last executing test programs: 1m46.045351101s ago: executing program 3 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init1(0x80000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 1m44.763461532s ago: executing program 3 (id=727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x10001, &(0x7f0000000180)={[0xffffffffe277652b]}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x568, 0xffffffff, 0x268, 0x268, 0x120, 0xffffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@ipv6header={{0x28}, {0x20, 0x14}}]}, @REJECT={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x7fffffff, 0xffffffff], 'ipvlan0\x00', 'veth1_to_bond\x00', {}, {}, 0x2, 0xd, 0x1, 0x1}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@srh={{0x30}, {0x0, 0xf, 0x8, 0x6e, 0x5, 0x1000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0xb6b}}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x4ad, [0x4, 0x1ff], 0x100, 0x4, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @dev={0xfe, 0x80, '\x00', 0x23}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private0, @local, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback], 0xd}}, @common=@inet=@socket3={{0x28}, 0x1}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r3, 0x0, 0x0, 0x400c001, 0x0, 0x0) 1m44.521390649s ago: executing program 3 (id=728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1, 0x0, 0x7fffffff) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) 1m44.44834722s ago: executing program 3 (id=729): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r0, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x80010, r1, 0x75819000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) open(&(0x7f0000000140)='./file0/file0\x00', 0x40080, 0x8) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m43.365477383s ago: executing program 3 (id=734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x145}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 1m42.073141459s ago: executing program 3 (id=739): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8002, 0x2e4201) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x2b, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@exit, @ldst={0x1, 0x2, 0x6, 0x5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcf9}}, @call={0x85, 0x0, 0x0, 0xa6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x8, 0x1, 0x0, 0xfffffffffffffff8, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x405}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@x}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$EVIOCGSW(r5, 0x8040451b, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m41.831893s ago: executing program 32 (id=739): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8002, 0x2e4201) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x2b, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@exit, @ldst={0x1, 0x2, 0x6, 0x5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcf9}}, @call={0x85, 0x0, 0x0, 0xa6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x8, 0x1, 0x0, 0xfffffffffffffff8, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x405}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@x}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$EVIOCGSW(r5, 0x8040451b, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m27.533322944s ago: executing program 4 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000007c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) mmap(&(0x7f00005db000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x587e1000) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = dup2(r3, r2) readv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) 1m27.264165666s ago: executing program 4 (id=784): r0 = syz_open_dev$sg(0x0, 0x6, 0x80005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) ioctl$SG_IO(r0, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) write(r5, &(0x7f0000000200)='~', 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000ac1e001901000000030000000a01017b7e00"], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m21.396643036s ago: executing program 4 (id=792): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0x9, 0x0, 0x4}, {0x0, 0x6, 0xf, 0xd9}, {0x8, 0xfe, 0x9}, {0x2, 0x1, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r0, 0x7fff, 0x80000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2801\x00', [0x4f27, 0x5, 0x3, 0x4008004, 0x5, 0xcc9, 0xf, 0x2fd0, 0xa, 0x8001, 0x2, 0xfffffff9, 0xfffffffe, 0x1, 0x3, 0x105, 0x0, 0x3a449, 0x3, 0x8, 0x99, 0x8, 0x0, 0x20001e58, 0x7, 0xe69, 0x1, 0x6, 0x7, 0x0, 0xfffffff8]}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r3, 0x1, &(0x7f0000000a00)=[0x0]) r4 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') r5 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r6 = memfd_create(&(0x7f0000000e80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000080)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000000000003eee", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700fe8000000000000000000000000000bb"], 0x48}, 0x9}, 0x40040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xb, 0x0, 0xff00, 0x8, 0x8, 0x3, 0x0, 0x0, 0x2, 0x4}}, 0x50) r6 = io_uring_setup(0x3450, &(0x7f0000000300)={0x0, 0x1538, 0x0, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f00000014c0)=""/4126, 0x101e}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) getdents(r0, 0x0, 0x0) 1m1.173565856s ago: executing program 4 (id=813): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290027bd7000ffdbdf250f00000008000300", @ANYRES32=r4, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d04700847610000000109021200010000000009"], 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="b00001080211000001080211000000100000000200000000000000000000da004eb342adb60d46cc84d7a277ad2f51b5ed41e8a4dd3da0d7370d585ac359949ba019d984d974d296c882bac812101f593b390206d65cf3bad27e12e52eb647d8dfeff14daadece5730decfc421ff8f2adea8cd5489a6148e3613f3d8589a1d2fb983f3a6b72bdceeefa3c9f26cd60b04cc04dffa46b5d74d2b44c50420d6b2b4924064cf1431276a30015b9eb3b22192be4f69561b6548610f1e3433b4c1f606719a00cb7612f422a079cb01f040aecb84c566897b9e42cc"], 0x1e) syz_io_uring_setup(0x2480, &(0x7f00000000c0)={0x0, 0x9721, 0x10, 0x0, 0x31e}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x110, &(0x7f0000000440)=0x7, 0x0, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000500)={0x28, 0x5, 0x0, 0x0, &(0x7f0000e35000/0x3000)=nil, 0x3000, 0x80000001}) syz_usb_control_io(r7, 0x0, 0x0) 1m0.601870023s ago: executing program 2 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) write$FUSE_INIT(r1, &(0x7f00000007c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) mmap(&(0x7f00005db000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x587e1000) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = dup2(r4, r3) readv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) 49.052170068s ago: executing program 2 (id=818): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) syz_kvm_add_vcpu$x86(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x3f000000}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20) timer_create(0x4, &(0x7f00000005c0)={0x0, 0xf, 0x4, @thr={&(0x7f0000000380), &(0x7f0000000540)="3b2255ab433796a2137cd114085cb2d95e949d236abdba2288a63ed133393ff9a8d79b83c0b87314fa4a8dfdcae54295db8d83ed7c95f2e25381fab73e575abb932d3d3e1a948808121f0f520a2c590a038418b9904c2abc3980fe3b4b135acaf65b18bf4a65184eeef8b05e4c0a0fe0757b4e8bf5eaad76f88a"}}, &(0x7f0000000600)=0x0) timer_settime(r6, 0x0, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f00000006c0)="3baf14db9d5ec139b6e7da7044bf1bf7", 0x10}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB="687567653d616c4120e079732c73697a653d382c00"]) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x101, 0x2}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000300)={r10, 0x1}, 0x8) 45.582440808s ago: executing program 33 (id=813): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290027bd7000ffdbdf250f00000008000300", @ANYRES32=r4, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d04700847610000000109021200010000000009"], 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="b00001080211000001080211000000100000000200000000000000000000da004eb342adb60d46cc84d7a277ad2f51b5ed41e8a4dd3da0d7370d585ac359949ba019d984d974d296c882bac812101f593b390206d65cf3bad27e12e52eb647d8dfeff14daadece5730decfc421ff8f2adea8cd5489a6148e3613f3d8589a1d2fb983f3a6b72bdceeefa3c9f26cd60b04cc04dffa46b5d74d2b44c50420d6b2b4924064cf1431276a30015b9eb3b22192be4f69561b6548610f1e3433b4c1f606719a00cb7612f422a079cb01f040aecb84c566897b9e42cc"], 0x1e) syz_io_uring_setup(0x2480, &(0x7f00000000c0)={0x0, 0x9721, 0x10, 0x0, 0x31e}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x110, &(0x7f0000000440)=0x7, 0x0, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000500)={0x28, 0x5, 0x0, 0x0, &(0x7f0000e35000/0x3000)=nil, 0x3000, 0x80000001}) syz_usb_control_io(r7, 0x0, 0x0) 44.66313682s ago: executing program 2 (id=822): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x5, 0x4, 0x3c, 0x7}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24040015}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x60) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) socket$igmp6(0xa, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000390427bd7000fedbdf2500000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000f3000000000000002b800800030018000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4008490}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRESDEC=r3], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES16=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000001000109a0000000000002000000000000000"], 0x24, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='ext4_allocate_blocks\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) 44.043429481s ago: executing program 1 (id=825): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000040)={'dac02\x00', [0x6, 0x2, 0x8, 0x6, 0x3, 0xf02, 0x848, 0xc, 0x6, 0x9, 0x81, 0x9, 0x7, 0x0, 0x4, 0x9, 0x7, 0x7, 0x2, 0x3ff, 0xd, 0x1000, 0x7, 0x6, 0xf7, 0x3ff, 0x2, 0x80000001, 0x40, 0xd9fe, 0x1f6b, 0x3]}) r1 = socket$netlink(0x10, 0x3, 0x4) syz_open_dev$MSR(&(0x7f0000000100), 0x47c8dba5, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x8, 0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000240)={0x0, 0x0, r5}) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000280)='syz0\x00') lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r6, r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) pwrite64(r2, &(0x7f0000000440)="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", 0x1000, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000010) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001540), 0x212b00, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, 0x17, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c001}, 0x44) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0xd, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000001880)=""/211, 0x28, 0xd3, 0x1, 0x5, 0x10000, @value=r4}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a40)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xf, 0x8, &(0x7f00000016c0)=@raw=[@exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @ldst={0x0, 0x3, 0x3, 0x2, 0x3, 0xfffffffffffffff4, 0x10}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}], &(0x7f0000001700)='syzkaller\x00', 0x9, 0xe0, &(0x7f0000001740)=""/224, 0x41000, 0x6, '\x00', 0x0, @cgroup_device=0x6, r8, 0x8, &(0x7f00000019c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x4, 0x3, 0x2, 0x7}, 0x10, r9, r4, 0x8, &(0x7f0000001a80)=[r4, r4, r4], &(0x7f0000001ac0)=[{0x2, 0x5, 0xc, 0x5}, {0x0, 0x3, 0x2, 0x6}, {0x3, 0x4, 0x5, 0x4}, {0x3, 0x1, 0x9, 0x6}, {0x0, 0x5, 0x0, 0xa}, {0x2, 0x3, 0x3, 0xc}, {0x1, 0x2, 0x4, 0xa}, {0x0, 0x5, 0xc, 0x4}], 0x10, 0x7f}, 0x94) r10 = syz_open_dev$mouse(&(0x7f0000001c00), 0x6, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r4, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001cc0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x60, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40050}, 0x1010) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001e00)={0x10002, 0x2, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) setsockopt$RDS_GET_MR(r10, 0x114, 0x2, &(0x7f0000001ec0)={{&(0x7f0000001e40)=""/15, 0xf}, &(0x7f0000001e80), 0x40}, 0x20) getpgrp(0xffffffffffffffff) 41.201915671s ago: executing program 1 (id=826): futex(0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) semget(0x0, 0x2, 0x2c0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x24dc, &(0x7f0000000340)={0x0, 0x91de, 0x2, 0xfffffffd, 0x16a}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYBLOB="05000afc66343218dfcc9ae9"], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 40.373213125s ago: executing program 1 (id=828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "bb04"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1f, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 39.043607893s ago: executing program 1 (id=830): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021820f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) 38.497784981s ago: executing program 2 (id=831): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x80b, 0x0, 0x0, 0x82, 0x4, 0x15c6, 0x5886, 0x101, 0x447ee642794ab667, 0x7, 'syz1\x00'}) (fail_nth: 1) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6fdd0000000000000000010000000400048008000200010000000800010000000000180008db1400078008000600fa00000008000600bd000000"], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003e000701fec64973db4d74acbc3b4245ffffff00000000017c00000c004280080007800400fb800c00018006"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4a183, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r8, 0x40204706, &(0x7f00000000c0)={0x1, 0xc8a9, 0x5, 0x1, 0x0, "3eccd8f9d200000500"}) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) 37.567862388s ago: executing program 0 (id=832): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) (async, rerun: 64) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (rerun: 64) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) (async) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) (async) dup3(r6, r4, 0x80000) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) unshare(0x8000000) (async) shmget$private(0x0, 0x4000, 0x4800, &(0x7f0000ffb000/0x4000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e30, @loopback}, 0x2, 0x0, 0x1}}, 0x2e) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0x8000201d}) 37.468473364s ago: executing program 2 (id=833): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x121000, 0x10, 0x6}, 0x18) open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x9000) setsockopt$sock_attach_bpf(r3, 0x110, 0x3c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000ffdbdf250200000008000300", @ANYRES32=r6, @ANYRESOCT=r4, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x9, 0x2, 0xf, 0x1, 0x3ff, 0x0}) syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a000005"], 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000400000014000500fc010c0000000000000000000000000008000200050000001c0006"], 0x4c}}, 0x0) ptrace$getregset(0x4204, r7, 0x4, &(0x7f0000000180)={&(0x7f0000000140)=""/59, 0x3b}) 36.888188179s ago: executing program 0 (id=834): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x2, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xfcfd}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 36.369087869s ago: executing program 0 (id=835): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018f9ff00000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) 36.327575811s ago: executing program 0 (id=836): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1, 0xe0, 0x5, {0x0, 0x2710}, {0x77359400}, {0x0, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "5e09ffe25b2691e1"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x488c5) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="a8"]) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x0, 0x8000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x5400, 