last executing test programs: 2m36.157098296s ago: executing program 4 (id=1470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) fsync(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8080, 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='./nfsd\x00', 0x2, 0x80) readv(r5, &(0x7f0000001e80)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) syz_open_dev$video(&(0x7f0000000080), 0xe, 0x8800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x41}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) listen(r2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m34.486883863s ago: executing program 4 (id=1474): socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13b}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 2m34.09400307s ago: executing program 4 (id=1475): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\x8c\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tmLt,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\x00'/187, &(0x7f0000000c40)='\xec5\xae\r\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdf\x98\x17\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbP2$\xbc\xc9\x89\xb5\n\xd0\x9d\x90-i%\xe2\x95\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb0\'f/\xb4Ap\xa5\x8a\xc3\xe1k\xb3F\xfd\xa2<\x03\x94\x7f\xef\xbeV7\xb1\xf2\x85\xafE\xba\x18K\xb4\xde7\xfb\x8ffw\xe7>>\xf5 \x94\xc74(\xcb\xa3,Nw5\x1d^x\xe9\xd3\x85o\x90\xcc\xb1F\x9d\xa3\x90@\xba6\x1c\xbcp\x93?\x86\tS\xe4q\x0f\xba\xe4\xa5\'\x046\xfbN\xcb\x06\x99\xb7\xeaX\x17\xe8\xdeAF\xf8\xa7\x97\xeb\xcc\xc1\a5C\xe2\x13L\x03\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) listen(r1, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40e00, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x9, 0x0, 0xb, 0x9}, 0x10) read$FUSE(r4, &(0x7f0000004200)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000700)=""/232, 0xe8}], 0x1) mkdir(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r5, 0xb) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x2204c040) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) 2m32.677441346s ago: executing program 4 (id=1485): socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13b}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 2m31.506512771s ago: executing program 4 (id=1491): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setpgid(0x0, 0x0) setpgid(0x0, 0x0) fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd5d7a000) umount2(0x0, 0x9) 2m31.177363749s ago: executing program 4 (id=1493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2, 0x2}) open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x1) r2 = syz_open_pts(r1, 0x800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x5) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl(r4, 0x4048aec9, &(0x7f0000000300)="0200") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)="28fcb5a0cf", &(0x7f0000000400)="93777c9c42ddc6020000004ee97046b2070b590824123b45a5e6631d15c83d53589be3e08f76c348339409e0035e040b405ad4ef10076e18ab6a000000000000000000000000000090467c7a978050503afe1261357fe13824a1c6d3d8bd9c94f8", 0x7, r6}, 0x38) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r8, &(0x7f0000006580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x335c, 0x30}, &(0x7f0000000140)=0xc) 2m15.812226508s ago: executing program 32 (id=1493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2, 0x2}) open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x1) r2 = syz_open_pts(r1, 0x800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x5) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl(r4, 0x4048aec9, &(0x7f0000000300)="0200") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)="28fcb5a0cf", &(0x7f0000000400)="93777c9c42ddc6020000004ee97046b2070b590824123b45a5e6631d15c83d53589be3e08f76c348339409e0035e040b405ad4ef10076e18ab6a000000000000000000000000000090467c7a978050503afe1261357fe13824a1c6d3d8bd9c94f8", 0x7, r6}, 0x38) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r8, &(0x7f0000006580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x335c, 0x30}, &(0x7f0000000140)=0xc) 14.110205824s ago: executing program 2 (id=1887): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) close(r1) 9.708010192s ago: executing program 2 (id=1904): pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x6, 0x10000, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x8, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 9.489388198s ago: executing program 3 (id=1906): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) ioctl(r1, 0x5424, &(0x7f0000000200)) 9.021368239s ago: executing program 2 (id=1910): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a00)={0x34, &(0x7f0000000900)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002180)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002540)={0x34, &(0x7f0000002340)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 7.344718893s ago: executing program 0 (id=1916): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d11200000010203010902200001010080320904000002ff0000000705810308000a07050203"], 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f0000000300)='xdevxcharx188x0', 0xf) read(r0, &(0x7f0000000400), 0x10) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000400), 0x1) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000404), 0x1) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000409), 0x1) write(r1, &(0x7f0000000300)=':', 0x1) read(r0, &(0x7f000000040d), 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r6) openat(0xffffffffffffff9c, &(0x7f0000000400), 0x181a03, 0x0) 7.162856663s ago: executing program 3 (id=1917): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='2\n', 0x2) close(r2) 5.368919269s ago: executing program 3 (id=1926): r0 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:0:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.346110247s ago: executing program 5 (id=1929): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/ram0,131072\x00', 0x11) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000140)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ubi0\x00', 0x2, 0x0) 4.344538639s ago: executing program 0 (id=1930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r3, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b4", 0x10) 4.259197777s ago: executing program 5 (id=1931): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r2, 0x3e8}}, 0x48) 3.705608786s ago: executing program 5 (id=1934): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7f, 0x5, 0x0, 0x1}, {0x8, 0x3, 0x9}]}, 0x10) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 3.656879643s ago: executing program 2 (id=1935): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) write(r0, &(0x7f0000000200)='5\n\x00', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r0) 3.300070087s ago: executing program 0 (id=1936): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver\x00', &(0x7f0000000200)=""/256, 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0/driver\x00', &(0x7f0000000200)=""/256, 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', &(0x7f0000000200)=""/256, 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:03.0/driver\x00', &(0x7f0000000200)=""/256, 0x100) 3.043141795s ago: executing program 0 (id=1937): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000104000000200000000000000000000001040000002000000000000000"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000004000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200"/28], 0x48) 3.023096117s ago: executing program 3 (id=1938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) 2.965367972s ago: executing program 0 (id=1939): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r4 = socket(0x2d, 0x2, 0x0) connect$netlink(r4, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00') fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) 2.963896892s ago: executing program 3 (id=1940): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 2.844922855s ago: executing program 3 (id=1941): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d11200000010203010902200001010080320904000002ff0000000705810308000a07050203"], 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f0000000300)='xdevxcharx188x0', 0xf) read(r0, &(0x7f0000000400), 0x10) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000400), 0x1) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000404), 0x1) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000409), 0x1) write(r1, &(0x7f0000000300)=':', 0x1) read(r0, &(0x7f000000040d), 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r6) openat(0xffffffffffffff9c, &(0x7f0000000400), 0x181a03, 0x0) 2.764953323s ago: executing program 5 (id=1942): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 1.739402215s ago: executing program 1 (id=1944): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') ioctl(r1, 0x4048aec9, &(0x7f0000000300)="0200000000000000aa") ioctl(r2, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.684784787s ago: executing program 0 (id=1945): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0) 1.659532723s ago: executing program 5 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x200) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 1.547836758s ago: executing program 1 (id=1947): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/event_source/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000), 0x1000) 1.521244567s ago: executing program 1 (id=1948): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000001100), &(0x7f0000001140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x29, &(0x7f00000010c0)=""/41}, &(0x7f0000000300)="19f558739d57", 0x0, 0x100886, 0x10030, 0x3, 0x0}) 801.011828ms ago: executing program 2 (id=1949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x0, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00'}) close(r0) 294.12732ms ago: executing program 1 (id=1950): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/event_source/devices/cpu/type\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/event_source/devices/power/type\x00', 0x0, 0x0) 152.804141ms ago: executing program 1 (id=1951): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/rndis.usb0/os_desc/interface.rndis/prop1\x00', 0x1ff) add_key(&(0x7f0000002240)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x44}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 115.562955ms ago: executing program 2 (id=1952): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'comedi_test\x00'}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00'}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000400)={0xc000002, 0x2, &(0x7f0000000500)=[0x1, 0x1]}) 64.990896ms ago: executing program 5 (id=1953): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) r4 = memfd_create(0x0, 0x0) write(r4, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) symlink(0x0, 0x0) 0s ago: executing program 1 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa2203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="64f3460f001a66bad004ecc4c1f817070fc79e00600000440f20c0350f000000440f22c00f01c967459b0f23ac0fc7bd09000000c7442400cdd30000c744240210000000c7442406000000000f011c24", 0x50}], 0x1, 0x64, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000955000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x40, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 94149 [ 685.606067][T11604] numa_miss 1 [ 685.606067][T11604] numa_foreign 1 [ 685.606067][T11604] numa_interleave 5822 [ 685.606067][T11604] numa_local 2091128 [ 685.606067][T11604] numa_other 3022 [ 685.606067][T11604] nr_inactive_anon 0 [ 685.606067][T11604] nr_active_anon 26189 [ 685.606067][T11604] nr_inactive_file 60438 [ 685.606067][T11604] nr_active_file 2496 [ 685.606067][T11604] nr_unevictable 0 [ 685.606067][T11604] nr_slab_reclaimable 12017 [ 685.606067][T11604] nr_slab_unreclaimable 112300 [ 685.606067][T11604] nr_isolated_anon 0 [ 685.606067][T11604] nr_isolated_file 0 [ 685.606067][T11604] workingset_nodes 1 [ 685.606067][T11604] workingset_refault_anon 308 [ 685.606067][T11604] workingset_refault_file 768 [ 685.606067][T11604] workingset_activate_anon 7 [ 685.606067][T11604] workingset_activate_file 0 [ 685.606067][T11604] workingset_restore_anon 7 [ 685.606067][T11604] workingset_restore_file 0 [ 685.606067][T11604] workingset_nodereclaim 34 [ 685.606067][T11604] nr_anon_pages 7785 [ 685.606067][T11604] nr_mapped 37493 [ 685.606067][T11604] nr_file_pages 81371 [ 685.606067][T11604] nr_dirty 654 [ 685.606067][T11604] nr_writeback 0 [ 685.606067][T11604] nr_shmem 18441 [ 685.606067][T11604] nr_shmem_hugepages 1 [ 685.606067][T11604] nr_shmem_pmdmapped 0 [ 685.606067][T11604] nr_file_hugepages 0 [ 685.606067][T11604] nr_file_pmdmapped 0 [ 685.606067][T11604] nr_anon_transparent_hugepages 0 [ 685.606067][T11604] nr_vmscan_write 3070 [ 685.606067][T11604] nr_vmscan_immediate_reclaim 80 [ 685.606067][T11604] nr_dirtied 22195 [ 685.606067][T11604] nr_written 20839 [ 685.606067][T11604] nr_throttled_written 231 [ 685.606067][T11604] nr_kernel_misc_reclaimable 0 [ 685.606067][T11604] nr_foll_pin_acquired 4358 [ 685.606067][T11604] nr_foll_pin_released 4358 [ 685.606067][T11604] nr_vmalloc 99485 [ 685.606534][T11604] bad cache= option: nonenr_mlock 0 [ 685.606534][T11604] nr_zspages 122 [ 685.606534][T11604] nr_free_cma 0 [ 685.606534][T11604] numa_hit 2094149 [ 685.606534][T11604] numa_miss 1 [ 685.606534][T11604] numa_foreign 1 [ 685.606534][T11604] numa_interleave 5822 [ 685.606534][T11604] numa_local 2091128 [ 685.606534][T11604] numa_other 3022 [ 685.606534][T11604] nr_inactive_anon 0 [ 685.606534][T11604] nr_active_anon 26189 [ 685.606534][T11604] nr_inactive_file 60438 [ 685.606534][T11604] nr_active_file 2496 [ 685.606534][T11604] nr_unevictable 0 [ 685.606534][T11604] nr_slab_reclaimable 12017 [ 685.606534][T11604] nr_slab_unreclaimable 112300 [ 685.606534][T11604] nr_isolated_anon 0 [ 685.606534][T11604] nr_isolated_file 0 [ 685.606534][T11604] workingset_nodes 1 [ 685.606534][T11604] workingset_refault_anon 308 [ 685.606534][T11604] workingset_refault_file 768 [ 685.606534][T11604] workingset_activate_anon 7 [ 685.606534][T11604] workingset_activate_file 0 [ 685.606534][T11604] workingset_restore_anon 7 [ 685.606534][T11604] workingset_restore_file 0 [ 685.606534][T11604] workingset_nodereclaim 34 [ 685.606534][T11604] nr_anon_pages 7785 [ 685.606534][T11604] nr_mapped 37493 [ 685.606534][T11604] nr_file_pages 81371 [ 685.606534][T11604] nr_dirty 654 [ 685.606534][T11604] nr_writeback 0 [ 685.606534][T11604] nr_shmem 18441 [ 685.606534][T11604] nr_shmem_hugepages 1 [ 685.606534][T11604] nr_shmem_pmdmapped 0 [ 685.606534][T11604] nr_file_hugepages 0 [ 685.606534][T11604] nr_file_pmdmapped 0 [ 685.606534][T11604] nr_anon_transparent_hugepages 0 [ 685.606534][T11604] nr_vmscan_write 3070 [ 685.606534][T11604] nr_vmscan_immediate_reclaim 80 [ 685.606534][T11604] nr_dirtied 22195 [ 685.606534][T11604] nr_written 20839 [ 685.606534][T11604] nr_throttled_written 231 [ 685.606534][T11604] nr_kernel_misc_reclaimable 0 [ 685.606534][T11604] nr_foll_pin_acquired 4358 [ 685.606534][T11604] nr_foll_pin_released 4358 [ 685.606534][T11604] nr_vmalloc 99485 [ 685.607015][T11604] bad cache= option: nonenr_mlock 0 [ 685.607015][T11604] nr_zspages 122 [ 685.607015][T11604] nr_free_cma 0 [ 685.607015][T11604] numa_hit 2094149 [ 685.607015][T11604] numa_miss 1 [ 685.607015][T11604] numa_foreign 1 [ 685.607015][T11604] numa_interleave 5822 [ 685.607015][T11604] numa_local 2091128 [ 685.607015][T11604] numa_other 3022 [ 685.607015][T11604] nr_inactive_anon 0 [ 685.607015][T11604] nr_active_anon 26189 [ 685.607015][T11604] nr_inactive_file 60438 [ 685.607015][T11604] nr_active_file 2496 [ 685.607015][T11604] nr_unevictable 0 [ 685.607015][T11604] nr_slab_reclaimable 12017 [ 685.607015][T11604] nr_slab_unreclaimable 112300 [ 