last executing test programs: 1m6.859061428s ago: executing program 0 (id=3502): socket(0x1, 0x803, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='environ\x00') lseek(r4, 0xfffffffffffffffe, 0x0) read$usbfs(r4, 0x0, 0x0) readv(r0, 0x0, 0xfffffd99) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010, 0x0, 0x1}, &(0x7f0000000280), &(0x7f0000000080)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000000)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fe80f8440f0909b881000f00d8", 0x45}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x131b, 0x3e80, 0xc, 0x0, 0xfffffffffffffcfe) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) prlimit64(0x0, 0xe, 0x0, 0x0) 1m4.658175722s ago: executing program 0 (id=3508): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206010200000000000000009f42b5730100ff455062a8c51ad9263e76f501055021ff10000300686173683a69702c6d6163000500010006000000050005000a00000016000300686173683a6e65742c706f72742c6e65740000000900020073670849300a1b91bc1f2a4bd0bb1e955678f6f5c1ce6d59737a0a7f51653562de06e68c922ddd0cdea06d47cd58e4c47378756fac7c2dc4207a88c5afcdfd87060179da0cb2de383c156a9f0959c87c6ec48214"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000000)=@null) ioctl$SIOCRSSL2CALL(r2, 0x89e2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0xffffffffffffffcc, 0x0, 0x0, &(0x7f0000000cc0)=""/62, 0xffffffffffffffa7}, 0x85b2}], 0x3ffffffffffff4a, 0x60010026, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x6}, 0x6) 1m4.128382063s ago: executing program 0 (id=3510): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/147, 0x93}], 0x1, 0xfc43, 0x7) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) pread64(r1, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) 1m4.013307657s ago: executing program 0 (id=3511): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4000000, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x8e, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) 1m2.992070853s ago: executing program 0 (id=3513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='ext4_mballoc_alloc\x00', r3, 0x2000000}, 0x18) 1m1.344111074s ago: executing program 0 (id=3519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000002c0)="ae935197e0309ea933eb6d197851d6b4955db0be94b17662a41ea8c4b8651dd29f6b776ceba00cfba3e96b869c61cca932a5c2d45b44fcb9923d81d9ee26f3c0236723b422ba18751046d033b1de287fd02cbb70349726c4037aab43f85671336c616ab68be9c723c1a73c59ff1fa141e8480e69a721b4d4b5a58d23d5a46941c6a3af82862308e4baeae44039", 0x8d}, {&(0x7f0000000180)="7ba17660448feb6de38aa67c31e893487b6d9584a6d0dec585770376cb790b42382b74a42736cea7a1bd49e24a52257bf6de848de9d253ee40ba3fead64dc3ac", 0x40}, {&(0x7f0000000440)="8264f1e76db6037e06e9bd4e3c56d92d365131247e6534ba06e1ca3120b24b795e787025a56dc5abde15e280ed1bcf794e64be0a4f6bd9f3b3c43124eb4c", 0x3e}, {&(0x7f0000000800)="6f96244496d48d59012604f167307f15dba0055c47dc892e2f7a5bf8b6a2bcd1141666d977923a46bf40d77e359c93c661d952e05839ffa6241ae37c7e02a3b71b9cfb782e6bfce2ed1cf471c5b5e6854055b097cfe93534224e13bc849e08f1228e26e1988dfa4ce91b2fbfed11fcdc051aa13f702c0ee92b2d88ca1aad2d77d4d34759a45bc7b8a6f9f1f41bee47b4eb4df102ca536db35fcd9073ed74063ed7cbfbd4867c5422fc07569e4343109c2160d7a7a40000003a94db994e3a8dab6ba413037cdc7a9d3a63000a927618d54431d041", 0xd4}, {&(0x7f0000000540)}], 0x5, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="41ea3a2ac5da887a1b5d", 0xa}, {&(0x7f0000000640)="e9d1c71296c767975e9c282528f9fc2b3ca1bedf", 0x14}, {&(0x7f0000000d00)="7f9742ffff000000000000f96156c9aad3c53a210716fdc9fc79af925a566066ee7033e2c26d7896f38ea482f7161fdf4d1f67e2804958c673a5a4af665704994a65ca588e18e67bf5e12287aaee4942386abe16191e4b6d6271c5e1476800000000000000000000000000000025bf9cc93455d0376f562dab32462fe6bb2af85a5462d851215d755b1d8f9a1927601b38a5b124cca279d7fccf036e5606145e7e01553859", 0xa5}], 0x3, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r1, r1, r2]}}], 0x90, 0x4004c001}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="aeed994021b328fb0bf4922e8ac9cb031396aeb5bd6264afe6572101d4347df205fc101fedac313e614f32ed4957a0758f7897ce78c120d75e7c4b12117519ace2c69574fcb928f31d50e6332d03927684c5f929bc03a6df82bb0a859cc83c558a6c02066aeccba87eb25fa9a39a8dfe8db9dc0b7c4b8e58", 0x78}, {&(0x7f0000000900)="e66646e0702605adcd698283934da24a8d58dfcd63dcb9ea3f25fa99ec3b1bc4722998d468c2985cab4d6a719dd8a3c33d4188f4fac490b4a52c912f05f5", 0x3e}], 0x2, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x98, 0x801}}], 0x3, 0x0) getsockname$unix(r2, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x9442) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r5, 0xffffd000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x41, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020208c1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='erofs_lookup\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)="8ba6046b", 0x4}], 0x1, 0xa) io_uring_enter(r8, 0x4474, 0xecc0, 0x20, &(0x7f0000000000)={[0xcad4]}, 0x8) r9 = socket$inet6(0xa, 0x1, 0x100) r10 = socket$rds(0x15, 0x5, 0x0) getsockname(r10, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000940)='net/igmp6\x00') 45.808528321s ago: executing program 32 (id=3519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000002c0)="ae935197e0309ea933eb6d197851d6b4955db0be94b17662a41ea8c4b8651dd29f6b776ceba00cfba3e96b869c61cca932a5c2d45b44fcb9923d81d9ee26f3c0236723b422ba18751046d033b1de287fd02cbb70349726c4037aab43f85671336c616ab68be9c723c1a73c59ff1fa141e8480e69a721b4d4b5a58d23d5a46941c6a3af82862308e4baeae44039", 0x8d}, {&(0x7f0000000180)="7ba17660448feb6de38aa67c31e893487b6d9584a6d0dec585770376cb790b42382b74a42736cea7a1bd49e24a52257bf6de848de9d253ee40ba3fead64dc3ac", 0x40}, {&(0x7f0000000440)="8264f1e76db6037e06e9bd4e3c56d92d365131247e6534ba06e1ca3120b24b795e787025a56dc5abde15e280ed1bcf794e64be0a4f6bd9f3b3c43124eb4c", 0x3e}, {&(0x7f0000000800)="6f96244496d48d59012604f167307f15dba0055c47dc892e2f7a5bf8b6a2bcd1141666d977923a46bf40d77e359c93c661d952e05839ffa6241ae37c7e02a3b71b9cfb782e6bfce2ed1cf471c5b5e6854055b097cfe93534224e13bc849e08f1228e26e1988dfa4ce91b2fbfed11fcdc051aa13f702c0ee92b2d88ca1aad2d77d4d34759a45bc7b8a6f9f1f41bee47b4eb4df102ca536db35fcd9073ed74063ed7cbfbd4867c5422fc07569e4343109c2160d7a7a40000003a94db994e3a8dab6ba413037cdc7a9d3a63000a927618d54431d041", 0xd4}, {&(0x7f0000000540)}], 0x5, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="41ea3a2ac5da887a1b5d", 0xa}, {&(0x7f0000000640)="e9d1c71296c767975e9c282528f9fc2b3ca1bedf", 0x14}, {&(0x7f0000000d00)="7f9742ffff000000000000f96156c9aad3c53a210716fdc9fc79af925a566066ee7033e2c26d7896f38ea482f7161fdf4d1f67e2804958c673a5a4af665704994a65ca588e18e67bf5e12287aaee4942386abe16191e4b6d6271c5e1476800000000000000000000000000000025bf9cc93455d0376f562dab32462fe6bb2af85a5462d851215d755b1d8f9a1927601b38a5b124cca279d7fccf036e5606145e7e01553859", 0xa5}], 0x3, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r1, r1, r2]}}], 0x90, 0x4004c001}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="aeed994021b328fb0bf4922e8ac9cb031396aeb5bd6264afe6572101d4347df205fc101fedac313e614f32ed4957a0758f7897ce78c120d75e7c4b12117519ace2c69574fcb928f31d50e6332d03927684c5f929bc03a6df82bb0a859cc83c558a6c02066aeccba87eb25fa9a39a8dfe8db9dc0b7c4b8e58", 0x78}, {&(0x7f0000000900)="e66646e0702605adcd698283934da24a8d58dfcd63dcb9ea3f25fa99ec3b1bc4722998d468c2985cab4d6a719dd8a3c33d4188f4fac490b4a52c912f05f5", 0x3e}], 0x2, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x98, 0x801}}], 0x3, 0x0) getsockname$unix(r2, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x9442) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r5, 0xffffd000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x41, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020208c1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='erofs_lookup\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)="8ba6046b", 0x4}], 0x1, 0xa) io_uring_enter(r8, 0x4474, 0xecc0, 0x20, &(0x7f0000000000)={[0xcad4]}, 0x8) r9 = socket$inet6(0xa, 0x1, 0x100) r10 = socket$rds(0x15, 0x5, 0x0) getsockname(r10, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000940)='net/igmp6\x00') 15.425699607s ago: executing program 2 (id=3679): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDSKBLED(r1, 0x4b65, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366180c000280080001400000000430000180080001006e6174002400028008000140000000000800034000000014080002400000000208000440000000120900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000480)={0x0, 0xffffffffffffffe5, &(0x7f0000000440)={&(0x7f0000000300)=@alg={0xe0, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {{'gcm(aes)\x00'}, '\x00', '\x00', 0xcc55df52893605f1, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f0000000000000000f195a69ddb9400"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) r8 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="100000000000fd001c0012800b00010062726964676500000c000280080002000800"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120110010928fc10ac059102254301021301090212000100002f00090484000003e102"], 0x0) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 12.410994517s ago: executing program 2 (id=3689): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2881, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x110, 0xffffffffffffffff, 0x2000) r1 = mq_open(&(0x7f0000000080)='\x00', 0x80, 0x8, &(0x7f00000000c0)={0x0, 0x5, 0xffffffff, 0x6}) mq_timedreceive(r1, &(0x7f0000000100)=""/162, 0xa2, 0x4, &(0x7f0000000a40)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1600, 0x2, 0x4}, 0x18, 0x1) syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002500), 0x3, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) syz_emit_ethernet(0x879, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08004500086b000000000011907800000000e00000014e214e20085790782fb8f44b9f9f508bead7cf4e3e8c47ffa37d8707b8b523bdd76d0947d33d2572e47e34ad333c89d98e3d041052cddf12aafcf174c3e72b46d0e23f4d2983d3411acfe9a88cb49bf1c20271850c4089639907359aee0a1bba7c5c8cba7b3aea33f49a73d0a55ea63ef1eee6b5e2c0a17812bcda310fe7fe4b1b4ae90fdcf85c1ec0718c2cbda07fbfcc45e950b77368ddd0e376b8f23d975cd8d9ac0a2aa7c25a0d3b7a4a3580b2ec56cd55a982e20d48ae496f9d9e9e1054dd4c36de28cbb383be2a2c67183cf3ad4001649445d422702532f6aeeb3463bb0f8d89a0e4ac544345c4eb5b64f164f3d38da16aa98eab3b690bfd675c546f759ddabd8a7a1b6f045941bcb77df0a62640f02de0fa154a5358f3bdfbddcbaafa560ff6a463414173d4ae4feb83bc1bbd2e28a03264d9e4c18ecf77d1b9d0ec45ba92508cf383d779354a07b59de17c388c15fe38675765464ef35aff177057ff9654dde8499c96b563ca9d1153468a68c0ad99452290c43cacf0cb1ba1fea67f16b4a30c9d19eabd9718d82881c909b5efdefa4967303398fb3ebbb62ab2470ff1295bad42b623ef6d3ea7ae8921832be97f5c2ba1c065aca41ccd323311321e4e46f99c1abddeb15f9ef538761bf457ccb2e83fb5a93e9b11ec2d326b4493665db4ad99485c864b0ae1aecb3501feda45aa3287afa60cf150c82407fdccc0a2ebe5c88ca4b221081c324e1f114ef9bd95f6b697c275fd278ef4983ee630001ca52d9647dda6e2dd7a07d5946c83ae6bcc6fe424fcc3645fa8ea0745d51fa4a68168f86e63f04d88d9fd95537823724804f0835543d0e89840552c4885db4d9b1889fd83891bd895ff433ef99f68fc41d765a31b75909c3932ebd156c6760361d6caf56c834703a9bbe09dff572ad735bc1bc4f5d97d2b95b9898d9c10ac10d9982f2c23cd3a724d67e4e7476bc5a40a1263ae67edcb1abcf6a2d996b8a4dc00887639d7658cf45a4718ec7290da4f230c34fbdb5cbc36f06e39d00520756710a2b5c1c53711c8ff0c9e19ead3ea0460ac4605650cb139562e8199a109cc5ed7b4f2b45c2f7100192cca135a88afb9176f408e4a6fb1fad0528bcfecbd21a2d709ccd4df6275f8bb52ba5cb07bd9dd401d0ac1dc1c0017080f71b5c0c8d03fbdf95610c9d05007a92493456c363913773423d3a1fd0e2cb794d765f2a7e7980f22c27bfd70b2d441dafd0caa382b028d8c4669f898d46f3089bd3f1bc54963524fcd09065db60470e781d65413e234328a76fd59466709917832b257cf447092c70ca7b879b1f661e0c13e2b7e8ce59cef9668947a3381c040c2e3feb8c3c53a5eef4cf70483807d8794b42cdc420d9cae21bc5c682ac8a14a12338e70375966d7af4099f44779ce09476251cf2a2a56ee9cff29f56aa9c33dc755439d1af9f58907f3471c30a1a694d62f22c28cf84756101e561c941da535f9fc466bbacd075d68dda8084d63596f48c34508b2786f89f20b8989a11109a880edc7f40e403bf5cba40a38a24b21e9bd3ceac1c6ab85672bddbf70dd425872489a4338f6dbfe5cfcb077531f1748e9e2f67641a0a52d05d95a3d736ed96236733cf2da3848a8ba228e479e7bb1ea385e51ab9f74b52fc235f206cac116ac5befc6ab74b789b69a83e5614a93f0e38f0e862b7a428c75824b62eb88614937b70c0ac407cb27fd26ed19f1b052c881047ebc8267b4049ca0010ac188a0bdb36858eb7aa3e0a4e367a48e3fa46bd38381e8118ab9486d16829ca51a1620dc335796e472fedf03c3861bbfcc6467b811a8240fc00941250c58386fe01336ed98496d6de8c79e8d81be90e884e211ef64bd226c8d20bbdeda3c59443a643e3ed1933f4de4bb6fc21b244bb7429b51a01da7c16bc0b1f86fed81fa30b1bc71f97aa3825e45b71f9d5f781c880c3071f76f2385a222f2f10d4b3feb461f294def69d3b9cfb497e378aefadab9bcb36b292c1d9223b7ccb87966b27cffaa48b683c05bed1e197cdf31ae85d3fec356d26b3a3fa05bfce5872fbdda6d25e370764b84baf4002d131251af37fd49d29d5ca32435c3b642f00a59b3438fe5b2c51f83523e439a81ccca07556aaa0868788d11a5353fadfe5cd7122f5964fed4a6adfd4bb6343fe1ce2ada342329541ecb0d81bcf596c262fee37cf359eeaf39ffe628f9d48b23c783ce7c83fba430746494b3742cfe9a492bd43b3ca27aec50aeaab23977f0b1dcc57a21b68a7cf23981de0d4719f5901c0ee6c6b1b72475adad4515dee5fc0508dbabeef8f574414ce15d188e51d3a521d2b067f4709672a5a14e162c6920cc0eddc0f96ab31c944f6c8ca75fb196ffd767105201a00563425ec474d1ac0b5918c60df36e315786374d94d86c7e98d8e0e0276499da63926fa0992add83dae394f3c0858cb98ae4780287be3466b16a41ceb8405689913bbc4077bfd99771b6917b38b214d6d1d7842d7709bbb08fef3af581faca8a5cb0d2298e396c94fcea21b6e58eadb33fc6496896908d593c5fb9235b9f5c808514dd7f154438c9ff5ac92e26e1a2e073e05f8cc7672d78900e8a7c886b1c850666b81521471ccd17783d2acfb7a2e031b990bc822e3421897b6b243291a3522f9708595e1265defd678efc12a94dcc76f0d9156557bd02f4bd0e4900b7463165555483cef562fbbebb6cbf5f312584581a54b690b3d34fd5aeedc9bb9a35c4f856f98eaa5e3a9eff7bba47292b774d5848ff93ffe21c9317cc0b1135fa7468620842a8460e7befddde90007e87dcb5626fc3e097084e6326fdd686000bc47800a90dc6f2f091ed3565022546663a30424eef276aa3dc6cba298349f49e6590d57c1f3ab13765a9cfa86b192730809d891f07a594c8790df0f8cfa9e6a3681ad82236bfb31b4a815a6a72cb750ad65aca58b23923397afc80424ad387da2532c626a67f1019a5701212db5483ded6c78e6ede4626c67c5b7a16d5143dff1107df06603ebacd"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000024c0)={0x1, 0x8, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 8.060554067s ago: executing program 2 (id=3703): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xae, 0x800002, &(0x7f0000006680)) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x1, 0x12) (async) modify_ldt$write(0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r5 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40001, 0x184, 0x10}, 0x18) r6 = dup(r5) accept4(r6, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) (async) msgrcv(0x0, 0x0, 0x0, 0x3, 0x6000) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 7.214480261s ago: executing program 2 (id=3706): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x0, 0x5f, 0x0]}}, &(0x7f0000000040)=""/230, 0x1e, 0xe6, 0x1, 0x2, 0x10000, @value=r1}, 0x28) r2 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x8, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}]) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='mm_collapse_huge_page\x00', r6, 0x0, 0x9}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x4, 0x401, 0x80) getitimer(0x1, &(0x7f0000000440)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x103b02, 0x1e7) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r11, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r10, &(0x7f00000000c0)='!', 0xb7f40}]) 5.889464191s ago: executing program 4 (id=3709): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x8000000000000000, 0x8d00, 0x1}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x4000010, r2, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000001940)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd600107000008400000000000000000000000000000000000ff02000000000000000000f0ffffffeb028c072200089078"], 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r8 = geteuid() r9 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000100)=0x21) r10 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f00000000c0)=0x32) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000300, r8, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.933402698s ago: executing program 4 (id=3710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000400)=0x8000, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket(0x25, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000740)=""/252, 0xfc}], 0x3, &(0x7f0000000280)=""/70, 0x46}, 0x80}, {{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000840)=""/184, 0xb8}, 0x2000}], 0x2, 0x2, &(0x7f00000003c0)) 4.881679675s ago: executing program 3 (id=3711): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002040)=ANY=[@ANYBLOB='P&\x00', @ANYBLOB="000229bd7000fddbdf2583000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2650}, 0x1, 0x0, 0x0, 0x4}, 0x4810) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4ed8ee5a90e2bf26, 0x4c831, 0xffffffffffffffff, 0x0) 3.979385145s ago: executing program 4 (id=3712): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x183001, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 3.901384002s ago: executing program 3 (id=3713): r0 = getpgrp(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x8007c49, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$packet_int(r2, 0x107, 0x10, 0x0, 0x0) prctl$PR_SET_PTRACER(0x1b, r0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 3.633478064s ago: executing program 2 (id=3715): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) 3.632041565s ago: executing program 3 (id=3716): connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40002161, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084523, &(0x7f0000000040)=""/233) ptrace(0xc606, r0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000000)=0x9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {0x0, 0x6, 0x1}, {0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x2, 0x4e22, 0x1, @in6=@empty}}]}, 0x154}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_usb_connect(0x3, 0x3f, &(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRES16=r4, @ANYRES8=r9], 0x0) syz_usb_control_io(r10, 0x0, 0x0) 3.596028825s ago: executing program 4 (id=3717): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000000c0)) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "878068e4b970518865cf92e52cf70fe3"}, @generic={0x0, 