last executing test programs: 17.436574389s ago: executing program 2 (id=186): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) get_robust_list(0x0, &(0x7f0000000800)=0x0, &(0x7f0000000840)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sendfile(r1, r2, &(0x7f0000000200)=0xc2, 0x8000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000002c0)="6e1fd242a9419928e622ea333560c7db9f834cfe7b875a9bb0e3ca2b56d4580f4ce13351a42b9c226b1d60423d170cfef2eed047490b75c8315c29a6f67ff2b4e44d997f88af061f3b4160324cc1ef14e3b7b60e229218e3075d140efe27af035919af677106ac505c20c76c259fcf27c598d4cd6c707cf4595bb284d000363fee7ca78924a3362667a84f2e42b0c6d7cd4326062ec42cecca4b45c24e2953351314b377688f078ca848592e935658d42b62a92371c728ab87fbab1d4d0b30da72441440f46b5a9daacf9ffb06804a0c42af92141041d4b37da01fcc4baa8550a5ba7f", 0xe3}, {&(0x7f00000003c0)="bc57767bdc730438fb26e71a4ecc808537dbca98f9a3fcc6b5b94e0d149340c907765003984b1b82769182ec135ea9dc98556a31a1a8dab0edb6d881e8b02ac860767324b96e90e723abbcd805beaa8392ff3bf5ac382078e3181e5f61a3c692fb1eff8ff9a5b199c2ec0e414c54cae07642ccb822e6e494fa21d111eebe6dfde45958a9fde4411812fa370dc016ed45daeb526e46e15ebb6f2fc4da889345bc489662ab", 0xa4}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="deb321351656e813224cd846a6009deaddfa4f53e9ce09e92c29d0120a29bc0b6fb98c120af693d80da903fee55948e5dcb2434f1bf45207ecb3956499b7b6d26abb29d84136b195e07609cc8687b8ecf6147ac8da10a157036753148f63e7015a58a8138e429281b324cca90d298456", 0x70}], 0x4, 0x5, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180), &(0x7f00000001c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f00000024c0)={0x13ffd, 0x99, 0x3, 0x81, 0x2, "36f4f67709075ab4ef0d05000000000000001d"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x5) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x66dc136) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12.463861843s ago: executing program 2 (id=200): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x50, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsopen(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 11.08011105s ago: executing program 3 (id=206): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) eventfd(0x401) syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 10.818134833s ago: executing program 0 (id=207): syslog(0x2, &(0x7f0000001740), 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x1a0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x22c, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r7, 0x0, 0x0) fchdir(r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r8, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0002"], 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x0, 0x400101c0, 0x0) 10.096258689s ago: executing program 2 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x15, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@arm64={0x5, 0xc7, 0x2, '\x00', 0xe}) setsockopt$SO_BINDTODEVICE_wg(r2, 0x28, 0x19, 0x0, 0x0) syz_usb_connect(0x5, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008d250640710402065dff0102030109023b00010f00000f0904ec"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000040)=0x46c, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x9, &(0x7f0000000140)=[{0xfff, 0x9, 0xf9, 0x6}, {0xfff7, 0x1, 0x0, 0x5}, {0x6, 0x9, 0x8, 0x9}, {0x3f, 0x2, 0x6, 0x80000000}, {0x38af, 0xe4, 0x55, 0x200}, {0xf54, 0x8, 0x1, 0x2}, {0x7, 0x73, 0xbf, 0x5}, {0xc, 0x0, 0xa, 0x8}, {0x7, 0x8, 0xfe, 0x2}]}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = dup(0xffffffffffffffff) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000780)={0x1, 0x0, [{0x2c7, 0x0, 0x800}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f}}, 0x20) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000004340)=""/102376, 0x18fe8) 9.932026473s ago: executing program 3 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000140)=""/102, &(0x7f0000000100)=0x66) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000200)={0x1, [{0x1, 0x0, 0xfffffffd, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x142000, 0x0}, {0x2, 0x0, 0x93, 0x0}, {0x0, 0x2f0, 0x38, &(0x7f0000001080)="9850c2d841646092e5cdf71f4d8436a1d3990cf40c6b06fb410322335cdd600723328865a52a5e8e001f12df90aa6df8a52cd41a6913ae5f0e43271e9f5e3047d8c7bcc61883bfce1cd15c05555bcff7c38a99057726aa998d5ad540685c"}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x80000006, 0x0}, {0x3, 0x0, 0x27, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xd6f7, 0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.85002753s ago: executing program 0 (id=212): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$can_bcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0400000000", @ANYRES64=0x0], 0x38}, 0x2}, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {0x0}], 0x2) 9.464375213s ago: executing program 3 (id=216): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000022d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/35) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x0, 0x3) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x3, 0x0) connect$unix(r6, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r5, 0x802) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4040814) socket$inet6(0xa, 0x3, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRESDEC=r7], 0x84}, 0x1, 0x0, 0x0, 0x240448c0}, 0x4048850) 8.52737788s ago: executing program 0 (id=217): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x87bf, 0x3, 0x2, 0x4, 0x101, 0x659}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x0, 0xa, 0xa, "64b3d66d4e6b7d4d5de2"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="90ff") 8.367192609s ago: executing program 3 (id=218): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x18, 0x2, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)=0x1) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r9) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 8.080887942s ago: executing program 1 (id=219): r0 = fsopen(&(0x7f0000000680)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0xc044) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000007343495807b5250c06000000040000000000000e0400000000000000000000000000000d0300000000000000000000020000000000000000000000090300000000003000419716d6ba7942d94fa67ad2f9a1378ef85416087ab912ee9cd05feb1c19307f9739c2fd34e063239d9aa56fc54c55e1318dd5fa4300527863de05101bc5c617f89da58047000bd879ee7034e2b6b6047de56b9a7a722f3964e708af4631b2be04043c05afa1a82cd9cfc936ee4161f525404677f9f31a0b892b72e53a023b2fee8f0faf3d6854070c3c30a78b1942279b59c9ae42d843f15dc2fec070dd42195b29c841313f0050b791a47fb9830c4e21df844da1e6a1311d40b45be0a7ddf3235d2999dcf51b4e6264cf9e9ea9bad49175264dfae408ce38e3f370054384508456502c5e254eb0cd16b5951bbbb15b3a3a8600000000000000000000000000000053a1131a8c84b8c3e3cd101141"], 0x0, 0x52}, 0x28) sendto$inet6(r2, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r2, 0x0, 0x0, 0x4010, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7.25331706s ago: executing program 1 (id=220): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d616300050001000700000014000780080013400000000008001240", @ANYRESOCT=r0], 0x5c}}, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffca1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) 6.260086498s ago: executing program 1 (id=222): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x8, @string={0xa3, 0x3, "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"}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000001c0)={0x20, 0x3, 0x3, "2cd5b5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.133944308s ago: executing program 2 (id=223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffc]}}) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x181102, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000ba6) r6 = getpgrp(r3) sched_setattr(r6, &(0x7f0000000240)={0x38, 0x3, 0x10000025, 0x100000, 0x8, 0x4, 0x3, 0x7, 0x2, 0x100}, 0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="955ec68404d156d7d8db202a00010007000000"], 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x19) getpgid(r6) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) 4.892046269s ago: executing program 0 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000020b76de0000000008000000850000002700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4.745890651s ago: executing program 0 (id=226): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="080403000021000008001b000000000034001a800800028004000180200002801c00018008001a000400000006"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[]) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501be", @ANYRES8, @ANYRES32=0x0], 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.979737628s ago: executing program 4 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x205}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000840) 3.88280577s ago: executing program 3 (id=228): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000022d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/35) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x0, 0x3) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x3, 0x0) connect$unix(r6, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r5, 0x802) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4040814) socket$inet6(0xa, 0x3, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRESDEC=r7], 0x84}, 0x1, 0x0, 0x0, 0x240448c0}, 0x4048850) 3.881305054s ago: executing program 4 (id=229): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = getpgrp(0xffffffffffffffff) sched_getaffinity(r4, 0x8, &(0x7f0000000100)) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x4}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r9, 0x4, r1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @local, 0x1}, 0x1c) dup(r10) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x16f8c2, 0x0) ftruncate(r11, 0x200004) 3.361627224s ago: executing program 4 (id=230): r0 = fsopen(&(0x7f0000000680)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0xc044) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000007343495807b5250c06000000040000000000000e0400000000000000000000000000000d0300000000000000000000020000000000000000000000090300000000003000419716d6ba7942d94fa67ad2f9a1378ef85416087ab912ee9cd05feb1c19307f9739c2fd34e063239d9aa56fc54c55e1318dd5fa4300527863de05101bc5c617f89da58047000bd879ee7034e2b6b6047de56b9a7a722f3964e708af4631b2be04043c05afa1a82cd9cfc936ee4161f525404677f9f31a0b892b72e53a023b2fee8f0faf3d6854070c3c30a78b1942279b59c9ae42d843f15dc2fec070dd42195b29c841313f0050b791a47fb9830c4e21df844da1e6a1311d40b45be0a7ddf3235d2999dcf51b4e6264cf9e9ea9bad49175264dfae408ce38e3f370054384508456502c5e254eb0cd16b5951bbbb15b3a3a8600000000000000000000000000000053a1131a8c84b8c3e3cd101141"], 0x0, 0x52}, 0x28) sendto$inet6(r2, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r2, 0x0, 0x0, 0x4010, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.263228798s ago: executing program 1 (id=231): preadv(0xffffffffffffffff, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f00000005c0)="6967ae42cbea486d00a74e3deec6fcb4391f745de505000000000000007190ba2b6d59c8958d6f156c9c8a2ac4677b000900ffffffffffffff200000f8bf54da33c42b0592c958e8ae79b29152d8b50314d61f068badd9531f07babbe641a1a76e121a8b0c0604a15b2738afc9bd635fa6496716c0a1e9f2da35a4b6cef320f0095f9b9d77417f3fa278563ef8f50e01504fa1763858af3bb0a73e478d115c", 0x9f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) 2.578474286s ago: executing program 4 (id=232): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0x7, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800"], 0x64}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x4044044) fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x94}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0x2, 0x4) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3b, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffc, 0x9}}) fsmount(r0, 0x0, 0x6) 1.858088439s ago: executing program 3 (id=233): syz_usb_connect(0x0, 0x5d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b40)={'#! ', '', [{}]}, 0x5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001780), 0x40, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x9) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001840)={'batadv_slave_1\x00', 0x1}) write$dsp(r0, &(0x7f0000000240)="1bde089db4e1f558c1fac0e45331c4859ed4516b05165b37b710ff7130b8b173103d2e91bb97cefcf6cb67cc76e48d72d9a608acfa04246d8e455bc7311505c8b0", 0x41) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x4}, 0x38) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000015c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x58) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect$cdc_ncm(0x5, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x4, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "eb9c1b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x401, 0xfffd, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x8, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x80, 0x8, 0x2}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xf, 0x2, 0x5, 0x40, 0x4}, 0x17, &(0x7f0000000140)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x7, 0xf, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x0, 0x1, 0x35, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x55, &(0x7f0000000200)=@string={0x55, 0x3, "297c6cca86e5ca417804b0c5bb56f69bd765609ea5ba732f1eb2638d9f38129896040a18defa51c975c1f3e7994be8089a300cd16a084c7eefc8f333f2f0e1777bc63100d79b80c590bcf7369bc5b267ba03b6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x4a, &(0x7f0000000300)=@string={0x4a, 0x3, "e3cd7c53f77ac96ed074c4cbc77e9e853c78c6479dde77050a4c764d23ba2abcf3efa39032a41f065e0d1dcaea9a5d222bdc98fe950ab1b08896ceeea6f86b728e5665b1df7a99c7"}}]}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fspick(0xffffffffffffffff, 0x0, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000000440)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001640)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x6, 0x8, 0x9, 0x3ffc, 0x3, 0xec7d}, {0x5, 0x2, 0x2, 0xffffffffffffffff, 0x8, 0xc40}], ['\x00', '\x00']}) listen(r7, 0x6) 1.81204564s ago: executing program 2 (id=234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) tkill(r2, 0x7) gettid() socket$inet6(0xa, 0x3, 0x2f) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x104d}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1.600062098s ago: executing program 0 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x2}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00007ed000/0x4000)=nil) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r5 = fsopen(&(0x7f0000000100)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x4) fchdir(r6) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.49855925s ago: executing program 4 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000020b76de0000000008000000850000002700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1.164558511s ago: executing program 4 (id=237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2c, 0x3, 0xe7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x4, 0x401}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r3, 0x7f, 0x81, 0xd, 0xc, 0x8000}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003900010324bd7002fadfdf9b000000b5554908f12b0696124e696efebd405a3ee982dfa8656ed31a246dcb19901f26cf17792cf22412b82bcc1a4467665faca17c74b424ff6c60383dc3b7de70a914fa5acf74ee556edc6eb1023ead9dd2641709"], 0x14}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a3000000000080041030069770014003300e1ff3c3f553ef630a2a7776c616e3100"/66], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x10, 0x5, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x2, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8}) r9 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) ppoll(&(0x7f00000001c0)=[{r9}], 0x1, 0x0, 0x0, 0x0) close_range(r5, r8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x16200, 0x0) 415.839069ms ago: executing program 1 (id=238): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) pipe(&(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0x3, 0x40000) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r3, 0x836f3000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x5, 0x8, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 78.18354ms ago: executing program 2 (id=239): execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/time\x00') (fail_nth: 17) 0s ago: executing program 1 (id=240): socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f00000005c0)="6967ae42cbea486d00a74e3deec6fcb4391f745de505000000000000007190ba2b6d59c8958d6f156c9c8a2ac4677b000900ffffffffffffff200000f8bf54da33c42b0592c958e8ae79b29152d8b50314d61f068badd9531f07babbe641a1a76e121a8b0c0604a15b2738afc9bd635fa6496716c0a1e9f2da35a4b6cef320f0095f9b9d77417f3fa278563ef8f50e01504fa1763858af3bb0a73e478d115c", 0x9f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 58.056465][ T30] audit: type=1400 audit(1755919584.723:62): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.059918][ T5830] cgroup: Unknown subsys name 'net' [ 58.079243][ T30] audit: type=1400 audit(1755919584.723:63): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.109073][ T30] audit: type=1400 audit(1755919584.783:64): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.273933][ T5830] cgroup: Unknown subsys name 'cpuset' [ 58.282081][ T5830] cgroup: Unknown subsys name 'rlimit' [ 58.427994][ T30] audit: type=1400 audit(1755919585.093:65): avc: denied { setattr } for pid=5830 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.451819][ T30] audit: type=1400 audit(1755919585.093:66): avc: denied { create } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.487395][ T30] audit: type=1400 audit(1755919585.093:67): avc: denied { write } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.507950][ T30] audit: type=1400 audit(1755919585.093:68): avc: denied { read } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.528850][ T30] audit: type=1400 audit(1755919585.123:69): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.535966][ T5832] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.554230][ T30] audit: type=1400 audit(1755919585.123:70): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.585541][ T30] audit: type=1400 audit(1755919585.143:71): avc: denied { read } for pid=5512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.517802][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.410930][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 63.410947][ T30] audit: type=1400 audit(1755919590.073:78): avc: denied { create } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.463630][ T30] audit: type=1400 audit(1755919590.083:79): avc: denied { read write } for pid=5841 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.488709][ T30] audit: type=1400 audit(1755919590.083:80): avc: denied { open } for pid=5841 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.517563][ T30] audit: type=1400 audit(1755919590.113:81): avc: denied { ioctl } for pid=5841 comm="syz-executor" path="socket:[4924]" dev="sockfs" ino=4924 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.562282][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.570462][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.591636][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.598627][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.606516][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.606624][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.620434][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.622100][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.628606][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.642722][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.643423][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.650309][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.657913][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.664324][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.671900][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.678996][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.686029][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.692136][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.706364][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.715701][ T5167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.752293][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.758074][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.759482][ T30] audit: type=1400 audit(1755919590.373:82): avc: denied { read } for pid=5844 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.801860][ T5167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.807762][ T30] audit: type=1400 audit(1755919590.373:83): avc: denied { open } for pid=5844 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.809005][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.832369][ T30] audit: type=1400 audit(1755919590.373:84): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.866524][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.170919][ T30] audit: type=1400 audit(1755919590.833:85): avc: denied { module_request } for pid=5844 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 64.238277][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 64.269095][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 64.414092][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 64.495895][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.503152][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.510442][ T5841] bridge_slave_0: entered allmulticast mode [ 64.517966][ T5841] bridge_slave_0: entered promiscuous mode [ 64.541511][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 64.559219][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 64.575112][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.582483][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.589592][ T5841] bridge_slave_1: entered allmulticast mode [ 64.596407][ T5841] bridge_slave_1: entered promiscuous mode [ 64.603601][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.610672][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.618013][ T5844] bridge_slave_0: entered allmulticast mode [ 64.624745][ T5844] bridge_slave_0: entered promiscuous mode [ 64.632383][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.639477][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.646716][ T5844] bridge_slave_1: entered allmulticast mode [ 64.653751][ T5844] bridge_slave_1: entered promiscuous mode [ 64.723666][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.730752][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.738526][ T5840] bridge_slave_0: entered allmulticast mode [ 64.745935][ T5840] bridge_slave_0: entered promiscuous mode [ 64.777860][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.785308][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.792663][ T5840] bridge_slave_1: entered allmulticast mode [ 64.799284][ T5840] bridge_slave_1: entered promiscuous mode [ 64.808307][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.819243][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.848671][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.869414][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.925328][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.932655][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.939780][ T5851] bridge_slave_0: entered allmulticast mode [ 64.946558][ T5851] bridge_slave_0: entered promiscuous mode [ 64.956385][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.966937][ T5841] team0: Port device team_slave_0 added [ 64.974504][ T5844] team0: Port device team_slave_0 added [ 64.988166][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.995396][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.002648][ T5851] bridge_slave_1: entered allmulticast mode [ 65.009478][ T5851] bridge_slave_1: entered promiscuous mode [ 65.025086][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.035358][ T5841] team0: Port device team_slave_1 added [ 65.042580][ T5844] team0: Port device team_slave_1 added [ 65.085524][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.093187][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.100261][ T5849] bridge_slave_0: entered allmulticast mode [ 65.107786][ T5849] bridge_slave_0: entered promiscuous mode [ 65.116914][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.128523][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.160387][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.167571][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.174840][ T5849] bridge_slave_1: entered allmulticast mode [ 65.182047][ T5849] bridge_slave_1: entered promiscuous mode [ 65.197605][ T5840] team0: Port device team_slave_0 added [ 65.205871][ T5840] team0: Port device team_slave_1 added [ 65.212554][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.219469][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.246029][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.259524][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.266493][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.292508][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.304330][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.311411][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.337784][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.380630][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.387601][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.413980][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.438346][ T5851] team0: Port device team_slave_0 added [ 65.446428][ T5851] team0: Port device team_slave_1 added [ 65.460539][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.467554][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.494204][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.518869][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.537107][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.544078][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.570571][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.598523][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.630469][ T5841] hsr_slave_0: entered promiscuous mode [ 65.636782][ T5841] hsr_slave_1: entered promiscuous mode [ 65.659837][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.667197][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.693347][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.708459][ T5844] hsr_slave_0: entered promiscuous mode [ 65.715524][ T5844] hsr_slave_1: entered promiscuous mode [ 65.721571][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 65.727346][ T5844] Cannot create hsr debugfs directory [ 65.750036][ T5849] team0: Port device team_slave_0 added [ 65.758370][ T5849] team0: Port device team_slave_1 added [ 65.764808][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.772027][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.797927][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.811727][ T5167] Bluetooth: hci1: command tx timeout [ 65.811730][ T5847] Bluetooth: hci2: command tx timeout [ 65.811945][ T5857] Bluetooth: hci0: command tx timeout [ 65.876255][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.884201][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.910141][ T5857] Bluetooth: hci3: command tx timeout [ 65.910148][ T5167] Bluetooth: hci4: command tx timeout [ 65.910801][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.939434][ T5840] hsr_slave_0: entered promiscuous mode [ 65.945682][ T5840] hsr_slave_1: entered promiscuous mode [ 65.951790][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 65.957600][ T5840] Cannot create hsr debugfs directory [ 65.973924][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.980924][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.006812][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.074587][ T5851] hsr_slave_0: entered promiscuous mode [ 66.080617][ T5851] hsr_slave_1: entered promiscuous mode [ 66.086730][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 66.092812][ T5851] Cannot create hsr debugfs directory [ 66.169186][ T5849] hsr_slave_0: entered promiscuous mode [ 66.175852][ T5849] hsr_slave_1: entered promiscuous mode [ 66.181917][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 66.187617][ T5849] Cannot create hsr debugfs directory [ 