last executing test programs: 17.985537796s ago: executing program 3 (id=471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x12000) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001880)="2cbddd39dad9edc182feabcec21043ac", 0x10}], 0x1, 0x0, 0x0, 0x40815}], 0x1, 0x4000000) sendmmsg$unix(r1, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000001840), 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x91) 16.682586388s ago: executing program 3 (id=476): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) creat(0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.011281392s ago: executing program 3 (id=479): socket(0x1e, 0x4, 0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, 0x0, 0x0) exit(0x8) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) r4 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x14, 0x8, 0x6, 0xb00, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 12.312653514s ago: executing program 4 (id=482): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) inotify_init1(0x0) 12.117128602s ago: executing program 4 (id=483): r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 11.191308106s ago: executing program 4 (id=484): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000740)) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x5, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c007fc6adba35326a89fd0712eea8e98875f31b824cb979da00001d27701c94bb1648d50d641e19b3d1e84c65de0fbe604975a82e099e495492dbc5d866434d083db8e4c7302d692c18d9167a6d76224f9b996ca4c622bbe97c378ff96f2966f8ba180b72fe3146b99471579772075548df8f2f3da89f4651ee6658a85606eb7b45f9746af02f202732cd936192610318099e1eba2ca64122aebaf31c08487a24fee253f29a4a11107c08fb6b2a1cd53690faabd8935b96a27083159e4d3351ec811259e8d332c169d15216517584251edf360ac7c4fb7f7abaa5e91a00000000000000", @ANYRES16=r11, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=0x0], 0x1c}}, 0x0) 9.763984207s ago: executing program 0 (id=485): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 9.593191342s ago: executing program 2 (id=486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x12000) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001880)="2cbddd39dad9edc182feabcec21043ac", 0x10}], 0x1, 0x0, 0x0, 0x40815}], 0x1, 0x4000000) sendmmsg$unix(r1, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000001840), 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x91) 9.183471617s ago: executing program 0 (id=487): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) 8.76995669s ago: executing program 0 (id=488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40044146, &(0x7f00000000c0)=0x7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r6, 0x0, 0x0) 8.139942288s ago: executing program 2 (id=490): openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x35, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x20}}, 0x0) 5.627920173s ago: executing program 3 (id=492): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffed4, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs$pagemap(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={r4, 0x98}, &(0x7f0000000380)=0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) accept(r6, 0x0, 0x0) 5.627242529s ago: executing program 2 (id=493): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf0000000500", @ANYRES32, @ANYBLOB="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"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.290823758s ago: executing program 4 (id=494): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) listen(0xffffffffffffffff, 0x267) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) 4.360924654s ago: executing program 2 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x2, 0x3, 0x25, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7800, 0x80, 0x2, 0x6}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000004c0)=r2) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r4, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) dup2(r5, r3) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={0x0, @l2={0x1f, 0x8, @none, 0xfff0, 0x2}, @ethernet={0x306, @local}, @l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0xfffa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x10000, 0x9}) 4.308187849s ago: executing program 4 (id=496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) creat(0x0, 0x4b) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40044146, &(0x7f00000000c0)=0x7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r5, 0x0, 0x0) 3.850600649s ago: executing program 1 (id=497): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 3.792697005s ago: executing program 0 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.791228912s ago: executing program 2 (id=499): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) 3.261367383s ago: executing program 1 (id=500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x12000) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001880)="2cbddd39dad9edc182feabcec21043ac", 0x10}], 0x1, 0x0, 0x0, 0x40815}], 0x1, 0x4000000) sendmmsg$unix(r1, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000001840), 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x91) 3.052545388s ago: executing program 0 (id=501): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$video(0x0, 0xc000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) listen(0xffffffffffffffff, 0x267) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) 3.031932602s ago: executing program 3 (id=502): bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) 3.00321646s ago: executing program 2 (id=503): socket(0x1e, 0x4, 0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, 0x0, 0x0) exit(0x8) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) r4 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x14, 0x8, 0x6, 0xb00, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 2.363225993s ago: executing program 1 (id=504): openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x35, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x20}}, 0x0) 1.467247885s ago: executing program 0 (id=505): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000740)) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x5, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c007fc6adba35326a89fd0712eea8e98875f31b824cb979da00001d27701c94bb1648d50d641e19b3d1e84c65de0fbe604975a82e099e495492dbc5d866434d083db8e4c7302d692c18d9167a6d76224f9b996ca4c622bbe97c378ff96f2966f8ba180b72fe3146b99471579772075548df8f2f3da89f4651ee6658a85606eb7b45f9746af02f202732cd936192610318099e1eba2ca64122aebaf31c08487a24fee253f29a4a11107c08fb6b2a1cd53690faabd8935b96a27083159e4d3351ec811259e8d332c169d15216517584251edf360ac7c4fb7f7abaa5e91a00000000000000", @ANYRES16=r11, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=0x0], 0x1c}}, 0x0) 1.392620851s ago: executing program 1 (id=506): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf0000000500", @ANYRES32, @ANYBLOB="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"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.340747155s ago: executing program 3 (id=507): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffed4, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs$pagemap(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={r4, 0x98}, &(0x7f0000000380)=0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r6, 0x0, 0x0) 1.023957434s ago: executing program 1 (id=508): syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e0c"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x2, 0x0, 0x4005) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x363000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x21c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 33.50348ms ago: executing program 1 (id=509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40044146, &(0x7f00000000c0)=0x7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r6, 0x0, 0x0) 0s ago: executing program 4 (id=510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) creat(0x0, 0x4b) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x12c5, 0x80c002) write$binfmt_aout(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): r:sysadm_t tclass=kcm_socket permissive=1 [ 90.933645][ T5853] dvb-usb: bulk message failed: -22 (6/0) [ 90.946264][ T5853] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 90.960577][ T30] audit: type=1400 audit(1760485352.602:219): avc: denied { map } for pid=6130 comm="syz.4.59" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.984356][ T848] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 90.993725][ T30] audit: type=1400 audit(1760485352.602:220): avc: denied { execute } for pid=6130 comm="syz.4.59" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.023588][ T5853] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 91.049652][ T848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.063795][ T5853] dvb-usb: schedule remote query interval to 150 msecs. [ 91.083684][ T848] usb 3-1: config 0 descriptor?? [ 91.088986][ T5853] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.097274][ T30] audit: type=1400 audit(1760485352.742:221): avc: denied { add_name } for pid=6134 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.122958][ T30] audit: type=1400 audit(1760485352.742:222): avc: denied { create } for pid=6134 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.147359][ T848] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 91.156335][ T5853] usb 5-1: USB disconnect, device number 3 [ 91.166322][ T5924] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.195272][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 91.214083][ T30] audit: type=1400 audit(1760485352.742:223): avc: denied { write } for pid=6134 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=2203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.221897][ T5924] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 91.240571][ T30] audit: type=1400 audit(1760485352.742:224): avc: denied { append } for pid=6134 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=2203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.252404][ T30] audit: type=1400 audit(1760485353.002:225): avc: denied { remove_name } for pid=6162 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=2203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.306153][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.322088][ T5853] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 91.322430][ T5924] usb 4-1: config 0 descriptor?? [ 91.338609][ T5924] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 91.347376][ T5924] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 91.355649][ T5924] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 91.558338][ T5924] usb 4-1: USB disconnect, device number 6 [ 91.667438][ T978] usb 2-1: USB disconnect, device number 4 [ 91.816690][ T6189] Bluetooth: MGMT ver 1.23 [ 92.416949][ T6202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.72'. [ 92.507716][ T6204] mmap: syz.3.71 (6204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.653221][ T978] usb 3-1: USB disconnect, device number 3 [ 92.918563][ T6208] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 93.040459][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 93.805851][ T6231] FAULT_INJECTION: forcing a failure. [ 93.805851][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.834364][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) [ 93.834388][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.834397][ T6231] Call Trace: [ 93.834403][ T6231] [ 93.834410][ T6231] dump_stack_lvl+0x16c/0x1f0 [ 93.834435][ T6231] should_fail_ex+0x512/0x640 [ 93.834459][ T6231] _copy_from_user+0x2e/0xd0 [ 93.834480][ T6231] copy_msghdr_from_user+0x98/0x160 [ 93.834501][ T6231] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 93.834527][ T6231] ? __lock_acquire+0x622/0x1c90 [ 93.834553][ T6231] ___sys_recvmsg+0xdb/0x1a0 [ 93.834573][ T6231] ? __pfx____sys_recvmsg+0x10/0x10 [ 93.834595][ T6231] ? find_held_lock+0x2b/0x80 [ 93.834627][ T6231] do_recvmmsg+0x2fe/0x750 [ 93.834650][ T6231] ? __pfx_do_recvmmsg+0x10/0x10 [ 93.834674][ T6231] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 93.834701][ T6231] ? __fget_files+0x20e/0x3c0 [ 93.834727][ T6231] __x64_sys_recvmmsg+0x22a/0x280 [ 93.834748][ T6231] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 93.834774][ T6231] do_syscall_64+0xcd/0xfa0 [ 93.834794][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.834811][ T6231] RIP: 0033:0x7f1975d8eec9 [ 93.834823][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.834837][ T6231] RSP: 002b:00007f1976b4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 93.834860][ T6231] RAX: ffffffffffffffda RBX: 00007f1975fe5fa0 RCX: 00007f1975d8eec9 [ 93.834870][ T6231] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 93.834880][ T6231] RBP: 00007f1976b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 93.834890][ T6231] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 93.834899][ T6231] R13: 00007f1975fe6038 R14: 00007f1975fe5fa0 R15: 00007ffe751e3918 [ 93.834922][ T6231] [ 94.025512][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.112475][ T6234] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 94.440773][ T5872] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.751384][ T6252] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 95.201751][ T5872] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 95.250362][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.313352][ T5872] usb 2-1: config 0 descriptor?? [ 95.509951][ T6267] tipc: Started in network mode [ 95.514893][ T6267] tipc: Node identity ac1414aa, cluster identity 4711 [ 95.839910][ T6267] tipc: Enabled bearer , priority 10 [ 95.890027][ T6272] tipc: Enabled bearer , priority 0 [ 96.053879][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 96.053896][ T30] audit: type=1400 audit(1760485357.802:245): avc: denied { ioctl } for pid=6275 comm="syz.4.87" path="socket:[9525]" dev="sockfs" ino=9525 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.084213][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.297153][ T6240] input: syz1 as /devices/virtual/input/input10 [ 96.324353][ T6240] fuse: Unknown parameter 'group_id00000000000000000000' [ 96.400814][ T30] audit: type=1400 audit(1760485357.802:246): avc: denied { create } for pid=6275 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.449094][ T5872] ath6kl: Failed to read usb control message: -32 [ 96.455782][ T5872] ath6kl: Unable to read the bmi data from the device: -32 [ 96.464177][ T30] audit: type=1400 audit(1760485357.892:247): avc: denied { read } for pid=6275 comm="syz.4.87" path="socket:[9525]" dev="sockfs" ino=9525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.517042][ T5872] ath6kl: unable to read target info byte count: -32 [ 96.586556][ T5872] ath6kl: Failed to init ath6kl core: -32 [ 96.605085][ T30] audit: type=1400 audit(1760485358.072:248): avc: denied { mounton } for pid=6236 comm="syz.1.81" path="/14/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.642923][ T5872] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 96.708900][ T5872] usb 2-1: USB disconnect, device number 5 [ 96.942636][ T6290] trusted_key: syz.0.89 sent an empty control message without MSG_MORE. [ 96.971470][ T5872] tipc: Node number set to 2886997162 [ 97.244253][ T6298] geneve2: entered promiscuous mode [ 97.284028][ T3569] Bluetooth: Short BCSP packet [ 97.803784][ T3569] Bluetooth: Error in BCSP hdr checksum [ 97.823577][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 60310 - 0 [ 97.867316][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 60310 - 0 [ 97.945344][ T6301] tipc: Enabling of bearer rejected, already enabled [ 97.955261][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 60310 - 0 [ 97.966320][ T6303] xt_CT: No such helper "pptp" [ 98.004167][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 60310 - 0 [ 98.014333][ T3475] Bluetooth: Error in BCSP hdr checksum [ 98.104015][ T6310] tipc: Enabling of bearer rejected, already enabled [ 98.120741][ T30] audit: type=1400 audit(1760485359.842:249): avc: denied { write } for pid=6284 comm="syz.2.88" path="socket:[10470]" dev="sockfs" ino=10470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.273262][ T36] Bluetooth: Error in BCSP hdr checksum [ 98.367619][ T6325] FAULT_INJECTION: forcing a failure. [ 98.367619][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.381412][ T6325] CPU: 1 UID: 0 PID: 6325 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(full) [ 