685.607015][T11604] nr_isolated_anon 0 [ 685.607015][T11604] nr_isolated_file 0 [ 685.607015][T11604] workingset_nodes 1 [ 685.607015][T11604] workingset_refault_anon 308 [ 685.607015][T11604] workingset_refault_file 768 [ 685.607015][T11604] workingset_activate_anon 7 [ 685.607015][T11604] workingset_activate_file 0 [ 685.607015][T11604] workingset_restore_anon 7 [ 685.607015][T11604] workingset_restore_file 0 [ 685.607015][T11604] workingset_nodereclaim 34 [ 685.607015][T11604] nr_anon_pages 7785 [ 685.607015][T11604] nr_mapped 37493 [ 685.607015][T11604] nr_file_pages 81371 [ 685.607015][T11604] nr_dirty 654 [ 685.607015][T11604] nr_writeback 0 [ 685.607015][T11604] nr_shmem 18441 [ 685.607015][T11604] nr_shmem_hugepages 1 [ 685.607015][T11604] nr_shmem_pmdmapped 0 [ 685.607015][T11604] nr_file_hugepages 0 [ 685.607015][T11604] nr_file_pmdmapped 0 [ 685.607015][T11604] nr_anon_transparent_hugepages 0 [ 685.607015][T11604] nr_vmscan_write 3070 [ 685.607015][T11604] nr_vmscan_immediate_reclaim 80 [ 685.607015][T11604] nr_dirtied 22195 [ 685.607015][T11604] nr_written 20839 [ 685.607015][T11604] nr_throttled_written 231 [ 685.607015][T11604] nr_kernel_misc_reclaimable 0 [ 685.607015][T11604] nr_foll_pin_acquired 4358 [ 685.607015][T11604] nr_foll_pin_released 4358 [ 685.607015][T11604] nr_vmalloc 99485 [ 685.607479][T11604] bad cache= option: nonenr_mlock 0 [ 685.607479][T11604] nr_zspages 122 [ 685.607479][T11604] nr_free_cma 0 [ 685.607479][T11604] numa_hit 2094149 [ 685.607479][T11604] numa_miss 1 [ 685.607479][T11604] numa_foreign 1 [ 685.607479][T11604] numa_interleave 5822 [ 685.607479][T11604] numa_local 2091128 [ 685.607479][T11604] numa_other 3022 [ 685.607479][T11604] nr_inactive_anon 0 [ 685.607479][T11604] nr_active_anon 26189 [ 685.607479][T11604] nr_inactive_file 60438 [ 685.607479][T11604] nr_active_file 2496 [ 685.607479][T11604] nr_unevictable 0 [ 685.607479][T11604] nr_slab_reclaimable 12017 [ 685.607479][T11604] nr_slab_unreclaimable 112300 [ 685.607479][T11604] nr_isolated_anon 0 [ 685.607479][T11604] nr_isolated_file 0 [ 685.607479][T11604] workingset_nodes 1 [ 685.607479][T11604] workingset_refault_anon 308 [ 685.607479][T11604] workingset_refault_file 768 [ 685.607479][T11604] workingset_activate_anon 7 [ 685.607479][T11604] workingset_activate_file 0 [ 685.607479][T11604] workingset_restore_anon 7 [ 685.607479][T11604] workingset_restore_file 0 [ 685.607479][T11604] workingset_nodereclaim 34 [ 685.607479][T11604] nr_anon_pages 7785 [ 685.607479][T11604] nr_mapped 37493 [ 685.607479][T11604] nr_file_pages 81371 [ 685.607479][T11604] nr_dirty 654 [ 685.607479][T11604] nr_writeback 0 [ 685.607479][T11604] nr_shmem 18441 [ 685.607479][T11604] nr_shmem_hugepages 1 [ 685.607479][T11604] nr_shmem_pmdmapped 0 [ 685.607479][T11604] nr_file_hugepages 0 [ 685.607479][T11604] nr_file_pmdmapped 0 [ 685.607479][T11604] nr_anon_transparent_hugepages 0 [ 685.607479][T11604] nr_vmscan_write 3070 [ 685.607479][T11604] nr_vmscan_immediate_reclaim 80 [ 685.607479][T11604] nr_dirtied 22195 [ 685.607479][T11604] nr_written 20839 [ 685.607479][T11604] nr_throttled_written 231 [ 685.607479][T11604] nr_kernel_misc_reclaimable 0 [ 685.607479][T11604] nr_foll_pin_acquired 4358 [ 685.607479][T11604] nr_foll_pin_released 4358 [ 685.607479][T11604] nr_vmalloc 99485 [ 685.648884][T11604] bad cache= option: nonenr_mlock 0 [ 685.648884][T11604] nr_zspages 122 [ 685.648884][T11604] nr_free_cma 0 [ 685.648884][T11604] numa_hit 2094149 [ 685.648884][T11604] numa_miss 1 [ 685.648884][T11604] numa_foreign 1 [ 685.648884][T11604] numa_interleave 5822 [ 685.648884][T11604] numa_local 2091128 [ 685.648884][T11604] numa_other 3022 [ 685.648884][T11604] nr_inactive_anon 0 [ 685.648884][T11604] nr_active_anon 26189 [ 685.648884][T11604] nr_inactive_file 60438 [ 685.648884][T11604] nr_active_file 2496 [ 685.648884][T11604] nr_unevictable 0 [ 685.648884][T11604] nr_slab_reclaimable 12017 [ 685.648884][T11604] nr_slab_unreclaimable 112300 [ 685.648884][T11604] nr_isolated_anon 0 [ 685.648884][T11604] nr_isolated_file 0 [ 685.648884][T11604] workingset_nodes 1 [ 685.648884][T11604] workingset_refault_anon 308 [ 685.648884][T11604] workingset_refault_file 768 [ 685.648884][T11604] workingset_activate_anon 7 [ 685.648884][T11604] workingset_activate_file 0 [ 685.648884][T11604] workingset_restore_anon 7 [ 685.648884][T11604] workingset_restore_file 0 [ 685.648884][T11604] workingset_nodereclaim 34 [ 685.648884][T11604] nr_anon_pages 7785 [ 685.648884][T11604] nr_mapped 37493 [ 685.648884][T11604] nr_file_pages 81371 [ 685.648884][T11604] nr_dirty 654 [ 685.648884][T11604] nr_writeback 0 [ 685.648884][T11604] nr_shmem 18441 [ 685.648884][T11604] nr_shmem_hugepages 1 [ 685.648884][T11604] nr_shmem_pmdmapped 0 [ 685.648884][T11604] nr_file_hugepages 0 [ 685.648884][T11604] nr_file_pmdmapped 0 [ 685.648884][T11604] nr_anon_transparent_hugepages 0 [ 685.648884][T11604] nr_vmscan_write 3070 [ 685.648884][T11604] nr_vmscan_immediate_reclaim 80 [ 685.648884][T11604] nr_dirtied 22195 [ 685.648884][T11604] nr_written 20839 [ 685.648884][T11604] nr_throttled_written 231 [ 685.648884][T11604] nr_kernel_misc_reclaimable 0 [ 685.648884][T11604] nr_foll_pin_acquired 4358 [ 685.648884][T11604] nr_foll_pin_released 4358 [ 685.648884][T11604] nr_vmalloc 99485 [ 685.649419][T11604] bad cache= option: nonenr_mlock 0 [ 685.649419][T11604] nr_zspages 122 [ 685.649419][T11604] nr_free_cma 0 [ 685.649419][T11604] numa_hit 2094149 [ 685.649419][T11604] numa_miss 1 [ 685.649419][T11604] numa_foreign 1 [ 685.649419][T11604] numa_interleave 5822 [ 685.649419][T11604] numa_local 2091128 [ 685.649419][T11604] numa_other 3022 [ 685.649419][T11604] nr_inactive_anon 0 [ 685.649419][T11604] nr_active_anon 26189 [ 685.649419][T11604] nr_inactive_file 60438 [ 685.649419][T11604] nr_active_file 2496 [ 685.649419][T11604] nr_unevictable 0 [ 685.649419][T11604] nr_slab_reclaimable 12017 [ 685.649419][T11604] nr_slab_unreclaimable 112300 [ 685.649419][T11604] nr_isolated_anon 0 [ 685.649419][T11604] nr_isolated_file 0 [ 685.649419][T11604] workingset_nodes 1 [ 685.649419][T11604] workingset_refault_anon 308 [ 685.649419][T11604] workingset_refault_file 768 [ 685.649419][T11604] workingset_activate_anon 7 [ 685.649419][T11604] workingset_activate_file 0 [ 685.649419][T11604] workingset_restore_anon 7 [ 685.649419][T11604] workingset_restore_file 0 [ 685.649419][T11604] workingset_nodereclaim 34 [ 685.649419][T11604] nr_anon_pages 7785 [ 685.649419][T11604] nr_mapped 37493 [ 685.649419][T11604] nr_file_pages 81371 [ 685.649419][T11604] nr_dirty 654 [ 685.649419][T11604] nr_writeback 0 [ 685.649419][T11604] nr_shmem 18441 [ 685.649419][T11604] nr_shmem_hugepages 1 [ 685.649419][T11604] nr_shmem_pmdmapped 0 [ 685.649419][T11604] nr_file_hugepages 0 [ 685.649419][T11604] nr_file_pmdmapped 0 [ 685.649419][T11604] nr_anon_transparent_hugepages 0 [ 685.649419][T11604] nr_vmscan_write 3070 [ 685.649419][T11604] nr_vmscan_immediate_reclaim 80 [ 685.649419][T11604] nr_dirtied 22195 [ 685.649419][T11604] nr_written 20839 [ 685.649419][T11604] nr_throttled_written 231 [ 685.649419][T11604] nr_kernel_misc_reclaimable 0 [ 685.649419][T11604] nr_foll_pin_acquired 4358 [ 685.649419][T11604] nr_foll_pin_released 4358 [ 685.649419][T11604] nr_vmalloc 99485 [ 685.649895][T11604] bad cache= option: nonenr_mlock 0 [ 685.649895][T11604] nr_zspages 122 [ 685.649895][T11604] nr_free_cma 0 [ 685.649895][T11604] numa_hit 2094149 [ 685.649895][T11604] numa_miss 1 [ 685.649895][T11604] numa_foreign 1 [ 685.649895][T11604] numa_interleave 5822 [ 685.649895][T11604] numa_local 2091128 [ 685.649895][T11604] numa_other 3022 [ 685.649895][T11604] nr_inactive_anon 0 [ 685.649895][T11604] nr_active_anon 26189 [ 685.649895][T11604] nr_inactive_file 60438 [ 685.649895][T11604] nr_active_file 2496 [ 685.649895][T11604] nr_unevictable 0 [ 685.649895][T11604] nr_slab_reclaimable 12017 [ 685.649895][T11604] nr_slab_unreclaimable 112300 [ 685.649895][T11604] nr_isolated_anon 0 [ 685.649895][T11604] nr_isolated_file 0 [ 685.649895][T11604] workingset_nodes 1 [ 685.649895][T11604] workingset_refault_anon 308 [ 685.649895][T11604] workingset_refault_file 768 [ 685.649895][T11604] workingset_activate_anon 7 [ 685.649895][T11604] workingset_activate_file 0 [ 685.649895][T11604] workingset_restore_anon 7 [ 685.649895][T11604] workingset_restore_file 0 [ 685.649895][T11604] workingset_nodereclaim 34 [ 685.649895][T11604] nr_anon_pages 7785 [ 685.649895][T11604] nr_mapped 37493 [ 685.649895][T11604] nr_file_pages 81371 [ 685.649895][T11604] nr_dirty 654 [ 685.649895][T11604] nr_writeback 0 [ 685.649895][T11604] nr_shmem 18441 [ 685.649895][T11604] nr_shmem_hugepages 1 [ 685.649895][T11604] nr_shmem_pmdmapped 0 [ 685.649895][T11604] nr_file_hugepages 0 [ 685.649895][T11604] nr_file_pmdmapped 0 [ 685.649895][T11604] nr_anon_transparent_hugepages 0 [ 685.649895][T11604] nr_vmscan_write 3070 [ 685.649895][T11604] nr_vmscan_immediate_reclaim 80 [ 685.649895][T11604] nr_dirtied 22195 [ 685.649895][T11604] nr_written 20839 [ 685.649895][T11604] nr_throttled_written 231 [ 685.649895][T11604] nr_kernel_misc_reclaimable 0 [ 685.649895][T11604] nr_foll_pin_acquired 4358 [ 685.649895][T11604] nr_foll_pin_released 4358 [ 685.649895][T11604] nr_vmalloc 99485 [ 685.650368][T11604] bad cache= option: nonenr_mlock 0 [ 685.650368][T11604] nr_zspages 122 [ 685.650368][T11604] nr_free_cma 0 [ 685.650368][T11604] numa_hit 2094149 [ 685.650368][T11604] numa_miss 1 [ 685.650368][T11604] numa_foreign 1 [ 685.650368][T11604] numa_interleave 5822 [ 685.650368][T11604] numa_local 2091128 [ 685.650368][T11604] numa_other 3022 [ 685.650368][T11604] nr_inactive_anon 0 [ 685.650368][T11604] nr_active_anon 26189 [ 685.650368][T11604] nr_inactive_file 60438 [ 685.650368][T11604] nr_active_file 2496 [ 685.650368][T11604] nr_unevictable 0 [ 685.650368][T11604] nr_slab_reclaimable 12017 [ 685.650368][T11604] nr_slab_unreclaimable 112300 [ 685.650368][T11604] nr_isolated_anon 0 [ 685.650368][T11604] nr_isolated_file 0 [ 685.650368][T11604] workingset_nodes 1 [ 685.650368][T11604] workingset_refault_anon 308 [ 685.650368][T11604] workingset_refault_file 768 [ 685.650368][T11604] workingset_activate_anon 7 [ 685.650368][T11604] workingset_activate_file 0 [ 685.650368][T11604] workingset_restore_anon 7 [ 685.650368][T11604] workingset_restore_file 0 [ 685.650368][T11604] workingset_nodereclaim 34 [ 685.650368][T11604] nr_anon_pages 7785 [ 685.650368][T11604] nr_mapped 37493 [ 685.650368][T11604] nr_file_pages 81371 [ 685.650368][T11604] nr_dirty 654 [ 685.650368][T11604] nr_writeback 0 [ 685.650368][T11604] nr_shmem 18441 [ 685.650368][T11604] nr_shmem_hugepages 1 [ 685.650368][T11604] nr_shmem_pmdmapped 0 [ 685.650368][T11604] nr_file_hugepages 0 [ 685.650368][T11604] nr_file_pmdmapped 0 [ 685.650368][T11604] nr_anon_transparent_hugepages 0 [ 685.650368][T11604] nr_vmscan_write 3070 [ 685.650368][T11604] nr_vmscan_immediate_reclaim 80 [ 685.650368][T11604] nr_dirtied 22195 [ 685.650368][T11604] nr_written 20839 [ 685.650368][T11604] nr_throttled_written 231 [ 685.650368][T11604] nr_kernel_misc_reclaimable 0 [ 685.650368][T11604] nr_foll_pin_acquired 4358 [ 685.650368][T11604] nr_foll_pin_released 4358 [ 685.650368][T11604] nr_vmalloc 99485 [ 685.650856][T11604] bad cache= option: nonenr_mlock 0 [ 685.650856][T11604] nr_zspages 122 [ 685.650856][T11604] nr_free_cma 0 [ 685.650856][T11604] numa_hit 2094149 [ 685.650856][T11604] numa_miss 1 [ 685.650856][T11604] numa_foreign 1 [ 685.650856][T11604] numa_interleave 5822 [ 685.650856][T11604] numa_local 2091128 [ 685.650856][T11604] numa_other 3022 [ 685.650856][T11604] nr_inactive_anon 0 [ 685.650856][T11604] nr_active_anon 26189 [ 685.650856][T11604] nr_inactive_file 60438 [ 685.650856][T11604] nr_active_file 2496 [ 685.650856][T11604] nr_unevictable 0 [ 685.650856][T11604] nr_slab_reclaimable 12017 [ 685.650856][T11604] nr_slab_unreclaimable 112300 [ 685.650856][T11604] nr_isolated_anon 0 [ 685.650856][T11604] nr_isolated_file 0 [ 685.650856][T11604] workingset_nodes 1 [ 685.650856][T11604] workingset_refault_anon 308 [ 685.650856][T11604] workingset_refault_file 768 [ 685.650856][T11604] workingset_activate_anon 7 [ 685.650856][T11604] workingset_activate_file 0 [ 685.650856][T11604] workingset_restore_anon 7 [ 685.650856][T11604] workingset_restore_file 0 [ 685.650856][T11604] workingset_nodereclaim 34 [ 685.650856][T11604] nr_anon_pages 7785 [ 685.650856][T11604] nr_mapped 37493 [ 685.650856][T11604] nr_file_pages 81371 [ 685.650856][T11604] nr_dirty 654 [ 685.650856][T11604] nr_writeback 0 [ 685.650856][T11604] nr_shmem 18441 [ 685.650856][T11604] nr_shmem_hugepages 1 [ 685.650856][T11604] nr_shmem_pmdmapped 0 [ 685.650856][T11604] nr_file_hugepages 0 [ 685.650856][T11604] nr_file_pmdmapped 0 [ 685.650856][T11604] nr_anon_transparent_hugepages 0 [ 685.650856][T11604] nr_vmscan_write 3070 [ 685.650856][T11604] nr_vmscan_immediate_reclaim 80 [ 685.650856][T11604] nr_dirtied 22195 [ 685.650856][T11604] nr_written 20839 [ 685.650856][T11604] nr_throttled_written 231 [ 685.650856][T11604] nr_kernel_misc_reclaimable 0 [ 685.650856][T11604] nr_foll_pin_acquired 4358 [ 685.650856][T11604] nr_foll_pin_released 4358 [ 685.650856][T11604] nr_vmalloc 99485 [ 685.651323][T11604] bad cache= option: nonenr_mlock 0 [ 685.651323][T11604] nr_zspages 122 [ 685.651323][T11604] nr_free_cma 0 [ 685.651323][T11604] numa_hit 2094149 [ 685.651323][T11604] numa_miss 1 [ 685.651323][T11604] numa_foreign 1 [ 685.651323][T11604] numa_interleave 5822 [ 685.651323][T11604] numa_local 2091128 [ 685.651323][T11604] numa_other 3022 [ 685.651323][T11604] nr_inactive_anon 0 [ 685.651323][T11604] nr_active_anon 26189 [ 685.651323][T11604] nr_inactive_file 60438 [ 685.651323][T11604] nr_active_file 2496 [ 685.651323][T11604] nr_unevictable 0 [ 685.651323][T11604] nr_slab_reclaimable 12017 [ 685.651323][T11604] nr_slab_unreclaimable 112300 [ 685.651323][T11604] nr_isolated_anon 0 [ 685.651323][T11604] nr_isolated_file 0 [ 685.651323][T11604] workingset_nodes 1 [ 685.651323][T11604] workingset_refault_anon 308 [ 685.651323][T11604] workingset_refault_file 768 [ 685.651323][T11604] workingset_activate_anon 7 [ 685.651323][T11604] workingset_activate_file 0 [ 685.651323][T11604] workingset_restore_anon 7 [ 685.651323][T11604] workingset_restore_file 0 [ 685.651323][T11604] workingset_nodereclaim 34 [ 685.651323][T11604] nr_anon_pages 7785 [ 685.651323][T11604] nr_mapped 37493 [ 685.651323][T11604] nr_file_pages 81371 [ 685.651323][T11604] nr_dirty 654 [ 685.651323][T11604] nr_writeback 0 [ 685.651323][T11604] nr_shmem 18441 [ 685.651323][T11604] nr_shmem_hugepages 1 [ 685.651323][T11604] nr_shmem_pmdmapped 0 [ 685.651323][T11604] nr_file_hugepages 0 [ 685.651323][T11604] nr_file_pmdmapped 0 [ 685.651323][T11604] nr_anon_transparent_hugepages 0 [ 685.651323][T11604] nr_vmscan_write 3070 [ 685.651323][T11604] nr_vmscan_immediate_reclaim 80 [ 685.651323][T11604] nr_dirtied 22195 [ 685.651323][T11604] nr_written 20839 [ 685.651323][T11604] nr_throttled_written 231 [ 685.651323][T11604] nr_kernel_misc_reclaimable 0 [ 685.651323][T11604] nr_foll_pin_acquired 4358 [ 685.651323][T11604] nr_foll_pin_released 4358 [ 685.651323][T11604] nr_vmalloc 99485 [ 685.671156][T11604] bad cache= option: nonenr_mlock 0 [ 685.671156][T11604] nr_zspages 122 [ 685.671156][T11604] nr_free_cma 0 [ 685.671156][T11604] numa_hit 2094149 [ 685.671156][T11604] numa_miss 1 [ 685.671156][T11604] numa_foreign 1 [ 685.671156][T11604] numa_interleave 5822 [ 685.671156][T11604] numa_local 2091128 [ 685.671156][T11604] numa_other 3022 [ 685.671156][T11604] nr_inactive_anon 0 [ 685.671156][T11604] nr_active_anon 26189 [ 685.671156][T11604] nr_inactive_file 60438 [ 685.671156][T11604] nr_active_file 2496 [ 685.671156][T11604] nr_unevictable 0 [ 685.671156][T11604] nr_slab_reclaimable 