3f9b6160 RCX: 00007fcc3f78e969 [ 227.140983][ T8179] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 227.140993][ T8179] RBP: 00007fcc3d5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 227.141003][ T8179] R10: 0000000000040008 R11: 0000000000000246 R12: 0000000000000001 [ 227.141013][ T8179] R13: 0000000000000000 R14: 00007fcc3f9b6160 R15: 00007fffb9822b08 [ 227.141036][ T8179] [ 227.513975][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.523565][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.533767][ T5892] usb 1-1: USB disconnect, device number 27 [ 227.594203][ T8183] binder_alloc: 8182: binder_alloc_buf, no vma [ 228.000337][ T30] audit: type=1400 audit(1746178816.998:523): avc: denied { nlmsg_read } for pid=8191 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 229.193442][ T30] audit: type=1400 audit(1746178818.198:524): avc: denied { read } for pid=8198 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.639479][ T8214] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 229.740897][ T30] audit: type=1400 audit(1746178818.638:525): avc: granted { setsecparam } for pid=8209 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 230.818108][ T30] audit: type=1400 audit(1746178819.818:526): avc: denied { sys_module } for pid=8228 comm="syz.3.584" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 230.915546][ T5892] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 231.100343][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 231.174475][ T5892] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 231.182629][ T5892] usb 1-1: config 0 has no interface number 0 [ 231.188736][ T5892] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.348562][ T5892] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 231.374245][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.383952][ T5892] usb 1-1: Product: syz [ 231.388133][ T5892] usb 1-1: Manufacturer: syz [ 231.393506][ T5892] usb 1-1: SerialNumber: syz [ 231.438362][ T5892] usb 1-1: config 0 descriptor?? [ 231.573920][ T8219] lo speed is unknown, defaulting to 1000 [ 231.592280][ T8219] lo speed is unknown, defaulting to 1000 [ 231.627439][ T5892] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 231.839769][ T8249] input: syz1 as /devices/virtual/input/input22 [ 231.855420][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.866642][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.886687][ T8260] overlayfs: workdir and upperdir must be separate subtrees [ 231.905020][ T5996] usb 1-1: Failed to submit usb control message: -71 [ 231.906434][ T58] usb 1-1: USB disconnect, device number 28 [ 231.915470][ T5996] usb 1-1: unable to send the bmi data to the device: -71 [ 231.966188][ T5996] usb 1-1: unable to get target info from device [ 231.998059][ T5996] usb 1-1: could not get target info (-71) [ 232.102857][ T5996] usb 1-1: could not probe fw (-71) [ 232.110607][ T5892] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.311043][ T5892] usb 4-1: device descriptor read/64, error -71 [ 232.655777][ T5892] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.470157][ T5892] usb 4-1: device descriptor read/64, error -71 [ 233.685249][ T5892] usb usb4-port1: attempt power cycle [ 233.711172][ T8281] FAULT_INJECTION: forcing a failure. [ 233.711172][ T8281] name failslab, interval 1, probability 0, space 0, times 0 [ 233.724371][ T8281] CPU: 0 UID: 0 PID: 8281 Comm: syz.1.596 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 233.724394][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 233.724403][ T8281] Call Trace: [ 233.724409][ T8281] [ 233.724415][ T8281] dump_stack_lvl+0x16c/0x1f0 [ 233.724439][ T8281] should_fail_ex+0x512/0x640 [ 233.724458][ T8281] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 233.724483][ T8281] should_failslab+0xc2/0x120 [ 233.724500][ T8281] __kmalloc_cache_noprof+0x6a/0x3e0 [ 233.724523][ T8281] ? __alloc_workqueue+0xda2/0x1810 [ 233.724549][ T8281] __alloc_workqueue+0xda2/0x1810 [ 233.724575][ T8281] ? is_dynamic_key+0xb4/0x160 [ 233.724604][ T8281] alloc_workqueue+0xd2/0x200 [ 233.724627][ T8281] ? __pfx_alloc_workqueue+0x10/0x10 [ 233.724663][ T8281] hci_register_dev+0x240/0xc60 [ 233.724689][ T8281] hci_uart_tty_ioctl+0x7e2/0xc30 [ 233.724713][ T8281] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 233.724731][ T8281] tty_ioctl+0x6f6/0x1610 [ 233.724750][ T8281] ? __pfx_tty_ioctl+0x10/0x10 [ 233.724767][ T8281] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 233.724797][ T8281] ? hook_file_ioctl_common+0x36/0x410 [ 233.724815][ T8281] ? hook_file_ioctl_common+0x145/0x410 [ 233.724837][ T8281] ? selinux_file_ioctl+0x180/0x270 [ 233.724860][ T8281] ? selinux_file_ioctl+0xb4/0x270 [ 233.724884][ T8281] ? __pfx_tty_ioctl+0x10/0x10 [ 233.724901][ T8281] __x64_sys_ioctl+0x190/0x200 [ 233.724929][ T8281] do_syscall_64+0xcd/0x260 [ 233.724953][ T8281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.724969][ T8281] RIP: 0033:0x7fd6add8e969 [ 233.724983][ T8281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.724998][ T8281] RSP: 002b:00007fd6aecb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.725014][ T8281] RAX: ffffffffffffffda RBX: 00007fd6adfb6080 RCX: 00007fd6add8e969 [ 233.725029][ T8281] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000006 [ 233.725039][ T8281] RBP: 00007fd6aecb8090 R08: 0000000000000000 R09: 0000000000000000 [ 233.725048][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.725058][ T8281] R13: 0000000000000000 R14: 00007fd6adfb6080 R15: 00007ffc62794e38 [ 233.725080][ T8281] [ 233.726947][ T8281] Bluetooth: Can't register HCI device [ 234.201730][ T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 234.542059][ T58] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.551350][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.048360][ T8292] overlayfs: workdir and upperdir must be separate subtrees [ 235.056616][ T5892] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 235.302308][ T58] usb 3-1: Product: syz [ 235.306622][ T58] usb 3-1: Manufacturer: syz [ 235.314824][ T58] usb 3-1: SerialNumber: syz [ 235.321355][ T5892] usb 4-1: device descriptor read/8, error -71 [ 235.346057][ T58] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.375519][ T5861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.549239][ T30] audit: type=1400 audit(1746178824.548:527): avc: denied { map } for pid=8297 comm="syz.0.602" path="socket:[18083]" dev="sockfs" ino=18083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.693534][ T8303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.972070][ T30] audit: type=1400 audit(1746178824.548:528): avc: denied { read } for pid=8297 comm="syz.0.602" path="socket:[18083]" dev="sockfs" ino=18083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.980604][ C1] usb 3-1: ath: unknown panic pattern! [ 236.009498][ T30] audit: type=1400 audit(1746178824.668:529): avc: denied { read } for pid=8299 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 236.174452][ T974] usb 3-1: USB disconnect, device number 24 [ 236.315202][ T8314] overlayfs: workdir and upperdir must be separate subtrees [ 236.684190][ T5861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 236.728987][ T5861] ath9k_htc: Failed to initialize the device [ 236.756019][ T974] usb 3-1: ath9k_htc: USB layer deinitialized [ 237.845663][ T8327] sp0: Synchronizing with TNC [ 237.884213][ T8338] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 237.908302][ T8338] nbd: error processing sock list [ 237.942681][ T8338] block nbd0: shutting down sockets [ 238.200257][ T974] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 238.610383][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.776686][ T974] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.786252][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.840539][ T974] usb 2-1: Product: syz [ 238.860647][ T974] usb 2-1: Manufacturer: syz [ 238.865265][ T974] usb 2-1: SerialNumber: syz [ 239.440523][ T58] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 239.489202][ T5861] IPVS: starting estimator thread 0... [ 239.505611][ T8375] binder: BINDER_SET_CONTEXT_MGR already set [ 239.517618][ T8375] binder: 8373:8375 ioctl 4018620d 200000000040 returned -16 [ 239.612202][ T8377] IPVS: using max 35 ests per chain, 84000 per kthread [ 239.684290][ T58] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 239.697193][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.754296][ T58] usb 4-1: Product: syz [ 239.800767][ T58] usb 4-1: Manufacturer: syz [ 239.806327][ T58] usb 4-1: SerialNumber: syz [ 239.813787][ T58] usb 4-1: config 0 descriptor?? [ 239.824724][ T58] hub 4-1:0.0: bad descriptor, ignoring hub [ 239.836448][ T58] hub 4-1:0.0: probe with driver hub failed with error -5 [ 239.845371][ T58] f81232 4-1:0.0: f81534a converter detected [ 240.182016][ T974] cdc_ncm 2-1:1.0: bind() failure [ 240.193414][ T974] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 240.349750][ T58] usb 4-1: f81534a converter now attached to ttyUSB0 [ 240.460899][ T974] cdc_ncm 2-1:1.1: bind() failure [ 240.626005][ T974] usb 2-1: USB disconnect, device number 31 [ 240.636798][ T8369] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 240.645335][ T8369] bond0: (slave wlan1): Opening slave failed [ 240.659053][ T8369] macvlan1: entered promiscuous mode [ 240.661026][ T30] audit: type=1400 audit(1746178829.658:530): avc: denied { ioctl } for pid=8368 comm="syz.3.625" path="socket:[18265]" dev="sockfs" ino=18265 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.664949][ T8369] macvlan1: entered allmulticast mode [ 240.832409][ T8369] veth1_vlan: entered allmulticast mode [ 240.854422][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.003091][ T5861] usb 4-1: USB disconnect, device number 23 [ 241.036481][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 241.050166][ T5861] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 241.071284][ T5861] f81232 4-1:0.0: device disconnected [ 242.347940][ T8429] ======================================================= [ 242.347940][ T8429] WARNING: The mand mount option has been deprecated and [ 242.347940][ T8429] and is ignored by this kernel. Remove the mand [ 242.347940][ T8429] option from the mount to silence this warning. [ 242.347940][ T8429] ======================================================= [ 242.382807][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.339806][ T8439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.646'. [ 244.505484][ T8410] lo speed is unknown, defaulting to 1000 [ 244.536127][ T8410] lo speed is unknown, defaulting to 1000 [ 245.199831][ T8461] input: syz1 as /devices/virtual/input/input24 [ 245.389849][ T30] audit: type=1400 audit(1746178834.388:531): avc: denied { setopt } for pid=8459 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.622437][ T5863] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 245.700316][ T974] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 245.770623][ T5863] usb 1-1: device descriptor read/64, error -71 [ 245.826197][ T8474] delete_channel: no stack [ 245.870473][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 245.878967][ T974] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 245.914179][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.948380][ T974] usb 5-1: Product: syz [ 245.956922][ T974] usb 5-1: Manufacturer: syz [ 245.975779][ T974] usb 5-1: SerialNumber: syz [ 245.998958][ T974] r8152-cfgselector 5-1: Unknown version 0x0000 [ 246.005761][ T974] r8152-cfgselector 5-1: config 0 descriptor?? [ 246.679672][ T5863] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 246.872031][ T5863] usb 1-1: device descriptor read/64, error -71 [ 247.070020][ T974] r8152-cfgselector 5-1: Unknown version 0x0000 [ 247.087261][ T974] r8152-cfgselector 5-1: bad CDC descriptors [ 247.097266][ T974] r8152-cfgselector 5-1: USB disconnect, device number 20 [ 247.120428][ T5863] usb usb1-port1: attempt power cycle [ 247.490309][ T5863] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 247.541086][ T5863] usb 1-1: device descriptor read/8, error -71 [ 248.961012][ T30] audit: type=1400 audit(1746178837.928:532): avc: denied { write } for pid=8526 comm="syz.0.669" path="socket:[19473]" dev="sockfs" ino=19473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 250.995774][ T30] audit: type=1400 audit(1746178839.978:533): avc: denied { accept } for pid=8558 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.021407][ T8559] netlink: 'syz.4.677': attribute type 4 has an invalid length. [ 251.029069][ T8559] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.677'. [ 251.070215][ T8564] FAULT_INJECTION: forcing a failure. [ 251.070215][ T8564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.109479][ T8564] CPU: 1 UID: 0 PID: 8564 Comm: syz.2.680 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 251.109505][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 251.109515][ T8564] Call Trace: [ 251.109521][ T8564] [ 251.109527][ T8564] dump_stack_lvl+0x16c/0x1f0 [ 251.109552][ T8564] should_fail_ex+0x512/0x640 [ 251.109578][ T8564] _copy_from_user+0x2e/0xd0 [ 251.109601][ T8564] copy_msghdr_from_user+0x98/0x160 [ 251.109618][ T8564] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 251.109646][ T8564] ___sys_sendmsg+0xfe/0x1d0 [ 251.109663][ T8564] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.109721][ T8564] __sys_sendmsg+0x16d/0x220 [ 251.109738][ T8564] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.109764][ T8564] ? rcu_is_watching+0x12/0xc0 [ 251.109792][ T8564] do_syscall_64+0xcd/0x260 [ 251.109815][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.109832][ T8564] RIP: 0033:0x7f3fb598e969 [ 251.109846][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.109862][ T8564] RSP: 002b:00007f3fb68a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.109878][ T8564] RAX: ffffffffffffffda RBX: 00007f3fb5bb5fa0 RCX: 00007f3fb598e969 [ 251.109889][ T8564] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 251.109899][ T8564] RBP: 00007f3fb68a8090 R08: 0000000000000000 R09: 0000000000000000 [ 251.109908][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.109918][ T8564] R13: 0000000000000000 R14: 00007f3fb5bb5fa0 R15: 00007ffec1b9ba18 [ 251.109940][ T8564] [ 251.123859][ T30] audit: type=1400 audit(1746178840.128:534): avc: denied { wake_alarm } for pid=8558 comm="syz.4.677" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 251.238026][ T8558] ALSA: mixer_oss: invalid OSS volume '' [ 251.372988][ T8575] input: syz1 as /devices/virtual/input/input25 [ 251.577040][ T30] audit: type=1400 audit(1746178840.238:535): avc: denied { ioctl } for pid=8558 comm="syz.4.677" path="socket:[18637]" dev="sockfs" ino=18637 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.601753][ T30] audit: type=1400 audit(1746178840.238:536): avc: denied { read } for pid=8558 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.648837][ T30] audit: type=1400 audit(1746178840.238:537): avc: denied { bind } for pid=8558 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 252.323207][ T5821] Bluetooth: hci3: unexpected event for opcode 0x202d [ 252.330212][ T5901] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 252.355346][ T30] audit: type=1400 audit(1746178841.358:538): avc: denied { getopt } for pid=8586 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.443281][ T30] audit: type=1400 audit(1746178841.448:539): avc: denied { load_policy } for pid=8585 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 252.456978][ T8595] SELinux: failed to load policy [ 252.912115][ T5901] usb 4-1: device descriptor read/64, error -71 [ 253.010574][ T974] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 253.165238][ T974] usb 5-1: config 0 has an invalid interface number: 179 but max is 1 [ 253.173621][ T5901] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 253.245763][ T30] audit: type=1400 audit(1746178842.238:540): avc: denied { bind } for pid=8602 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.342778][ T974] usb 5-1: config 0 has no interface number 1 [ 253.366638][ T974] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 253.405509][ T974] usb 5-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 253.424210][ T974] usb 5-1: Product: syz [ 253.437798][ T974] usb 5-1: Manufacturer: syz [ 253.442763][ T974] usb 5-1: SerialNumber: syz [ 253.463159][ T974] usb 5-1: config 0 descriptor?? [ 253.490205][ T5901] usb 4-1: device descriptor read/64, error -71 [ 253.500580][ T974] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 253.510708][ T974] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 253.523313][ T974] usb-storage 5-1:0.0: USB Mass Storage device detected [ 253.620364][ T5901] usb usb4-port1: attempt power cycle [ 253.686102][ T974] usb-storage 5-1:0.0: device ignored [ 253.715251][ T8588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.727983][ T8588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.763768][ T974] usb-storage 5-1:0.179: USB Mass Storage device detected [ 253.786976][ T974] usb-storage 5-1:0.179: device ignored [ 254.010200][ T5901] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 254.764573][ T5901] usb 4-1: device descriptor read/8, error -71 [ 254.971058][ T974] usb 5-1: USB disconnect, device number 21 [ 255.251001][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.257607][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.492416][ T30] audit: type=1400 audit(1746178845.468:541): avc: denied { create } for pid=8634 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 256.680637][ T5901] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 256.853912][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.039008][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.054887][ T8650] FAULT_INJECTION: forcing a failure. [ 257.054887][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 257.068048][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.1.697 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 257.068072][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 257.068082][ T8650] Call Trace: [ 257.068087][ T8650] [ 257.068094][ T8650] dump_stack_lvl+0x16c/0x1f0 [ 257.068121][ T8650] should_fail_ex+0x512/0x640 [ 257.068141][ T8650] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 257.068161][ T8650] should_failslab+0xc2/0x120 [ 257.068178][ T8650] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 257.068196][ T8650] ? vfs_parse_fs_string+0xc3/0x150 [ 257.068216][ T8650] kmemdup_nul+0x49/0xf0 [ 257.068235][ T8650] vfs_parse_fs_string+0xc3/0x150 [ 257.068250][ T8650] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 257.068273][ T8650] ? shmem_next_opt+0xbc/0x120 [ 257.068295][ T8650] ? __pfx_shmem_next_opt+0x10/0x10 [ 257.068315][ T8650] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 257.068332][ T8650] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 257.068357][ T8650] ? path_mount+0xb20/0x1f20 [ 257.068372][ T8650] ? __pfx_shmem_next_opt+0x10/0x10 [ 257.068396][ T8650] path_mount+0x148d/0x1f20 [ 257.068414][ T8650] ? kmem_cache_free+0x2d4/0x4d0 [ 257.068437][ T8650] ? __pfx_path_mount+0x10/0x10 [ 257.068457][ T8650] ? putname+0x154/0x1a0 [ 257.068479][ T8650] __x64_sys_mount+0x28d/0x310 [ 