last executing test programs: 38.425954437s ago: executing program 1 (id=9214): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xce0, 0x0, 0xc, 0x1, 0xa21}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x1000000000000, 0x0, 0x0) 36.412003128s ago: executing program 1 (id=9218): syz_open_dev$amidi(0x0, 0x2, 0x80042) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = io_uring_setup(0x30a7, &(0x7f0000000240)={0x0, 0x9dd9, 0x1000, 0x1, 0x21b}) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, 0x0, 0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @value=0x1ff}}) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x2019f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket$kcm(0x21, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f450987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a0000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) 35.019187403s ago: executing program 1 (id=9220): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES64], 0xa0}}], 0x1, 0x4040815) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x3b, 0x0, 0x3}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x400, 0x0, 0x7, 0x3ff}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x400, 0x3, 0x0, 'syz1\x00', 'syz1\x00', {0x10001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0xd}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002000000e0000001000000000000000008001200000000000000000000000008060000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000030006000000000002000002ffffffff"], 0xb8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x6a}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) write$cgroup_pressure(r3, &(0x7f0000000500)={'full', 0x20, 0x2, 0x20, 0x9}, 0x2f) 13.048978653s ago: executing program 0 (id=9265): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"], 0x48) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x2, 0x3fff}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @generic={0x26, "7a719292e3321400e79691bcc726"}, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x6, 0x1000}) 10.346546287s ago: executing program 2 (id=9274): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000010000090800010012000000080003"], 0x30}}, 0x40) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf9b"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x1, 0x8, 0x2) syz_emit_vhci(0x0, 0xf8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="95fd4987132388769be742af0e99374200000000000000"], 0x7) 10.143496338s ago: executing program 4 (id=9275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0x41ed, 0x10100, 0x8000003, 0x22d, 0x0, r5}, 0x0, &(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "6594844326f4a23ff094cd183f5a6a24"}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfc00) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000080)=@secondary) 9.848378915s ago: executing program 0 (id=9276): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d0, &(0x7f0000001280)={0x3, r2, 0x8000007, 0x6, 0x8, 0x40007311, 0x9}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0xf, 0x8, 0x0, 0x11, 0x0, 0x2, 0x25dfdbfe, [@sadb_key={0x9, 0x9, 0x1e0, 0x0, "5ac042572a8249d6545108b3992ac52798168e8bf0099b22bc110a13086ca4d8ca68a345ce075776a0348c6ac794cd64af7716061b1c5f698064c684"}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0xc, 0x5f, 0x4, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_sa={0x2, 0x1, 0x4d5, 0x7, 0xeb, 0xd0, 0x4, 0xc0000000}]}, 0x88}}, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4201, @private=0xa010101}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r10, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, &(0x7f0000000000), 0x4) 9.654914857s ago: executing program 3 (id=9277): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xf803, 0x80, 0x0, 0x36e}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x2}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = timerfd_create(0x2, 0x0) clock_gettime(0x5, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r4, 0x7, &(0x7f0000000340)={{r5, r6+10000000}}, &(0x7f0000000380)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 8.373587669s ago: executing program 0 (id=9278): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) epoll_create1(0x80000) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = epoll_create(0x9ec7) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f0000000280)={0xd0000001}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='bcache_btree_gc_coalesce\x00', r1, 0x0, 0x3}, 0x18) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000000002010400000000000000000a00"], 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x0) io_submit(0x0, 0x2190, &(0x7f0000000000)) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000240), 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) r8 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000006840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006880)=0x14) 5.801117427s ago: executing program 2 (id=9282): mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r2, 0x0, 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() prlimit64(r3, 0x5, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000008000c0000000000"], 0x1c}}, 0x20000000) io_setup(0x30, 0x0) 5.800319885s ago: executing program 3 (id=9283): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x80042) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = io_uring_setup(0x30a7, &(0x7f0000000240)={0x0, 0x9dd9, 0x1000, 0x1, 0x21b}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, 0x0, 0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x2019f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) socket$kcm(0x21, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 5.676971583s ago: executing program 0 (id=9284): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x1, 0x48000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xc8, 0x0, {0xff0f000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0xeb, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) chmod(0x0, 0x10) 4.775791133s ago: executing program 3 (id=9285): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a00010000"], 0x58}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, 0x0) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)) socket$kcm(0x2, 0x5, 0x84) membarrier(0x10, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) 4.494235639s ago: executing program 4 (id=9286): mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r2, 0x0, 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() prlimit64(r3, 0x5, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000008000c0000000000"], 0x1c}}, 0x20000000) io_setup(0x30, 0x0) 4.404479817s ago: executing program 0 (id=9287): syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = io_uring_setup(0x30a7, &(0x7f0000000240)={0x0, 0x9dd9, 0x1000, 0x1, 0x21b}) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, 0x0, 0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @value=0x1ff}}) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x2019f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket$kcm(0x21, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 4.404077463s ago: executing program 1 (id=9229): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r4, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000280)=0x2) r5 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(r5, 0x0, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xfe) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000540)={0x1, 0x400006, 0x0, 0x9, '\x00', '\x00', '\x00', 0x0, 0x81, 0x3, 0xba, "b6855a32474f04ed0000ddcffbffffff"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 3.36106936s ago: executing program 2 (id=9288): r0 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.843634836s ago: executing program 4 (id=9289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0xf0ff, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f41600000500020002000000090003000daca8"], 0x58}}, 0x0) 2.099288288s ago: executing program 4 (id=9293): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$l2tp6(0xa, 0x2, 0x73) close(r6) openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 2.054429915s ago: executing program 3 (id=9294): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (fail_nth: 1) 1.984393998s ago: executing program 2 (id=9295): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x9, 0x1, 0x5, 0x3}, {0x8, 0x8, 0x80, 0x2}, {0x0, 0xe5, 0xd}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x9, 0x1, 0x5, 0x3}, {0x8, 0x8, 0x80, 0x2}, {0x0, 0xe5, 0xd}]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={r1, 0x4}, &(0x7f0000000280)=0x8) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000300)) (async) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000300)) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) connect$bt_sco(r4, &(0x7f0000000400), 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000440)=r2, 0x4) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000440)=r2, 0x4) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000480)) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000480)) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x5, 0xfffa, 0x6, 0xa2}}}, 0xa) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xfff}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x24008001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) rt_sigaction(0x10, &(0x7f0000000840)={&(0x7f00000007c0)="f344e25f363ef2440f2d617bc4e2e18e12c4636546120ef2afc4a26d2f400ec4c1e85d4b9ef2f3f04280870010c0fee066410f38db9206000000c4e1b5fd3f", 0x18000000, &(0x7f0000000800)="c441f9c5c285aec462f5ba7be6451bd5460fd9860080000026abc401556492fe810000263e67c16d3299360f69bb0f00000065f3410faecc", {[0x4]}}, &(0x7f0000000900)={&(0x7f0000000880)="643e3e66400f38f513660f13b10010c0fec44145ddd444dfdc8f0978e14c076a660f5d6e00c4829d0b6ca782660faeb5e7330000c4831578c100c461aa584d0e", 0x0, &(0x7f00000008c0)="c4017be6a42e5eee0000c4626198af0800000026d9f6c441a211e90f42f13666f20f1afc653e65f3d2875d00000042dacac4037549b50f00008117450f38cd00"}, 0x8, &(0x7f0000000940)) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000009c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r8, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xe82eb235ca20884d}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000b80)={'broute\x00', 0x0, 0x3, 0x3b, [0x1, 0x1, 0x3e00000000000000, 0x9, 0x9, 0x8], 0x1, &(0x7f0000000b00)=[{}], &(0x7f0000000b40)=""/59}, &(0x7f0000000c00)=0x78) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000b80)={'broute\x00', 0x0, 0x3, 0x3b, [0x1, 0x1, 0x3e00000000000000, 0x9, 0x9, 0x8], 0x1, &(0x7f0000000b00)=[{}], &(0x7f0000000b40)=""/59}, &(0x7f0000000c00)=0x78) r9 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000c40)={r3, 0x1, 0xfffff000, 0xfffffffffffff000}) sync_file_range(r9, 0xbb, 0x8, 0x1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r10 = semget$private(0x0, 0x0, 0x204) semctl$SEM_INFO(r10, 0x0, 0x13, &(0x7f0000000d00)=""/24) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000e40)={@private1, @mcast1, @mcast1, 0x6, 0x8000, 0x1, 0x500, 0x8, 0x1100080}) 1.983945285s ago: executing program 1 (id=9296): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000016c0)=0x1000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='cq_reschedule\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000f80)=[@in6={0xa, 0x4e20, 0x5, @private1, 0x400}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e20, 0x9a, @dev={0xfe, 0x80, '\x00', 0x30}, 0x2}], 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00ff0f00000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r7, 0x0, 0x8}, 0x18) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000001f) 1.885981315s ago: executing program 2 (id=9297): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 0s ago: executing program 4 (id=9298): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x8800) r1 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r1, &(0x7f0000000000)={{0x0, 0x9, 0x80, 0x8}, 0x0, 0x0, 0x2, 0xffffff0d}, 0x80, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ed blocking state [ 2305.775286][T29273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2305.853674][T29273] bridge0: port 2(bridge_slave_1) entered blocking state [ 2305.860870][T29273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2306.191491][T20258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2306.208995][ T1791] Bluetooth: hci0: command tx timeout [ 2306.215629][T20258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2306.248676][T20258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2306.263135][T20258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2306.760625][T20258] veth1_macvtap: left promiscuous mode [ 2306.778996][T20258] veth0_macvtap: left promiscuous mode [ 2306.807706][T20258] veth1_vlan: left promiscuous mode [ 2306.819009][T20258] veth0_vlan: left promiscuous mode [ 2308.290769][ T1791] Bluetooth: hci0: command tx timeout [ 2308.409408][T26959] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2308.549228][ T4927] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2308.966052][T26959] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2308.973952][T26959] usb 4-1: can't read configurations, error -61 [ 2309.198976][T26959] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2309.349636][ T4293] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2309.649139][ T4293] usb 5-1: Using ep0 maxpacket: 32 [ 2309.677875][ T4293] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2309.700262][ T4293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2309.705182][T26959] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2309.714664][T26959] usb 4-1: can't read configurations, error -61 [ 2309.729003][T26959] usb usb4-port1: attempt power cycle [ 2309.823912][ T4293] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2309.834060][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2309.844533][ T4293] usb 5-1: config 0 descriptor?? [ 2310.001756][T20258] team0 (unregistering): Port device team_slave_1 removed [ 2310.051470][T20258] team0 (unregistering): Port device team_slave_0 removed [ 2310.069241][T26959] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2310.110878][T26959] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2310.118539][T26959] usb 4-1: can't read configurations, error -61 [ 2310.250171][T26959] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2310.308669][T26959] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2310.321481][T26959] usb 4-1: can't read configurations, error -61 [ 2310.331895][T26959] usb usb4-port1: unable to enumerate USB device [ 2310.604183][ T4934] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8846'. [ 2310.680376][ T4293] usbhid 5-1:0.0: can't add hid device: -71 [ 2310.686418][ T4293] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2310.742789][ T4293] usb 5-1: USB disconnect, device number 118 [ 2311.041390][ T4943] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2311.663165][ T5959] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2312.435160][ T4816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2312.583970][ T5959] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2312.611757][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2312.644111][ T4816] veth0_vlan: entered promiscuous mode [ 2312.653308][ T5959] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2312.686462][ T5959] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2312.697018][ T4816] veth1_vlan: entered promiscuous mode [ 2312.864149][ T4965] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2313.025298][ T5959] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2313.093634][ T5959] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2313.169545][ T4816] veth0_macvtap: entered promiscuous mode [ 2313.189422][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2313.230714][ T4816] veth1_macvtap: entered promiscuous mode [ 2313.238662][ T5959] usb 2-1: Product: syz [ 2313.291096][ T5959] usb 2-1: Manufacturer: syz [ 2313.291145][ T4967] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8853'. [ 2313.334505][ T5959] usb 2-1: SerialNumber: syz [ 2313.348525][ T4966] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8853'. [ 2313.577567][ T4816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2313.627426][ T4816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2313.664864][ T4816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.849192][ T4816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.878408][ T4816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.188988][ T4816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.867397][T20258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2314.902991][T20258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2315.025712][ T4978] FAULT_INJECTION: forcing a failure. [ 2315.025712][ T4978] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.038536][ T4978] CPU: 0 UID: 0 PID: 4978 Comm: syz.3.8856 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2315.038560][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2315.038571][ T4978] Call Trace: [ 2315.038578][ T4978] [ 2315.038584][ T4978] dump_stack_lvl+0x16c/0x1f0 [ 2315.038611][ T4978] should_fail_ex+0x512/0x640 [ 2315.038637][ T4978] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2315.038670][ T4978] should_failslab+0xc2/0x120 [ 2315.038691][ T4978] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2315.038718][ T4978] ? __alloc_skb+0x2b2/0x380 [ 2315.038744][ T4978] __alloc_skb+0x2b2/0x380 [ 2315.038764][ T4978] ? __pfx___alloc_skb+0x10/0x10 [ 2315.038793][ T4978] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2315.038827][ T4978] netlink_alloc_large_skb+0x69/0x130 [ 2315.038851][ T4978] netlink_sendmsg+0x6a1/0xdd0 [ 2315.038880][ T4978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2315.038915][ T4978] ____sys_sendmsg+0xa98/0xc70 [ 2315.038942][ T4978] ? copy_msghdr_from_user+0x10a/0x160 [ 2315.038964][ T4978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2315.038992][ T4978] ? __lock_acquire+0xb8a/0x1c90 [ 2315.039025][ T4978] ___sys_sendmsg+0x134/0x1d0 [ 2315.039049][ T4978] ? __pfx____sys_sendmsg+0x10/0x10 [ 2315.039093][ T4978] ? __mutex_unlock_slowpath+0x80/0x800 [ 2315.039123][ T4978] __sys_sendmsg+0x16d/0x220 [ 2315.039143][ T4978] ? __pfx___sys_sendmsg+0x10/0x10 [ 2315.039181][ T4978] do_syscall_64+0xcd/0x4c0 [ 2315.039205][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2315.039223][ T4978] RIP: 0033:0x7f0b1f78e9a9 [ 2315.039238][ T4978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2315.039255][ T4978] RSP: 002b:00007f0b2053d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2315.039273][ T4978] RAX: ffffffffffffffda RBX: 00007f0b1f9b6160 RCX: 00007f0b1f78e9a9 [ 2315.039284][ T4978] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000009 [ 2315.039296][ T4978] RBP: 00007f0b2053d090 R08: 0000000000000000 R09: 0000000000000000 [ 2315.039307][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2315.039319][ T4978] R13: 0000000000000000 R14: 00007f0b1f9b6160 R15: 00007fff83ff8ca8 [ 2315.039343][ T4978] [ 2315.278245][ T30] audit: type=1400 audit(1753882925.930:4869): avc: denied { setopt } for pid=4975 comm="syz.3.