12017 [ 685.671156][T11604] nr_slab_unreclaimable 112300 [ 685.671156][T11604] nr_isolated_anon 0 [ 685.671156][T11604] nr_isolated_file 0 [ 685.671156][T11604] workingset_nodes 1 [ 685.671156][T11604] workingset_refault_anon 308 [ 685.671156][T11604] workingset_refault_file 768 [ 685.671156][T11604] workingset_activate_anon 7 [ 685.671156][T11604] workingset_activate_file 0 [ 685.671156][T11604] workingset_restore_anon 7 [ 685.671156][T11604] workingset_restore_file 0 [ 685.671156][T11604] workingset_nodereclaim 34 [ 685.671156][T11604] nr_anon_pages 7785 [ 685.671156][T11604] nr_mapped 37493 [ 685.671156][T11604] nr_file_pages 81371 [ 685.671156][T11604] nr_dirty 654 [ 685.671156][T11604] nr_writeback 0 [ 685.671156][T11604] nr_shmem 18441 [ 685.671156][T11604] nr_shmem_hugepages 1 [ 685.671156][T11604] nr_shmem_pmdmapped 0 [ 685.671156][T11604] nr_file_hugepages 0 [ 685.671156][T11604] nr_file_pmdmapped 0 [ 685.671156][T11604] nr_anon_transparent_hugepages 0 [ 685.671156][T11604] nr_vmscan_write 3070 [ 685.671156][T11604] nr_vmscan_immediate_reclaim 80 [ 685.671156][T11604] nr_dirtied 22195 [ 685.671156][T11604] nr_written 20839 [ 685.671156][T11604] nr_throttled_written 231 [ 685.671156][T11604] nr_kernel_misc_reclaimable 0 [ 685.671156][T11604] nr_foll_pin_acquired 4358 [ 685.671156][T11604] nr_foll_pin_released 4358 [ 685.671156][T11604] nr_vmalloc 99485 [ 685.671689][T11604] bad cache= option: nonenr_mlock 0 [ 685.671689][T11604] nr_zspages 122 [ 685.671689][T11604] nr_free_cma 0 [ 685.671689][T11604] numa_hit 2094149 [ 685.671689][T11604] numa_miss 1 [ 685.671689][T11604] numa_foreign 1 [ 685.671689][T11604] numa_interleave 5822 [ 685.671689][T11604] numa_local 2091128 [ 685.671689][T11604] numa_other 3022 [ 685.671689][T11604] nr_inactive_anon 0 [ 685.671689][T11604] nr_active_anon 26189 [ 685.671689][T11604] nr_inactive_file 60438 [ 685.671689][T11604] nr_active_file 2496 [ 685.671689][T11604] nr_unevictable 0 [ 685.671689][T11604] nr_slab_reclaimable 12017 [ 685.671689][T11604] nr_slab_unreclaimable 112300 [ 685.671689][T11604] nr_isolated_anon 0 [ 685.671689][T11604] nr_isolated_file 0 [ 685.671689][T11604] workingset_nodes 1 [ 685.671689][T11604] workingset_refault_anon 308 [ 685.671689][T11604] workingset_refault_file 768 [ 685.671689][T11604] workingset_activate_anon 7 [ 685.671689][T11604] workingset_activate_file 0 [ 685.671689][T11604] workingset_restore_anon 7 [ 685.671689][T11604] workingset_restore_file 0 [ 685.671689][T11604] workingset_nodereclaim 34 [ 685.671689][T11604] nr_anon_pages 7785 [ 685.671689][T11604] nr_mapped 37493 [ 685.671689][T11604] nr_file_pages 81371 [ 685.671689][T11604] nr_dirty 654 [ 685.671689][T11604] nr_writeback 0 [ 685.671689][T11604] nr_shmem 18441 [ 685.671689][T11604] nr_shmem_hugepages 1 [ 685.671689][T11604] nr_shmem_pmdmapped 0 [ 685.671689][T11604] nr_file_hugepages 0 [ 685.671689][T11604] nr_file_pmdmapped 0 [ 685.671689][T11604] nr_anon_transparent_hugepages 0 [ 685.671689][T11604] nr_vmscan_write 3070 [ 685.671689][T11604] nr_vmscan_immediate_reclaim 80 [ 685.671689][T11604] nr_dirtied 22195 [ 685.671689][T11604] nr_written 20839 [ 685.671689][T11604] nr_throttled_written 231 [ 685.671689][T11604] nr_kernel_misc_reclaimable 0 [ 685.671689][T11604] nr_foll_pin_acquired 4358 [ 685.671689][T11604] nr_foll_pin_released 4358 [ 685.671689][T11604] nr_vmalloc 99485 [ 685.672177][T11604] bad cache= option: nonenr_mlock 0 [ 685.672177][T11604] nr_zspages 122 [ 685.672177][T11604] nr_free_cma 0 [ 685.672177][T11604] numa_hit 2094149 [ 685.672177][T11604] numa_miss 1 [ 685.672177][T11604] numa_foreign 1 [ 685.672177][T11604] numa_interleave 5822 [ 685.672177][T11604] numa_local 2091128 [ 685.672177][T11604] numa_other 3022 [ 685.672177][T11604] nr_inactive_anon 0 [ 685.672177][T11604] nr_active_anon 26189 [ 685.672177][T11604] nr_inactive_file 60438 [ 685.672177][T11604] nr_active_file 2496 [ 685.672177][T11604] nr_unevictable 0 [ 685.672177][T11604] nr_slab_reclaimable 12017 [ 685.672177][T11604] nr_slab_unreclaimable 112300 [ 685.672177][T11604] nr_isolated_anon 0 [ 685.672177][T11604] nr_isolated_file 0 [ 685.672177][T11604] workingset_nodes 1 [ 685.672177][T11604] workingset_refault_anon 308 [ 685.672177][T11604] workingset_refault_file 768 [ 685.672177][T11604] workingset_activate_anon 7 [ 685.672177][T11604] workingset_activate_file 0 [ 685.672177][T11604] workingset_restore_anon 7 [ 685.672177][T11604] workingset_restore_file 0 [ 685.672177][T11604] workingset_nodereclaim 34 [ 685.672177][T11604] nr_anon_pages 7785 [ 685.672177][T11604] nr_mapped 37493 [ 685.672177][T11604] nr_file_pages 81371 [ 685.672177][T11604] nr_dirty 654 [ 685.672177][T11604] nr_writeback 0 [ 685.672177][T11604] nr_shmem 18441 [ 685.672177][T11604] nr_shmem_hugepages 1 [ 685.672177][T11604] nr_shmem_pmdmapped 0 [ 685.672177][T11604] nr_file_hugepages 0 [ 685.672177][T11604] nr_file_pmdmapped 0 [ 685.672177][T11604] nr_anon_transparent_hugepages 0 [ 685.672177][T11604] nr_vmscan_write 3070 [ 685.672177][T11604] nr_vmscan_immediate_reclaim 80 [ 685.672177][T11604] nr_dirtied 22195 [ 685.672177][T11604] nr_written 20839 [ 685.672177][T11604] nr_throttled_written 231 [ 685.672177][T11604] nr_kernel_misc_reclaimable 0 [ 685.672177][T11604] nr_foll_pin_acquired 4358 [ 685.672177][T11604] nr_foll_pin_released 4358 [ 685.672177][T11604] nr_vmalloc 99485 [ 685.672653][T11604] bad cache= option: nonenr_mlock 0 [ 685.672653][T11604] nr_zspages 122 [ 685.672653][T11604] nr_free_cma 0 [ 685.672653][T11604] numa_hit 2094149 [ 685.672653][T11604] numa_miss 1 [ 685.672653][T11604] numa_foreign 1 [ 685.672653][T11604] numa_interleave 5822 [ 685.672653][T11604] numa_local 2091128 [ 685.672653][T11604] numa_other 3022 [ 685.672653][T11604] nr_inactive_anon 0 [ 685.672653][T11604] nr_active_anon 26189 [ 685.672653][T11604] nr_inactive_file 60438 [ 685.672653][T11604] nr_active_file 2496 [ 685.672653][T11604] nr_unevictable 0 [ 685.672653][T11604] nr_slab_reclaimable 12017 [ 685.672653][T11604] nr_slab_unreclaimable 112300 [ 685.672653][T11604] nr_isolated_anon 0 [ 685.672653][T11604] nr_isolated_file 0 [ 685.672653][T11604] workingset_nodes 1 [ 685.672653][T11604] workingset_refault_anon 308 [ 685.672653][T11604] workingset_refault_file 768 [ 685.672653][T11604] workingset_activate_anon 7 [ 685.672653][T11604] workingset_activate_file 0 [ 685.672653][T11604] workingset_restore_anon 7 [ 685.672653][T11604] workingset_restore_file 0 [ 685.672653][T11604] workingset_nodereclaim 34 [ 685.672653][T11604] nr_anon_pages 7785 [ 685.672653][T11604] nr_mapped 37493 [ 685.672653][T11604] nr_file_pages 81371 [ 685.672653][T11604] nr_dirty 654 [ 685.672653][T11604] nr_writeback 0 [ 685.672653][T11604] nr_shmem 18441 [ 685.672653][T11604] nr_shmem_hugepages 1 [ 685.672653][T11604] nr_shmem_pmdmapped 0 [ 685.672653][T11604] nr_file_hugepages 0 [ 685.672653][T11604] nr_file_pmdmapped 0 [ 685.672653][T11604] nr_anon_transparent_hugepages 0 [ 685.672653][T11604] nr_vmscan_write 3070 [ 685.672653][T11604] nr_vmscan_immediate_reclaim 80 [ 685.672653][T11604] nr_dirtied 22195 [ 685.672653][T11604] nr_written 20839 [ 685.672653][T11604] nr_throttled_written 231 [ 685.672653][T11604] nr_kernel_misc_reclaimable 0 [ 685.672653][T11604] nr_foll_pin_acquired 4358 [ 685.672653][T11604] nr_foll_pin_released 4358 [ 685.672653][T11604] nr_vmalloc 99485 [ 687.504738][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 687.504783][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 687.504801][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 688.459934][ T1213] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 688.648362][ T1213] usb 2-1: device descriptor read/64, error -71 [ 688.938048][ T1213] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 689.103460][ T1213] usb 2-1: device descriptor read/64, error -71 [ 689.211989][ T1213] usb usb2-port1: attempt power cycle [ 689.492492][ T9841] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 689.607895][ T5710] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 689.614277][ T5710] usb 3-1: USB disconnect, device number 41 [ 689.638102][ T1213] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 689.671735][ T1213] usb 2-1: device descriptor read/8, error -71 [ 689.908148][ T1213] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 689.962297][ T1213] usb 2-1: device descriptor read/8, error -71 [ 690.008115][ T5710] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 690.118492][ T1213] usb usb2-port1: unable to enumerate USB device [ 690.218812][ T5710] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 690.219657][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.219692][ T5710] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.219725][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.304296][ T5710] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 691.649781][ T2345] pvrusb2: Failed to submit write-control URB status=-2 [ 691.668423][ T5710] usb 3-1: USB disconnect, device number 42 [ 691.814525][ T2345] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 691.816311][ T30] audit: type=1400 audit(1789414462.261:673): avc: denied { firmware_load } for pid=2345 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 691.828724][ T2345] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 692.768067][T11644] FAULT_INJECTION: forcing a failure. [ 692.768067][T11644] name failslab, interval 1, probability 0, space 0, times 0 [ 692.768095][T11644] CPU: 0 UID: 0 PID: 11644 Comm: syz.1.1500 Not tainted syzkaller #0 PREEMPT(full) [ 692.768114][T11644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 692.768123][T11644] Call Trace: [ 692.768130][T11644] [ 692.768137][T11644] dump_stack_lvl+0x100/0x190 [ 692.768169][T11644] should_fail_ex.cold+0x5/0xa [ 692.768193][T11644] should_failslab+0xc2/0x120 [ 692.768214][T11644] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 692.768234][T11644] ? __alloc_skb+0x140/0x710 [ 692.768256][T11644] __alloc_skb+0x140/0x710 [ 692.768275][T11644] ? __pfx___alloc_skb+0x10/0x10 [ 692.768292][T11644] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 692.768321][T11644] tcp_stream_alloc_skb+0x34/0x660 [ 692.768348][T11644] tcp_sendmsg_locked+0x13b7/0x4420 [ 692.768370][T11644] ? __lock_acquire+0x5c0/0x1f40 [ 692.768396][T11644] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 692.768412][T11644] ? lock_acquire+0x1d1/0x380 [ 692.768436][T11644] ? do_raw_spin_lock+0x128/0x260 [ 692.768457][T11644] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 692.768486][T11644] ? __local_bh_enable_ip+0xa5/0x120 [ 692.768507][T11644] tcp_sendmsg+0x2e/0x50 [ 692.768522][T11644] ? __pfx_tcp_sendmsg+0x10/0x10 [ 692.768538][T11644] inet6_sendmsg+0xb9/0x140 [ 692.768564][T11644] __sys_sendto+0x36d/0x4e0 [ 692.768584][T11644] ? __pfx___sys_sendto+0x10/0x10 [ 692.768608][T11644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 692.768642][T11644] ? ksys_write+0x1ac/0x250 [ 692.768660][T11644] ? __pfx_ksys_write+0x10/0x10 [ 692.768679][T11644] __x64_sys_sendto+0xe0/0x1c0 [ 692.768697][T11644] ? do_syscall_64+0xae/0x790 [ 692.768718][T11644] ? lockdep_hardirqs_on+0x7d/0x110 [ 692.768739][T11644] do_syscall_64+0x123/0x790 [ 692.768763][T11644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.768780][T11644] RIP: 0033:0x7fdd30f9e159 [ 692.768795][T11644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.768811][T11644] RSP: 002b:00007fdd31ee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 692.768827][T11644] RAX: ffffffffffffffda RBX: 00007fdd31226090 RCX: 00007fdd30f9e159 [ 692.768839][T11644] RDX: fffffffffffffe94 RSI: 0000200000000300 RDI: 0000000000000004 [ 692.768849][T11644] RBP: 00007fdd31ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 692.768860][T11644] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 692.768870][T11644] R13: 00007fdd31226128 R14: 00007fdd31226090 R15: 00007ffef889d1f8 [ 692.768893][T11644] [ 693.404092][ T30] audit: type=1400 audit(1789414463.831:674): avc: denied { execute } for pid=11643 comm="syz.2.1501" path="/dev/dsp" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 693.404125][ T30] audit: type=1400 audit(1789414463.851:675): avc: denied { watch } for pid=11643 comm="syz.2.1501" path="/317/file0" dev="tmpfs" ino=1738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 695.362914][ T30] audit: type=1400 audit(1789414465.461:676): avc: denied { setattr } for pid=11659 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 697.588259][ T30] audit: type=1400 audit(1789414468.071:677): avc: denied { read } for pid=11667 comm="syz.3.1508" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 697.590114][ T30] audit: type=1400 audit(1789414468.071:678): avc: denied { open } for pid=11667 comm="syz.3.1508" path="/294/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 698.745001][ T30] audit: type=1400 audit(1789414469.221:679): avc: denied { create } for pid=11674 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 698.755857][ T30] audit: type=1400 audit(1789414469.231:680): avc: denied { ioctl } for pid=11674 comm="syz.3.1512" path="socket:[45991]" dev="sockfs" ino=45991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 698.766071][ T30] audit: type=1400 audit(1789414469.241:681): avc: denied { bind } for pid=11674 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 698.827654][ T30] audit: type=1400 audit(1789414469.301:682): avc: denied { setopt } for pid=11674 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 698.944414][ T30] audit: type=1400 audit(1789414469.421:683): avc: denied { write } for pid=11674 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 699.047257][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 699.282891][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880784cd000: rx timeout, send abort [ 699.299286][ T30] audit: type=1400 audit(1789414469.771:684): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 699.299502][ T30] audit: type=1400 audit(1789414469.771:685): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.299636][ T30] audit: type=1400 audit(1789414469.771:686): avc: denied { write search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.976263][ T4919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 699.980856][ T4919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 699.990585][ T4919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 700.006091][ T4919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 700.007858][ T4919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 700.593634][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1516'. [ 700.593658][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1516'. [ 700.621310][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1516'. [ 700.621326][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1516'. [ 700.725405][T11704] syz_tun: entered allmulticast mode [ 701.845096][ T8771] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 701.992155][ T8771] usb 4-1: not running at top speed; connect to a high speed hub [ 701.992185][ T8771] usb 4-1: New USB device found, idVendor=19d2, idProduct=b863, bcdDevice=b6.cc [ 701.995654][ T8771] usb 4-1: config 14 has an invalid interface number: 210 but max is 2 [ 701.995674][ T8771] usb 4-1: config 14 has an invalid interface number: 71 but max is 2 [ 701.995688][ T8771] usb 4-1: config 14 has an invalid interface number: 122 but max is 2 [ 701.995699][ T8771] usb 4-1: config 14 has an invalid interface number: 116 but max is 2 [ 701.995712][ T8771] usb 4-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 701.995723][ T8771] usb 4-1: config 14 has 4 interfaces, different from the descriptor's value: 3 [ 701.995736][ T8771] usb 4-1: config 14 has no interface number 0 [ 701.995746][ T8771] usb 4-1: config 14 has no interface number 1 [ 701.995755][ T8771] usb 4-1: config 14 