0x0) 35.564575934s ago: executing program 2 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xc}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x2e4, 0x4) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)=0x7, 0x4) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r8, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x11c000, 0x800}, 0x1c) r10 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1028, 0x1, 0x11, r10, 0x82000000) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r11, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) open_tree(r11, &(0x7f0000000040)='./file0\x00', 0x80000) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 35.308956365s ago: executing program 0 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0x2e, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000580)={r5, r7}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xfffff010}, {0x6}]}, 0x10) 35.005946263s ago: executing program 1 (id=839): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0x20003, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r3, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0x9) fallocate(r4, 0x0, 0x0, 0x400001) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, 0x0, 0x14) syz_clone3(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @ioapic={0x1, 0xd766, 0x4f9, 0x7ff, 0x0, [{0x7a, 0x80, 0x1, '\x00', 0x5}, {0x3, 0x4, 0x0, '\x00', 0xff}, {0x8, 0x70, 0x2, '\x00', 0x8}, {0xc0, 0x6, 0x5, '\x00', 0x9}, {0xff, 0x2d, 0x2, '\x00', 0x81}, {0xfe, 0x0, 0x10, '\x00', 0x48}, {0xe, 0xc, 0x1, '\x00', 0xff}, {0xb, 0x2, 0x5, '\x00', 0x93}, {0x1, 0x6, 0x5, '\x00', 0x9}, {0x40, 0x4, 0xf, '\x00', 0xff}, {0x8, 0x51, 0x8}, {0x9, 0xff, 0x3, '\x00', 0x8}, {0x8, 0x7, 0x4, '\x00', 0x3}, {0x9, 0x9, 0x7f, '\x00', 0x40}, {0x1e, 0x5, 0xe, '\x00', 0x96}, {0x9, 0x6, 0x9, '\x00', 0xff}, {0x1, 0x8, 0x7, '\x00', 0x7f}, {0x6, 0xb1, 0x4, '\x00', 0x8}, {0x93, 0x1d, 0x9, '\x00', 0xf8}, {0x7d, 0x46, 0x2, '\x00', 0x1}, {0xc, 0x3, 0xdb, '\x00', 0x20}, {0x6, 0xf, 0xe, '\x00', 0x16}, {0xd, 0x7, 0xf7, '\x00', 0x8}, {0xf, 0xa6, 0x2, '\x00', 0xd}]}}) ioperm(0x0, 0x6, 0x7) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0xfffffffc}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0xb}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 34.802625065s ago: executing program 1 (id=840): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0x9, 0x0, 0x4}, {0x0, 0x6, 0xf, 0xd9}, {0x8, 0xfe, 0x9}, {0x2, 0x1, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r0, 0x7fff, 0x80000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2801\x00', [0x4f27, 0x5, 0x3, 0x4008004, 0x5, 0xcc9, 0xf, 0x2fd0, 0xa, 0x8001, 0x2, 0xfffffff9, 0xfffffffe, 0x1, 0x3, 0x105, 0x0, 0x3a449, 0x3, 0x8, 0x99, 0x8, 0x0, 0x20001e58, 0x7, 0xe69, 0x1, 0x6, 0x7, 0x0, 0xfffffff8]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r4, 0x1, &(0x7f0000000a00)=[0x0]) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') r6 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r7 = memfd_create(&(0x7f0000000e80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000306010400000000000000000200000605000100070000000900020073797a31000000000500010007000016f604477d46aa50f114a88373b89fbc"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40048d0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20842, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x150, 0x1403, 0x400, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x400c054}, 0x4000000) 0s ago: executing program 34 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000306010400000000000000000200000605000100070000000900020073797a31000000000500010007000016f604477d46aa50f114a88373b89fbc"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40048d0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20842, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x150, 0x1403, 0x400, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x400c054}, 0x4000000) kernel console output (not intermixed with test programs): rawip_socket permissive=1 [ 162.915963][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.938704][ T7181] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.115818][ T7181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.195177][ T7195] bridge0: entered promiscuous mode [ 163.200876][ T7195] macvlan2: entered promiscuous mode [ 163.300900][ T7199] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 163.300900][ T7199] program syz.3.354 not setting count and/or reply_len properly [ 164.760886][ T7207] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 164.767520][ T7207] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.788595][ T7207] vhci_hcd vhci_hcd.0: Device attached [ 164.843637][ T7212] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 164.850289][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.017053][ T5947] vhci_hcd: vhci_device speed not set [ 165.076364][ T5947] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 165.481832][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 165.507690][ T7207] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.562280][ T7212] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 165.568915][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.603727][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 165.721635][ T7207] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 165.728283][ T7207] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.736447][ T7207] vhci_hcd vhci_hcd.0: Device attached [ 166.184971][ T7223] syz.0.361 (7223): drop_caches: 1 [ 166.211518][ T7223] syz.0.361 (7223): drop_caches: 1 [ 166.270135][ T7212] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(23) [ 166.276759][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 166.311521][ T7207] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 166.422149][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 166.886394][ T7236] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 166.956724][ T7207] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 167.020933][ T7207] vhci_hcd vhci_hcd.0: port 0 already used [ 167.033133][ T7224] vhci_hcd: connection closed [ 167.033195][ T7219] vhci_hcd: connection closed [ 167.039753][ T3566] vhci_hcd: stop threads [ 167.044189][ T7230] vhci_hcd: connection closed [ 167.048960][ T7209] vhci_hcd: connection reset by peer [ 167.051401][ T3566] vhci_hcd: release socket [ 167.053742][ T7213] vhci_hcd: connection closed [ 167.165322][ T7242] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20005 [ 167.179674][ T3566] vhci_hcd: disconnect device [ 167.197759][ T3566] vhci_hcd: stop threads [ 167.202024][ T3566] vhci_hcd: release socket [ 167.216489][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 167.226693][ T30] audit: type=1400 audit(1753469691.465:470): avc: denied { ioctl } for pid=7241 comm="syz.2.363" path="socket:[12502]" dev="sockfs" ino=12502 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.257237][ T3566] vhci_hcd: disconnect device [ 167.283421][ T3566] vhci_hcd: stop threads [ 167.307550][ T3566] vhci_hcd: release socket [ 167.307581][ T3566] vhci_hcd: disconnect device [ 167.307875][ T3566] vhci_hcd: stop threads [ 167.307883][ T3566] vhci_hcd: release socket [ 167.307908][ T3566] vhci_hcd: disconnect device [ 167.310462][ T3566] vhci_hcd: stop threads [ 167.310477][ T3566] vhci_hcd: release socket [ 167.310517][ T3566] vhci_hcd: disconnect device [ 167.344857][ T7242] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 167.352069][ T7241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.426272][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 167.427789][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.427833][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 167.427859][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 167.427890][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.430510][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 167.430537][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.430556][ T43] usb 1-1: Product: syz [ 167.430570][ T43] usb 1-1: Manufacturer: syz [ 167.430585][ T43] usb 1-1: SerialNumber: syz [ 167.462525][ T43] usb 1-1: config 0 descriptor?? [ 168.009088][ T30] audit: type=1400 audit(1753469691.865:471): avc: denied { getopt } for pid=7246 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.496359][ T43] rc_core: IR keymap rc-xbox-dvd not found [ 168.502224][ T43] Registered IR keymap rc-empty [ 168.564166][ T7262] bridge1: entered allmulticast mode [ 168.647120][ T43] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 168.666514][ T43] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 168.693392][ T7257] bridge2: entered allmulticast mode [ 169.021517][ T7269] 9pnet_fd: Insufficient options for proto=fd [ 169.080523][ T7268] Cannot find del_set index 514 as target [ 169.100858][ T30] audit: type=1400 audit(1753469693.265:472): avc: denied { name_connect } for pid=7266 comm="syz.2.369" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 169.332400][ T30] audit: type=1400 audit(1753469693.335:473): avc: denied { write } for pid=7266 comm="syz.2.369" dev="sockfs" ino=11903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.403567][ T5154] Bluetooth: hci0: command tx timeout [ 169.457982][ T30] audit: type=1400 audit(1753469693.525:474): avc: denied { create } for pid=7259 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.533556][ T30] audit: type=1400 audit(1753469693.535:475): avc: denied { ioctl } for pid=7259 comm="syz.1.367" path="socket:[11980]" dev="sockfs" ino=11980 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.565974][ T74] wlan0: Trigger new scan to find an IBSS to join [ 169.671008][ T7280] syz.3.372 (7280): drop_caches: 1 [ 169.710474][ T7280] syz.3.372 (7280): drop_caches: 1 [ 169.853546][ T30] audit: type=1400 audit(1753469694.085:476): avc: denied { mount } for pid=7284 comm="syz.4.374" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 169.896244][ T30] audit: type=1400 audit(1753469694.125:477): avc: denied { search } for pid=7284 comm="syz.4.374" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.934414][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 169.943448][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 169.963010][ T30] audit: type=1400 audit(1753469694.125:478): avc: denied { search } for pid=7284 comm="syz.4.374" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.992172][ T7286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.031339][ T10] usb 1-1: USB disconnect, device number 18 [ 170.031474][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 170.060533][ T30] audit: type=1400 audit(1753469694.125:479): avc: denied { search } for pid=7284 comm="syz.4.374" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.415942][ T30] audit: type=1400 audit(1753469694.125:480): avc: denied { shutdown } for pid=7284 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.520802][ T7295] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 170.527450][ T7295] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.556660][ T7295] vhci_hcd vhci_hcd.0: Device attached [ 170.586287][ T5947] vhci_hcd: vhci_device speed not set [ 170.629794][ T7298] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 170.636438][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.646954][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 170.673856][ T7295] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.688787][ T7295] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 170.695420][ T7295] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.722471][ T7295] vhci_hcd vhci_hcd.0: Device attached [ 170.736702][ T7295] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 170.743327][ T7295] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.750909][ T1997] vhci_hcd: vhci_device speed not set [ 170.756831][ T7295] vhci_hcd vhci_hcd.0: Device attached [ 170.779506][ T7295] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(22) [ 170.786121][ T7295] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.794788][ T7295] vhci_hcd vhci_hcd.0: Device attached [ 170.802084][ T7295] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.812049][ T7295] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.833686][ T7295] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.862862][ T1997] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 170.907031][ T7298] vhci_hcd vhci_hcd.0: port 0 already used [ 171.261235][ T7305] vhci_hcd: connection closed [ 171.261399][ T7301] vhci_hcd: connection closed [ 171.261429][ T7303] vhci_hcd: connection closed [ 171.267085][ T7299] vhci_hcd: connection closed [ 171.271315][ T7296] vhci_hcd: connection reset by peer [ 171.275551][ T3566] vhci_hcd: stop threads [ 171.348523][ T3566] vhci_hcd: release socket [ 171.376265][ T3566] vhci_hcd: disconnect device [ 171.395287][ T3566] vhci_hcd: stop threads [ 171.412866][ T3566] vhci_hcd: release socket [ 171.423404][ T3566] vhci_hcd: disconnect device [ 171.433759][ T3566] vhci_hcd: stop threads [ 171.445481][ T3566] vhci_hcd: release socket [ 171.468816][ T3566] vhci_hcd: disconnect device [ 171.486015][ T3566] vhci_hcd: stop threads [ 171.506025][ T3566] vhci_hcd: release socket [ 171.523970][ T3566] vhci_hcd: disconnect device [ 171.526325][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.551223][ T3566] vhci_hcd: stop threads [ 171.559092][ T3566] vhci_hcd: release socket [ 171.563621][ T3566] vhci_hcd: disconnect device [ 171.757485][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 171.909488][ T5888] usb 4-1: config 4 has an invalid interface number: 118 but max is 0 [ 171.926612][ T5946] usb usb40-port1: attempt power cycle [ 171.953323][ T5888] usb 4-1: config 4 has no interface number 0 [ 171.970258][ T5888] usb 4-1: config 4 interface 118 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 64 [ 171.986528][ T5888] usb 4-1: config 4 interface 118 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 172.006377][ T5888] usb 4-1: config 4 interface 118 has no altsetting 0 [ 172.025371][ T5888] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=d2.65 [ 172.046283][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.120468][ T5888] usb 4-1: Product: syz [ 172.317174][ T7331] syz.2.386 (7331): drop_caches: 1 [ 172.349355][ T7331] syz.2.386 (7331): drop_caches: 1 [ 172.804470][ T5888] usb 4-1: Manufacturer: syz [ 172.903270][ T5888] usb 4-1: SerialNumber: syz [ 172.933859][ T7340] bridge1: entered allmulticast mode [ 172.934176][ T7341] xt_hashlimit: max too large, truncated to 1048576 [ 173.051335][ T7313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.059509][ T7313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.071550][ T5888] kvaser_usb 4-1:4.118: error -ENODEV: Cannot get usb endpoint(s) [ 173.081466][ T5946] usb usb40-port1: unable to enumerate USB device [ 173.164117][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 173.164132][ T30] audit: type=1326 audit(1753469697.395:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 173.289162][ T30] audit: type=1326 audit(1753469697.445:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 173.317967][ T30] audit: type=1326 audit(1753469697.445:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 173.351731][ T30] audit: type=1326 audit(1753469697.445:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 173.379037][ T7329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.388706][ T7329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.417901][ T7329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.423899][ T7329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.436284][ T30] audit: type=1326 audit(1753469697.445:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 173.459878][ T30] audit: type=1326 audit(1753469697.445:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 173.486294][ T30] audit: type=1326 audit(1753469697.445:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 173.490132][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.512605][ T30] audit: type=1326 