98.381437][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.381447][ T6325] Call Trace: [ 98.381453][ T6325] [ 98.381460][ T6325] dump_stack_lvl+0x16c/0x1f0 [ 98.381485][ T6325] should_fail_ex+0x512/0x640 [ 98.381510][ T6325] _copy_from_user+0x2e/0xd0 [ 98.381549][ T6325] copy_from_sockptr_offset+0x15c/0x1b0 [ 98.381569][ T6325] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 98.381588][ T6325] ? bpf_lsm_capable+0x9/0x10 [ 98.381612][ T6325] ? security_capable+0x7e/0x260 [ 98.381635][ T6325] do_ipt_set_ctl+0x479/0xae0 [ 98.381652][ T6325] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 98.381681][ T6325] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 98.381701][ T6325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.381736][ T6325] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 98.381764][ T6325] nf_setsockopt+0x8d/0xf0 [ 98.381789][ T6325] ip_setsockopt+0xcb/0xf0 [ 98.381809][ T6325] ipv6_setsockopt+0x155/0x170 [ 98.381837][ T6325] tcp_setsockopt+0xa7/0x100 [ 98.381856][ T6325] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 98.381883][ T6325] do_sock_setsockopt+0xf3/0x1d0 [ 98.381910][ T6325] __sys_setsockopt+0x1a0/0x230 [ 98.381939][ T6325] __x64_sys_setsockopt+0xbd/0x160 [ 98.381956][ T6325] ? do_syscall_64+0x91/0xfa0 [ 98.381976][ T6325] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.381996][ T6325] do_syscall_64+0xcd/0xfa0 [ 98.382017][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.382034][ T6325] RIP: 0033:0x7f39baf8eec9 [ 98.382048][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.382064][ T6325] RSP: 002b:00007f39bbddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.382082][ T6325] RAX: ffffffffffffffda RBX: 00007f39bb1e6180 RCX: 00007f39baf8eec9 [ 98.382093][ T6325] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 98.382103][ T6325] RBP: 00007f39bbddd090 R08: 00000000000004a0 R09: 0000000000000000 [ 98.382113][ T6325] R10: 0000200000000ec0 R11: 0000000000000246 R12: 0000000000000001 [ 98.382124][ T6325] R13: 00007f39bb1e6218 R14: 00007f39bb1e6180 R15: 00007ffc38ece0e8 [ 98.382149][ T6325] [ 98.634182][ T3569] Bluetooth: Error in BCSP hdr checksum [ 98.880999][ T3569] Bluetooth: Error in BCSP hdr checksum [ 98.891519][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.020844][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.091860][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 99.098339][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.127002][ T10] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 99.144521][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.152775][ T10] usb 1-1: Product: syz [ 99.156987][ T10] usb 1-1: Manufacturer: syz [ 99.163395][ T10] usb 1-1: SerialNumber: syz [ 99.175020][ T10] usb 1-1: config 0 descriptor?? [ 99.204498][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 99.258656][ T6339] kernel profiling enabled (shift: 17) [ 99.390572][ T30] audit: type=1400 audit(1760485361.112:250): avc: denied { read write } for pid=6340 comm="syz.1.98" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.697189][ T30] audit: type=1400 audit(1760485361.122:251): avc: denied { open } for pid=6340 comm="syz.1.98" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.772147][ T30] audit: type=1400 audit(1760485361.182:252): avc: denied { create } for pid=6343 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.792587][ T30] audit: type=1400 audit(1760485361.182:253): avc: denied { ioctl } for pid=6340 comm="syz.1.98" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.818510][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.834242][ T30] audit: type=1400 audit(1760485361.192:254): avc: denied { bind } for pid=6343 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.954747][ T6354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.95'. [ 100.120812][ T5924] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.141432][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 100.173064][ T10] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 100.235999][ T6356] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 102.919848][ T6363] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 103.235503][ T5924] usb 5-1: device descriptor read/all, error -71 [ 103.620837][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 103.620860][ T30] audit: type=1400 audit(1760485365.172:256): avc: denied { create } for pid=6375 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.646021][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.857818][ T30] audit: type=1400 audit(1760485365.172:257): avc: denied { write } for pid=6375 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.934024][ T5853] usb 1-1: USB disconnect, device number 3 [ 103.946530][ T6393] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 103.998498][ T6385] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 105.130362][ T6404] tipc: Started in network mode [ 105.178697][ T6404] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.236589][ T6404] tipc: Enabled bearer , priority 10 [ 105.264806][ T6404] tipc: Enabled bearer , priority 0 [ 105.329194][ T30] audit: type=1400 audit(1760485367.072:258): avc: denied { write } for pid=6416 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.631740][ T30] audit: type=1400 audit(1760485367.382:259): avc: denied { create } for pid=6421 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.957084][ T30] audit: type=1400 audit(1760485367.382:260): avc: denied { ioctl } for pid=6421 comm="syz.1.114" path="socket:[9874]" dev="sockfs" ino=9874 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.997568][ T30] audit: type=1400 audit(1760485367.382:261): avc: denied { getopt } for pid=6421 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.413745][ T5872] tipc: Node number set to 2886997162 [ 106.436812][ T6432] ceph: No mds server is up or the cluster is laggy [ 106.439300][ T30] audit: type=1400 audit(1760485367.572:262): avc: denied { mounton } for pid=6423 comm="syz.2.115" path="/22/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 106.444862][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 106.466305][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.614060][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 106.855002][ T6446] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 107.155959][ T30] audit: type=1400 audit(1760485368.792:263): avc: denied { nlmsg_write } for pid=6416 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.416057][ T30] audit: type=1400 audit(1760485370.062:264): avc: denied { map } for pid=6462 comm="syz.0.122" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.561798][ T6468] input: syz0 as /devices/virtual/input/input11 [ 108.845765][ T6470] FAULT_INJECTION: forcing a failure. [ 108.845765][ T6470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.886829][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT(full) [ 108.886858][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.886867][ T6470] Call Trace: [ 108.886873][ T6470] [ 108.886879][ T6470] dump_stack_lvl+0x16c/0x1f0 [ 108.886903][ T6470] should_fail_ex+0x512/0x640 [ 108.886928][ T6470] _copy_from_user+0x2e/0xd0 [ 108.886951][ T6470] input_event_from_user+0x133/0x3b0 [ 108.886977][ T6470] ? __pfx_input_event_from_user+0x10/0x10 [ 108.887009][ T6470] uinput_write+0xbb4/0x12b0 [ 108.887034][ T6470] ? __pfx_uinput_write+0x10/0x10 [ 108.887054][ T6470] ? bpf_lsm_file_permission+0x9/0x10 [ 108.887076][ T6470] ? security_file_permission+0x71/0x210 [ 108.887102][ T6470] ? rw_verify_area+0xcf/0x6c0 [ 108.887124][ T6470] ? __pfx_uinput_write+0x10/0x10 [ 108.887140][ T6470] vfs_write+0x2a0/0x11d0 [ 108.887167][ T6470] ? __pfx_vfs_write+0x10/0x10 [ 108.887186][ T6470] ? find_held_lock+0x2b/0x80 [ 108.887204][ T6470] ? __fget_files+0x204/0x3c0 [ 108.887231][ T6470] ? __fget_files+0x20e/0x3c0 [ 108.887261][ T6470] ksys_write+0x1f8/0x250 [ 108.887282][ T6470] ? __pfx_ksys_write+0x10/0x10 [ 108.887311][ T6470] do_syscall_64+0xcd/0xfa0 [ 108.887334][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.887351][ T6470] RIP: 0033:0x7ff29eb8eec9 [ 108.887365][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.887381][ T6470] RSP: 002b:00007ff29f9e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.887398][ T6470] RAX: ffffffffffffffda RBX: 00007ff29ede6090 RCX: 00007ff29eb8eec9 [ 108.887409][ T6470] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000003 [ 108.887419][ T6470] RBP: 00007ff29f9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 108.887429][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.887439][ T6470] R13: 00007ff29ede6128 R14: 00007ff29ede6090 R15: 00007ffcd3cfceb8 [ 108.887465][ T6470] [ 109.088690][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.336335][ T30] audit: type=1400 audit(1760485371.082:265): avc: denied { write } for pid=6483 comm="syz.2.126" name="config" dev="proc" ino=4026533237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.491046][ T30] audit: type=1400 audit(1760485371.232:266): avc: denied { append } for pid=6493 comm="syz.3.127" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.514548][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.619955][ T30] audit: type=1400 audit(1760485371.272:267): avc: denied { connect } for pid=6493 comm="syz.3.127" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.948127][ T6508] ceph: No mds server is up or the cluster is laggy [ 110.955322][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 110.967306][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 110.987822][ T6514] tipc: Started in network mode [ 110.992838][ T6514] tipc: Node identity ac1414aa, cluster identity 4711 [ 111.000440][ T6514] tipc: Enabled bearer , priority 10 [ 111.008666][ T6514] tipc: Enabled bearer , priority 0 [ 111.036326][ T6502] Process accounting resumed [ 111.116311][ T30] audit: type=1400 audit(1760485372.812:268): avc: denied { block_suspend } for pid=6513 comm="syz.1.133" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.228635][ T30] audit: type=1400 audit(1760485372.972:269): avc: denied { write } for pid=6513 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.340508][ T6515] Zero length message leads to an empty skb [ 111.366358][ T5826] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.376509][ T30] audit: type=1400 audit(1760485373.002:270): avc: denied { mount } for pid=6513 comm="syz.1.133" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.729796][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 111.734401][ T30] audit: type=1400 audit(1760485373.392:271): avc: denied { append } for pid=6518 comm="syz.4.135" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.736382][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.793929][ T6530] SELinux: syz.1.137 (6530) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 111.820102][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.846717][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 111.884549][ T30] audit: type=1400 audit(1760485373.612:272): avc: denied { execute } for pid=6529 comm="syz.1.137" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.892909][ T5826] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 111.916416][ T30] audit: type=1400 audit(1760485373.612:273): avc: denied { execute_no_trans } for pid=6529 comm="syz.1.137" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.954703][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.027744][ T5826] usb 1-1: config 0 descriptor?? [ 112.131029][ T5872] tipc: Node number set to 2886997162 [ 112.261006][ T5826] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0001/input/input12 [ 112.397651][ T6549] netlink: zone id is out of range [ 112.436652][ T6549] netlink: zone id is out of range [ 112.445352][ T6549] netlink: zone id is out of range [ 112.472617][ T6549] netlink: zone id is out of range [ 112.477901][ T6549] netlink: zone id is out of range [ 112.485508][ T6549] netlink: zone id is out of range [ 112.491720][ T6549] netlink: del zone limit has 8 unknown bytes [ 112.554412][ T5826] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 112.620332][ T5826] usb 1-1: USB disconnect, device number 4 [ 112.683860][ T30] audit: type=1400 audit(1760485374.432:274): avc: denied { set_context_mgr } for pid=6556 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 112.705819][ T5853] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.723455][ T6557] FAULT_INJECTION: forcing a failure. [ 112.723455][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 112.757590][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: syz.4.142 Not tainted syzkaller #0 PREEMPT(full) [ 112.757618][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.757629][ T6557] Call Trace: [ 112.757635][ T6557] [ 112.757642][ T6557] dump_stack_lvl+0x16c/0x1f0 [ 112.757669][ T6557] should_fail_ex+0x512/0x640 [ 112.757689][ T6557] ? fs_reclaim_acquire+0xae/0x150 [ 112.757725][ T6557] should_failslab+0xc2/0x120 [ 112.757751][ T6557] __kmalloc_noprof+0xdd/0x880 [ 112.757770][ T6557] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 112.757800][ T6557] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 112.757823][ T6557] tomoyo_realpath_from_path+0xc2/0x6e0 [ 112.757850][ T6557] ? tomoyo_profile+0x47/0x60 [ 112.757879][ T6557] tomoyo_path_number_perm+0x245/0x580 [ 112.757899][ T6557] ? tomoyo_path_number_perm+0x237/0x580 [ 112.757922][ T6557] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.757944][ T6557] ? find_held_lock+0x2b/0x80 [ 112.757985][ T6557] ? find_held_lock+0x2b/0x80 [ 112.758001][ T6557] ? hook_file_ioctl_common+0x145/0x410 [ 112.758024][ T6557] ? __fget_files+0x20e/0x3c0 [ 112.758051][ T6557] security_file_ioctl+0x9b/0x240 [ 112.758076][ T6557] __x64_sys_ioctl+0xb7/0x210 [ 112.758097][ T6557] do_syscall_64+0xcd/0xfa0 [ 112.758120][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.758137][ T6557] RIP: 0033:0x7f39baf8eec9 [ 112.758151][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.758167][ T6557] RSP: 002b:00007f39bbe1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.758184][ T6557] RAX: ffffffffffffffda RBX: 00007f39bb1e5fa0 RCX: 00007f39baf8eec9 [ 112.758195][ T6557] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 112.758205][ T6557] RBP: 00007f39bbe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.758215][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.758225][ T6557] R13: 00007f39bb1e6038 R14: 00007f39bb1e5fa0 R15: 00007ffc38ece0e8 [ 112.758256][ T6557] [ 112.758804][ T6557] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.863857][ T6566] FAULT_INJECTION: forcing a failure. [ 112.863857][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 112.877608][ T6557] binder_alloc: 6556: binder_alloc_buf, no vma [ 112.895184][ T6554] fido_id[6554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 112.990862][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 113.030756][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: syz.2.143 Not tainted syzkaller #0 PREEMPT(full) [ 113.030781][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.030791][ T6566] Call Trace: [ 113.030797][ T6566] [ 113.030804][ T6566] dump_stack_lvl+0x16c/0x1f0 [ 113.030829][ T6566] should_fail_ex+0x512/0x640 [ 113.030850][ T6566] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 113.030873][ T6566] should_failslab+0xc2/0x120 [ 113.030899][ T6566] kmem_cache_alloc_noprof+0x75/0x6e0 [ 113.030919][ T6566] ? getname_flags.part.0+0x4c/0x550 [ 113.030946][ T6566] ? getname_flags.part.0+0x4c/0x550 [ 113.030962][ T6566] getname_flags.part.0+0x4c/0x550 [ 113.030983][ T6566] getname_flags+0x93/0xf0 [ 113.031005][ T6566] do_sys_openat2+0xb8/0x1d0 [ 113.031021][ T6566] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.031039][ T6566] ? __fget_files+0x20e/0x3c0 [ 113.031066][ T6566] __x64_sys_openat+0x174/0x210 [ 113.031084][ T6566] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.031099][ T6566] ? ksys_write+0x1ac/0x250 [ 113.031130][ T6566] do_syscall_64+0xcd/0xfa0 [ 113.031152][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.031168][ T6566] RIP: 0033:0x7f1975d8eec9 [ 113.031183][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.031199][ T6566] RSP: 002b:00007f1973fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.031216][ T6566] RAX: ffffffffffffffda RBX: 00007f1975fe6180 RCX: 00007f1975d8eec9 [ 113.031226][ T6566] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 113.031237][ T6566] RBP: 00007f1973fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.031246][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.031256][ T6566] R13: 00007f1975fe6218 R14: 00007f1975fe6180 R15: 00007ffe751e3918 [ 113.031281][ T6566] [ 113.100642][ T5853] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 113.872938][ T6560] syz.2.143: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.975332][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.2.143 Not tainted syzkaller #0 PREEMPT(full) [ 113.975357][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.975367][ T6560] Call Trace: [ 113.975373][ T6560] [ 113.975380][ T6560] dump_stack_lvl+0x16c/0x1f0 [ 113.975405][ T6560] warn_alloc+0x248/0x3a0 [ 113.975427][ T6560] ? __pfx_warn_alloc+0x10/0x10 [ 113.975464][ T6560] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 113.975484][ T6560] ? __vmalloc_node_noprof+0xad/0xf0 [ 113.975514][ T6560] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 113.975550][ T6560] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 113.975576][ T6560] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.975611][ T6560] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 113.975630][ T6560] vmalloc_user_noprof+0x9e/0xe0 [ 113.975656][ T6560] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 113.975676][ T6560] vb2_vmalloc_alloc+0x135/0x3f0 [ 113.975697][ T6560] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 113.975716][ T6560] __vb2_queue_alloc+0x8c9/0x1280 [ 113.975748][ T6560] vb2_core_reqbufs+0xa90/0xfe0 [ 113.975772][ T6560] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 113.975793][ T6560] ? rcu_is_watching+0x12/0xc0 [ 113.975813][ T6560] ? __mutex_lock+0x1c5/0x1060 [ 113.975833][ T6560] ? avc_has_extended_perms+0x47c/0x1090 [ 113.975856][ T6560] vb2_reqbufs+0x1a3/0x1f0 [ 113.975881][ T6560] ? __pfx_vb2_reqbufs+0x10/0x10 [ 113.975908][ T6560] ? kasan_quarantine_put+0x10a/0x240 [ 113.975930][ T6560] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.975960][ T6560] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 113.975989][ T6560] v4l_reqbufs+0x142/0x1d0 [ 113.976013][ T6560] __video_do_ioctl+0xb77/0xf00 [ 113.976041][ T6560] ? __might_fault+0xe3/0x190 [ 113.976059][ T6560] ? __pfx___video_do_ioctl+0x10/0x10 [ 113.976094][ T6560] video_usercopy+0x4d0/0x1720 [ 113.976120][ T6560] ? __pfx___video_do_ioctl+0x10/0x10 [ 113.976143][ T6560] ? selinux_kernel_read_file+0x130/0x130 [ 113.976166][ T6560] ? __pfx_video_usercopy+0x10/0x10 [ 113.976208][ T6560] v4l2_ioctl+0x1bd/0x250 [ 113.976230][ T6560] ? __pfx_v4l2_ioctl+0x10/0x10 [ 113.976255][ T6560] __x64_sys_ioctl+0x18e/0x210 [ 113.976276][ T6560] do_syscall_64+0xcd/0xfa0 [ 113.976297][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.976314][ T6560] RIP: 0033:0x7f1975d8eec9 [ 113.976328][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.976344][ T6560] RSP: 002b:00007f1976b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.976361][ T6560] RAX: ffffffffffffffda RBX: 00007f1975fe5fa0 RCX: 00007f1975d8eec9 [ 113.976372][ T6560] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 113.976382][ T6560] RBP: 00007f1975e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.976391][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.976401][ T6560] R13: 00007f1975fe6038 R14: 00007f1975fe5fa0 R15: 00007ffe751e3918 [ 113.976426][ T6560] [ 113.976432][ T6560] Mem-Info: [ 114.703229][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 114.703245][ T30] audit: type=1400 audit(1760485376.452:282): avc: denied { create } for pid=6582 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.728448][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.909567][ T6560] active_anon:13316 inactive_anon:0 isolated_anon:0 [ 114.909567][ T6560] active_file:7304 inactive_file:40626 isolated_file:0 [ 114.909567][ T6560] unevictable:768 dirty:644 writeback:0 [ 114.909567][ T6560] slab_reclaimable:11839 slab_unreclaimable:96746 [ 114.909567][ T6560] mapped:32829 shmem:4232 pagetables:1321 [ 114.909567][ T6560] sec_pagetables:0 bounce:0 [ 114.909567][ T6560] kernel_misc_reclaimable:0 [ 114.909567][ T6560] free:1289002 free_pcp:15240 free_cma:0 [ 114.954894][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.963820][ T6579] nvme_fabrics: missing parameter 'transport=%s' [ 114.970263][ T6579] nvme_fabrics: missing parameter 'nqn=%s' [ 115.006685][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.015858][ T30] audit: type=1400 audit(1760485376.492:283): avc: denied { write } for pid=6582 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.063505][ T5853] pvrusb2: Hardware description: Terratec Grabster AV400 [ 115.090563][ T5853] pvrusb2: ********** [ 115.116313][ T6560] Node 0 active_anon:49364kB inactive_anon:0kB active_file:29216kB inactive_file:162304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127216kB dirty:2576kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12252kB pagetables:5168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.148259][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.154557][ T5853] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 115.196530][ T5853] pvrusb2: Important functionality might not be entirely working. [ 115.235650][ T6560] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.265526][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.292160][ T5853] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 115.334454][ T5853] pvrusb2: ********** [ 115.350559][ T6560] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.380435][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.389061][ T2335] pvrusb2: Invalid write control endpoint [ 115.440988][ T6560] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 115.482356][ T6560] Node 0 DMA32 free:1245628kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49120kB inactive_anon:0kB active_file:29216kB inactive_file:162304kB unevictable:1536kB writepending:2584kB zspages:0kB present:3129332kB managed:2541344kB mlocked:0kB bounce:0kB free_pcp:48240kB local_pcp:20956kB free_cma:0kB [ 115.823854][ T6593] binder: 6546:6593 ioctl c0306201 0 returned -14 [ 116.023767][ T6560] lowmem_reserve[]: 0 0 1 1 1 [ 116.108558][ T6560] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.301379][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 116.307171][ T6560] Node 1 Normal free:3894392kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18096kB local_pcp:8464kB free_cma:0kB [ 116.339435][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.449777][ T2335] pvrusb2: Invalid write control endpoint [ 116.461042][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 116.504031][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 116.520885][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 116.566940][ T6560] Node 0 DMA: [ 116.567935][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 116.583542][ T6560] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.602896][ T30] audit: type=1400 audit(1760485378.342:284): avc: denied { setopt } for pid=6595 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.697684][ T6560] Node 0 DMA32: 5*4kB (UME) 1*8kB (E) 2*16kB (E) 26*32kB (UME) 76*64kB (UME) 33*128kB (ME) 23*256kB (UME) 8*512kB (UME) 3*1024kB (ME) 3*2048kB (ME) 295*4096kB (M) = 1237500kB [ 116.715455][ T2335] pvrusb2: Device being rendered inoperable [ 116.716825][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 116.729323][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 116.738696][ T2335] pvrusb2: Attached sub-driver cx25840 [ 116.747280][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 116.881497][ T6560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 116.906075][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 117.960455][ T6560] Node 1 Normal: 196*4kB (UE) 55*8kB (UME) 35*16kB (UME) 54*32kB (UME) 19*64kB (UME) 8*128kB (UME) 4*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894392kB [ 117.990868][ T6560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.501277][ T5853] usb 4-1: USB disconnect, device number 7 [ 118.513343][ T6560] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.597576][ T6560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.637903][ T30] audit: type=1400 audit(1760485380.382:285): avc: denied { write } for pid=6612 comm="syz.4.151" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.715938][ T6560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.790534][ T6560] 55026 total pagecache pages [ 118.804907][ T6560] 0 pages in swap cache [ 118.814649][ T6560] Free swap = 124996kB [ 118.834283][ T6560] Total swap = 124996kB [ 118.839065][ T6560] 2097051 pages RAM [ 118.849614][ T6560] 0 pages HighMem/MovableOnly [ 118.861113][ T6560] 429689 pages reserved [ 118.874231][ T6560] 0 pages cma reserved [ 118.910777][ T5924] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.017440][ T30] audit: type=1400 audit(1760485380.762:286): avc: denied { watch } for pid=6624 comm="syz.1.153" path="/31" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.388445][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 119.396225][ T5924] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 119.420867][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.433957][ T5924] usb 5-1: config 0 descriptor?? [ 119.448296][ T5924] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state [ 119.455131][ T5924] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 119.522125][ T5924] dvb_usb_anysee 5-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 119.955738][ T5853] usb 5-1: USB disconnect, device number 6 [ 119.987774][ T6638] vlan2: entered promiscuous mode [ 119.994032][ T6638] bridge0: entered promiscuous mode [ 120.262770][ T6648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.157'. [ 120.539549][ T30] audit: type=1400 audit(1760485382.262:287): avc: denied { read write } for pid=6649 comm="syz.3.158" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.636482][ T30] audit: type=1400 audit(1760485382.262:288): avc: denied { open } for pid=6649 comm="syz.3.158" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.913838][ T6658] FAULT_INJECTION: forcing a failure. [ 120.913838][ T6658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.927085][ T6658] CPU: 0 UID: 0 PID: 6658 Comm: syz.2.160 Not tainted syzkaller #0 PREEMPT(full) [ 120.927108][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.927118][ T6658] Call Trace: [ 120.927123][ T6658] [ 120.927130][ T6658] dump_stack_lvl+0x16c/0x1f0 [ 120.927154][ T6658] should_fail_ex+0x512/0x640 [ 120.927179][ T6658] _copy_from_user+0x2e/0xd0 [ 120.927201][ T6658] copy_msghdr_from_user+0x98/0x160 [ 120.927223][ T6658] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 120.927241][ T6658] ? trace_sched_exit_tp+0xd1/0x120 [ 120.927279][ T6658] ___sys_sendmsg+0xfe/0x1d0 [ 120.927300][ T6658] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.927319][ T6658] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.927361][ T6658] ? __sys_sendmsg+0xd6/0x220 [ 120.927379][ T6658] ? __sys_sendmsg+0x11d/0x220 [ 120.927401][ T6658] __sys_sendmsg+0x16d/0x220 [ 120.927420][ T6658] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.927438][ T6658] ? __pfx___schedule+0x10/0x10 [ 120.927472][ T6658] do_syscall_64+0xcd/0xfa0 [ 120.927493][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.927510][ T6658] RIP: 0033:0x7f1975d8eec9 [ 120.927524][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.927540][ T6658] RSP: 002b:00007f1973ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.927557][ T6658] RAX: ffffffffffffffda RBX: 00007f1975fe6090 RCX: 00007f1975d8eec9 [ 120.927569][ T6658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 120.927579][ T6658] RBP: 00007f1973ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.927589][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.927599][ T6658] R13: 00007f1975fe6128 R14: 00007f1975fe6090 R15: 00007ffe751e3918 [ 120.927631][ T6658] [ 120.935871][ T6660] serio: Serial port ptm0 [ 121.525699][ T6655] team_slave_0: entered promiscuous mode [ 121.531487][ T6655] team_slave_1: entered promiscuous mode [ 121.557140][ T6655] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 121.891411][ T6655] team0: Device macvtap1 is already an upper device of the team interface [ 121.969862][ T6655] team_slave_0: left promiscuous mode [ 121.975363][ T6655] team_slave_1: left promiscuous mode [ 122.241037][ T5924] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.600754][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 122.612315][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.645900][ T5924] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 122.659848][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.670770][ T5924] usb 4-1: Product: syz [ 122.686663][ T5924] usb 4-1: Manufacturer: syz [ 122.702028][ T5924] usb 4-1: SerialNumber: syz [ 122.721065][ T5924] usb 4-1: config 0 descriptor?? [ 122.749009][ T5924] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 123.613046][ T5924] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 123.620011][ T5924] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 124.360807][ T6707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.163'. [ 125.159059][ T30] audit: type=1400 audit(1760485386.902:289): avc: denied { sys_module } for pid=6670 comm="syz.3.163" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 126.005866][ T5894] usb 4-1: USB disconnect, device number 8 [ 126.035371][ T6713] block nbd1: Device being setup by another task [ 126.652555][ T6710] block nbd1: shutting down sockets [ 126.669253][ T30] audit: type=1400 audit(1760485388.402:290): avc: denied { ioctl } for pid=6729 comm="syz.2.176" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.700870][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.011485][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 127.018143][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.062466][ T30] audit: type=1400 audit(1760485388.462:291): avc: denied { create } for pid=6729 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.177291][ T30] audit: type=1400 audit(1760485388.782:292): avc: denied { append } for pid=6729 comm="syz.2.176" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.225700][ T5872] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 127.304391][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.520132][ T5872] usb 1-1: Product: syz [ 127.559595][ T5872] usb 1-1: Manufacturer: syz [ 127.570949][ T5872] usb 1-1: SerialNumber: syz [ 127.607414][ T5872] usb 1-1: config 0 descriptor?? [ 127.740205][ T5872] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 127.894363][ T6750] input: syz1 as /devices/virtual/input/input13 [ 128.708313][ T5872] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 128.745555][ T5872] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 128.843705][ T6761] netlink: 44 bytes leftover after parsing attributes in process `syz.0.173'. [ 130.065358][ T30] audit: type=1400 audit(1760485391.662:293): avc: denied { connect } for pid=6757 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.465416][ T30] audit: type=1400 audit(1760485392.122:294): avc: denied { mount } for pid=6757 comm="syz.4.182" name="/" dev="ramfs" ino=12625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.593434][ T5872] usb 1-1: USB disconnect, device number 5 [ 130.677038][ T6770] FAULT_INJECTION: forcing a failure. [ 130.677038][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 130.689787][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.3.184 Not tainted syzkaller #0 PREEMPT(full) [ 130.689813][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.689823][ T6770] Call Trace: [ 130.689829][ T6770] [ 130.689836][ T6770] dump_stack_lvl+0x16c/0x1f0 [ 130.689861][ T6770] should_fail_ex+0x512/0x640 [ 130.689882][ T6770] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 130.689906][ T6770] should_failslab+0xc2/0x120 [ 130.689931][ T6770] kmem_cache_alloc_noprof+0x75/0x6e0 [ 130.689951][ T6770] ? getname_flags.part.0+0x4c/0x550 [ 130.689975][ T6770] ? getname_flags.part.0+0x4c/0x550 [ 130.689991][ T6770] getname_flags.part.0+0x4c/0x550 [ 130.690011][ T6770] getname_flags+0x93/0xf0 [ 130.690032][ T6770] __x64_sys_symlink+0x58/0x90 [ 130.690057][ T6770] do_syscall_64+0xcd/0xfa0 [ 130.690080][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.690097][ T6770] RIP: 0033:0x7ff29eb8eec9 [ 130.690111][ T6770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.690127][ T6770] RSP: 002b:00007ff29f9e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 130.690143][ T6770] RAX: ffffffffffffffda RBX: 00007ff29ede6090 RCX: 00007ff29eb8eec9 [ 130.690154][ T6770] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 