has no interface number 2 [ 701.995765][ T8771] usb 4-1: config 14 has no interface number 3 [ 701.995797][ T8771] usb 4-1: config 14 interface 210 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 701.995813][ T8771] usb 4-1: config 14 interface 210 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 701.995827][ T8771] usb 4-1: config 14 interface 210 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 701.995843][ T8771] usb 4-1: config 14 interface 210 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 701.995855][ T8771] usb 4-1: config 14 interface 210 altsetting 7 endpoint 0xD has invalid maxpacket 560, setting to 64 [ 701.995875][ T8771] usb 4-1: config 14 interface 210 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 701.995889][ T8771] usb 4-1: config 14 interface 210 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 701.995908][ T8771] usb 4-1: config 14 interface 71 altsetting 165 has an invalid descriptor for endpoint zero, skipping [ 701.995920][ T8771] usb 4-1: config 14 interface 71 altsetting 165 has a duplicate endpoint with address 0x4, skipping [ 701.995932][ T8771] usb 4-1: config 14 interface 71 altsetting 165 has a duplicate endpoint with address 0x3, skipping [ 701.995946][ T8771] usb 4-1: config 14 interface 71 altsetting 165 endpoint 0xE has invalid wMaxPacketSize 0 [ 701.995960][ T8771] usb 4-1: config 14 interface 71 altsetting 165 has an invalid descriptor for endpoint zero, skipping [ 701.995973][ T8771] usb 4-1: config 14 interface 71 altsetting 165 has a duplicate endpoint with address 0x7, skipping [ 701.995987][ T8771] usb 4-1: config 14 interface 71 altsetting 165 has a duplicate endpoint with address 0x7, skipping [ 701.996001][ T8771] usb 4-1: config 14 interface 71 altsetting 165 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 701.996017][ T8771] usb 4-1: config 14 interface 71 altsetting 165 has a duplicate endpoint with address 0x2, skipping [ 701.996030][ T8771] usb 4-1: config 14 interface 71 altsetting 165 has a duplicate endpoint with address 0xA, skipping [ 701.996044][ T8771] usb 4-1: config 14 interface 71 altsetting 165 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 701.996065][ T8771] usb 4-1: config 14 interface 122 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 701.996079][ T8771] usb 4-1: too many endpoints for config 14 interface 116 altsetting 201: 177, using maximum allowed: 30 [ 701.996100][ T8771] usb 4-1: config 14 interface 116 altsetting 201 endpoint 0x6 has invalid maxpacket 1036, setting to 64 [ 701.996115][ T8771] usb 4-1: config 14 interface 116 altsetting 201 has a duplicate endpoint with address 0xA, skipping [ 701.996127][ T8771] usb 4-1: config 14 interface 116 altsetting 201 has 3 endpoint descriptors, different from the interface descriptor's value: 177 [ 701.996142][ T8771] usb 4-1: config 14 interface 210 has no altsetting 0 [ 701.996152][ T8771] usb 4-1: config 14 interface 71 has no altsetting 0 [ 701.996162][ T8771] usb 4-1: config 14 interface 122 has no altsetting 0 [ 701.996172][ T8771] usb 4-1: config 14 interface 116 has no altsetting 0 [ 702.023987][ T8771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.024013][ T8771] usb 4-1: Product: ည [ 702.024026][ T8771] usb 4-1: Manufacturer: ࡠ [ 702.024039][ T8771] usb 4-1: SerialNumber: о [ 702.028617][T11708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.028769][T11708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.029058][T11708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.029148][T11708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.142515][ T9841] Bluetooth: hci5: command tx timeout [ 702.304130][ T8771] cdc_ether 4-1:14.210: bad CDC descriptors [ 702.532907][ T8771] usb 4-1: USB disconnect, device number 39 [ 702.773639][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 702.773657][ T30] audit: type=1400 audit(1789414473.251:693): avc: denied { execute } for pid=11721 comm="syz.1.1522" name="file0" dev="tmpfs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 702.779445][ T30] audit: type=1400 audit(1789414473.251:694): avc: denied { execute_no_trans } for pid=11721 comm="syz.1.1522" path="/318/file0" dev="tmpfs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 702.989760][T11723] ceph: No mds server is up or the cluster is laggy [ 703.011463][ T1213] libceph: connect (1)[c::]:6789 error -101 [ 703.032158][ T1213] libceph: mon0 (1)[c::]:6789 connect error [ 703.300161][T11612] syz_tun (unregistering): left allmulticast mode [ 703.879119][ T30] audit: type=1400 audit(1789414474.361:695): avc: denied { mount } for pid=11727 comm="syz.0.1511" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 703.924058][T11730] jffs2: notice: (11730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 704.059899][ T30] audit: type=1400 audit(1789414474.541:696): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 704.060456][ T6003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.060486][ T6003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.257082][ T9841] Bluetooth: hci5: command tx timeout [ 704.729592][ T6003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.749998][ T6003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.836103][T11747] jffs2: notice: (11747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 706.298403][ T9841] Bluetooth: hci5: command tx timeout [ 706.415877][T11755] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 706.504050][ T6003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.504073][ T6003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.777842][ T6003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.777865][ T6003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.001402][T11767] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 707.181192][ T44] libceph: connect (1)[c::]:6789 error -101 [ 707.181353][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 707.450059][ T8883] libceph: connect (1)[c::]:6789 error -101 [ 707.450925][ T8883] libceph: mon0 (1)[c::]:6789 connect error [ 707.564305][T11770] ceph: No mds server is up or the cluster is laggy [ 707.760458][T11788] comedi comedi0: Minor -4 is invalid! [ 707.958334][ T8883] libceph: connect (1)[c::]:6789 error -101 [ 707.958506][ T8883] libceph: mon0 (1)[c::]:6789 connect error [ 708.381912][ T9841] Bluetooth: hci5: command tx timeout [ 710.499659][T11796] FAULT_INJECTION: forcing a failure. [ 710.499659][T11796] name failslab, interval 1, probability 0, space 0, times 0 [ 710.499689][T11796] CPU: 0 UID: 0 PID: 11796 Comm: syz.3.1536 Not tainted syzkaller #0 PREEMPT(full) [ 710.499710][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 710.499721][T11796] Call Trace: [ 710.499727][T11796] [ 710.499735][T11796] dump_stack_lvl+0x100/0x190 [ 710.499766][T11796] should_fail_ex.cold+0x5/0xa [ 710.499792][T11796] should_failslab+0xc2/0x120 [ 710.499815][T11796] __kmalloc_noprof+0xfc/0x840 [ 710.499835][T11796] ? iovec_from_user+0x8d/0x140 [ 710.499860][T11796] iovec_from_user+0x8d/0x140 [ 710.499881][T11796] __import_iovec+0x81/0x640 [ 710.499907][T11796] import_iovec+0x101/0x130 [ 710.499930][T11796] __do_sys_vmsplice+0x202/0x13c0 [ 710.499960][T11796] ? lock_acquire+0x1d1/0x380 [ 710.499979][T11796] ? get_pid_task+0x2a/0x250 [ 710.500006][T11796] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 710.500036][T11796] ? find_held_lock+0x2b/0x80 [ 710.500066][T11796] ? rcu_read_lock_any_held+0x6a/0x90 [ 710.500090][T11796] ? find_held_lock+0x2b/0x80 [ 710.500117][T11796] ? ksys_write+0x190/0x250 [ 710.500134][T11796] ? ksys_write+0x190/0x250 [ 710.500151][T11796] ? lock_acquire+0x1d1/0x380 [ 710.500176][T11796] ? __fget_files+0x21f/0x3d0 [ 710.500202][T11796] ? fput+0x7c/0x100 [ 710.500222][T11796] ? ksys_write+0x1ac/0x250 [ 710.500240][T11796] ? __pfx_ksys_write+0x10/0x10 [ 710.500263][T11796] ? do_syscall_64+0x123/0x790 [ 710.500285][T11796] do_syscall_64+0x123/0x790 [ 710.500311][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.500330][T11796] RIP: 0033:0x7f421f39e159 [ 710.500347][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.500364][T11796] RSP: 002b:00007f42202e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 710.500383][T11796] RAX: ffffffffffffffda RBX: 00007f421f625fa0 RCX: 00007f421f39e159 [ 710.500395][T11796] RDX: 0000000000000009 RSI: 0000200000000b40 RDI: 0000000000000004 [ 710.500407][T11796] RBP: 00007f42202e5090 R08: 0000000000000000 R09: 0000000000000000 [ 710.500418][T11796] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 710.500429][T11796] R13: 00007f421f626038 R14: 00007f421f625fa0 R15: 00007ffdf249b928 [ 710.500454][T11796] [ 710.821826][T11798] jffs2: notice: (11798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 711.207011][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 711.207311][T11804] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 711.278092][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.278417][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.395980][T11804] bridge0: entered allmulticast mode [ 712.153004][ T6003] bridge_slave_1: left allmulticast mode [ 712.153063][ T6003] bridge_slave_1: left promiscuous mode [ 712.155433][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.205548][ T6003] bridge_slave_0: left allmulticast mode [ 712.205574][ T6003] bridge_slave_0: left promiscuous mode [ 712.205744][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.549415][ T30] audit: type=1400 audit(1789414483.031:697): avc: denied { write } for pid=11813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.934398][ T30] audit: type=1400 audit(1789414483.411:698): avc: denied { write } for pid=11839 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.020771][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.052269][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.068539][ T6003] bond0 (unregistering): Released all slaves [ 713.226966][T11805] bridge_slave_1: left allmulticast mode [ 713.227009][T11805] bridge_slave_1: left promiscuous mode [ 713.227411][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.227479][T11845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.273259][T11805] bridge_slave_0: left allmulticast mode [ 713.273278][T11805] bridge_slave_0: left promiscuous mode [ 713.273376][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.282412][T11849] FAULT_INJECTION: forcing a failure. [ 713.282412][T11849] name failslab, interval 1, probability 0, space 0, times 0 [ 713.282438][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.2.1542 Not tainted syzkaller #0 PREEMPT(full) [ 713.282457][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 713.282466][T11849] Call Trace: [ 713.282472][T11849] [ 713.282479][T11849] dump_stack_lvl+0x100/0x190 [ 713.282507][T11849] should_fail_ex.cold+0x5/0xa [ 713.282531][T11849] should_failslab+0xc2/0x120 [ 713.282551][T11849] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 713.282570][T11849] ? __d_alloc+0x35/0xa50 [ 713.282596][T11849] __d_alloc+0x35/0xa50 [ 713.282620][T11849] d_alloc_parallel+0x105/0x14c0 [ 713.282642][T11849] ? lock_acquire+0x1d1/0x380 [ 713.282659][T11849] ? __d_lookup+0x73/0x4a0 [ 713.282683][T11849] ? __pfx_d_alloc_parallel+0x10/0x10 [ 713.282700][T11849] ? __d_lookup+0x25c/0x4a0 [ 713.282720][T11849] ? __d_lookup+0x266/0x4a0 [ 713.282742][T11849] lookup_open+0x6bb/0x1990 [ 713.282767][T11849] path_openat+0xa2c/0x2440 [ 713.282791][T11849] ? __pfx_path_openat+0x10/0x10 [ 713.282818][T11849] do_file_open+0x20e/0x430 [ 713.282840][T11849] ? __pfx_do_file_open+0x10/0x10 [ 713.282868][T11849] ? __pfx_kfree_link+0x10/0x10 [ 713.282892][T11849] ? _raw_spin_unlock+0x28/0x50 [ 713.282911][T11849] ? alloc_fd+0x471/0x7a0 [ 713.282938][T11849] do_sys_openat2+0x10f/0x1e0 [ 713.282960][T11849] ? __pfx_do_sys_openat2+0x10/0x10 [ 713.282983][T11849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 713.283011][T11849] __x64_sys_openat+0x12d/0x210 [ 713.283033][T11849] ? __pfx___x64_sys_openat+0x10/0x10 [ 713.283065][T11849] do_syscall_64+0x123/0x790 [ 713.283089][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.283105][T11849] RIP: 0033:0x7f488075e98e [ 713.283119][T11849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 713.283134][T11849] RSP: 002b:00007f487e9f5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 713.283151][T11849] RAX: ffffffffffffffda RBX: 00007f487e9f66c0 RCX: 00007f488075e98e [ 713.283162][T11849] RDX: 0000000000000002 RSI: 00007f4880834942 RDI: ffffffffffffff9c [ 713.283173][T11849] RBP: 00007f488083503b R08: 0000000000000000 R09: 0000000000000000 [ 713.283183][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.283193][T11849] R13: 00007f4880a26038 R14: 00007f4880a25fa0 R15: 00007ffdb1847e48 [ 713.283216][T11849] [ 713.713401][T11852] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 713.848821][T11841] syzkaller0: entered promiscuous mode [ 713.848842][T11841] syzkaller0: entered allmulticast mode [ 714.131011][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 715.065165][T11861] FAULT_INJECTION: forcing a failure. [ 715.065165][T11861] name failslab, interval 1, probability 0, space 0, times 0 [ 715.065191][T11861] CPU: 0 UID: 0 PID: 11861 Comm: syz.2.1546 Not tainted syzkaller #0 PREEMPT(full) [ 715.065208][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 715.065217][T11861] Call Trace: [ 715.065223][T11861] [ 715.065229][T11861] dump_stack_lvl+0x100/0x190 [ 715.065256][T11861] should_fail_ex.cold+0x5/0xa [ 715.065278][T11861] should_failslab+0xc2/0x120 [ 715.065297][T11861] __kmalloc_noprof+0xfc/0x840 [ 715.065313][T11861] ? rcu_is_watching+0x13/0xc0 [ 715.065334][T11861] ? tomoyo_realpath_from_path+0xb6/0x690 [ 715.065360][T11861] tomoyo_realpath_from_path+0xb6/0x690 [ 715.065383][T11861] tomoyo_path_number_perm+0x23c/0x580 [ 715.065401][T11861] ? tomoyo_path_number_perm+0x22e/0x580 [ 715.065421][T11861] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 715.065449][T11861] ? __lock_acquire+0x5c0/0x1f40 [ 715.065480][T11861] ? __fget_files+0x34/0x3d0 [ 715.065503][T11861] ? find_held_lock+0x2b/0x80 [ 715.065525][T11861] ? hook_file_ioctl_common+0x140/0x440 [ 715.065554][T11861] ? __fget_files+0x21f/0x3d0 [ 715.065580][T11861] security_file_ioctl+0xd3/0x230 [ 715.065610][T11861] __x64_sys_ioctl+0xb7/0x210 [ 715.065633][T11861] do_syscall_64+0x123/0x790 [ 715.065660][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.065679][T11861] RIP: 0033:0x7f488079e159 [ 715.065696][T11861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.065714][T11861] RSP: 002b:00007f487e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.065734][T11861] RAX: ffffffffffffffda RBX: 00007f4880a25fa0 RCX: 00007f488079e159 [ 715.065746][T11861] RDX: 0000200000000040 RSI: 0000000040345410 RDI: 0000000000000003 [ 715.065758][T11861] RBP: 00007f487e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 715.065770][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.065781][T11861] R13: 00007f4880a26038 R14: 00007f4880a25fa0 R15: 00007ffdb1847e48 [ 715.065804][T11861] [ 715.065817][T11861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 716.014970][T11876] FAULT_INJECTION: forcing a failure. [ 716.014970][T11876] name failslab, interval 1, probability 0, space 0, times 0 [ 716.015000][T11876] CPU: 1 UID: 0 PID: 11876 Comm: syz.0.1548 Not tainted syzkaller #0 PREEMPT(full) [ 716.015021][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 716.015032][T11876] Call Trace: [ 716.015039][T11876] [ 716.015047][T11876] dump_stack_lvl+0x100/0x190 [ 716.015080][T11876] should_fail_ex.cold+0x5/0xa [ 716.015107][T11876] should_failslab+0xc2/0x120 [ 716.015131][T11876] __kmalloc_noprof+0xfc/0x840 [ 716.015149][T11876] ? rcu_is_watching+0x13/0xc0 [ 716.015174][T11876] ? tomoyo_encode2+0xfb/0x3c0 [ 716.015200][T11876] tomoyo_encode2+0xfb/0x3c0 [ 716.015225][T11876] tomoyo_encode+0x29/0x50 [ 