66.388818][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.414396][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.424059][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.448154][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.533798][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.546901][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.555996][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.575632][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.631279][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.642683][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.654706][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.670628][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.738320][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.749503][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.770321][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.794587][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.859108][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.875004][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.885687][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.895321][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.912690][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.952109][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.972509][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.986654][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.993875][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.013148][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.034108][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.041323][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.074603][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.097265][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.108484][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.115606][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.144491][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.151623][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.169286][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.176379][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.197463][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.204665][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.225312][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.280769][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.304781][ T30] audit: type=1400 audit(1755919593.973:86): avc: denied { sys_module } for pid=5844 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.369638][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.386200][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.434826][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.453626][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.461206][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.479540][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.486695][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.567118][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.574307][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.593135][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.600253][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.616923][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.647282][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.701958][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.833753][ T5844] veth0_vlan: entered promiscuous mode [ 67.863829][ T5840] veth0_vlan: entered promiscuous mode [ 67.893342][ T5857] Bluetooth: hci1: command tx timeout [ 67.901593][ T5857] Bluetooth: hci0: command tx timeout [ 67.901644][ T5167] Bluetooth: hci2: command tx timeout [ 67.915279][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.936089][ T5844] veth1_vlan: entered promiscuous mode [ 67.952678][ T5840] veth1_vlan: entered promiscuous mode [ 67.971992][ T5167] Bluetooth: hci4: command tx timeout [ 67.971996][ T5857] Bluetooth: hci3: command tx timeout [ 68.019124][ T5844] veth0_macvtap: entered promiscuous mode [ 68.057268][ T5840] veth0_macvtap: entered promiscuous mode [ 68.075154][ T5844] veth1_macvtap: entered promiscuous mode [ 68.098110][ T5840] veth1_macvtap: entered promiscuous mode [ 68.126593][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.143275][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.166119][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.176886][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.201653][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.211544][ T1310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.220695][ T1310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.240421][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.274040][ T1310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.286308][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.315797][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.328703][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.350512][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.360452][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.403376][ T5849] veth0_vlan: entered promiscuous mode [ 68.458369][ T5849] veth1_vlan: entered promiscuous mode [ 68.483669][ T5851] veth0_vlan: entered promiscuous mode [ 68.499623][ T5841] veth0_vlan: entered promiscuous mode [ 68.540053][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.541942][ T5851] veth1_vlan: entered promiscuous mode [ 68.554520][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.567152][ T5841] veth1_vlan: entered promiscuous mode [ 68.591490][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.599336][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.602598][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.616810][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.649188][ T30] audit: type=1400 audit(1755919595.313:87): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.3OvS2i/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.662240][ T5841] veth0_macvtap: entered promiscuous mode [ 68.696304][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.696390][ T5851] veth0_macvtap: entered promiscuous mode [ 68.714581][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.724801][ T30] audit: type=1400 audit(1755919595.343:88): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.755672][ T5849] veth0_macvtap: entered promiscuous mode [ 68.776466][ T5841] veth1_macvtap: entered promiscuous mode [ 68.789768][ T30] audit: type=1400 audit(1755919595.343:89): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.3OvS2i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.790618][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.846520][ T5849] veth1_macvtap: entered promiscuous mode [ 68.850719][ T30] audit: type=1400 audit(1755919595.343:90): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.856376][ T5851] veth1_macvtap: entered promiscuous mode [ 68.883840][ T30] audit: type=1400 audit(1755919595.353:91): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.3OvS2i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.919330][ T30] audit: type=1400 audit(1755919595.363:92): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.3OvS2i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.932727][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.956116][ T30] audit: type=1400 audit(1755919595.383:93): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.978931][ T30] audit: type=1400 audit(1755919595.393:94): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.008932][ T30] audit: type=1400 audit(1755919595.393:95): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="gadgetfs" ino=7380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.035523][ T30] audit: type=1400 audit(1755919595.423:96): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.061809][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.099810][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.115482][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.124915][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.147675][ T5962] autofs: Unknown parameter 'fd0x0000000000000000' [ 69.167910][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.203469][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.263360][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.289927][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.303289][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.325826][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.356185][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.380079][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.404105][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.413994][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.446470][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.459692][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.482135][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.505464][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.545478][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.565803][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.612953][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.624065][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.642271][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 69.654795][ T5900] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 69.670895][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.699849][ T5900] usb 1-1: config 0 descriptor?? [ 69.729866][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.764759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.787711][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.811206][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.819979][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.842603][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.907001][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.932934][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.972448][ T5857] Bluetooth: hci2: command tx timeout [ 69.972548][ T5167] Bluetooth: hci0: command tx timeout [ 69.977885][ T5847] Bluetooth: hci1: command tx timeout [ 70.061235][ T5857] Bluetooth: hci4: command tx timeout [ 70.067044][ T5857] Bluetooth: hci3: command tx timeout [ 70.223853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.377440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.479828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.684645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.787040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.208440][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214884][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.502871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.515912][ T5993] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3'. [ 72.630887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 72.754562][ T5847] Bluetooth: hci2: command tx timeout [ 72.759983][ T5847] Bluetooth: hci0: command tx timeout [ 72.765443][ T5857] Bluetooth: hci1: command tx timeout [ 72.771087][ T5167] Bluetooth: hci4: command tx timeout [ 72.771141][ T5857] Bluetooth: hci3: command tx timeout [ 72.860416][ T5955] usb 1-1: USB disconnect, device number 2 [ 72.871273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.880651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.091330][ T6013] syz.0.16 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 73.103513][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 73.116844][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.125756][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.737835][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 73.737853][ T30] audit: type=1400 audit(1755919600.073:129): avc: denied { create } for pid=6008 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.926042][ T30] audit: type=1400 audit(1755919600.533:130): avc: denied { name_bind } for pid=6010 comm="syz.2.17" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.031325][ T5955] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.071737][ T30] audit: type=1400 audit(1755919600.533:131): avc: denied { node_bind } for pid=6010 comm="syz.2.17" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.114394][ T30] audit: type=1400 audit(1755919600.733:132): avc: denied { read write } for pid=6023 comm="syz.1.10" name="vbi4" dev="devtmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.166769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.190977][ T5955] usb 1-1: device descriptor read/64, error -71 [ 74.255359][ T30] audit: type=1400 audit(1755919600.733:133): avc: denied { open } for pid=6023 comm="syz.1.10" path="/dev/vbi4" dev="devtmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.369639][ T30] audit: type=1400 audit(1755919600.733:134): avc: denied { ioctl } for pid=6023 comm="syz.1.10" path="/dev/vbi4" dev="devtmpfs" ino=978 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.430944][ T5955] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.729567][ T30] audit: type=1400 audit(1755919600.813:135): avc: denied { create } for pid=6023 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.958261][ T30] audit: type=1400 audit(1755919600.813:136): avc: denied { setopt } for pid=6023 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.983229][ T5955] usb 1-1: device descriptor read/64, error -71 [ 75.031108][ T6029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5404 sclass=netlink_route_socket pid=6029 comm=syz.4.18 [ 75.055124][ T30] audit: type=1400 audit(1755919600.823:137): avc: denied { remount } for pid=6023 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.209916][ T5955] usb usb1-port1: attempt power cycle [ 75.240180][ T30] audit: type=1400 audit(1755919600.973:138): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.560955][ T5955] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.592956][ T5955] usb 1-1: device descriptor read/8, error -71 [ 75.956337][ T5955] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 76.761746][ T5955] usb 1-1: device descriptor read/8, error -71 [ 76.891078][ T5955] usb usb1-port1: unable to enumerate USB device [ 77.339290][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 78.034098][ T6079] 9pnet_virtio: no channels available for device syz [ 78.558092][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'. [ 78.610320][ T6086] netlink: 'syz.0.37': attribute type 7 has an invalid length. [ 78.706244][ T6086] netlink: 'syz.0.37': attribute type 8 has an invalid length. [ 78.772037][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 78.792027][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 78.792042][ T30] audit: type=1400 audit(1755919605.463:187): avc: denied { write } for pid=6092 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.861027][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.946647][ T30] audit: type=1400 audit(1755919605.513:188): avc: denied { ioctl } for pid=6066 