257.068496][ T8650] ? __pfx___x64_sys_mount+0x10/0x10 [ 257.068512][ T8650] ? rcu_is_watching+0x12/0xc0 [ 257.068538][ T8650] do_syscall_64+0xcd/0x260 [ 257.068561][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.068577][ T8650] RIP: 0033:0x7fd6add8e969 [ 257.068591][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.068606][ T8650] RSP: 002b:00007fd6aec97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 257.068622][ T8650] RAX: ffffffffffffffda RBX: 00007fd6adfb6160 RCX: 00007fd6add8e969 [ 257.068633][ T8650] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 257.068643][ T8650] RBP: 00007fd6aec97090 R08: 0000200000000680 R09: 0000000000000000 [ 257.068652][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.068662][ T8650] R13: 0000000000000000 R14: 00007fd6adfb6160 R15: 00007ffc62794e38 [ 257.068685][ T8650] [ 257.320284][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.332775][ T5901] usb 4-1: Product: syz [ 257.345041][ T5901] usb 4-1: Manufacturer: syz [ 257.370125][ T5901] usb 4-1: SerialNumber: syz [ 258.682051][ T5863] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 258.738864][ T5901] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 258.761028][ T5901] cdc_ncm 4-1:1.0: bind() failure [ 258.769997][ T5901] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 258.779744][ T5901] cdc_ncm 4-1:1.1: bind() failure [ 258.832371][ T5901] usb 4-1: USB disconnect, device number 28 [ 258.850260][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 258.874142][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.890773][ T5863] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 258.919777][ T5863] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.371043][ T5863] usb 5-1: config 1 interface 0 has no altsetting 0 [ 259.380232][ T5863] usb 5-1: string descriptor 0 read error: -22 [ 259.386081][ T8670] syzkaller0: entered promiscuous mode [ 259.386463][ T5863] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.401545][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.410420][ T8670] syzkaller0: entered allmulticast mode [ 259.418123][ T8658] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 259.468253][ T8667] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 259.486533][ T8667] UDF-fs: Scanning with blocksize 512 failed [ 259.495671][ T8667] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 259.520992][ T8667] UDF-fs: Scanning with blocksize 1024 failed [ 259.527421][ T8667] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 259.539426][ T8667] UDF-fs: Scanning with blocksize 2048 failed [ 259.547633][ T8667] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 259.555915][ T8667] UDF-fs: Scanning with blocksize 4096 failed [ 259.662505][ T5901] usb 5-1: USB disconnect, device number 22 [ 259.740880][ T8681] FAULT_INJECTION: forcing a failure. [ 259.740880][ T8681] name failslab, interval 1, probability 0, space 0, times 0 [ 259.775056][ T8681] CPU: 0 UID: 0 PID: 8681 Comm: syz.0.712 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 259.775083][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 259.775092][ T8681] Call Trace: [ 259.775098][ T8681] [ 259.775105][ T8681] dump_stack_lvl+0x16c/0x1f0 [ 259.775131][ T8681] should_fail_ex+0x512/0x640 [ 259.775152][ T8681] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 259.775182][ T8681] should_failslab+0xc2/0x120 [ 259.775200][ T8681] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 259.775227][ T8681] ? __alloc_skb+0x2b2/0x380 [ 259.775256][ T8681] __alloc_skb+0x2b2/0x380 [ 259.775281][ T8681] ? __pfx___alloc_skb+0x10/0x10 [ 259.775304][ T8681] ? find_held_lock+0x2b/0x80 [ 259.775333][ T8681] alloc_skb_with_frags+0xe0/0x860 [ 259.775358][ T8681] sock_alloc_send_pskb+0x7fb/0x990 [ 259.775384][ T8681] ? avc_has_perm+0x11a/0x1c0 [ 259.775400][ T8681] ? __pfx_avc_has_perm+0x10/0x10 [ 259.775419][ T8681] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 259.775442][ T8681] ? avc_has_perm_noaudit+0x149/0x3b0 [ 259.775461][ T8681] ? sock_has_perm+0x259/0x2f0 [ 259.775479][ T8681] ? __pfx_sock_has_perm+0x10/0x10 [ 259.775500][ T8681] hci_sock_sendmsg+0x1c7/0x25e0 [ 259.775530][ T8681] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 259.775560][ T8681] sock_write_iter+0x4fc/0x5b0 [ 259.775588][ T8681] ? __pfx_sock_write_iter+0x10/0x10 [ 259.775617][ T8681] ? bpf_lsm_file_permission+0x9/0x10 [ 259.775639][ T8681] ? security_file_permission+0x71/0x210 [ 259.775663][ T8681] ? rw_verify_area+0xcf/0x680 [ 259.775688][ T8681] vfs_write+0x5ba/0x1180 [ 259.775712][ T8681] ? __pfx_sock_write_iter+0x10/0x10 [ 259.775735][ T8681] ? __pfx_vfs_write+0x10/0x10 [ 259.775757][ T8681] ? find_held_lock+0x2b/0x80 [ 259.775792][ T8681] ksys_write+0x205/0x240 [ 259.775815][ T8681] ? __pfx_ksys_write+0x10/0x10 [ 259.775837][ T8681] ? rcu_is_watching+0x12/0xc0 [ 259.775863][ T8681] do_syscall_64+0xcd/0x260 [ 259.775886][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.775903][ T8681] RIP: 0033:0x7fdc6c58e969 [ 259.775917][ T8681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.775933][ T8681] RSP: 002b:00007fdc6d3aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.775950][ T8681] RAX: ffffffffffffffda RBX: 00007fdc6c7b5fa0 RCX: 00007fdc6c58e969 [ 259.775960][ T8681] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000004 [ 259.775970][ T8681] RBP: 00007fdc6d3aa090 R08: 0000000000000000 R09: 0000000000000000 [ 259.775980][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.775990][ T8681] R13: 0000000000000000 R14: 00007fdc6c7b5fa0 R15: 00007ffd653ed5b8 [ 259.776012][ T8681] [ 260.710601][ T8686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 260.717421][ T8686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.765954][ T8686] vhci_hcd vhci_hcd.0: Device attached [ 260.778898][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 260.804437][ T30] audit: type=1400 audit(1746178849.782:542): avc: denied { create } for pid=8685 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 260.969205][ T8687] vhci_hcd: connection closed [ 260.975679][ T5996] vhci_hcd: stop threads [ 260.980462][ T5861] vhci_hcd: vhci_device speed not set [ 261.011324][ T5996] vhci_hcd: release socket [ 261.028568][ T5996] vhci_hcd: disconnect device [ 261.422263][ T5861] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 261.429842][ T5861] usb 39-1: enqueue for inactive port 0 [ 261.504832][ T30] audit: type=1400 audit(1746178850.512:543): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 261.520428][ T5861] vhci_hcd: vhci_device speed not set [ 261.899633][ T8721] FAULT_INJECTION: forcing a failure. [ 261.899633][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 261.912732][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.2.720 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 261.912754][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 261.912763][ T8721] Call Trace: [ 261.912769][ T8721] [ 261.912776][ T8721] dump_stack_lvl+0x16c/0x1f0 [ 261.912801][ T8721] should_fail_ex+0x512/0x640 [ 261.912820][ T8721] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 261.912850][ T8721] should_failslab+0xc2/0x120 [ 261.912867][ T8721] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 261.912891][ T8721] ? trace_sched_exit_tp+0xde/0x130 [ 261.912914][ T8721] ? getname_flags.part.0+0x4c/0x550 [ 261.912937][ T8721] getname_flags.part.0+0x4c/0x550 [ 261.912959][ T8721] getname_flags+0x93/0xf0 [ 261.912982][ T8721] do_sys_openat2+0xb8/0x1d0 [ 261.913000][ T8721] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.913020][ T8721] ? __pfx___schedule+0x10/0x10 [ 261.913045][ T8721] __x64_sys_openat+0x174/0x210 [ 261.913065][ T8721] ? __pfx___x64_sys_openat+0x10/0x10 [ 261.913082][ T8721] ? ksys_write+0x1b9/0x240 [ 261.913113][ T8721] do_syscall_64+0xcd/0x260 [ 261.913136][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.913153][ T8721] RIP: 0033:0x7f3fb598e969 [ 261.913166][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.913182][ T8721] RSP: 002b:00007f3fb6866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.913198][ T8721] RAX: ffffffffffffffda RBX: 00007f3fb5bb6160 RCX: 00007f3fb598e969 [ 261.913209][ T8721] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 261.913219][ T8721] RBP: 00007f3fb6866090 R08: 0000000000000000 R09: 0000000000000000 [ 261.913228][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.913238][ T8721] R13: 0000000000000000 R14: 00007f3fb5bb6160 R15: 00007ffec1b9ba18 [ 261.913265][ T8721] [ 262.109823][ T8714] Invalid logical block size (4) [ 262.118993][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 262.177259][ T30] audit: type=1400 audit(1746178851.182:544): avc: denied { setattr } for pid=8722 comm="syz.0.723" name="file0" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 262.244319][ T8725] binder: BINDER_SET_CONTEXT_MGR already set [ 262.253547][ T8725] binder: 8724:8725 ioctl 4018620d 200000000040 returned -16 [ 262.272255][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.285421][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.294642][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.302895][ T24] usb 4-1: Product: syz [ 262.307674][ T24] usb 4-1: Manufacturer: syz [ 262.312806][ T24] usb 4-1: SerialNumber: syz [ 262.714287][ T5901] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 263.041028][ T5901] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 263.148747][ T5901] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.554594][ T5901] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 263.564017][ T5901] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 263.580152][ T5901] usb 2-1: Manufacturer: syz [ 263.630957][ T5901] usb 2-1: SerialNumber: syz [ 263.836770][ T24] cdc_ncm 4-1:1.0: bind() failure [ 263.851936][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 263.862050][ T24] cdc_ncm 4-1:1.1: bind() failure [ 263.895294][ T24] usb 4-1: USB disconnect, device number 29 [ 264.360177][ T30] audit: type=1400 audit(1746178853.352:545): avc: denied { lock } for pid=8726 comm="syz.1.725" path="socket:[19838]" dev="sockfs" ino=19838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 264.403462][ T5901] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 264.412038][ T5901] usb 2-1: USB disconnect, device number 32 [ 264.666541][ T8766] binder: BINDER_SET_CONTEXT_MGR already set [ 264.674400][ T8766] binder: 8758:8766 ioctl 4018620d 200000000040 returned -16 [ 265.363487][ T8780] ipt_ECN: cannot use operation on non-tcp rule [ 265.774128][ T8780] tun0: tun_chr_ioctl cmd 1074025678 [ 265.779480][ T8780] tun0: group set to 0 [ 266.910703][ T24] libceph: connect (1)[c::]:6789 error -101 [ 266.927262][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 267.500383][ T24] libceph: connect (1)[c::]:6789 error -101 [ 267.506478][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 267.824397][ T8800] ceph: No mds server is up or the cluster is laggy [ 268.447477][ T8840] vxcan1: entered allmulticast mode [ 268.496224][ T30] audit: type=1326 audit(1746178857.498:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 268.562046][ T30] audit: type=1326 audit(1746178857.528:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 268.668595][ T30] audit: type=1326 audit(1746178857.528:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 268.691825][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.698243][ T30] audit: type=1326 audit(1746178857.528:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 268.724678][ T30] audit: type=1326 audit(1746178857.528:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 268.773173][ T8848] FAULT_INJECTION: forcing a failure. [ 268.773173][ T8848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.786243][ T30] audit: type=1326 audit(1746178857.528:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 268.786284][ T30] audit: type=1326 audit(1746178857.528:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 268.786323][ T30] audit: type=1326 audit(1746178857.528:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 268.809370][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.855801][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.868131][ T8848] CPU: 1 UID: 0 PID: 8848 Comm: syz.1.757 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 268.868156][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 268.868165][ T8848] Call Trace: [ 268.868171][ T8848] [ 268.868178][ T8848] dump_stack_lvl+0x16c/0x1f0 [ 268.868203][ T8848] should_fail_ex+0x512/0x640 [ 268.868227][ T8848] _copy_from_iter+0x2a4/0x15b0 [ 268.868252][ T8848] ? __build_skb_around+0x278/0x3b0 [ 268.868276][ T8848] ? __pfx__copy_from_iter+0x10/0x10 [ 268.868298][ T8848] ? __pfx___alloc_skb+0x10/0x10 [ 268.868321][ T8848] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 268.868355][ T8848] pfkey_sendmsg+0x1da/0x850 [ 268.868384][ T8848] ____sys_sendmsg+0xa95/0xc70 [ 268.868406][ T8848] ? copy_msghdr_from_user+0x10a/0x160 [ 268.868422][ T8848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.868460][ T8848] ___sys_sendmsg+0x134/0x1d0 [ 268.868478][ T8848] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.868523][ T8848] __sys_sendmsg+0x16d/0x220 [ 268.868538][ T8848] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.868559][ T8848] ? rcu_is_watching+0x12/0xc0 [ 268.868583][ T8848] do_syscall_64+0xcd/0x260 [ 268.868604][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.868620][ T8848] RIP: 0033:0x7fd6add8e969 [ 268.868633][ T8848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.868649][ T8848] RSP: 002b:00007fd6aecd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.868665][ T8848] RAX: ffffffffffffffda RBX: 00007fd6adfb5fa0 RCX: 00007fd6add8e969 [ 268.868679][ T8848] RDX: 000000000005c010 RSI: 0000200000000100 RDI: 0000000000000003 [ 268.868689][ T8848] RBP: 00007fd6aecd9090 R08: 0000000000000000 R09: 0000000000000000 [ 268.868700][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.868710][ T8848] R13: 0000000000000000 R14: 00007fd6adfb5fa0 R15: 00007ffc62794e38 [ 268.868732][ T8848] [ 269.074180][ T30] audit: type=1326 audit(1746178857.528:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 269.097825][ T30] audit: type=1326 audit(1746178857.528:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6add8e969 code=0x7ffc0000 [ 269.429128][ T8856] overlayfs: workdir and upperdir must be separate subtrees [ 269.838018][ T8858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.763045][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.775788][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.786007][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.796684][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.808872][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.819464][ T5892] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 270.827947][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.838126][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.849330][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.960301][ T5901] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 270.970151][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 270.994113][ T5892] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 271.010194][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.018631][ T5892] usb 3-1: Product: syz [ 271.030657][ T5892] usb 3-1: Manufacturer: syz [ 271.035608][ T5892] usb 3-1: SerialNumber: syz [ 271.083135][ T5892] r8152-cfgselector 3-1: Unknown version 0x0000 [ 271.111814][ T5892] r8152-cfgselector 3-1: config 0 descriptor?? [ 271.130178][ T5901] usb 5-1: device descriptor read/64, error -71 [ 271.335774][ T5892] r8152-cfgselector 3-1: Unknown version 0x0000 [ 271.343599][ T5892] r8152-cfgselector 3-1: bad CDC descriptors [ 271.430215][ T5901] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 271.557401][ T5892] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 271.626581][ T5901] usb 5-1: device descriptor read/64, error -71 [ 271.683207][ T8890] kAFS: unparsable volume name [ 271.740771][ T5901] usb usb5-port1: attempt power cycle [ 271.954939][ T8895] FAULT_INJECTION: forcing a failure. [ 271.954939][ T8895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.977342][ T8895] CPU: 1 UID: 0 PID: 8895 Comm: syz.1.772 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 271.977367][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 271.977376][ T8895] Call Trace: [ 271.977383][ T8895] [ 271.977389][ T8895] dump_stack_lvl+0x16c/0x1f0 [ 271.977414][ T8895] should_fail_ex+0x512/0x640 [ 271.977440][ T8895] _copy_from_user+0x2e/0xd0 [ 271.977464][ T8895] kstrtouint_from_user+0xd6/0x1d0 [ 271.977481][ T8895] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 271.977497][ T8895] ? __lock_acquire+0xaa4/0x1ba0 [ 271.977531][ T8895] proc_fail_nth_write+0x83/0x250 [ 271.977554][ T8895] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 271.977586][ T8895] vfs_write+0x25c/0x1180 [ 271.977608][ T8895] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 271.977635][ T8895] ? __pfx___mutex_lock+0x10/0x10 [ 271.977656][ T8895] ? __pfx_vfs_write+0x10/0x10 [ 271.977686][ T8895] ? __fget_files+0x20e/0x3c0 [ 271.977718][ T8895] ksys_write+0x12a/0x240 [ 271.977742][ T8895] ? __pfx_ksys_write+0x10/0x10 [ 271.977773][ T8895] do_syscall_64+0xcd/0x260 [ 271.977797][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.977814][ T8895] RIP: 0033:0x7fd6add8d41f [ 271.977827][ T8895] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 271.977844][ T8895] RSP: 002b:00007fd6aecd9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 271.977860][ T8895] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6add8d41f [ 271.977871][ T8895] RDX: 0000000000000001 RSI: 00007fd6aecd90a0 RDI: 0000000000000004 [ 271.977880][ T8895] RBP: 00007fd6aecd9090 R08: 0000000000000000 R09: 0000000000000000 [ 271.977889][ T8895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 271.977898][ T8895] R13: 0000000000000000 R14: 00007fd6adfb5fa0 R15: 00007ffc62794e38 [ 271.977921][ T8895] [ 272.090153][ T5901] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 273.443151][ T5901] usb 5-1: device descriptor read/8, error -71 [ 273.678248][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 273.678262][ T30] audit: type=1400 audit(1746178862.678:560): avc: denied { connect } for pid=8914 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 273.700219][ T5901] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 273.777005][ T5901] usb 5-1: device descriptor read/8, error -71 [ 273.926647][ T5901] usb usb5-port1: unable to enumerate USB device [ 274.390490][ T5861] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 274.522202][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 274.573201][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 274.594303][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 274.609736][ T5861] usb 2-1: New USB device found, idVendor=10c4, idProduct=81b9, bcdDevice= 0.00 [ 274.621654][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.633256][ T5861] usb 2-1: config 0 descriptor?? [ 274.683495][ T30] audit: type=1400 audit(1746178863.678:561): avc: denied { create } for pid=8933 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 274.683542][ T30] audit: type=1400 audit(1746178863.678:562): avc: denied { connect } for pid=8933 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 274.875777][ T8937] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 274.913837][ T30] audit: type=1400 audit(1746178863.878:563): avc: granted { setsecparam } for pid=8931 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 274.947464][ T5861] hid-generic 0003:10C4:81B9.0007: item fetching failed at offset 0/3 [ 274.964808][ T5861] hid-generic 0003:10C4:81B9.0007: probe with driver hid-generic failed with error -22 [ 275.218386][ T974] usb 2-1: USB disconnect, device number 33 [ 276.466632][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 276.591133][ T5892] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 276.797607][ T5892] usb 3-1: config 0 has no interfaces? [ 276.808488][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 276.819826][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.920415][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 276.930320][ T5892] usb 3-1: Product: syz [ 276.934745][ T5892] usb 3-1: Manufacturer: syz [ 276.939632][ T5892] usb 3-1: SerialNumber: syz [ 277.008443][ T5892] usb 3-1: config 0 descriptor?? [ 278.954363][ T974] usb 3-1: USB disconnect, device number 26 [ 280.517201][ T9022] veth1_vlan: mtu greater than device maximum [ 280.523470][ T30] audit: type=1400 audit(1746178869.518:564): avc: denied { ioctl } for pid=9021 comm="syz.1.807" path="socket:[20821]" dev="sockfs" ino=20821 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 280.563307][ T30] audit: type=1400 audit(1746178869.568:565): avc: denied { connect } for pid=9019 comm="syz.4.806" lport=39601 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 280.617322][ T9026] veth1_vlan: mtu greater than device maximum [ 280.617628][ T30] audit: type=1400 audit(1746178869.568:566): avc: denied { name_connect } for pid=9019 comm="syz.4.806" dest=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 280.697900][ T9016] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 280.911234][ T30] audit: type=1400 audit(1746178869.698:567): avc: granted { setsecparam } for pid=9009 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 280.975809][ T30] audit: type=1400 audit(1746178869.938:568): avc: denied { write } for pid=9032 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 283.500224][ T974] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 283.758124][ T58] IPVS: starting estimator thread 0... [ 283.796206][ T9073] xt_nat: multiple ranges no longer supported [ 283.940350][ T9075] IPVS: using max 35 ests per chain, 84000 per kthread [ 284.086430][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 284.093535][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.104628][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.114419][ T974] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.123490][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.344518][ T974] usb 1-1: config 0 descriptor?? [ 284.375807][ T974] hub 1-1:0.0: USB hub found [ 284.650620][ T974] hub 1-1:0.0: 1 port detected [ 284.812764][ T9084] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 284.835219][ T9098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.829'. [ 284.850595][ T9084] block nbd1: NBD_DISCONNECT [ 285.138790][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.211152][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.300437][ T30] audit: type=1400 audit(1746178874.298:569): avc: granted { setsecparam } for pid=9095 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 285.327900][ T9105] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 286.914551][ T5898] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 287.080903][ T5863] hub 1-1:0.0: activate --> -90 [ 287.110270][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 287.154069][ T5863] usb 1-1: USB disconnect, device number 33 [ 287.186953][ T5898] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 287.290698][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.417716][ T5898] usb 5-1: Product: syz [ 287.436902][ T5898] usb 5-1: Manufacturer: syz [ 287.447880][ T5898] usb 5-1: SerialNumber: syz [ 287.481207][ T5898] r8152-cfgselector 5-1: Unknown version 0x0000 [ 287.525897][ T5898] r8152-cfgselector 5-1: config 0 descriptor?? [ 287.833709][ T5898] r8152-cfgselector 5-1: Unknown version 0x0000 [ 287.850466][ T5898] r8152-cfgselector 5-1: bad CDC descriptors [ 288.015515][ T9134] overlayfs: workdir and upperdir must be separate subtrees [ 288.392255][ T5901] r8152-cfgselector 5-1: USB disconnect, device number 27 [ 288.468744][ T5863] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 288.512439][ T30] audit: type=1400 audit(1746178877.518:570): avc: denied { write } for pid=9137 comm="syz.3.839" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 288.637141][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 288.658795][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 288.833761][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.019037][ T5863] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 289.036762][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.070901][ T5863] usb 1-1: config 0 descriptor?? [ 289.413869][ T5861] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 289.647018][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.708456][ T5861] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 290.102013][ T5861] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 290.111404][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.119391][ T5861] usb 2-1: Product: syz [ 290.124228][ T5861] usb 2-1: Manufacturer: syz [ 290.128822][ T5861] usb 2-1: SerialNumber: syz [ 290.140765][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.149495][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.172937][ T5863] ryos 0003:1E7D:3138.0008: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 290.423225][ T30] audit: type=1400 audit(1746178879.418:571): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 290.493883][ T9159] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 290.680809][ T30] audit: type=1400 audit(1746178879.498:572): avc: granted { setsecparam } for pid=9152 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 291.345650][ T5863] usb 1-1: USB disconnect, device number 34 [ 292.083766][ T5861] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 292.144871][ T5901] usb 2-1: USB disconnect, device number 34 [ 292.336042][ T9191] lo speed is unknown, defaulting to 1000 [ 292.341886][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 292.348285][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.359220][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.368110][ T9191] lo speed is unknown, defaulting to 1000 [ 292.379721][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.403076][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.416531][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.428223][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.763890][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.789851][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.829624][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.867013][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.889654][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.907699][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.922362][ T5861] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 292.932081][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.957124][ T5861] usb 4-1: config 0 descriptor?? [ 293.320937][ T9201] lo speed is unknown, defaulting to 1000 [ 293.343109][ T9201] lo speed is unknown, defaulting to 1000 [ 293.380743][ T5861] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 293.387897][ T5861] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 293.529732][ T5861] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 293.580171][ T5861] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 293.598513][ T30] audit: type=1400 audit(1746178882.598:573): avc: denied { ioctl } for pid=9187 comm="syz.3.854" path="socket:[21324]" dev="sockfs" ino=21324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.647753][ T9211] dns_resolver: Unsupported content type (152) [ 293.670725][ T9212] tmpfs: Bad value for 'mpol' [ 293.684593][ T5861] konepure 0003:1E7D:2DB4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 293.856221][ T9189] team0 (unregistering): Port device team_slave_0 removed [ 293.866206][ T9189] team0 (unregistering): Port device team_slave_1 removed [ 294.862887][ T30] audit: type=1400 audit(1746178883.858:574): avc: denied { setattr } for pid=9220 comm="syz.4.863" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.014283][ T5901] usb 4-1: USB disconnect, device number 30 [ 297.130137][ T5898] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 297.200276][ T5901] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 297.310406][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 297.320727][ T5898] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 297.328940][ T5898] usb 5-1: config 0 has no interface number 0 [ 297.338969][ T5898] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.355865][ T5898] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 297.368897][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.385361][ T5901] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 297.790112][ T5898] usb 5-1: Product: syz [ 297.790145][ T5898] usb 5-1: Manufacturer: syz [ 297.790159][ T5898] usb 5-1: SerialNumber: syz [ 297.791276][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.793389][ T5898] usb 5-1: config 