716.015246][T11876] tomoyo_realpath_from_path+0x18c/0x690 [ 716.015275][T11876] tomoyo_check_open_permission+0x2af/0x3c0 [ 716.015295][T11876] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 716.015323][T11876] ? hook_file_open+0x248/0x8e0 [ 716.015371][T11876] tomoyo_file_open+0x6b/0x90 [ 716.015398][T11876] security_file_open+0xb5/0x1e0 [ 716.015421][T11876] do_dentry_open+0x588/0x14d0 [ 716.015447][T11876] vfs_open+0x82/0x3f0 [ 716.015475][T11876] path_openat+0x19fa/0x2440 [ 716.015502][T11876] ? __pfx_path_openat+0x10/0x10 [ 716.015531][T11876] do_file_open+0x20e/0x430 [ 716.015555][T11876] ? __pfx_do_file_open+0x10/0x10 [ 716.015588][T11876] ? __pfx_kfree_link+0x10/0x10 [ 716.015615][T11876] ? _raw_spin_unlock+0x28/0x50 [ 716.015636][T11876] ? alloc_fd+0x471/0x7a0 [ 716.015666][T11876] do_sys_openat2+0x10f/0x1e0 [ 716.015697][T11876] ? __pfx_do_sys_openat2+0x10/0x10 [ 716.015723][T11876] ? fd_install+0xa2/0x580 [ 716.015750][T11876] __x64_sys_openat+0x12d/0x210 [ 716.015776][T11876] ? __pfx___x64_sys_openat+0x10/0x10 [ 716.015811][T11876] do_syscall_64+0x123/0x790 [ 716.015838][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.015856][T11876] RIP: 0033:0x7fc93435e98e [ 716.015873][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 716.015890][T11876] RSP: 002b:00007fc935314f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 716.015909][T11876] RAX: ffffffffffffffda RBX: 00007fc9353156c0 RCX: 00007fc93435e98e [ 716.015921][T11876] RDX: 0000000000000002 RSI: 00007fc934434942 RDI: ffffffffffffff9c [ 716.015933][T11876] RBP: 00007fc93443503b R08: 0000000000000000 R09: 0000000000000000 [ 716.015944][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.015958][T11876] R13: 00007fc934626038 R14: 00007fc934625fa0 R15: 00007ffe6b1b7328 [ 716.015983][T11876] [ 716.016013][T11876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 716.016059][T11876] FAULT_INJECTION: forcing a failure. [ 716.016059][T11876] name failslab, interval 1, probability 0, space 0, times 0 [ 716.016079][T11876] CPU: 1 UID: 0 PID: 11876 Comm: syz.0.1548 Not tainted syzkaller #0 PREEMPT(full) [ 716.016098][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 716.016108][T11876] Call Trace: [ 716.016114][T11876] [ 716.016121][T11876] dump_stack_lvl+0x100/0x190 [ 716.016151][T11876] should_fail_ex.cold+0x5/0xa [ 716.016177][T11876] should_failslab+0xc2/0x120 [ 716.016200][T11876] __kmalloc_cache_noprof+0x91/0x6d0 [ 716.016226][T11876] ? cred_has_capability.isra.0+0x186/0x300 [ 716.016248][T11876] ? kernfs_get_tree+0xcb/0xbb0 [ 716.016275][T11876] kernfs_get_tree+0xcb/0xbb0 [ 716.016299][T11876] ? rcu_is_watching+0x13/0xc0 [ 716.016324][T11876] ? __pfx_kernfs_get_tree+0x10/0x10 [ 716.016350][T11876] ? bpf_lsm_capable+0x9/0x10 [ 716.016380][T11876] vfs_get_tree+0x92/0x320 [ 716.016407][T11876] vfs_cmd_create+0xd7/0x2a0 [ 716.016427][T11876] __do_sys_fsconfig+0x55a/0xcb0 [ 716.016448][T11876] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 716.016466][T11876] ? fput+0x7c/0x100 [ 716.016499][T11876] do_syscall_64+0x123/0x790 [ 716.016526][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.016546][T11876] RIP: 0033:0x7fc93439e159 [ 716.016560][T11876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.016576][T11876] RSP: 002b:00007fc935315028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 716.016593][T11876] RAX: ffffffffffffffda RBX: 00007fc934625fa0 RCX: 00007fc93439e159 [ 716.016604][T11876] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 716.016615][T11876] RBP: 00007fc935315090 R08: 0000000000000000 R09: 0000000000000000 [ 716.016626][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.016637][T11876] R13: 00007fc934626038 R14: 00007fc934625fa0 R15: 00007ffe6b1b7328 [ 716.016662][T11876] [ 716.644254][ T30] audit: type=1400 audit(1789414487.121:699): avc: denied { write } for pid=11867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.039512][ T30] audit: type=1400 audit(1789414487.521:700): avc: denied { write } for pid=11903 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.081248][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.082081][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.082185][T11682] bridge_slave_0: entered allmulticast mode [ 717.085207][T11682] bridge_slave_0: entered promiscuous mode [ 717.194546][T11904] input: syz0 as /devices/virtual/input/input79 [ 717.210936][T11682] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.210980][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.211068][T11682] bridge_slave_1: entered allmulticast mode [ 717.215821][T11682] bridge_slave_1: entered promiscuous mode [ 717.334779][T11682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.367531][T11682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.474284][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 717.485507][T11682] team0: Port device team_slave_0 added [ 717.501356][T11682] team0: Port device team_slave_1 added [ 717.668945][T11682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.668957][T11682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.668971][T11682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.669823][T11682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.669831][T11682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.669844][T11682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.507387][T11682] hsr_slave_0: entered promiscuous mode [ 718.507863][T11682] hsr_slave_1: entered promiscuous mode [ 718.524290][T11682] debugfs: 'hsr0' already exists in 'hsr' [ 718.524315][T11682] Cannot create hsr debugfs directory [ 718.578064][ T5786] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 718.580333][T11924] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1557'. [ 718.590644][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 718.736240][ T5786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 718.736276][ T5786] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 718.737197][ T5786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 718.744464][ T5786] usb 1-1: string descriptor 0 read error: -22 [ 718.744554][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.761197][T11918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 718.782115][ T30] audit: type=1400 audit(1789414489.261:701): avc: denied { read } for pid=11927 comm="syz.3.1559" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 718.782165][ T30] audit: type=1400 audit(1789414489.261:702): avc: denied { open } for pid=11927 comm="syz.3.1559" path="/306/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 718.814010][ T30] audit: type=1400 audit(1789414489.291:703): avc: denied { ioctl } for pid=11927 comm="syz.3.1559" path="/306/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 718.984699][T11918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 719.229251][ T8883] usb 1-1: USB disconnect, device number 40 [ 719.348008][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 719.417983][ T9841] Bluetooth: hci1: command 0x0406 tx timeout [ 719.420282][ T8771] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 719.420297][ T8771] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 719.477246][ T30] audit: type=1400 audit(1789414489.951:704): avc: denied { write } for pid=11919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.500738][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 719.502169][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.502211][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.518708][ T9] usb 4-1: config 0 descriptor?? [ 719.535678][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 719.692320][T11682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 719.692796][ T30] audit: type=1400 audit(1789414490.171:705): avc: denied { bind } for pid=11929 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 719.734394][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.737892][T11682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 719.790423][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.799242][T11682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 719.833240][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.833865][ T30] audit: type=1400 audit(1789414490.311:706): avc: denied { write } for pid=11941 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.836677][T11682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 719.878954][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.952051][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 719.955939][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 719.958146][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 719.969082][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 719.986731][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 719.998965][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 720.002149][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 720.009494][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 720.026259][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 720.031808][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 720.112943][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 720.233196][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 720.235366][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 720.235897][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 720.236201][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 720.236440][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 720.239889][ T9] pwc: Registered as video103. [ 720.248979][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input80 [ 720.267769][ T9] usb 4-1: USB disconnect, device number 40 [ 720.454488][T11682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.495555][T11682] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.516589][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.516659][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.534639][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.534701][ T8251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.718804][ T8771] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 721.718813][ T9841] Bluetooth: hci3: command 0x0406 tx timeout [ 721.718829][ T8771] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 722.255664][ T30] audit: type=1400 audit(1789414492.731:707): avc: denied { write } for pid=11959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.325640][ T30] audit: type=1400 audit(1789414493.801:708): avc: denied { write } for pid=11996 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.411353][T11682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.564336][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 723.568588][T12010] jffs2: notice: (12010) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 723.606331][ T30] audit: type=1400 audit(1789414494.081:709): avc: denied { write } for pid=12006 comm="syz.1.1575" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 723.898290][ T9841] Bluetooth: hci4: command 0x0406 tx timeout [ 723.942765][ T8771] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 723.942789][ T8771] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 724.796625][T11682] veth0_vlan: entered promiscuous mode [ 724.885271][ T30] audit: type=1400 audit(1789414495.351:710): avc: denied { write } for pid=12029 comm="syz.3.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 724.885392][ T30] audit: type=1400 audit(1789414495.351:711): avc: denied { open } for pid=12029 comm="syz.3.1568" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 725.281289][T11682] veth1_vlan: entered promiscuous mode [ 725.407577][T11682] veth0_macvtap: entered promiscuous mode [ 725.419856][T11682] veth1_macvtap: entered promiscuous mode [ 725.487238][T12042] input: syz0 as /devices/virtual/input/input81 [ 725.524391][T11682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.568755][T11682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.587177][ T8883] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 725.587659][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.628297][ T6001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.628335][ T6001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.628364][ T6001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.679405][T12048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1585'. [ 725.750410][ T8883] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 725.755564][ T8883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.755590][ T8883] usb 1-1: Product: syz [ 725.755605][ T8883] usb 1-1: Manufacturer: syz [ 725.755619][ T8883] usb 1-1: SerialNumber: syz [ 725.791885][ T8883] usb 1-1: config 0 descriptor?? [ 725.896660][ T30] audit: type=1400 audit(1789414496.371:712): avc: denied { map } for pid=12054 comm="syz.3.1587" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 725.952999][ T30] audit: type=1400 audit(1789414496.431:713): avc: denied { ioctl } for pid=12054 comm="syz.3.1587" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 726.062543][ T9841] Bluetooth: hci5: command 0x0c1a tx timeout [ 726.078553][ T8771] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 726.078599][ T8771] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 726.442162][ T8883] usb 1-1: Firmware version (0.0) predates our first public release. [ 726.442189][ T8883] usb 1-1: Please update to version 0.2 or newer [ 726.529674][ T8883] usb 1-1: Firmware: build [ 726.581925][T12055] ftl_cs: FTL header not found. [ 727.861022][T12069] FAULT_INJECTION: forcing a failure. [ 727.861022][T12069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 727.861054][T12069] CPU: 0 UID: 0 PID: 12069 Comm: syz.0.1590 Not tainted syzkaller #0 PREEMPT(full) [ 727.861077][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 727.861087][T12069] Call Trace: [ 727.861094][T12069] [ 727.861102][T12069] dump_stack_lvl+0x100/0x190 [ 727.861136][T12069] should_fail_ex.cold+0x5/0xa [ 727.861158][T12069] ? prepare_alloc_pages+0x16d/0x5b0 [ 727.861185][T12069] should_fail_alloc_page+0xeb/0x140 [ 727.861211][T12069] prepare_alloc_pages+0x1f0/0x5b0 [ 727.861238][T12069] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 727.861272][T12069] ? rcu_is_watching+0x13/0xc0 [ 727.861301][T12069] ? __lock_acquire+0x5c0/0x1f40 [ 727.861320][T12069] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 727.861346][T12069] ? __css_rstat_updated+0x1ce/0x590 [ 727.861371][T12069] ? lock_acquire+0x1d1/0x380 [ 727.861392][T12069] ? do_raw_spin_lock+0x128/0x260 [ 727.861416][T12069] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 727.861450][T12069] ? find_held_lock+0x2b/0x80 [ 727.861482][T12069] ? __lock_acquire+0x5c0/0x1f40 [ 727.861500][T12069] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 727.861521][T12069] ? policy_nodemask+0xed/0x4f0 [ 727.861544][T12069] alloc_pages_mpol+0x201/0x550 [ 727.861568][T12069] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 727.861597][T12069] folio_alloc_mpol_noprof+0x36/0x260 [ 727.861626][T12069] shmem_alloc_folio+0x135/0x160 [ 727.861656][T12069] shmem_alloc_and_add_folio+0x371/0xd40 [ 727.861690][T12069] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 727.861716][T12069] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 727.861743][T12069] shmem_get_folio_gfp+0x75b/0x1980 [ 727.861771][T12069] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 727.861799][T12069] ? filemap_map_pages+0x114a/0x2100 [ 727.861824][T12069] shmem_fault+0x1fb/0xa30 [ 727.861849][T12069] ? __pfx_shmem_fault+0x10/0x10 [ 727.861876][T12069] ? __pfx_filemap_map_pages+0x10/0x10 [ 727.861903][T12069] ? find_held_lock+0x2b/0x80 [ 727.861930][T12069] ? __pfx_filemap_map_pages+0x10/0x10 [ 727.861952][T12069] __do_fault+0x10b/0x440 [ 727.861974][T12069] do_fault+0xb3f/0x1830 [ 727.861997][T12069] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 