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2315.319872][T20258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2315.327763][T20258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2315.665308][ T30] audit: type=1400 audit(1753882926.570:4870): avc: denied { ioctl } for pid=4980 comm="syz.2.8811" path="socket:[164036]" dev="sockfs" ino=164036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2315.827242][ T5959] cdc_mbim 2-1:1.0: bind() failure [ 2315.855091][ T5959] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2315.893924][ T5959] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2315.968570][ T5959] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2316.275182][ T5959] usb 2-1: USB disconnect, device number 120 [ 2316.326076][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8860'. [ 2316.468980][ T5898] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2317.626636][ T5898] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2317.646449][ T5898] usb 5-1: can't read configurations, error -61 [ 2317.786733][ T5013] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8864'. [ 2317.797972][ T5011] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8864'. [ 2317.961665][ T5898] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2318.181519][ T5016] FAULT_INJECTION: forcing a failure. [ 2318.181519][ T5016] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.238280][ T5898] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2318.262675][ T5898] usb 5-1: can't read configurations, error -61 [ 2318.276499][ T5898] usb usb5-port1: attempt power cycle [ 2318.291352][ T5016] CPU: 0 UID: 0 PID: 5016 Comm: syz.1.8866 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2318.291371][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2318.291378][ T5016] Call Trace: [ 2318.291383][ T5016] [ 2318.291388][ T5016] dump_stack_lvl+0x16c/0x1f0 [ 2318.291406][ T5016] should_fail_ex+0x512/0x640 [ 2318.291421][ T5016] ? fs_reclaim_acquire+0xae/0x150 [ 2318.291437][ T5016] ? tomoyo_encode2+0x100/0x3e0 [ 2318.291449][ T5016] should_failslab+0xc2/0x120 [ 2318.291462][ T5016] __kmalloc_noprof+0xd2/0x510 [ 2318.291476][ T5016] tomoyo_encode2+0x100/0x3e0 [ 2318.291489][ T5016] tomoyo_encode+0x29/0x50 [ 2318.291501][ T5016] tomoyo_mount_acl+0x314/0x850 [ 2318.291511][ T5016] ? bpf_ksym_find+0x127/0x1c0 [ 2318.291529][ T5016] ? is_bpf_text_address+0x94/0x1a0 [ 2318.291544][ T5016] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 2318.291554][ T5016] ? __kernel_text_address+0xd/0x40 [ 2318.291566][ T5016] ? unwind_get_return_address+0x59/0xa0 [ 2318.291580][ T5016] ? arch_stack_walk+0xa6/0x100 [ 2318.291606][ T5016] ? tomoyo_domain+0xbb/0x150 [ 2318.291619][ T5016] ? tomoyo_profile+0x47/0x60 [ 2318.291634][ T5016] tomoyo_mount_permission+0x16d/0x420 [ 2318.291645][ T5016] ? tomoyo_mount_permission+0x14f/0x420 [ 2318.291657][ T5016] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 2318.291677][ T5016] security_sb_mount+0x9b/0x260 [ 2318.291695][ T5016] path_mount+0x15f/0x1fd0 [ 2318.291719][ T5016] ? __pfx_path_mount+0x10/0x10 [ 2318.291732][ T5016] ? kmem_cache_free+0x2d1/0x4d0 [ 2318.291749][ T5016] ? putname+0x154/0x1a0 [ 2318.291764][ T5016] ? putname+0x154/0x1a0 [ 2318.291778][ T5016] ? __x64_sys_mount+0x28d/0x310 [ 2318.291789][ T5016] __x64_sys_mount+0x28d/0x310 [ 2318.291802][ T5016] ? __pfx___x64_sys_mount+0x10/0x10 [ 2318.291819][ T5016] do_syscall_64+0xcd/0x4c0 [ 2318.291834][ T5016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.291845][ T5016] RIP: 0033:0x7fe901f8e9a9 [ 2318.291855][ T5016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2318.291866][ T5016] RSP: 002b:00007fe902d96038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2318.291877][ T5016] RAX: ffffffffffffffda RBX: 00007fe9021b5fa0 RCX: 00007fe901f8e9a9 [ 2318.291884][ T5016] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 2318.291891][ T5016] RBP: 00007fe902d96090 R08: 0000200000002140 R09: 0000000000000000 [ 2318.291897][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2318.291903][ T5016] R13: 0000000000000000 R14: 00007fe9021b5fa0 R15: 00007ffcc1eb9bc8 [ 2318.291917][ T5016] [ 2319.512508][ T5032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2320.198935][ T1940] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2321.235578][ T5052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2321.243321][ T5052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2321.392213][ T1940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2321.408596][ T1940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2321.465734][ T1940] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2321.466056][ T5052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2321.475858][ T1940] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2321.475884][ T1940] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2321.724667][ T1940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2321.755367][ T1940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.787680][ T1940] usb 3-1: Product: syz [ 2321.823800][ T1940] usb 3-1: Manufacturer: syz [ 2321.848227][ T1940] usb 3-1: SerialNumber: syz [ 2321.883130][ T5052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2322.199201][ T5058] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8876'. [ 2322.217954][ T5057] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8876'. [ 2322.372445][ T1940] cdc_mbim 3-1:1.0: bind() failure [ 2322.382414][ T1940] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2322.390111][ T1940] cdc_ncm 3-1:1.1: bind() failure [ 2322.501672][ T1940] usb 3-1: USB disconnect, device number 96 [ 2322.531348][ T5063] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2323.594134][ T30] audit: type=1400 audit(1753882934.410:4871): avc: denied { connect } for pid=5062 comm="syz.0.8877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2323.640780][ T5066] bpq0: entered allmulticast mode [ 2324.139271][ T30] audit: type=1400 audit(1753882935.020:4872): avc: denied { setopt } for pid=5070 comm="syz.3.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2324.600678][ T5073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8879'. [ 2325.204977][ T5072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8879'. [ 2325.225151][ T5080] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8882'. [ 2325.364100][ T5086] FAULT_INJECTION: forcing a failure. [ 2325.364100][ T5086] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.376880][ T5086] CPU: 1 UID: 0 PID: 5086 Comm: syz.0.8883 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2325.376905][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2325.376917][ T5086] Call Trace: [ 2325.376923][ T5086] [ 2325.376935][ T5086] dump_stack_lvl+0x16c/0x1f0 [ 2325.376962][ T5086] should_fail_ex+0x512/0x640 [ 2325.376986][ T5086] ? fs_reclaim_acquire+0xae/0x150 [ 2325.377013][ T5086] ? tomoyo_encode2+0x100/0x3e0 [ 2325.377033][ T5086] should_failslab+0xc2/0x120 [ 2325.377053][ T5086] __kmalloc_noprof+0xd2/0x510 [ 2325.377078][ T5086] tomoyo_encode2+0x100/0x3e0 [ 2325.377102][ T5086] tomoyo_encode+0x29/0x50 [ 2325.377121][ T5086] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2325.377149][ T5086] tomoyo_path_number_perm+0x245/0x580 [ 2325.377177][ T5086] ? tomoyo_path_number_perm+0x237/0x580 [ 2325.377207][ T5086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2325.377236][ T5086] ? find_held_lock+0x2b/0x80 [ 2325.377283][ T5086] ? find_held_lock+0x2b/0x80 [ 2325.377304][ T5086] ? hook_file_ioctl_common+0x145/0x410 [ 2325.377333][ T5086] ? __fget_files+0x20e/0x3c0 [ 2325.377356][ T5086] security_file_ioctl+0x9b/0x240 [ 2325.377377][ T5086] __x64_sys_ioctl+0xb7/0x210 [ 2325.377405][ T5086] do_syscall_64+0xcd/0x4c0 [ 2325.377429][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2325.377447][ T5086] RIP: 0033:0x7f8b9a18e9a9 [ 2325.377462][ T5086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2325.377479][ T5086] RSP: 002b:00007f8b9b00b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2325.377497][ T5086] RAX: ffffffffffffffda RBX: 00007f8b9a3b6080 RCX: 00007f8b9a18e9a9 [ 2325.377509][ T5086] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000008 [ 2325.377521][ T5086] RBP: 00007f8b9b00b090 R08: 0000000000000000 R09: 0000000000000000 [ 2325.377532][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2325.377542][ T5086] R13: 0000000000000000 R14: 00007f8b9a3b6080 R15: 00007ffca350bfa8 [ 2325.377568][ T5086] [ 2325.377681][ T5086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2325.590674][ T5086] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 2326.506553][ T5090] PM: Enabling pm_trace changes system date and time during resume. [ 2326.506553][ T5090] PM: Correct system time has to be restored manually after resume. [ 2326.653491][ T30] audit: type=1400 audit(1753882937.560:4873): avc: denied { write } for pid=5089 comm="syz.0.8885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2327.678896][ T1940] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2327.937624][ T1940] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2327.991370][ T1940] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2328.012998][ T1940] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2328.033871][ T1940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.056002][ T5116] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2328.080718][ T1940] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2328.092152][ T5959] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2328.201886][ T30] audit: type=1400 audit(1753882939.110:4874): avc: denied { read } for pid=5123 comm="syz.2.8895" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2328.412327][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 2328.518034][ T30] audit: type=1400 audit(1753882939.130:4875): avc: denied { open } for pid=5123 comm="syz.2.8895" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2328.551079][ T4293] usb 5-1: USB disconnect, device number 122 [ 2328.558890][ T5959] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2328.684355][ T5959] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2328.684400][ T5129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8896'. [ 2328.698587][ T5959] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2328.729824][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.752136][ T5959] usb 2-1: config 0 descriptor?? [ 2330.088960][ T5959] usbhid 2-1:0.0: can't add hid device: -71 [ 2330.095021][ T5959] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2330.146801][ T5959] usb 2-1: USB disconnect, device number 121 [ 2330.279467][ T30] audit: type=1400 audit(1753882941.180:4876): avc: denied { kexec_image_load } for pid=5148 comm="syz.2.8902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2331.228928][ T1940] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2331.886078][ T1940] usb 5-1: Using ep0 maxpacket: 8 [ 2331.893906][ T1940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2331.907264][ T1940] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2331.946033][ T1940] usb 5-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40 [ 2331.957711][ T1940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.971711][ T1940] usb 5-1: Product: syz [ 2331.975963][ T1940] usb 5-1: Manufacturer: syz [ 2331.983225][ T1940] usb 5-1: SerialNumber: syz [ 2332.247784][ T5175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8906'. [ 2332.335729][ T1940] usbhid 5-1:1.0: can't add hid device: -71 [ 2332.348951][ T1940] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2332.358904][ T1940] usb 5-1: USB disconnect, device number 123 [ 2333.116985][ T5189] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8910'. [ 2333.149958][ T5185] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8910'. [ 2334.318382][ T5197] FAULT_INJECTION: forcing a failure. [ 2334.318382][ T5197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2334.359082][ T5197] CPU: 0 UID: 0 PID: 5197 Comm: syz.0.8914 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2334.359112][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2334.359123][ T5197] Call Trace: [ 2334.359130][ T5197] [ 2334.359139][ T5197] dump_stack_lvl+0x16c/0x1f0 [ 2334.359167][ T5197] should_fail_ex+0x512/0x640 [ 2334.359197][ T5197] _copy_to_user+0x32/0xd0 [ 2334.359227][ T5197] simple_read_from_buffer+0xcb/0x170 [ 2334.359258][ T5197] proc_fail_nth_read+0x197/0x240 [ 2334.359279][ T5197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2334.359300][ T5197] ? rw_verify_area+0xcf/0x680 [ 2334.359326][ T5197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2334.359345][ T5197] vfs_read+0x1e4/0xc60 [ 2334.359376][ T5197] ? __pfx___mutex_lock+0x10/0x10 [ 2334.359399][ T5197] ? __pfx_vfs_read+0x10/0x10 [ 2334.359433][ T5197] ? __fget_files+0x20e/0x3c0 [ 2334.359460][ T5197] ksys_read+0x12a/0x250 [ 2334.359476][ T5197] ? __pfx_ksys_read+0x10/0x10 [ 2334.359510][ T5197] ? fput+0x70/0xf0 [ 2334.359535][ T5197] do_syscall_64+0xcd/0x4c0 [ 2334.359559][ T5197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.359578][ T5197] RIP: 0033:0x7f8b9a18d3bc [ 2334.359593][ T5197] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2334.359611][ T5197] RSP: 002b:00007f8b9b02c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2334.359629][ T5197] RAX: ffffffffffffffda RBX: 00007f8b9a3b5fa0 RCX: 00007f8b9a18d3bc [ 2334.359641][ T5197] RDX: 000000000000000f RSI: 00007f8b9b02c0a0 RDI: 0000000000000004 [ 2334.359652][ T5197] RBP: 00007f8b9b02c090 R08: 0000000000000000 R09: 0000000000000000 [ 2334.359662][ T5197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2334.359673][ T5197] R13: 0000000000000000 R14: 00007f8b9a3b5fa0 R15: 00007ffca350bfa8 [ 2334.359698][ T5197] [ 2334.756785][ T1836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2334.796251][ T1836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2334.806975][ T1836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2334.817673][ T1836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2334.825547][ T1836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2335.067262][ T5213] FAULT_INJECTION: forcing a failure. [ 2335.067262][ T5213] name failslab, interval 1, probability 0, space 0, times 0 [ 2335.092896][ T5213] CPU: 0 UID: 0 PID: 5213 Comm: syz.2.8916 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2335.092924][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2335.092935][ T5213] Call Trace: [ 2335.092942][ T5213] [ 2335.092950][ T5213] dump_stack_lvl+0x16c/0x1f0 [ 2335.092976][ T5213] should_fail_ex+0x512/0x640 [ 2335.092997][ T5213] ? fs_reclaim_acquire+0xae/0x150 [ 2335.093018][ T5213] ? tomoyo_encode2+0x100/0x3e0 [ 2335.093033][ T5213] should_failslab+0xc2/0x120 [ 2335.093049][ T5213] __kmalloc_noprof+0xd2/0x510 [ 2335.093063][ T5213] ? d_absolute_path+0x136/0x1a0 [ 2335.093086][ T5213] tomoyo_encode2+0x100/0x3e0 [ 2335.093104][ T5213] tomoyo_encode+0x29/0x50 [ 2335.093119][ T5213] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2335.093141][ T5213] tomoyo_path_number_perm+0x245/0x580 [ 2335.093163][ T5213] ? tomoyo_path_number_perm+0x237/0x580 [ 2335.093186][ T5213] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2335.093210][ T5213] ? find_held_lock+0x2b/0x80 [ 2335.093246][ T5213] ? find_held_lock+0x2b/0x80 [ 2335.093263][ T5213] ? hook_file_ioctl_common+0x145/0x410 [ 2335.093287][ T5213] ? __fget_files+0x20e/0x3c0 [ 2335.093305][ T5213] security_file_ioctl+0x9b/0x240 [ 2335.093321][ T5213] __x64_sys_ioctl+0xb7/0x210 [ 2335.093344][ T5213] do_syscall_64+0xcd/0x4c0 [ 2335.093362][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2335.093377][ T5213] RIP: 0033:0x7f7b9d58e9a9 [ 2335.093390][ T5213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2335.093403][ T5213] RSP: 002b:00007f7b9e3ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2335.093419][ T5213] RAX: ffffffffffffffda RBX: 00007f7b9d7b6160 RCX: 00007f7b9d58e9a9 [ 2335.093428][ T5213] RDX: 0000000000000000 RSI: 0000000000004112 RDI: 000000000000000a [ 2335.093437][ T5213] RBP: 00007f7b9e3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 2335.093445][ T5213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2335.093454][ T5213] R13: 0000000000000000 R14: 00007f7b9d7b6160 R15: 00007ffd14515a18 [ 2335.093473][ T5213] [ 2335.093500][ T5213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2335.466776][ T714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2335.559762][ T714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.801468][ T714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2335.969001][ T714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.085340][ T5204] lo speed is unknown, defaulting to 1000 [ 2336.343385][ T714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2336.367479][ T714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.482317][ T5898] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 2336.492130][ T5898] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2336.640447][ T714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2336.690758][ T714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.930906][ T1791] Bluetooth: hci2: command tx timeout [ 2337.423843][ T5232] lo speed is unknown, defaulting to 1000 [ 2337.647767][ T5204] chnl_net:caif_netlink_parms(): no params data found [ 2337.927109][ T30] audit: type=1400 audit(1753882948.820:4877): avc: denied { write } for pid=5226 comm="syz.2.8921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2338.048521][ T30] audit: type=1400 audit(1753882948.860:4878): avc: denied { accept } for pid=5238 comm="syz.1.8923" path="socket:[164597]" dev="sockfs" ino=164597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2338.072907][ C1] vkms_vblank_simulate: vblank timer overrun [ 2338.246456][ T5251] QAT: Device 128 not found [ 2338.253900][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 2338.266194][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.287203][ T5204] bridge_slave_0: entered allmulticast mode [ 2338.308238][ T30] audit: type=1400 audit(1753882949.210:4879): avc: denied { setattr } for pid=5250 comm="syz.2.8924" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2338.343489][ T5204] bridge_slave_0: entered promiscuous mode [ 2338.368523][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state [ 2338.387465][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2338.405502][ T5204] bridge_slave_1: entered allmulticast mode [ 2338.424554][ T5204] bridge_slave_1: entered promiscuous mode [ 2339.106424][ T1791] Bluetooth: hci2: command tx timeout [ 2339.297102][ T714] bridge_slave_1: left allmulticast mode [ 2339.306033][ T5251] lo speed is unknown, defaulting to 1000 [ 2339.379119][ T714] bridge_slave_1: left promiscuous mode [ 2339.401093][ T714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2339.522176][ T714] bridge_slave_0: left allmulticast mode [ 2339.547847][ T714] bridge_slave_0: left promiscuous mode [ 2339.570101][ T714] bridge0: port 1(bridge_slave_0) entered disabled state [ 2340.074676][ T5898] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2340.242357][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 2340.330434][ T5898] usb 2-1: config 4 has an invalid interface number: 8 but max is 0 [ 2340.338716][ T5898] usb 2-1: config 4 has no interface number 0 [ 2340.366566][ T5898] usb 2-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2340.649023][ T5898] usb 2-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 2340.689414][ T5898] usb 2-1: config 4 interface 8 has no altsetting 0 [ 2340.713992][ T5898] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 2340.733329][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.742186][ T5898] usb 2-1: Product: syz [ 2340.749129][ T5898] usb 2-1: Manufacturer: syz [ 2340.754308][ T5898] usb 2-1: SerialNumber: syz [ 2340.984439][ T714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2341.012243][ T714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2341.110698][ T714] bond0 (unregistering): Released all slaves [ 2341.190852][ T1791] Bluetooth: hci2: command tx timeout [ 2341.304485][ T5204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2341.371024][ T5204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2341.416681][ T5268] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8926'. [ 2341.600464][ T5204] team0: Port device team_slave_0 added [ 2341.678321][ T5204] team0: Port device team_slave_1 added [ 2341.713777][ T5898] opticon 2-1:4.8: opticon converter detected [ 2341.790793][ T5898] usb 2-1: opticon converter now attached to ttyUSB0 [ 2341.851090][ T5898] usb 2-1: USB disconnect, device number 122 [ 2342.028601][ T5290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2342.083842][ T5898] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2342.092396][ T5898] opticon 2-1:4.8: device disconnected [ 2342.102115][ T5204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2342.113800][ T5204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2342.139695][ C1] vkms_vblank_simulate: vblank timer overrun [ 2342.153234][ T5204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2342.166257][ T5204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2342.173590][ T5204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2342.199537][ C1] vkms_vblank_simulate: vblank timer overrun [ 2342.210348][ T5204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2342.394392][ T5204] hsr_slave_0: entered promiscuous mode [ 2342.410774][ T5204] hsr_slave_1: entered promiscuous mode [ 2342.428014][ T5204] debugfs: 'hsr0' already exists in 'hsr' [ 2342.454694][ T5204] Cannot create hsr debugfs directory [ 2343.170019][ T4293] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2343.250108][ T1791] Bluetooth: hci2: command tx timeout [ 2343.352729][ T4293] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2343.366945][ T4293] usb 5-1: can't read configurations, error -61 [ 2343.585809][ T4293] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2343.742053][ T5959] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2343.860129][ T5311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8939'. [ 2344.178850][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 2344.204133][ T4293] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2344.214682][ T5959] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2344.228214][ T4293] usb 5-1: can't read configurations, error -61 [ 2344.259920][ T5959] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2344.299782][ T4293] usb usb5-port1: attempt power cycle [ 2344.310615][ T5959] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2344.381474][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.387811][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.431866][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.464971][ T5959] usb 2-1: config 0 descriptor?? [ 2344.724206][ T5204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2344.734563][ T5959] usbhid 2-1:0.0: can't add hid device: -71 [ 2344.736726][ T5204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2344.781840][ T4293] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2344.807256][ T5204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2344.893735][ T5959] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2344.929503][ T5959] usb 2-1: USB disconnect, device number 123 [ 2344.947148][ T5204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2344.960185][ T4293] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2344.967866][ T4293] usb 5-1: can't read configurations, error -61 [ 2345.119311][ T4293] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2345.182507][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2345.202438][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8941'. [ 2345.256839][ T4293] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2345.258700][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2345.287234][ T714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2345.309907][ T714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2345.335351][ T714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2345.343577][ T714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2345.360874][ T714] veth1_macvtap: left promiscuous mode [ 2345.366528][ T714] veth0_macvtap: left promiscuous mode [ 2345.376448][ T714] veth1_vlan: left promiscuous mode [ 2345.382109][ T714] veth0_vlan: left promiscuous mode [ 2345.399330][ T4293] usb 5-1: can't read configurations, error -61 [ 2345.424764][ T4293] usb usb5-port1: unable to enumerate USB device [ 2347.105738][ T5344] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2347.361118][ T30] audit: type=1400 audit(1753882958.270:4880): avc: denied { append } for pid=5345 comm="syz.1.8947" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2347.443930][ T30] audit: type=1400 audit(1753882958.270:4881): avc: denied { ioctl } for pid=5345 comm="syz.1.8947" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2347.565460][ T714] team0 (unregistering): Port device team_slave_1 removed [ 2347.701099][ T714] team0 (unregistering): Port device team_slave_0 removed [ 2349.146101][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2349.153757][T26959] lo speed is unknown, defaulting to 1000 [ 2349.168922][T26959] syz1: Port: 1 Link DOWN [ 2349.395808][ T5204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2349.420717][ T4293] wg1 speed is unknown, defaulting to 1000 [ 2349.434436][ T5324] infiniband syz0: set active [ 2349.496459][ T5324] infiniband syz0: added wg1 [ 2349.502555][ T5204] 8021q: adding VLAN 0 to HW filter on device team0 [ 2349.516535][ T5324] syz0: rxe_create_cq: returned err = -12 [ 2349.535033][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.542212][T17427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2349.553220][ T5324] infiniband syz0: Couldn't create ib_mad CQ [ 2349.606104][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 2349.613243][T17427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2349.623097][ T5324] infiniband syz0: Couldn't open port 1 [ 2349.747995][ T5204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2349.942479][ T5204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2349.961868][ T5324] RDS/IB: syz0: added [ 2349.975943][ T5324] smc: adding ib device syz0 with port count 1 [ 2350.006942][ T5324] smc: ib device syz0 port 1 has pnetid [ 2350.198851][T26959] wg1 speed is unknown, defaulting to 1000 [ 2350.225977][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2350.745960][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2350.754284][ T5365] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2350.781421][ T5365] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2350.830311][ T5204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2350.879482][ T5365] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2350.885682][ T5365] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2350.892126][ T5365] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2350.922419][ T5365] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2350.930234][ T5365] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2350.939421][ T5365] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2350.953778][ T5204] veth0_vlan: entered promiscuous mode [ 2350.961536][ T5365] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2350.991241][ T5204] veth1_vlan: entered promiscuous mode [ 2351.083354][ T5204] veth0_macvtap: entered promiscuous mode [ 2351.105496][ T5204] veth1_macvtap: entered promiscuous mode [ 2351.151735][ T5204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2351.198794][ T5204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2351.228961][ T5898] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2351.409022][ T1836] Bluetooth: hci4: command 0x0406 tx timeout [ 2352.084610][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2352.210858][ T5204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2352.219662][ T5898] usb 2-1: can't read configurations, error -61 [ 2352.228665][ T5204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2352.240826][ T5204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2352.249790][ T5204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2352.424909][ T5898] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2352.487462][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2352.998762][ T1836] Bluetooth: hci3: command 0x0406 tx timeout [ 2353.007926][ T1791] Bluetooth: hci0: command 0x0c1a tx timeout [ 2353.014523][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 2353.020619][ T1836] Bluetooth: hci2: command 0x0c1a tx timeout [ 2353.037350][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2353.045842][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2353.687379][ T5898] usb 2-1: device descriptor read/all, error -71 [ 2353.694268][ T5898] usb usb2-port1: attempt power cycle [ 2353.777428][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2353.797621][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2353.978896][ T1940] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 2354.416599][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2354.451575][T27933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2354.467296][T27933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2354.542051][ T1940] usb 3-1: device descriptor read/64, error -71 [ 2354.623992][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2354.696182][ T5418] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8909'. [ 2354.812003][ T1940] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 2354.853513][ T5422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2355.030229][ T1940] usb 3-1: device descriptor read/64, error -71 [ 2355.097369][ T5424] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8964'. [ 2355.097728][ T1836] Bluetooth: hci2: command 0x0c1a tx timeout [ 2355.115978][T16406] Bluetooth: hci0: command 0x0c1a tx timeout [ 2355.217474][T25716] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2355.305328][ T1940] usb usb3-port1: attempt power cycle [ 2355.514509][ T5423] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8964'. [ 2355.527795][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2355.625282][ T5429] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2355.718904][ T1940] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 2355.876286][T25716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2355.899015][T25716] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2355.929592][ T1940] usb 3-1: device descriptor read/8, error -71 [ 2355.942376][T25716] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2355.991604][T25716] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2356.002372][T25716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2356.010616][T25716] usb 5-1: Product: syz [ 2356.028981][T25716] usb 5-1: Manufacturer: syz [ 2356.033599][T25716] usb 5-1: SerialNumber: syz [ 2356.088315][T25716] hub 5-1:1.0: bad descriptor, ignoring hub [ 2356.095134][T25716] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2356.199209][ T1940] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 2357.169000][ T1836] Bluetooth: hci0: command 0x0c1a tx timeout [ 2357.218950][T26966] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2357.244204][ T1940] usb 3-1: device descriptor read/8, error -71 [ 2357.250535][ T1836] Bluetooth: hci2: command 0x0c1a tx timeout [ 2357.343996][T25716] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2357.365196][ T1940] usb usb3-port1: unable to enumerate USB device [ 2357.483435][T26966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2357.522644][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2357.532030][T26966] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2358.247779][ T5448] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2358.381752][ T30] audit: type=1400 audit(1753882969.230:4882): avc: denied { getopt } for pid=5443 comm="syz.2.8970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2358.419884][T26966] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2358.469022][T26966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.598461][T26966] usb 2-1: config 0 descriptor?? [ 2359.214128][ T4293] usb 2-1: USB disconnect, device number 127 [ 2359.286172][ T5324] wg1 speed is unknown, defaulting to 1000 [ 2359.426062][ T5456] usb usb8: usbfs: process 5456 (syz.2.8973) did not claim interface 3 before use [ 2359.487374][ T5456] binder: BINDER_SET_CONTEXT_MGR already set [ 2359.493493][ T5456] binder: 5455:5456 ioctl 4018620d 2000000001c0 returned -16 [ 2359.561335][ T5459] binder: 5455:5459 ioctl 8030942b 200000000080 returned -22 [ 2359.679156][ T1940] usb 5-1: USB disconnect, device number 2 [ 2359.714194][ T1940] usblp0: removed [ 2359.792448][ T4293] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2359.995632][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.002072][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.013480][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.078997][ T5468] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2360.359435][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.366616][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.375623][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.383699][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.390923][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.398587][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.405799][ T5468] lo speed is unknown, defaulting to 1000 [ 2360.430995][ T5471] kvm: user requested TSC rate below hardware speed [ 2360.590351][ T4293] usb 2-1: config 127 has an invalid interface number: 163 but max is 0 [ 2360.598748][ T4293] usb 2-1: config 127 has an invalid descriptor of length 36, skipping remainder of the config [ 2360.612509][ T4293] usb 2-1: config 127 has no interface number 0 [ 2360.618877][ T4293] usb 2-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=6d.d9 [ 2360.627934][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.649598][ T4293] rtl8150 2-1:127.163: couldn't find required endpoints [ 2360.667031][ T4293] rtl8150 2-1:127.163: probe with driver rtl8150 failed with error -5 [ 2361.710545][ T30] audit: type=1400 audit(1753882972.620:4883): avc: denied { ioctl } for pid=5487 comm="syz.4.8983" path="socket:[166203]" dev="sockfs" ino=166203 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2363.009578][ T5499] FAULT_INJECTION: forcing a failure. [ 2363.009578][ T5499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2363.030308][ T5499] CPU: 0 UID: 0 PID: 5499 Comm: syz.4.8986 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2363.030337][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2363.030348][ T5499] Call Trace: [ 2363.030354][ T5499] [ 2363.030362][ T5499] dump_stack_lvl+0x16c/0x1f0 [ 2363.030389][ T5499] should_fail_ex+0x512/0x640 [ 2363.030417][ T5499] _copy_to_user+0x32/0xd0 [ 2363.030447][ T5499] simple_read_from_buffer+0xcb/0x170 [ 2363.030478][ T5499] proc_fail_nth_read+0x197/0x240 [ 2363.030497][ T5499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2363.030517][ T5499] ? rw_verify_area+0xcf/0x680 [ 2363.030540][ T5499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2363.030558][ T5499] vfs_read+0x1e4/0xc60 [ 2363.030589][ T5499] ? __pfx___mutex_lock+0x10/0x10 [ 2363.030610][ T5499] ? __pfx_vfs_read+0x10/0x10 [ 2363.030644][ T5499] ? __fget_files+0x20e/0x3c0 [ 2363.030668][ T5499] ksys_read+0x12a/0x250 [ 2363.030684][ T5499] ? __pfx_ksys_read+0x10/0x10 [ 2363.030707][ T5499] do_syscall_64+0xcd/0x4c0 [ 2363.030730][ T5499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2363.030748][ T5499] RIP: 0033:0x7f7f1e58d3bc [ 2363.030763][ T5499] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2363.030779][ T5499] RSP: 002b:00007f7f1f31b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2363.030796][ T5499] RAX: ffffffffffffffda RBX: 00007f7f1e7b5fa0 RCX: 00007f7f1e58d3bc [ 2363.030807][ T5499] RDX: 000000000000000f RSI: 00007f7f1f31b0a0 RDI: 0000000000000004 [ 2363.030818][ T5499] RBP: 00007f7f1f31b090 R08: 0000000000000000 R09: 0000000000000000 [ 2363.030828][ T5499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2363.030839][ T5499] R13: 0000000000000000 R14: 00007f7f1e7b5fa0 R15: 00007ffc04c56178 [ 2363.030864][ T5499] [ 2363.273869][ T5503] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8987'. [ 2363.284110][ T5502] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8987'. [ 2363.673227][ T5898] usb 2-1: USB disconnect, device number 2 [ 2364.232780][ T5518] ptrace attach of "./syz-executor exec"[25627] was attempted by ""[5518] [ 2364.466338][ T5520] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2364.628899][ T5898] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2364.846182][ T5898] usb 2-1: config 0 has no interfaces? [ 2364.897478][ T5898] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2365.105154][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.167193][ T5524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2365.196127][ T5898] usb 2-1: Product: syz [ 