0 descriptor?? [ 297.824848][ T5898] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 297.890638][ T9264] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 298.293386][ T5901] usb 4-1: config 0 descriptor?? [ 298.302546][ T9241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.340520][ T9241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.366494][ T24] usb 5-1: USB disconnect, device number 28 [ 298.368112][ T6790] usb 5-1: Failed to submit usb control message: -71 [ 298.406743][ T6790] usb 5-1: unable to send the bmi data to the device: -71 [ 298.427082][ T9277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.880'. [ 298.450383][ T6790] usb 5-1: unable to get target info from device [ 298.463691][ T6790] usb 5-1: could not get target info (-71) [ 298.469696][ T6790] usb 5-1: could not probe fw (-71) [ 298.736254][ T9283] overlayfs: workdir and upperdir must be separate subtrees [ 299.267002][ T9249] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 299.288560][ T5901] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 299.299121][ T5901] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 299.553586][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.562332][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.743141][ T5901] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 299.749865][ T5901] [drm] Initialized udl on minor 2 [ 299.932659][ T5901] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 300.034459][ T5901] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 300.148578][ T5863] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 300.185718][ T5901] usb 4-1: USB disconnect, device number 31 [ 300.238264][ T5863] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 301.531265][ T5863] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 301.603709][ T9325] overlayfs: workdir and upperdir must be separate subtrees [ 301.740194][ T974] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 301.790304][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 301.819000][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.845187][ T5863] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.875130][ T5863] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.905932][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.912715][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 301.922666][ T974] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 301.932080][ T974] usb 1-1: config 0 has no interface number 0 [ 301.938409][ T5863] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 301.948688][ T974] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.961453][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.969642][ T5863] usb 3-1: Product: syz [ 301.975573][ T5863] usb 3-1: Manufacturer: syz [ 301.981921][ T5863] usb 3-1: SerialNumber: syz [ 301.987521][ T974] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 301.997782][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.007619][ T5863] usb 3-1: config 0 descriptor?? [ 302.026217][ T5863] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 302.040342][ T974] usb 1-1: Product: syz [ 302.045438][ T974] usb 1-1: Manufacturer: syz [ 302.051697][ T974] usb 1-1: SerialNumber: syz [ 302.061567][ T974] usb 1-1: config 0 descriptor?? [ 302.111246][ T974] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 302.343853][ T5863] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 302.354238][ T5863] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 302.360342][ T5861] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 302.365096][ T5863] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 302.401464][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.417652][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.449920][ T24] usb 1-1: USB disconnect, device number 35 [ 302.455804][ T6802] usb 1-1: Failed to submit usb control message: -71 [ 302.455848][ T6802] usb 1-1: unable to send the bmi data to the device: -71 [ 302.455863][ T6802] usb 1-1: unable to get target info from device [ 302.455877][ T6802] usb 1-1: could not get target info (-71) [ 302.455898][ T6802] usb 1-1: could not probe fw (-71) [ 302.623808][ T5861] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 302.642437][ T974] usb 3-1: USB disconnect, device number 27 [ 302.748999][ T5861] usb 5-1: config 0 has no interface number 0 [ 302.757209][ T5861] usb 5-1: config 0 interface 29 has no altsetting 0 [ 302.777638][ T5861] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 302.787396][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.795541][ T5861] usb 5-1: Product: syz [ 302.799769][ T5861] usb 5-1: Manufacturer: syz [ 302.804409][ T5861] usb 5-1: SerialNumber: syz [ 302.811502][ T5861] usb 5-1: config 0 descriptor?? [ 303.022538][ T5861] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 304.010513][ T9351] hfsplus: unable to find HFS+ superblock [ 304.062895][ T5861] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 304.069786][ T5861] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 304.412306][ T5861] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 304.484103][ T9328] SELinux: failed to load policy [ 304.533030][ T5861] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 304.557367][ T5861] usb 5-1: USB disconnect, device number 29 [ 305.833388][ T9384] overlayfs: workdir and upperdir must be separate subtrees [ 306.533518][ T9394] hfsplus: unable to find HFS+ superblock [ 307.856381][ T5892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 308.458309][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.517295][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.807241][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.372862][ T5892] usb 3-1: Product: syz [ 309.377092][ T5892] usb 3-1: Manufacturer: syz [ 309.416423][ T5892] usb 3-1: SerialNumber: syz [ 309.537529][ T30] audit: type=1400 audit(1746178898.538:575): avc: denied { append } for pid=9411 comm="syz.3.921" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.740154][ T974] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 309.916235][ T30] audit: type=1400 audit(1746178898.748:576): avc: denied { create } for pid=9428 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 309.954166][ T30] audit: type=1400 audit(1746178898.748:577): avc: denied { ioctl } for pid=9428 comm="syz.1.927" path="socket:[22664]" dev="sockfs" ino=22664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 310.103734][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 310.121408][ T30] audit: type=1400 audit(1746178898.748:578): avc: denied { write } for pid=9428 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 310.144271][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.165875][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.182741][ T974] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.204432][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.230136][ T974] usb 5-1: config 0 descriptor?? [ 310.265179][ T974] hub 5-1:0.0: USB hub found [ 310.553379][ T974] hub 5-1:0.0: 1 port detected [ 310.608967][ T5892] cdc_ncm 3-1:1.0: bind() failure [ 310.638304][ T5892] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 310.645173][ T5892] cdc_ncm 3-1:1.1: bind() failure [ 310.659667][ T5892] usb 3-1: USB disconnect, device number 28 [ 311.067235][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.090427][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.260145][ T974] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 313.180158][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 313.444835][ T9455] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 313.602013][ T9455] nbd: device at index 2 is going down [ 313.861729][ T9467] 9pnet_fd: Insufficient options for proto=fd [ 314.017694][ T5901] usb 5-1: USB disconnect, device number 30 [ 314.085393][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.518113][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.549210][ T9474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.939'. [ 314.566362][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 314.589317][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.606726][ T24] usb 4-1: Product: syz [ 314.613937][ T24] usb 4-1: Manufacturer: syz [ 314.619008][ T24] usb 4-1: SerialNumber: syz [ 315.040166][ T24] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 315.239220][ T9485] lo speed is unknown, defaulting to 1000 [ 315.255805][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.276351][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 315.289679][ T9485] lo speed is unknown, defaulting to 1000 [ 315.308688][ T24] usb 2-1: can't read configurations, error -71 [ 315.332772][ T9485] lo speed is unknown, defaulting to 1000 [ 315.366682][ T9485] infiniband <òz2: RDMA CMA: cma_listen_on_dev, error -98 [ 315.492554][ T9485] lo speed is unknown, defaulting to 1000 [ 315.571485][ T9485] lo speed is unknown, defaulting to 1000 [ 315.578636][ T9485] lo speed is unknown, defaulting to 1000 [ 315.610386][ T9485] lo speed is unknown, defaulting to 1000 [ 315.635855][ T9485] lo speed is unknown, defaulting to 1000 [ 315.716269][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 315.728188][ T9485] ubi31: attaching mtd0 [ 315.736551][ T9485] ubi31: scanning is finished [ 315.742345][ T9485] ubi31: empty MTD device detected [ 316.220138][ T9485] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 316.227725][ T9485] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 316.244740][ T9485] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 316.353014][ T24] usb 4-1: USB disconnect, device number 