130.690165][ T6770] RBP: 00007ff29f9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 130.690174][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.690184][ T6770] R13: 00007ff29ede6128 R14: 00007ff29ede6090 R15: 00007ffcd3cfceb8 [ 130.690215][ T6770] [ 130.851012][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.536990][ T30] audit: type=1400 audit(1760485392.902:295): avc: denied { getopt } for pid=6776 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.568045][ T30] audit: type=1400 audit(1760485393.272:296): avc: denied { write } for pid=6757 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.592087][ T30] audit: type=1400 audit(1760485393.272:297): avc: denied { read } for pid=6757 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.905264][ T6783] block nbd2: shutting down sockets [ 131.970971][ T5872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.041434][ T5853] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.071584][ T30] audit: type=1400 audit(1760485393.812:298): avc: denied { create } for pid=6799 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 132.135438][ T6802] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 132.195440][ T5872] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.333485][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.448638][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.457127][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.526299][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.535694][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 132.546880][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 132.562507][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 132.585245][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.606599][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.616771][ T5872] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.630587][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.639995][ T5853] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 132.661316][ T5872] usb 4-1: Product: syz [ 132.681188][ T5872] usb 4-1: Manufacturer: syz [ 132.697817][ T6814] tipc: Started in network mode [ 132.702855][ T6814] tipc: Node identity ac1414aa, cluster identity 4711 [ 132.712871][ T5853] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 132.713599][ T6814] tipc: Enabled bearer , priority 10 [ 132.723545][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.738090][ T6790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.802010][ T6814] tipc: Enabled bearer , priority 0 [ 132.821710][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 132.829580][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 132.853074][ T5853] usb 1-1: config 0 descriptor?? [ 132.859090][ T5872] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 132.865565][ T5872] cdc_wdm 4-1:1.0: Unknown control protocol [ 133.121127][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.127855][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.134221][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.140808][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.147068][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.153651][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.159968][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.166551][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.172807][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.179392][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.185714][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.192298][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.200778][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.207371][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.214011][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.220598][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.226851][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.233434][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.239704][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 133.246286][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 133.411999][ T30] audit: type=1400 audit(1760485394.862:299): avc: denied { read write } for pid=6789 comm="syz.3.187" name="cdc-wdm0" dev="devtmpfs" ino=2881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 133.412359][ T5924] usb 4-1: USB disconnect, device number 9 [ 133.435729][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.444435][ T5853] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0002/input/input14 [ 133.550796][ T30] audit: type=1400 audit(1760485394.862:300): avc: denied { open } for pid=6789 comm="syz.3.187" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 133.687871][ T5853] appleir 0003:05AC:8241.0002: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 133.716489][ T5853] usb 1-1: USB disconnect, device number 6 [ 133.800941][ T5894] tipc: Node number set to 2886997162 [ 134.442693][ T6829] fido_id[6829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 134.498672][ T6838] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 136.270776][ T30] audit: type=1400 audit(1760485398.012:301): avc: denied { ioctl } for pid=6846 comm="syz.3.199" path="socket:[12796]" dev="sockfs" ino=12796 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.301599][ T5879] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.527112][ T5879] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 136.579349][ T5879] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 136.600022][ T5879] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.610055][ T5879] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 136.624496][ T6855] block nbd2: shutting down sockets [ 136.685980][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.725055][ T5879] usb 1-1: config 0 descriptor?? [ 136.725434][ T5853] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.816218][ T30] audit: type=1400 audit(1760485398.562:302): avc: denied { ioctl } for pid=6869 comm="syz.4.206" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.841443][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.948446][ T6844] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 137.070903][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 137.080190][ T5853] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 137.093701][ T5853] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.251568][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.267325][ T30] audit: type=1400 audit(1760485398.912:303): avc: denied { unlink } for pid=6866 comm="syz.1.204" name="#1" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.298226][ T5853] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.330229][ T6881] netlink: 'syz.4.207': attribute type 1 has an invalid length. [ 137.367561][ T5853] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.408376][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 137.433179][ T30] audit: type=1400 audit(1760485398.922:304): avc: denied { mount } for pid=6866 comm="syz.1.204" name="/" dev="overlay" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 137.455011][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.461464][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 137.480969][ T5853] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.516707][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.870883][ T5853] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.900383][ T10] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 137.930849][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.938877][ T10] usb 3-1: Product: syz [ 137.945386][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.955550][ T30] audit: type=1400 audit(1760485399.012:305): avc: denied { setopt } for pid=6876 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.015785][ T10] usb 3-1: Manufacturer: syz [ 138.029035][ T5879] lenovo 0003:17EF:60EE.0003: hidraw0: USB HID v0.04 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 138.045394][ T6881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.052048][ T10] usb 3-1: SerialNumber: syz [ 138.073544][ T5879] usb 1-1: USB disconnect, device number 7 [ 138.288128][ T30] audit: type=1400 audit(1760485400.032:306): avc: denied { mount } for pid=6876 comm="syz.4.207" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 138.510910][ T10] usb 3-1: config 0 descriptor?? [ 138.704357][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 138.964966][ T6882] bond1 (unregistering): Released all slaves [ 139.177899][ T6900] fido_id[6900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 139.426190][ T30] audit: type=1400 audit(1760485401.162:307): avc: denied { read } for pid=6902 comm="syz.1.210" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 139.558364][ T5820] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 139.568305][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 139.568333][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.568346][ T5820] Workqueue: hci0 hci_rx_work [ 139.568377][ T5820] Call Trace: [ 139.568385][ T5820] [ 139.568394][ T5820] dump_stack_lvl+0x16c/0x1f0 [ 139.568417][ T5820] sysfs_warn_dup+0x7f/0xa0 [ 139.568450][ T5820] sysfs_create_dir_ns+0x24b/0x2b0 [ 139.568480][ T5820] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 139.568509][ T5820] ? find_held_lock+0x2b/0x80 [ 139.568533][ T5820] ? do_raw_spin_unlock+0x172/0x230 [ 139.568561][ T5820] kobject_add_internal+0x2c4/0x9b0 [ 139.568591][ T5820] kobject_add+0x16e/0x240 [ 139.568617][ T5820] ? __pfx_kobject_add+0x10/0x10 [ 139.568646][ T5820] ? kobject_put+0xab/0x5a0 [ 139.568676][ T5820] device_add+0x288/0x1aa0 [ 139.568699][ T5820] ? __pfx_dev_set_name+0x10/0x10 [ 139.568724][ T5820] ? __pfx_device_add+0x10/0x10 [ 139.568747][ T5820] ? mgmt_send_event_skb+0x2fb/0x460 [ 139.568775][ T5820] hci_conn_add_sysfs+0x17e/0x230 [ 139.568800][ T5820] le_conn_complete_evt+0x1260/0x2150 [ 139.568826][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 139.568857][ T5820] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 139.568878][ T5820] ? skb_pull_data+0x166/0x210 [ 139.568902][ T5820] hci_le_meta_evt+0x357/0x5e0 [ 139.568924][ T5820] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 139.568948][ T5820] hci_event_packet+0x685/0x11c0 [ 139.568968][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 139.568991][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 139.569017][ T5820] ? hci_rx_work+0x15e/0x16b0 [ 139.569041][ T5820] hci_rx_work+0x2c5/0x16b0 [ 139.569070][ T5820] process_one_work+0x9cf/0x1b70 [ 139.569106][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 139.569140][ T5820] ? assign_work+0x1a0/0x250 [ 139.569167][ T5820] worker_thread+0x6c8/0xf10 [ 139.569205][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 139.569230][ T5820] kthread+0x3c5/0x780 [ 139.569254][ T5820] ? __pfx_kthread+0x10/0x10 [ 139.569289][ T5820] ? rcu_is_watching+0x12/0xc0 [ 139.569307][ T5820] ? __pfx_kthread+0x10/0x10 [ 139.569332][ T5820] ret_from_fork+0x675/0x7d0 [ 139.569354][ T5820] ? __pfx_kthread+0x10/0x10 [ 139.569378][ T5820] ret_from_fork_asm+0x1a/0x30 [ 139.569417][ T5820] [ 139.569566][ T5820] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.631476][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 139.698407][ T5820] Bluetooth: hci0: failed to register connection device [ 139.777196][ T6911] 9pnet_fd: Insufficient options for proto=fd [ 139.781117][ T6908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.832360][ T6908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.880255][ T6908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.949339][ T6908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.958811][ T6907] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'. [ 140.075653][ T6908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.081962][ T6908] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.721179][ T6908] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.755740][ T30] audit: type=1400 audit(1760485401.542:308): avc: denied { create } for pid=6902 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.815649][ T6908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.822404][ T6908] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.829158][ T6908] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.838209][ T6908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.844150][ T6908] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.853153][ T6908] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.859724][ T6908] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.867286][ T6908] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.877624][ T5879] usb 4-1: USB disconnect, device number 10 [ 140.884143][ T6908] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.425281][ T10] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 141.478441][ T30] audit: type=1400 audit(1760485403.222:309): avc: denied { create } for pid=6915 comm="syz.0.211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.619694][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 141.650605][ T30] audit: type=1400 audit(1760485403.222:310): avc: denied { create } for pid=6916 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.672533][ T30] audit: type=1400 audit(1760485403.322:311): avc: denied { connect } for pid=6916 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.684965][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.924935][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.038424][ T5924] usb 3-1: USB disconnect, device number 4 [ 142.061141][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 142.143749][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.166841][ T10] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 142.222696][ T30] audit: type=1400 audit(1760485403.952:312): avc: denied { unlink } for pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.358619][ T30] audit: type=1400 audit(1760485404.022:313): avc: denied { write } for pid=6916 comm="syz.1.213" name="hidraw0" dev="devtmpfs" ino=2901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 142.404350][ T6937] block nbd2: Device being setup by another task [ 142.447120][ T6935] block nbd2: shutting down sockets [ 142.465404][ T30] audit: type=1400 audit(1760485404.082:314): avc: denied { name_bind } for pid=6941 comm="syz.0.217" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 142.722056][ T6951] FAULT_INJECTION: forcing a failure. [ 142.722056][ T6951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.735265][ T6951] CPU: 1 UID: 0 PID: 6951 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT(full) [ 142.735288][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.735299][ T6951] Call Trace: [ 142.735305][ T6951] [ 142.735312][ T6951] dump_stack_lvl+0x16c/0x1f0 [ 142.735337][ T6951] should_fail_ex+0x512/0x640 [ 142.735363][ T6951] _copy_from_user+0x2e/0xd0 [ 142.735386][ T6951] copy_msghdr_from_user+0x98/0x160 [ 142.735408][ T6951] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.735441][ T6951] ___sys_sendmsg+0xfe/0x1d0 [ 142.735463][ T6951] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.735482][ T6951] ? __lock_acquire+0x622/0x1c90 [ 142.735536][ T6951] __sys_sendmsg+0x16d/0x220 [ 142.735557][ T6951] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.735594][ T6951] do_syscall_64+0xcd/0xfa0 [ 142.735617][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.735634][ T6951] RIP: 0033:0x7f8fe098eec9 [ 142.735649][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.735666][ T6951] RSP: 002b:00007f8fe182e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.735684][ T6951] RAX: ffffffffffffffda RBX: 00007f8fe0be6180 RCX: 00007f8fe098eec9 [ 142.735696][ T6951] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 142.735706][ T6951] RBP: 00007f8fe182e090 R08: 0000000000000000 R09: 0000000000000000 [ 142.735716][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.735726][ T6951] R13: 00007f8fe0be6218 R14: 00007f8fe0be6180 R15: 00007ffe6e61e958 [ 142.735751][ T6951] [ 143.021119][ T5924] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.023738][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.034107][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.034858][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.104482][ T6958] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 143.190776][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 143.200024][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.219851][ T5924] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 143.242242][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.280303][ T5924] usb 4-1: Product: syz [ 143.294088][ T5924] usb 4-1: Manufacturer: syz [ 143.310404][ T5924] usb 4-1: SerialNumber: syz [ 144.061835][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.073094][ T5924] usb 4-1: config 0 descriptor?? [ 144.080784][ T5924] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 144.256970][ T6975] tipc: Enabling of bearer rejected, already enabled [ 144.267167][ T6975] tipc: Enabling of bearer rejected, already enabled [ 144.289138][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.640517][ T6985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.218'. [ 144.850848][ T5924] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 145.665317][ T5924] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 145.752927][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.759007][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.765257][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.919252][ T6987] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 145.928830][ T30] audit: type=1400 audit(1760485407.632:315): avc: denied { create } for pid=6965 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.141291][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.179514][ T6990] debugfs: 'ttyS3' already exists in 'caif_serial' [ 146.300831][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.655697][ T5894] usb 4-1: USB disconnect, device number 11 [ 147.741512][ T5892] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.750280][ T30] audit: type=1400 audit(1760485409.492:316): avc: denied { ioctl } for pid=7026 comm="syz.2.232" path="socket:[13095]" dev="sockfs" ino=13095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.775426][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.876504][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.876523][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.876615][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 148.220718][ T30] audit: type=1400 audit(1760485409.862:317): avc: denied { create } for pid=7026 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 148.240487][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.264133][ T7022] block nbd1: shutting down sockets [ 148.794638][ T30] audit: type=1400 audit(1760485410.072:318): avc: denied { create } for pid=7029 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.814876][ T30] audit: type=1400 audit(1760485410.082:319): avc: denied { connect } for pid=7029 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.821436][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 148.867033][ T5892] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 148.884545][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.915216][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.936663][ T10] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 149.012918][ T5892] usb 1-1: Product: syz [ 149.018635][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.028768][ T5892] usb 1-1: Manufacturer: syz [ 149.038970][ T5892] usb 1-1: SerialNumber: syz [ 149.049028][ T10] usb 4-1: Product: syz [ 149.059496][ T10] usb 4-1: Manufacturer: syz [ 149.065591][ T5892] usb 1-1: config 0 descriptor?? [ 149.111682][ T848] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.133563][ T10] usb 4-1: SerialNumber: syz [ 149.321206][ T10] usb 4-1: config 0 descriptor?? [ 149.331225][ T848] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.375100][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 149.580949][ T5872] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.160801][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 150.174780][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.202173][ T5872] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 150.207723][ T7051] fido_id[7051]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.237871][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.385917][ T7057] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 150.469707][ T7060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.230'. [ 151.538253][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 151.596117][ T5892] usb 1-1: Firmware version (0.0) predates our first public release. [ 151.687450][ T10] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 151.697142][ T5872] usb 5-1: Product: syz [ 151.720768][ T5892] usb 1-1: Please update to version 0.2 or newer [ 151.750812][ T5872] usb 5-1: Manufacturer: syz [ 151.755436][ T5872] usb 5-1: SerialNumber: syz [ 151.807263][ T5872] usb 5-1: config 0 descriptor?? [ 151.861883][ T10] usb 4-1: USB disconnect, device number 12 [ 151.876781][ T5872] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 151.985896][ T5892] usb 1-1: USB disconnect, device number 8 [ 152.581185][ T5872] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 152.601853][ T30] audit: type=1400 audit(1760485414.002:320): avc: denied { ioctl } for pid=7071 comm="syz.3.239" path="socket:[12017]" dev="sockfs" ino=12017 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.686173][ T5872] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 152.796401][ T7082] netlink: 44 bytes leftover after parsing attributes in process `syz.4.235'. [ 153.173404][ T7089] FAULT_INJECTION: forcing a failure. [ 153.173404][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 153.186184][ T7089] CPU: 0 UID: 0 PID: 7089 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(full) [ 153.186206][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.186216][ T7089] Call Trace: [ 153.186222][ T7089] [ 153.186229][ T7089] dump_stack_lvl+0x16c/0x1f0 [ 153.186253][ T7089] should_fail_ex+0x512/0x640 [ 153.186273][ T7089] ? fs_reclaim_acquire+0xae/0x150 [ 153.186298][ T7089] should_failslab+0xc2/0x120 [ 153.186322][ T7089] __kmalloc_noprof+0xdd/0x880 [ 153.186340][ T7089] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 153.186368][ T7089] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 153.186390][ T7089] tomoyo_realpath_from_path+0xc2/0x6e0 [ 153.186416][ T7089] ? tomoyo_profile+0x47/0x60 [ 153.186445][ T7089] tomoyo_path_number_perm+0x245/0x580 [ 153.186465][ T7089] ? tomoyo_path_number_perm+0x237/0x580 [ 153.186487][ T7089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.186509][ T7089] ? find_held_lock+0x2b/0x80 [ 153.186550][ T7089] ? find_held_lock+0x2b/0x80 [ 153.186565][ T7089] ? hook_file_ioctl_common+0x145/0x410 [ 153.186589][ T7089] ? __fget_files+0x20e/0x3c0 [ 153.186616][ T7089] security_file_ioctl+0x9b/0x240 [ 153.186641][ T7089] __x64_sys_ioctl+0xb7/0x210 [ 153.186662][ T7089] do_syscall_64+0xcd/0xfa0 [ 153.186685][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.186703][ T7089] RIP: 0033:0x7ff29eb8eec9 [ 153.186717][ T7089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.186733][ T7089] RSP: 002b:00007ff29f9e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.186751][ T7089] RAX: ffffffffffffffda RBX: 00007ff29ede6090 RCX: 00007ff29eb8eec9 [ 153.186763][ T7089] RDX: 0000200000000000 RSI: 0000000040086200 RDI: 0000000000000006 [ 153.186774][ T7089] RBP: 00007ff29f9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 153.186785][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.186795][ T7089] R13: 00007ff29ede6128 R14: 00007ff29ede6090 R15: 00007ffcd3cfceb8 [ 153.186820][ T7089] [ 153.186851][ T7089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.975719][ T5853] usb 5-1: USB disconnect, device number 7 [ 154.141238][ T5892] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.320758][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 154.343018][ T5892] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 154.365797][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.389461][ T5892] usb 1-1: config 0 descriptor?? [ 154.430355][ T5892] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state [ 154.453714][ T5892] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 154.466961][ T5892] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 154.531531][ T5924] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.542412][ T5894] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.646629][ T978] usb 1-1: USB disconnect, device number 9 [ 154.710772][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 154.717304][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 154.731742][ T5894] usb 5-1: config 0 has no interfaces? [ 154.742761][ T5894] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 154.758874][ T5924] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 154.774699][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.791074][ T5924] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 154.800979][ T5894] usb 5-1: Product: syz [ 154.805151][ T5894] usb 5-1: Manufacturer: syz [ 154.809928][ T5924] usb 4-1: Product: syz [ 154.814692][ T5894] usb 5-1: SerialNumber: syz [ 154.819303][ T5924] usb 4-1: Manufacturer: syz [ 154.832958][ T5924] usb 4-1: SerialNumber: syz [ 154.841584][ T5894] usb 5-1: config 0 descriptor?? [ 154.860851][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.030916][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 155.037182][ T5892] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 155.045428][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.055293][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.065118][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.075130][ T5892] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.088215][ T5892] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.097336][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.130905][ T30] audit: type=1400 audit(1760485416.852:321): avc: denied { getopt } for pid=7122 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.174941][ T7113] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.184898][ T5924] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 155.201101][ T5924] visor 4-1:1.0: probe with driver visor failed with error -110 [ 155.286998][ T5872] usb 5-1: USB disconnect, device number 8 [ 155.610762][ T5892] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.776238][ T5892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 155.785920][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.797004][ T5892] usb 1-1: config 0 descriptor?? [ 155.899668][ T30] audit: type=1400 audit(1760485417.642:322): avc: denied { name_bind } for pid=7135 comm="syz.4.253" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 156.000746][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.164666][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 156.178533][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.194124][ T10] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 156.207313][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.224299][ T10] usb 3-1: Product: syz [ 156.248919][ T10] usb 3-1: Manufacturer: syz [ 156.263126][ T10] usb 3-1: SerialNumber: syz [ 156.303288][ T10] usb 3-1: config 0 descriptor?? [ 156.350832][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 156.664856][ T7129] input: syz1 as /devices/virtual/input/input15 [ 156.709668][ T7129] fuse: Bad value for 'fd' [ 156.784170][ T5892] ath6kl: Failed to read usb control message: -32 [ 156.792312][ T5892] ath6kl: Unable to read the bmi data from the device: -32 [ 156.803266][ T5892] ath6kl: unable to read target info byte count: -32 [ 156.816561][ T5892] ath6kl: Failed to init ath6kl core: -32 [ 156.824903][ T5892] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 156.838630][ T5892] usb 1-1: USB disconnect, device number 10 [ 157.581956][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 157.621187][ T7163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.251'. [ 157.697197][ T10] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 158.094646][ T10] usb 4-1: USB disconnect, device number 13 [ 158.396619][ T5872] usb 2-1: USB disconnect, device number 6 [ 159.331278][ T30] audit: type=1400 audit(1760485421.062:323): avc: denied { watch } for pid=7172 comm="syz.0.259" path="/56/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 159.362154][ T30] audit: type=1400 audit(1760485421.062:324): avc: denied { watch_sb watch_reads } for pid=7172 comm="syz.0.259" path="/56/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.805684][ T7174] tipc: Enabling of bearer rejected, already enabled [ 159.824718][ T7174] tipc: Enabling of bearer rejected, already enabled [ 159.865571][ T7173] fuse: Unknown parameter '0xffffffffffffffff' [ 159.912585][ T5924] usb 3-1: USB disconnect, device number 5 [ 160.273183][ T7187] usb usb8: usbfs: process 7187 (syz.2.260) did not claim interface 0 before use [ 160.304891][ T30] audit: type=1400 audit(1760485422.012:325): avc: denied { bind } for pid=7178 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.332211][ T978] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.494358][ T7183] FAULT_INJECTION: forcing a failure. [ 160.494358][ T7183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.601399][ T7183] CPU: 0 UID: 0 PID: 7183 Comm: syz.4.256 Not tainted syzkaller #0 PREEMPT(full) [ 160.601423][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.601434][ T7183] Call Trace: [ 160.601439][ T7183] [ 160.601446][ T7183] dump_stack_lvl+0x16c/0x1f0 [ 160.601470][ T7183] should_fail_ex+0x512/0x640 [ 160.601494][ T7183] _copy_to_user+0x32/0xd0 [ 160.601517][ T7183] simple_read_from_buffer+0xcb/0x170 [ 160.601541][ T7183] proc_fail_nth_read+0x197/0x240 [ 160.601566][ T7183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.601591][ T7183] ? rw_verify_area+0xcf/0x6c0 [ 160.601609][ T7183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.601632][ T7183] vfs_read+0x1e4/0xcf0 [ 160.601655][ T7183] ? __pfx___mutex_lock+0x10/0x10 [ 160.601676][ T7183] ? __pfx_vfs_read+0x10/0x10 [ 160.601703][ T7183] ? fdget_pos+0x1d7/0x370 [ 160.601740][ T7183] ksys_read+0x12a/0x250 [ 160.601759][ T7183] ? __pfx_ksys_read+0x10/0x10 [ 160.601787][ T7183] do_syscall_64+0xcd/0xfa0 [ 160.601808][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.601825][ T7183] RIP: 0033:0x7f39baf8d8dc [ 160.601838][ T7183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.601855][ T7183] RSP: 002b:00007f39bbdfe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.601871][ T7183] RAX: ffffffffffffffda RBX: 00007f39bb1e6090 RCX: 00007f39baf8d8dc [ 160.601882][ T7183] RDX: 000000000000000f RSI: 00007f39bbdfe0a0 RDI: 0000000000000009 [ 160.601892][ T7183] RBP: 00007f39bbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 160.601901][ T7183] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 160.601911][ T7183] R13: 00007f39bb1e6128 R14: 00007f39bb1e6090 R15: 00007ffc38ece0e8 [ 160.601935][ T7183] [ 160.603757][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 160.670797][ T30] audit: type=1800 audit(1760485422.352:326): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.256" name="/" dev="fuse" ino=3 res=0 errno=0 [ 161.004582][ T978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.013894][ T978] usb 1-1: config 1 has an invalid interface number: 48 but max is 0 [ 161.052926][ T978] usb 1-1: config 1 has no interface number 0 [ 161.059067][ T978] usb 1-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 161.130932][ T978] usb 1-1: config 1 interface 48 has no altsetting 0 [ 161.140073][ T978] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e [ 161.150176][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.238485][ T978] usb 1-1: Product: syz [ 161.243042][ T978] usb 1-1: Manufacturer: syz [ 161.337242][ T978] usb 1-1: SerialNumber: syz [ 161.352124][ T7181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.610807][ T7206] ceph: No mds server is up or the cluster is laggy [ 161.621989][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 161.628141][ T5894] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 161.637503][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 161.950730][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 162.154656][ T978] ti_usb_3410_5052 1-1:1.48: TI USB 3410 1 port adapter converter detected [ 162.172379][ T5894] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 162.653954][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.670656][ T978] usb 1-1: USB disconnect, device number 11 [ 162.679816][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.695049][ T30] audit: type=1400 audit(1760485424.442:327): avc: denied { setopt } for pid=7215 