0x2}, @eol, @sack={0x5, 0xa, [0x0, 0x4]}, @generic={0x13, 0x2}]}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000006640)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x364e, &(0x7f0000006780)={0x0, 0xb5e, 0x0, 0x2, 0x29d, 0x0, r3}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000200)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.587426642s ago: executing program 5 (id=3718): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x31f) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r2, r1, 0x0) 3.176488778s ago: executing program 1 (id=3719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000001300)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000000000110000000000000025cf16452067980b621d8c6cadcad6dc009bcbac8bc5416a1b3195d160c12c5f04eff2c5a99ce9268e63043f3a6ab421aa1329668608c67437a4d3c2b662d0281fa57afc76257b2f20cfff0056fdec1a4d92276bfdf94bf463e425cc3f1914a335b82872c54ee6de993c44cb69743276bc5d9628616b203528fd2b11048b126a42b00213ae6af264f89884dadde0aca7eff08d4657b878872388855edb9eca22e806fb91b1cddabeaa658c136179ae2a9293e7d76868a9e3d65d53fb54165745ca169e92", @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) 3.099923349s ago: executing program 2 (id=3720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000001300)={0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="f0ed427854500fce35a5802bb81f8a739f2ac4950689554323589969f254bd9198c61211e675f25e6e5c0d779d916cdd1338257151803c85eeaaec7e8ab0afee82069f2fe67931387bada08ae1872bfac0c3757c08543dbca2fb2e62d3c1a0d7358008ec18cb6f48f8ae6609c8043c3307bcae41925a50d13b01d23919898dd710c3ead1d224438b50e58e45dc8dd6e266bf1bd095ac598864ad1dbc0959d731cf3cc2925b3d004588d5065dc74f34c42f64e478802d0108fade3bb27809b7e0a08a4040d550db73b1e43e8fbcf6e9d89f92edf1681de8ec9dc8ec8716"], 0x0, 0x0}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000018000480140001800a00010072616e6765000000040002800000074007bcb709140000001100010000fdff00000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000090155d41b71a630d9fdae46580310daffc9491ec5b3ccbd15ed43a700caba7e892f6c21687bc7148af2615cb0468f26be73fb4902c70e306d2972c979f8a908c53d4cdc1b1d3d3358afddca309ab75468445344308451993357bb5fc440c8691ebe7a6ada9b6be6a479aca8fa62f1d4b48e595dd0a1754f9491b7aaceaf3f2fd8a92fc76b57a552bde30d12cdbdc6473f7a88b62ad6ea630ecfc434b7ccbcf595594d04e0e4a54cc555530afbb62ce5b732e2d760926da6442831eb0e200498eb3f4dfdd8827fad56558ab860ed01f2fcd935c20f72a", @ANYRES32, @ANYBLOB="000000000000000000000000110000000000000025cf16452067980b621d8c6cadcad6dc009bcbac8bc5416a1b3195d160c12c5f04eff2c5a99ce9268e63043f3a6ab421aa1329668608c67437a4d3c2b662d0281fa57afc76257b2f20cfff0056fdec1a4d92276bfdf94bf463e425cc3f1914a335b82872c54ee6de993c44cb69743276bc5d9628616b203528fd2b11048b126a42b00213ae6af264f89884dadde0aca7eff08d4657b878872388855edb9eca22e806fb91b1cddabeaa658c136179ae2a9293e7d76868a9e3d65d53fb54165745ca169e92", @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$chown(0x4, r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffd2d) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x1, &(0x7f0000000140)={0x0}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000300)="bce87b31d3f9cf870235bb460aed4409d222e9aee67dc85536bbb2ea8119cf847e0a52888eae2eca81aad1a34ef3fa178f25e543a38d8f688828a11f99f96ac17c68b10a601d0d5ea2553d8ac7b7d82e9ce111a0560d0e5a11bf2ae24f16d747593bdeabb7449d4c617a05f395bef02b0bc41580b6f810df5767f0b3c650148841b2ccb5eb7ea3445dc61b09989424599b80cb28b9e977c76b631b9922886094e2a7864ae3a0b43f1fa7179bf4e83eb2be2fed843bec73e4714b428569461d4d85fa3b025d742e288ca4d6d2f24f6854f50dfb881bead7", 0xd7, 0xfffffffffffffffb) 3.046823326s ago: executing program 5 (id=3721): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x3f00, 0xff, @remote}, 0x80, 0x0}, 0x0) 2.653646638s ago: executing program 5 (id=3722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000400)=0x8000, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket(0x25, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000740)=""/252, 0xfc}, {0x0}], 0x4, &(0x7f0000000280)=""/70, 0x46}, 0x80}, {{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000840)=""/184, 0xb8}, 0x2000}], 0x2, 0x2, &(0x7f00000003c0)) 2.547960713s ago: executing program 4 (id=3723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000100)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x7}, 0x8, 0xa1, &(0x7f0000000000)="b6d6b713bf5440d48a7c700f1be50ec7a5c2ed0fa056b0f29a17b8fe34127b54ca2f825e252d60027a950bb371e3e5fe34fc4b5b98cc783fe9a530a19ea7542b4d5c54ba1eebee8a66c62acc94f7c20b28e2ada4914170786ea3e0b13edfcfd260dc3bef2738cbd25bcc0be7ad6c02b01b791dd989b30a3e536a67b8b057eb59b056cfb60cfedb42e384088d282d9f53518539f55fb5f6af4f2882720591a49e3a04eaef924044e3df2987ec7d8dbf2105eb5e96b301839eb06a9c19792e51e0371963e82d2864cb26c54bf90f21ee", 0xcf, 0x5, 0x20, 0x0, 0x8000, 0x2, &(0x7f0000000180)="510e1bca8a243689d8d076876464a5f60575edc0c9674fbf7d9c77c538b11898da0731d970f5eaf453be8d484868b0fbf523456427cd35223ca21ff0f5b59f878479b3bc3d3f1c7238c06f4c983956ca4b5ba62b4ec89358dd4df6b87e38edfbb8ebe08227bc6cf9bfab272a66d49b57d5c909d65f"}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 2.019194552s ago: executing program 1 (id=3724): migrate_pages(0x0, 0x400, 0x0, &(0x7f00000000c0)=0x2) close(0x3) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 1.986316879s ago: executing program 1 (id=3725): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x2, "3ad5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x0, 0x8, 0x72, {0x72, 0x23, "fb0e9ef53ff41b82389611629dd055680f8b4447700c0076a53af5430c7969dc084707b642fefffa3e3cca3c536e65482188cc557e4299708da07ddc01a2690acfd4b7b00c5d2361441d73c180c311615c1f45828d6526af5e2703f88e590d69bb899badd85171ebf203dc14c052e748"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x40, 0xa, 0x99, "b2edc3e6891cae41a71d37e8cbb3dbbd687c5c3c395194e29cdc6dd53451b15e8cea71cde1f3f18062ab02698877bfd526c32a6b07b8d55404f58298c4b6450e10884daae2ea4971d629b90245fcf93d6b85bd235f07332c5a0a3482ac8c7667a666b55fb9ded4805fccce823251f00335b8338e9f8eabe019336db8e9bf059f934c9f95f7f7506eed7b4291664fb5f1fc32e2970d252f9c64"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x81, 0x1, ';'}, &(0x7f0000000440)={0x20, 0x82, 0x1, 'A'}, &(0x7f0000000480)={0x20, 0x83, 0x2, "46b2"}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "7c05eb"}, &(0x7f0000000500)={0x20, 0x85, 0x3, '.-?'}}) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3, 0x6}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r7, 0x7}, 0x8) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000200)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.947857851s ago: executing program 3 (id=3726): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x40a080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"e50d1af80100007ea25fdd00ff00000008007effffff7f00", r1, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r2}, {r2, 0x141}, {r0, 0x5000}, {r1, 0x4001}, {r2, 0x9268}, {r2, 0x40}, {r0, 0x4021}], 0x7, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000280)={0x6, 0x6, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2a4}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0xfecd, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[@ANYRES64=r9], 0x118) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES16], 0xb0) dup3(r1, r0, 0x0) 1.762694747s ago: executing program 5 (id=3727): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x183001, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd7000000300", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 1.703225s ago: executing program 5 (id=3728): socket$pppoe(0x18, 0x1, 0x0) mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001400)={0x0}, &(0x7f0000001440)=0xc) prlimit64(r0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x1}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a801", @ANYRES16=r6], 0x1a8}}, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 1.614984555s ago: executing program 4 (id=3729): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000040)=0xb7f) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2c2dee9e506b990) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="7deb", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x24048801) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{r5, r6+10000000}, {0x77359400}}, 0x0) fsopen(&(0x7f00000001c0)='affs\x00', 0x1) 738.767264ms ago: executing program 1 (id=3730): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) 648.512732ms ago: executing program 1 (id=3731): syz_open_dev$video(0x0, 0x3ff, 0x0) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000240)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, 0x0, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) 553.088841ms ago: executing program 3 (id=3732): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioprio_get$pid(0x2, r3) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES16=r5], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001000)={r8, &(0x7f0000000fc0)}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r6, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x80000020}], 0x2, 0xa0, 0x0) 537.252508ms ago: executing program 5 (id=3733): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000000c0)) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "878068e4b970518865cf92e52cf70fe3"}, @generic={0x0, 0x2}, @eol, @sack={0x5, 0xa, [0x0, 0x4]}, @generic={0x13, 0x2}]}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000006640)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x364e, &(0x7f0000006780)={0x0, 0xb5e, 0x0, 0x2, 0x29d, 0x0, r3}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000200)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.081465ms ago: executing program 1 (id=3734): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002040)=ANY=[@ANYBLOB='P&\x00', @ANYBLOB="000229bd7000fddbdf2583000000", @ANYRES32=0x0, @ANYBLOB="c0111180bc11058070010080bc000380b8000180100001800400090004000a0004000a001400018004000c0004000100050007000b0000001c00018004000b00050005000f000000080002000200000004000a0010000180060004000700000004000a001c0001800500070001000000040009000500070005000000040008000c00018006000400ffff00000c00018004000b00040009003000018005000700f600000006000400030000000400010004000b0006000400970c00000400090005000600180000000c00028005001801150000000a00010008021100000000004c000280050019010d000000080022010202000008009f0007000000080026006c0900000500190107000000080026006c09000005001901070000000800a000030000000800a000030000004c0002800800a1000700000008002201c602000008002600a8090000080022015c01000008002201e103000008002201e1030000050018011700000008002700010000000500190106000000e80400800a00010008021100000000007c0103800400020004000200280001801c00018004000b000400080004000b0004000900050003000200000008000180040008c718c0707a9141e2df004c0001803400018004000a000400010005000300030000000400080004000c000500050007000000050003000b00000006000400030000001400018006000400010000000400090004000b005400018050000180050005000d00000004000800050003000c0000000600040000000000050006000f00000005000600110000000600040029000000050003000600000005000700000000000800020001000000a40001800c0001800400010004000c002400018003000a0004000a000500050009000000080002000400000005000700060000003400018004000a00060004000000000004000900080002000400000005000700060000000500070003000000050006000c0000001c000180050005000a000000050007000700000005000500040000000c000180050006001600000014000180050006000a000000050006000e00000004000200e0010380d8010180300001800500060005000000060004008000000004000a0005000300070000000400080005000700d300000004000c0044000180050006000100000004000b00050006000b00000008000200020000000800020004000000050003000700000004000b0004000b0004000900050006000e0000002400018004000100040008000400090004000c0004000a0004000a00050003000e000000280001800400090005000600070000000800020001000000050003000a0000000500060002000000240001800500050000000000050007000000000004000a0004000800050005000c00000034000180060004000800000008000200010000000500050009000000040008000400090004000100050006001000000004000c00380001800500070001000000050006000300000004000100060004000400000004000c000500060003000000050003000200000004000b004000018004000a00060004000100000004000c0005000700070000000800020003000000050006000300000004000100060004000180000008000200000000002000018004000100060004000000000004000c00040008000400080004000800240001800500050004000000040001000400090004000c0004000800050006000e00000004000200ac000380a00001801c00018004000800050007000000000004000c0008000200020000000c000180050007007f0000002c00018004000b00050003000600000006000400050000000800020004000000050005000500000004000c001400018005000600180000000600040098000000280001800500070081000000080002000100000004000a00050003000500000004000a0004000b000c00018005000700070000000400020004000200d00003804800018014000180040001000400090004000b0004000c000c000180050007000100000024000180050003000f000000050003000c00000004000a00060004008000000004000a008400018024000180050007000900000006000400ffff000006000400040000000500050004000000180001800600040009e600000400080005000500070000001400018004000a000500070007000000040001001c00018005000700d800000004000c0004000a0005000500080000001400018005000700000000000500070001000000180200800a0001000802110000000000080203800400020004000200700001804000018004000b0004000100050006000b0000000500070000000000050007007800000004000b00050003000e000000050006001200000004000b0004000b002c00018004000b0005000300090000000400080004000c000800020003000000080002000200000004000900040002003800018008000180040001002c000180080002000100000004000a0005000700c1000000050007000900000004000a000500030002000000b80001801000018004000a0008000200010000002c00018005000700ff00000004000a00040008000500060018000000050005000c0000000800020003000000340001800400090004000a00040001000400090004000a00050003000b00000004000b00050006001d000000050007000800000028000180050007000a00000004000900050005000c000000050007007a00000006000400010000001800018004000c0005000600030000000400090004000900040001801800018014000180050007000900000008000200000000004c0001802800018004000900050006001000000008000200020000000400080004000c000800020002000000180001800400010005000600120000000500060010000000080001800400080034000180180001800600040001800000050006001600000004000800180001800500050000000000050007000800000004000c000c00008008000380040002001800008008000380040002000a000100ffffffffffff0000380000803400028008002700030000000800a1000000000008002201830000000500190106000000050018011d000000050019010f000000c00200800a00010008021100000100000a000100ffffffffffff0000b800038004000200500001800c00018004000800040009000c000180050003000000000034000180040008000800020002000000050003000b0000000600040081ff000004000b00050003000400000004000b0004000c005c0001800c0001800500050008000000340001800400090004000b0004000b0004000b00050005000d00000005000300090000000400080004000c000400080004000a00180001800400010004000c00040008000400080004000b00040002004c00028008002700000000000800a00004000000080026007c15000008002600e01500000800a10007000000050018010b0000000800a10008000000080026006c0900000800a100050000000800038004000200800103800400020074000180180001800400090004000a000400010004000b000400010014000180050005000f00000005000700030000004400018004000900040008000500070005000000050005000100000005000700020000000500030002000000050003000d0000000800020000000000050005000f000000000101803800018005000300070000000600040007000000050007008000000004000c00080002000300000004000c0004000b0004000c00040001000800018004000b002c000180050007000300000006000400ff0f0000050005000c00000004000c0004000b000400090004000c00180001800400080004000b00050006000c0000000400080010000180050006001e000000040009001c00018004000b0004000100080002000400000005000500030000002800018008000200040000000500060004000000050007008100000004000b000500070005000000240001800500030007000000040009000500050004000000040001000600040001800000040002000a00010008021100000100000a0001000802110000000000340300800a00010008021100000100000a00010008021100000100009c02038004000200e00001801c0001800400010004000100050006001e00000008000200040000001c0001800500050006000000050006000500000005000300020000003c0001800500070010000000050003000a000000050007000900000004000b00060004003000000004000800050005000c00000004000b00040008001400018004000b00040001000400010004000900300001800800020001000000050007000f000000050003000a000000060004000700000004000b0004000a0004000c002000018004000900040001000400090004000900050006000f0000000400090004000180bc0001804400018006000400090000000400010004000a00050003000700000005000700040000000400090006000400040000000800020003000000060004005100000004000a003800018004000a0005000300090000000500050005000000050003000a0000000800020000000000050003000e00000004000c00040008001000018004000c0004000a0004000a001000018004000a0005000500000000000c000180050005000c00000010000180060004004c00000004000a00f800018010000180050003000200000004000c000c000180050006001700000028000180050007000000000004000b0004000b000400080004000a0004000800050007000200000048000180050003000100000006000400ffff0000050003000f00000005000300070000000500070007000000050005000a00000004000a00050005000800000004000800040001000800018004000b001400018004000c0004000900050003000e00000014000180050007000400000005000300070000003800018008000200010000000500050005000000050005000c00000004000c0004000a000400010004000a00050003000700000004000b003400028008009f0006000000050019010e000000080026006c09000008002600c8140000080022013902000008009f00000000000a000100ffffffffffff00001c0002800500180118000000080022011200000005001801020000000a000100080211000001000014000280080027000000000008009f0005000000f80200804401038004000200e40001802400018004000c00060004000300000004000c000800020000000000050003000c0000002c00018004000a00050006000700000004000800050006000d00000008000200e532e79e050007008000000020000180050007002700000004000c0006000400ff000000080002000200000008000180040009001000018004000b00050006001a0000001000018005000700000000000400080020000180040001000500050007000000050007000800000008000200020000002800018004000b0004000a0004000b00040009000800020001000000050005000100000004000b00580001804000018005000500000000000600040021090000040008000500070001000000050007000000000008000200030000000500070002000000050003000200000014000180050003000d00000005000600040000000a00010008021100000100004c0002800800a10001000000080027000100000008002600b41400000800a0000700000008009f00010000000500190105000000050019010a00000008009f000600000008009f000400000058010380540101803c000180080002000200000004000900060004000100000004000a0008000200020000000500050009000000050005000b0000000500050009000000140001800500030001000000050005000800000038000180050006000600000006000400050000000600040008000000040008000600040003000000050003000500000005000500000000002c00018004000b000800020004000000050006000c000000050007000200000004000800060004000f00000014000180050005000300000006000400030000000800018004000a00280001800500060000000000040008000500050004000000050006001300000005000300030000001c00018004000900050005000b000000040009000400080004000b003c0001800400010004000c00050003000800000004000b0006000400020000000500070082000000050006000100000004000c0005000600160000000a0006000802110000000000501411804c1405808c02008008000380040002000c020380f80001803400018005000700040000000400090004000900050005000100000005000700070000000500030009000000050007000400000020000180050003000600000004000a0006000400000400000500030000000000140001800500070003000000050006000c0000001c00018006000400ff00000004000a0008000200000000000400090040000180060004001105000004000a0004000b00050006000700000004000a00080002000000000005000700f100000006"], 