2365.348879][T26966] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2365.864074][ T5898] usb 2-1: Manufacturer: syz [ 2365.868767][ T5898] usb 2-1: SerialNumber: syz [ 2365.875852][ T5898] usb 2-1: config 0 descriptor?? [ 2366.207861][ T1940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2366.217945][T26966] usb 3-1: config 0 has no interfaces? [ 2366.233700][T26966] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2366.278100][T26966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.328959][T26966] usb 3-1: Product: syz [ 2366.669084][ T5546] wg1 speed is unknown, defaulting to 1000 [ 2367.064355][ T5546] lo speed is unknown, defaulting to 1000 [ 2367.099400][ T1940] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2367.228905][T26966] usb 3-1: Manufacturer: syz [ 2367.233577][ T1940] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2367.243438][T26966] usb 3-1: SerialNumber: syz [ 2367.253914][T26966] usb 3-1: config 0 descriptor?? [ 2367.259080][ T1940] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2367.403070][ T5552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5552 comm=syz.3.8999 [ 2367.645926][ T1940] usb 5-1: string descriptor 0 read error: -71 [ 2367.654094][ T1940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2367.658913][ T48] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2367.716355][ T1940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.755207][ T1940] usb 5-1: can't set config #1, error -71 [ 2367.775229][ T1940] usb 5-1: USB disconnect, device number 3 [ 2367.818920][ T48] usb 4-1: device descriptor read/64, error -71 [ 2368.765909][ T48] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2368.868755][T26966] usb 2-1: USB disconnect, device number 3 [ 2368.920022][ T48] usb 4-1: device descriptor read/64, error -71 [ 2369.028564][ T1940] usb 3-1: USB disconnect, device number 101 [ 2369.039460][ T48] usb usb4-port1: attempt power cycle [ 2369.315318][ T5575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2369.492198][ T48] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2369.813491][ T48] usb 4-1: device descriptor read/8, error -71 [ 2373.186228][ T5612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2373.279889][ T5614] overlay: Unknown parameter '/' [ 2373.715859][ T5607] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9011'. [ 2373.727212][ T5609] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9011'. [ 2373.828887][ T5581] tty tty1: ldisc open failed (-12), clearing slot 0 [ 2375.112040][ T30] audit: type=1400 audit(1753882986.020:4884): avc: denied { getopt } for pid=5624 comm="syz.1.9015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2375.115169][ T5623] Bluetooth: MGMT ver 1.23 [ 2375.196765][ T30] audit: type=1400 audit(1753882986.100:4885): avc: denied { remount } for pid=5627 comm="syz.4.9017" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2376.078072][ T30] audit: type=1400 audit(1753882986.950:4886): avc: denied { unmount } for pid=27362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2378.009093][T16709] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2378.284543][T16709] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 2378.293414][T16709] usb 2-1: config 0 has no interface number 0 [ 2378.322246][ T5671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2378.381301][T16709] usb 2-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28 [ 2378.391859][T16709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.414820][T16709] usb 2-1: Product: syz [ 2378.419314][T16709] usb 2-1: Manufacturer: syz [ 2378.424004][T16709] usb 2-1: SerialNumber: syz [ 2378.431482][T16709] usb 2-1: config 0 descriptor?? [ 2378.670497][T16709] kaweth 2-1:0.82: Firmware present in device. [ 2378.869022][T16709] kaweth 2-1:0.82: Statistics collection: 0 [ 2378.872781][ T5675] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9027'. [ 2378.885307][T16709] kaweth 2-1:0.82: Multicast filter limit: 0 [ 2378.895668][T16709] kaweth 2-1:0.82: MTU: 0 [ 2378.938119][T16709] kaweth 2-1:0.82: Read MAC address 00:00:00:00:00:00 [ 2379.065191][T16709] kaweth 2-1:0.82: probe with driver kaweth failed with error -5 [ 2379.113045][T16709] usb 2-1: USB disconnect, device number 4 [ 2379.336713][ T30] audit: type=1400 audit(1753882990.240:4887): avc: denied { search } for pid=5683 comm="syz.3.9031" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2379.338705][ T5686] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2379.431807][ T30] audit: type=1400 audit(1753882990.240:4888): avc: denied { search } for pid=5683 comm="syz.3.9031" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2379.678887][ T30] audit: type=1400 audit(1753882990.240:4889): avc: denied { add_name } for pid=5683 comm="syz.3.9031" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2379.776512][ T30] audit: type=1400 audit(1753882990.240:4890): avc: denied { create } for pid=5683 comm="syz.3.9031" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 2379.800936][T16709] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2379.939146][ T30] audit: type=1400 audit(1753882990.680:4891): avc: denied { search } for pid=5683 comm="syz.3.9031" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2379.977913][T16709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2379.996029][T16709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2380.158877][ T30] audit: type=1400 audit(1753882990.730:4892): avc: denied { search } for pid=5683 comm="syz.3.9031" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2380.507527][T16709] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2381.058177][T16709] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2381.119527][T16709] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2381.251100][ T5700] syz.2.9034: attempt to access beyond end of device [ 2381.251100][ T5700] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2381.528264][T16709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2381.539078][T26959] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2381.584021][T16709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.612998][T16709] usb 5-1: Product: syz [ 2381.619365][T16709] usb 5-1: Manufacturer: syz [ 2381.630353][T16709] usb 5-1: SerialNumber: syz [ 2381.722707][T26959] usb 2-1: config 0 has no interfaces? [ 2381.741236][T26959] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2381.765249][T26959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.929471][T26959] usb 2-1: Product: syz [ 2381.949102][T26959] usb 2-1: Manufacturer: syz [ 2381.956222][T26959] usb 2-1: SerialNumber: syz [ 2381.987654][T26959] usb 2-1: config 0 descriptor?? [ 2382.822985][ T5720] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9039'. [ 2382.836494][ T5721] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9039'. [ 2384.156261][T16709] cdc_mbim 5-1:1.0: bind() failure [ 2384.181324][T16709] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2384.257100][T16709] cdc_ncm 5-1:1.1: bind() failure [ 2384.333733][T16709] usb 5-1: USB disconnect, device number 4 [ 2385.247363][ T48] usb 2-1: USB disconnect, device number 5 [ 2385.426923][ T5753] input: syz1 as /devices/virtual/input/input57 [ 2385.799018][T26959] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2385.960821][T26959] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2385.972031][T26959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2385.989041][T26959] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2386.008071][ T5762] bond0: (slave bond_slave_0): Releasing backup interface [ 2386.018837][T26959] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2386.132467][ T5762] bond0: (slave bond_slave_1): Releasing backup interface [ 2386.140381][T16709] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 2386.152131][T26959] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2386.177023][T26959] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2386.319128][T16709] usb 3-1: device descriptor read/64, error -71 [ 2386.701346][ T5768] netlink: 'syz.1.9048': attribute type 10 has an invalid length. [ 2386.711154][T26959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.720210][T26959] usb 4-1: Product: syz [ 2386.724607][T26959] usb 4-1: Manufacturer: syz [ 2386.731038][T26959] usb 4-1: SerialNumber: syz [ 2386.766783][ T5762] team0: Port device team_slave_0 removed [ 2386.788274][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9048'. [ 2386.837310][ T5762] team0: Port device team_slave_1 removed [ 2386.975144][T16709] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 2387.143551][T16709] usb 3-1: device descriptor read/64, error -71 [ 2387.193183][ T5766] team0: Mode changed to "loadbalance" [ 2387.262507][ T5775] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2387.270556][ T5775] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2387.312035][T16709] usb usb3-port1: attempt power cycle [ 2387.751999][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2387.803255][ T5768] team0: Port device bond0 added [ 2388.390309][T16709] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 2388.674864][ T1836] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 2388.729739][T16709] usb 3-1: device descriptor read/8, error -71 [ 2389.046016][T16709] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 2389.280709][T16709] usb 3-1: device not accepting address 105, error -71 [ 2389.288292][T16709] usb usb3-port1: unable to enumerate USB device [ 2389.348015][ T5769] team0 (unregistering): Port device bond0 removed [ 2389.564423][T26959] cdc_mbim 4-1:1.0: bind() failure [ 2389.643115][T26959] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2389.669188][ T5774] syz_tun: entered allmulticast mode [ 2389.699634][T26959] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2389.708724][T26959] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 2389.748983][ T5786] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9052'. [ 2389.869643][ T5769] syz_tun: left allmulticast mode [ 2389.889084][T26959] usb 4-1: USB disconnect, device number 4 [ 2390.009706][ T30] audit: type=1400 audit(1753883000.910:4893): avc: denied { connect } for pid=5797 comm="syz.1.9056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2390.847056][ T30] audit: type=1400 audit(1753883001.020:4894): avc: denied { bind } for pid=5797 comm="syz.1.9056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2390.868977][ T30] audit: type=1400 audit(1753883001.030:4895): avc: denied { accept } for pid=5797 comm="syz.1.9056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2390.869411][ T5792] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2392.823952][ T5834] xt_CT: No such helper "pptp" [ 2392.834904][ T5836] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 2394.276345][ T1836] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 2394.632329][ T5845] wg1 speed is unknown, defaulting to 1000 [ 2394.751782][ T5845] lo speed is unknown, defaulting to 1000 [ 2396.040669][ T5872] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2396.473551][ T5887] wg1 speed is unknown, defaulting to 1000 [ 2396.908323][ T5887] lo speed is unknown, defaulting to 1000 [ 2398.202770][ T5907] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2398.210674][ T5907] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2399.824431][ T5916] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2400.039645][T26959] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2400.300063][ T5921] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2400.520868][ T30] audit: type=1400 audit(1753883011.390:4896): avc: denied { write } for pid=5917 comm="syz.0.9079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2400.760275][T26959] usb 3-1: Using ep0 maxpacket: 32 [ 2400.929843][T26959] usb 3-1: config 4 has an invalid interface number: 8 but max is 0 [ 2400.937902][T26959] usb 3-1: config 4 has no interface number 0 [ 2400.944235][T26959] usb 3-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2400.954125][T26959] usb 3-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 2400.963938][T26959] usb 3-1: config 4 interface 8 has no altsetting 0 [ 2400.977796][T26959] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 2400.987009][T26959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.004354][T26959] usb 3-1: Product: syz [ 2401.008628][T26959] usb 3-1: Manufacturer: syz [ 2401.013403][T26959] usb 3-1: SerialNumber: syz [ 2404.356618][ T5951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2404.381198][ T30] audit: type=1326 audit(1753883015.170:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2404.683504][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9083'. [ 2405.163324][ T30] audit: type=1326 audit(1753883015.170:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2405.187444][ T30] audit: type=1326 audit(1753883015.170:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2405.472685][ T30] audit: type=1326 audit(1753883015.170:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2405.584345][ T30] audit: type=1326 audit(1753883015.170:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2405.611103][ T30] audit: type=1326 audit(1753883015.170:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2405.661467][T26959] opticon 3-1:4.8: opticon converter detected [ 2405.675057][T26959] usb 3-1: opticon converter now attached to ttyUSB0 [ 2405.899386][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.909106][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.985601][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2405.996397][ T30] audit: type=1326 audit(1753883015.170:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2406.040344][T26959] usb 3-1: USB disconnect, device number 106 [ 2406.126958][T26959] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2406.146072][ T30] audit: type=1326 audit(1753883015.170:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2406.171030][T26959] opticon 3-1:4.8: device disconnected [ 2406.217524][ T30] audit: type=1326 audit(1753883015.170:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2406.253955][ T5979] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2406.270803][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2406.309204][ T30] audit: type=1326 audit(1753883015.170:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2406.332727][ T5959] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2406.341909][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2406.366494][ T5898] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2406.376673][ T5898] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2406.386716][ T5898] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2406.416034][ T30] audit: type=1326 audit(1753883015.170:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2406.489480][ T5975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2406.539005][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2406.558261][ T5959] usb 5-1: device descriptor read/64, error -71 [ 2406.565877][ T30] audit: type=1326 audit(1753883015.170:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2406.589712][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.590596][ T30] audit: type=1326 audit(1753883015.170:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b9a18d310 code=0x7ffc0000 [ 2406.628600][ T30] audit: type=1326 audit(1753883015.170:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a18e9a9 code=0x7ffc0000 [ 2406.888900][T26959] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2406.917866][ T5898] usb 2-1: can't set config #1, error -71 [ 2406.921701][ T5959] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2406.931841][ T5898] usb 2-1: USB disconnect, device number 6 [ 2407.280445][T26959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2407.290243][T26959] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2407.315080][ T5959] usb 5-1: device descriptor read/64, error -71 [ 2407.339141][T26959] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2407.443904][ T5959] usb usb5-port1: attempt power cycle [ 2407.464517][T26959] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2407.473923][T26959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.671105][T26959] usb 4-1: Product: syz [ 2407.680814][T26959] usb 4-1: Manufacturer: syz [ 2407.690096][T26959] usb 4-1: SerialNumber: syz [ 2407.988595][T26959] hub 4-1:1.0: bad descriptor, ignoring hub [ 2407.994788][T26959] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2408.038991][ T5959] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2408.059549][ T5959] usb 5-1: device descriptor read/8, error -71 [ 2408.197178][T26959] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2408.382493][ T5959] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2408.482683][ T5959] usb 5-1: device descriptor read/8, error -71 [ 2408.597947][ T5898] usb 4-1: USB disconnect, device number 5 [ 2408.610778][ T5959] usb usb5-port1: unable to enumerate USB device [ 2408.707413][ T5898] usblp0: removed [ 2408.881982][ T6008] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2409.127676][ T5998] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2409.161470][ T5898] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2409.185927][ T1836] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 2410.100054][ T5898] usb 4-1: device descriptor read/all, error -71 [ 2410.229803][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9101'. [ 2410.345437][ T6023] FAULT_INJECTION: forcing a failure. [ 2410.345437][ T6023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2410.417968][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.2.9101 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2410.417992][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2410.418002][ T6023] Call Trace: [ 2410.418008][ T6023] [ 2410.418015][ T6023] dump_stack_lvl+0x16c/0x1f0 [ 2410.418039][ T6023] should_fail_ex+0x512/0x640 [ 2410.418066][ T6023] strncpy_from_user+0x3b/0x2e0 [ 2410.418089][ T6023] getname_flags.part.0+0x8f/0x550 [ 2410.418116][ T6023] getname_flags+0x93/0xf0 [ 2410.418134][ T6023] path_setxattrat+0x27a/0x2a0 [ 2410.418153][ T6023] ? __pfx_path_setxattrat+0x10/0x10 [ 2410.418173][ T6023] ? ksys_write+0x190/0x250 [ 2410.418208][ T6023] ? fput+0x70/0xf0 [ 2410.418226][ T6023] ? ksys_write+0x1ac/0x250 [ 2410.418240][ T6023] ? __pfx_ksys_write+0x10/0x10 [ 2410.418259][ T6023] __x64_sys_lsetxattr+0xc9/0x140 [ 2410.418276][ T6023] ? do_syscall_64+0x91/0x4c0 [ 2410.418296][ T6023] ? lockdep_hardirqs_on+0x7c/0x110 [ 2410.418315][ T6023] do_syscall_64+0xcd/0x4c0 [ 2410.418337][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.418355][ T6023] RIP: 0033:0x7f7b9d58e9a9 [ 2410.418369][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2410.418386][ T6023] RSP: 002b:00007f7b9e3ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 