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.715482][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.715511][ T5894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.715548][ T5894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.715568][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.575255][ T5894] usb 5-1: USB disconnect, device number 9 [ 164.548543][ T30] audit: type=1400 audit(1760485426.262:328): avc: denied { nlmsg_read } for pid=7240 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.164579][ T7246] tipc: Enabling of bearer rejected, already enabled [ 165.181421][ T7246] tipc: Enabling of bearer rejected, already enabled [ 165.245601][ T7258] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 165.647032][ T7261] ceph: No mds server is up or the cluster is laggy [ 165.666253][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 165.874116][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 166.319825][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.285'. [ 166.639326][ T7275] block nbd1: shutting down sockets [ 167.730852][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.760848][ T5892] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.041990][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 168.091436][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 168.121461][ T10] usb 3-1: config 0 has no interface number 0 [ 168.128733][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 168.139747][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 168.180281][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.188579][ T10] usb 3-1: Product: syz [ 168.206870][ T10] usb 3-1: Manufacturer: syz [ 168.216756][ T10] usb 3-1: SerialNumber: syz [ 168.243211][ T5892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 168.253780][ T10] usb 3-1: config 0 descriptor?? [ 168.272361][ T10] smsc75xx v1.0.0 [ 168.276298][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.304831][ T5892] usb 1-1: config 0 descriptor?? [ 168.938160][ T7307] input: syz1 as /devices/virtual/input/input17 [ 169.314069][ T7288] input: syz1 as /devices/virtual/input/input18 [ 169.348488][ T7312] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 169.359186][ T7288] fuse: Bad value for 'fd' [ 169.962817][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 170.335240][ T5892] ath6kl: Failed to read usb control message: -71 [ 170.348979][ T5892] ath6kl: Unable to read the bmi data from the device: -71 [ 170.373832][ T5892] ath6kl: unable to read target info byte count: -71 [ 170.451531][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 170.461435][ T5892] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 170.481617][ T5892] usb 1-1: USB disconnect, device number 12 [ 170.541499][ T7332] block nbd1: Device being setup by another task [ 170.894877][ T7317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.931687][ T7328] block nbd1: shutting down sockets [ 170.987946][ T7317] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.014801][ T7317] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.058539][ T7317] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.090421][ T7317] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.570424][ T30] audit: type=1400 audit(1760485433.312:329): avc: denied { create } for pid=7359 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 171.755806][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.801258][ T30] audit: type=1400 audit(1760485433.322:330): avc: denied { connect } for pid=7359 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 171.830870][ T30] audit: type=1400 audit(1760485433.432:331): avc: denied { setopt } for pid=7360 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.850522][ T30] audit: type=1400 audit(1760485433.522:332): avc: denied { sqpoll } for pid=7360 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.976513][ T7369] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 172.848044][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.309'. [ 172.884487][ T978] libceph: connect (1)[c::]:6789 error -101 [ 172.890596][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 172.926944][ T7381] ceph: No mds server is up or the cluster is laggy [ 172.941100][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.021175][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.101611][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 173.101624][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.416664][ T5872] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.490788][ T978] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 173.594642][ T7402] FAULT_INJECTION: forcing a failure. [ 173.594642][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.624049][ T7402] CPU: 1 UID: 0 PID: 7402 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT(full) [ 173.624081][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.624091][ T7402] Call Trace: [ 173.624097][ T7402] [ 173.624105][ T7402] dump_stack_lvl+0x16c/0x1f0 [ 173.624130][ T7402] should_fail_ex+0x512/0x640 [ 173.624155][ T7402] _copy_from_user+0x2e/0xd0 [ 173.624179][ T7402] copy_msghdr_from_user+0x98/0x160 [ 173.624200][ T7402] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 173.624226][ T7402] ? __lock_acquire+0x622/0x1c90 [ 173.624252][ T7402] ___sys_recvmsg+0xdb/0x1a0 [ 173.624272][ T7402] ? __pfx____sys_recvmsg+0x10/0x10 [ 173.624313][ T7402] __sys_recvmsg+0x16a/0x220 [ 173.624335][ T7402] ? __pfx___sys_recvmsg+0x10/0x10 [ 173.624370][ T7402] do_syscall_64+0xcd/0xfa0 [ 173.624393][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.624410][ T7402] RIP: 0033:0x7f1975d8eec9 [ 173.624424][ T7402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.624441][ T7402] RSP: 002b:00007f1973fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 173.624457][ T7402] RAX: ffffffffffffffda RBX: 00007f1975fe6180 RCX: 00007f1975d8eec9 [ 173.624468][ T7402] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 173.624478][ T7402] RBP: 00007f1973fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 173.624488][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.624497][ T7402] R13: 00007f1975fe6218 R14: 00007f1975fe6180 R15: 00007ffe751e3918 [ 173.624526][ T7402] [ 173.680913][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 173.685873][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.790723][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 173.831471][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.852844][ T978] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 173.890726][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.929184][ T978] usb 1-1: Product: syz [ 173.940782][ T978] usb 1-1: Manufacturer: syz [ 173.981633][ T978] usb 1-1: SerialNumber: syz [ 174.019078][ T978] usb 1-1: config 0 descriptor?? [ 174.086760][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.099152][ T978] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 174.103551][ T5872] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 174.115331][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.135396][ T5872] usb 4-1: Product: syz [ 174.139608][ T5872] usb 4-1: Manufacturer: syz [ 174.146182][ T5872] usb 4-1: SerialNumber: syz [ 174.168615][ T5872] usb 4-1: config 0 descriptor?? [ 174.189464][ T5872] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 174.527120][ T7419] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 174.550878][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 174.654162][ T30] audit: type=1400 audit(1760485436.262:333): avc: denied { getopt } for pid=7405 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.887775][ T978] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 174.895108][ T978] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 174.942563][ T5872] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 175.588943][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 175.697109][ T7421] netlink: 44 bytes leftover after parsing attributes in process `syz.3.310'. [ 175.914484][ T5872] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 177.175504][ T978] usb 1-1: USB disconnect, device number 13 [ 177.783397][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 177.794658][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 177.804980][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110 [ 177.815031][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -110 [ 177.855000][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.318'. [ 178.628645][ T978] usb 4-1: USB disconnect, device number 14 [ 180.573381][ T7466] ceph: No mds server is up or the cluster is laggy [ 180.580524][ T978] libceph: connect (1)[c::]:6789 error -101 [ 180.614678][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 180.895038][ T7475] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 181.001352][ T7475] debugfs: 'ttyS3' already exists in 'caif_serial' [ 181.205932][ T7472] nvme_fabrics: missing parameter 'transport=%s' [ 181.235536][ T7472] nvme_fabrics: missing parameter 'nqn=%s' [ 181.460868][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 181.687355][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 181.802122][ T7497] input: syz1 as /devices/virtual/input/input19 [ 182.157709][ T978] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.333540][ T10] usb 1-1: config 0 has no interfaces? [ 182.336745][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 182.343094][ T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 182.483218][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.502809][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.510737][ T10] usb 1-1: Product: syz [ 182.519961][ T10] usb 1-1: Manufacturer: syz [ 182.531373][ T10] usb 1-1: SerialNumber: syz [ 182.540371][ T10] usb 1-1: config 0 descriptor?? [ 182.640006][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.687030][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.766453][ T978] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.808201][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.903285][ T7509] evm: overlay not supported [ 183.717475][ T7511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 183.727449][ T978] usb 4-1: config 0 descriptor?? [ 183.857991][ T10] usb 1-1: USB disconnect, device number 14 [ 184.526036][ T978] HID 045e:07da: Invalid code 65791 type 1 [ 184.598867][ T978] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input20 [ 184.624242][ T978] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 184.848695][ T5823] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 185.439771][ T10] usb 4-1: USB disconnect, device number 15 [ 185.470838][ T7526] fido_id[7526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 185.484504][ T7538] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 186.396910][ T7546] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 186.397047][ T7547] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 186.579819][ T7546] debugfs: 'ttyS3' already exists in 'caif_serial' [ 187.291213][ T5853] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.830764][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 187.953555][ T5853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.546561][ T7571] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 188.581729][ T5853] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 188.862101][ T5823] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 188.870753][ T5823] Bluetooth: hci3: Injecting HCI hardware error event [ 188.878579][ T5823] Bluetooth: hci3: hardware error 0x00 [ 188.888176][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.917323][ T5853] usb 1-1: Product: syz [ 188.936189][ T5853] usb 1-1: Manufacturer: syz [ 188.972344][ T5853] usb 1-1: SerialNumber: syz [ 189.025652][ T5853] usb 1-1: config 0 descriptor?? [ 189.031187][ T7581] nft_compat: unsupported protocol 0 [ 189.058231][ T5853] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 189.157695][ T7586] vlan2: entered promiscuous mode [ 189.162986][ T7586] bridge0: entered promiscuous mode [ 189.191334][ T30] audit: type=1400 audit(1760485450.942:334): avc: denied { bind } for pid=7582 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.210555][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.266686][ T30] audit: type=1400 audit(1760485450.942:335): avc: denied { ioctl } for pid=7582 comm="syz.4.345" path="socket:[14841]" dev="sockfs" ino=14841 ioctlcmd=0x545d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.291499][ T30] audit: type=1400 audit(1760485450.992:336): avc: denied { write } for pid=7582 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.310860][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.665719][ T7604] netlink: 44 bytes leftover after parsing attributes in process `syz.0.339'. [ 190.098230][ T5853] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 190.803630][ T5853] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 190.916144][ T7605] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 190.950869][ T5823] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 191.005113][ T7611] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 191.644129][ T5853] usb 1-1: USB disconnect, device number 15 [ 191.698339][ T7621] tipc: Enabling of bearer rejected, already enabled [ 191.707764][ T7621] tipc: Enabling of bearer rejected, already enabled [ 192.065529][ T7629] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 192.184420][ T7629] debugfs: 'ttyS3' already exists in 'caif_serial' [ 193.260858][ T30] audit: type=1400 audit(1760485454.992:337): avc: denied { write } for pid=7646 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 193.261812][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 193.346941][ T7655] vivid-000: disconnect [ 193.419121][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.466311][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.484843][ T7663] FAULT_INJECTION: forcing a failure. [ 193.484843][ T7663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.505147][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.3.362 Not tainted syzkaller #0 PREEMPT(full) [ 193.505172][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.505183][ T7663] Call Trace: [ 193.505188][ T7663] [ 193.505196][ T7663] dump_stack_lvl+0x16c/0x1f0 [ 193.505222][ T7663] should_fail_ex+0x512/0x640 [ 193.505252][ T7663] _copy_from_user+0x2e/0xd0 [ 193.505276][ T7663] copy_msghdr_from_user+0x98/0x160 [ 193.505297][ T7663] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 193.505331][ T7663] ___sys_sendmsg+0xfe/0x1d0 [ 193.505352][ T7663] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.505370][ T7663] ? __lock_acquire+0x622/0x1c90 [ 193.505425][ T7663] __sys_sendmsg+0x16d/0x220 [ 193.505445][ T7663] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.505483][ T7663] do_syscall_64+0xcd/0xfa0 [ 193.505505][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.505523][ T7663] RIP: 0033:0x7ff29eb8eec9 [ 193.505538][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.505554][ T7663] RSP: 002b:00007ff29fa09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.505571][ T7663] RAX: ffffffffffffffda RBX: 00007ff29ede5fa0 RCX: 00007ff29eb8eec9 [ 193.505583][ T7663] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.505593][ T7663] RBP: 00007ff29fa09090 R08: 0000000000000000 R09: 0000000000000000 [ 193.505603][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.505613][ T7663] R13: 00007ff29ede6038 R14: 00007ff29ede5fa0 R15: 00007ffcd3cfceb8 [ 193.505638][ T7663] [ 193.763158][ T7671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.361'. [ 193.823933][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.840083][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.849407][ T7675] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 194.205987][ T7648] vivid-000: reconnect [ 195.989270][ T7687] FAULT_INJECTION: forcing a failure. [ 195.989270][ T7687] name failslab, interval 1, probability 0, space 0, times 0 [ 196.026436][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz.1.368 Not tainted syzkaller #0 PREEMPT(full) [ 196.026461][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.026472][ T7687] Call Trace: [ 196.026478][ T7687] [ 196.026485][ T7687] dump_stack_lvl+0x16c/0x1f0 [ 196.026516][ T7687] should_fail_ex+0x512/0x640 [ 196.026537][ T7687] ? fs_reclaim_acquire+0xae/0x150 [ 196.026566][ T7687] should_failslab+0xc2/0x120 [ 196.026591][ T7687] __kmalloc_noprof+0xdd/0x880 [ 196.026611][ T7687] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 196.026642][ T7687] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 