0x2650}, 0x1, 0x0, 0x0, 0x4}, 0x4810) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4ed8ee5a90e2bf26, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=3735): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xf2, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000003c0), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) socket$l2tp(0x2, 0x2, 0x73) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x30580, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)=0xff) syz_open_dev$sndctrl(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): dge_slave_1: entered allmulticast mode [ 669.816359][T16334] bridge_slave_1: entered promiscuous mode [ 669.861727][ T5813] usb 3-1: GET_CAPABILITIES returned 0 [ 669.873253][ T5813] usbtmc 3-1:16.0: can't read capabilities [ 669.922914][T16334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.958323][T16334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.970661][ T5816] Bluetooth: hci4: command tx timeout [ 669.998522][ T30] audit: type=1800 audit(2000000895.339:1121): pid=16379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3085" name="nullb0" dev="tmpfs" ino=3163 res=0 errno=0 [ 670.069056][ T5813] usb 3-1: USB disconnect, device number 9 [ 670.084744][T16334] team0: Port device team_slave_0 added [ 670.132969][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'. [ 670.143590][T16334] team0: Port device team_slave_1 added [ 670.156940][T16377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.171072][T16377] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 670.189414][T16334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.198527][T16334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.224459][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.236257][T16334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.253507][T16334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.261865][T16334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.287787][ T5919] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 670.296844][T16334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.356657][T16334] hsr_slave_0: entered promiscuous mode [ 670.363808][T16334] hsr_slave_1: entered promiscuous mode [ 670.370460][T16334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.381418][T16334] Cannot create hsr debugfs directory [ 670.520661][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 670.530773][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 670.541589][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 670.551610][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 670.563655][ T5919] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 670.573308][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.581710][ T5919] usb 4-1: Product: syz [ 670.586315][ T5919] usb 4-1: Manufacturer: syz [ 670.591071][ T5919] usb 4-1: SerialNumber: syz [ 670.703731][ T5919] usb 4-1: config 0 descriptor?? [ 670.981035][ T5919] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 671.112279][T16334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.196635][T16334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.837526][ T5919] scsi host1: usb-storage 4-1:0.0 [ 671.854833][ T5919] usb 4-1: USB disconnect, device number 10 [ 671.857027][T16334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.042211][ T5816] Bluetooth: hci4: command tx timeout [ 672.058916][T16334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.255252][ T30] audit: type=1400 audit(2000000897.599:1122): avc: denied { read } for pid=16421 comm="syz.2.3096" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 672.757241][ T30] audit: type=1400 audit(2000000897.599:1123): avc: denied { open } for pid=16421 comm="syz.2.3096" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 672.789431][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 672.798934][ T30] audit: type=1400 audit(2000000898.129:1124): avc: denied { read } for pid=16421 comm="syz.2.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 672.898733][T16334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.292651][T16431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3098'. [ 673.296447][T16334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.412500][T16334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 673.439929][T16334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 674.096114][T16334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.115741][ T30] audit: type=1400 audit(2000000899.459:1125): avc: denied { listen } for pid=16445 comm="syz.4.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 674.132186][T16334] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.143127][ T30] audit: type=1400 audit(2000000899.459:1126): avc: denied { shutdown } for pid=16445 comm="syz.4.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 674.163485][ T5816] Bluetooth: hci4: command tx timeout [ 674.184652][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.191815][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.221386][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.228522][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.237205][ T5919] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 674.273979][T16448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.412120][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 674.436270][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 674.462092][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 674.482147][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 674.504571][ T5919] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 674.522522][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.533694][ T5919] usb 4-1: Product: syz [ 674.550051][ T5919] usb 4-1: Manufacturer: syz [ 674.559982][ T5919] usb 4-1: SerialNumber: syz [ 674.575631][ T5919] usb 4-1: config 0 descriptor?? [ 674.593518][ T5919] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 674.672786][T16334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.731811][T16334] veth0_vlan: entered promiscuous mode [ 674.749403][T16334] veth1_vlan: entered promiscuous mode [ 674.779713][ T5914] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 674.791946][T16334] veth0_macvtap: entered promiscuous mode [ 674.804173][T16334] veth1_macvtap: entered promiscuous mode [ 674.822199][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.832739][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.844074][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.854891][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.865446][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.876756][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.888189][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.898961][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.935524][ T5914] usb 5-1: device descriptor read/64, error -71 [ 674.947735][T16334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.959488][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.970865][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.981026][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.992023][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 675.008790][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.021366][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.032306][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.207473][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.218352][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.229849][T16334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.709566][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 675.745718][T16334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.769746][ T5914] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 675.800930][T16334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.809929][T16334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.818760][T16334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.016103][T12252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.035692][T12252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.044337][ T5914] usb 5-1: device descriptor read/64, error -71 [ 676.199727][ T5820] Bluetooth: hci4: command tx timeout [ 676.230793][ T5914] usb usb5-port1: attempt power cycle [ 676.438668][ T5886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.448091][ T5886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.849753][ T5914] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 676.870763][ T5914] usb 5-1: device descriptor read/8, error -71 [ 676.905873][ T30] audit: type=1400 audit(2000000902.249:1127): avc: denied { unmount } for pid=16482 comm="syz.3.3111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 677.220931][T16489] syz_tun: entered allmulticast mode [ 677.669355][ T5914] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 677.713904][T16481] syz_tun: left allmulticast mode [ 678.289676][ T5914] usb 5-1: device descriptor read/8, error -71 [ 678.402814][ T5914] usb usb5-port1: unable to enumerate USB device [ 679.949776][ T5864] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 680.176887][T16529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3125'. [ 680.284851][T16529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3125'. [ 680.551595][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 680.590570][ T5864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 680.606573][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 680.629242][ T5864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 680.657610][ T5864] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 680.676875][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.703460][ T5864] usb 3-1: Product: syz [ 680.707680][ T5864] usb 3-1: Manufacturer: syz [ 680.714190][ T30] audit: type=1400 audit(2000000906.059:1128): avc: denied { ioctl } for pid=16542 comm="syz.4.3126" path="socket:[39649]" dev="sockfs" ino=39649 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 680.729655][ T5864] usb 3-1: SerialNumber: syz [ 680.932892][ T5864] usb 3-1: config 0 descriptor?? [ 680.973472][ T30] audit: type=1400 audit(2000000906.169:1129): avc: denied { ioctl } for pid=16542 comm="syz.4.3126" path="socket:[39648]" dev="sockfs" ino=39648 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 680.975432][ T5864] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 681.074616][T16552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.220549][T16552] bond0: (slave rose0): Enslaving as an active interface with an up link [ 681.582569][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'. [ 682.104615][ T10] IPVS: starting estimator thread 0... [ 682.309751][T16586] IPVS: using max 43 ests per chain, 103200 per kthread [ 682.316232][ T30] audit: type=1400 audit(2000000907.659:1130): avc: denied { write } for pid=16578 comm="syz.4.3132" path="socket:[39685]" dev="sockfs" ino=39685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 683.043263][T16601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.061291][T16598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3137'. [ 683.105922][T16601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.156023][ T5864] scsi host2: usb-storage 3-1:0.0 [ 683.196182][ T5864] usb 3-1: USB disconnect, device number 10 [ 683.206738][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.256816][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.284194][T16609] netlink: 'syz.2.3138': attribute type 11 has an invalid length. [ 683.331697][T16609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3138'. [ 685.247580][T16642] syz_tun: entered allmulticast mode [ 685.336224][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.381105][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.579977][T16631] syz_tun: left allmulticast mode [ 685.976247][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 685.999264][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.019486][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.034252][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.042090][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 686.062229][T10085] bond0: (slave syz_tun): Releasing backup interface [ 686.176579][T16649] lo speed is unknown, defaulting to 1000 [ 686.269427][T12253] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.541980][T12253] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.697992][T16672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=16672 comm=syz.4.3147 [ 687.058052][T12253] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.144638][T16676] netlink: 'syz.3.3150': attribute type 11 has an invalid length. [ 687.165723][T16676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3150'. [ 687.177479][T12253] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.085936][T16649] chnl_net:caif_netlink_parms(): no params data found [ 688.179891][ T5820] Bluetooth: hci0: command tx timeout [ 688.266357][T12253] bridge_slave_1: left allmulticast mode [ 688.282668][T12253] bridge_slave_1: left promiscuous mode [ 688.295939][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.331074][T12253] bridge_slave_0: left allmulticast mode [ 688.336774][T12253] bridge_slave_0: left promiscuous mode [ 688.374957][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.515592][ T30] audit: type=1400 audit(2000000913.863:1131): avc: denied { map } for pid=16706 comm="syz.3.3157" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 689.332387][T12253] bond1 (unregistering): (slave ip6tnl1): Releasing backup interface [ 689.389329][ T30] audit: type=1400 audit(2000000914.103:1132): avc: denied { ioctl } for pid=16706 comm="syz.3.3157" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 689.413689][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.669190][T12253] team0: Port device bridge1 removed [ 689.781282][T12253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.795298][T12253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.808275][T12253] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 689.817653][T12253] bond0 (unregistering): Released all slaves [ 689.829569][T12253] bond1 (unregistering): Released all slaves [ 689.854336][T16707] tipc: Started in network mode [ 689.859270][T16707] tipc: Node identity ac14140f, cluster identity 4711 [ 689.867514][T16707] tipc: New replicast peer: 255.255.255.255 [ 689.876951][T16707] tipc: Enabled bearer , priority 10 [ 690.009809][ T30] audit: type=1400 audit(2000000915.353:1133): avc: denied { sys_chroot } for pid=16727 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 690.047161][T16710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3157'. [ 690.109019][ T30] audit: type=1400 audit(2000000915.353:1134): avc: denied { setgid } for pid=16727 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 690.168921][T16736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.180557][ T30] audit: type=1400 audit(2000000915.353:1135): avc: denied { setrlimit } for pid=16727 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 690.206007][T16736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.213987][ T5820] Bluetooth: hci0: command tx timeout [ 690.378369][T16649] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.418764][T16649] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.433581][T16649] bridge_slave_0: entered allmulticast mode [ 690.441222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.461881][T16649] bridge_slave_0: entered promiscuous mode [ 690.487859][T16649] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.514654][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.522095][T16649] bridge_slave_1: entered allmulticast mode [ 690.533679][T16649] bridge_slave_1: entered promiscuous mode [ 690.622109][T12253] hsr_slave_0: left promiscuous mode [ 690.635959][T12253] hsr_slave_1: left promiscuous mode [ 690.720352][T12253] batman_adv: batadv0: Interface deactivated: dummy0 [ 690.802425][T12253] batman_adv: batadv0: Removing interface: dummy0 [ 690.862767][T15842] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 690.880865][T12253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.975227][T12253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.020410][ T5864] tipc: Node number set to 2886997007 [ 691.022427][T12253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.061419][T15842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 691.065110][T12253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.099542][T15842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 691.128002][T12253] veth0_macvtap: left allmulticast mode [ 691.154661][T15842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 691.154763][T12253] veth1_macvtap: left promiscuous mode [ 691.194340][T12253] veth0_macvtap: left promiscuous mode [ 691.200086][T15842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 691.216327][T12253] veth1_vlan: left promiscuous mode [ 691.267206][T15842] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 691.288228][T15842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.308101][T15842] usb 5-1: Product: syz [ 691.316774][T15842] usb 5-1: Manufacturer: syz [ 691.327527][T15842] usb 5-1: SerialNumber: syz [ 691.363691][T15842] usb 5-1: config 0 descriptor?? [ 691.391635][T15842] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 692.124972][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 692.279978][ T5820] Bluetooth: hci0: command tx timeout [ 693.001691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.141501][T12253] team0 (unregistering): Port device team_slave_1 removed [ 693.258583][T12253] team0 (unregistering): Port device team_slave_0 removed [ 693.362435][T16789] block nbd3: shutting down sockets [ 693.448542][ T30] audit: type=1400 audit(2000000918.793:1136): avc: denied { mounton } for pid=16791 comm="syz.4.3172" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 694.280478][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.369954][ T5820] Bluetooth: hci0: command tx timeout [ 694.516587][T16649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.575607][T16649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.741420][T16649] team0: Port device team_slave_0 added [ 694.773325][T16649] team0: Port device team_slave_1 added [ 694.783926][ T30] audit: type=1400 audit(2000000920.113:1137): avc: denied { read write } for pid=16801 comm="syz.4.3176" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 694.843374][T16807] block device autoloading is deprecated and will be removed. [ 694.908344][ T30] audit: type=1400 audit(2000000920.113:1138): avc: denied { ioctl open } for pid=16801 comm="syz.4.3176" path="/54/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 695.113474][T12253] IPVS: stop unused estimator thread 0... [ 695.121110][T16649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.128113][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.612104][T16649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.624794][T16649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.634630][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.679816][T16649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.775855][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.785084][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.805991][T16649] hsr_slave_0: entered promiscuous mode [ 696.815379][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 696.891082][T16649] hsr_slave_1: entered promiscuous mode [ 697.969554][T16843] netlink: 'syz.2.3183': attribute type 11 has an invalid length. [ 697.981359][T16843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3183'. [ 699.296061][T16864] netlink: 'syz.3.3190': attribute type 11 has an invalid length. [ 699.305732][T16864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3190'. [ 699.512396][T16868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.521585][T16868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.976118][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 702.177009][T16649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 702.371008][T16649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 702.463062][T16649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 702.542655][T16649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 702.696751][ T30] audit: type=1400 audit(2000000928.039:1139): avc: denied { append } for pid=16894 comm="syz.2.3197" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 702.720334][ T30] audit: type=1400 audit(2000000928.039:1140): avc: denied { execute } for pid=16894 comm="syz.2.3197" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 704.524641][T16925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=16925 comm=syz.4.3203 [ 705.668002][T16649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.705585][T16947] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 705.736355][T16947] VFS: Can't find a romfs filesystem on dev nullb0. [ 705.736355][T16947] [ 705.739213][T16649] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.768306][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.775468][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.815886][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.823028][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.112252][ T30] audit: type=1400 audit(2000000931.459:1141): avc: denied { accept } for pid=16946 comm="syz.0.3207" lport=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 706.942622][T16649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.026814][T16649] veth0_vlan: entered promiscuous mode [ 708.662174][T16649] veth1_vlan: entered promiscuous mode [ 708.703410][T16649] veth0_macvtap: entered promiscuous mode [ 708.713311][T16649] veth1_macvtap: entered promiscuous mode [ 708.771623][T16649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.840069][T16649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.890062][T16649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.909628][T16649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.934895][T16649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.979549][T16649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.095175][T16649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.196457][T16649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.301614][T16649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.366086][T16649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.381539][T16649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.392447][T16649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.423024][T16649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.442938][T16649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.456387][T16649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.484742][T16649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.497914][T16649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.514982][T16649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.582551][T16649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.601184][T16649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.621124][T16649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.640781][T16649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.706885][T17020] lo speed is unknown, defaulting to 1000 [ 709.712876][T16506] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 709.884171][T16506] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 709.905169][T16506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.972996][T16506] usb 3-1: Product: syz [ 710.013333][T16506] usb 3-1: Manufacturer: syz [ 710.038968][T16506] usb 3-1: SerialNumber: syz [ 710.063818][T16506] usb 3-1: config 0 descriptor?? [ 710.279408][T12708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.329730][T12708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.399953][ T30] audit: type=1400 audit(2000000935.739:1142): avc: denied { getopt } for pid=17040 comm="syz.4.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 710.533085][T12708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.606505][T12708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.681688][T16506] usb 3-1: Firmware version (0.0) predates our first public release. [ 710.717764][T16506] usb 3-1: Please update to version 0.2 or newer [ 710.756240][T16506] usb 3-1: Firmware: build [ 711.121920][T17020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.653839][T17071] lo speed is unknown, defaulting to 1000 [ 711.659929][T17071] lo speed is unknown, defaulting to 1000 [ 711.668348][T17071] lo speed is unknown, defaulting to 1000 [ 711.720746][T17071] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 712.166374][T17071] lo speed is unknown, defaulting to 1000 [ 712.173757][T17071] lo speed is unknown, defaulting to 1000 [ 712.181237][T17071] lo speed is unknown, defaulting to 1000 [ 712.188530][T17071] lo speed is unknown, defaulting to 1000 [ 712.198406][T17071] lo speed is unknown, defaulting to 1000 [ 712.206100][T17071] lo speed is unknown, defaulting to 1000 [ 712.214741][T17071] lo speed is unknown, defaulting to 1000 [ 712.236652][ T30] audit: type=1400 audit(2000000937.579:1143): avc: denied { connect } for pid=17074 comm="syz.4.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 712.419770][ T30] audit: type=1400 audit(2000000937.609:1144): avc: denied { setopt } for pid=17074 comm="syz.4.