audit(1753469697.445:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 173.580387][ T3532] wlan0: Trigger new scan to find an IBSS to join [ 173.617889][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.658980][ T7347] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 173.668569][ T5888] IPVS: starting estimator thread 0... [ 173.871616][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.006744][ T7353] IPVS: using max 44 ests per chain, 105600 per kthread [ 174.015954][ T7360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.234283][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.285567][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.669765][ T30] audit: type=1326 audit(1753469697.445:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 174.673465][ T5946] usb 4-1: USB disconnect, device number 7 [ 174.693854][ T30] audit: type=1326 audit(1753469697.445:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876718e9a9 code=0x7ffc0000 [ 175.234659][ T6281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.396271][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.476445][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.482519][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.056293][ T1997] vhci_hcd: vhci_device speed not set [ 176.636619][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.772116][ T7396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.806413][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 176.874776][ T5888] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.892969][ T5888] usb 2-1: config 1 has no interface number 1 [ 176.907872][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 176.942837][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.953144][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.970265][ T7397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.973109][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 176.987021][ T5888] usb 2-1: Product: syz [ 177.128533][ T5888] usb 2-1: Manufacturer: syz [ 177.134350][ T5888] usb 2-1: SerialNumber: syz [ 177.159576][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 177.212859][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 177.327601][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 177.416492][ T5888] usb 2-1: 2:1 : sample bitwidth 64 in over sample bytes 4 [ 177.439065][ T5888] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 177.530805][ T5888] usb 2-1: USB disconnect, device number 12 [ 177.593268][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.851310][ T7403] syz.0.401 (7403): drop_caches: 1 [ 177.876981][ T7403] syz.0.401 (7403): drop_caches: 1 [ 177.920229][ T10] usb usb42-port1: attempt power cycle [ 178.284307][ T7413] netlink: 48 bytes leftover after parsing attributes in process `syz.1.403'. [ 178.294314][ T7410] : entered promiscuous mode [ 178.370961][ T7412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.625300][ T10] usb usb42-port1: unable to enumerate USB device [ 178.749776][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 178.759461][ T7418] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 178.767209][ T7418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.229450][ T7405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.264995][ T7422] tipc: Started in network mode [ 179.270273][ T7422] tipc: Node identity ac14140c, cluster identity 4711 [ 179.277692][ T7422] tipc: New replicast peer: 255.255.255.255 [ 179.284533][ T7422] tipc: Enabled bearer , priority 10 [ 180.340303][ T5903] tipc: Node number set to 2886997004 [ 180.368827][ T7430] tmpfs: Unknown parameter 'usrquota_inode_hardlim3')÷²mÈUË°l”˜¦ÀCA[Ë/Á£N:zб¼HiNr÷Ј¶' [ 180.482627][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 180.482639][ T30] audit: type=1400 audit(1753469704.715:496): avc: denied { create } for pid=7429 comm="syz.4.410" name="#23" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.515358][ T30] audit: type=1400 audit(1753469704.745:497): avc: denied { link } for pid=7429 comm="syz.4.410" name="#23" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.968087][ T30] audit: type=1400 audit(1753469704.745:498): avc: denied { rename } for pid=7429 comm="syz.4.410" name="#24" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 181.071316][ T7437] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 181.077875][ T7437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.090182][ T7437] vhci_hcd vhci_hcd.0: Device attached [ 181.100408][ T30] audit: type=1400 audit(1753469705.325:499): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 181.351615][ T7440] netlink: 'syz.4.411': attribute type 10 has an invalid length. [ 181.398774][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.419822][ T7446] netlink: 10 bytes leftover after parsing attributes in process `syz.4.411'. [ 181.436283][ T1997] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 181.514354][ T7440] team0: Port device bond0 added [ 182.259439][ T30] audit: type=1400 audit(1753469705.415:500): avc: denied { setopt } for pid=7443 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.279211][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.558539][ T7449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.643750][ T30] audit: type=1400 audit(1753469706.875:501): avc: denied { associate } for pid=7453 comm="syz.3.414" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 182.692513][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 182.736441][ T30] audit: type=1400 audit(1753469706.945:502): avc: denied { write } for pid=7456 comm="syz.0.417" name="mouse0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 182.760349][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 182.773614][ T7458] netlink: 'syz.1.416': attribute type 11 has an invalid length. [ 182.783163][ T7438] vhci_hcd: connection reset by peer [ 182.798763][ T30] audit: type=1400 audit(1753469707.035:503): avc: denied { read } for pid=5188 comm="acpid" name="event4" dev="devtmpfs" ino=2962 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 182.825145][ T1009] vhci_hcd: stop threads [ 182.831370][ T1009] vhci_hcd: release socket [ 182.844156][ T1009] vhci_hcd: disconnect device [ 182.849530][ T30] audit: type=1400 audit(1753469707.065:504): avc: denied { open } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2962 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 182.889528][ T30] audit: type=1400 audit(1753469707.065:505): avc: denied { ioctl } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2962 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 182.913702][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.965064][ T7467] netlink: 'syz.3.419': attribute type 2 has an invalid length. [ 183.886888][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 184.581572][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.656625][ T5888] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 184.884124][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.899400][ T5888] usb 2-1: config 0 descriptor?? [ 184.910067][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 185.354618][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 185.370784][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 185.530276][ T7493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.427'. [ 185.586553][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 185.615419][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.629484][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 185.643707][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.654365][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 185.670258][ T7497] netlink: 116 bytes leftover after parsing attributes in process `syz.4.426'. [ 185.682075][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.747272][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 185.762985][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 185.774944][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 185.904308][ T5888] pwc: recv_control_msg error -32 req 02 val 2400 [ 186.262723][ T5888] pwc: recv_control_msg error -32 req 02 val 2900 [ 186.481875][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 186.497051][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.521644][ T5888] pwc: Registered as video103. [ 186.543078][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 186.682745][ T7512] syz.0.433 (7512): drop_caches: 1 [ 186.712107][ T7512] syz.0.433 (7512): drop_caches: 1 [ 187.280615][ T5888] usb 2-1: USB disconnect, device number 13 [ 187.548160][ T1997] vhci_hcd: vhci_device speed not set [ 187.771244][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 187.771260][ T30] audit: type=1400 audit(1753469712.005:507): avc: denied { map } for pid=7539 comm="syz.1.444" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.800963][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.988258][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.046024][ T7547] syz.0.447 (7547): drop_caches: 1 [ 188.077443][ T7547] syz.0.447 (7547): drop_caches: 1 [ 188.191230][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 188.303001][ T5888] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 188.312405][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.324091][ T30] audit: type=1400 audit(1753469712.005:508): avc: denied { execute } for pid=7539 comm="syz.1.444" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.524047][ T30] audit: type=1400 audit(1753469712.625:509): avc: denied { module_request } for pid=7545 comm="syz.2.446" kmod="fs-name" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 188.693157][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.716261][ T30] audit: type=1400 audit(1753469712.945:510): avc: denied { create } for pid=7555 comm="syz.2.448" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 188.726885][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.749322][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.760268][ T5888] usb 5-1: Product: syz [ 188.775176][ T5888] usb 5-1: Manufacturer: syz [ 188.791374][ T5888] usb 5-1: SerialNumber: syz [ 188.969935][ T7561] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 189.106327][ T5946] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 189.231433][ T5888] usb 5-1: 0:2 : does not exist [ 189.391102][ T7572] devpts: Bad value for 'max' [ 189.455320][ T5843] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 189.455375][ T5843] Bluetooth: hci4: Malformed LE Event: 0x0d [ 189.486300][ T1997] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 189.561273][ T30] audit: type=1400 audit(1753469713.795:511): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.666543][ T1997] usb 2-1: Using ep0 maxpacket: 32 [ 189.678836][ T1997] usb 2-1: config 254 has an invalid interface number: 7 but max is 0 [ 189.688046][ T1997] usb 2-1: config 254 has no interface number 0 [ 189.700785][ T1997] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= 8.e5 [ 189.710556][ T1997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.721425][ T1997] usb 2-1: Product: syz [ 189.725628][ T1997] usb 2-1: Manufacturer: syz [ 189.730827][ T1997] usb 2-1: SerialNumber: syz [ 189.746464][ T1997] usb 2-1: Expected 3 endpoints, found: 0 [ 190.392308][ T5888] usb 5-1: USB disconnect, device number 10 [ 190.418277][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.508388][ T7582] capability: warning: `syz.4.456' uses deprecated v2 capabilities in a way that may be insecure [ 190.653058][ T30] audit: type=1400 audit(1753469714.885:512): avc: denied { ioctl } for pid=7583 comm="syz.4.457" path="socket:[13540]" dev="sockfs" ino=13540 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.834479][ T7586] syz.4.459 (7586): drop_caches: 1 [ 190.868131][ T7586] syz.4.459 (7586): drop_caches: 1 [ 190.972211][ T7595] FAULT_INJECTION: forcing a failure. [ 190.972211][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 191.041005][ T7595] CPU: 0 UID: 0 PID: 7595 Comm: syz.2.461 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 191.041031][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.041040][ T7595] Call Trace: [ 191.041046][ T7595] [ 191.041052][ T7595] dump_stack_lvl+0x16c/0x1f0 [ 191.041084][ T7595] should_fail_ex+0x512/0x640 [ 191.041113][ T7595] should_failslab+0xc2/0x120 [ 191.041130][ T7595] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 191.041154][ T7595] ? skb_clone+0x190/0x3f0 [ 191.041174][ T7595] skb_clone+0x190/0x3f0 [ 191.041191][ T7595] netlink_deliver_tap+0xabd/0xd30 [ 191.041216][ T7595] netlink_unicast+0x62f/0x850 [ 191.041241][ T7595] ? __pfx_netlink_unicast+0x10/0x10 [ 191.041266][ T7595] netlink_sendmsg+0x8d1/0xdd0 [ 191.041289][ T7595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.041316][ T7595] ____sys_sendmsg+0xa98/0xc70 [ 191.041338][ T7595] ? copy_msghdr_from_user+0x10a/0x160 [ 191.041354][ T7595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.041383][ T7595] ___sys_sendmsg+0x134/0x1d0 [ 191.041401][ T7595] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.041414][ T7595] ? __lock_acquire+0x622/0x1c90 [ 191.041461][ T7595] __sys_sendmsg+0x16d/0x220 [ 191.041479][ T7595] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.041512][ T7595] do_syscall_64+0xcd/0x4c0 [ 191.041532][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.041572][ T7595] RIP: 0033:0x7f950cd8e9a9 [ 191.041586][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.041600][ T7595] RSP: 002b:00007f950dcb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.041615][ T7595] RAX: ffffffffffffffda RBX: 00007f950cfb5fa0 RCX: 00007f950cd8e9a9 [ 191.041624][ T7595] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.041633][ T7595] RBP: 00007f950dcb7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.041642][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.041652][ T7595] R13: 0000000000000000 R14: 00007f950cfb5fa0 R15: 00007ffd7f6c3868 [ 191.041674][ T7595] [ 191.253214][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.461487][ T5903] usb 2-1: USB disconnect, device number 14 [ 193.633424][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 193.646278][ T30] audit: type=1400 audit(1753469717.875:513): avc: denied { bind } for pid=7605 comm="syz.0.