2410.418405][ T6023] RAX: ffffffffffffffda RBX: 00007f7b9d7b6160 RCX: 00007f7b9d58e9a9 [ 2410.418416][ T6023] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000280 [ 2410.418427][ T6023] RBP: 00007f7b9e3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 2410.418438][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.418448][ T6023] R13: 0000000000000001 R14: 00007f7b9d7b6160 R15: 00007ffd14515a18 [ 2410.418471][ T6023] [ 2412.140048][ T6038] wg1 speed is unknown, defaulting to 1000 [ 2412.573390][ T6038] lo speed is unknown, defaulting to 1000 [ 2413.541312][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9108'. [ 2413.576930][ T6046] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2417.495772][ T1836] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 2417.673552][ T6085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2418.105312][ T1940] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2418.321173][ T1940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2418.334882][ T1940] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2418.346608][ T1940] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2418.360054][ T1940] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2418.378660][ T1940] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2418.428625][ T1940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2418.438377][ T1940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2418.447810][ T1940] usb 5-1: Product: syz [ 2418.452687][ T1940] usb 5-1: Manufacturer: syz [ 2418.478926][ T1940] usb 5-1: SerialNumber: syz [ 2419.147796][ T6109] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 2419.169512][ T5898] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 2419.527930][ T6110] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2419.900394][ T6114] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2420.205873][T26959] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 2420.329313][ T6121] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2420.490914][ T6123] kvm: pic: non byte write [ 2420.493987][ T1940] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 2420.494023][ T1940] cdc_mbim 5-1:1.0: bind() failure [ 2420.512541][ T1940] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2420.512567][ T1940] cdc_ncm 5-1:1.1: bind() failure [ 2420.523154][ T1940] usb 5-1: USB disconnect, device number 9 [ 2421.625486][ T6134] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2422.408898][ T4293] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2422.740103][ T4293] usb 5-1: Using ep0 maxpacket: 32 [ 2423.135276][ T4293] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2423.439322][ T4293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2423.440165][ T714] Bluetooth: hci5: Frame reassembly failed (-84) [ 2423.445964][ T4293] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2423.445986][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.659422][ T4293] usb 5-1: config 0 descriptor?? [ 2423.876451][ T4293] usbhid 5-1:0.0: can't add hid device: -71 [ 2424.497519][ T4293] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2425.153037][ T4293] usb 5-1: USB disconnect, device number 10 [ 2425.165978][ T6168] wg1 speed is unknown, defaulting to 1000 [ 2425.272456][ T6168] lo speed is unknown, defaulting to 1000 [ 2425.409214][ T1836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2425.558330][ T6176] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2426.730898][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2426.730914][ T30] audit: type=1400 audit(1753883037.640:4915): avc: denied { read } for pid=6183 comm="syz.1.9147" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2426.831662][ T30] audit: type=1400 audit(1753883037.680:4916): avc: denied { open } for pid=6183 comm="syz.1.9147" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2427.209814][ T6195] fuse: Bad value for 'group_id' [ 2427.217143][ T30] audit: type=1400 audit(1753883037.680:4917): avc: denied { ioctl } for pid=6183 comm="syz.1.9147" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2427.254870][ T6195] fuse: Bad value for 'group_id' [ 2427.352158][ T6198] batadv_slave_1: entered promiscuous mode [ 2427.360222][ T30] audit: type=1400 audit(1753883038.270:4918): avc: denied { read } for pid=6194 comm="syz.1.9152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2427.407403][ T1836] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2427.625968][ T6210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2427.690114][ T6210] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2428.026615][ T6194] batadv_slave_1: left promiscuous mode [ 2428.054551][ T6213] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2428.523216][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9159'. [ 2429.334992][T16709] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 2429.410150][ T6229] mmap: syz.4.9162 (6229) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2429.601505][T16709] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2429.615938][ T6232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2429.662850][T16709] usb 3-1: not running at top speed; connect to a high speed hub [ 2429.677417][T16709] usb 3-1: config 129 has an invalid interface number: 145 but max is 0 [ 2429.690046][T16709] usb 3-1: config 129 has no interface number 0 [ 2429.697672][T16709] usb 3-1: config 129 interface 145 has no altsetting 0 [ 2429.723272][T16709] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 2429.740802][T16709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.780699][T16709] usb 3-1: Product: syz [ 2429.784919][T16709] usb 3-1: Manufacturer: syz [ 2429.802284][T16709] usb 3-1: SerialNumber: syz [ 2430.015265][T16709] usb 3-1: USB disconnect, device number 107 [ 2430.306626][ T6238] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2430.313530][ T6238] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2430.800567][ T30] audit: type=1400 audit(1753883041.690:4919): avc: denied { getopt } for pid=6244 comm="syz.2.9167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2430.868876][ T30] audit: type=1400 audit(1753883041.750:4920): avc: denied { ioctl } for pid=6244 comm="syz.2.9167" path="socket:[168951]" dev="sockfs" ino=168951 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2431.048581][ T30] audit: type=1400 audit(1753883041.800:4921): avc: denied { shutdown } for pid=6244 comm="syz.2.9167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2431.823049][ T6261] wg1 speed is unknown, defaulting to 1000 [ 2432.032150][ T6261] lo speed is unknown, defaulting to 1000 [ 2433.446385][ T6281] wg1 speed is unknown, defaulting to 1000 [ 2433.838708][ T6281] lo speed is unknown, defaulting to 1000 [ 2434.237266][ T6288] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2434.736782][ T6302] FAULT_INJECTION: forcing a failure. [ 2434.736782][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 2434.882265][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.4.9179 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2434.882284][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2434.882291][ T6302] Call Trace: [ 2434.882295][ T6302] [ 2434.882300][ T6302] dump_stack_lvl+0x16c/0x1f0 [ 2434.882318][ T6302] should_fail_ex+0x512/0x640 [ 2434.882334][ T6302] ? fs_reclaim_acquire+0xae/0x150 [ 2434.882352][ T6302] ? tomoyo_encode2+0x100/0x3e0 [ 2434.882365][ T6302] should_failslab+0xc2/0x120 [ 2434.882378][ T6302] __kmalloc_noprof+0xd2/0x510 [ 2434.882394][ T6302] ? d_absolute_path+0x136/0x1a0 [ 2434.882413][ T6302] tomoyo_encode2+0x100/0x3e0 [ 2434.882427][ T6302] tomoyo_encode+0x29/0x50 [ 2434.882439][ T6302] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2434.882456][ T6302] tomoyo_path_number_perm+0x245/0x580 [ 2434.882474][ T6302] ? tomoyo_path_number_perm+0x237/0x580 [ 2434.882493][ T6302] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2434.882512][ T6302] ? find_held_lock+0x2b/0x80 [ 2434.882540][ T6302] ? find_held_lock+0x2b/0x80 [ 2434.882556][ T6302] ? hook_file_ioctl_common+0x145/0x410 [ 2434.882575][ T6302] ? __fget_files+0x20e/0x3c0 [ 2434.882589][ T6302] security_file_ioctl+0x9b/0x240 [ 2434.882603][ T6302] __x64_sys_ioctl+0xb7/0x210 [ 2434.882620][ T6302] do_syscall_64+0xcd/0x4c0 [ 2434.882635][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2434.882648][ T6302] RIP: 0033:0x7f7f1e58e9a9 [ 2434.882657][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2434.882668][ T6302] RSP: 002b:00007f7f1f31b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.882680][ T6302] RAX: ffffffffffffffda RBX: 00007f7f1e7b5fa0 RCX: 00007f7f1e58e9a9 [ 2434.882688][ T6302] RDX: 0000200000000000 RSI: 000000004020565a RDI: 0000000000000003 [ 2434.882696][ T6302] RBP: 00007f7f1f31b090 R08: 0000000000000000 R09: 0000000000000000 [ 2434.882703][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2434.882710][ T6302] R13: 0000000000000000 R14: 00007f7f1e7b5fa0 R15: 00007ffc04c56178 [ 2434.882724][ T6302] [ 2434.883044][ T6302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2435.547621][ T6311] overlay: Unknown parameter '/' [ 2436.017022][T16406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2436.027699][T16406] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2436.155583][T16406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2436.166176][T16406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2436.173392][ T1940] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2436.192895][T16406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2436.274229][ T30] audit: type=1400 audit(1753883047.180:4922): avc: denied { ioctl } for pid=6314 comm="syz.2.9184" path="pid:[4026532803]" dev="nsfs" ino=4026532803 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2436.572188][ T1940] usb 4-1: Using ep0 maxpacket: 32 [ 2437.323987][ T1940] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 2437.324969][ T5959] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2437.333880][ T6310] wg1 speed is unknown, defaulting to 1000 [ 2437.345981][ T1940] usb 4-1: config 4 has no interface number 0 [ 2437.354415][ T1940] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2437.374413][ T1940] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 2437.388902][ T1940] usb 4-1: config 4 interface 8 has no altsetting 0 [ 2437.744000][ T1940] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 2437.756634][ T1940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.766478][ T1940] usb 4-1: Product: syz [ 2437.772606][ T1940] usb 4-1: Manufacturer: syz [ 2437.777346][ T1940] usb 4-1: SerialNumber: syz [ 2437.777394][ T4293] wg1 speed is unknown, defaulting to 1000 [ 2437.788475][ T4293] syz0: Port: 1 Link DOWN [ 2437.807013][ T4293] wg1 speed is unknown, defaulting to 1000 [ 2437.868975][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 2437.892015][ T5959] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 2437.923528][ T5959] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2437.949250][ T5959] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2437.968489][T27933] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2437.979361][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2438.008757][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.053387][ T5959] usb 3-1: config 0 descriptor?? [ 2438.109388][ T6310] lo speed is unknown, defaulting to 1000 [ 2438.191309][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2438.234666][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2438.325175][ T1836] Bluetooth: hci5: command tx timeout [ 2438.342772][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2438.393179][T27933] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.429354][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2438.441811][ T24] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2438.461076][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2438.474304][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2438.484499][ T24] usb 5-1: Product: syz [ 2438.496083][ T24] usb 5-1: Manufacturer: syz [ 2438.538380][ T24] usb 5-1: SerialNumber: syz [ 2438.564841][ T1940] opticon 4-1:4.8: opticon converter detected [ 2438.573445][ T1940] usb 4-1: opticon converter now attached to ttyUSB0 [ 2438.606387][ T1940] usb 4-1: USB disconnect, device number 8 [ 2438.631524][ T1940] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2438.643183][T27933] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.655247][ T1940] opticon 4-1:4.8: device disconnected [ 2438.762836][T27933] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.377502][ T6310] chnl_net:caif_netlink_parms(): no params data found [ 2439.563225][ T6337] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9187'. [ 2439.878111][T27933] bridge_slave_1: left allmulticast mode [ 2439.909009][T27933] bridge_slave_1: left promiscuous mode [ 2439.925692][T27933] bridge0: port 2(bridge_slave_1) entered disabled state [ 2439.941196][ T5959] usb 3-1: string descriptor 0 read error: -71 [ 2439.941628][T27933] bridge_slave_0: left allmulticast mode [ 2439.962437][T27933] bridge_slave_0: left promiscuous mode [ 2439.965937][ T5959] usb 3-1: USB disconnect, device number 108 [ 2439.974631][T27933] bridge0: port 1(bridge_slave_0) entered disabled state [ 2440.379022][ T1836] Bluetooth: hci5: command tx timeout [ 2440.496540][ T24] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 2440.512908][ T24] cdc_mbim 5-1:1.0: bind() failure [ 2440.534925][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2440.546109][ T24] cdc_ncm 5-1:1.1: bind() failure [ 2440.553644][ T24] usb 5-1: USB disconnect, device number 11 [ 2440.930763][T25716] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2440.996126][ T6361] syz.4.9192: attempt to access beyond end of device [ 2440.996126][ T6361] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 2441.119964][T25716] usb 3-1: Using ep0 maxpacket: 32 [ 2441.156844][T25716] usb 3-1: config 4 has an invalid interface number: 8 but max is 0 [ 2441.225842][T25716] usb 3-1: config 4 has no interface number 0 [ 2441.232682][T25716] usb 3-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2441.242672][T25716] usb 3-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 2441.259363][T25716] usb 3-1: config 4 interface 8 has no altsetting 0 [ 2441.268680][T25716] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 2441.300997][T25716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.310276][T25716] usb 3-1: Product: syz [ 2441.310945][T27933] smc: removing net device bond0 with user defined pnetid SYZ2 [ 2441.314959][T25716] usb 3-1: Manufacturer: syz [ 2441.327251][T25716] usb 3-1: SerialNumber: syz [ 2441.327635][T27933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2441.343469][T27933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2441.354162][T27933] bond0 (unregistering): Released all slaves [ 2441.515797][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 2441.535716][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.548253][ T6310] bridge_slave_0: entered allmulticast mode [ 2441.556466][ T6310] bridge_slave_0: entered promiscuous mode [ 2441.755827][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.780570][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.794051][ T6310] bridge_slave_1: entered allmulticast mode [ 2441.804282][ T6310] bridge_slave_1: entered promiscuous mode [ 2441.897058][ T6375] overlay: Unknown parameter '/' [ 2442.288241][T25716] opticon 3-1:4.8: opticon converter detected [ 2442.302741][T25716] usb 3-1: opticon converter now attached to ttyUSB0 [ 2442.315278][T25716] usb 3-1: USB disconnect, device number 109 [ 2442.323467][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2442.324754][T25716] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2442.347653][T25716] opticon 3-1:4.8: device disconnected [ 2442.356906][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2442.473922][ T1836] Bluetooth: hci5: command tx timeout [ 2442.765347][ T6384] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2442.895970][ T6310] team0: Port device team_slave_0 added [ 2442.902264][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9197'. [ 2442.911209][ T4293] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2442.953511][ T6310] team0: Port device team_slave_1 added [ 2443.027639][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2443.042724][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2443.130031][ T6392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6392 comm=syz.1.9197 [ 2443.281293][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2443.304479][ T4293] usb 4-1: config 0 has no interfaces? [ 2443.317925][ T4293] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2443.338880][ T4293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.346972][ T4293] usb 4-1: Product: syz [ 2443.487592][ T6396] syz.4.9198: attempt to access beyond end of device [ 2443.487592][ T6396] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 2443.819008][ T4293] usb 4-1: Manufacturer: syz [ 2443.823832][ T4293] usb 4-1: SerialNumber: syz [ 2443.836813][ T4293] usb 4-1: config 0 descriptor?? [ 2443.882129][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2443.896968][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2444.015687][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2444.548890][ T6409] syz.2.9201: attempt to access beyond end of device [ 2444.548890][ T6409] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 2444.689245][ T1836] Bluetooth: hci5: command tx timeout [ 2444.943005][ T6310] hsr_slave_0: entered promiscuous mode [ 2444.969584][ T6310] hsr_slave_1: entered promiscuous mode [ 2444.976736][ T6310] debugfs: 'hsr0' already exists in 'hsr' [ 2444.983756][ T6310] Cannot create hsr debugfs directory [ 2445.148904][ T1940] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2445.889766][ T1940] usb 5-1: config 0 has no interfaces? [ 2445.900301][ T1940] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2445.911115][ T1940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.923722][ T1940] usb 5-1: Product: syz [ 2445.930152][ T1940] usb 5-1: Manufacturer: syz [ 2445.936052][ T1940] usb 5-1: SerialNumber: syz [ 2445.948611][ T1940] usb 5-1: config 0 descriptor?? [ 2445.974830][ T6417] wg1 speed is unknown, defaulting to 1000 [ 2446.053251][ T6417] lo speed is unknown, defaulting to 1000 [ 2447.072289][T25716] usb 4-1: USB disconnect, device number 9 [ 2448.313673][ T6430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9206'. [ 2448.995633][ T6310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2449.133703][ T6340] usb 5-1: USB disconnect, device number 12 [ 2449.176500][ T6310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2449.255785][ T6310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2449.563201][ T6310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2450.591769][T25716] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2450.592568][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2451.069715][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 2451.104392][ T6310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2451.146391][ T6310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2451.164078][T29260] bridge0: port 1(bridge_slave_0) entered blocking state [ 2451.171198][T29260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2451.184016][T29260] bridge0: port 2(bridge_slave_1) entered blocking state [ 2451.191113][T29260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2451.280515][T25716] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2451.295956][T25716] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2451.358942][T25716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.399655][T25716] usb 3-1: config 0 descriptor?? [ 2451.431266][T25716] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2451.767809][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2451.885104][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9217'. [ 2452.131936][ T6498] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2452.209292][ T1836] Bluetooth: hci1: command 0x0406 tx timeout [ 2452.465418][ T6310] veth0_vlan: entered promiscuous mode [ 2452.484805][ T6310] veth1_vlan: entered promiscuous mode [ 2452.555473][ T6310] veth0_macvtap: entered promiscuous mode [ 2452.568057][ T6310] veth1_macvtap: entered promiscuous mode [ 2452.569215][T26959] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2452.590996][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2452.616600][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2452.621211][ T6310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.621244][ T6310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.621270][ T6310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.621295][ T6310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.726046][T27933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2452.726106][T27933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2452.726786][T27933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2452.726801][T27933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2452.769062][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2452.773262][T27933] veth1_macvtap: left promiscuous mode [ 2452.784731][T26959] usb 4-1: Using ep0 maxpacket: 32 [ 2452.784903][T27933] veth0_macvtap: left promiscuous mode [ 2452.785056][T27933] veth1_vlan: left promiscuous mode [ 2452.785173][T27933] veth0_vlan: left promiscuous mode [ 2452.787631][T26959] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2452.787657][T26959] usb 4-1: config 0 has no interface number 0 [ 2452.787680][T26959] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2452.794656][T26959] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2452.794676][T26959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.794688][T26959] usb 4-1: Product: syz [ 2452.794697][T26959] usb 4-1: Manufacturer: syz [ 2452.794706][T26959] usb 4-1: SerialNumber: syz [ 2452.796144][T26959] usb 4-1: config 0 descriptor?? [ 2452.803646][T26959] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2452.803668][T26959] em28xx 4-1:0.132: Video interface 132 found: [ 2452.931096][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 2453.006351][ T24] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2453.006384][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2453.006413][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2453.006441][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.008595][ T24] usb 5-1: config 0 descriptor?? [ 2453.018892][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2453.019180][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2453.224132][T26959] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 2453.570161][T25716] usb 3-1: USB disconnect, device number 110 [ 2453.608915][ T6340] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2453.647040][T27933] team0 (unregistering): Port device team_slave_1 removed [ 2453.761748][T27933] team0 (unregistering): Port device team_slave_0 removed [ 2453.812803][ T6340] usb 2-1: config 0 has no interfaces? [ 2453.838544][ T6340] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2453.848033][ T6340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.856197][ T6340] usb 2-1: Product: syz [ 2453.859021][T26959] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 2453.860677][ T6340] usb 2-1: Manufacturer: syz [ 2453.867197][T26959] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 2453.883972][ T6340] usb 2-1: SerialNumber: syz [ 2453.901752][ T6340] usb 2-1: config 0 descriptor?? [ 2454.095780][T17427] smc: removing ib device syz0 [ 2454.106576][T26959] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2454.118337][T26959] em28xx 4-1:0.132: analog set to bulk mode. [ 2454.128490][ T6504] em28xx 4-1:0.132: Registering V4L2 extension [ 2454.166889][T26959] usb 4-1: USB disconnect, device number 10 [ 2454.185170][T26959] em28xx 4-1:0.132: Disconnecting em28xx [ 2454.498287][ T6504] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 2454.505464][ T6504] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 2454.521667][ T6504] em28xx 4-1:0.132: No AC97 audio processor [ 2454.545985][ T6504] usb 4-1: Decoder not found [ 2454.555445][ T6504] em28xx 4-1:0.132: failed to create media graph [ 2454.578475][ T6504] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 2454.599966][ T6504] em28xx 4-1:0.132: Remote control support is not available for this card. [ 2454.618624][T26959] em28xx 4-1:0.132: Closing input extension [ 2454.666670][T26959] em28xx 4-1:0.132: Freeing device [ 2455.033554][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 2455.050773][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2455.074801][ T24] usb 5-1: USB disconnect, device number 13 [ 2455.142706][ T714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2455.184358][ T714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2455.545806][T20258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2455.563990][ T6524] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9222'. [ 2455.676059][ T6523] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9222'. [ 2455.701913][T20258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2457.506045][ T1940] usb 2-1: USB disconnect, device number 7 [ 2458.009372][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2458.249437][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 2458.282054][ T24] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 2458.308896][ T24] usb 4-1: config 4 has no interface number 0 [ 2458.325307][ T24] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2458.467330][ T24] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 2458.537297][ T6552] delete_channel: no stack [ 2458.979205][ T24] usb 4-1: config 4 interface 8 has no altsetting 0 [ 2459.015260][ T24] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 2459.062740][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2459.098466][T27933] IPVS: stop unused estimator thread 0... [ 2459.162224][ T24] usb 4-1: Product: syz [ 2459.166449][ T24] usb 4-1: Manufacturer: syz [ 2459.202554][ T24] usb 4-1: SerialNumber: syz [ 2459.303734][T16406] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2459.332758][T16406] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2459.341463][T16406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2459.352319][T16406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2459.359934][T16406] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2459.449306][ T6555] lo speed is unknown, defaulting to 1000 [ 2460.106380][ T24] opticon 4-1:4.8: opticon converter detected [ 2460.156813][ T24] usb 4-1: opticon converter now attached to ttyUSB0 [ 2460.241363][ T24] usb 4-1: USB disconnect, device number 11 [ 2460.682352][ T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2460.716872][ T24] opticon 4-1:4.8: device disconnected [ 2461.003283][ T6581] FAULT_INJECTION: forcing a failure. [ 2461.003283][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.025806][ T6581] CPU: 0 UID: 0 PID: 6581 Comm: syz.2.9237 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2461.025835][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2461.025846][ T6581] Call Trace: [ 2461.025852][ T6581] [ 2461.025860][ T6581] dump_stack_lvl+0x16c/0x1f0 [ 2461.025888][ T6581] should_fail_ex+0x512/0x640 [ 2461.025913][ T6581] ? fs_reclaim_acquire+0xae/0x150 [ 2461.025939][ T6581] ? tomoyo_encode2+0x100/0x3e0 [ 2461.025958][ T6581] should_failslab+0xc2/0x120 [ 2461.025980][ T6581] __kmalloc_noprof+0xd2/0x510 [ 2461.025997][ T6581] ? d_absolute_path+0x136/0x1a0 [ 2461.026025][ T6581] tomoyo_encode2+0x100/0x3e0 [ 2461.026048][ T6581] tomoyo_encode+0x29/0x50 [ 2461.026067][ T6581] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2461.026095][ T6581] tomoyo_path_number_perm+0x245/0x580 [ 2461.026121][ T6581] ? tomoyo_path_number_perm+0x237/0x580 [ 2461.026151][ T6581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2461.026179][ T6581] ? find_held_lock+0x2b/0x80 [ 2461.026225][ T6581] ? find_held_lock+0x2b/0x80 [ 2461.026245][ T6581] ? hook_file_ioctl_common+0x145/0x410 [ 2461.026272][ T6581] ? __fget_files+0x20e/0x3c0 [ 2461.026293][ T6581] security_file_ioctl+0x9b/0x240 [ 2461.026313][ T6581] __x64_sys_ioctl+0xb7/0x210 [ 2461.026339][ T6581] do_syscall_64+0xcd/0x4c0 [ 2461.026365][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2461.026382][ T6581] RIP: 0033:0x7f7b9d58e9a9 [ 2461.026397][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2461.026413][ T6581] RSP: 002b:00007f7b9e3ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.026429][ T6581] RAX: ffffffffffffffda RBX: 00007f7b9d7b5fa0 RCX: 00007f7b9d58e9a9 [ 2461.026440][ T6581] RDX: 0000200000000040 RSI: 0000000000004b44 RDI: 0000000000000003 [ 2461.026452][ T6581] RBP: 00007f7b9e3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2461.026461][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.026470][ T6581] R13: 0000000000000000 R14: 00007f7b9d7b5fa0 R15: 00007ffd14515a18 [ 2461.026493][ T6581] [ 2461.026511][ T6581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2461.037806][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 2461.278935][ T1940] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2461.347135][T27933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2461.415447][T16406] Bluetooth: hci4: command tx timeout [ 2461.526515][ T1940] usb 5-1: Using ep0 maxpacket: 32 [ 2461.547324][ T1940] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2461.629839][ T1940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2461.687128][ T1940] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2461.798609][ T1940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.811684][ T6586] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9238'. [ 2461.829516][ T6585] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9238'. [ 2462.056157][ T1940] usb 5-1: config 0 descriptor?? [ 2462.098333][T27933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2462.203356][ T6595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2462.440534][T27933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2462.503719][ T1940] usbhid 5-1:0.0: can't add hid device: -71 [ 2462.526766][ T1940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2462.644708][ T1940] usb 5-1: USB disconnect, device number 14 [ 2462.852573][T27933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2463.023079][ T6605] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9241'. [ 2463.315249][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.344288][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 2463.369365][ T6555] bridge_slave_0: entered allmulticast mode [ 2463.377064][ T6555] bridge_slave_0: entered promiscuous mode [ 2463.387155][ T6604] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9241'. [ 2463.488997][T16406] Bluetooth: hci4: command tx timeout [ 2464.067935][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.099147][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.107238][ T6555] bridge_slave_1: entered allmulticast mode [ 2464.116014][ T6555] bridge_slave_1: entered promiscuous mode [ 2464.324368][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2464.473556][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2465.030873][ T6620] vlan0: entered allmulticast mode [ 2465.036027][ T6620] vlan1: entered allmulticast mode [ 2465.041309][ T6620] veth0_vlan: entered allmulticast mode [ 2465.558343][ T6626] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2465.575067][T16406] Bluetooth: hci4: command tx timeout [ 2465.613561][ T6626] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2465.772813][ T6504] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2466.068868][ T6504] usb 5-1: Using ep0 maxpacket: 32 [ 2466.075888][ T6504] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 2466.084118][ T6504] usb 5-1: config 4 has no interface number 0 [ 2466.448008][ T6504] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2466.587105][ T6504] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 2466.603919][ T6504] usb 5-1: config 4 interface 8 has no altsetting 0 [ 2466.628159][ T6504] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 2466.652592][ T6504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.670959][ T6504] usb 5-1: Product: syz [ 2466.686809][ T6504] usb 5-1: Manufacturer: syz [ 2466.695930][ T6504] usb 5-1: SerialNumber: syz [ 2467.910718][T16406] Bluetooth: hci4: command tx timeout [ 2468.025343][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.033928][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.209681][T27933] bond0 (unregistering): Released all slaves [ 2468.252555][T27933] bond1 (unregistering): Released all slaves [ 2468.340443][ T6555] team0: Port device team_slave_0 added [ 2468.362347][ T6646] lo speed is unknown, defaulting to 1000 [ 2468.408716][ T6555] team0: Port device team_slave_1 added [ 2469.083552][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2469.125939][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2469.153117][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2469.166153][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2469.175974][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2469.202102][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2469.223300][ T6504] opticon 5-1:4.8: opticon converter detected [ 2469.247611][ T6504] usb 5-1: opticon converter now attached to ttyUSB0 [ 2469.261218][ T6504] usb 5-1: USB disconnect, device number 15 [ 2469.278683][ T6504] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2469.287669][ T6504] opticon 5-1:4.8: device disconnected [ 2469.298223][ T6555] hsr_slave_0: entered promiscuous mode [ 2469.306773][ T6555] hsr_slave_1: entered promiscuous mode [ 2469.316237][ T6555] debugfs: 'hsr0' already exists in 'hsr' [ 2469.396620][ T6555] Cannot create hsr debugfs directory [ 2470.688232][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9256'. [ 2470.705159][ T30] audit: type=1400 audit(1753883081.610:4923): avc: denied { relabelfrom } for pid=6663 comm="syz.4.9256" name="" dev="pipefs" ino=172523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2471.763756][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033066400: rx timeout, send abort [ 2471.774805][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033066400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2471.860298][ T30] audit: type=1400 audit(1753883082.700:4924): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2471.882353][ C0] vkms_vblank_simulate: vblank timer overrun [ 2471.917131][ T30] audit: type=1400 audit(1753883082.700:4925): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2471.942905][ T30] audit: type=1400 audit(1753883082.700:4926): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2471.965177][ T30] audit: type=1400 audit(1753883082.700:4927): avc: denied { add_name } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2471.986678][ T30] audit: type=1400 audit(1753883082.700:4928): avc: denied { create } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2472.017577][ T30] audit: type=1400 audit(1753883082.700:4929): avc: denied { append open } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2472.045770][ T30] audit: type=1400 audit(1753883082.700:4930): avc: denied { getattr } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2472.262614][ T6669] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2472.269964][ T6669] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2472.371528][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 2474.275259][ T6690] FAULT_INJECTION: forcing a failure. [ 2474.275259][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.288039][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.3.9264 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2474.288065][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2474.288076][ T6690] Call Trace: [ 2474.288082][ T6690] [ 2474.288089][ T6690] dump_stack_lvl+0x16c/0x1f0 [ 2474.288116][ T6690] should_fail_ex+0x512/0x640 [ 2474.288140][ T6690] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2474.288161][ T6690] should_failslab+0xc2/0x120 [ 2474.288180][ T6690] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2474.288197][ T6690] ? __might_fault+0xe3/0x190 [ 2474.288212][ T6690] ? __might_fault+0x13b/0x190 [ 2474.288227][ T6690] ? getname_flags.part.0+0x4c/0x550 [ 2474.288255][ T6690] getname_flags.part.0+0x4c/0x550 [ 2474.288282][ T6690] getname_flags+0x93/0xf0 [ 2474.288298][ T6690] user_path_at+0x24/0x60 [ 2474.288316][ T6690] __x64_sys_mount+0x1fc/0x310 [ 2474.288337][ T6690] ? __pfx___x64_sys_mount+0x10/0x10 [ 2474.288366][ T6690] do_syscall_64+0xcd/0x4c0 [ 2474.288389][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2474.288407][ T6690] RIP: 0033:0x7f58ac78e9a9 [ 2474.288422][ T6690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2474.288439][ T6690] RSP: 002b:00007f58ad525038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2474.288456][ T6690] RAX: ffffffffffffffda RBX: 00007f58ac9b6160 RCX: 00007f58ac78e9a9 [ 2474.288468][ T6690] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000200000000080 [ 2474.288480][ T6690] RBP: 00007f58ad525090 R08: 0000000000000000 R09: 0000000000000000 [ 2474.288491][ T6690] R10: 0000000001a0c099 R11: 0000000000000246 R12: 0000000000000001 [ 2474.288502][ T6690] R13: 0000000000000000 R14: 00007f58ac9b6160 R15: 00007ffdeacdfc38 [ 2474.288525][ T6690] [ 2474.906385][ T30] audit: type=1326 