727.862025][T12069] ? __pfx_do_fault+0x10/0x10 [ 727.862047][T12069] ? rcu_read_unlock+0x2d/0xb0 [ 727.862074][T12069] ? rcu_read_unlock+0x2d/0xb0 [ 727.862098][T12069] ? __pte_offset_map+0x179/0x310 [ 727.862120][T12069] __handle_mm_fault+0x150b/0x2f60 [ 727.862153][T12069] ? __pfx___handle_mm_fault+0x10/0x10 [ 727.862180][T12069] ? pte_offset_map_lock+0x174/0x320 [ 727.862201][T12069] ? find_held_lock+0x2b/0x80 [ 727.862226][T12069] ? find_held_lock+0x2b/0x80 [ 727.862251][T12069] ? follow_page_pte+0x536/0x1050 [ 727.862289][T12069] handle_mm_fault+0x363/0xa20 [ 727.862321][T12069] __get_user_pages+0x8ae/0x2c30 [ 727.862350][T12069] ? __pfx_mt_find+0x10/0x10 [ 727.862379][T12069] ? __pfx___get_user_pages+0x10/0x10 [ 727.862411][T12069] populate_vma_page_range+0x267/0x3f0 [ 727.862446][T12069] ? __pfx_populate_vma_page_range+0x10/0x10 [ 727.862469][T12069] ? __pfx_find_vma_intersection+0x10/0x10 [ 727.862499][T12069] __mm_populate+0x107/0x3a0 [ 727.862520][T12069] ? __pfx___mm_populate+0x10/0x10 [ 727.862542][T12069] ? up_write+0x2dc/0x5b0 [ 727.862563][T12069] vm_mmap_pgoff+0x441/0x470 [ 727.862585][T12069] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 727.862606][T12069] ? __pfx_do_futex+0x10/0x10 [ 727.862630][T12069] ksys_mmap_pgoff+0xe4/0x610 [ 727.862647][T12069] ? __x64_sys_futex+0x358/0x4d0 [ 727.862668][T12069] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 727.862685][T12069] ? xfd_validate_state+0x129/0x190 [ 727.862706][T12069] __x64_sys_mmap+0x125/0x190 [ 727.862725][T12069] do_syscall_64+0x123/0x790 [ 727.862746][T12069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.862761][T12069] RIP: 0033:0x7fc93439e159 [ 727.862775][T12069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.862789][T12069] RSP: 002b:00007fc935315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 727.862805][T12069] RAX: ffffffffffffffda RBX: 00007fc934625fa0 RCX: 00007fc93439e159 [ 727.862816][T12069] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 727.862826][T12069] RBP: 00007fc93443503b R08: ffffffffffffffff R09: 0000000000000000 [ 727.862837][T12069] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 727.862846][T12069] R13: 00007fc934626038 R14: 00007fc934625fa0 R15: 00007ffe6b1b7328 [ 727.862866][T12069] [ 728.346228][ T8883] usb 1-1: USB disconnect, device number 41 [ 728.369045][T12055] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 729.690203][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.690222][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.950964][ T30] audit: type=1800 audit(1789414500.361:714): pid=12092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1595" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 730.417126][ T7385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.417145][ T7385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.477305][ T30] audit: type=1400 audit(1789414500.951:715): avc: denied { mounton } for pid=11682 comm="syz-executor" path="/root/syzkaller.O2cml0/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 731.503527][ T30] audit: type=1400 audit(1789414501.981:716): avc: denied { mounton } for pid=11682 comm="syz-executor" path="/root/syzkaller.O2cml0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 731.504394][ T30] audit: type=1400 audit(1789414501.981:717): avc: denied { mounton } for pid=11682 comm="syz-executor" path="/root/syzkaller.O2cml0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=49143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 731.734769][T12105] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 731.768123][ T30] audit: type=1400 audit(1789414502.211:718): avc: denied { map } for pid=12104 comm="syz.2.1601" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 731.768176][ T30] audit: type=1400 audit(1789414502.211:719): avc: denied { execute } for pid=12104 comm="syz.2.1601" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 731.958662][ T30] audit: type=1400 audit(1789414502.441:720): avc: denied { mounton } for pid=11682 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 731.958807][ T30] audit: type=1400 audit(1789414502.441:721): avc: denied { mount } for pid=11682 comm="syz-executor" name="/" dev="gadgetfs" ino=7553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 731.990930][ T30] audit: type=1400 audit(1789414502.471:722): avc: denied { mounton } for pid=11682 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 731.995111][T12105] kvm: MWAIT instruction emulated as NOP! [ 732.088842][ T30] audit: type=1400 audit(1789414502.571:723): avc: denied { watch watch_reads } for pid=12109 comm="syz.0.1600" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 732.137471][ T6003] hsr_slave_0: left promiscuous mode [ 732.159145][ T6003] hsr_slave_1: left promiscuous mode [ 732.160035][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.160066][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.174480][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.174498][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.199805][T12105] netlink: 'syz.2.1601': attribute type 3 has an invalid length. [ 732.246156][ T6003] veth1_macvtap: left promiscuous mode [ 732.246231][ T6003] veth0_macvtap: left promiscuous mode [ 732.246323][ T6003] veth1_vlan: left promiscuous mode [ 732.246555][ T6003] veth0_vlan: left promiscuous mode [ 732.813973][T12121] key id 000004d2 not found [ 733.239438][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 733.242414][T12127] FAULT_INJECTION: forcing a failure. [ 733.242414][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 733.242448][T12127] CPU: 0 UID: 0 PID: 12127 Comm: syz.2.1607 Not tainted syzkaller #0 PREEMPT(full) [ 733.242472][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 733.242484][T12127] Call Trace: [ 733.242492][T12127] [ 733.242501][T12127] dump_stack_lvl+0x100/0x190 [ 733.242534][T12127] should_fail_ex.cold+0x5/0xa [ 733.242562][T12127] should_failslab+0xc2/0x120 [ 733.242590][T12127] __kmalloc_noprof+0xfc/0x840 [ 733.242610][T12127] ? aes_set_key_common+0x78/0xc0 [ 733.242632][T12127] ? init_skcipher_req.constprop.0+0x9c/0x180 [ 733.242662][T12127] init_skcipher_req.constprop.0+0x9c/0x180 [ 733.242692][T12127] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 733.242723][T12127] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 733.242751][T12127] ? kasan_quarantine_put+0x104/0x240 [ 733.242770][T12127] ? lockdep_hardirqs_on+0x7d/0x110 [ 733.242800][T12127] ? __kasan_check_byte+0x13/0x50 [ 733.242827][T12127] ? get_derived_key+0x11b/0x140 [ 733.242855][T12127] encrypted_read+0x389/0x850 [ 733.242880][T12127] ? lock_acquire+0x1d1/0x380 [ 733.242898][T12127] ? keyctl_read_key+0x227/0x510 [ 733.242923][T12127] ? __pfx_encrypted_read+0x10/0x10 [ 733.242951][T12127] ? __pfx___might_resched+0x10/0x10 [ 733.242976][T12127] ? down_read+0x13b/0x4c0 [ 733.243003][T12127] ? __pfx_down_read+0x10/0x10 [ 733.243027][T12127] ? keyctl_read_key+0x2ac/0x510 [ 733.243051][T12127] ? keyctl_read_key+0x2ac/0x510 [ 733.243076][T12127] ? keyctl_read_key+0x427/0x510 [ 733.243108][T12127] keyctl_read_key+0x29a/0x510 [ 733.243140][T12127] __do_sys_keyctl+0x36d/0x5a0 [ 733.243161][T12127] do_syscall_64+0x123/0x790 [ 733.243189][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.243210][T12127] RIP: 0033:0x7f488079e159 [ 733.243227][T12127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.243245][T12127] RSP: 002b:00007f487e9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 733.243264][T12127] RAX: ffffffffffffffda RBX: 00007f4880a25fa0 RCX: 00007f488079e159 [ 733.243279][T12127] RDX: 0000200000000240 RSI: 0000000000128d56 RDI: 000000000000000b [ 733.243292][T12127] RBP: 00007f488083503b R08: 0000000000000000 R09: 0000000000000000 [ 733.243304][T12127] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 733.243317][T12127] R13: 00007f4880a26038 R14: 00007f4880a25fa0 R15: 00007ffdb1847e48 [ 733.243343][T12127] [ 733.243760][T12127] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 733.252011][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 733.457491][ T44] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 733.457618][ T5711] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 734.099658][T12134] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5604] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12134] [ 734.755665][ T5711] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 734.781607][ T44] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 734.787803][ T44] usb 1-1: config index 0 descriptor too short (expected 63186, got 210) [ 734.787827][ T44] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 734.787844][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.787859][ T44] usb 1-1: config 0 has no interface number 0 [ 734.787893][ T44] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 734.787913][ T44] usb 1-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 734.787939][ T44] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 734.787959][ T44] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 734.787989][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.798083][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.798107][ T5711] usb 4-1: Product: syz [ 734.798120][ T5711] usb 4-1: Manufacturer: syz [ 734.798133][ T5711] usb 4-1: SerialNumber: syz [ 734.802661][ T44] usb 1-1: config 0 descriptor?? [ 734.979283][T12136] comedi comedi0: Minor -4 is invalid! [ 735.377087][ T5711] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 735.377143][ T5711] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 735.418144][ T44] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 735.422061][ T44] usb 1-1: USB disconnect, device number 42 [ 735.423637][ T7385] usb 1-1: Failed to submit usb control message: -19 [ 735.423667][ T7385] usb 1-1: unable to send the bmi data to the device: -19 [ 735.423684][ T7385] usb 1-1: unable to get target info from device [ 735.423697][ T7385] usb 1-1: could not get target info (-19) [ 735.423718][ T7385] usb 1-1: could not probe fw (-19) [ 735.615443][ T5711] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 735.615490][ T5711] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 735.616343][ T5711] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 735.667456][ T5711] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 735.692111][ T5711] usb 4-1: USB disconnect, device number 41 [ 736.607602][ T30] audit: type=1400 audit(1789414507.092:724): avc: denied { bind } for pid=12145 comm="syz.5.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 736.608324][ T30] audit: type=1400 audit(1789414507.092:725): avc: denied { map } for pid=12145 comm="syz.5.1611" path="socket:[50233]" dev="sockfs" ino=50233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 736.608551][ T30] audit: type=1400 audit(1789414507.092:726): avc: denied { read write } for pid=12145 comm="syz.5.1611" path="socket:[50233]" dev="sockfs" ino=50233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 737.837708][ T30] audit: type=1400 audit(1789414508.322:727): avc: denied { read } for pid=12171 comm="syz.3.1616" path="socket:[50258]" dev="sockfs" ino=50258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 737.897316][ T30] audit: type=1400 audit(1789414508.372:728): avc: denied { write } for pid=12141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.095969][ T30] audit: type=1400 audit(1789414508.572:729): avc: denied { write } for pid=12182 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.621972][ T30] audit: type=1400 audit(1789414510.042:730): avc: denied { audit_write } for pid=12187 comm="syz.0.1620" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 740.675345][T12211] jffs2: notice: (12211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 740.735413][ T30] audit: type=1400 audit(1789414511.202:731): avc: denied { write } for pid=12209 comm="syz.3.1625" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 741.579511][T12229] overlayfs: missing 'lowerdir' [ 741.818569][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.818622][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.851671][ T30] audit: type=1800 audit(1789414512.312:732): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1625" name="file2" dev="jffs2" ino=3 res=0 errno=0 [ 743.029318][ T30] audit: type=1400 audit(1789414513.512:733): avc: denied { write } for pid=12203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.517141][ T30] audit: type=1400 audit(1789414514.002:734): avc: denied { write } for pid=12239 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.552493][ T30] audit: type=1400 audit(1789414516.032:735): avc: denied { create } for pid=12264 comm="syz.3.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 745.758596][T12267] Bluetooth: MGMT ver 1.23 [ 746.244368][T12272] NILFS (nullb0): couldn't find nilfs on the device [ 747.334342][ T30] audit: type=1400 audit(1789414517.812:736): avc: denied { mounton } for pid=12271 comm="syz.1.1638" path="/syzcgroup/unified/syz1" dev="pstore" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 747.902999][ T30] audit: type=1400 audit(1789414518.382:737): avc: denied { write } for pid=12248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.230295][ T30] audit: type=1400 audit(1789414518.712:738): avc: denied { write } for pid=12288 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.310924][T12292] input: syz0 as /devices/virtual/input/input82 [ 748.496695][ T9] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 748.791060][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 748.791105][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 748.809778][ T9] usb 2-1: string descriptor 0 read error: -22 [ 748.809880][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.397697][ T9] usb 2-1: USB disconnect, device number 43 [ 752.133619][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 752.133638][ T2345] pvrusb2: Failure uploading firmware1 [ 752.133645][ T2345] pvrusb2: Device initialization was not successful. [ 752.133652][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 752.133660][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 752.135377][ T5710] pvrusb2: Device being rendered inoperable [ 753.428880][ T30] audit: type=1400 audit(1789414523.913:739): avc: denied { write } for pid=12296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.469427][T12326] FAULT_INJECTION: forcing a failure. [ 753.469427][T12326] name failslab, interval 1, probability 0, space 0, times 0 [ 753.469461][T12326] CPU: 1 UID: 0 PID: 12326 Comm: syz.1.1653 Not tainted syzkaller #0 PREEMPT(full) [ 753.469487][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 753.469499][T12326] Call Trace: [ 753.469507][T12326] [ 753.469517][T12326] dump_stack_lvl+0x100/0x190 [ 753.469553][T12326] should_fail_ex.cold+0x5/0xa [ 753.469582][T12326] should_failslab+0xc2/0x120 [ 753.469609][T12326] kmem_cache_alloc_noprof+0x92/0x6a0 [ 753.469630][T12326] ? __pfx_vma_is_special_huge+0x10/0x10 [ 753.469655][T12326] ? ptlock_alloc+0x1f/0x70 [ 753.469687][T12326] ptlock_alloc+0x1f/0x70 [ 753.469714][T12326] pte_alloc_one+0x82/0x3d0 [ 753.469742][T12326] __do_fault+0x26c/0x440 [ 753.469765][T12326] do_fault+0x585/0x1830 [ 753.469788][T12326] ? __pfx_filemap_map_pages+0x10/0x10 [ 753.469813][T12326] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 753.469843][T12326] ? __pfx_do_fault+0x10/0x10 [ 753.469870][T12326] ? do_raw_spin_unlock+0x145/0x1e0 [ 753.469896][T12326] ? _raw_spin_unlock+0x28/0x50 [ 753.469918][T12326] ? __pmd_alloc+0x3fb/0x950 [ 753.469945][T12326] __handle_mm_fault+0x150b/0x2f60 [ 753.469977][T12326] ? __pfx___handle_mm_fault+0x10/0x10 [ 753.470004][T12326] ? __pfx_mt_find+0x10/0x10 [ 753.470048][T12326] ? find_vma+0xbf/0x140 [ 753.470068][T12326] ? __pfx_find_vma+0x10/0x10 [ 