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.974128][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.212473][ T7626] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 194.219126][ T7626] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.313444][ T7626] vhci_hcd vhci_hcd.0: Device attached [ 194.422140][ T7638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.581620][ T7638] Bluetooth: MGMT ver 1.23 [ 194.587173][ T7638] Bluetooth: hci0: unsupported parameter 5148 [ 194.594772][ T7638] Bluetooth: hci0: unsupported parameter 101 [ 194.602032][ T7638] Bluetooth: hci0: unsupported parameter 5148 [ 194.626294][ T7638] Bluetooth: hci0: unsupported parameter 101 [ 194.657416][ T5903] vhci_hcd: vhci_device speed not set [ 194.676106][ T7641] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 194.682767][ T7641] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.713595][ T7626] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.723957][ T7641] vhci_hcd vhci_hcd.0: Device attached [ 194.729632][ T5903] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 194.744632][ T7626] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 194.751271][ T7626] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.815905][ T7649] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 194.822560][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.859928][ T7626] vhci_hcd vhci_hcd.0: Device attached [ 194.868992][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 194.875212][ T7641] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 194.881921][ T7641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 194.890310][ T7641] vhci_hcd vhci_hcd.0: Device attached [ 194.946065][ T7626] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.046883][ T7626] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.060996][ T7626] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.117017][ T7626] vhci_hcd vhci_hcd.0: port 0 already used [ 195.145447][ T7654] vhci_hcd: connection closed [ 195.147152][ T7647] vhci_hcd: connection closed [ 195.150482][ T6281] vhci_hcd: stop threads [ 195.151964][ T7633] vhci_hcd: connection reset by peer [ 195.156735][ T7651] vhci_hcd: connection closed [ 195.160947][ T7642] vhci_hcd: connection closed [ 195.180298][ T6281] vhci_hcd: release socket [ 195.222869][ T6281] vhci_hcd: disconnect device [ 195.249897][ T6281] vhci_hcd: stop threads [ 195.254442][ T6281] vhci_hcd: release socket [ 195.264564][ T6281] vhci_hcd: disconnect device [ 195.272068][ T6281] vhci_hcd: stop threads [ 195.278034][ T6281] vhci_hcd: release socket [ 195.284263][ T6281] vhci_hcd: disconnect device [ 195.290333][ T6281] vhci_hcd: stop threads [ 195.294750][ T6281] vhci_hcd: release socket [ 195.299957][ T6281] vhci_hcd: disconnect device [ 195.308827][ T6281] vhci_hcd: stop threads [ 195.313169][ T6281] vhci_hcd: release socket [ 195.318111][ T6281] vhci_hcd: disconnect device [ 195.842094][ T5947] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 195.932727][ T30] audit: type=1400 audit(1753469720.165:514): avc: denied { connect } for pid=7676 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.979847][ T30] audit: type=1400 audit(1753469720.195:515): avc: denied { bind } for pid=7676 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.951427][ T5947] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 196.960722][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.982096][ T5947] usb 5-1: config 0 descriptor?? [ 197.237730][ T7664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.246612][ T7664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.259588][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 197.269413][ T7664] FAULT_INJECTION: forcing a failure. [ 197.269413][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 197.290923][ T7664] CPU: 0 UID: 0 PID: 7664 Comm: syz.4.476 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 197.290951][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.290962][ T7664] Call Trace: [ 197.290968][ T7664] [ 197.290974][ T7664] dump_stack_lvl+0x16c/0x1f0 [ 197.291009][ T7664] should_fail_ex+0x512/0x640 [ 197.291036][ T7664] ? fs_reclaim_acquire+0xae/0x150 [ 197.291060][ T7664] ? tomoyo_encode2+0x100/0x3e0 [ 197.291076][ T7664] should_failslab+0xc2/0x120 [ 197.291094][ T7664] __kmalloc_noprof+0xd2/0x510 [ 197.291126][ T7664] tomoyo_encode2+0x100/0x3e0 [ 197.291147][ T7664] tomoyo_encode+0x29/0x50 [ 197.291163][ T7664] tomoyo_realpath_from_path+0x18f/0x6e0 [ 197.291183][ T7664] ? tomoyo_profile+0x47/0x60 [ 197.291205][ T7664] tomoyo_path_number_perm+0x245/0x580 [ 197.291230][ T7664] ? tomoyo_path_number_perm+0x237/0x580 [ 197.291256][ T7664] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 197.291282][ T7664] ? find_held_lock+0x2b/0x80 [ 197.291326][ T7664] ? find_held_lock+0x2b/0x80 [ 197.291347][ T7664] ? hook_file_ioctl_common+0x145/0x410 [ 197.291374][ T7664] ? __fget_files+0x20e/0x3c0 [ 197.291394][ T7664] security_file_ioctl+0x9b/0x240 [ 197.291413][ T7664] __x64_sys_ioctl+0xb7/0x210 [ 197.291438][ T7664] do_syscall_64+0xcd/0x4c0 [ 197.291457][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.291474][ T7664] RIP: 0033:0x7f876718e9a9 [ 197.291489][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.291506][ T7664] RSP: 002b:00007f8767f1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.291523][ T7664] RAX: ffffffffffffffda RBX: 00007f87673b5fa0 RCX: 00007f876718e9a9 [ 197.291534][ T7664] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 000000000000000a [ 197.291545][ T7664] RBP: 00007f8767f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 197.291555][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.291564][ T7664] R13: 0000000000000000 R14: 00007f87673b5fa0 R15: 00007fff034cb108 [ 197.291587][ T7664] [ 197.291605][ T7664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.528774][ T10] usb 5-1: USB disconnect, device number 11 [ 197.576127][ T30] audit: type=1326 audit(1753469721.805:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.0.483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a438e9a9 code=0x0 [ 197.986362][ T5946] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.010205][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'. [ 198.216343][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 198.231740][ T5946] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 198.787507][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.796394][ T5946] usb 4-1: Product: syz [ 198.802961][ T5946] usb 4-1: Manufacturer: syz [ 198.934474][ T5946] usb 4-1: SerialNumber: syz [ 199.021654][ T5946] usb 4-1: config 0 descriptor?? [ 199.029002][ T5946] usb 4-1: bad CDC descriptors [ 199.224871][ T30] audit: type=1326 audit(1753469723.455:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a438e9a9 code=0x0 [ 199.278283][ T30] audit: type=1400 audit(1753469723.515:518): avc: denied { ioctl } for pid=7702 comm="syz.3.487" path="net:[4026532881]" dev="nsfs" ino=4026532881 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.308994][ T5946] usb 4-1: USB disconnect, device number 8 [ 199.384091][ T7729] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 199.652608][ T7719] netlink: 44 bytes leftover after parsing attributes in process `syz.4.493'. [ 199.913161][ T5903] vhci_hcd: vhci_device speed not set [ 200.066344][ T5947] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 200.079895][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.606419][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 201.172067][ T43] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 201.186649][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 201.199036][ T43] usb 5-1: config 0 has no interface number 0 [ 201.205550][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 201.215514][ T43] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.253434][ T43] usb 5-1: config 0 interface 85 has no altsetting 0 [ 201.265984][ T5947] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 201.277502][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.285775][ T5947] usb 3-1: Product: syz [ 201.291964][ T5947] usb 3-1: Manufacturer: syz [ 201.297058][ T5947] usb 3-1: SerialNumber: syz [ 201.301894][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 201.311246][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.321132][ T43] usb 5-1: Product: syz [ 201.325713][ T43] usb 5-1: Manufacturer: syz [ 201.330460][ T43] usb 5-1: SerialNumber: syz [ 201.348464][ T5947] usb 3-1: config 0 descriptor?? [ 201.355108][ T43] usb 5-1: config 0 descriptor?? [ 201.496629][ T5947] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 201.586396][ T5946] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.740090][ T5888] usb usb36-port1: attempt power cycle [ 202.004297][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.500'. [ 202.028739][ T30] audit: type=1400 audit(1753469726.265:519): avc: denied { mount } for pid=7741 comm="syz.4.501" name="/" dev="rpc_pipefs" ino=13911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 202.030695][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.077599][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.206288][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 202.215056][ T5946] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 202.230917][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 202.249322][ T5946] usb 4-1: Product: syz [ 202.270462][ T5946] usb 4-1: Manufacturer: syz [ 202.275239][ T5946] usb 4-1: SerialNumber: syz [ 202.293190][ T5946] usb 4-1: config 0 descriptor?? [ 202.296206][ T5947] usb 3-1: USB disconnect, device number 18 [ 202.458378][ T43] appletouch 5-1:0.85: Geyser mode initialized. [ 202.487276][ T43] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input23 [ 202.587192][ T5888] usb usb36-port1: unable to enumerate USB device [ 202.687716][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.691086][ T30] audit: type=1400 audit(1753469726.925:520): avc: denied { getopt } for pid=7769 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.747343][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.763658][ T7774] bridge_slave_0: left allmulticast mode [ 202.767713][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 202.779456][ T7770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.509'. [ 202.793252][ T7774] bridge_slave_0: left promiscuous mode [ 202.806971][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.823089][ T7774] bridge_slave_1: left allmulticast mode [ 202.829519][ T7774] bridge_slave_1: left promiscuous mode [ 202.861820][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.875778][ T7774] bond0: (slave bond_slave_0): Releasing backup interface [ 202.900584][ T7774] bond0: (slave bond_slave_1): Releasing backup interface [ 202.939444][ T7774] team0: Port device team_slave_0 removed [ 202.949263][ T7774] team0: Port device team_slave_1 removed [ 203.003863][ T7775] team0: Mode changed to "loadbalance" [ 203.135409][ T7778] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 203.200364][ T5947] usb 4-1: USB disconnect, device number 9 [ 203.586357][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 203.716841][ T30] audit: type=1400 audit(1753469727.945:521): avc: denied { read } for pid=7791 comm="syz.1.514" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.742759][ T30] audit: type=1400 audit(1753469727.945:522): avc: denied { open } for pid=7791 comm="syz.1.514" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.835136][ T7799] syz.0.517 (7799): drop_caches: 1 [ 203.860787][ T7799] syz.0.517 (7799): drop_caches: 1 [ 203.889963][ T43] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 203.898200][ T43] usb 3-1: config 0 has no interface number 0 [ 203.904283][ T43] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 203.917354][ T43] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x81 has invalid maxpacket 57825, setting to 1024 [ 204.015170][ T5947] usb 5-1: USB disconnect, device number 12 [ 204.037702][ T5947] appletouch 5-1:0.85: input: appletouch disconnected [ 204.086271][ T43] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0722, bcdDevice= 0.00 [ 204.097843][ T30] audit: type=1400 audit(1753469727.945:523): avc: denied { ioctl } for pid=7791 comm="syz.1.514" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.124634][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.181407][ T43] usb 3-1: config 0 descriptor?? [ 204.561520][ T30] audit: type=1400 audit(1753469728.795:524): avc: denied { getopt } for pid=7810 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.130348][ T43] usbhid 3-1:0.21: can't add hid device: -71 [ 205.145406][ T43] usbhid 3-1:0.21: probe with driver usbhid failed with error -71 [ 205.181445][ T43] usb 3-1: USB disconnect, device number 19 [ 205.219820][ T30] audit: type=1400 audit(1753469729.445:525): avc: denied { connect } for pid=7823 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.382589][ T30] audit: type=1400 audit(1753469729.615:526): avc: denied { write } for pid=7829 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 207.360019][ T30] audit: type=1400 audit(1753469731.575:527): avc: denied { setopt } for pid=7850 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.642683][ T30] audit: type=1400 audit(1753469731.875:528): avc: denied { read } for pid=7837 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.908078][ T30] audit: type=1400 audit(1753469732.135:529): avc: denied { mount } for pid=7863 comm="syz.0.535" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 207.910472][ T7869] ======================================================= [ 207.910472][ T7869] WARNING: The mand mount option has been deprecated and [ 207.910472][ T7869] and is ignored by this kernel. Remove the mand [ 207.910472][ T7869] option from the mount to silence this warning. [ 207.910472][ T7869] ======================================================= [ 207.929486][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.022573][ T30] audit: type=1400 audit(1753469732.145:530): avc: denied { mounton } for pid=7863 comm="syz.0.535" path="/114/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 208.044655][ T3566] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.320212][ T30] audit: type=1400 audit(1753469732.515:531): avc: denied { getattr } for pid=7868 comm="syz.2.537" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 208.508671][ T7882] bio_check_eod: 2 callbacks suppressed [ 208.508682][ T7882] syz.4.540: attempt to access beyond end of device [ 208.508682][ T7882] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 208.547124][ T7886] syzkaller1: entered promiscuous mode [ 208.573516][ T7882] XFS (nbd4): SB validate failed with error -5. [ 208.591379][ T7886] syzkaller1: entered allmulticast mode [ 209.285922][ T30] audit: type=1400 audit(1753469733.515:532): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 211.227202][ T7925] tmpfs: Bad value for 'mpol' [ 211.566628][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 211.685990][ T30] audit: type=1400 audit(1753469735.795:533): avc: denied { ioctl } for pid=7929 comm="syz.2.552" path="socket:[14918]" dev="sockfs" ino=14918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.491079][ T7890] Process accounting resumed [ 212.727050][ T30] audit: type=1400 audit(1753469736.905:534): avc: denied { bind } for pid=7942 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.746119][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.776249][ T30] audit: type=1400 audit(1753469736.915:535): avc: denied { mounton } for pid=7942 comm="syz.4.556" path="/proc/359/cgroup" dev="proc" ino=14334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 212.798939][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.881531][ T30] audit: type=1400 audit(1753469736.915:536): avc: denied { remount } for pid=7942 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 213.129881][ T30] audit: type=1400 audit(1753469737.345:537): avc: denied { connect } for pid=7955 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.431320][ T7981] Cannot find add_set index 0 as target [ 214.065755][ T7987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.366727][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.386464][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 214.395446][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 214.632527][ T43] usb 5-1: config 4 has an invalid interface number: 110 but max is 3 [ 214.650674][ T43] usb 5-1: config 4 has an invalid descriptor of length 236, skipping remainder of the config [ 214.708173][ T43] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 214.824364][ T43] usb 5-1: config 4 has no interface number 0 [ 214.831127][ T43] usb 5-1: config 4 interface 110 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.884997][ T43] usb 5-1: config 4 interface 110 has no altsetting 0 [ 214.895500][ T43] usb 5-1: New USB device found, idVendor=0bda, idProduct=8186, bcdDevice=39.af [ 214.988710][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 215.349154][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.357542][ T43] usb 5-1: Product: syz [ 215.362062][ T43] usb 5-1: Manufacturer: й [ 215.366902][ T43] usb 5-1: SerialNumber: syz [ 215.938685][ T43] usb 5-1: USB disconnect, device number 13 [ 215.955395][ T8009] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 215.962023][ T8009] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.009476][ T8009] vhci_hcd vhci_hcd.0: Device attached [ 216.049949][ T8013] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 216.056628][ T8013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.066032][ T8013] vhci_hcd vhci_hcd.0: Device attached [ 216.074076][ T8009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.102844][ T8009] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 216.109557][ T8009] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.141149][ T8020] dummy0 speed is unknown, defaulting to 1000 [ 216.156319][ T8020] dummy0 speed is unknown, defaulting to 1000 [ 216.173857][ T8009] vhci_hcd vhci_hcd.0: Device attached [ 216.185343][ T8020] dummy0 speed is unknown, defaulting to 1000 [ 216.191562][ T5946] vhci_hcd: vhci_device speed not set [ 216.214623][ T8020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 216.230239][ T8009] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 216.236860][ T8009] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 216.258846][ T8020] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 216.266484][ T5946] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 216.275669][ T30] audit: type=1400 audit(1753469740.485:538): avc: denied { ioctl } for pid=8012 comm="syz.0.571" path="socket:[15477]" dev="sockfs" ino=15477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 216.311910][ T8009] vhci_hcd vhci_hcd.0: Device attached [ 216.331750][ T8013] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(23) [ 216.338389][ T8013] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.356503][ T8026] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.390593][ T8013] vhci_hcd vhci_hcd.0: Device attached [ 216.447396][ T8009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.458754][ T8009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.472905][ T8009] vhci_hcd vhci_hcd.0: port 0 already used [ 216.644353][ T8027] vhci_hcd: connection closed [ 216.646283][ T8022] vhci_hcd: connection closed [ 216.831669][ T6281] vhci_hcd: stop threads [ 216.843022][ T8018] vhci_hcd: connection closed [ 216.843258][ T8010] vhci_hcd: connection reset by peer [ 216.846678][ T8014] vhci_hcd: connection closed [ 216.853325][ T6281] vhci_hcd: release socket [ 216.877057][ T8020] dummy0 speed is unknown, defaulting to 1000 [ 216.901220][ T6281] vhci_hcd: disconnect device [ 216.940245][ T6281] vhci_hcd: stop threads [ 216.941174][ T8020] dummy0 speed is unknown, defaulting to 1000 [ 216.950871][ T6281] vhci_hcd: release socket [ 216.960921][ T6281] vhci_hcd: disconnect device [ 216.962368][ T8020] dummy0 speed is unknown, defaulting to 1000 [ 216.982225][ T6281] vhci_hcd: stop threads [ 217.046347][ T6281] vhci_hcd: release socket [ 217.056296][ T5888] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.075537][ T6281] vhci_hcd: disconnect device [ 217.082940][ T6281] vhci_hcd: stop threads [ 217.092740][ T6281] vhci_hcd: release socket [ 217.098743][ T6281] vhci_hcd: disconnect device [ 217.106022][ T6281] vhci_hcd: stop threads [ 217.111884][ T6281] vhci_hcd: release socket [ 217.136659][ T8043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.155673][ T6281] vhci_hcd: disconnect device [ 217.168847][ T8020] dummy0 speed is unknown, defaulting to 1000 [ 217.185875][ T8020] dummy0 speed is unknown, defaulting to 1000 [ 217.206546][ T5888] usb 5-1: device descriptor read/64, error -71 [ 217.217569][ T30] audit: type=1400 audit(1753469741.455:539): avc: denied { read } for pid=8039 comm="syz.1.574" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.321267][ T30] audit: type=1400 audit(1753469741.455:540): avc: denied { open } for pid=8039 comm="syz.1.574" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.346797][ T30] audit: type=1400 audit(1753469741.455:541): avc: denied { ioctl } for pid=8039 comm="syz.1.574" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.415065][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 217.428750][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 217.456291][ T5888] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.600785][ T5888] usb 5-1: device descriptor read/64, error -71 [ 217.726741][ T5888] usb usb5-port1: attempt power cycle [ 217.858540][ T5903] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 218.027720][ T5903] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 218.051028][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.078951][ T5903] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 218.111048][ T5903] usb 2-1: config 1 has no interface number 1 [ 218.126006][ T5903] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 218.140278][ T5903] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.158794][ T5903] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.168091][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.176117][ T5903] usb 2-1: Product: syz [ 218.182829][ T5903] usb 2-1: Manufacturer: syz [ 218.187641][ T5903] usb 2-1: SerialNumber: syz [ 218.197112][ T5888] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 218.288756][ T5888] usb 5-1: device descriptor read/8, error -71 [ 218.399367][ T8050] netlink: 44 bytes leftover after parsing attributes in process `syz.1.577'. [ 218.409563][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.418154][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.575732][ T5888] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 218.615427][ T5888] usb 5-1: device descriptor read/8, error -71 [ 218.736899][ T8069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.746564][ T8069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.753501][ T8069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.767984][ T5888] usb usb5-port1: unable to enumerate USB device [ 220.432259][ T8086] fuse: Bad value for 'fd' [ 220.551425][ T5903] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 220.571083][ T5903] usb 2-1: MIDIStreaming interface descriptor not found [ 220.669518][ T5903] usb 2-1: USB disconnect, device number 15 [ 220.886405][ T5154] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.886425][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.892502][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.908869][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.991888][ T8069] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 221.014956][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.466401][ T5946] vhci_hcd: vhci_device speed not set [ 221.971270][ T8109] SELinux: policydb magic number 0xa92f56ca does not match expected magic number 0xf97cff8c [ 222.262157][ T8109] SELinux: failed to load policy [ 222.345950][ T8116] @: renamed from vlan0 (while UP) [ 222.364894][ T30] audit: type=1400 audit(1753469746.595:542): avc: denied { map } for pid=8115 comm="syz.4.596" path="/proc/375/net/vlan/vlan0" dev="proc" ino=4026533790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 222.664406][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 222.722003][ T30] audit: type=1400 audit(1753469746.955:543): avc: denied { ioctl } for pid=8117 comm="syz.4.597" path="socket:[15668]" dev="sockfs" ino=15668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.872031][ T43] usb usb40-port1: attempt power cycle [ 223.034275][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 223.645961][ T8128] syz_tun: left promiscuous mode [ 223.646557][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 223.685811][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 223.733220][ T8128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.756789][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'. [ 223.877486][ T43] usb usb40-port1: unable to enumerate USB device [ 224.193985][ T8143] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 224.200640][ T8143] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.270091][ T8153] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 224.276710][ T8153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.314888][ T8143] vhci_hcd vhci_hcd.0: Device attached [ 224.385329][ T8153] vhci_hcd vhci_hcd.0: Device attached [ 224.412206][ T8159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.498135][ T8153] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 224.504763][ T8153] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.553535][ T30] audit: type=1400 audit(1753469748.755:544): avc: denied { write } for pid=8146 comm="syz.2.606" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 224.600901][ T8153] vhci_hcd vhci_hcd.0: Device attached [ 224.658582][ T8143] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 224.665199][ T8143] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.857076][ T43] vhci_hcd: vhci_device speed not set [ 224.884019][ T8159] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(24) [ 224.890722][ T8159] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 224.988474][ T8153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.053263][ T8172] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.086306][ T43] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 225.094553][ T8143] vhci_hcd vhci_hcd.0: Device attached [ 225.118609][ T30] audit: type=1400 audit(1753469749.345:545): avc: denied { write } for pid=8173 comm="syz.2.611" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 225.163642][ T8175] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.175829][ T8159] vhci_hcd vhci_hcd.0: Device attached [ 225.190706][ T8174] ALSA: mixer_oss: invalid index 40000 [ 225.247529][ T8143] vhci_hcd vhci_hcd.0: port 0 already used [ 225.383331][ T8170] vhci_hcd: connection closed [ 225.385170][ T8166] vhci_hcd: connection closed [ 225.390003][ T8150] vhci_hcd: connection reset by peer [ 225.400629][ T8162] vhci_hcd: connection closed [ 225.400823][ T8154] vhci_hcd: connection closed [ 225.416712][ T3532] vhci_hcd: stop threads [ 225.430188][ T3532] vhci_hcd: release socket [ 225.714556][ T3532] vhci_hcd: disconnect device [ 225.739620][ T3532] vhci_hcd: stop threads [ 225.744216][ T3532] vhci_hcd: release socket [ 225.753497][ T3532] vhci_hcd: disconnect device [ 225.763001][ T3532] vhci_hcd: stop threads [ 225.769810][ T3532] vhci_hcd: release socket [ 225.774655][ T3532] vhci_hcd: disconnect device [ 225.783692][ T3532] vhci_hcd: stop threads [ 225.822003][ T8185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.843029][ T3532] vhci_hcd: release socket [ 225.858386][ T3532] vhci_hcd: disconnect device [ 225.875865][ T3532] vhci_hcd: stop threads [ 225.889441][ T3532] vhci_hcd: release socket [ 225.901490][ T3532] vhci_hcd: disconnect device [ 226.790342][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 226.799335][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 228.221208][ T8219] pim6reg: entered allmulticast mode [ 228.283182][ T8219] pim6reg: left allmulticast mode [ 229.846414][ T1997] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 229.914997][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 230.039017][ T1997] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.356685][ T43] vhci_hcd: vhci_device speed not set [ 230.370356][ T1997] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.391569][ T1997] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.485950][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.535446][ T1997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 230.555898][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.569873][ T1997] usb 4-1: SerialNumber: syz [ 230.608454][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.618476][ T1997] cdc_acm 4-1:1.0: skipping garbage [ 230.624116][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 230.642480][ T10] usb 3-1: SerialNumber: syz [ 230.971412][ T10] cdc_acm 3-1:1.0: skipping garbage [ 231.030416][ T8255] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.627'. [ 231.525855][ T8261] syz.1.634 (8261): drop_caches: 1 [ 231.564874][ T8261] syz.1.634 (8261): drop_caches: 1 [ 231.585863][ T8264] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.629'. [ 231.874096][ T5946] usb usb40-port1: attempt power cycle [ 231.926254][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 232.058288][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 232.089418][ T10] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 232.171612][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.428568][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 232.507270][ T8277] loop8: detected capacity change from 0 to 79 [ 232.529096][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.554252][ T10] usb 1-1: Product: syz [ 232.557174][ T43] usb 4-1: USB disconnect, device number 10 [ 232.563374][ T10] usb 1-1: Manufacturer: syz [ 232.583409][ T10] usb 1-1: SerialNumber: syz [ 232.590795][ T5946] usb usb40-port1: unable to enumerate USB device [ 232.612200][ T10] usb 1-1: config 0 descriptor?? [ 233.583623][ T8281] delete_channel: no stack [ 233.699196][ T8267] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 233.775154][ T10] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 233.782870][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 233.792895][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 233.806434][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 233.821365][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 233.915644][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 233.924055][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 233.940246][ T5946] usb 3-1: USB disconnect, device number 20 [ 233.965412][ T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 233.975639][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 234.037516][ T8287] capability: warning: `syz.3.642' uses 32-bit capabilities (legacy support in use) [ 234.073107][ T8287] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 234.148421][ T30] audit: type=1400 audit(1753469758.295:546): avc: denied { mounton } for pid=8284 comm="syz.3.642" path="/142/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 234.333120][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 234.341592][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 234.349524][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 234.357410][ T10] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 234.466704][ T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 234.501260][ T10] usb 1-1: USB disconnect, device number 19 [ 234.601114][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 234.672702][ T8290] block device autoloading is deprecated and will be removed. [ 234.735306][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 234.759166][ T10] keyspan 1-1:0.0: device disconnected [ 234.991690][ T8298] usb usb8: usbfs: process 8298 (syz.3.644) did not claim interface 0 before use [ 235.246405][ T5903] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 235.639613][ T5903] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 235.660232][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.694570][ T5903] usb 4-1: Product: syz [ 235.726843][ T5903] usb 4-1: Manufacturer: syz [ 235.731497][ T5903] usb 4-1: SerialNumber: syz [ 235.754548][ T5903] usb 4-1: config 0 descriptor?? [ 235.885231][ T8308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 235.891859][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.937047][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 236.010084][ T5946] usb 4-1: USB disconnect, device number 11 [ 236.042921][ T8308] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 236.049578][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.119056][ T8321] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.136286][ T1997] vhci_hcd: vhci_device speed not set [ 236.179832][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 236.188391][ T8322] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 236.195052][ T8322] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 236.206700][ T1997] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 236.275504][ T8322] vhci_hcd vhci_hcd.0: Device attached [ 236.293431][ T8308] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 236.300088][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 236.323841][ T8321] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24) [ 236.330498][ T8321] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.386343][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 236.427632][ T8321] vhci_hcd vhci_hcd.0: Device attached [ 236.478423][ T8308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.518496][ T8308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.616914][ T8321] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 237.294708][ T8308] vhci_hcd vhci_hcd.0: port 0 already used [ 237.383467][ T8329] vhci_hcd: connection closed [ 237.383703][ T3566] vhci_hcd: stop threads [ 237.408429][ T8323] vhci_hcd: connection closed [ 237.408645][ T8327] vhci_hcd: connection closed [ 237.413543][ T8310] vhci_hcd: connection reset by peer [ 237.423828][ T8317] vhci_hcd: connection closed [ 237.444785][ T3566] vhci_hcd: release socket [ 237.455492][ T3566] vhci_hcd: disconnect device [ 237.518804][ T3566] vhci_hcd: stop threads [ 237.540382][ T8347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.544352][ T30] audit: type=1400 audit(1753469761.745:547): avc: denied { create } for pid=8342 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 237.575557][ T3566] vhci_hcd: release socket [ 237.586949][ T3566] vhci_hcd: disconnect device [ 237.638867][ T3566] vhci_hcd: stop threads [ 237.638886][ T3566] vhci_hcd: release socket [ 237.638928][ T3566] vhci_hcd: disconnect device [ 237.715947][ T3566] vhci_hcd: stop threads [ 237.715963][ T3566] vhci_hcd: release socket [ 237.715995][ T3566] vhci_hcd: disconnect device [ 237.717743][ T3566] vhci_hcd: stop threads [ 237.717794][ T3566] vhci_hcd: release socket [ 237.717982][ T3566] vhci_hcd: disconnect device [ 237.850608][ T8361] overlayfs: failed to resolve './file0': -2 [ 237.868009][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 237.868045][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 239.625206][ T8377] syz.2.659 (8377): drop_caches: 1 [ 239.691448][ T8377] syz.2.659 (8377): drop_caches: 1 [ 240.868034][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 241.091226][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.203214][ T30] audit: type=1400 audit(1753469765.425:548): avc: denied { setopt } for pid=8398 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.235134][ T10] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 241.271809][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 241.290544][ T10] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 241.319052][ T1997] vhci_hcd: vhci_device speed not set [ 241.380064][ T30] audit: type=1400 audit(1753469765.615:549): avc: denied { lock } for pid=8408 comm="syz.2.668" path="socket:[16829]" dev="sockfs" ino=16829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 241.429430][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.448128][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.480298][ T24] usb 2-1: device descriptor read/64, error -71 [ 241.500406][ T10] usb 4-1: Product: syz [ 241.528426][ T10] usb 4-1: Manufacturer: syz [ 241.535078][ T8409] binder: 8408:8409 ioctl c0306201 200000000040 returned -22 [ 241.548575][ T10] usb 4-1: SerialNumber: syz [ 241.746421][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.907394][ T24] usb 2-1: device descriptor read/64, error -71 [ 242.058298][ T24] usb usb2-port1: attempt power cycle [ 242.086424][ T10] usb 4-1: USB disconnect, device number 12 [ 242.230342][ T30] audit: type=1400 audit(1753469766.465:550): avc: denied { view } for pid=8426 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.316739][ T8427] overlayfs: failed to resolve './file1/file0': -2 [ 242.339171][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.673'. [ 242.436264][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 242.646271][ T24] usb 2-1: device descriptor read/8, error -71 [ 242.768135][ T5903] usb usb38-port1: attempt power cycle [ 242.857620][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.869314][ T30] audit: type=1400 audit(1753469767.105:551): avc: denied { ioctl } for pid=8445 comm="syz.3.677" path="socket:[16239]" dev="sockfs" ino=16239 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.902442][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.989094][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 243.036253][ T24] usb 2-1: device descriptor read/8, error -71 [ 243.418492][ T8457] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 243.425120][ T8457] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.436592][ T24] usb usb2-port1: unable to enumerate USB device [ 243.445277][ T8457] vhci_hcd vhci_hcd.0: Device attached [ 243.461285][ T30] audit: type=1326 audit(1753469767.695:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d34b8e9a9 code=0x7ffc0000 [ 243.486748][ T8457] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 243.493362][ T8457] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.571006][ T8465] Cannot find add_set index 0 as target [ 243.581921][ T8465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.626256][ T5946] vhci_hcd: vhci_device speed not set [ 244.185787][ T5946] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 244.338748][ T8457] vhci_hcd vhci_hcd.0: Device attached [ 244.363367][ T30] audit: type=1326 audit(1753469767.695:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d34b8e9a9 code=0x7ffc0000 [ 244.379035][ T5903] usb usb38-port1: unable to enumerate USB device [ 244.388786][ T30] audit: type=1326 audit(1753469767.715:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f7d34b8e9a9 code=0x7ffc0000 [ 244.414153][ T8457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 244.416478][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.436365][ T30] audit: type=1326 audit(1753469767.715:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d34b8e9a9 code=0x7ffc0000 [ 244.555541][ T8469] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 244.562359][ T8469] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.608880][ T30] audit: type=1326 audit(1753469767.715:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d34b8e9a9 code=0x7ffc0000 [ 244.613864][ T8471] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 244.638747][ T8471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.651854][ T8469] vhci_hcd vhci_hcd.0: Device attached [ 244.658013][ T8471] vhci_hcd vhci_hcd.0: Device attached [ 244.664048][ T30] audit: type=1326 audit(1753469767.715:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d34b8e9a9 code=0x7ffc0000 [ 244.785489][ T8469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 244.984628][ T8469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.036281][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 245.050060][ T8457] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 245.056707][ T8457] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 245.160134][ T8469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.186501][ T8457] vhci_hcd vhci_hcd.0: Device attached [ 245.236307][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 245.251017][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 245.261082][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 7 [ 245.293975][ T8457] vhci_hcd vhci_hcd.0: port 0 already used [ 245.321185][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.384422][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.398169][ T8485] vhci_hcd: connection closed [ 245.398370][ T8472] vhci_hcd: connection closed [ 245.398723][ T8461] vhci_hcd: connection closed [ 245.408183][ T8458] vhci_hcd: connection reset by peer [ 245.408583][ T8470] vhci_hcd: connection closed [ 245.418931][ T49] vhci_hcd: stop threads [ 245.453673][ T10] usb 5-1: Product: syz [ 245.472527][ T10] usb 5-1: Manufacturer: syz [ 245.472942][ T49] vhci_hcd: release socket [ 245.479427][ T10] usb 5-1: SerialNumber: syz [ 245.537005][ T49] vhci_hcd: disconnect device [ 245.573770][ T49] vhci_hcd: stop threads [ 245.583400][ T49] vhci_hcd: release socket [ 245.620417][ T49] vhci_hcd: disconnect device [ 245.659742][ T49] vhci_hcd: stop threads [ 245.665352][ T49] vhci_hcd: release socket [ 245.695462][ T49] vhci_hcd: disconnect device [ 245.720999][ T49] vhci_hcd: stop threads [ 245.747490][ T49] vhci_hcd: release socket [ 245.763466][ T49] vhci_hcd: disconnect device [ 245.782059][ T49] vhci_hcd: stop threads [ 245.804574][ T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 245.819719][ T49] vhci_hcd: release socket [ 245.833413][ T49] vhci_hcd: disconnect device [ 245.947178][ T10] usb 5-1: USB disconnect, device number 18 [ 246.010516][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.456786][ T8523] hfs: can't find a HFS filesystem on dev nullb0 [ 247.510307][ T24] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 247.866453][ T24] usb 2-1: device descriptor read/64, error -71 [ 248.266582][ T24] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 248.351703][ T1997] dummy0 speed is unknown, defaulting to 1000 [ 248.416463][ T24] usb 2-1: device descriptor read/64, error -71 [ 248.526628][ T24] usb usb2-port1: attempt power cycle [ 248.585611][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 248.585628][ T30] audit: type=1400 audit(1753470028.814:567): avc: denied { map } for pid=8550 comm="syz.4.693" path="socket:[16371]" dev="sockfs" ino=16371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.690133][ T30] audit: type=1400 audit(1753470028.864:568): avc: denied { create } for pid=8550 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 248.739821][ T8558] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.833999][ T8566] fuse: Unknown parameter '0x0000000000000009ÿ' [ 248.886697][ T24] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 249.524495][ T24] usb 2-1: device descriptor read/8, error -71 [ 249.541356][ T5946] vhci_hcd: vhci_device speed not set [ 249.866718][ T24] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 250.496516][ T24] usb 2-1: device descriptor read/8, error -71 [ 250.584653][ T8587] binder: 8586:8587 ioctl c0306201 200000000080 returned -14 [ 250.598267][ T8587] binder: BINDER_SET_CONTEXT_MGR already set [ 250.607911][ T8587] binder: 8586:8587 ioctl 4018620d 200000000040 returned -16 [ 250.616472][ T24] usb usb2-port1: unable to enumerate USB device [ 250.662249][ T8590] loop4: detected capacity change from 0 to 524255232 [ 250.932278][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 250.943317][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 251.385605][ T5910] usb usb34-port1: attempt power cycle [ 252.039198][ T5910] usb usb34-port1: unable to enumerate USB device [ 252.280183][ T30] audit: type=1400 audit(1753470032.514:569): avc: denied { write } for pid=8625 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.360788][ T30] audit: type=1400 audit(1753470032.514:570): avc: denied { nlmsg_read } for pid=8625 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.383220][ T8627] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.394398][ T8626] binder: BINDER_SET_CONTEXT_MGR already set [ 252.400465][ T8626] binder: 8625:8626 ioctl 4018620d 200000000040 returned -16 [ 252.408307][ T8626] binder: 8625:8626 ioctl c0306201 200000000180 returned -11 [ 252.804095][ T8631] netlink: 264 bytes leftover after parsing attributes in process `syz.3.713'. [ 252.949096][ T5910] IPVS: starting estimator thread 0... [ 253.176322][ T8641] IPVS: using max 47 ests per chain, 112800 per kthread [ 253.913194][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.951348][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.106331][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 254.116961][ T3566] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.132044][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 254.141263][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 254.150610][ T5910] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 254.276222][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 254.283166][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.286262][ T5910] usb 3-1: device descriptor read/64, error -71 [ 254.301867][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.319524][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.330844][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.372902][ T24] usb 5-1: config 0 descriptor?? [ 254.387213][ T24] hub 5-1:0.0: USB hub found [ 254.556397][ T5910] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 254.591272][ T24] hub 5-1:0.0: 9 ports detected [ 254.597452][ T24] hub 5-1:0.0: insufficient power available to use all downstream ports [ 254.696992][ T5910] usb 3-1: device descriptor read/64, error -71 [ 254.955929][ T5910] usb usb3-port1: attempt power cycle [ 255.131134][ T30] audit: type=1400 audit(1753470035.364:571): avc: denied { setopt } for pid=8659 comm="syz.4.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.180056][ T8661] SELinux: syz.4.722 (8661) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 255.292497][ T24] usb 5-1: USB disconnect, device number 19 [ 255.321708][ T30] audit: type=1400 audit(1753470035.554:572): avc: denied { create } for pid=8676 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 255.377535][ T30] audit: type=1400 audit(1753470035.554:573): avc: denied { write } for pid=8676 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 255.410013][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.496277][ T5910] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 255.526893][ T5910] usb 3-1: device descriptor read/8, error -71 [ 255.689750][ T30] audit: type=1400 audit(1753470035.914:574): avc: denied { mount } for pid=8680 comm="syz.0.730" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 256.216212][ T5910] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 256.474550][ T30] audit: type=1400 audit(1753470036.684:575): avc: denied { mount } for pid=8682 comm="syz.3.729" name="/" dev="autofs" ino=17139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 256.496035][ T8684] ALSA: mixer_oss: invalid OSS volume 'u' [ 256.497683][ T30] audit: type=1400 audit(1753470036.704:576): avc: denied { map } for pid=8682 comm="syz.3.729" path="/164/file1" dev="autofs" ino=17139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 256.526442][ T30] audit: type=1400 audit(1753470036.704:577): avc: denied { execute } for pid=8682 comm="syz.3.729" path="/164/file1" dev="autofs" ino=17139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 256.549888][ T30] audit: type=1400 audit(1753470036.704:578): avc: denied { mounton } for pid=8682 comm="syz.3.729" path="/164/file1/file0/file0" dev="autofs" ino=17145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 256.560080][ T8688] fuse: Unknown parameter '0x0000000000000004' [ 256.573823][ T5910] usb 3-1: device descriptor read/8, error -71 [ 256.616236][ T30] audit: type=1400 audit(1753470036.844:579): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 256.723211][ T5910] usb usb3-port1: unable to enumerate USB device [ 257.026341][ T30] audit: type=1400 audit(1753470037.244:580): avc: denied { shutdown } for pid=8689 comm="syz.0.733" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.201687][ T8699] overlayfs: failed to resolve './file0': -2 [ 257.982457][ T8706] overlayfs: failed to resolve './file1': -2 [ 258.047727][ T3532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.832524][ T3532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.877673][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 259.086996][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 259.166024][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 259.212606][ T24] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 259.236621][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.247005][ T3532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.260945][ T24] usb 2-1: Product: syz [ 259.280437][ T24] usb 2-1: Manufacturer: syz [ 259.285091][ T24] usb 2-1: SerialNumber: syz [ 259.309503][ T24] usb 2-1: config 0 descriptor?? [ 259.314292][ T8723] binder: 8722:8723 ioctl c0306201 200000000080 returned -14 [ 259.333031][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 259.359305][ T24] usb 2-1: Detected FT232R [ 259.365978][ T8723] binder: 8722:8723 ioctl c0306201 200000000240 returned -14 [ 259.378070][ T3532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.542068][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 