32 [ 316.375141][ T9485] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 316.393957][ T9485] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 316.401338][ T9485] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 316.409956][ T9485] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1596124481 [ 316.420440][ T9485] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 316.431699][ T9496] ubi31: background thread "ubi_bgt31d" started, PID 9496 [ 316.535383][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 316.686823][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.695757][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.996681][ T9506] overlayfs: failed to resolve './file1': -2 [ 317.576720][ T5901] IPVS: starting estimator thread 0... [ 317.709071][ T9512] IPVS: using max 40 ests per chain, 96000 per kthread [ 317.860258][ T5901] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 318.810201][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 318.824926][ T5901] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 318.843755][ T9529] hfsplus: unable to find HFS+ superblock [ 318.847763][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.863476][ T5901] usb 3-1: Product: syz [ 318.867825][ T5901] usb 3-1: Manufacturer: syz [ 318.874033][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 318.874616][ T5901] usb 3-1: SerialNumber: syz [ 318.891060][ T5901] usb 3-1: config 0 descriptor?? [ 318.903293][ T5901] gspca_main: se401-2.14.0 probing 047d:5003 [ 318.917431][ T9532] FAULT_INJECTION: forcing a failure. [ 318.917431][ T9532] name failslab, interval 1, probability 0, space 0, times 0 [ 318.931914][ T9532] CPU: 1 UID: 0 PID: 9532 Comm: syz.3.956 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 318.931936][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 318.931946][ T9532] Call Trace: [ 318.931952][ T9532] [ 318.931958][ T9532] dump_stack_lvl+0x16c/0x1f0 [ 318.931982][ T9532] should_fail_ex+0x512/0x640 [ 318.931998][ T9532] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 318.932016][ T9532] should_failslab+0xc2/0x120 [ 318.932027][ T9532] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 318.932043][ T9532] ? d_instantiate+0x77/0x90 [ 318.932057][ T9532] ? alloc_empty_file+0x55/0x1e0 [ 318.932079][ T9532] alloc_empty_file+0x55/0x1e0 [ 318.932097][ T9532] alloc_file_pseudo+0x13a/0x230 [ 318.932115][ T9532] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 318.932133][ T9532] ? alloc_fd+0x471/0x7d0 [ 318.932151][ T9532] sock_alloc_file+0x50/0x210 [ 318.932163][ T9532] __sys_socket+0x1c0/0x260 [ 318.932176][ T9532] ? fput+0x70/0xf0 [ 318.932186][ T9532] ? __pfx___sys_socket+0x10/0x10 [ 318.932201][ T9532] ? ksys_write+0x1b9/0x240 [ 318.932223][ T9532] ? __pfx_ksys_write+0x10/0x10 [ 318.932248][ T9532] __x64_sys_socket+0x72/0xb0 [ 318.932266][ T9532] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.932282][ T9532] do_syscall_64+0xcd/0x260 [ 318.932296][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.932307][ T9532] RIP: 0033:0x7fe43d78e969 [ 318.932315][ T9532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.932325][ T9532] RSP: 002b:00007fe43e638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 318.932335][ T9532] RAX: ffffffffffffffda RBX: 00007fe43d9b5fa0 RCX: 00007fe43d78e969 [ 318.932344][ T9532] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 318.932354][ T9532] RBP: 00007fe43e638090 R08: 0000000000000000 R09: 0000000000000000 [ 318.932363][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.932372][ T9532] R13: 0000000000000000 R14: 00007fe43d9b5fa0 R15: 00007ffd36140b38 [ 318.932393][ T9532] [ 319.157099][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.165912][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.176980][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.185780][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.298740][ T974] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 319.310160][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 319.318267][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 319.327929][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.335959][ T24] usb 1-1: Product: syz [ 319.340201][ T24] usb 1-1: Manufacturer: syz [ 319.344912][ T24] usb 1-1: SerialNumber: syz [ 319.828640][ T5901] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 319.846333][ T5901] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 319.857745][ T5901] usb 3-1: USB disconnect, device number 29 [ 319.872517][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 319.882834][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 319.926121][ T974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.938501][ T9539] erofs (device nullb0): cannot find valid erofs superblock [ 319.948503][ T974] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 319.957151][ T974] usb 2-1: can't read configurations, error -71 [ 320.138769][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 320.147857][ T24] r8152-cfgselector 1-1: bad CDC descriptors [ 320.162349][ T9544] overlayfs: failed to resolve './file1': -2 [ 320.392142][ T5901] r8152-cfgselector 1-1: USB disconnect, device number 36 [ 320.795628][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 322.908605][ T9571] hfsplus: unable to find HFS+ superblock [ 324.564249][ T5901] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 325.145170][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 325.170943][ T5901] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 325.196554][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 325.255857][ T5901] usb 5-1: config 0 has no interface number 0 [ 325.296269][ T5901] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.380145][ T5901] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 325.490626][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.499084][ T5901] usb 5-1: Product: syz [ 325.503589][ T5901] usb 5-1: Manufacturer: syz [ 325.508413][ T5901] usb 5-1: SerialNumber: syz [ 325.520600][ T5901] usb 5-1: config 0 descriptor?? [ 325.540275][ T58] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 325.553221][ T5901] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 325.736909][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.745793][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.757220][ T3468] usb 5-1: Failed to submit usb control message: -71 [ 325.757521][ T5901] usb 5-1: USB disconnect, device number 31 [ 325.764104][ T3468] usb 5-1: unable to send the bmi data to the device: -71 [ 325.764132][ T3468] usb 5-1: unable to get target info from device [ 325.764146][ T3468] usb 5-1: could not get target info (-71) [ 325.764168][ T3468] usb 5-1: could not probe fw (-71) [ 325.770344][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 325.817388][ T58] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 325.827032][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.839051][ T58] usb 2-1: Product: syz [ 325.843273][ T58] usb 2-1: Manufacturer: syz [ 325.848084][ T58] usb 2-1: SerialNumber: syz [ 326.006429][ T58] usb 2-1: config 0 descriptor?? [ 326.085580][ T58] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 326.109410][ T58] usb 2-1: setting power ON [ 326.136301][ T58] dvb-usb: bulk message failed: -22 (2/0) [ 326.207057][ T58] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.217197][ T58] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 326.227534][ T58] usb 2-1: media controller created [ 326.249747][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.297305][ T9591] dvb-usb: bulk message failed: -22 (3/0) [ 326.303333][ T9591] usb 2-1: gpio_write failed. [ 326.308197][ T9591] cxusb: i2c wr: len=80 is too big! [ 326.308197][ T9591] [ 326.353542][ T58] usb 2-1: selecting invalid altsetting 6 [ 326.369737][ T58] usb 2-1: digital interface selection failed (-22) [ 326.389365][ T58] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 326.510130][ T58] usb 2-1: setting power OFF [ 326.518028][ T58] dvb-usb: bulk message failed: -22 (2/0) [ 326.525185][ T58] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 326.536940][ T58] (NULL device *): no alternate interface [ 327.398266][ T9594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.446796][ T58] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 327.484056][ T9629] hfsplus: unable to find HFS+ superblock [ 328.771224][ T58] usb 2-1: USB disconnect, device number 39 [ 329.830221][ T5898] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 329.970152][ T5863] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 329.989376][ T9674] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 330.112091][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 330.150144][ T5898] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 330.165932][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 330.239361][ T9674] nbd: device at index 4 is going down [ 330.243372][ T5898] usb 3-1: config 0 has no interface number 0 [ 330.245162][ T58] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 330.259035][ T5898] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.267441][ T9674] 9pnet_fd: Insufficient options for proto=fd [ 330.271315][ T5863] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 330.316192][ T5863] usb 1-1: config 0 has no interface number 0 [ 330.324411][ T5863] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.382629][ T5898] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 330.400575][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.410494][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 330.410737][ T5898] usb 3-1: Product: syz [ 330.420097][ T5863] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 330.423944][ T58] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 330.441295][ T5898] usb 3-1: Manufacturer: syz [ 330.446333][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.464973][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.483915][ T5898] usb 3-1: SerialNumber: syz [ 330.489887][ T5863] usb 1-1: Product: syz [ 330.500783][ T58] usb 4-1: Product: syz [ 330.511930][ T5898] usb 3-1: config 0 descriptor?? [ 330.515514][ T58] usb 4-1: Manufacturer: syz [ 330.518974][ T5863] usb 1-1: Manufacturer: syz [ 330.532547][ T58] usb 4-1: SerialNumber: syz [ 330.536221][ T5863] usb 1-1: SerialNumber: syz [ 330.558696][ T9679] mkiss: ax0: crc mode is auto. [ 330.566543][ T58] r8152-cfgselector 4-1: Unknown version 0x0000 [ 330.573009][ T58] r8152-cfgselector 4-1: config 0 descriptor?? [ 330.592216][ T5898] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 330.606245][ T5863] usb 1-1: config 0 descriptor?? [ 330.626587][ T5863] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 330.765710][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.780736][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.794724][ T24] usb 3-1: USB disconnect, device number 30 [ 330.800126][ T6805] usb 3-1: Failed to submit usb control message: -71 [ 330.814260][ T6805] usb 3-1: unable to send the bmi data to the device: -71 [ 330.828901][ T58] r8152-cfgselector 4-1: Unknown version 0x0000 [ 330.846782][ T6805] usb 3-1: unable to get target info from device [ 330.851500][ T58] r8152-cfgselector 4-1: bad CDC descriptors [ 330.867943][ T6805] usb 3-1: could not get target info (-71) [ 331.026553][ T6805] usb 3-1: could not probe fw (-71) [ 331.096997][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.357587][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.395488][ T5863] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 331.638917][ T5901] usb 1-1: USB disconnect, device number 37 [ 331.714077][ T6808] usb 1-1: Failed to submit usb control message: -71 [ 331.799570][ T6808] usb 1-1: unable to send the bmi data to the device: -71 [ 331.925553][ T6808] usb 1-1: unable to get target info from device [ 332.008416][ T6808] usb 1-1: could not get target info (-71) [ 332.031759][ T6808] usb 1-1: could not probe fw (-71) [ 332.078166][ T9698] hfsplus: unable to find HFS+ superblock [ 353.738346][ T5901] sched: DL replenish lagged too much [ 520.549922][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 520.556903][ C0] rcu: 1-...!: (2 ticks this GP) idle=7c14/1/0x4000000000000000 softirq=38498/38498 fqs=0 [ 520.567577][ C0] rcu: (detected by 0, t=10502 jiffies, g=28497, q=288 ncpus=2) [ 520.575289][ C0] Sending NMI from CPU 0 to CPUs 1: [ 520.575313][ C1] NMI backtrace for cpu 1 [ 520.575325][ C1] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:6 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 520.575342][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 520.575352][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 520.575372][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 520.575387][ C1] Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 520.575399][ C1] RSP: 0018:ffffc90000a08d60 EFLAGS: 00000046 [ 520.575408][ C1] RAX: 0000000000010201 RBX: ffff8880798da000 RCX: ffffffff89814767 [ 520.575417][ C1] RDX: ffff88802be7a440 RSI: ffffffff894743e2 RDI: ffff8880798da000 [ 520.575425][ C1] RBP: ffff8880341db000 R08: 0000000000000001 R09: 0000000000000000 [ 520.575432][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000068203a2400 [ 520.575440][ C1] R13: 00000068203a2400 R14: 0000000000000002 R15: ffff88807ab17c10 [ 520.575448][ C1] FS: 0000000000000000(0000) GS:ffff888124ae2000(0000) knlGS:0000000000000000 [ 520.575460][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.575469][ C1] CR2: 0000200000021000 CR3: 000000005f49e000 CR4: 00000000003526f0 [ 520.575477][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.575484][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.575491][ C1] Call Trace: [ 520.575496][ C1] [ 520.575500][ C1] __netif_schedule+0x12/0x2f0 [ 520.575516][ C1] advance_sched+0x6c1/0xc80 [ 520.575536][ C1] ? __pfx_advance_sched+0x10/0x10 [ 520.575551][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 520.575566][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 520.575578][ C1] ? read_tsc+0x9/0x20 [ 520.575597][ C1] hrtimer_interrupt+0x397/0x8e0 [ 520.575614][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 520.575630][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 520.575645][ C1] [ 520.575649][ C1] [ 520.575653][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.575667][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 520.575685][ C1] Code: ce 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 42 ea ec 0e 0f 82 74 02 00 00 8b 35 da 19 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 19 ce 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 520.575696][ C1] RSP: 0018:ffffc900031df7b0 EFLAGS: 00000206 [ 520.575705][ C1] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 00000000814f980d [ 520.575712][ C1] RDX: 0000000000000000 RSI: ffffffff8dbbb25f RDI: ffffffff8bf47e20 [ 520.575720][ C1] RBP: 0000000000000002 R08: 78f98cfff0409c3e R09: 0000000000000000 [ 520.575727][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 520.575734][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.575748][ C1] ? unwind_next_frame+0x3fe/0x20a0 [ 520.575763][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 520.575779][ C1] unwind_next_frame+0xd1/0x20a0 [ 520.575792][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 520.575805][ C1] ? stack_trace_save+0x8e/0xc0 [ 520.575819][ C1] ? __unwind_start+0x45f/0x7f0 [ 520.575833][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 520.575848][ C1] arch_stack_walk+0x94/0x100 [ 520.575865][ C1] ? stack_trace_save+0x8e/0xc0 [ 520.575881][ C1] stack_trace_save+0x8e/0xc0 [ 520.575895][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 520.575911][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 520.575928][ C1] ref_tracker_free+0x10e/0x830 [ 520.575945][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 520.575964][ C1] ? mark_held_locks+0x49/0x80 [ 520.575980][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 520.575997][ C1] neigh_destroy+0x339/0x630 [ 520.576018][ C1] neigh_periodic_work+0x744/0xcd0 [ 520.576034][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 520.576050][ C1] ? rcu_is_watching+0x12/0xc0 [ 520.576066][ C1] process_one_work+0x9cc/0x1b70 [ 520.576082][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 520.576096][ C1] ? __pfx_process_one_work+0x10/0x10 [ 520.576112][ C1] ? assign_work+0x1a0/0x250 [ 520.576124][ C1] worker_thread+0x6c8/0xf10 [ 520.576139][ C1] ? __kthread_parkme+0x19e/0x250 [ 520.576156][ C1] ? __pfx_worker_thread+0x10/0x10 [ 520.576168][ C1] kthread+0x3c2/0x780 [ 520.576180][ C1] ? __pfx_kthread+0x10/0x10 [ 520.576190][ C1] ? __pfx_kthread+0x10/0x10 [ 520.576200][ C1] ? __pfx_kthread+0x10/0x10 [ 520.576210][ C1] ? __pfx_kthread+0x10/0x10 [ 520.576220][ C1] ? rcu_is_watching+0x12/0xc0 [ 520.576233][ C1] ? __pfx_kthread+0x10/0x10 [ 520.576244][ C1] ret_from_fork+0x45/0x80 [ 520.576255][ C1] ? __pfx_kthread+0x10/0x10 [ 520.576266][ C1] ret_from_fork_asm+0x1a/0x30 [ 520.576288][ C1] [ 520.576307][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g28497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 521.056769][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=22238 [ 521.064646][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g28497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 521.076005][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 521.085958][ C0] rcu: RCU grace-period kthread stack dump: [ 521.091828][ C0] task:rcu_preempt state:I stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 521.103741][ C0] Call Trace: [ 521.107012][ C0] [ 521.109936][ C0] __schedule+0x116f/0x5de0 [ 521.114449][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 521.119389][ C0] ? __pfx___schedule+0x10/0x10 [ 521.124236][ C0] ? find_held_lock+0x2b/0x80 [ 521.128906][ C0] ? schedule+0x2d7/0x3a0 [ 521.133231][ C0] schedule+0xe7/0x3a0 [ 521.137293][ C0] schedule_timeout+0x123/0x290 [ 521.142135][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 521.147499][ C0] ? __pfx_process_timeout+0x10/0x10 [ 521.152782][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 521.158580][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 521.164038][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 521.168802][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 521.174084][ C0] ? rcu_gp_init+0xc76/0x15a0 [ 521.178758][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 521.183611][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 521.189411][ C0] rcu_gp_kthread+0x270/0x380 [ 521.194084][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 521.199277][ C0] ? rcu_is_watching+0x12/0xc0 [ 521.204036][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 521.209229][ C0] ? __kthread_parkme+0x19e/0x250 [ 521.214249][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 521.219443][ C0] kthread+0x3c2/0x780 [ 521.223504][ C0] ? __pfx_kthread+0x10/0x10 [ 521.228084][ C0] ? __pfx_kthread+0x10/0x10 [ 521.232661][ C0] ? __pfx_kthread+0x10/0x10 [ 521.237241][ C0] ? __pfx_kthread+0x10/0x10 [ 521.241822][ C0] ? rcu_is_watching+0x12/0xc0 [ 521.246578][ C0] ? __pfx_kthread+0x10/0x10 [ 521.251160][ C0] ret_from_fork+0x45/0x80 [ 521.255565][ C0] ? __pfx_kthread+0x10/0x10 [ 521.260144][ C0] ret_from_fork_asm+0x1a/0x30 [ 521.264914][ C0]