753.470092][T12326] handle_mm_fault+0x363/0xa20 [ 753.470124][T12326] do_user_addr_fault+0x745/0x12f0 [ 753.470158][T12326] exc_page_fault+0x6f/0xd0 [ 753.470184][T12326] asm_exc_page_fault+0x26/0x30 [ 753.470203][T12326] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 753.470224][T12326] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f b1 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 753.470242][T12326] RSP: 0018:ffffc90002e3fcb0 EFLAGS: 00050202 [ 753.470259][T12326] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 753.470271][T12326] RDX: 0000000000000001 RSI: ffffc90002e3fd10 RDI: 0000000000000000 [ 753.470283][T12326] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520005c7fb0 [ 753.470296][T12326] R10: ffffc90002e3fd87 R11: 0000000000000000 R12: ffffc90002e3fd10 [ 753.470308][T12326] R13: 0000000000000078 R14: 00007ffffffff000 R15: 0000000000000000 [ 753.470333][T12326] _copy_to_user+0xa4/0xd0 [ 753.470356][T12326] do_statfs_native+0xa2/0x110 [ 753.470379][T12326] ? __pfx_do_statfs_native+0x10/0x10 [ 753.470412][T12326] ? simple_statfs+0x13/0x1d0 [ 753.470431][T12326] ? fput+0x7c/0x100 [ 753.470459][T12326] __do_sys_fstatfs+0xf4/0x100 [ 753.470483][T12326] ? __pfx___do_sys_fstatfs+0x10/0x10 [ 753.470522][T12326] do_syscall_64+0x123/0x790 [ 753.470551][T12326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.470571][T12326] RIP: 0033:0x7fdd30f9e159 [ 753.470588][T12326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.470606][T12326] RSP: 002b:00007fdd31f09028 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 753.470624][T12326] RAX: ffffffffffffffda RBX: 00007fdd31225fa0 RCX: 00007fdd30f9e159 [ 753.470637][T12326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 753.470648][T12326] RBP: 00007fdd3103503b R08: 0000000000000000 R09: 0000000000000000 [ 753.470661][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.470673][T12326] R13: 00007fdd31226038 R14: 00007fdd31225fa0 R15: 00007ffef889d1f8 [ 753.470700][T12326] [ 753.641140][ T5710] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 753.877222][ T5710] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 753.879939][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 753.879968][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 753.972430][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.972459][ T5710] usb 1-1: Product: syz [ 753.972472][ T5710] usb 1-1: Manufacturer: syz [ 753.972487][ T5710] usb 1-1: SerialNumber: syz [ 754.024943][ T5710] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 754.156476][ T8883] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 754.326436][ T8883] usb 2-1: Using ep0 maxpacket: 16 [ 754.391002][ T8883] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8 [ 754.429560][ T8883] usb 2-1: config 3 has an invalid interface number: 88 but max is 0 [ 754.448254][ T8883] usb 2-1: config 3 has no interface number 0 [ 754.448291][ T8883] usb 2-1: config 3 interface 88 has no altsetting 0 [ 754.451675][ T5710] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 754.485272][ T8883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.485296][ T8883] usb 2-1: Product: syz [ 754.485307][ T8883] usb 2-1: Manufacturer: syz [ 754.485317][ T8883] usb 2-1: SerialNumber: syz [ 754.662751][ T30] audit: type=1400 audit(1789414525.143:740): avc: denied { write } for pid=12338 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.772358][ T8883] kl5kusb105 2-1:3.88: KL5KUSB105D / PalmConnect converter detected [ 754.813741][ T8883] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB1 [ 754.828519][ T8883] usb 2-1: USB disconnect, device number 44 [ 754.831669][ T8883] kl5kusb105d ttyUSB1: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB1 [ 754.832100][ T8883] kl5kusb105 2-1:3.88: device disconnected [ 756.370145][T12359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.576682][T12360] 0x000000000000-0x000000020000 : "" [ 756.595703][ T30] audit: type=1400 audit(1789414526.913:741): avc: denied { write } for pid=12355 comm="syz.5.1650" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 756.595741][ T30] audit: type=1400 audit(1789414526.913:742): avc: denied { open } for pid=12355 comm="syz.5.1650" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 756.595762][ T30] audit: type=1400 audit(1789414527.063:743): avc: denied { ioctl } for pid=12355 comm="syz.5.1650" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 756.874987][T12360] ftl_cs: FTL header not found. [ 757.216462][ T8883] usb 1-1: USB disconnect, device number 43 [ 757.237662][ T8883] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 757.237922][ T8883] kobil_sct 1-1:1.0: device disconnected [ 757.283985][T12368] input: syz0 as /devices/virtual/input/input83 [ 757.431664][T12373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 763.777743][T12429] jffs2: notice: (12429) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 763.783532][ T30] audit: type=1400 audit(1789414534.263:744): avc: denied { write } for pid=12428 comm="syz.0.1684" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 764.996921][ T30] audit: type=1400 audit(1789414535.483:745): avc: denied { create } for pid=12446 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 764.998257][ T30] audit: type=1400 audit(1789414535.483:746): avc: denied { bind } for pid=12446 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 765.000814][ T30] audit: type=1400 audit(1789414535.483:747): avc: denied { read } for pid=12446 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 765.222208][T12449] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 765.235743][ T30] audit: type=1400 audit(1789414535.713:748): avc: denied { ioctl } for pid=12446 comm="syz.0.1687" path="socket:[51300]" dev="sockfs" ino=51300 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 765.463228][T12457] capability: warning: `syz.1.1692' uses 32-bit capabilities (legacy support in use) [ 765.482787][T12457] program syz.1.1692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 765.535528][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 765.632237][ T30] audit: type=1400 audit(1789414536.113:749): avc: denied { getopt } for pid=12464 comm="syz.1.1695" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 765.675330][T12468] jffs2: notice: (12468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 765.700849][ T30] audit: type=1400 audit(1789414536.183:750): avc: denied { write } for pid=12466 comm="syz.2.1694" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 765.816271][ T8883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 765.966531][ T8883] usb 6-1: Using ep0 maxpacket: 32 [ 765.967154][ T8883] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 765.968905][ T8883] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 765.968927][ T8883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.968946][ T8883] usb 6-1: config 0 has no interface number 0 [ 765.969940][ T8883] usb 6-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 765.972122][ T8883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.972142][ T8883] usb 6-1: Product: syz [ 765.972157][ T8883] usb 6-1: Manufacturer: syz [ 765.972171][ T8883] usb 6-1: SerialNumber: syz [ 766.007060][ T8883] usb 6-1: config 0 descriptor?? [ 766.014464][ T8883] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 766.014612][ T8883] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 767.535847][T12500] overlayfs: failed to resolve './file0': -2 [ 768.572215][ T8771] usb 6-1: USB disconnect, device number 2 [ 770.290353][T12521] netlink: 'syz.5.1716': attribute type 3 has an invalid length. [ 770.398488][ T30] audit: type=1400 audit(1789414540.884:751): avc: denied { mounton } for pid=12519 comm="syz.2.1713" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 772.362980][ T30] audit: type=1400 audit(1789414542.844:752): avc: denied { ioctl } for pid=12537 comm="syz.0.1722" path="socket:[51431]" dev="sockfs" ino=51431 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 772.365502][ T30] audit: type=1400 audit(1789414542.844:753): avc: denied { write } for pid=12537 comm="syz.0.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 772.487844][ T30] audit: type=1400 audit(1789414542.974:754): avc: denied { write } for pid=12542 comm="syz.1.1723" name="subsystems" dev="configfs" ino=3458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 772.501873][T12539] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 772.514008][ T30] audit: type=1400 audit(1789414542.994:755): avc: denied { connect } for pid=12542 comm="syz.1.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 772.596915][ T30] audit: type=1400 audit(1789414543.074:756): avc: denied { write } for pid=12542 comm="syz.1.1723" name="namespaces" dev="configfs" ino=51436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 772.631114][T12544] nvmet: adding nsid 1 to subsystem testsubsys [ 772.664142][T12548] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 772.705652][T12544] nvmet: failed to open block device ./file0: (-2) [ 772.749732][T12554] zram0: detected capacity change from 0 to 8 [ 774.838240][T12569] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.570399][T12569] bridge_slave_1 (unregistering): left allmulticast mode [ 775.570417][T12569] bridge_slave_1 (unregistering): left promiscuous mode [ 775.570503][T12569] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.754058][T12577] netlink: 'syz.1.1735': attribute type 3 has an invalid length. [ 775.948495][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1738'. [ 778.696845][ T30] audit: type=1400 audit(1789414549.184:757): avc: denied { map } for pid=12594 comm="syz.5.1743" path="socket:[52473]" dev="sockfs" ino=52473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 780.882635][T12629] netlink: 'syz.2.1752': attribute type 3 has an invalid length. [ 781.017006][ T30] audit: type=1400 audit(1789414551.504:758): avc: denied { getopt } for pid=12637 comm="syz.1.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 781.939971][T12651] jffs2: notice: (12651) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 781.943067][ T30] audit: type=1400 audit(1789414552.424:759): avc: denied { write } for pid=12647 comm="syz.2.1759" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 782.114267][ T30] audit: type=1400 audit(1789414552.574:760): avc: denied { connect } for pid=12649 comm="syz.1.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 782.114994][ T30] audit: type=1400 audit(1789414552.594:761): avc: denied { read } for pid=12649 comm="syz.1.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 783.348537][ T30] audit: type=1400 audit(1789414553.714:762): avc: denied { listen } for pid=12659 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 783.699502][ T30] audit: type=1400 audit(1789414554.184:763): avc: denied { accept } for pid=12659 comm="iou-wrk-12660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 784.493253][ T30] audit: type=1400 audit(1789414554.974:764): avc: denied { connect } for pid=12679 comm="syz.3.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 784.565799][T12684] program syz.3.1769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 785.887269][T12702] netlink: zone id is out of range [ 785.887285][T12702] netlink: zone id is out of range [ 785.887292][T12702] netlink: zone id is out of range [ 785.887299][T12702] netlink: zone id is out of range [ 785.887305][T12702] netlink: zone id is out of range [ 785.887311][T12702] netlink: zone id is out of range [ 785.887318][T12702] netlink: zone id is out of range [ 785.887324][T12702] netlink: zone id is out of range [ 785.887331][T12702] netlink: zone id is out of range [ 785.887337][T12702] netlink: zone id is out of range [ 786.294610][ T30] audit: type=1400 audit(1789414556.525:765): avc: denied { listen } for pid=12701 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 787.302634][T12724] NILFS (nullb0): couldn't find nilfs on the device [ 788.585722][ T30] audit: type=1400 audit(1789414559.065:766): avc: denied { write } for pid=12736 comm="syz.3.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 789.726148][ T30] audit: type=1800 audit(1789414560.195:767): pid=12757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1794" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 789.825008][ T30] audit: type=1800 audit(1789414560.245:768): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1792" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 790.928616][T12770] xt_hashlimit: size too large, truncated to 1048576 [ 791.267069][ T30] audit: type=1400 audit(1789414561.755:769): avc: denied { connect } for pid=12769 comm="syz.0.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 792.266595][ T30] audit: type=1400 audit(1789414562.755:770): avc: denied { write } for pid=12769 comm="syz.0.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 793.867769][ T30] audit: type=1400 audit(1789414564.355:771): avc: denied { connect } for pid=12787 comm="syz.1.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 795.564218][ T30] audit: type=1400 audit(1789414566.005:772): avc: denied { ioctl } for pid=12797 comm="syz.0.1806" path="socket:[51959]" dev="sockfs" ino=51959 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 797.143185][ T30] audit: type=1400 audit(1789414567.625:773): avc: denied { write } for pid=12819 comm="syz.3.1813" path="socket:[52828]" dev="sockfs" ino=52828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 797.794030][ T30] audit: type=1400 audit(1789414567.935:774): avc: denied { append } for pid=12827 comm="syz.0.1816" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 798.718133][T12837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.628889][T12843] netlink: 'syz.1.1820': attribute type 3 has an invalid length. [ 801.341450][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1830'. [ 803.971886][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.971919][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.803576][T12911] jffs2: notice: (12911) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 804.811699][ T30] audit: type=1400 audit(1789414575.296:775): avc: denied { write } for pid=12908 comm="syz.0.1843" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 805.483069][ T30] audit: type=1400 audit(1789414575.966:776): avc: denied { write } for pid=12914 comm="syz.5.1844" name="functions" dev="configfs" ino=11847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 805.561945][ T30] audit: type=1400 audit(1789414576.046:777): avc: denied { write } for pid=12914 comm="syz.5.1844" name="functions" dev="configfs" ino=11847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 805.611737][ T30] audit: type=1400 audit(1789414576.096:778): avc: denied { write } for pid=12914 comm="syz.5.1844" name="interface.rndis" dev="configfs" ino=52104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 806.892678][T12932] netlink: 'syz.3.1838': attribute type 3 has an invalid length. [ 808.160355][T12939] program syz.2.1839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 808.749933][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.337565][T12946] bridge_slave_1 (unregistering): left allmulticast mode [ 809.337599][T12946] bridge_slave_1 (unregistering): left promiscuous mode [ 809.337665][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.042333][T12955] binder: 12950:12955 ioctl c0306201 0 returned -14 [ 810.277100][ T30] audit: type=1400 audit(1789414580.766:779): avc: denied { write } for pid=12960 comm="syz.1.1858" name="interface.ncm" dev="configfs" ino=53026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 812.827941][ T30] audit: type=1400 audit(1789414583.316:780): avc: denied { name_connect } for pid=12970 comm="syz.3.1861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 814.949198][T12987] NILFS (nullb0): couldn't find nilfs on the device [ 816.044972][ T30] audit: type=1400 audit(1789414586.536:781): avc: denied { read } for pid=12993 comm="syz.1.1869" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 816.178046][T12994] ftl_cs: FTL header not found. [ 816.248329][T12994] block2mtd: mtd3: [/dev/ram0] erase_size = 64KiB [65536] [ 816.515147][T13008] usbip-vudc usbip-vudc.0: gadget not bound [ 817.028490][ T30] audit: type=1400 audit(1789414587.516:782): avc: denied { mounton } for pid=13011 comm="syz.1.1874" path="/syzcgroup/unified/syz1" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 817.029985][T13012] /dev/nullb0: Can't open blockdev [ 819.312364][ T30] audit: type=1400 audit(1789414589.796:783): avc: denied { listen } for pid=13031 comm="syz.2.