audit(1753883085.650:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.9263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc336f8e9a9 code=0x7ffc0000 [ 2475.194933][ T30] audit: type=1326 audit(1753883085.650:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.9263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc336f8e9a9 code=0x7ffc0000 [ 2475.227233][ T6555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2475.502047][ T6555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2475.757514][ T6555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2475.783302][ T6555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2476.245583][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2476.302196][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 2476.395556][ T6555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2476.406099][ T6555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2476.448660][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 2476.455790][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2476.531278][ T6720] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2476.538517][ T6720] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2476.926385][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 2476.933551][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2477.353581][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2477.466969][ T6555] veth0_vlan: entered promiscuous mode [ 2477.541267][ T6555] veth1_vlan: entered promiscuous mode [ 2477.648996][ T1836] Bluetooth: hci2: command 0x0c1a tx timeout [ 2477.725605][ T6555] veth0_macvtap: entered promiscuous mode [ 2477.766092][ T6555] veth1_macvtap: entered promiscuous mode [ 2477.840538][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2477.961613][T27933] veth1_macvtap: left promiscuous mode [ 2477.968451][T27933] veth0_macvtap: left promiscuous mode [ 2477.981994][T27933] veth1_vlan: left promiscuous mode [ 2477.990221][T27933] veth0_vlan: left promiscuous mode [ 2478.291130][T26959] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2478.458853][T26959] usb 3-1: Using ep0 maxpacket: 8 [ 2478.465613][T26959] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 2478.478860][ T1940] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2478.584357][T26959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2479.054753][T26959] usb 3-1: config 0 has no interface number 0 [ 2479.061563][T26959] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2479.078861][T26959] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2479.138539][T26959] usb 3-1: config 0 interface 52 has no altsetting 0 [ 2479.378736][ T6749] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2479.386046][ T6749] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2479.833163][ T1940] usb 5-1: config 0 has no interfaces? [ 2479.856673][T26959] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2479.866793][ T1940] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2479.900947][T26959] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2479.978934][ T1940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.021640][T26959] usb 3-1: Manufacturer: syz [ 2480.037727][ T1940] usb 5-1: Product: syz [ 2480.214359][T26959] usb 3-1: config 0 descriptor?? [ 2480.220341][ T1940] usb 5-1: Manufacturer: syz [ 2480.237176][ T1940] usb 5-1: SerialNumber: syz [ 2480.245073][T26959] hub 3-1:0.52: bad descriptor, ignoring hub [ 2480.252126][ T1940] usb 5-1: config 0 descriptor?? [ 2480.274945][T26959] hub 3-1:0.52: probe with driver hub failed with error -5 [ 2480.465048][T26959] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input58 [ 2480.610083][ T5898] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2480.795256][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 2480.807321][ T5898] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 2480.815636][ T5898] usb 4-1: config 4 has no interface number 0 [ 2480.849490][ T5898] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2480.942292][ T5898] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 2480.966724][ T5898] usb 4-1: config 4 interface 8 has no altsetting 0 [ 2480.986322][ T5898] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 2480.998038][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.017443][ T5898] usb 4-1: Product: syz [ 2481.062275][ T5898] usb 4-1: Manufacturer: syz [ 2481.067010][ T5898] usb 4-1: SerialNumber: syz [ 2481.550710][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9274'. [ 2481.566895][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2481.594281][ T6555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2481.607708][ T6555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2481.622544][ T6555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2481.632869][ T6555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2481.679066][ T6569] usb 3-1: USB disconnect, device number 111 [ 2481.685984][ T5898] opticon 4-1:4.8: opticon converter detected [ 2481.867004][ T5898] usb 4-1: opticon converter now attached to ttyUSB0 [ 2481.958869][ T6769] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9281'. [ 2482.344065][ T5898] usb 4-1: USB disconnect, device number 12 [ 2482.387945][ T5898] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2482.396887][T29260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2482.417977][ T5898] opticon 4-1:4.8: device disconnected [ 2482.423955][T29260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2482.751838][ T6773] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2482.835400][T17427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2482.868297][T17427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2483.451746][T27933] IPVS: stop unused estimator thread 0... [ 2483.490020][ T6569] usb 5-1: USB disconnect, device number 16 [ 2484.584392][ T6796] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2484.905973][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2484.905998][ T30] audit: type=1326 audit(1753883095.810:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2485.108409][ T30] audit: type=1326 audit(1753883095.850:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2485.202136][ T30] audit: type=1326 audit(1753883095.850:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2485.594707][ T30] audit: type=1326 audit(1753883095.850:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2485.663059][ T30] audit: type=1400 audit(1753883095.850:4962): avc: denied { connect } for pid=6785 comm="syz.1.9229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2485.769278][ T30] audit: type=1326 audit(1753883095.850:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2485.962160][ T30] audit: type=1326 audit(1753883095.850:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2485.965842][ T6813] binder: Unknown parameter 'max00000000' [ 2486.135962][ T30] audit: type=1326 audit(1753883095.850:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2486.193408][ T30] audit: type=1326 audit(1753883095.860:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2486.241608][ T1836] Bluetooth: hci0: Malformed Event: 0x02 [ 2486.249643][ T30] audit: type=1326 audit(1753883095.860:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.1.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a38e9a9 code=0x7ffc0000 [ 2487.151307][ T6829] lo speed is unknown, defaulting to 1000 [ 2488.315016][ T6834] FAULT_INJECTION: forcing a failure. [ 2488.315016][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2488.316891][ T6834] [ 2488.316900][ T6834] ====================================================== [ 2488.316906][ T6834] WARNING: possible circular locking dependency detected [ 2488.316913][ T6834] 6.16.0-syzkaller-04405-g4b290aae788e #0 Not tainted [ 2488.316924][ T6834] ------------------------------------------------------ [ 2488.316930][ T6834] syz.3.9294/6834 is trying to acquire lock: [ 2488.316939][ T6834] ffffffff8e4d10e0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 2488.316984][ T6834] [ 2488.316984][ T6834] but task is already holding lock: [ 2488.316989][ T6834] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2488.317028][ T6834] [ 2488.317028][ T6834] which lock already depends on the new lock. [ 2488.317028][ T6834] [ 2488.317034][ T6834] [ 2488.317034][ T6834] the existing dependency chain (in reverse order) is: [ 2488.317039][ T6834] [ 2488.317039][ T6834] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 2488.317059][ T6834] _raw_spin_lock_nested+0x31/0x40 [ 2488.317075][ T6834] raw_spin_rq_lock_nested+0x29/0x130 [ 2488.317094][ T6834] task_rq_lock+0xcf/0x490 [ 2488.317113][ T6834] cgroup_move_task+0x81/0x2a0 [ 2488.317134][ T6834] css_set_move_task+0x288/0x5f0 [ 2488.317150][ T6834] cgroup_post_fork+0x201/0x9e0 [ 2488.317170][ T6834] copy_process+0x5cfa/0x7690 [ 2488.317190][ T6834] kernel_clone+0xfc/0x930 [ 2488.317210][ T6834] user_mode_thread+0xc7/0x110 [ 2488.317230][ T6834] rest_init+0x23/0x2b0 [ 2488.317251][ T6834] start_kernel+0x3ee/0x4d0 [ 2488.317267][ T6834] x86_64_start_reservations+0x18/0x30 [ 2488.317283][ T6834] x86_64_start_kernel+0x130/0x190 [ 2488.317298][ T6834] common_startup_64+0x13e/0x148 [ 2488.317316][ T6834] [ 2488.317316][ T6834] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 2488.317338][ T6834] _raw_spin_lock_irqsave+0x3a/0x60 [ 2488.317353][ T6834] try_to_wake_up+0xb2/0x1680 [ 2488.317371][ T6834] __wake_up_common+0x135/0x1f0 [ 2488.317385][ T6834] __wake_up+0x31/0x60 [ 2488.317405][ T6834] tty_port_default_wakeup+0x2a/0x40 [ 2488.317426][ T6834] serial8250_tx_chars+0x68e/0x860 [ 2488.317448][ T6834] serial8250_handle_irq+0x761/0xcb0 [ 2488.317470][ T6834] serial8250_default_handle_irq+0x9a/0x250 [ 2488.317493][ T6834] serial8250_interrupt+0xf5/0x1b0 [ 2488.317516][ T6834] __handle_irq_event_percpu+0x22c/0x7d0 [ 2488.317536][ T6834] handle_irq_event+0xab/0x1e0 [ 2488.317554][ T6834] handle_edge_irq+0x3b3/0x9d0 [ 2488.317570][ T6834] __common_interrupt+0xe2/0x250 [ 2488.317592][ T6834] common_interrupt+0x61/0xe0 [ 2488.317613][ T6834] asm_common_interrupt+0x26/0x40 [ 2488.317629][ T6834] handle_softirqs+0x1dd/0x8e0 [ 2488.317647][ T6834] __irq_exit_rcu+0x109/0x170 [ 2488.317665][ T6834] irq_exit_rcu+0x9/0x30 [ 2488.317683][ T6834] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2488.317699][ T6834] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2488.317716][ T6834] console_flush_all+0x9a2/0xc60 [ 2488.317734][ T6834] console_unlock+0xd8/0x210 [ 2488.317766][ T6834] vprintk_emit+0x418/0x6d0 [ 2488.317785][ T6834] _printk+0xc7/0x100 [ 2488.317802][ T6834] kauditd_hold_skb+0x205/0x250 [ 2488.317817][ T6834] kauditd_send_queue+0x236/0x290 [ 2488.317841][ T6834] kauditd_thread+0x623/0xa70 [ 2488.317855][ T6834] kthread+0x3c2/0x780 [ 2488.317869][ T6834] ret_from_fork+0x5d7/0x6f0 [ 2488.317883][ T6834] ret_from_fork_asm+0x1a/0x30 [ 2488.317902][ T6834] [ 2488.317902][ T6834] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 2488.317924][ T6834] _raw_spin_lock_irqsave+0x3a/0x60 [ 2488.317939][ T6834] __wake_up+0x1c/0x60 [ 2488.317957][ T6834] tty_port_default_wakeup+0x2a/0x40 [ 2488.317976][ T6834] serial8250_tx_chars+0x68e/0x860 [ 2488.317996][ T6834] serial8250_handle_irq+0x761/0xcb0 [ 2488.318019][ T6834] serial8250_default_handle_irq+0x9a/0x250 [ 2488.318042][ T6834] serial8250_interrupt+0xf5/0x1b0 [ 2488.318064][ T6834] __handle_irq_event_percpu+0x22c/0x7d0 [ 2488.318083][ T6834] handle_irq_event+0xab/0x1e0 [ 2488.318101][ T6834] handle_edge_irq+0x3b3/0x9d0 [ 2488.318118][ T6834] __common_interrupt+0xe2/0x250 [ 2488.318139][ T6834] common_interrupt+0xba/0xe0 [ 2488.318160][ T6834] asm_common_interrupt+0x26/0x40 [ 2488.318175][ T6834] _raw_spin_unlock_irqrestore+0x31/0x80 [ 2488.318191][ T6834] uart_write+0x2a4/0xb30 [ 2488.318208][ T6834] n_tty_write+0x412/0x1160 [ 2488.318230][ T6834] file_tty_write.constprop.0+0x504/0x9b0 [ 2488.318248][ T6834] redirected_tty_write+0xd4/0x150 [ 2488.318267][ T6834] vfs_write+0x6c4/0x1150 [ 2488.318281][ T6834] ksys_write+0x12a/0x250 [ 2488.318294][ T6834] do_syscall_64+0xcd/0x4c0 [ 2488.318312][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.318328][ T6834] [ 2488.318328][ T6834] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 2488.318350][ T6834] _raw_spin_lock_irqsave+0x3a/0x60 [ 2488.318364][ T6834] serial8250_console_write+0x181/0x1890 [ 2488.318388][ T6834] console_flush_all+0x801/0xc60 [ 2488.318406][ T6834] console_unlock+0xd8/0x210 [ 2488.318424][ T6834] vprintk_emit+0x418/0x6d0 [ 2488.318442][ T6834] _printk+0xc7/0x100 [ 2488.318455][ T6834] register_console+0xc2d/0x11b0 [ 2488.318474][ T6834] univ8250_console_init+0x5f/0x90 [ 2488.318491][ T6834] console_init+0x14f/0x680 [ 2488.318507][ T6834] start_kernel+0x29f/0x4d0 [ 2488.318521][ T6834] x86_64_start_reservations+0x18/0x30 [ 2488.318536][ T6834] x86_64_start_kernel+0x130/0x190 [ 2488.318551][ T6834] common_startup_64+0x13e/0x148 [ 2488.318568][ T6834] [ 2488.318568][ T6834] -> #0 (console_owner){-.-.}-{0:0}: [ 2488.318588][ T6834] __lock_acquire+0x126f/0x1c90 [ 2488.318611][ T6834] lock_acquire+0x179/0x350 [ 2488.318624][ T6834] console_lock_spinning_enable+0xb0/0xd0 [ 2488.318643][ T6834] console_flush_all+0x7aa/0xc60 [ 2488.318661][ T6834] console_unlock+0xd8/0x210 [ 2488.318678][ T6834] vprintk_emit+0x418/0x6d0 [ 2488.318696][ T6834] _printk+0xc7/0x100 [ 2488.318709][ T6834] should_fail_ex+0x4e7/0x640 [ 2488.318731][ T6834] strncpy_from_user+0x3b/0x2e0 [ 2488.318749][ T6834] strncpy_from_user_nofault+0x7f/0x180 [ 2488.318769][ T6834] bpf_probe_read_user_str+0x26/0x70 [ 2488.318789][ T6834] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 2488.318804][ T6834] bpf_trace_run4+0x24c/0x5a0 [ 2488.318817][ T6834] __bpf_trace_sched_switch+0x145/0x190 [ 2488.318832][ T6834] __traceiter_sched_switch+0x6c/0xc0 [ 2488.318846][ T6834] __schedule+0x1845/0x5df0 [ 2488.318857][ T6834] preempt_schedule_irq+0x51/0x90 [ 2488.318870][ T6834] irqentry_exit+0x36/0x90 [ 2488.318883][ T6834] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2488.318895][ T6834] __sanitizer_cov_trace_pc+0x0/0x70 [ 2488.318910][ T6834] vfs_write+0x744/0x1150 [ 2488.318920][ T6834] ksys_write+0x12a/0x250 [ 2488.318930][ T6834] do_syscall_64+0xcd/0x4c0 [ 2488.318944][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.318956][ T6834] [ 2488.318956][ T6834] other info that might help us debug this: [ 2488.318956][ T6834] [ 2488.318960][ T6834] Chain exists of: [ 2488.318960][ T6834] console_owner --> &p->pi_lock --> &rq->__lock [ 2488.318960][ T6834] [ 2488.318978][ T6834] Possible unsafe locking scenario: [ 2488.318978][ T6834] [ 2488.318982][ T6834] CPU0 CPU1 [ 2488.318986][ T6834] ---- ---- [ 2488.318989][ T6834] lock(&rq->__lock); [ 2488.318997][ T6834] lock(&p->pi_lock); [ 2488.319005][ T6834] lock(&rq->__lock); [ 2488.319013][ T6834] lock(console_owner); [ 2488.319021][ T6834] [ 2488.319021][ T6834] *** DEADLOCK *** [ 2488.319021][ T6834] [ 2488.319024][ T6834] 6 locks held by syz.3.9294/6834: [ 2488.319031][ T6834] #0: ffff8880255e27f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 2488.319062][ T6834] #1: ffff888055952428 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2488.319091][ T6834] #2: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2488.319122][ T6834] #3: ffffffff8e5c3aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 2488.319151][ T6834] #4: ffffffff8e5b1520 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 2488.319177][ T6834] #5: ffffffff8e5b1590 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 2488.319208][ T6834] [ 2488.319208][ T6834] stack backtrace: [ 2488.319215][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.3.9294 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2488.319232][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2488.319241][ T6834] Call Trace: [ 2488.319245][ T6834] [ 2488.319251][ T6834] dump_stack_lvl+0x116/0x1f0 [ 2488.319267][ T6834] print_circular_bug+0x275/0x350 [ 2488.319287][ T6834] check_noncircular+0x14c/0x170 [ 2488.319309][ T6834] __lock_acquire+0x126f/0x1c90 [ 2488.319333][ T6834] lock_acquire+0x179/0x350 [ 2488.319343][ T6834] ? console_lock_spinning_enable+0x9f/0xd0 [ 2488.319359][ T6834] ? console_lock_spinning_enable+0x88/0xd0 [ 2488.319376][ T6834] console_lock_spinning_enable+0xb0/0xd0 [ 2488.319393][ T6834] ? console_lock_spinning_enable+0x9f/0xd0 [ 2488.319410][ T6834] console_flush_all+0x7aa/0xc60 [ 2488.319429][ T6834] ? __pfx_console_flush_all+0x10/0x10 [ 2488.319451][ T6834] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2488.319466][ T6834] console_unlock+0xd8/0x210 [ 2488.319479][ T6834] ? __pfx_console_unlock+0x10/0x10 [ 2488.319491][ T6834] ? do_raw_spin_unlock+0x160/0x230 [ 2488.319503][ T6834] ? _printk+0xc7/0x100 [ 2488.319512][ T6834] ? __down_trylock_console_sem+0xb0/0x140 [ 2488.319524][ T6834] vprintk_emit+0x418/0x6d0 [ 2488.319537][ T6834] ? __pfx_vprintk_emit+0x10/0x10 [ 2488.319550][ T6834] ? pt_regs_offset+0x63/0x90 [ 2488.319560][ T6834] ? fixup_exception+0x10c/0xbf0 [ 2488.319572][ T6834] ? rcu_is_watching+0x12/0xc0 [ 2488.319586][ T6834] _printk+0xc7/0x100 [ 2488.319595][ T6834] ? __pfx__printk+0x10/0x10 [ 2488.319605][ T6834] ? __pfx____ratelimit+0x10/0x10 [ 2488.319616][ T6834] ? __lock_acquire+0x622/0x1c90 [ 2488.319633][ T6834] should_fail_ex+0x4e7/0x640 [ 2488.319647][ T6834] ? lock_acquire+0x179/0x350 [ 2488.319657][ T6834] strncpy_from_user+0x3b/0x2e0 [ 2488.319669][ T6834] ? lock_acquire+0x179/0x350 [ 2488.319679][ T6834] strncpy_from_user_nofault+0x7f/0x180 [ 2488.319691][ T6834] bpf_probe_read_user_str+0x26/0x70 [ 2488.319707][ T6834] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 2488.319716][ T6834] bpf_trace_run4+0x24c/0x5a0 [ 2488.319727][ T6834] ? __pfx_bpf_trace_run4+0x10/0x10 [ 2488.319740][ T6834] ? __lock_acquire+0xb8a/0x1c90 [ 2488.319757][ T6834] __bpf_trace_sched_switch+0x145/0x190 [ 2488.319770][ T6834] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 2488.319783][ T6834] ? lock_acquire+0x179/0x350 [ 2488.319794][ T6834] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 2488.319814][ T6834] __traceiter_sched_switch+0x6c/0xc0 [ 2488.319824][ T6834] ? set_next_task_rt+0x403/0x6a0 [ 2488.319841][ T6834] __schedule+0x1845/0x5df0 [ 2488.319851][ T6834] ? __pfx__kstrtoull+0x10/0x10 [ 2488.319867][ T6834] ? __pfx___schedule+0x10/0x10 [ 2488.319879][ T6834] ? mark_held_locks+0x49/0x80 [ 2488.319896][ T6834] preempt_schedule_irq+0x51/0x90 [ 2488.319907][ T6834] irqentry_exit+0x36/0x90 [ 2488.319919][ T6834] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2488.319929][ T6834] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 2488.319944][ T6834] Code: 96 b5 54 00 48 89 df 5b e9 5d 3d 5a 00 be 03 00 00 00 5b e9 02 27 25 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 18 37 14 12 65 8b 05 29 37 14 [ 2488.319954][ T6834] RSP: 