196.026665][ T7687] tomoyo_realpath_from_path+0xc2/0x6e0 [ 196.026692][ T7687] ? tomoyo_profile+0x47/0x60 [ 196.026721][ T7687] tomoyo_path_number_perm+0x245/0x580 [ 196.026741][ T7687] ? tomoyo_path_number_perm+0x237/0x580 [ 196.026765][ T7687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.026787][ T7687] ? find_held_lock+0x2b/0x80 [ 196.026829][ T7687] ? find_held_lock+0x2b/0x80 [ 196.026844][ T7687] ? hook_file_ioctl_common+0x145/0x410 [ 196.026867][ T7687] ? __fget_files+0x20e/0x3c0 [ 196.026894][ T7687] security_file_ioctl+0x9b/0x240 [ 196.026920][ T7687] __x64_sys_ioctl+0xb7/0x210 [ 196.026942][ T7687] do_syscall_64+0xcd/0xfa0 [ 196.026964][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.026981][ T7687] RIP: 0033:0x7fd8c158eec9 [ 196.026996][ T7687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.027013][ T7687] RSP: 002b:00007fd8c24dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.027030][ T7687] RAX: ffffffffffffffda RBX: 00007fd8c17e5fa0 RCX: 00007fd8c158eec9 [ 196.027042][ T7687] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 196.027052][ T7687] RBP: 00007fd8c24dc090 R08: 0000000000000000 R09: 0000000000000000 [ 196.027063][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.027079][ T7687] R13: 00007fd8c17e6038 R14: 00007fd8c17e5fa0 R15: 00007ffdf64b3968 [ 196.027113][ T7687] [ 196.027120][ T7687] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.416106][ T7691] tipc: Enabling of bearer rejected, already enabled [ 196.450969][ T7691] tipc: Enabling of bearer rejected, already enabled [ 196.530373][ T7697] tmpfs: Bad value for 'nr_inodes' [ 196.616440][ T7701] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.182612][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.528775][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.570528][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.579584][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.868001][ T5823] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 198.715629][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 198.825062][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 198.849645][ T7735] ceph: No mds server is up or the cluster is laggy [ 199.634248][ T30] audit: type=1400 audit(1760485461.382:338): avc: denied { firmware_load } for pid=7756 comm="syz.0.383" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 199.821715][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.877861][ T7759] syz.0.383 (7759) used greatest stack depth: 19288 bytes left [ 199.892422][ T5826] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 200.062078][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 200.085503][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.373378][ T5826] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 200.426313][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.456382][ T5826] usb 2-1: Product: syz [ 200.518822][ T7776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.385'. [ 201.122766][ T5826] usb 2-1: Manufacturer: syz [ 201.139786][ T5826] usb 2-1: SerialNumber: syz [ 201.271647][ T5826] usb 2-1: config 0 descriptor?? [ 201.703086][ T5826] usb 2-1: USB disconnect, device number 7 [ 201.909302][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 201.918923][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 201.927326][ T5823] Bluetooth: hci2: hardware error 0x00 [ 202.431198][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 204.024528][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 204.031211][ T30] audit: type=1400 audit(1760485464.982:339): avc: denied { append } for pid=7803 comm="syz.3.391" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 205.501947][ T7838] overlayfs: failed to resolve './file1': -2 [ 205.637190][ T7841] nvme_fabrics: missing parameter 'transport=%s' [ 205.644073][ T7841] nvme_fabrics: missing parameter 'nqn=%s' [ 206.111313][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.128470][ T7847] batadv_slave_0: entered promiscuous mode [ 206.797090][ T7861] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 207.099164][ T7867] tipc: Enabling of bearer rejected, already enabled [ 207.107494][ T7867] tipc: Enabling of bearer rejected, already enabled [ 207.281131][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 207.717704][ T7881] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 207.955402][ T7884] syz.3.404 uses obsolete (PF_INET,SOCK_PACKET) [ 208.055296][ T30] audit: type=1400 audit(1760485469.782:340): avc: denied { create } for pid=7889 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 208.469139][ T7897] input: syz1 as /devices/virtual/input/input21 [ 209.899179][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'. [ 210.526440][ T30] audit: type=1400 audit(1760485472.272:341): avc: denied { checkpoint_restore } for pid=7914 comm="syz.2.411" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.862337][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.870327][ T7930] batadv_slave_0: entered promiscuous mode [ 211.053112][ T7935] tipc: Enabling of bearer rejected, already enabled [ 211.061455][ T7935] tipc: Enabling of bearer rejected, already enabled [ 211.268077][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 211.640777][ T978] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 211.790751][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 211.853027][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.888910][ T978] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 211.928514][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.953512][ T978] usb 5-1: Product: syz [ 211.960270][ T978] usb 5-1: Manufacturer: syz [ 211.965416][ T978] usb 5-1: SerialNumber: syz [ 212.577186][ T978] usb 5-1: config 0 descriptor?? [ 212.596235][ T978] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 213.331025][ T978] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 214.225882][ T7961] nvme_fabrics: missing parameter 'transport=%s' [ 214.300378][ T7961] nvme_fabrics: missing parameter 'nqn=%s' [ 214.311063][ T978] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 215.768110][ T5853] usb 5-1: USB disconnect, device number 10 [ 215.991838][ T30] audit: type=1326 audit(1760485477.702:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7971 comm="syz.0.421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fe098eec9 code=0x0 [ 216.430151][ T7996] overlayfs: failed to resolve './file1': -2 [ 216.757915][ T8000] netlink: 56 bytes leftover after parsing attributes in process `syz.4.425'. [ 218.388367][ T5823] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 219.014858][ T8020] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 220.624698][ T8043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.632662][ T8043] batadv_slave_0: entered promiscuous mode [ 220.805825][ T978] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 220.975128][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 220.987284][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.210770][ T978] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 221.237899][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.284869][ T8051] tipc: Enabling of bearer rejected, already enabled [ 221.288292][ T978] usb 2-1: Product: syz [ 221.296945][ T978] usb 2-1: Manufacturer: syz [ 221.303863][ T978] usb 2-1: SerialNumber: syz [ 221.314378][ T978] usb 2-1: config 0 descriptor?? [ 221.336678][ T8051] tipc: Enabling of bearer rejected, already enabled [ 221.347598][ T978] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 221.892482][ T8063] netlink: 44 bytes leftover after parsing attributes in process `syz.1.433'. [ 222.060921][ T978] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 222.470797][ T5823] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 222.479498][ T5823] Bluetooth: hci4: Injecting HCI hardware error event [ 222.488919][ T5819] Bluetooth: hci4: hardware error 0x00 [ 222.827944][ T978] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 224.602958][ T30] audit: type=1326 audit(1760485486.322:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.3.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff29eb8eec9 code=0x0 [ 224.603006][ T5819] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 225.372179][ T8083] overlayfs: failed to resolve './file1': -2 [ 225.667343][ T5853] usb 2-1: USB disconnect, device number 8 [ 226.218363][ T8097] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 226.382701][ T8102] netlink: 56 bytes leftover after parsing attributes in process `syz.1.445'. [ 227.258950][ T8120] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 228.092010][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.180869][ T8136] batadv_slave_0: entered promiscuous mode [ 229.532681][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.601022][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.557051][ T8161] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 232.129120][ T8188] netlink: 56 bytes leftover after parsing attributes in process `syz.4.459'. [ 232.190963][ T5924] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 232.399510][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 232.439348][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.562725][ T5924] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 232.647615][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.733626][ T5924] usb 4-1: Product: syz [ 232.737931][ T5924] usb 4-1: Manufacturer: syz [ 232.772914][ T5924] usb 4-1: SerialNumber: syz [ 232.811440][ T5924] usb 4-1: config 0 descriptor?? [ 232.835331][ T5924] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 233.102978][ T30] audit: type=1400 audit(1760485494.852:344): avc: denied { mount } for pid=8216 comm="syz.1.464" name="/" dev="autofs" ino=16770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 233.134199][ T8218] nvme_fabrics: missing parameter 'transport=%s' [ 233.291400][ T8218] nvme_fabrics: missing parameter 'nqn=%s' [ 233.309640][ T30] audit: type=1400 audit(1760485495.002:345): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 233.960997][ T5924] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 233.972227][ T8228] netlink: 44 bytes leftover after parsing attributes in process `syz.3.456'. [ 233.979081][ T5924] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 235.906856][ T978] usb 4-1: USB disconnect, device number 16 [ 236.020728][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.366535][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 236.391241][ T5879] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 236.407043][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.454744][ T5879] usb 2-1: config 0 descriptor?? [ 236.480107][ T5879] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 236.530704][ T5879] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 236.537124][ T5879] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 236.695552][ T5879] usb 2-1: USB disconnect, device number 9 [ 237.749927][ T30] audit: type=1400 audit(1760485499.492:346): avc: denied { ioctl } for pid=8274 comm="syz.4.474" path="socket:[16837]" dev="sockfs" ino=16837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.469175][ T8284] overlayfs: failed to resolve './file1': -2 [ 241.326062][ T8300] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 241.738673][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 241.900813][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 241.978321][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.063570][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 242.125034][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.199000][ T8301] nvme_fabrics: missing parameter 'transport=%s' [ 242.216651][ T10] usb 2-1: Product: syz [ 242.224871][ T8301] nvme_fabrics: missing parameter 'nqn=%s' [ 242.240965][ T10] usb 2-1: Manufacturer: syz [ 242.257873][ T10] usb 2-1: SerialNumber: syz [ 242.264931][ T10] usb 2-1: config 0 descriptor?? [ 242.275264][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 243.104342][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 243.136718][ T10] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 243.235422][ T8317] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 243.300275][ T8322] netlink: 44 bytes leftover after parsing attributes in process `syz.1.480'. [ 244.860774][ T848] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 245.176938][ T978] libceph: connect (1)[c::]:6789 error -101 [ 245.183088][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 245.196755][ T8342] ceph: No mds server is up or the cluster is laggy [ 245.253494][ T848] usb 5-1: Using ep0 maxpacket: 32 [ 245.422062][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.468635][ T848] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 245.477971][ T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.486271][ T848] usb 5-1: Product: syz [ 245.497792][ T10] usb 2-1: USB disconnect, device number 10 [ 245.537513][ T848] usb 5-1: Manufacturer: syz [ 245.582379][ T848] usb 5-1: SerialNumber: syz [ 245.658608][ T8352] debugfs: 'ttyS3' already exists in 'caif_serial' [ 245.748734][ T848] usb 5-1: config 0 descriptor?? [ 245.776662][ T848] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 245.981295][ T8363] nvme_fabrics: missing parameter 'transport=%s' [ 245.987755][ T8363] nvme_fabrics: missing parameter 'nqn=%s' [ 246.405285][ T8369] netlink: 44 bytes leftover after parsing attributes in process `syz.4.484'. [ 247.610781][ T848] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 247.617740][ T848] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 247.848028][ T8374] overlayfs: failed to resolve './file1': -2 [ 249.060055][ T5879] usb 5-1: USB disconnect, device number 11 [ 249.430378][ T8394] netlink: 56 bytes leftover after parsing attributes in process `syz.4.494'. [ 251.017947][ T8411] ceph: No mds server is up or the cluster is laggy [ 251.025858][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 251.034441][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 251.236192][ T8420] nvme_fabrics: missing parameter 'transport=%s' [ 251.252886][ T8420] nvme_fabrics: missing parameter 'nqn=%s' [ 251.613588][ T8432] netlink: 56 bytes leftover after parsing attributes in process `syz.0.501'. [ 253.450819][ T848] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 253.563959][ T5819] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 253.690868][ T848] usb 1-1: Using ep0 maxpacket: 32 [ 253.700252][ T848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.154445][ T848] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 254.163657][ T848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.172327][ T848] usb 1-1: Product: syz [ 254.176490][ T848] usb 1-1: Manufacturer: syz [ 254.181322][ T848] usb 1-1: SerialNumber: syz [ 254.200558][ T848] usb 1-1: config 0 descriptor?? [ 254.220012][ T848] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 254.696217][ T8470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.505'. [ 254.970831][ T848] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 255.262629][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.268942][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.343661][ T848] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 360.350602][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 360.357556][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3452/1:b..l P8473/1:b..l P8436/1:b..l [ 360.368033][ C1] rcu: (detected by 1, t=10502 jiffies, g=19713, q=254 ncpus=2) [ 360.375724][ C1] task:syz.2.503 state:R running task stack:25864 pid:8436 tgid:8436 ppid:5821 task_flags:0x40004c flags:0x00080001 [ 360.389826][ C1] Call Trace: [ 360.393096][ C1] [ 360.396006][ C1] __schedule+0x1190/0x5de0 [ 360.400494][ C1] ? __pfx___schedule+0x10/0x10 [ 360.405331][ C1] preempt_schedule_irq+0x51/0x90 [ 360.410334][ C1] irqentry_exit+0x36/0x90 [ 360.414728][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.420687][ C1] RIP: 0010:lock_is_held_type+0x107/0x150 [ 360.426395][ C1] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 fc 9a 3e 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 45 31 ed eb [ 360.446494][ C1] RSP: 0018:ffffc9001c84f4a0 EFLAGS: 00000296 [ 360.452552][ C1] RAX: 0000000000000046 RBX: ffff888028532fb0 RCX: 0000000000000001 [ 360.460493][ C1] RDX: 0000000000000000 RSI: ffffffff8dadd953 RDI: ffffffff8bf1e2c0 [ 360.468433][ C1] RBP: ffff8880327e2a90 R08: 0000000000000005 R09: 0000000000000000 [ 360.476373][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888028532480 [ 360.484315][ C1] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000001 [ 360.492265][ C1] xas_reload+0x27f/0x4a0 [ 360.496574][ C1] find_lock_entries+0x1e1/0xbf0 [ 360.501489][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 360.506922][ C1] ? __pfx___might_resched+0x10/0x10 [ 360.512176][ C1] ? mlock_drain_local+0x24c/0x4f0 [ 360.517269][ C1] shmem_undo_range+0x216/0x1150 [ 360.522199][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 360.527556][ C1] ? __lock_acquire+0x622/0x1c90 [ 360.532485][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 360.537220][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.543344][ C1] ? percpu_counter_add_batch+0xca/0x200 [ 360.548948][ C1] shmem_evict_inode+0x3a1/0xbe0 [ 360.553857][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 360.559296][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 360.565354][ C1] ? find_held_lock+0x2b/0x80 [ 360.570013][ C1] ? evict+0x3a2/0x920 [ 360.574060][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 360.579492][ C1] evict+0x3e6/0x920 [ 360.583365][ C1] ? __pfx_evict+0x10/0x10 [ 360.587754][ C1] ? iput.part.0+0x6a1/0xb00 [ 360.592314][ C1] iput.part.0+0x6a9/0xb00 [ 360.596701][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 360.601959][ C1] iput+0x35/0x40 [ 360.605562][ C1] dentry_unlink_inode+0x29c/0x480 [ 360.610649][ C1] __dentry_kill+0x1d0/0x600 [ 360.615224][ C1] dput.part.0+0x4b1/0x9b0 [ 360.619624][ C1] dput+0x1f/0x30 [ 360.623248][ C1] __fput+0x51c/0xb70 [ 360.627218][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.632392][ C1] task_work_run+0x150/0x240 [ 360.636962][ C1] ? __pfx_task_work_run+0x10/0x10 [ 360.642057][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 360.647254][ C1] do_exit+0x86f/0x2bf0 [ 360.651388][ C1] ? __pfx_do_exit+0x10/0x10 [ 360.655954][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 360.661308][ C1] do_group_exit+0xd3/0x2a0 [ 360.665806][ C1] __x64_sys_exit_group+0x3e/0x50 [ 360.670808][ C1] x64_sys_call+0x150b/0x1730 [ 360.675455][ C1] do_syscall_64+0xcd/0xfa0 [ 360.679931][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.685795][ C1] RIP: 0033:0x7f1975d8eec9 [ 360.690190][ C1] RSP: 002b:00007ffe751e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 360.698571][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1975d8eec9 [ 360.706514][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.714464][ C1] RBP: 00007ffe751e3cdc R08: 00000019751e3d6f R09: 00000000000927c0 [ 360.722411][ C1] R10: 00000000000055d4 R11: 0000000000000246 R12: 000000000000005b [ 360.730387][ C1] R13: 00000000000927c0 R14: 000000000003d62f R15: 00007ffe751e3d30 [ 360.738340][ C1] [ 360.741333][ C1] task:dhcpcd-run-hook state:R running task stack:27736 pid:8473 tgid:8473 ppid:8452 task_flags:0x40004c flags:0x00080001 [ 360.754771][ C1] Call Trace: [ 360.758024][ C1] [ 360.760929][ C1] __schedule+0x1190/0x5de0 [ 360.765423][ C1] ? __pfx___schedule+0x10/0x10 [ 360.770251][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 360.775166][ C1] ? mark_held_locks+0x49/0x80 [ 360.779904][ C1] preempt_schedule_irq+0x51/0x90 [ 360.784900][ C1] irqentry_exit+0x36/0x90 [ 360.789288][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 360.794716][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 360.799887][ C1] Code: 57 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 14 ea 0e 0f 82 74 02 00 00 8b 35 1a 45 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 56 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 360.819463][ C1] RSP: 0018:ffffc9001c5af720 EFLAGS: 00000206 [ 360.825506][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 00000000cddfa937 [ 360.833464][ C1] RDX: 0000000000000000 RSI: ffffffff8dadd953 RDI: ffffffff8bf1e2c0 [ 360.841407][ C1] RBP: 0000000000000002 R08: 7282142a8cea8bfd R09: 0000000000000000 [ 360.849353][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 360.857306][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.865268][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 360.870453][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.876583][ C1] unwind_next_frame+0xd1/0x20a0 [ 360.881498][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 360.886584][ C1] ? do_group_exit+0xd3/0x2a0 [ 360.891234][ C1] ? unwind_get_return_address+0x59/0xa0 [ 360.896841][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.902963][ C1] arch_stack_walk+0x94/0x100 [ 360.907617][ C1] ? do_group_exit+0xd3/0x2a0 [ 360.912265][ C1] stack_trace_save+0x8e/0xc0 [ 360.916911][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 360.922254][ C1] ? kasan_save_stack+0x42/0x60 [ 360.927083][ C1] ? kasan_save_stack+0x33/0x60 [ 360.931925][ C1] kasan_save_stack+0x33/0x60 [ 360.936576][ C1] ? kasan_save_stack+0x33/0x60 [ 360.941399][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 360.946740][ C1] ? kmem_cache_free+0x15e/0x6c0 [ 360.951647][ C1] ? exit_mmap+0x50a/0xb90 [ 360.956043][ C1] ? __mmput+0x12a/0x410 [ 360.960253][ C1] ? mmput+0x62/0x70 [ 360.964127][ C1] ? do_exit+0x7c7/0x2bf0 [ 360.968426][ C1] ? do_group_exit+0xd3/0x2a0 [ 360.973090][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 360.978259][ C1] kmem_cache_free+0x15e/0x6c0 [ 360.982993][ C1] ? exit_mmap+0x50a/0xb90 [ 360.987394][ C1] ? exit_mmap+0x50a/0xb90 [ 360.991804][ C1] exit_mmap+0x50a/0xb90 [ 360.996034][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 361.000785][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.005979][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 361.011503][ C1] __mmput+0x12a/0x410 [ 361.015546][ C1] mmput+0x62/0x70 [ 361.019236][ C1] do_exit+0x7c7/0x2bf0 [ 361.023362][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.028542][ C1] ? __pfx_do_exit+0x10/0x10 [ 361.033103][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 361.038465][ C1] do_group_exit+0xd3/0x2a0 [ 361.042943][ C1] __x64_sys_exit_group+0x3e/0x50 [ 361.047939][ C1] x64_sys_call+0x150b/0x1730 [ 361.052594][ C1] do_syscall_64+0xcd/0xfa0 [ 361.057072][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.062933][ C1] RIP: 0033:0x7fb86a1746c5 [ 361.067329][ C1] RSP: 002b:00007ffc86c0c458 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 361.075710][ C1] RAX: ffffffffffffffda RBX: 00007ffc86c0c704 RCX: 00007fb86a1746c5 [ 361.083650][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 361.091591][ C1] RBP: 0000000000000003 R08: 00007ffc86c0c550 R09: 0000000000000002 [ 361.099535][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 361.107477][ C1] R13: 00007ffc86c0c790 R14: 00007fb86a384000 R15: 00005600577c5d98 [ 361.115426][ C1] [ 361.118420][ C1] task:kworker/u8:7 state:R running task stack:25592 pid:3452 tgid:3452 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 361.131954][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 361.138191][ C1] Call Trace: [ 361.141442][ C1] [ 361.144346][ C1] __schedule+0x1190/0x5de0 [ 361.148822][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.153996][ C1] ? __pfx___schedule+0x10/0x10 [ 361.158816][ C1] ? __lock_acquire+0x622/0x1c90 [ 361.163739][ C1] ? mark_held_locks+0x49/0x80 [ 361.168480][ C1] preempt_schedule_irq+0x51/0x90 [ 361.173486][ C1] irqentry_exit+0x36/0x90 [ 361.177873][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 361.183301][ C1] RIP: 0010:unwind_next_frame+0x646/0x20a0 [ 361.189082][ C1] Code: c1 e8 03 0f b6 34 10 48 8d 41 01 48 89 c7 48 c1 ef 03 0f b6 14 17 48 89 cf 83 e7 07 40 38 fe 40 0f 9e c7 40 84 f6 40 0f 95 c6 <40> 84 f7 0f 85 a1 16 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 [ 361.208658][ C1] RSP: 0018:ffffc9000c6bf2d8 EFLAGS: 00000246 [ 361.214695][ C1] RAX: ffffffff91bf7b59 RBX: 0000000000000001 RCX: ffffffff91bf7b58 [ 361.222638][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 361.230579][ C1] RBP: ffffc9000c6bf390 R08: ffffffff91bf7b5c R09: 0000000000000000 [ 361.238545][ C1] R10: 0000000000000000 R11: 000000000009b2a9 R12: ffffc9000c6bf398 [ 361.246487][ C1] R13: ffffc9000c6bf348 R14: 0000000000000005 R15: ffffc9000c6bfc00 [ 361.254438][ C1] ? unwind_next_frame+0x2ec/0x20a0 [ 361.259625][ C1] ? cfg80211_wiphy_work+0x2c7/0x580 [ 361.264885][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 361.271012][ C1] arch_stack_walk+0x94/0x100 [ 361.275666][ C1] ? cfg80211_wiphy_work+0x2c7/0x580 [ 361.280924][ C1] stack_trace_save+0x8e/0xc0 [ 361.285571][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 361.290915][ C1] kasan_save_stack+0x33/0x60 [ 361.295576][ C1] ? kasan_save_stack+0x33/0x60 [ 361.300396][ C1] ? kasan_save_track+0x14/0x30 [ 361.305227][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 361.309961][ C1] ? __kmalloc_noprof+0x32f/0x880 [ 361.314955][ C1] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 361.320992][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 361.327218][ C1] ? ieee80211_iface_work+0xe2e/0x1360 [ 361.332644][ C1] ? cfg80211_wiphy_work+0x2c7/0x580 [ 361.337918][ C1] kasan_save_track+0x14/0x30 [ 361.342570][ C1] __kasan_kmalloc+0xaa/0xb0 [ 361.347131][ C1] __kmalloc_noprof+0x32f/0x880 [ 361.351951][ C1] ? unwind_next_frame+0x3fe/0x20a0 [ 361.357121][ C1] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 361.363160][ C1] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 361.369193][ C1] ieee802_11_parse_elems_full+0x1db/0x3780 [ 361.375055][ C1] ? arch_stack_walk+0x94/0x100 [ 361.379884][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 361.384807][ C1] ? stack_trace_save+0x8e/0xc0 [ 361.389629][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 361.394981][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 361.400422][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 361.406721][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 361.411652][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 361.416313][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 361.421483][ C1] ? ieee80211_iface_work+0x435/0x1360 [ 361.426919][ C1] ? cfg80211_wiphy_work+0x2c7/0x580 [ 361.432176][ C1] ? process_one_work+0x9cf/0x1b70 [ 361.437274][ C1] ? worker_thread+0x6c8/0xf10 [ 361.442009][ C1] ? kthread+0x3c5/0x780 [ 361.446226][ C1] ? ret_from_fork+0x675/0x7d0 [ 361.450963][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 361.455874][ C1] ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 361.461923][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 361.468397][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 361.473322][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 361.478405][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 361.483659][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.488393][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 361.493482][ C1] process_one_work+0x9cf/0x1b70 [ 361.498397][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 361.504003][ C1] ? __pfx_process_one_work+0x10/0x10 [ 361.509363][ C1] ? assign_work+0x1a0/0x250 [ 361.513926][ C1] worker_thread+0x6c8/0xf10 [ 361.518506][ C1] ? __pfx_worker_thread+0x10/0x10 [ 361.523594][ C1] kthread+0x3c5/0x780 [ 361.527636][ C1] ? __pfx_kthread+0x10/0x10 [ 361.532198][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.536931][ C1] ? __pfx_kthread+0x10/0x10 [ 361.541502][ C1] ret_from_fork+0x675/0x7d0 [ 361.546082][ C1] ? __pfx_kthread+0x10/0x10 [ 361.550650][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.555415][ C1] [ 361.558406][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10619 jiffies! g19713 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 361.570692][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=17420 [ 361.578558][ C1] rcu: rcu_preempt kthread starved for 10620 jiffies! g19713 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 361.589899][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 361.599846][ C1] rcu: RCU grace-period kthread stack dump: [ 361.605701][ C1] task:rcu_preempt state:I stack:28824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 361.617576][ C1] Call Trace: [ 361.620829][ C1] [ 361.623740][ C1] __schedule+0x1190/0x5de0 [ 361.628218][ C1] ? __lock_acquire+0x622/0x1c90 [ 361.633132][ C1] ? __pfx___schedule+0x10/0x10 [ 361.637955][ C1] ? find_held_lock+0x2b/0x80 [ 361.642600][ C1] ? schedule+0x2d7/0x3a0 [ 361.646902][ C1] schedule+0xe7/0x3a0 [ 361.650944][ C1] schedule_timeout+0x123/0x290 [ 361.655765][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 361.661122][ C1] ? __pfx_process_timeout+0x10/0x10 [ 361.666378][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 361.672153][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 361.677585][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 361.682324][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 361.687580][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 361.692494][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.697227][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 361.703005][ C1] rcu_gp_kthread+0x26d/0x380 [ 361.707660][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.712833][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.717566][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.722739][ C1] ? __kthread_parkme+0x19e/0x250 [ 361.727738][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.732907][ C1] kthread+0x3c5/0x780 [ 361.736948][ C1] ? __pfx_kthread+0x10/0x10 [ 361.741511][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.746251][ C1] ? __pfx_kthread+0x10/0x10 [ 361.750846][ C1] ret_from_fork+0x675/0x7d0 [ 361.755427][ C1] ? __pfx_kthread+0x10/0x10 [ 361.759990][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.764743][ C1] [ 361.767737][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 361.774029][ C1] CPU: 1 UID: 0 PID: 1297 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 361.783016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.793053][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 361.799439][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 47 30 f6 48 89 df e8 8e 9b 30 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 a6 20 f6 65 8b 05 7e a5 3b 08 85 c0 74 16 5b [ 361.819024][ C1] RSP: 0018:ffffc9000462f958 EFLAGS: 00000246 [ 361.825073][ C1] RAX: 0000000000000002 RBX: ffffffff9ae082e0 RCX: 0000000000000002 [ 361.833014][ C1] RDX: 0000000000000000 RSI: ffffffff8db0330f RDI: ffffffff8bf1e2c0 [ 361.840966][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 361.848913][ C1] R10: ffffffff90832dd7 R11: 0000000000000001 R12: ffffffff8f072d60 [ 361.856872][ C1] R13: ffffffff9ae083e8 R14: 0000000000000000 R15: ffffffff9ae08420 [ 361.864824][ C1] FS: 0000000000000000(0000) GS:ffff888124ad9000(0000) knlGS:0000000000000000 [ 361.873728][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.880288][ C1] CR2: 0000200000035030 CR3: 000000007bda0000 CR4: 00000000003526f0 [ 361.888231][ C1] Call Trace: [ 361.891483][ C1] [ 361.894388][ C1] uart_write_room+0x2d9/0x940 [ 361.899138][ C1] ? __pfx_uart_write_room+0x10/0x10 [ 361.904396][ C1] tty_write_room+0x66/0x90 [ 361.908871][ C1] handle_tx+0x14f/0x630 [ 361.913105][ C1] dev_hard_start_xmit+0x97/0x740 [ 361.918108][ C1] __dev_queue_xmit+0xa46/0x4490 [ 361.923017][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.928200][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 361.933993][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.938726][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 361.944069][ C1] ? __schedule+0x11a3/0x5de0 [ 361.948719][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 361.953634][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 361.958549][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 361.963546][ C1] ? find_held_lock+0x2b/0x80 [ 361.968193][ C1] ? skb_dequeue+0x126/0x180 [ 361.972756][ C1] ? find_held_lock+0x2b/0x80 [ 361.977402][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.982136][ C1] tx+0xcc/0x190 [ 361.985655][ C1] ? __pfx_tx+0x10/0x10 [ 361.989778][ C1] kthread+0x1e4/0x3e0 [ 361.993823][ C1] ? find_held_lock+0x2b/0x80 [ 361.998469][ C1] ? __pfx_kthread+0x10/0x10 [ 362.003034][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 362.008815][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 362.013984][ C1] ? __kthread_parkme+0x19e/0x250 [ 362.018980][ C1] ? __pfx_kthread+0x10/0x10 [ 362.023561][ C1] kthread+0x3c5/0x780 [ 362.027607][ C1] ? __pfx_kthread+0x10/0x10 [ 362.032169][ C1] ? rcu_is_watching+0x12/0xc0 [ 362.036931][ C1] ? __pfx_kthread+0x10/0x10 [ 362.041493][ C1] ret_from_fork+0x675/0x7d0 [ 362.046065][ C1] ? __pfx_kthread+0x10/0x10 [ 362.050650][ C1] ret_from_fork_asm+0x1a/0x30 [ 362.055478][ C1]