comm="syz.4.30" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 79.181318][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 79.226826][ T5908] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 79.266523][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.305673][ T5908] usb 4-1: Product: syz [ 79.318975][ T30] audit: type=1400 audit(1755919605.533:189): avc: denied { accept } for pid=6092 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.320186][ T5908] usb 4-1: Manufacturer: syz [ 79.420092][ T5908] usb 4-1: SerialNumber: syz [ 79.426638][ T6110] FAULT_INJECTION: forcing a failure. [ 79.426638][ T6110] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.457849][ T5908] usb 4-1: config 0 descriptor?? [ 79.491383][ T5908] gspca_main: etoms-2.14.0 probing 102c:6251 [ 79.564223][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.2.41 Not tainted syzkaller #0 PREEMPT(full) [ 79.564249][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.564258][ T6110] Call Trace: [ 79.564264][ T6110] [ 79.564270][ T6110] dump_stack_lvl+0x16c/0x1f0 [ 79.564291][ T6110] should_fail_ex+0x512/0x640 [ 79.564306][ T6110] _copy_from_iter+0x29f/0x1720 [ 79.564323][ T6110] ? rcu_is_watching+0x12/0xc0 [ 79.564337][ T6110] ? __pfx__copy_from_iter+0x10/0x10 [ 79.564350][ T6110] ? rcu_is_watching+0x12/0xc0 [ 79.564363][ T6110] ? rcu_is_watching+0x12/0xc0 [ 79.564376][ T6110] ? kfree+0x24f/0x4d0 [ 79.564391][ T6110] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 79.564407][ T6110] file_tty_write.constprop.0+0x488/0x9b0 [ 79.564422][ T6110] vfs_write+0x7d3/0x11d0 [ 79.564434][ T6110] ? __pfx_tty_write+0x10/0x10 [ 79.564446][ T6110] ? __pfx_vfs_write+0x10/0x10 [ 79.564455][ T6110] ? find_held_lock+0x2b/0x80 [ 79.564477][ T6110] ksys_write+0x12a/0x250 [ 79.564488][ T6110] ? __pfx_ksys_write+0x10/0x10 [ 79.564503][ T6110] do_syscall_64+0xcd/0x4c0 [ 79.564516][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.564527][ T6110] RIP: 0033:0x7f847ef8ebe9 [ 79.564536][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.564548][ T6110] RSP: 002b:00007f847fe2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.564558][ T6110] RAX: ffffffffffffffda RBX: 00007f847f1b6090 RCX: 00007f847ef8ebe9 [ 79.564565][ T6110] RDX: 00000000ffffff5c RSI: 0000200000002440 RDI: 0000000000000003 [ 79.564571][ T6110] RBP: 00007f847fe2f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.564578][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.564584][ T6110] R13: 00007f847f1b6128 R14: 00007f847f1b6090 R15: 00007ffdfc8b7c78 [ 79.564597][ T6110] [ 79.758339][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.815648][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.961654][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.999499][ T30] audit: type=1400 audit(1755919606.663:190): avc: denied { read write } for pid=6111 comm="syz.0.42" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 80.131689][ T30] audit: type=1400 audit(1755919606.663:191): avc: denied { open } for pid=6111 comm="syz.0.42" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 80.167147][ T5908] usb 4-1: USB disconnect, device number 2 [ 80.280497][ T6116] Zero length message leads to an empty skb [ 80.328295][ T30] audit: type=1400 audit(1755919606.993:192): avc: denied { read } for pid=6117 comm="syz.4.44" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.151977][ T5928] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 81.323491][ T6127] netlink: 96 bytes leftover after parsing attributes in process `syz.2.46'. [ 81.494360][ T5928] usb 1-1: device descriptor read/64, error -71 [ 82.380640][ T30] audit: type=1400 audit(1755919607.033:193): avc: denied { open } for pid=6117 comm="syz.4.44" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.442725][ T9] cfg80211: failed to load regulatory.db [ 82.450577][ T30] audit: type=1400 audit(1755919607.183:194): avc: denied { create } for pid=6117 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.476997][ T30] audit: type=1400 audit(1755919607.193:195): avc: denied { create } for pid=6117 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.497097][ T30] audit: type=1400 audit(1755919607.213:196): avc: denied { connect } for pid=6117 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.731352][ T5928] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 83.422387][ T5928] usb 1-1: device descriptor read/64, error -71 [ 83.543812][ T5928] usb usb1-port1: attempt power cycle [ 83.650123][ T6151] 9pnet_fd: Insufficient options for proto=fd [ 83.651772][ T6152] process 'syz.2.53' launched './file0' with NULL argv: empty string added [ 83.811995][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 83.812035][ T30] audit: type=1400 audit(1755919610.383:203): avc: denied { associate } for pid=6147 comm="syz.2.53" name=33C42B0592C958E8AE79B29152D8B50314D61F068BADD9531F07BABBE641A1A76E121A8B0C0604A15B2738AFC9BD635FA6496716C0A1E9F2DA35A4B6CEF320F0095F9B9D77417F3FA278563EF8F50E01504FA1763858AF3BB0A73E478D115C scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.990961][ T5928] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 84.079569][ T30] audit: type=1400 audit(1755919610.743:204): avc: denied { bind } for pid=6144 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.105544][ T30] audit: type=1400 audit(1755919610.743:205): avc: denied { name_bind } for pid=6144 comm="syz.3.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.173434][ T30] audit: type=1400 audit(1755919610.743:206): avc: denied { node_bind } for pid=6144 comm="syz.3.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 84.204002][ T5928] usb 1-1: device not accepting address 9, error -71 [ 84.317674][ T6161] binder: 6158:6161 ioctl c0306201 0 returned -14 [ 84.385032][ T30] audit: type=1400 audit(1755919610.743:207): avc: denied { create } for pid=6144 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.598619][ T30] audit: type=1400 audit(1755919610.743:208): avc: denied { bind } for pid=6144 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.620116][ T30] audit: type=1400 audit(1755919610.743:209): avc: denied { ioctl } for pid=6144 comm="syz.3.54" path="socket:[9101]" dev="sockfs" ino=9101 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.661103][ T5928] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 84.687929][ T30] audit: type=1400 audit(1755919610.973:210): avc: denied { create } for pid=6158 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.723614][ T30] audit: type=1400 audit(1755919610.983:211): avc: denied { ioctl } for pid=6158 comm="syz.4.57" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.723632][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 85.415870][ T5928] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.430864][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.500044][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.520581][ T5928] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.546746][ T5928] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.599386][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.680931][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.826717][ T30] audit: type=1400 audit(1755919612.493:212): avc: denied { create } for pid=6178 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.871744][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 85.880397][ T5854] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 85.903825][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.922409][ T5928] usb 1-1: GET_CAPABILITIES returned 0 [ 85.931029][ T5854] usb 3-1: Product: syz [ 85.940957][ T5854] usb 3-1: Manufacturer: syz [ 85.947623][ T5854] usb 3-1: SerialNumber: syz [ 85.948136][ T5928] usbtmc 1-1:16.0: can't read capabilities [ 85.981802][ T5854] usb 3-1: config 0 descriptor?? [ 86.009233][ T5854] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 86.194445][ T5928] usb 1-1: USB disconnect, device number 10 [ 86.213044][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.239295][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.550914][ T976] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.710989][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 86.736311][ T976] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.791263][ T976] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 86.818568][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.837036][ T976] usb 4-1: Product: syz [ 86.847139][ T976] usb 4-1: Manufacturer: syz [ 86.852020][ T976] usb 4-1: SerialNumber: syz [ 86.872020][ T976] r8152-cfgselector 4-1: Unknown version 0x0000 [ 86.888433][ T976] r8152-cfgselector 4-1: config 0 descriptor?? [ 86.960947][ T5928] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 87.142338][ T5928] usb 2-1: no configurations [ 87.146963][ T5928] usb 2-1: can't read configurations, error -22 [ 87.170339][ T976] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 87.320961][ T5928] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 87.491638][ T5928] usb 2-1: no configurations [ 87.497531][ T5928] usb 2-1: can't read configurations, error -22 [ 87.509990][ T5928] usb usb2-port1: attempt power cycle [ 87.679052][ T6207] mmap: syz.4.70 (6207) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.881048][ T5928] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 87.901782][ T5854] gspca_stk1135: reg_w 0xf err -110 [ 87.908018][ T5854] gspca_stk1135: serial bus timeout: status=0x00 [ 87.914738][ T5854] gspca_stk1135: Sensor write failed [ 87.921446][ T5854] gspca_stk1135: serial bus timeout: status=0x00 [ 87.931258][ T5854] gspca_stk1135: Sensor write failed [ 87.943506][ T5854] gspca_stk1135: serial bus timeout: status=0x00 [ 87.950007][ T5854] gspca_stk1135: Sensor read failed [ 87.955313][ T5928] usb 2-1: no configurations [ 87.955330][ T5928] usb 2-1: can't read configurations, error -22 [ 87.981774][ T5854] gspca_stk1135: serial bus timeout: status=0x00 [ 87.988439][ T5854] gspca_stk1135: Sensor read failed [ 87.996369][ T5854] gspca_stk1135: Detected sensor type unknown (0x0) [ 88.004725][ T5854] gspca_stk1135: serial bus timeout: status=0x00 [ 88.012657][ T5854] gspca_stk1135: Sensor read failed [ 88.116998][ T5854] gspca_stk1135: serial bus timeout: status=0x00 [ 88.120907][ T5928] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 88.162232][ T5928] usb 2-1: no configurations [ 88.162833][ T5854] gspca_stk1135: Sensor read failed [ 88.172583][ T5928] usb 2-1: can't read configurations, error -22 [ 88.180132][ T5928] usb usb2-port1: unable to enumerate USB device [ 88.216606][ T5854] gspca_stk1135: serial bus timeout: status=0x00 [ 88.227104][ T5854] gspca_stk1135: Sensor write failed [ 88.236615][ T5854] gspca_stk1135: serial bus timeout: status=0x00 [ 88.243658][ T5854] gspca_stk1135: Sensor write failed [ 88.261867][ T5854] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 88.588185][ T6216] overlayfs: overlapping lowerdir path [ 88.743345][ T5854] usb 3-1: USB disconnect, device number 2 [ 88.824316][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 88.824327][ T30] audit: type=1400 audit(1755919615.491:221): avc: denied { mount } for pid=6219 comm="+}[@" name="/" dev="ramfs" ino=10257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.896788][ T6220] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 88.908094][ T30] audit: type=1400 audit(1755919615.521:222): avc: denied { getopt } for pid=6219 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.963426][ T30] audit: type=1400 audit(1755919615.601:223): avc: denied { execute } for pid=6221 comm="syz.2.75" name="file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.993693][ T30] audit: type=1400 audit(1755919615.601:224): avc: denied { execute_no_trans } for pid=6221 comm="syz.2.75" path="/16/file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.022919][ T30] audit: type=1326 audit(1755919615.611:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.4.74" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb96218ebe9 code=0x0 [ 89.050395][ T30] audit: type=1400 audit(1755919615.721:226): avc: denied { create } for pid=6224 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.093114][ T5928] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 89.281443][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 89.298417][ T5928] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.389186][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.461711][ T30] audit: type=1400 audit(1755919616.031:227): avc: denied { mount } for pid=6226 comm="syz.4.77" name="/" dev="configfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 89.591520][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.721568][ T30] audit: type=1400 audit(1755919616.041:228): avc: denied { search } for pid=6226 comm="syz.4.77" name="/" dev="configfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.742524][ T5928] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.776695][ T5928] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.789364][ T30] audit: type=1400 audit(1755919616.041:229): avc: denied { search } for pid=6226 comm="syz.4.77" name="/" dev="configfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.796329][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.858265][ T6225] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 89.867305][ T30] audit: type=1400 audit(1755919616.041:230): avc: denied { read open } for pid=6226 comm="syz.4.77" path="/" dev="configfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.505914][ T5928] usb 1-1: usb_control_msg returned -32 [ 91.100911][ T5857] Bluetooth: hci0: command 0x0401 tx timeout [ 91.871980][ T5928] usbtmc 1-1:16.0: can't read capabilities [ 92.021773][ T5928] usb 1-1: USB disconnect, device number 11 [ 92.567625][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 92.845419][ T6262] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET) [ 93.601311][ T5900] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 93.771357][ T5900] usb 3-1: no configurations [ 93.788403][ T5900] usb 3-1: can't read configurations, error -22 [ 94.429943][ T5900] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 94.642396][ T5900] usb 3-1: no configurations [ 94.648610][ T5900] usb 3-1: can't read configurations, error -22 [ 94.659256][ T5900] usb usb3-port1: attempt power cycle [ 95.646715][ T5900] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 96.058055][ T5900] usb 3-1: device descriptor read/8, error -71 [ 96.074654][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 96.074668][ T30] audit: type=1400 audit(1755919622.691:240): avc: denied { connect } for pid=6292 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.260210][ T30] audit: type=1400 audit(1755919622.921:241): avc: denied { ioctl } for pid=6300 comm="syz.4.98" path="socket:[10394]" dev="sockfs" ino=10394 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.284752][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.884279][ T30] audit: type=1400 audit(1755919622.921:242): avc: denied { write } for pid=6300 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.914531][ T30] audit: type=1400 audit(1755919623.581:243): avc: denied { name_connect } for pid=6300 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 96.968686][ T30] audit: type=1400 audit(1755919623.631:244): avc: denied { ioctl } for pid=6300 comm="syz.4.98" path="socket:[10397]" dev="sockfs" ino=10397 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.994455][ T30] audit: type=1400 audit(1755919623.671:245): avc: denied { listen } for pid=6300 comm="syz.4.98" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.014401][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.170185][ T30] audit: type=1400 audit(1755919623.831:246): avc: denied { write } for pid=6313 comm="syz.3.102" path="socket:[10407]" dev="sockfs" ino=10407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.402783][ T30] audit: type=1400 audit(1755919625.061:247): avc: denied { read } for pid=6319 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.170910][ T5908] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 101.371561][ T5908] usb 2-1: no configurations [ 101.395892][ T5908] usb 2-1: can't read configurations, error -22 [ 101.467091][ T6352] Bluetooth: MGMT ver 1.23 [ 101.475733][ T30] audit: type=1400 audit(1755919628.131:248): avc: denied { write } for pid=6348 comm="syz.0.112" path="socket:[10474]" dev="sockfs" ino=10474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.499265][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.800927][ T5908] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 101.921726][ T30] audit: type=1400 audit(1755919628.551:249): avc: denied { getopt } for pid=6348 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.081718][ T5908] usb 2-1: no configurations [ 102.086386][ T5908] usb 2-1: can't read configurations, error -22 [ 102.097065][ T5908] usb usb2-port1: attempt power cycle [ 102.531900][ T5908] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 102.562989][ T5908] usb 2-1: no configurations [ 102.567615][ T5908] usb 2-1: can't read configurations, error -22 [ 102.750963][ T5908] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 103.312040][ T5908] usb 2-1: no configurations [ 103.319722][ T5908] usb 2-1: can't read configurations, error -22 [ 103.351052][ T5908] usb usb2-port1: unable to enumerate USB device [ 106.770869][ T30] audit: type=1400 audit(1755919632.911:250): avc: denied { read write } for pid=6390 comm="syz.0.122" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.844031][ T6396] netlink: 'syz.1.123': attribute type 10 has an invalid length. [ 106.869100][ T30] audit: type=1400 audit(1755919632.911:251): avc: denied { open } for pid=6390 comm="syz.0.122" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.984308][ T30] audit: type=1400 audit(1755919632.911:252): avc: denied { ioctl } for pid=6390 comm="syz.0.122" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.009373][ T30] audit: type=1400 audit(1755919633.401:253): avc: denied { read write } for pid=6390 comm="syz.0.122" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.100909][ T30] audit: type=1400 audit(1755919633.401:254): avc: denied { open } for pid=6390 comm="syz.0.122" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.412826][ T5854] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.415939][ T30] audit: type=1400 audit(1755919633.681:255): avc: denied { connect } for pid=6394 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.596872][ T5854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.616208][ T5854] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.640567][ T5854] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 107.661238][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.669286][ T5854] usb 4-1: Product: syz [ 107.682273][ T9] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 107.710051][ T5854] usb 4-1: Manufacturer: syz [ 107.718043][ T5854] usb 4-1: SerialNumber: syz [ 107.736117][ T5854] usb 4-1: config 0 descriptor?? [ 107.744599][ T30] audit: type=1400 audit(1755919634.411:256): avc: denied { read write } for pid=6411 comm="syz.4.129" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.767887][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.777980][ T30] audit: type=1400 audit(1755919634.421:257): avc: denied { open } for pid=6411 comm="syz.4.129" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.801152][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.852151][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.867280][ T9] usb 1-1: config 0 has no interfaces? [ 107.873155][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.911480][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.927686][ T9] usb 1-1: config 0 descriptor?? [ 108.226501][ T6419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.249925][ T6419] FAULT_INJECTION: forcing a failure. [ 108.249925][ T6419] name failslab, interval 1, probability 0, space 0, times 1 [ 108.263056][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.1.130 Not tainted syzkaller #0 PREEMPT(full) [ 108.263080][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.263089][ T6419] Call Trace: [ 108.263095][ T6419] [ 108.263102][ T6419] dump_stack_lvl+0x16c/0x1f0 [ 108.263126][ T6419] should_fail_ex+0x512/0x640 [ 108.263144][ T6419] ? fs_reclaim_acquire+0xae/0x150 [ 108.263169][ T6419] ? tomoyo_encode2+0x100/0x3e0 [ 108.263193][ T6419] should_failslab+0xc2/0x120 [ 108.263213][ T6419] __kmalloc_noprof+0xd2/0x510 [ 108.263230][ T6419] ? d_absolute_path+0x136/0x1a0 [ 108.263259][ T6419] tomoyo_encode2+0x100/0x3e0 [ 108.263287][ T6419] tomoyo_encode+0x29/0x50 [ 108.263310][ T6419] tomoyo_realpath_from_path+0x18f/0x6e0 [ 108.263342][ T6419] tomoyo_path_number_perm+0x245/0x580 [ 108.263363][ T6419] ? tomoyo_path_number_perm+0x237/0x580 [ 108.263387][ T6419] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.263410][ T6419] ? find_held_lock+0x2b/0x80 [ 108.263454][ T6419] ? find_held_lock+0x2b/0x80 [ 108.263474][ T6419] ? hook_file_ioctl_common+0x145/0x410 [ 108.263497][ T6419] ? __fget_files+0x20e/0x3c0 [ 108.263521][ T6419] security_file_ioctl+0x9b/0x240 [ 108.263548][ T6419] __x64_sys_ioctl+0xb7/0x210 [ 108.263576][ T6419] do_syscall_64+0xcd/0x4c0 [ 108.263597][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.263614][ T6419] RIP: 0033:0x7f481f18ebe9 [ 108.263628][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.263644][ T6419] RSP: 002b:00007f48200a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.263665][ T6419] RAX: ffffffffffffffda RBX: 00007f481f3b5fa0 RCX: 00007f481f18ebe9 [ 108.263677][ T6419] RDX: 0000200000000800 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 108.263686][ T6419] RBP: 00007f48200a2090 R08: 0000000000000000 R09: 0000000000000000 [ 108.263696][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.263706][ T6419] R13: 00007f481f3b6038 R14: 00007f481f3b5fa0 R15: 00007ffdab14cb98 [ 108.263729][ T6419] [ 108.263746][ T6419] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.498638][ T30] audit: type=1400 audit(1755919635.151:258): avc: denied { create } for pid=6411 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.525864][ T30] audit: type=1400 audit(1755919635.161:259): avc: denied { append } for pid=6411 comm="syz.4.129" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.549803][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.053841][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 110.072921][ T54] usb 4-1: USB disconnect, device number 4 [ 110.127031][ T5857] Bluetooth: hci2: Dropping invalid advertising data [ 110.134013][ T5857] Bluetooth: hci2: Dropping invalid advertising data [ 110.140684][ T5857] Bluetooth: hci2: Dropping invalid advertising data [ 110.147591][ T5857] Bluetooth: hci2: Malformed LE Event: 0x02 [ 110.184697][ T24] usb 1-1: USB disconnect, device number 12 [ 110.300150][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 110.853045][ T9] usb 2-1: config 0 has no interfaces? [ 110.869797][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 110.879297][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 110.888182][ T9] usb 2-1: Product: syz [ 110.892505][ T9] usb 2-1: Manufacturer: syz [ 110.897114][ T9] usb 2-1: SerialNumber: syz [ 110.914759][ T9] usb 2-1: config 0 descriptor?? [ 111.816968][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 111.816982][ T30] audit: type=1400 audit(1755919638.481:263): avc: denied { write } for pid=6450 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 111.843587][ T6426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.861331][ T6457] warning: `syz.2.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.008069][ T30] audit: type=1400 audit(1755919638.661:264): avc: denied { unlink } for pid=5849 comm="syz-executor" name="file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.084069][ T6459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.127066][ T6461] bond1: entered promiscuous mode [ 112.199349][ T30] audit: type=1400 audit(1755919638.861:265): avc: denied { ioctl } for pid=6470 comm="syz.0.144" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 112.246968][ T5908] usb 2-1: USB disconnect, device number 10 [ 112.310864][ T24] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 112.360930][ T54] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 112.484951][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.497104][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.515364][ T54] usb 3-1: not running at top speed; connect to a high speed hub [ 112.534371][ T54] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.558605][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.610545][ T54] usb 3-1: config 1 interface 0 has no altsetting 0 [ 112.617544][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.633355][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.648831][ T54] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.658600][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.666918][ T54] usb 3-1: Product: syz [ 112.682229][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.691679][ T54] usb 3-1: Manufacturer: 㠊 [ 112.696542][ T54] usb 3-1: SerialNumber: syz [ 112.755777][ T6474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.141'. [ 112.781281][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.962359][ T6466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.985806][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 113.004171][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 113.025082][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 113.030413][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 113.046061][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 113.058151][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 113.149712][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.166335][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.214064][ T5857] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 113.252675][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.314783][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.323229][ T5908] usb 5-1: USB disconnect, device number 2 [ 113.372195][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.2.143 [ 113.405710][ T54] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 113.472788][ T54] usb 3-1: USB disconnect, device number 7 [ 113.587266][ T54] usblp0: removed [ 113.707928][ T6479] FAULT_INJECTION: forcing a failure. [ 113.707928][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 113.720913][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) [ 113.720936][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.720945][ T6479] Call Trace: [ 113.720951][ T6479] [ 113.720958][ T6479] dump_stack_lvl+0x16c/0x1f0 [ 113.720981][ T6479] should_fail_ex+0x512/0x640 [ 113.721005][ T6479] should_failslab+0xc2/0x120 [ 113.721026][ T6479] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 113.721046][ T6479] ? skb_clone+0x190/0x3f0 [ 113.721067][ T6479] skb_clone+0x190/0x3f0 [ 113.721084][ T6479] netlink_deliver_tap+0xabd/0xd30 [ 113.721109][ T6479] netlink_unicast+0x64c/0x870 [ 113.721131][ T6479] ? __pfx_netlink_unicast+0x10/0x10 [ 113.721151][ T6479] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 113.721178][ T6479] netlink_sendmsg+0x8d1/0xdd0 [ 113.721202][ T6479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.721221][ T6479] ____sys_sendmsg+0xa95/0xc70 [ 113.721236][ T6479] ? copy_msghdr_from_user+0x10a/0x160 [ 113.721247][ T6479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.721264][ T6479] ? __pfx__kstrtoull+0x10/0x10 [ 113.721277][ T6479] ___sys_sendmsg+0x134/0x1d0 [ 113.721289][ T6479] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.721307][ T6479] ? find_held_lock+0x2b/0x80 [ 113.721330][ T6479] __sys_sendmmsg+0x200/0x420 [ 113.721343][ T6479] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.721364][ T6479] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.721384][ T6479] ? fput+0x9b/0xd0 [ 113.721399][ T6479] ? ksys_write+0x1ac/0x250 [ 113.721410][ T6479] ? __pfx_ksys_write+0x10/0x10 [ 113.721423][ T6479] __x64_sys_sendmmsg+0x9c/0x100 [ 113.721434][ T6479] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.721446][ T6479] do_syscall_64+0xcd/0x4c0 [ 113.721459][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.721470][ T6479] RIP: 0033:0x7f8bfb18ebe9 [ 113.721479][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.721490][ T6479] RSP: 002b:00007f8bfbf22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.721501][ T6479] RAX: ffffffffffffffda RBX: 00007f8bfb3b5fa0 RCX: 00007f8bfb18ebe9 [ 113.721508][ T6479] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 113.721514][ T6479] RBP: 00007f8bfbf22090 R08: 0000000000000000 R09: 0000000000000000 [ 113.721520][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.721526][ T6479] R13: 00007f8bfb3b6038 R14: 00007f8bfb3b5fa0 R15: 00007ffca5069388 [ 113.721539][ T6479] [ 113.974012][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.271658][ T24] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 114.403133][ T6493] IPVS: set_ctl: invalid protocol: 33 172.20.20.50:20003 [ 114.447143][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.544634][ T24] usb 1-1: config 0 has no interfaces? [ 114.619857][ T24] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 114.756897][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.784754][ T24] usb 1-1: config 0 descriptor?? [ 115.019472][ T6501] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 115.625879][ T30] audit: type=1400 audit(1755919642.291:266): avc: denied { execute } for pid=6509 comm="syz.4.157" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 115.879326][ T30] audit: type=1326 audit(1755919642.381:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.4.157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb96218ebe9 code=0x0 [ 116.152772][ T30] audit: type=1400 audit(1755919642.821:268): avc: denied { bind } for pid=6522 comm="syz.2.158" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.194393][ T30] audit: type=1400 audit(1755919642.821:269): avc: denied { name_bind } for pid=6522 comm="syz.2.158" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 116.253614][ T30] audit: type=1400 audit(1755919642.821:270): avc: denied { node_bind } for pid=6522 comm="syz.2.158" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 116.364804][ T6526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.061383][ T9] usb 1-1: USB disconnect, device number 13 [ 118.190484][ T30] audit: type=1400 audit(1755919644.851:271): avc: denied { mount } for pid=6538 comm="syz.0.163" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 118.270858][ T30] audit: type=1400 audit(1755919644.931:272): avc: denied { name_bind } for pid=6543 comm="syz.2.165" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 118.337055][ T30] audit: type=1400 audit(1755919645.001:273): avc: denied { read } for pid=6545 comm="syz.2.166" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.580904][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 118.651761][ T6548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.167'. [ 118.698149][ T30] audit: type=1400 audit(1755919645.361:274): avc: denied { ioctl } for pid=6547 comm="syz.2.167" path="socket:[10836]" dev="sockfs" ino=10836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.777986][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 118.830912][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 118.832364][ T6553] netlink: 'syz.3.169': attribute type 10 has an invalid length. [ 118.840886][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.855849][ T9] usb 1-1: Product: syz [ 118.860005][ T9] usb 1-1: Manufacturer: syz [ 118.864701][ T9] usb 1-1: SerialNumber: syz [ 118.879219][ T9] usb 1-1: config 0 descriptor?? [ 118.887095][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 118.901939][ T9] usb 1-1: Detected FT232H [ 118.932341][ T54] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.952165][ T6553] team0 (unregistering): Port device team_slave_0 removed [ 118.962419][ T6553] team0 (unregistering): Port device team_slave_1 removed [ 118.973017][ T30] audit: type=1400 audit(1755919645.641:275): avc: denied { set_context_mgr } for pid=6552 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 118.982501][ T6555] binder: 6552:6555 ioctl c0306201 200000000080 returned -14 [ 119.020032][ T6555] binder: 6552:6555 ioctl ae01 19 returned -22 [ 119.029181][ T6555] binder: 6552:6555 ioctl ae01 a returned -22 [ 119.074937][ T6557] FAULT_INJECTION: forcing a failure. [ 119.074937][ T6557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.084598][ T54] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.100169][ T6540] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.111240][ T54] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.111280][ T54] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 119.111300][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.113959][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT(full) [ 119.113979][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.113987][ T6557] Call Trace: [ 119.113992][ T6557] [ 119.113998][ T6557] dump_stack_lvl+0x16c/0x1f0 [ 119.114020][ T6557] should_fail_ex+0x512/0x640 [ 119.114040][ T6557] _copy_from_user+0x2e/0xd0 [ 119.114062][ T6557] snd_seq_ioctl+0x1bf/0x410 [ 119.114082][ T6557] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 119.114098][ T6557] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 119.114135][ T6557] ? selinux_file_ioctl+0x180/0x270 [ 119.114155][ T6557] ? selinux_file_ioctl+0xb4/0x270 [ 119.114177][ T6557] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 119.114195][ T6557] __x64_sys_ioctl+0x18b/0x210 [ 119.114221][ T6557] do_syscall_64+0xcd/0x4c0 [ 119.114240][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.114255][ T6557] RIP: 0033:0x7fb96218ebe9 [ 119.114267][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.114281][ T6557] RSP: 002b:00007fb962fc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.114297][ T6557] RAX: ffffffffffffffda RBX: 00007fb9623b5fa0 RCX: 00007fb96218ebe9 [ 119.114306][ T6557] RDX: 0000200000003280 RSI: 00000000c058534f RDI: 0000000000000003 [ 119.114324][ T6557] RBP: 00007fb962fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 119.114332][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.114341][ T6557] R13: 00007fb9623b6038 R14: 00007fb9623b5fa0 R15: 00007ffefdb7e008 [ 119.114361][ T6557] [ 119.142359][ T54] usb 3-1: config 0 descriptor?? [ 119.157031][ T30] audit: type=1400 audit(1755919645.821:276): avc: denied { mount } for pid=6538 comm="syz.0.163" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.402664][ T30] audit: type=1400 audit(1755919646.071:277): avc: denied { read } for pid=6567 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.430129][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 119.441474][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 119.449499][ T9] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 119.577727][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 119.597189][ T54] usb 3-1: string descriptor 0 read error: -71 [ 119.607194][ T54] usb 3-1: USB disconnect, device number 8 [ 119.629545][ T9] usb 1-1: USB disconnect, device number 14 [ 119.689293][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 120.452680][ T9] ftdi_sio 1-1:0.0: device disconnected [ 120.635919][ T30] audit: type=1400 audit(1755919647.301:278): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.782449][ T30] audit: type=1400 audit(1755919647.411:279): avc: denied { create } for pid=6580 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.821796][ T30] audit: type=1400 audit(1755919647.421:280): avc: denied { setopt } for pid=6580 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.651248][ T5854] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 121.833964][ T5854] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 121.843163][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.851444][ T5854] usb 1-1: Product: syz [ 121.855606][ T5854] usb 1-1: Manufacturer: syz [ 121.860260][ T5854] usb 1-1: SerialNumber: syz [ 121.873001][ T5854] usb 1-1: config 0 descriptor?? [ 122.185628][ T6592] capability: warning: `syz.0.177' uses deprecated v2 capabilities in a way that may be insecure [ 122.204306][ T24] usb 1-1: USB disconnect, device number 15 [ 123.330952][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 123.332192][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 123.410613][ T30] audit: type=1400 audit(1755919650.071:281): avc: denied { read write } for pid=6612 comm="syz.2.186" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.471202][ T30] audit: type=1400 audit(1755919650.071:282): avc: denied { open } for pid=6612 comm="syz.2.186" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.569790][ T30] audit: type=1400 audit(1755919650.071:283): avc: denied { ioctl } for pid=6612 comm="syz.2.186" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.690888][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 123.739347][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'. [ 123.787860][ T30] audit: type=1400 audit(1755919650.451:284): avc: denied { create } for pid=6623 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 123.864682][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.881705][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.931104][ T30] audit: type=1400 audit(1755919650.491:285): avc: denied { getopt } for pid=6621 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.960976][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.995265][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.565077][ T6616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.583600][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.177610][ T5854] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 125.772870][ T5854] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.797349][ T5854] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 125.810952][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.829155][ T5854] usb 1-1: Product: syz [ 125.833775][ T5854] usb 1-1: Manufacturer: syz [ 125.838368][ T5854] usb 1-1: SerialNumber: syz [ 125.845721][ T5854] usb 1-1: config 0 descriptor?? [ 126.088336][ T30] audit: type=1400 audit(1755919652.751:286): avc: denied { write } for pid=6646 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.118441][ T6648] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.147376][ T6648] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.165538][ T30] audit: type=1400 audit(1755919652.771:287): avc: denied { read } for pid=6646 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.252615][ T30] audit: type=1400 audit(1755919652.771:288): avc: denied { write } for pid=6646 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.415006][ T6658] bridge0: entered promiscuous mode [ 127.431244][ T9] usb 3-1: USB disconnect, device number 9 [ 127.475719][ T6658] macsec1: entered promiscuous mode [ 128.151889][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 128.194699][ T5854] usb 1-1: USB disconnect, device number 16 [ 128.334997][ T5847] Bluetooth: hci5: unexpected event 0x0f length: 0 < 4 [ 128.503977][ T30] audit: type=1400 audit(1755919655.171:289): avc: denied { mounton } for pid=6668 comm="syz.0.201" path="/39/file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.532736][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 128.542091][ T30] audit: type=1326 audit(1755919655.201:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm=ACED exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa15058ebe9 code=0x0 [ 128.700959][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 128.712929][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.722736][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.733093][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.743030][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.764428][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.773551][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.973798][ T30] audit: type=1400 audit(1755919655.641:291): avc: denied { setopt } for pid=6674 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.998647][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 129.004263][ T9] usbtmc 3-1:16.0: can't read capabilities [ 129.018537][ T30] audit: type=1400 audit(1755919655.681:292): avc: denied { bind } for pid=6674 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.225199][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.238600][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.248436][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.257522][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.266599][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.275679][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.294280][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.303375][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.312441][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.321491][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.330540][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.347136][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.356215][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.365271][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.374322][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.383379][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 129.474704][ T30] audit: type=1400 audit(1755919656.061:293): avc: denied { map } for pid=6677 comm="syz.4.204" path="socket:[11152]" dev="sockfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.526410][ T5928] usb 3-1: USB disconnect, device number 10 [ 130.371247][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.888915][ T30] audit: type=1400 audit(1755919657.551:294): avc: denied { connect } for pid=6707 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.909386][ T5854] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 131.073630][ T5854] usb 3-1: config 15 has an invalid interface number: 236 but max is 0 [ 131.083780][ T5854] usb 3-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 131.103446][ T5854] usb 3-1: config 15 has no interface number 0 [ 131.174570][ T5854] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=ff.5d [ 131.201719][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.212558][ T5854] usb 3-1: Product: syz [ 131.216914][ T5854] usb 3-1: Manufacturer: syz [ 131.227603][ T5854] usb 3-1: SerialNumber: syz [ 131.670959][ T30] audit: type=1400 audit(1755919658.181:295): avc: denied { shutdown } for pid=6719 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.374529][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.387948][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.440980][ T5854] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 132.599101][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 132.674826][ T6734] netlink: 'syz.3.218': attribute type 11 has an invalid length. [ 132.742642][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.826216][ T54] usb 3-1: USB disconnect, device number 11 [ 132.834923][ T5854] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.378513][ T5928] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.444228][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.472758][ T5854] usb 1-1: config 0 descriptor?? [ 134.289531][ T5928] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 134.376519][ T5928] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.388411][ T5928] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.401416][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.410535][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.424835][ T5928] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.432401][ T5928] usb 4-1: invalid MIDI out EP 0 [ 134.563724][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.578799][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.673350][ T30] audit: type=1326 audit(1755919661.341:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 134.777876][ T54] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 134.796937][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.810051][ T5854] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 134.831210][ T30] audit: type=1326 audit(1755919661.341:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 134.833462][ T5928] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 134.899694][ T30] audit: type=1326 audit(1755919661.341:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 134.939337][ T30] audit: type=1326 audit(1755919661.341:299): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 134.965094][ T6751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.982414][ T6751] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.018558][ T5928] usb 4-1: USB disconnect, device number 5 [ 135.044746][ T6751] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.057225][ T6751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.065230][ T6751] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.071945][ T54] usb 2-1: Using ep0 maxpacket: 16 [ 135.079825][ T54] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 135.089171][ T30] audit: type=1326 audit(1755919661.341:300): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 135.132276][ T54] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.147527][ T54] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.187464][ T30] audit: type=1326 audit(1755919661.341:301): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 135.203365][ T24] usb 1-1: USB disconnect, device number 17 [ 135.230781][ T6751] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.261291][ T54] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.270365][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.284594][ T6751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.291394][ T6751] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.317975][ T54] usb 2-1: Product: syz [ 135.326976][ T54] usb 2-1: Manufacturer: syz [ 135.333553][ T54] usb 2-1: SerialNumber: syz [ 135.352324][ T6751] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.365699][ T6751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.372477][ T6751] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.387046][ T6751] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.411458][ T30] audit: type=1326 audit(1755919661.341:302): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 135.435414][ T30] audit: type=1326 audit(1755919661.341:303): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 135.459239][ T30] audit: type=1326 audit(1755919661.341:304): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f847ef8ebe9 code=0x7ffc0000 [ 135.489980][ T6751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.496877][ T6751] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.509758][ T30] audit: type=1326 audit(1755919661.371:305): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f847efc14a5 code=0x7ffc0000 [ 135.592702][ T6751] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.029605][ T54] usb 2-1: 0:2 : does not exist [ 136.823797][ T54] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 136.852482][ T54] usb 2-1: USB disconnect, device number 11 [ 136.882901][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.971205][ T5928] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 137.025653][ T5857] Bluetooth: hci0: command 0x0401 tx timeout [ 137.043611][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.051350][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.092981][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.129070][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.139990][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.215338][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.251079][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 137.272033][ T5928] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 137.293891][ T5928] usb 1-1: config 0 has no interface number 0 [ 137.319689][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.331578][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.341043][ T5928] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.349964][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.396208][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.405311][ T5928] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 137.423748][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.061029][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 138.090935][ T5928] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 138.120907][ T5928] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 138.190961][ T5928] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 138.267334][ T5928] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.300599][ T5928] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 138.405625][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 138.482323][ T5928] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 255 [ 138.668028][ T5928] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.828447][ T5928] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 138.856618][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.897132][ T5928] usb 1-1: Product: syz [ 138.908200][ T5928] usb 1-1: Manufacturer: syz [ 138.923387][ T5928] usb 1-1: SerialNumber: syz [ 138.960093][ T5928] usb 1-1: config 0 descriptor?? [ 138.977062][ T6765] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 138.984306][ T6765] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 138.992804][ T5928] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 139.092793][ T5857] Bluetooth: hci0: command 0x0401 tx timeout [ 139.131114][ T5928] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 139.174131][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.339472][ T6801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.352523][ T6801] block device autoloading is deprecated and will be removed. [ 139.369457][ T5928] scsi host1: microtekX6 [ 139.392436][ T5928] usb 1-1: USB disconnect, device number 18 [ 139.411020][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.491700][ T55] microtek usb (rev 0.4.3): error -19 submitting URB [ 139.500366][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.542824][ T55] microtek usb (rev 0.4.3): error -19 submitting URB [ 139.560923][ T5900] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.581342][ T55] microtek usb (rev 0.4.3): error -19 submitting URB [ 139.733544][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 140.141777][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 140.178445][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.346573][ T5900] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 140.371007][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.389296][ T5900] usb 4-1: Product: syz [ 140.407369][ T5900] usb 4-1: Manufacturer: syz [ 140.451969][ T5900] usb 4-1: SerialNumber: syz [ 140.474069][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 140.474084][ T30] audit: type=1400 audit(1755919667.141:334): avc: denied { accept } for pid=6811 comm="syz.1.238" path="socket:[12511]" dev="sockfs" ino=12511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.616647][ T5900] usb 4-1: config 0 descriptor?? [ 140.645390][ T5900] usb 4-1: bad CDC descriptors [ 140.751612][ T5900] usb 4-1: unsupported MDLM descriptors [ 140.946439][ T6821] FAULT_INJECTION: forcing a failure. [ 140.946439][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.947378][ T6821] [ 140.947385][ T6821] ====================================================== [ 140.947391][ T6821] WARNING: possible circular locking dependency detected [ 140.947397][ T6821] syzkaller #0 Not tainted [ 140.947405][ T6821] ------------------------------------------------------ [ 140.947410][ T6821] syz.2.239/6821 is trying to acquire lock: [ 140.947419][ T6821] ffffffff8e4ce840 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 140.947472][ T6821] [ 140.947472][ T6821] but task is already holding lock: [ 140.947476][ T6821] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 140.947514][ T6821] [ 140.947514][ T6821] which lock already depends on the new lock. [ 140.947514][ T6821] [ 140.947519][ T6821] [ 140.947519][ T6821] the existing dependency chain (in reverse order) is: [ 140.947524][ T6821] [ 140.947524][ T6821] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 140.947544][ T6821] _raw_spin_lock_nested+0x31/0x40 [ 140.947569][ T6821] raw_spin_rq_lock_nested+0x29/0x130 [ 140.947588][ T6821] task_rq_lock+0xcf/0x490 [ 140.947605][ T6821] cgroup_move_task+0x81/0x2a0 [ 140.947627][ T6821] css_set_move_task+0x288/0x5f0 [ 140.947641][ T6821] cgroup_post_fork+0x201/0x9e0 [ 140.947660][ T6821] copy_process+0x5cfa/0x7690 [ 140.947681][ T6821] kernel_clone+0xfc/0x930 [ 140.947701][ T6821] user_mode_thread+0xc7/0x110 [ 140.947721][ T6821] rest_init+0x23/0x2b0 [ 140.947741][ T6821] start_kernel+0x3ee/0x4d0 [ 140.947765][ T6821] x86_64_start_reservations+0x18/0x30 [ 140.947790][ T6821] x86_64_start_kernel+0x130/0x190 [ 140.947814][ T6821] common_startup_64+0x13e/0x148 [ 140.947831][ T6821] [ 140.947831][ T6821] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 140.947851][ T6821] _raw_spin_lock_irqsave+0x3a/0x60 [ 140.947875][ T6821] try_to_wake_up+0xb7/0x1870 [ 140.947891][ T6821] create_worker+0x339/0x7e0 [ 140.947905][ T6821] workqueue_init+0x4e5/0xbd0 [ 140.947922][ T6821] kernel_init_freeable+0x32f/0x910 [ 140.947946][ T6821] kernel_init+0x1c/0x2b0 [ 140.947965][ T6821] ret_from_fork+0x5d7/0x6f0 [ 140.947979][ T6821] ret_from_fork_asm+0x1a/0x30 [ 140.947998][ T6821] [ 140.947998][ T6821] -> #3 (&pool->lock){-.-.}-{2:2}: [ 140.948017][ T6821] _raw_spin_lock+0x2e/0x40 [ 140.948039][ T6821] __queue_work+0x26b/0x1160 [ 140.948055][ T6821] queue_work_on+0x15f/0x1f0 [ 140.948071][ T6821] rpm_suspend+0xeba/0x11d0 [ 140.948087][ T6821] rpm_idle+0x5b4/0x730 [ 140.948102][ T6821] __pm_runtime_idle+0xba/0x1a0 [ 140.948118][ T6821] __device_attach+0x37e/0x4b0 [ 140.948134][ T6821] bus_probe_device+0x17f/0x1c0 [ 140.948146][ T6821] device_add+0x1148/0x1aa0 [ 140.948165][ T6821] serial_base_port_add+0x362/0x4c0 [ 140.948185][ T6821] serial_core_register_port+0x13c/0x25b0 [ 140.948204][ T6821] serial8250_register_8250_port+0x1599/0x23c0 [ 140.948227][ T6821] serial_pnp_probe+0x431/0x910 [ 140.948250][ T6821] pnp_device_probe+0x2a8/0x4d0 [ 140.948269][ T6821] really_probe+0x241/0xa90 [ 140.948283][ T6821] __driver_probe_device+0x1de/0x440 [ 140.948299][ T6821] driver_probe_device+0x4c/0x1b0 [ 140.948316][ T6821] __driver_attach+0x283/0x580 [ 140.948332][ T6821] bus_for_each_dev+0x13e/0x1d0 [ 140.948355][ T6821] bus_add_driver+0x2e9/0x690 [ 140.948369][ T6821] driver_register+0x15c/0x4b0 [ 140.948387][ T6821] serial8250_init+0xc9/0x1e0 [ 140.948403][ T6821] do_one_initcall+0x120/0x6e0 [ 140.948422][ T6821] kernel_init_freeable+0x5c2/0x910 [ 140.948446][ T6821] kernel_init+0x1c/0x2b0 [ 140.948470][ T6821] ret_from_fork+0x5d7/0x6f0 [ 140.948484][ T6821] ret_from_fork_asm+0x1a/0x30 [ 140.948503][ T6821] [ 140.948503][ T6821] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 140.948524][ T6821] _raw_spin_lock_irqsave+0x3a/0x60 [ 140.948547][ T6821] __pm_runtime_resume+0xa9/0x170 [ 140.948564][ T6821] __uart_start+0x1b0/0x500 [ 140.948588][ T6821] uart_write+0x218/0xb30 [ 140.948604][ T6821] n_tty_write+0x41f/0x11e0 [ 140.948623][ T6821] file_tty_write.constprop.0+0x504/0x9b0 [ 140.948640][ T6821] redirected_tty_write+0xd4/0x150 [ 140.948655][ T6821] vfs_write+0x7d3/0x11d0 [ 140.948671][ T6821] ksys_write+0x12a/0x250 [ 140.948686][ T6821] do_syscall_64+0xcd/0x4c0 [ 140.948702][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.948718][ T6821] [ 140.948718][ T6821] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 140.948738][ T6821] _raw_spin_lock_irqsave+0x3a/0x60 [ 140.948762][ T6821] serial8250_console_write+0x181/0x1890 [ 140.948784][ T6821] console_flush_all+0x801/0xc60 [ 140.948802][ T6821] console_unlock+0xd8/0x210 [ 140.948819][ T6821] vprintk_emit+0x418/0x6d0 [ 140.948837][ T6821] _printk+0xc7/0x100 [ 140.948849][ T6821] register_console+0xc2d/0x11b0 [ 140.948868][ T6821] univ8250_console_init+0x5f/0x90 [ 140.948883][ T6821] console_init+0x14f/0x680 [ 140.948897][ T6821] start_kernel+0x29f/0x4d0 [ 140.948920][ T6821] x86_64_start_reservations+0x18/0x30 [ 140.948944][ T6821] x86_64_start_kernel+0x130/0x190 [ 140.948968][ T6821] common_startup_64+0x13e/0x148 [ 140.948984][ T6821] [ 140.948984][ T6821] -> #0 (console_owner){-.-.