0018:ffffc90003c67d20 EFLAGS: 00000202 [ 2488.319962][ T6834] RAX: 0000000000000000 RBX: ffff8880255e2700 RCX: ffffffff8232864d [ 2488.319969][ T6834] RDX: ffff88803bc44880 RSI: 0000000000000000 RDI: 0000000000000007 [ 2488.319976][ T6834] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 2488.319982][ T6834] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bc299a0 [ 2488.319989][ T6834] R13: 00007f58ad525090 R14: ffffffff825bf040 R15: 1ffff9200078cfaf [ 2488.319996][ T6834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2488.320009][ T6834] ? vfs_write+0x2ad/0x1150 [ 2488.320019][ T6834] vfs_write+0x744/0x1150 [ 2488.320031][ T6834] ? __pfx___mutex_lock+0x10/0x10 [ 2488.320044][ T6834] ? __pfx_vfs_write+0x10/0x10 [ 2488.320056][ T6834] ? __rcu_read_unlock+0x2b4/0x580 [ 2488.320066][ T6834] ? __fget_files+0x20e/0x3c0 [ 2488.320078][ T6834] ksys_write+0x12a/0x250 [ 2488.320087][ T6834] ? __pfx_ksys_write+0x10/0x10 [ 2488.320098][ T6834] do_syscall_64+0xcd/0x4c0 [ 2488.320111][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.320121][ T6834] RIP: 0033:0x7f58ac78d45f [ 2488.320129][ T6834] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2488.320139][ T6834] RSP: 002b:00007f58ad525030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2488.320149][ T6834] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f58ac78d45f [ 2488.320156][ T6834] RDX: 0000000000000001 RSI: 00007f58ad525090 RDI: 0000000000000006 [ 2488.320162][ T6834] RBP: 00007f58ad525090 R08: 0000000000000000 R09: 00007f58ad524df7 [ 2488.320168][ T6834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2488.320174][ T6834] R13: 0000000000000000 R14: 00007f58ac9b6160 R15: 00007ffdeacdfc38 [ 2488.320184][ T6834] [ 2489.616911][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.3.9294 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2489.616929][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2489.616937][ T6834] Call Trace: [ 2489.616943][ T6834] [ 2489.616949][ T6834] dump_stack_lvl+0x116/0x1f0 [ 2489.616966][ T6834] should_fail_ex+0x512/0x640 [ 2489.616982][ T6834] ? lock_acquire+0x179/0x350 [ 2489.616993][ T6834] strncpy_from_user+0x3b/0x2e0 [ 2489.617006][ T6834] ? lock_acquire+0x179/0x350 [ 2489.617016][ T6834] strncpy_from_user_nofault+0x7f/0x180 [ 2489.617029][ T6834] bpf_probe_read_user_str+0x26/0x70 [ 2489.617048][ T6834] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 2489.617057][ T6834] bpf_trace_run4+0x24c/0x5a0 [ 2489.617070][ T6834] ? __pfx_bpf_trace_run4+0x10/0x10 [ 2489.617083][ T6834] ? __lock_acquire+0xb8a/0x1c90 [ 2489.617101][ T6834] __bpf_trace_sched_switch+0x145/0x190 [ 2489.617116][ T6834] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 2489.617129][ T6834] ? lock_acquire+0x179/0x350 [ 2489.617139][ T6834] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 2489.617155][ T6834] __traceiter_sched_switch+0x6c/0xc0 [ 2489.617167][ T6834] ? set_next_task_rt+0x403/0x6a0 [ 2489.617183][ T6834] __schedule+0x1845/0x5df0 [ 2489.617194][ T6834] ? __pfx__kstrtoull+0x10/0x10 [ 2489.617211][ T6834] ? __pfx___schedule+0x10/0x10 [ 2489.617223][ T6834] ? mark_held_locks+0x49/0x80 [ 2489.617240][ T6834] preempt_schedule_irq+0x51/0x90 [ 2489.617252][ T6834] irqentry_exit+0x36/0x90 [ 2489.617264][ T6834] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2489.617276][ T6834] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 2489.617291][ T6834] Code: 96 b5 54 00 48 89 df 5b e9 5d 3d 5a 00 be 03 00 00 00 5b e9 02 27 25 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 18 37 14 12 65 8b 05 29 37 14 [ 2489.617302][ T6834] RSP: 0018:ffffc90003c67d20 EFLAGS: 00000202 [ 2489.617312][ T6834] RAX: 0000000000000000 RBX: ffff8880255e2700 RCX: ffffffff8232864d [ 2489.617319][ T6834] RDX: ffff88803bc44880 RSI: 0000000000000000 RDI: 0000000000000007 [ 2489.617326][ T6834] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 2489.617332][ T6834] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bc299a0 [ 2489.617339][ T6834] R13: 00007f58ad525090 R14: ffffffff825bf040 R15: 1ffff9200078cfaf [ 2489.617346][ T6834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2489.617359][ T6834] ? vfs_write+0x2ad/0x1150 [ 2489.617371][ T6834] vfs_write+0x744/0x1150 [ 2489.617381][ T6834] ? __pfx___mutex_lock+0x10/0x10 [ 2489.617394][ T6834] ? __pfx_vfs_write+0x10/0x10 [ 2489.617403][ T6834] ? __rcu_read_unlock+0x2b4/0x580 [ 2489.617414][ T6834] ? __fget_files+0x20e/0x3c0 [ 2489.617427][ T6834] ksys_write+0x12a/0x250 [ 2489.617436][ T6834] ? __pfx_ksys_write+0x10/0x10 [ 2489.617447][ T6834] do_syscall_64+0xcd/0x4c0 [ 2489.617461][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2489.617472][ T6834] RIP: 0033:0x7f58ac78d45f [ 2489.617482][ T6834] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2489.617492][ T6834] RSP: 002b:00007f58ad525030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2489.617502][ T6834] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f58ac78d45f [ 2489.617509][ T6834] RDX: 0000000000000001 RSI: 00007f58ad525090 RDI: 0000000000000006 [ 2489.617515][ T6834] RBP: 00007f58ad525090 R08: 0000000000000000 R09: 00007f58ad524df7 [ 2489.617521][ T6834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2489.617528][ T6834] R13: 0000000000000000 R14: 00007f58ac9b6160 R15: 00007ffdeacdfc38 [ 2489.617537][ T6834] [ 2489.983570][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2489.983586][ T30] audit: type=1400 audit(1753883100.890:4978): avc: denied { write } for pid=5808 comm="syz-executor" path="pipe:[3686]" dev="pipefs" ino=3686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2490.842119][ T6820] syz.1.9296: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2490.877867][ T6820] CPU: 0 UID: 0 PID: 6820 Comm: syz.1.9296 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2490.877893][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2490.877901][ T6820] Call Trace: [ 2490.877905][ T6820] [ 2490.877909][ T6820] dump_stack_lvl+0x16c/0x1f0 [ 2490.877926][ T6820] warn_alloc+0x248/0x3a0 [ 2490.877937][ T6820] ? __pfx_warn_alloc+0x10/0x10 [ 2490.877958][ T6820] ? xskq_create+0xfb/0x1d0 [ 2490.877968][ T6820] ? __vmalloc_node_noprof+0xad/0xf0 [ 2490.877985][ T6820] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 2490.878003][ T6820] ? xskq_create+0xfb/0x1d0 [ 2490.878015][ T6820] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2490.878033][ T6820] ? xskq_create+0xfb/0x1d0 [ 2490.878043][ T6820] vmalloc_user_noprof+0x9e/0xe0 [ 2490.878059][ T6820] ? xskq_create+0xfb/0x1d0 [ 2490.878071][ T6820] xskq_create+0xfb/0x1d0 [ 2490.878082][ T6820] xsk_setsockopt+0x684/0x840 [ 2490.878099][ T6820] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2490.878117][ T6820] ? find_held_lock+0x2b/0x80 [ 2490.878132][ T6820] ? selinux_socket_setsockopt+0x6a/0x80 [ 2490.878151][ T6820] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2490.878168][ T6820] do_sock_setsockopt+0xf0/0x1d0 [ 2490.878185][ T6820] __sys_setsockopt+0x1a0/0x230 [ 2490.878198][ T6820] __x64_sys_setsockopt+0xbd/0x160 [ 2490.878211][ T6820] ? do_syscall_64+0x91/0x4c0 [ 2490.878224][ T6820] ? lockdep_hardirqs_on+0x7c/0x110 [ 2490.878236][ T6820] do_syscall_64+0xcd/0x4c0 [ 2490.878249][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2490.878262][ T6820] RIP: 0033:0x7f003a38e9a9 [ 2490.878271][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2490.878283][ T6820] RSP: 002b:00007f003b15c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2490.878295][ T6820] RAX: ffffffffffffffda RBX: 00007f003a5b5fa0 RCX: 00007f003a38e9a9 [ 2490.878302][ T6820] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 2490.878309][ T6820] RBP: 00007f003a410d69 R08: 0000000000000004 R09: 0000000000000000 [ 2490.878316][ T6820] R10: 00002000000016c0 R11: 0000000000000246 R12: 0000000000000000 [ 2490.878323][ T6820] R13: 0000000000000000 R14: 00007f003a5b5fa0 R15: 00007ffd9bbe8488 [ 2490.878333][ T6820] [ 2490.878349][ T6820] Mem-Info: [ 2491.131373][ T6820] active_anon:1843 inactive_anon:2 isolated_anon:0 [ 2491.131373][ T6820] active_file:17491 inactive_file:41547 isolated_file:0 [ 2491.131373][ T6820] unevictable:768 dirty:347 writeback:0 [ 2491.131373][ T6820] slab_reclaimable:12463 slab_unreclaimable:118374 [ 2491.131373][ T6820] mapped:12532 shmem:1392 pagetables:823 [ 2491.131373][ T6820] sec_pagetables:0 bounce:0 [ 2491.131373][ T6820] kernel_misc_reclaimable:0 [ 2491.131373][ T6820] free:1275839 free_pcp:18666 free_cma:0 [ 2491.296238][ T6820] Node 0 active_anon:7372kB inactive_anon:8kB active_file:69892kB inactive_file:165988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:50064kB dirty:1388kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11740kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2491.330551][ T6820] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2491.365096][ T6820] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2491.397630][ T6820] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 2491.403723][ T6820] Node 0 DMA32 free:1239924kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7344kB inactive_anon:8kB active_file:69892kB inactive_file:164664kB unevictable:1536kB writepending:1388kB present:3129332kB managed:2540140kB mlocked:0kB bounce:0kB free_pcp:80320kB local_pcp:59840kB free_cma:0kB [ 2491.437922][ T6820] lowmem_reserve[]: 0 0 1 1 1 [ 2491.442961][ T6820] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 2491.473059][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 2491.477856][ T6820] Node 1 Normal free:3915680kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4324kB local_pcp:228kB free_cma:0kB [ 2491.511495][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 2491.516249][ T6820] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 2491.532275][ T6820] Node 0 DMA32: 8024*4kB (UME) 3567*8kB (UME) 840*16kB (UME) 2903*32kB (UME) 1277*64kB (UME) 620*128kB (UME) 312*256kB (UM) 79*512kB (UM) 37*1024kB (UME) 4*2048kB (UME) 184*4096kB (UM) = 1248120kB [ 2491.563225][ T6820] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2491.576432][ T6820] Node 1 Normal: 175*4kB (UE) 51*8kB (UE) 45*16kB (UME) 213*32kB (UME) 103*64kB (UME) 24*128kB (UME) 17*256kB (UME) 8*512kB (UM) 2*1024kB (ME) 8*2048kB (UME) 945*4096kB (M) = 3915908kB [ 2491.599871][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.609673][ T6820] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2491.619120][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.628671][ T6820] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2491.638100][ T6820] 58816 total pagecache pages [ 2491.656481][ T6820] 2 pages in swap cache [ 2491.660764][ T6820] Free swap = 124988kB [ 2491.664953][ T6820] Total swap = 124996kB [ 2491.670062][ T6820] 2097051 pages RAM [ 2491.673908][ T6820] 0 pages HighMem/MovableOnly [ 2491.678597][ T6820] 430038 pages reserved [ 2491.683079][ T6820] 0 pages cma reserved [ 2491.697964][T27933] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.792563][T27933] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.900919][T27933] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.002042][T27933] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.073539][T27933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.173157][T27933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.222730][T27933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.267126][T27933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.311998][T27933] bridge_slave_1: left allmulticast mode [ 2492.317776][T27933] bridge_slave_1: left promiscuous mode [ 2492.323518][T27933] bridge0: port 2(bridge_slave_1) entered disabled state [ 2492.331869][T27933] bridge_slave_0: left allmulticast mode [ 2492.337498][T27933] bridge_slave_0: left promiscuous mode [ 2492.343269][T27933] bridge0: port 1(bridge_slave_0) entered disabled state [ 2492.435580][T27933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2492.446978][T27933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2492.456953][T27933] bond0 (unregistering): Released all slaves [ 2492.481839][T27933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2492.491278][T27933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2492.500620][T27933] bond0 (unregistering): Released all slaves [ 2492.508507][T27933] bond1 (unregistering): Released all slaves [ 2494.100545][T27933] hsr_slave_0: left promiscuous mode [ 2494.106154][T27933] hsr_slave_1: left promiscuous mode [ 2494.112265][T27933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2494.119821][T27933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2494.127297][T27933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2494.135811][T27933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2494.145326][T27933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2494.152956][T27933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2494.160861][T27933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2494.168231][T27933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2494.179623][T27933] veth1_macvtap: left promiscuous mode [ 2494.185104][T27933] veth0_macvtap: left promiscuous mode [ 2494.190717][T27933] veth1_vlan: left promiscuous mode [ 2494.195967][T27933] veth0_vlan: left promiscuous mode [ 2494.201915][T27933] veth1_macvtap: left allmulticast mode [ 2494.207524][T27933] veth1_macvtap: left promiscuous mode [ 2494.213311][T27933] veth0_macvtap: left promiscuous mode [ 2494.218899][T27933] veth1_vlan: left promiscuous mode [ 2494.224114][T27933] veth0_vlan: left promiscuous mode [ 2494.336996][T27933] team0 (unregistering): Port device team_slave_1 removed [ 2494.362579][T27933] team0 (unregistering): Port device team_slave_0 removed [ 2494.496848][T27933] team0 (unregistering): Port device team_slave_1 removed [ 2494.525058][T27933] team0 (unregistering): Port device team_slave_0 removed [ 2494.607112][ T6569] lo speed is unknown, defaulting to 1000 [ 2494.613049][ T6569] infiniband 3yz0: ib_query_port failed (-19) [ 2495.124696][ T5391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.162499][ T5391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.212306][ T5391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.252023][ T5391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.311651][ T5391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.371738][ T5391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.421292][ T5391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.472627][ T5391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.522148][ T5391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.572660][ T5391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.631556][ T5391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.681219][ T5391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.730867][ T5391] bridge_slave_1: left allmulticast mode [ 2495.736550][ T5391] bridge_slave_1: left promiscuous mode [ 2495.742304][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 2495.750616][ T5391] bridge_slave_0: left allmulticast mode [ 2495.756251][ T5391] bridge_slave_0: left promiscuous mode [ 2495.762085][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 2495.770495][ T5391] bridge_slave_1: left allmulticast mode [ 2495.776123][ T5391] bridge_slave_1: left promiscuous mode [ 2495.782435][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 2495.790513][ T5391] bridge_slave_0: left allmulticast mode [ 2495.796450][ T5391] bridge_slave_0: left promiscuous mode [ 2495.802289][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 2495.810788][ T5391] bridge_slave_1: left allmulticast mode [ 2495.816416][ T5391] bridge_slave_1: left promiscuous mode [ 2495.822099][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 2495.830269][ T5391] bridge_slave_0: left allmulticast mode [ 2495.835899][ T5391] bridge_slave_0: left promiscuous mode [ 2495.841654][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 2495.932744][ T5391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2495.942686][ T5391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2495.952558][ T5391] bond0 (unregistering): Released all slaves [ 2496.032826][ T5391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2496.042257][ T5391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2496.052663][ T5391] bond0 (unregistering): Released all slaves [ 2496.113659][ T5391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2496.123088][ T5391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2496.132311][ T5391] bond0 (unregistering): Released all slaves [ 2496.739406][ T5391] hsr_slave_0: left promiscuous mode [ 2496.744987][ T5391] hsr_slave_1: left promiscuous mode [ 2496.750816][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2496.758216][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2496.765992][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2496.774400][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2496.783603][ T5391] hsr_slave_0: left promiscuous mode [ 2496.789341][ T5391] hsr_slave_1: left promiscuous mode [ 2496.794900][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2496.802351][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2496.809822][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2496.817203][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2496.826247][ T5391] hsr_slave_0: left promiscuous mode [ 2496.831867][ T5391] hsr_slave_1: left promiscuous mode [ 2496.837805][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2496.845288][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2496.852764][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2496.860235][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2496.871846][ T5391] veth1_macvtap: left promiscuous mode [ 2496.877338][ T5391] veth0_macvtap: left promiscuous mode [ 2496.883127][ T5391] veth1_vlan: left promiscuous mode [ 2496.888353][ T5391] veth0_vlan: left promiscuous mode [ 2496.894176][ T5391] veth1_macvtap: left promiscuous mode [ 2496.899710][ T5391] veth0_macvtap: left promiscuous mode [ 2496.905197][ T5391] veth1_vlan: left promiscuous mode [ 2496.910726][ T5391] veth0_vlan: left promiscuous mode [ 2496.916385][ T5391] veth1_macvtap: left promiscuous mode [ 2496.922053][ T5391] veth0_macvtap: left promiscuous mode [ 2496.927558][ T5391] veth1_vlan: left promiscuous mode [ 2496.932881][ T5391] veth0_vlan: left promiscuous mode [ 2497.083505][ T5391] team0 (unregistering): Port device team_slave_1 removed [ 2497.094615][ T5391] team0 (unregistering): Port device team_slave_0 removed [ 2497.221039][ T5391] team0 (unregistering): Port device team_slave_1 removed [ 2497.231562][ T5391] team0 (unregistering): Port device team_slave_0 removed [ 2497.395511][ T5391] team0 (unregistering): Port device team_slave_1 removed [ 2497.422217][ T5391] team0 (unregistering): Port device team_slave_0 removed