259.552741][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.562477][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.573181][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.582301][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.591389][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.672814][ T3532] bridge_slave_1: left allmulticast mode [ 259.682355][ T3532] bridge_slave_1: left promiscuous mode [ 259.690685][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.728249][ T3532] bridge_slave_0: left allmulticast mode [ 259.748483][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 259.764083][ T3532] bridge_slave_0: left promiscuous mode [ 259.775268][ T24] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 259.786357][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.794901][ T8740] syz.0.752 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 259.916586][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 259.961841][ T24] usb 2-1: USB disconnect, device number 24 [ 259.971335][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 260.408620][ T24] ftdi_sio 2-1:0.0: device disconnected [ 260.538085][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 260.538102][ T30] audit: type=1400 audit(1753470040.774:587): avc: denied { read append } for pid=8750 comm="syz.2.753" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 260.568412][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.616330][ T30] audit: type=1400 audit(1753470040.774:588): avc: denied { open } for pid=8750 comm="syz.2.753" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 260.640425][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.279382][ T8765] overlayfs: missing 'workdir' [ 261.301915][ T8765] usb usb9: usbfs: process 8765 (syz.1.756) did not claim interface 15 before use [ 261.636494][ T5845] Bluetooth: hci4: command tx timeout [ 261.644926][ T5203] udevd[5203]: worker [5833] terminated by signal 33 (Unknown signal 33) [ 261.656598][ T5845] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 261.664472][ T8763] "syz.4.757" (8763) uses obsolete ecb(arc4) skcipher [ 261.700602][ T5203] udevd[5203]: worker [5833] failed while handling '/devices/virtual/block/loop1' [ 262.075050][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.147480][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.171765][ T3532] bond0 (unregistering): (slave bond1): Releasing backup interface [ 262.192432][ T3532] bond0 (unregistering): Released all slaves [ 262.416281][ T3532] bond1 (unregistering): Released all slaves [ 262.427949][ T8730] dummy0 speed is unknown, defaulting to 1000 [ 263.514059][ T8807] FAULT_INJECTION: forcing a failure. [ 263.514059][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 263.538155][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 263.556463][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 263.576902][ T8807] CPU: 0 UID: 0 PID: 8807 Comm: syz.0.765 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 263.576930][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.576939][ T8807] Call Trace: [ 263.576946][ T8807] [ 263.576952][ T8807] dump_stack_lvl+0x16c/0x1f0 [ 263.576985][ T8807] should_fail_ex+0x512/0x640 [ 263.577007][ T8807] ? fs_reclaim_acquire+0xae/0x150 [ 263.577026][ T8807] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 263.577042][ T8807] should_failslab+0xc2/0x120 [ 263.577056][ T8807] __kmalloc_noprof+0xd2/0x510 [ 263.577084][ T8807] tomoyo_realpath_from_path+0xc2/0x6e0 [ 263.577102][ T8807] ? tomoyo_profile+0x47/0x60 [ 263.577121][ T8807] tomoyo_path_number_perm+0x245/0x580 [ 263.577142][ T8807] ? tomoyo_path_number_perm+0x237/0x580 [ 263.577165][ T8807] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.577188][ T8807] ? find_held_lock+0x2b/0x80 [ 263.577229][ T8807] ? find_held_lock+0x2b/0x80 [ 263.577248][ T8807] ? hook_file_ioctl_common+0x145/0x410 [ 263.577272][ T8807] ? __fget_files+0x20e/0x3c0 [ 263.577292][ T8807] security_file_ioctl+0x9b/0x240 [ 263.577310][ T8807] __x64_sys_ioctl+0xb7/0x210 [ 263.577335][ T8807] do_syscall_64+0xcd/0x4c0 [ 263.577353][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.577371][ T8807] RIP: 0033:0x7f13a438e9a9 [ 263.577385][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.577401][ T8807] RSP: 002b:00007f13a51ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.577419][ T8807] RAX: ffffffffffffffda RBX: 00007f13a45b5fa0 RCX: 00007f13a438e9a9 [ 263.577430][ T8807] RDX: 0000200000000600 RSI: 00000000c0502100 RDI: 0000000000000003 [ 263.577441][ T8807] RBP: 00007f13a51ef090 R08: 0000000000000000 R09: 0000000000000000 [ 263.577451][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.577460][ T8807] R13: 0000000000000000 R14: 00007f13a45b5fa0 R15: 00007ffeacab07d8 [ 263.577485][ T8807] [ 263.577492][ T8807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.742990][ T5845] Bluetooth: hci4: command tx timeout [ 264.190936][ T5843] Bluetooth: hci3: unexpected event for opcode 0x041b [ 264.220193][ T8827] sd 0:0:1:0: device reset [ 264.294848][ T3532] hsr_slave_0: left promiscuous mode [ 264.343283][ T3532] hsr_slave_1: left promiscuous mode [ 264.370986][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.284601][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.375449][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.508213][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.554252][ T3532] veth1_macvtap: left promiscuous mode [ 265.915366][ T5843] Bluetooth: hci4: command tx timeout [ 265.983169][ T3532] veth0_macvtap: left promiscuous mode [ 266.009752][ T3532] veth1_vlan: left promiscuous mode [ 266.020098][ T3532] veth0_vlan: left promiscuous mode [ 266.096372][ T5946] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 266.256464][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 266.272539][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 266.322009][ T5946] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 266.362575][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.395029][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 266.429693][ T5946] usb 3-1: config 0 descriptor?? [ 266.667670][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 266.873885][ T5946] uclogic 0003:5543:0781.0008: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 [ 267.048794][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 267.178380][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 267.969799][ T5843] Bluetooth: hci4: command tx timeout [ 268.185116][ T8857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.770'. [ 268.206469][ T8849] dummy0 speed is unknown, defaulting to 1000 [ 268.292603][ T8730] chnl_net:caif_netlink_parms(): no params data found [ 269.004224][ T30] audit: type=1326 audit(1753470049.234:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 269.027600][ T30] audit: type=1326 audit(1753470049.234:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 269.054011][ T30] audit: type=1326 audit(1753470049.244:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 269.080310][ T30] audit: type=1326 audit(1753470049.244:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 269.565485][ T8884] Cannot find add_set index 0 as target [ 269.589068][ T8884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.843470][ T30] audit: type=1326 audit(1753470049.244:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 269.920168][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.777'. [ 269.991444][ T30] audit: type=1326 audit(1753470049.254:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 270.046326][ T30] audit: type=1326 audit(1753470049.254:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 270.129865][ T30] audit: type=1326 audit(1753470049.254:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 270.299958][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.314378][ T30] audit: type=1326 audit(1753470049.264:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19f5f8d310 code=0x7ffc0000 [ 270.386431][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.394693][ T8730] bridge_slave_0: entered allmulticast mode [ 270.485431][ T8730] bridge_slave_0: entered promiscuous mode [ 270.533103][ T30] audit: type=1326 audit(1753470049.264:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f5f8e9a9 code=0x7ffc0000 [ 270.585330][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.628887][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.671031][ T8730] bridge_slave_1: entered allmulticast mode [ 270.689178][ T8905] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 270.869077][ T5903] usb 3-1: USB disconnect, device number 25 [ 271.624174][ T8730] bridge_slave_1: entered promiscuous mode [ 272.290104][ T5903] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 272.433934][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.469384][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 272.481380][ T5903] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 272.497464][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.513360][ T5903] usb 3-1: config 0 has no interface number 0 [ 272.530737][ T5903] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 272.564903][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.587131][ T5903] usb 3-1: Product: syz [ 272.591406][ T5903] usb 3-1: Manufacturer: syz [ 272.649076][ T5903] usb 3-1: SerialNumber: syz [ 272.682158][ T5903] usb 3-1: config 0 descriptor?? [ 272.721570][ T8730] team0: Port device team_slave_0 added [ 272.730555][ T5903] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 272.747575][ T8730] team0: Port device team_slave_1 added [ 272.963843][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.072102][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.098491][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.415729][ T5903] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 273.433306][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.447633][ T5903] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 273.675093][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 273.688611][ T5903] usb 3-1: USB disconnect, device number 26 [ 273.705292][ T5903] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 275.428238][ T5903] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 275.526838][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.538339][ T5903] quatech2 3-1:0.51: device disconnected [ 275.939116][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.965036][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.546314][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.718962][ T8934] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.787'. [ 277.135300][ T8730] hsr_slave_0: entered promiscuous mode [ 277.156756][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.788'. [ 277.165701][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 277.178180][ T8730] hsr_slave_1: entered promiscuous mode [ 277.597982][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 277.598018][ T30] audit: type=1400 audit(1753470057.804:601): avc: denied { setopt } for pid=8939 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.316446][ T30] audit: type=1400 audit(1753470057.804:602): avc: denied { ioctl } for pid=8939 comm="syz.1.789" path="socket:[18698]" dev="sockfs" ino=18698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.340959][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.885559][ T30] audit: type=1400 audit(1753470059.114:603): avc: denied { append } for pid=8955 comm="syz.1.791" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.893397][ T5843] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 279.030934][ T30] audit: type=1400 audit(1753470059.264:604): avc: denied { bind } for pid=8955 comm="syz.1.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 282.860243][ T5826] sched: DL replenish lagged too much [ 283.982555][ T8972] program syz.0.795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.071236][ T8972] tipc: Enabling of bearer rejected, failed to enable media [ 284.103056][ T30] audit: type=1800 audit(1753470064.334:605): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.795" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 284.182243][ T8730] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.276994][ T8730] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.310467][ T30] audit: type=1400 audit(1753470064.544:606): avc: denied { accept } for pid=8971 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.333989][ T8730] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.405675][ T8730] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.739936][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.809629][ T8730] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.847514][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.854730][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.929664][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.936870][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.232842][ T8992] Bluetooth: Invalid byte 00 after esc byte [ 286.082584][ T8998] mmap: syz.2.796 (8998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 286.118330][ T74] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.167031][ T9005] overlayfs: failed to resolve './file0': -2 [ 286.276710][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.524480][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.643221][ T30] audit: type=1400 audit(1753470066.874:607): avc: denied { append } for pid=9010 comm="syz.4.799" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 287.246728][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 287.256321][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 293.526231][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 293.728815][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 293.951661][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.071438][ T24] usb 2-1: config 0 descriptor?? [ 294.908309][ T8730] veth0_vlan: entered promiscuous mode [ 297.320049][ T30] audit: type=1400 audit(1753470077.544:608): avc: denied { write } for pid=9048 comm="syz.0.