}-{0:0}: [ 140.949004][ T6821] __lock_acquire+0x12a6/0x1ce0 [ 140.949028][ T6821] lock_acquire+0x179/0x350 [ 140.949051][ T6821] console_lock_spinning_enable+0xb0/0xd0 [ 140.949069][ T6821] console_flush_all+0x7aa/0xc60 [ 140.949087][ T6821] console_unlock+0xd8/0x210 [ 140.949104][ T6821] vprintk_emit+0x418/0x6d0 [ 140.949122][ T6821] _printk+0xc7/0x100 [ 140.949135][ T6821] should_fail_ex+0x4e7/0x640 [ 140.949151][ T6821] strncpy_from_user+0x3b/0x2e0 [ 140.949166][ T6821] strncpy_from_user_nofault+0x7f/0x180 [ 140.949186][ T6821] bpf_bprintf_prepare+0xe90/0x13f0 [ 140.949208][ T6821] bpf_trace_printk+0xda/0x190 [ 140.949222][ T6821] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 140.949234][ T6821] bpf_trace_run2+0x236/0x590 [ 140.949249][ T6821] __bpf_trace_contention_begin+0xc9/0x110 [ 140.949274][ T6821] trace_contention_begin.constprop.0+0xde/0x160 [ 140.949292][ T6821] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 140.949309][ T6821] do_raw_spin_lock+0x20e/0x2b0 [ 140.949324][ T6821] raw_spin_rq_lock_nested+0x7e/0x130 [ 140.949343][ T6821] __schedule+0x307/0x5de0 [ 140.949355][ T6821] preempt_schedule_irq+0x51/0x90 [ 140.949370][ T6821] irqentry_exit+0x36/0x90 [ 140.949384][ T6821] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 140.949400][ T6821] lock_release+0x45/0x2f0 [ 140.949423][ T6821] get_task_pid+0x14e/0x390 [ 140.949436][ T6821] proc_pid_make_inode+0xbb/0x160 [ 140.949462][ T6821] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 140.949485][ T6821] proc_task_instantiate+0x51/0x1e0 [ 140.949507][ T6821] proc_task_lookup+0x4c4/0x5c0 [ 140.949527][ T6821] __lookup_slow+0x251/0x460 [ 140.949550][ T6821] walk_component+0x353/0x5b0 [ 140.949564][ T6821] link_path_walk+0x627/0xe20 [ 140.949578][ T6821] path_openat+0x1b0/0x2cb0 [ 140.949593][ T6821] do_filp_open+0x20b/0x470 [ 140.949610][ T6821] do_sys_openat2+0x11b/0x1d0 [ 140.949631][ T6821] __x64_sys_openat+0x174/0x210 [ 140.949652][ T6821] do_syscall_64+0xcd/0x4c0 [ 140.949668][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.949684][ T6821] [ 140.949684][ T6821] other info that might help us debug this: [ 140.949684][ T6821] [ 140.949688][ T6821] Chain exists of: [ 140.949688][ T6821] console_owner --> &p->pi_lock --> &rq->__lock [ 140.949688][ T6821] [ 140.949711][ T6821] Possible unsafe locking scenario: [ 140.949711][ T6821] [ 140.949715][ T6821] CPU0 CPU1 [ 140.949719][ T6821] ---- ---- [ 140.949723][ T6821] lock(&rq->__lock); [ 140.949733][ T6821] lock(&p->pi_lock); [ 140.949743][ T6821] lock(&rq->__lock); [ 140.949753][ T6821] lock(console_owner); [ 140.949763][ T6821] [ 140.949763][ T6821] *** DEADLOCK *** [ 140.949763][ T6821] [ 140.949766][ T6821] 6 locks held by syz.2.239/6821: [ 140.949775][ T6821] #0: ffff888075d2d180 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 140.949814][ T6821] #1: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: get_task_pid+0x29/0x390 [ 140.949848][ T6821] #2: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 140.949887][ T6821] #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 140.949923][ T6821] #4: ffffffff8e5aec80 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 140.949957][ T6821] #5: ffffffff8e5aecf0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 140.949995][ T6821] [ 140.949995][ T6821] stack backtrace: [ 140.950003][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT(full) [ 140.950021][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.950030][ T6821] Call Trace: [ 140.950036][ T6821] [ 140.950042][ T6821] dump_stack_lvl+0x116/0x1f0 [ 140.950060][ T6821] print_circular_bug+0x275/0x350 [ 140.950085][ T6821] check_noncircular+0x14c/0x170 [ 140.950113][ T6821] __lock_acquire+0x12a6/0x1ce0 [ 140.950142][ T6821] lock_acquire+0x179/0x350 [ 140.950166][ T6821] ? console_lock_spinning_enable+0x9f/0xd0 [ 140.950186][ T6821] ? console_lock_spinning_enable+0x88/0xd0 [ 140.950224][ T6821] console_lock_spinning_enable+0xb0/0xd0 [ 140.950242][ T6821] ? console_lock_spinning_enable+0x9f/0xd0 [ 140.950261][ T6821] console_flush_all+0x7aa/0xc60 [ 140.950283][ T6821] ? __pfx_console_flush_all+0x10/0x10 [ 140.950306][ T6821] ? is_printk_cpu_sync_owner+0x32/0x40 [ 140.950330][ T6821] console_unlock+0xd8/0x210 [ 140.950348][ T6821] ? __pfx_console_unlock+0x10/0x10 [ 140.950367][ T6821] ? do_raw_spin_unlock+0xe0/0x230 [ 140.950385][ T6821] ? _printk+0xc7/0x100 [ 140.950399][ T6821] ? __down_trylock_console_sem+0xb0/0x140 [ 140.950417][ T6821] vprintk_emit+0x418/0x6d0 [ 140.950437][ T6821] ? __pfx_vprintk_emit+0x10/0x10 [ 140.950463][ T6821] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 140.950482][ T6821] _printk+0xc7/0x100 [ 140.950496][ T6821] ? __pfx__printk+0x10/0x10 [ 140.950512][ T6821] ? __pfx____ratelimit+0x10/0x10 [ 140.950529][ T6821] should_fail_ex+0x4e7/0x640 [ 140.950548][ T6821] strncpy_from_user+0x3b/0x2e0 [ 140.950563][ T6821] ? __pfx_bstr_printf+0x10/0x10 [ 140.950581][ T6821] strncpy_from_user_nofault+0x7f/0x180 [ 140.950601][ T6821] bpf_bprintf_prepare+0xe90/0x13f0 [ 140.950629][ T6821] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 140.950654][ T6821] ? bpf_trace_run2+0x3e1/0x590 [ 140.950671][ T6821] ? find_held_lock+0x2b/0x80 [ 140.950693][ T6821] ? bpf_trace_run2+0x3e1/0x590 [ 140.950709][ T6821] bpf_trace_printk+0xda/0x190 [ 140.950724][ T6821] ? __pfx_bpf_trace_printk+0x10/0x10 [ 140.950738][ T6821] ? __pfx_bpf_trace_run2+0x10/0x10 [ 140.950757][ T6821] ? bpf_trace_run2+0x3e1/0x590 [ 140.950777][ T6821] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 140.950790][ T6821] bpf_trace_run2+0x236/0x590 [ 140.950808][ T6821] ? __lock_acquire+0x62e/0x1ce0 [ 140.950829][ T6821] ? __pfx_bpf_trace_run2+0x10/0x10 [ 140.950849][ T6821] __bpf_trace_contention_begin+0xc9/0x110 [ 140.950874][ T6821] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 140.950902][ T6821] ? __lock_acquire+0xb97/0x1ce0 [ 140.950927][ T6821] trace_contention_begin.constprop.0+0xde/0x160 [ 140.950946][ T6821] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 140.950967][ T6821] ? __lock_acquire+0xb97/0x1ce0 [ 140.950992][ T6821] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 140.951011][ T6821] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.951031][ T6821] do_raw_spin_lock+0x20e/0x2b0 [ 140.951049][ T6821] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.951066][ T6821] ? rcu_qs+0x2b/0xe0 [ 140.951084][ T6821] ? rcu_note_context_switch+0x192/0x1e00 [ 140.951107][ T6821] raw_spin_rq_lock_nested+0x7e/0x130 [ 140.951127][ T6821] ? preempt_schedule_irq+0x51/0x90 [ 140.951143][ T6821] __schedule+0x307/0x5de0 [ 140.951156][ T6821] ? do_syscall_64+0xcd/0x4c0 [ 140.951175][ T6821] ? __lock_acquire+0xb97/0x1ce0 [ 140.951203][ T6821] ? __pfx___schedule+0x10/0x10 [ 140.951219][ T6821] ? timestamp_truncate+0x21e/0x2d0 [ 140.951241][ T6821] ? mark_held_locks+0x49/0x80 [ 140.951266][ T6821] preempt_schedule_irq+0x51/0x90 [ 140.951282][ T6821] irqentry_exit+0x36/0x90 [ 140.951297][ T6821] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 140.951314][ T6821] RIP: 0010:lock_release+0x45/0x2f0 [ 140.951339][ T6821] Code: b9 8f 3e 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 d2 8f 3e 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 1b 83 13 0f <0f> 82 b1 01 00 00 8b 3d d3 b4 13 0f 85 ff 0f 84 25 01 00 00 65 8b [ 140.951356][ T6821] RSP: 0018:ffffc900102af770 EFLAGS: 00000297 [ 140.951369][ T6821] RAX: 0000000000000000 RBX: ffffffff8e5c1220 RCX: ffffffff81843fe1 [ 140.951381][ T6821] RDX: ffff8880787c8000 RSI: ffffffff81843ee9 RDI: ffffffff8e5c1220 [ 140.951393][ T6821] RBP: ffff88802a6d2f00 R08: 0000000000000001 R09: 0000000000000000 [ 140.951403][ T6821] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff81843ee9 [ 140.951413][ T6821] R13: fffffffffffffffe R14: ffff88803035c8a8 R15: ffff8880261021c0 [ 140.951425][ T6821] ? get_task_pid+0x149/0x390 [ 140.951440][ T6821] ? get_task_pid+0x241/0x390 [ 140.951460][ T6821] ? get_task_pid+0x149/0x390 [ 140.951478][ T6821] get_task_pid+0x14e/0x390 [ 140.951492][ T6821] proc_pid_make_inode+0xbb/0x160 [ 140.951514][ T6821] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 140.951540][ T6821] proc_task_instantiate+0x51/0x1e0 [ 140.951564][ T6821] proc_task_lookup+0x4c4/0x5c0 [ 140.951588][ T6821] __lookup_slow+0x251/0x460 [ 140.951611][ T6821] ? __pfx___lookup_slow+0x10/0x10 [ 140.951642][ T6821] ? lookup_fast+0x156/0x610 [ 140.951657][ T6821] ? __pfx_proc_pid_permission+0x10/0x10 [ 140.951678][ T6821] walk_component+0x353/0x5b0 [ 140.951695][ T6821] link_path_walk+0x627/0xe20 [ 140.951716][ T6821] path_openat+0x1b0/0x2cb0 [ 140.951734][ T6821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.951755][ T6821] ? __pfx_path_openat+0x10/0x10 [ 140.951777][ T6821] do_filp_open+0x20b/0x470 [ 140.951796][ T6821] ? __pfx_do_filp_open+0x10/0x10 [ 140.951818][ T6821] ? __pfx_kfree_link+0x10/0x10 [ 140.951847][ T6821] ? alloc_fd+0x471/0x7d0 [ 140.951868][ T6821] do_sys_openat2+0x11b/0x1d0 [ 140.951892][ T6821] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.951916][ T6821] ? __fget_files+0x20e/0x3c0 [ 140.951936][ T6821] __x64_sys_openat+0x174/0x210 [ 140.951959][ T6821] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.951982][ T6821] ? ksys_write+0x1ac/0x250 [ 140.952003][ T6821] do_syscall_64+0xcd/0x4c0 [ 140.952023][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.952039][ T6821] RIP: 0033:0x7f847ef8d550 [ 140.952052][ T6821] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 140.952067][ T6821] RSP: 002b:00007f847fe0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 140.952082][ T6821] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f847ef8d550 [ 140.952092][ T6821] RDX: 0000000000000002 RSI: 00007f847fe0dfa0 RDI: 00000000ffffff9c [ 140.952103][ T6821] RBP: 00007f847fe0dfa0 R08: 0000000000000000 R09: 00007f847fe0dcd5 [ 140.952113][ T6821] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 140.952123][ T6821] R13: 00007f847f1b6218 R14: 00007f847f1b6180 R15: 00007ffdfc8b7c78 [ 140.952139][ T6821] [ 141.799293][ T5857] Bluetooth: hci0: command 0x0401 tx timeout [ 141.807591][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT(full) [ 141.807611][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.807622][ T6821] Call Trace: [ 141.807627][ T6821] [ 141.807633][ T6821] dump_stack_lvl+0x116/0x1f0 [ 141.807653][ T6821] should_fail_ex+0x512/0x640 [ 141.807672][ T6821] strncpy_from_user+0x3b/0x2e0 [ 141.807686][ T6821] ? __pfx_bstr_printf+0x10/0x10 [ 141.807703][ T6821] strncpy_from_user_nofault+0x7f/0x180 [ 141.807722][ T6821] bpf_bprintf_prepare+0xe90/0x13f0 [ 141.807748][ T6821] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 141.807770][ T6821] ? bpf_trace_run2+0x3e1/0x590 [ 141.807785][ T6821] ? find_held_lock+0x2b/0x80 [ 141.807806][ T6821] ? bpf_trace_run2+0x3e1/0x590 [ 141.807821][ T6821] bpf_trace_printk+0xda/0x190 [ 141.807835][ T6821] ? __pfx_bpf_trace_printk+0x10/0x10 [ 141.807848][ T6821] ? __pfx_bpf_trace_run2+0x10/0x10 [ 141.807865][ T6821] ? bpf_trace_run2+0x3e1/0x590 [ 141.807883][ T6821] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 141.807895][ T6821] bpf_trace_run2+0x236/0x590 [ 141.807909][ T6821] ? __lock_acquire+0x62e/0x1ce0 [ 141.807932][ T6821] ? __pfx_bpf_trace_run2+0x10/0x10 [ 141.807950][ T6821] __bpf_trace_contention_begin+0xc9/0x110 [ 141.807974][ T6821] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 141.807998][ T6821] ? __lock_acquire+0xb97/0x1ce0 [ 141.808022][ T6821] trace_contention_begin.constprop.0+0xde/0x160 [ 141.808039][ T6821] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 141.808058][ T6821] ? __lock_acquire+0xb97/0x1ce0 [ 141.808080][ T6821] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 141.808098][ T6821] ? do_raw_spin_lock+0x12c/0x2b0 [ 141.808116][ T6821] do_raw_spin_lock+0x20e/0x2b0 [ 141.808131][ T6821] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 141.808147][ T6821] ? rcu_qs+0x2b/0xe0 [ 141.808163][ T6821] ? rcu_note_context_switch+0x192/0x1e00 [ 141.808183][ T6821] raw_spin_rq_lock_nested+0x7e/0x130 [ 141.808207][ T6821] ? preempt_schedule_irq+0x51/0x90 [ 141.808222][ T6821] __schedule+0x307/0x5de0 [ 141.808235][ T6821] ? do_syscall_64+0xcd/0x4c0 [ 141.808252][ T6821] ? __lock_acquire+0xb97/0x1ce0 [ 141.808277][ T6821] ? __pfx___schedule+0x10/0x10 [ 141.808292][ T6821] ? timestamp_truncate+0x21e/0x2d0 [ 141.808311][ T6821] ? mark_held_locks+0x49/0x80 [ 141.808334][ T6821] preempt_schedule_irq+0x51/0x90 [ 141.808348][ T6821] irqentry_exit+0x36/0x90 [ 141.808363][ T6821] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 141.808379][ T6821] RIP: 0010:lock_release+0x45/0x2f0 [ 141.808402][ T6821] Code: b9 8f 3e 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 d2 8f 3e 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 1b 83 13 0f <0f> 82 b1 01 00 00 8b 3d d3 b4 13 0f 85 ff 0f 84 25 01 00 00 65 8b [ 141.808417][ T6821] RSP: 0018:ffffc900102af770 EFLAGS: 00000297 [ 141.808431][ T6821] RAX: 0000000000000000 RBX: ffffffff8e5c1220 RCX: ffffffff81843fe1 [ 141.808441][ T6821] RDX: ffff8880787c8000 RSI: ffffffff81843ee9 RDI: ffffffff8e5c1220 [ 141.808450][ T6821] RBP: ffff88802a6d2f00 R08: 0000000000000001 R09: 0000000000000000 [ 141.808459][ T6821] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff81843ee9 [ 141.808469][ T6821] R13: fffffffffffffffe R14: ffff88803035c8a8 R15: ffff8880261021c0 [ 141.808479][ T6821] ? get_task_pid+0x149/0x390 [ 141.808495][ T6821] ? get_task_pid+0x241/0x390 [ 141.808507][ T6821] ? get_task_pid+0x149/0x390 [ 141.808523][ T6821] get_task_pid+0x14e/0x390 [ 141.808536][ T6821] proc_pid_make_inode+0xbb/0x160 [ 141.808558][ T6821] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 141.808580][ T6821] proc_task_instantiate+0x51/0x1e0 [ 141.808602][ T6821] proc_task_lookup+0x4c4/0x5c0 [ 141.808622][ T6821] __lookup_slow+0x251/0x460 [ 141.808645][ T6821] ? __pfx___lookup_slow+0x10/0x10 [ 141.808672][ T6821] ? lookup_fast+0x156/0x610 [ 141.808685][ T6821] ? __pfx_proc_pid_permission+0x10/0x10 [ 141.808703][ T6821] walk_component+0x353/0x5b0 [ 141.808718][ T6821] link_path_walk+0x627/0xe20 [ 141.808736][ T6821] path_openat+0x1b0/0x2cb0 [ 141.808751][ T6821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.808770][ T6821] ? __pfx_path_openat+0x10/0x10 [ 141.808788][ T6821] do_filp_open+0x20b/0x470 [ 141.808804][ T6821] ? __pfx_do_filp_open+0x10/0x10 [ 141.808824][ T6821] ? __pfx_kfree_link+0x10/0x10 [ 141.808848][ T6821] ? alloc_fd+0x471/0x7d0 [ 141.808866][ T6821] do_sys_openat2+0x11b/0x1d0 [ 141.808887][ T6821] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.808907][ T6821] ? __fget_files+0x20e/0x3c0 [ 141.808924][ T6821] __x64_sys_openat+0x174/0x210 [ 141.808945][ T6821] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.808964][ T6821] ? ksys_write+0x1ac/0x250 [ 141.808982][ T6821] do_syscall_64+0xcd/0x4c0 [ 141.808999][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.809013][ T6821] RIP: 0033:0x7f847ef8d550 [ 141.809025][ T6821] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 141.809039][ T6821] RSP: 002b:00007f847fe0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 141.809053][ T6821] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f847ef8d550 [ 141.809062][ T6821] RDX: 0000000000000002 RSI: 00007f847fe0dfa0 RDI: 00000000ffffff9c [ 141.809072][ T6821] RBP: 00007f847fe0dfa0 R08: 0000000000000000 R09: 00007f847fe0dcd5 [ 141.809081][ T6821] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 141.809090][ T6821] R13: 00007f847f1b6218 R14: 00007f847f1b6180 R15: 00007ffdfc8b7c78 [ 141.809104][ T6821] [ 141.915004][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.986793][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.002690][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.035085][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 143.128496][ T5928] usb 4-1: USB disconnect, device number 6