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 819.323171][ T30] audit: type=1400 audit(1789414589.816:784): avc: denied { accept } for pid=13031 comm="syz.2.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 819.580089][ T8883] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 820.081073][ T8883] usb 1-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 820.101544][ T8883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.131617][ T30] audit: type=1400 audit(1789414590.606:785): avc: denied { read } for pid=13047 comm="syz.5.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 820.184515][ T30] audit: type=1400 audit(1789414590.666:786): avc: denied { mount } for pid=13050 comm="syz.2.1884" name="/" dev="rpc_pipefs" ino=53456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 820.238981][ T30] audit: type=1400 audit(1789414590.716:787): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 820.419600][ T30] audit: type=1400 audit(1789414590.906:788): avc: denied { mount } for pid=13058 comm="syz.2.1887" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 820.421620][ T30] audit: type=1400 audit(1789414590.906:789): avc: denied { search } for pid=13058 comm="syz.2.1887" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 820.421928][ T30] audit: type=1400 audit(1789414590.906:790): avc: denied { read write } for pid=13058 comm="syz.2.1887" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 821.428328][ T8883] comedi comedi5: could not switch to alternate setting 1 [ 821.428363][ T8883] usbduxfast 1-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 821.470310][ T8883] usb 1-1: USB disconnect, device number 44 [ 821.744952][T13081] isp1760 pcspkr: error -ENXIO: IRQ index 0 not found [ 822.422513][ T8883] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 822.572513][ T8883] usb 2-1: Using ep0 maxpacket: 32 [ 822.573023][ T8883] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 822.573823][ T8883] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 822.573844][ T8883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.573861][ T8883] usb 2-1: config 0 has no interface number 0 [ 822.575392][ T8883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.575404][ T8883] usb 2-1: Product: syz [ 822.575412][ T8883] usb 2-1: Manufacturer: syz [ 822.575419][ T8883] usb 2-1: SerialNumber: syz [ 822.577004][ T8883] usb 2-1: config 0 descriptor?? [ 822.579770][ T8883] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 822.579983][ T8883] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 824.639095][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 824.639112][ T30] audit: type=1400 audit(1789414595.117:792): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 824.668310][T13074] NFSD: Failed to start, no listeners configured. [ 824.705916][ T8883] usb 2-1: USB disconnect, device number 45 [ 824.870842][T13093] NFSD: Failed to start, no listeners configured. [ 825.175864][T13100] svc: failed to register nfsdv3 RPC service (errno 512). [ 825.176004][T13100] svc: failed to register nfsaclv3 RPC service (errno 512). [ 825.176021][T13100] failed to unregister tcp with rpcbind [ 825.177641][T13100] svc: failed to register nfsdv3 RPC service (errno 97). [ 825.177654][T13100] svc: failed to register nfsaclv3 RPC service (errno 97). [ 825.177662][T13100] failed to unregister tcp with rpcbind [ 825.224146][ T5605] svc: failed to register nfsdv3 RPC service (errno 111). [ 825.226713][ T5605] svc: failed to register nfsaclv3 RPC service (errno 111). [ 825.226730][ T5605] failed to unregister tcp with rpcbind [ 825.227178][ T5605] svc: failed to register nfsdv3 RPC service (errno 97). [ 825.227222][ T5605] svc: failed to register nfsaclv3 RPC service (errno 97). [ 825.227233][ T5605] failed to unregister tcp with rpcbind [ 825.509633][T13114] can0: slcan on pts0. [ 826.554674][ T8883] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 826.965946][T13133] cdns-usb3 pcspkr: error -ENXIO: IRQ host not found [ 827.027243][ T8883] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 827.048690][ T8883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.048719][ T8883] usb 3-1: Product: syz [ 827.048734][ T8883] usb 3-1: Manufacturer: syz [ 827.048749][ T8883] usb 3-1: SerialNumber: syz [ 827.074584][T13112] can0 (unregistered): slcan off pts0. [ 827.228826][T13139] program syz.1.1918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.345257][T13141] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 827.345308][T13141] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 827.359686][ T30] audit: type=1400 audit(1789414597.837:793): avc: denied { write } for pid=13143 comm="syz.5.1920" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 827.359759][ T30] audit: type=1400 audit(1789414597.837:794): avc: denied { open } for pid=13143 comm="syz.5.1920" path="/dev/usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 827.442359][ T5793] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 827.592691][ T5793] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 827.593576][ T5793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 827.593603][ T5793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 827.595259][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.595279][ T5793] usb 1-1: Product: syz [ 827.595294][ T5793] usb 1-1: Manufacturer: syz [ 827.595308][ T5793] usb 1-1: SerialNumber: syz [ 827.599933][ T5793] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 827.612057][ T5793] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 827.712254][ T5711] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 827.883457][ T5711] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 1.00 [ 827.884381][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.300128][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1924'. [ 828.392267][T13137] NFSD: Unable to initialize client recovery tracking! (-110) [ 828.392289][T13137] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 828.392299][T13137] NFSD: starting 90-second grace period (net f000055a) [ 829.194859][ T8883] net_ratelimit: 1 callbacks suppressed [ 829.194902][ T8883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 829.194943][ T8883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 829.198123][ T8883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 829.206472][ T8883] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 829.441888][ T5728] usb 1-1: USB disconnect, device number 45 [ 829.666508][ T5728] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 829.758852][ T5728] kobil_sct 1-1:1.0: device disconnected [ 829.921014][ T5711] usbhid 2-1:1.0: can't add hid device: -71 [ 829.921075][ T5711] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 829.923475][ T5711] usb 2-1: USB disconnect, device number 46 [ 830.037116][T13172] block2mtd: error: cannot open device /dev/ram0 [ 830.038911][T13172] ubi0: attaching mtd1 [ 830.038930][T13172] ubi0 error: ubi_attach_mtd_dev: bad VID header (64) or data offsets (128) [ 830.207971][ T5793] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 830.509867][ T5728] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 830.648121][ T5728] usb 3-1: USB disconnect, device number 43 [ 830.706033][T13191] ptp ptp0: only physical clock in use now [ 830.718196][T13191] ptp ptp0: new virtual clock ptp1 [ 830.724491][T13191] ptp ptp0: new virtual clock ptp2 [ 830.732703][T13191] ptp ptp0: new virtual clock ptp3 [ 830.842670][ T30] audit: type=1400 audit(1789414601.317:795): avc: denied { write } for pid=13188 comm="syz.5.1934" name="functions" dev="configfs" ino=11847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 831.134910][T13181] ceph: No mds server is up or the cluster is laggy [ 831.221785][ T5793] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 831.245294][T13191] ptp ptp0: new virtual clock ptp4 [ 831.269954][T13191] ptp ptp0: new virtual clock ptp5 [ 831.269977][T13191] ptp ptp0: guarantee physical clock free running [ 831.812072][ T5793] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 831.963426][ T5793] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 831.965951][ T5793] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 831.966007][ T5793] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 831.971924][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.973441][ T5793] usb 4-1: Product: syz [ 831.973486][ T5793] usb 4-1: Manufacturer: syz [ 831.973501][ T5793] usb 4-1: SerialNumber: syz [ 831.992919][ T5793] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 832.040898][ T5793] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 832.058033][T13215] block2mtd: error: cannot open device /dev/ram0 [ 832.638305][T13217] overlayfs: failed to resolve 'upper': -2 [ 832.726044][T13224] lo speed is unknown, defaulting to 1000 [ 832.728610][T13224] lo speed is unknown, defaulting to 1000 [ 832.729248][T13224] lo speed is unknown, defaulting to 1000 [ 832.776774][ T30] audit: type=1400 audit(1789414603.257:796): avc: denied { read } for pid=13223 comm="syz.0.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 833.589682][T13224] infiniband syz0: set active [ 833.589716][ T5728] lo speed is unknown, defaulting to 1000 [ 833.589982][T13224] infiniband syz0: added lo [ 833.600373][T13224] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 834.084381][T13224] infiniband syz0: Couldn't open port 1 [ 834.084858][T13224] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 834.084890][T13224] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 834.084927][T13224] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 834.138051][ T5728] usb 4-1: USB disconnect, device number 42 [ 834.160943][ T5728] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 834.169521][ T5728] kobil_sct 4-1:1.0: device disconnected [ 834.291359][T13224] RDS/IB: syz0: added [ 834.291401][T13224] smc: adding ib device syz0 with port count 1 [ 834.291419][T13224] smc: ib device syz0 port 1 has no pnetid [ 834.291486][ T5793] lo speed is unknown, defaulting to 1000 [ 834.297354][T13224] lo speed is unknown, defaulting to 1000 [ 834.327107][T13246] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 834.386834][T13248] comedi comedi1: comedi_bond: 0:2 attached, 32 channels from 1 devices [ 834.958517][T13246] [ 834.960880][T13246] ============================================ [ 834.967018][T13246] WARNING: possible recursive locking detected [ 834.973163][T13246] syzkaller #0 Tainted: G L [ 834.979130][T13246] -------------------------------------------- [ 834.985264][T13246] syz.2.1952/13246 is trying to acquire lock: [ 834.991319][T13246] ffff888032ced0f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 835.000017][T13224] lo speed is unknown, defaulting to 1000 [ 835.005905][T13246] [ 835.005905][T13246] but task is already holding lock: [ 835.013258][T13246] ffff888032cec8f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 835.022934][T13246] [ 835.022934][T13246] other info that might help us debug this: [ 835.030983][T13246] Possible unsafe locking scenario: [ 835.030983][T13246] [ 835.038413][T13246] CPU0 [ 835.041673][T13246] ---- [ 835.044932][T13246] lock(&dev->mutex#4); [ 835.049163][T13246] lock(&dev->mutex#4); [ 835.053395][T13246] [ 835.053395][T13246] *** DEADLOCK *** [ 835.053395][T13246] [ 835.061514][T13246] May be due to missing lock nesting notation [ 835.061514][T13246] [ 835.069807][T13246] locks held by syz.2.1952/13246: 1, last CPU#1: [ 835.076114][T13246] #0: ffff888032cec8f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 835.086195][T13246] [ 835.086195][T13246] stack backtrace: [ 835.092065][T13246] CPU: 1 UID: 0 PID: 13246 Comm: syz.2.1952 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.102982][T13246] Tainted: [L]=SOFTLOCKUP [ 835.107286][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 835.117321][T13246] Call Trace: [ 835.120586][T13246] [ 835.123501][T13246] dump_stack_lvl+0x100/0x190 [ 835.128173][T13246] print_deadlock_bug.cold+0xbd/0xca [ 835.133449][T13246] __lock_acquire+0x13f4/0x1f40 [ 835.138284][T13246] lock_acquire+0x1d1/0x380 [ 835.142769][T13246] ? comedi_do_insn+0x2e/0x360 [ 835.147514][T13246] ? __pfx___might_resched+0x10/0x10 [ 835.152799][T13246] ? lockdep_hardirqs_on+0x7d/0x110 [ 835.158000][T13246] __mutex_lock+0x1a4/0x1bd0 [ 835.162582][T13246] ? comedi_do_insn+0x2e/0x360 [ 835.167327][T13246] ? comedi_do_insn+0x2e/0x360 [ 835.172074][T13246] ? __pfx___mutex_lock+0x10/0x10 [ 835.177086][T13246] ? lock_acquire+0x5e/0x380 [ 835.181663][T13246] ? __pfx___might_resched+0x10/0x10 [ 835.186940][T13246] ? rcu_is_watching+0x13/0xc0 [ 835.191690][T13246] ? __up_read+0x333/0x980 [ 835.196115][T13246] ? comedi_do_insn+0x2e/0x360 [ 835.200857][T13246] comedi_do_insn+0x2e/0x360 [ 835.205442][T13246] comedi_dio_bitfield2+0x3c0/0x420 [ 835.210624][T13246] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 835.216326][T13246] ? bonding_dio_insn_bits+0x79/0x570 [ 835.221686][T13246] bonding_dio_insn_bits+0x2b9/0x570 [ 835.226958][T13246] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 835.232747][T13246] ? comedi_check_chanlist+0x27e/0x300 [ 835.238195][T13246] parse_insn+0x1326/0x19f0 [ 835.242678][T13246] ? __might_fault+0xc5/0x140 [ 835.247349][T13246] ? __pfx_parse_insn+0x10/0x10 [ 835.252182][T13246] do_insn_ioctl+0x152/0x4e0 [ 835.256756][T13246] comedi_unlocked_ioctl+0xf68/0x3310 [ 835.262112][T13246] ? irqentry_exit+0x24d/0xa10 [ 835.266862][T13246] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 835.272651][T13246] ? do_vfs_ioctl+0xca/0x13e0 [ 835.277310][T13246] ? do_vfs_ioctl+0x9ee/0x13e0 [ 835.282064][T13246] ? do_vfs_ioctl+0x226/0x13e0 [ 835.286808][T13246] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 835.291812][T13246] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 835.298297][T13246] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 835.305127][T13246] ? hook_file_ioctl_common+0x66/0x440 [ 835.310572][T13246] ? selinux_file_ioctl+0x13b/0x290 [ 835.315752][T13246] ? selinux_file_ioctl+0xb6/0x290 [ 835.320847][T13246] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 835.326637][T13246] __x64_sys_ioctl+0x18e/0x210 [ 835.331818][T13246] do_syscall_64+0x123/0x790 [ 835.336398][T13246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.342273][T13246] RIP: 0033:0x7f488079e159 [ 835.346668][T13246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.366256][T13246] RSP: 002b:00007f487e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.374656][T13246] RAX: ffffffffffffffda RBX: 00007f4880a25fa0 RCX: 00007f488079e159 [ 835.382617][T13246] RDX: 0000200000000400 RSI: 000000008028640c RDI: 0000000000000004 [ 835.390582][T13246] RBP: 00007f488083503b R08: 0000000000000000 R09: 0000000000000000 [ 835.398533][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.406488][T13246] R13: 00007f4880a26038 R14: 00007f4880a25fa0 R15: 00007ffdb1847e48 [ 835.414451][T13246] [ 835.508506][T13224] lo speed is unknown, defaulting to 1000 [ 835.574767][T13224] lo speed is unknown, defaulting to 1000 [ 835.610849][T13224] lo speed is unknown, defaulting to 1000