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 297.423609][ T24] usb 2-1: Cannot read MAC address [ 297.597609][ T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 297.676407][ T8730] veth1_vlan: entered promiscuous mode [ 297.727302][ T24] usb 2-1: USB disconnect, device number 25 [ 297.940580][ T9055] netlink: 'syz.1.809': attribute type 10 has an invalid length. [ 298.623026][ T9055] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.681405][ T8730] veth0_macvtap: entered promiscuous mode [ 298.735410][ T8730] veth1_macvtap: entered promiscuous mode [ 298.885836][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.971955][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.019213][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 299.059145][ T8730] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.098539][ T8730] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.135532][ T8730] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.192031][ T8730] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.068852][ T30] audit: type=1400 audit(1753470080.304:609): avc: denied { firmware_load } for pid=74 comm="kworker/u8:4" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 300.156303][ T5847] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 300.420081][ T9074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.431117][ T9074] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 300.539176][ T9080] dummy0 speed is unknown, defaulting to 1000 [ 300.571356][ T9074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.653906][ T5847] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 300.686452][ T9074] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 300.724768][ T5847] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 300.849864][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.990081][ T5847] usb 5-1: config 0 descriptor?? [ 302.436396][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.517256][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.596337][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.836455][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 304.136382][ T9074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.337367][ T9074] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 304.681926][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.198193][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 309.066319][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 309.945970][ T9074] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 310.289228][ T5847] usb 5-1: USB disconnect, device number 20 [ 312.036236][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 314.221835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.315885][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.641042][ T8346] bond0: (slave syz_tun): Releasing backup interface [ 315.771870][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.830975][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.846415][ T5843] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 316.273499][ T30] audit: type=1400 audit(1753470096.504:610): avc: denied { mounton } for pid=8730 comm="syz-executor" path="/root/syzkaller.ZM5z6W/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 316.511232][ T30] audit: type=1400 audit(1753470096.744:611): avc: denied { mount } for pid=8730 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 316.696418][ T9145] comedi comedi2: comedi_config --init_data is deprecated [ 316.794609][ T30] audit: type=1400 audit(1753470096.744:612): avc: denied { mounton } for pid=8730 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 316.929896][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.126430][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.274691][ T30] audit: type=1400 audit(1753470098.494:613): avc: denied { setopt } for pid=9144 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 318.323654][ T9148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9148 comm=syz.1.825 [ 318.502439][ T9145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2583 sclass=netlink_tcpdiag_socket pid=9145 comm=syz.1.825 [ 318.710155][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.822'. [ 318.887957][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.898103][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.928496][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.936818][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.946900][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.916504][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.952518][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.969182][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.988426][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.001057][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.008970][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.738530][ T9151] dummy0 speed is unknown, defaulting to 1000 [ 320.776161][ T30] audit: type=1400 audit(1753470100.994:614): avc: denied { nlmsg_write } for pid=9169 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.833717][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.893888][ T9163] dummy0 speed is unknown, defaulting to 1000 [ 320.996366][ T5843] Bluetooth: hci3: command tx timeout [ 321.196823][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.502459][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.008315][ T9185] FAULT_INJECTION: forcing a failure. [ 322.008315][ T9185] name failslab, interval 1, probability 0, space 0, times 0 [ 322.021040][ T9185] CPU: 1 UID: 0 PID: 9185 Comm: syz.2.831 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 322.021062][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.021069][ T9185] Call Trace: [ 322.021072][ T9185] [ 322.021076][ T9185] dump_stack_lvl+0x16c/0x1f0 [ 322.021099][ T9185] should_fail_ex+0x512/0x640 [ 322.021115][ T9185] ? fs_reclaim_acquire+0xae/0x150 [ 322.021130][ T9185] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 322.021141][ T9185] should_failslab+0xc2/0x120 [ 322.021151][ T9185] __kmalloc_noprof+0xd2/0x510 [ 322.021170][ T9185] tomoyo_realpath_from_path+0xc2/0x6e0 [ 322.021181][ T9185] ? tomoyo_profile+0x47/0x60 [ 322.021194][ T9185] tomoyo_path_number_perm+0x245/0x580 [ 322.021208][ T9185] ? tomoyo_path_number_perm+0x237/0x580 [ 322.021224][ T9185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 322.021239][ T9185] ? find_held_lock+0x2b/0x80 [ 322.021265][ T9185] ? find_held_lock+0x2b/0x80 [ 322.021277][ T9185] ? hook_file_ioctl_common+0x145/0x410 [ 322.021292][ T9185] ? __fget_files+0x20e/0x3c0 [ 322.021304][ T9185] security_file_ioctl+0x9b/0x240 [ 322.021315][ T9185] __x64_sys_ioctl+0xb7/0x210 [ 322.021330][ T9185] do_syscall_64+0xcd/0x4c0 [ 322.021341][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.021352][ T9185] RIP: 0033:0x7f950cd8e9a9 [ 322.021361][ T9185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.021371][ T9185] RSP: 002b:00007f950dcb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.021381][ T9185] RAX: ffffffffffffffda RBX: 00007f950cfb5fa0 RCX: 00007f950cd8e9a9 [ 322.021388][ T9185] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000009 [ 322.021394][ T9185] RBP: 00007f950dcb7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.021399][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.021405][ T9185] R13: 0000000000000000 R14: 00007f950cfb5fa0 R15: 00007ffd7f6c3868 [ 322.021418][ T9185] [ 322.021423][ T9185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 322.233835][ T30] audit: type=1400 audit(1753470102.464:615): avc: denied { create } for pid=9184 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 322.238535][ T5843] Bluetooth: hci5: command tx timeout [ 322.580492][ T9179] dummy0 speed is unknown, defaulting to 1000 [ 322.802957][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.833'. [ 323.077450][ T5843] Bluetooth: hci3: command tx timeout [ 323.162803][ T9181] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 323.211477][ T9151] chnl_net:caif_netlink_parms(): no params data found [ 323.218552][ T1997] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 323.418426][ T1997] usb 3-1: Using ep0 maxpacket: 32 [ 323.448789][ T1997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.486618][ T1997] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 323.514897][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 323.526578][ T1997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.535692][ T1997] usb 3-1: Product: syz [ 323.551480][ T1997] usb 3-1: Manufacturer: syz [ 323.563103][ T1997] usb 3-1: SerialNumber: syz [ 323.588337][ T1997] usb 3-1: config 0 descriptor?? [ 323.605557][ T1997] cdc_ether 3-1:0.0: skipping garbage [ 323.618928][ T13] bridge_slave_1: left allmulticast mode [ 323.631378][ T13] bridge_slave_1: left promiscuous mode [ 323.637668][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.644916][ T1997] usb 3-1: bad CDC descriptors [ 323.653925][ T1997] usb 3-1: unsupported MDLM descriptors [ 323.660590][ T13] bridge_slave_0: left allmulticast mode [ 323.670232][ T13] bridge_slave_0: left promiscuous mode [ 323.676079][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.846113][ T1997] usb 3-1: USB disconnect, device number 27 [ 324.141551][ T13] team0: Port device bond0 removed [ 324.148807][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.159739][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.171018][ T13] bond0 (unregistering): Released all slaves [ 324.182118][ T13] bond1 (unregistering): Released all slaves [ 324.288869][ T5843] Bluetooth: hci5: command tx timeout [ 324.316671][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.323844][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.332054][ T9151] bridge_slave_0: entered allmulticast mode [ 324.339143][ T9151] bridge_slave_0: entered promiscuous mode [ 324.372884][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.380278][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.397286][ T9151] bridge_slave_1: entered allmulticast mode [ 324.404491][ T9151] bridge_slave_1: entered promiscuous mode [ 324.488666][ T9151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.509055][ T9151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.522712][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.540877][ T30] audit: type=1400 audit(1753470104.774:616): avc: denied { create } for pid=9226 comm="syz.2.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.540985][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.570125][ T9163] bridge_slave_0: entered allmulticast mode [ 324.579097][ T9163] bridge_slave_0: entered promiscuous mode [ 324.588194][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.595299][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.605792][ T9163] bridge_slave_1: entered allmulticast mode [ 324.616590][ T9163] bridge_slave_1: entered promiscuous mode [ 324.731110][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.780237][ T13] hsr_slave_0: left promiscuous mode [ 324.786646][ T13] hsr_slave_1: left promiscuous mode [ 324.794403][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.802134][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.809909][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.822237][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.849152][ T13] veth1_macvtap: left promiscuous mode [ 324.854711][ T13] veth0_macvtap: left promiscuous mode [ 324.876613][ T13] veth1_vlan: left promiscuous mode [ 324.882088][ T13] veth0_vlan: left promiscuous mode [ 324.926240][ T1997] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 325.088409][ T1997] usb 3-1: config 0 interface 0 has no altsetting 0 [ 325.095808][ T1997] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 325.130320][ T1997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.156615][ T5843] Bluetooth: hci3: command tx timeout [ 325.170864][ T1997] usb 3-1: config 0 descriptor?? [ 325.307760][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 325.519144][ T30] audit: type=1400 audit(1753470105.684:617): avc: denied { connect } for pid=9226 comm="syz.2.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 325.741451][ T1997] (null): keene_cmd_main failed (-110) [ 325.851155][ T1997] video4linux radio48: keene_cmd_main failed (-32) [ 325.900233][ T30] audit: type=1400 audit(1753470105.684:618): avc: denied { map } for pid=9226 comm="syz.2.837" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.946387][ T1997] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 326.012220][ T30] audit: type=1400 audit(1753470105.684:619): avc: denied { execute } for pid=9226 comm="syz.2.837" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 326.358962][ T5843] Bluetooth: hci5: command tx timeout [ 326.429210][ T30] audit: type=1400 audit(1753470106.664:620): avc: denied { write } for pid=9226 comm="syz.2.837" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.706923][ T13] team0 (unregistering): Port device team_slave_1 removed [ 331.108953][ T5845] Bluetooth: hci5: command tx timeout [ 331.139632][ T5843] Bluetooth: hci3: command tx timeout [ 343.618402][ T5946] usb 3-1: USB disconnect, device number 28 [ 351.158240][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.686226][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.329086][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.372032][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 447.625024][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 461.296079][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 461.303065][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5946/1:b..l [ 461.311469][ C1] rcu: (detected by 1, t=10503 jiffies, g=28097, q=1588 ncpus=2) [ 461.319274][ C1] task:kworker/0:7 state:R running task stack:22280 pid:5946 tgid:5946 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 461.333940][ C1] Workqueue: usb_hub_wq hub_event [ 461.338996][ C1] Call Trace: [ 461.342277][ C1] [ 461.345210][ C1] __schedule+0x116a/0x5dd0 [ 461.349729][ C1] ? find_held_lock+0x2b/0x80 [ 461.354419][ C1] ? __pfx___schedule+0x10/0x10 [ 461.359282][ C1] ? rcu_is_watching+0x12/0xc0 [ 461.364061][ C1] ? mark_held_locks+0x49/0x80 [ 461.368837][ C1] preempt_schedule_irq+0x51/0x90 [ 461.373867][ C1] irqentry_exit+0x36/0x90 [ 461.378283][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.384276][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 461.389478][ C1] Code: 76 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 b8 10 0f 0f 82 74 02 00 00 8b 35 fa e9 10 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 a9 75 37 12 0f 85 c7 02 00 00 48 83 c4 [ 461.409110][ C1] RSP: 0018:ffffc900052df078 EFLAGS: 00000206 [ 461.415187][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 00000000d52a2460 [ 461.423159][ C1] RDX: 0000000000000000 RSI: ffffffff8de0b1a5 RDI: ffffffff8c1574e0 [ 461.431143][ C1] RBP: 0000000000000002 R08: 504b30d04d94866b R09: 0000000000000000 [ 461.439116][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 461.447089][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.455078][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 461.460301][ C1] unwind_next_frame+0xd1/0x20a0 [ 461.465237][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 461.470352][ C1] ? arch_stack_walk+0x73/0x100 [ 461.475207][ C1] __unwind_start+0x45f/0x7f0 [ 461.479883][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.486042][ C1] arch_stack_walk+0x73/0x100 [ 461.490724][ C1] ? arch_stack_walk+0x73/0x100 [ 461.495577][ C1] stack_trace_save+0x8e/0xc0 [ 461.500281][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 461.505673][ C1] ? __lock_acquire+0x622/0x1c90 [ 461.510620][ C1] save_stack+0x160/0x1f0 [ 461.514956][ C1] ? __pfx_save_stack+0x10/0x10 [ 461.519824][ C1] ? page_ext_put+0x3e/0xd0 [ 461.524338][ C1] __reset_page_owner+0x84/0x1a0 [ 461.529288][ C1] __free_frozen_pages+0x7fe/0x1180 [ 461.534496][ C1] __put_partials+0x16d/0x1c0 [ 461.539181][ C1] qlist_free_all+0x4d/0x120 [ 461.543776][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 461.549244][ C1] __kasan_slab_alloc+0x69/0x90 [ 461.554116][ C1] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 461.560018][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 461.564975][ C1] kmalloc_reserve+0x18b/0x2c0 [ 461.569754][ C1] __alloc_skb+0x166/0x380 [ 461.574176][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 461.579130][ C1] ? netlink_has_listeners+0x20f/0x430 [ 461.584618][ C1] alloc_uevent_skb+0x7d/0x210 [ 461.589402][ C1] kobject_uevent_env+0xca4/0x1870 [ 461.594536][ C1] device_release_driver_internal+0x51c/0x620 [ 461.600617][ C1] bus_remove_device+0x22f/0x420 [ 461.605568][ C1] device_del+0x396/0x9f0 [ 461.609909][ C1] ? __pfx_device_del+0x10/0x10 [ 461.614766][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 461.619792][ C1] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 461.625511][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 461.630541][ C1] usb_disable_device+0x355/0x7d0 [ 461.635751][ C1] usb_disconnect+0x2e1/0x9c0 [ 461.640438][ C1] hub_event+0x1c81/0x4fe0 [ 461.644880][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 461.649828][ C1] ? __pfx_hub_event+0x10/0x10 [ 461.654598][ C1] ? assoc_array_apply_edit+0x5c0/0x6c0 [ 461.660147][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 461.665972][ C1] ? rcu_is_watching+0x12/0xc0 [ 461.670749][ C1] process_one_work+0x9cc/0x1b70 [ 461.675729][ C1] ? __pfx_process_one_work+0x10/0x10 [ 461.681113][ C1] ? assign_work+0x1a0/0x250 [ 461.685708][ C1] worker_thread+0x6c8/0xf10 [ 461.690310][ C1] ? __kthread_parkme+0x19e/0x250 [ 461.695351][ C1] ? __pfx_worker_thread+0x10/0x10 [ 461.700464][ C1] kthread+0x3c2/0x780 [ 461.704533][ C1] ? __pfx_kthread+0x10/0x10 [ 461.709131][ C1] ? rcu_is_watching+0x12/0xc0 [ 461.713939][ C1] ? __pfx_kthread+0x10/0x10 [ 461.718552][ C1] ret_from_fork+0x5d4/0x6f0 [ 461.723158][ C1] ? __pfx_kthread+0x10/0x10 [ 461.727752][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.732534][ C1]