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 712.734571][ T48] usb 3-1: USB disconnect, device number 11 [ 714.844830][ T30] audit: type=1400 audit(2000000940.159:1145): avc: denied { read } for pid=17110 comm="syz.2.3236" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 715.232878][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 715.973109][ T30] audit: type=1400 audit(2000000941.299:1146): avc: denied { setcheckreqprot } for pid=17118 comm="syz.3.3238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 716.117485][ T30] audit: type=1400 audit(2000000941.359:1147): avc: denied { ioctl } for pid=17120 comm="syz.0.3239" path="socket:[41933]" dev="sockfs" ino=41933 ioctlcmd=0xae92 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 716.180724][T17130] sd 0:0:1:0: device reset [ 716.972468][ T30] audit: type=1400 audit(2000000942.319:1148): avc: denied { append } for pid=17144 comm="syz.3.3245" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 716.995338][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.055430][T17149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3243'. [ 717.094381][T17152] netlink: 'syz.4.3246': attribute type 11 has an invalid length. [ 717.123336][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 717.142470][T17152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3246'. [ 717.728308][T17164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.600258][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.238947][T17182] syz.4.3252: attempt to access beyond end of device [ 719.238947][T17182] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 719.302779][T17182] XFS (nbd4): SB validate failed with error -5. [ 719.663533][T16297] IPVS: starting estimator thread 0... [ 719.979320][ T30] audit: type=1400 audit(2000000945.318:1149): avc: denied { connect } for pid=17203 comm="syz.0.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 720.026761][T17207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=17207 comm=syz.1.3255 [ 720.400841][T17204] IPVS: using max 47 ests per chain, 112800 per kthread [ 720.428241][T17210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=17210 comm=syz.4.3257 [ 720.691055][ T30] audit: type=1400 audit(2000000946.018:1150): avc: denied { write } for pid=17203 comm="syz.0.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 720.899908][T17224] netlink: 'syz.1.3259': attribute type 11 has an invalid length. [ 720.993665][T17224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3259'. [ 721.138827][T17231] netlink: 'syz.3.3262': attribute type 11 has an invalid length. [ 721.167135][T17231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3262'. [ 721.639376][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 721.834542][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 721.971583][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 721.992874][ T48] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 722.589794][ T48] usb 3-1: config 0 has no interface number 0 [ 722.597288][ T48] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 722.615277][ T48] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 722.635482][ T48] usb 3-1: config 0 interface 88 has no altsetting 0 [ 722.698307][ T48] usb 3-1: language id specifier not provided by device, defaulting to English [ 722.712874][ T48] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 722.775138][ T48] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 722.817822][ T48] usb 3-1: Product: syz [ 722.822400][ T48] usb 3-1: SerialNumber: syz [ 722.874203][ T48] usb 3-1: config 0 descriptor?? [ 722.889449][T17258] FAULT_INJECTION: forcing a failure. [ 722.889449][T17258] name failslab, interval 1, probability 0, space 0, times 0 [ 722.920039][T17258] CPU: 1 UID: 0 PID: 17258 Comm: syz.3.3268 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 722.920065][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 722.920074][T17258] Call Trace: [ 722.920078][T17258] [ 722.920083][T17258] dump_stack_lvl+0x16c/0x1f0 [ 722.920103][T17258] should_fail_ex+0x512/0x640 [ 722.920116][T17258] ? fs_reclaim_acquire+0xae/0x150 [ 722.920131][T17258] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 722.920150][T17258] should_failslab+0xc2/0x120 [ 722.920167][T17258] __kmalloc_noprof+0xd2/0x510 [ 722.920196][T17258] tomoyo_realpath_from_path+0xc2/0x6e0 [ 722.920223][T17258] tomoyo_check_open_permission+0x2ab/0x3c0 [ 722.920235][T17258] ? security_file_alloc+0x34/0x2b0 [ 722.920250][T17258] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 722.920262][T17258] ? do_mq_open+0x4c1/0x8b0 [ 722.920271][T17258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.920304][T17258] ? find_held_lock+0x2b/0x80 [ 722.920331][T17258] tomoyo_file_open+0x6b/0x90 [ 722.920354][T17258] security_file_open+0x84/0x1e0 [ 722.920373][T17258] do_dentry_open+0x596/0x1c10 [ 722.920393][T17258] vfs_open+0x82/0x3f0 [ 722.920406][T17258] dentry_open+0x71/0xd0 [ 722.920416][T17258] do_mq_open+0x4c1/0x8b0 [ 722.920428][T17258] ? __pfx_do_mq_open+0x10/0x10 [ 722.920445][T17258] ? __fget_files+0x20e/0x3c0 [ 722.920471][T17258] __x64_sys_mq_open+0x155/0x1e0 [ 722.920487][T17258] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 722.920501][T17258] ? fput+0x70/0xf0 [ 722.920521][T17258] do_syscall_64+0xcd/0x260 [ 722.920534][T17258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.920544][T17258] RIP: 0033:0x7f258fd8e969 [ 722.920553][T17258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.920563][T17258] RSP: 002b:00007f2590b4a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 722.920582][T17258] RAX: ffffffffffffffda RBX: 00007f258ffb5fa0 RCX: 00007f258fd8e969 [ 722.920592][T17258] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000200000000b40 [ 722.920601][T17258] RBP: 00007f2590b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 722.920610][T17258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.920618][T17258] R13: 0000000000000000 R14: 00007f258ffb5fa0 R15: 00007ffe64239098 [ 722.920640][T17258] [ 722.920663][T17258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 723.518006][ T48] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input7 [ 723.563813][ T48] usb 3-1: USB disconnect, device number 12 [ 723.656793][T17267] tipc: Started in network mode [ 723.692200][T17267] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 723.995527][T17267] tipc: Enabled bearer , priority 10 [ 724.008650][T17271] netlink: 'syz.2.3269': attribute type 5 has an invalid length. [ 724.200638][T17267] netlink: 'syz.2.3269': attribute type 5 has an invalid length. [ 725.111043][ T48] tipc: Node number set to 9480874 [ 725.346786][T17298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.387069][T17298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.434568][T17298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.454025][T17298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.233175][ T48] IPVS: starting estimator thread 0... [ 726.519484][T17319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=17319 comm=syz.0.3280 [ 726.967623][T17317] IPVS: using max 45 ests per chain, 108000 per kthread [ 727.098610][ T5914] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 727.244044][T17329] netlink: 'syz.0.3283': attribute type 11 has an invalid length. [ 727.259163][T17329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3283'. [ 727.281397][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 727.300069][ T5914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 727.320819][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 727.361121][T17335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.369817][T17335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.381098][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 727.395935][ T5914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 727.574738][ T5914] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 727.751189][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.767689][ T5914] usb 2-1: Product: syz [ 727.803991][ T5914] usb 2-1: Manufacturer: syz [ 727.808651][ T5914] usb 2-1: SerialNumber: syz [ 727.850178][ T5914] usb 2-1: config 0 descriptor?? [ 727.976380][ T5914] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 728.473018][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3278'. [ 729.199040][ T30] audit: type=1400 audit(2000000954.545:1151): avc: denied { ioctl } for pid=17359 comm="syz.2.3291" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 730.063031][ T5914] scsi host3: usb-storage 2-1:0.0 [ 730.176025][T17374] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3291'. [ 730.600135][ T5914] usb 2-1: USB disconnect, device number 9 [ 731.425507][T17394] FAULT_INJECTION: forcing a failure. [ 731.425507][T17394] name failslab, interval 1, probability 0, space 0, times 0 [ 731.615339][T17394] CPU: 0 UID: 0 PID: 17394 Comm: syz.4.3298 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 731.615366][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 731.615375][T17394] Call Trace: [ 731.615381][T17394] [ 731.615388][T17394] dump_stack_lvl+0x16c/0x1f0 [ 731.615416][T17394] should_fail_ex+0x512/0x640 [ 731.615440][T17394] ? fs_reclaim_acquire+0xae/0x150 [ 731.615463][T17394] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 731.615486][T17394] should_failslab+0xc2/0x120 [ 731.615503][T17394] __kmalloc_noprof+0xd2/0x510 [ 731.615535][T17394] tomoyo_realpath_from_path+0xc2/0x6e0 [ 731.615564][T17394] tomoyo_check_open_permission+0x2ab/0x3c0 [ 731.615584][T17394] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 731.615629][T17394] ? do_raw_spin_lock+0x12c/0x2b0 [ 731.615655][T17394] tomoyo_file_open+0x6b/0x90 [ 731.615680][T17394] security_file_open+0x84/0x1e0 [ 731.615702][T17394] do_dentry_open+0x596/0x1c10 [ 731.615734][T17394] vfs_open+0x82/0x3f0 [ 731.615755][T17394] path_openat+0x1e5e/0x2d40 [ 731.615790][T17394] ? __pfx_path_openat+0x10/0x10 [ 731.615820][T17394] do_filp_open+0x20b/0x470 [ 731.615846][T17394] ? __pfx_do_filp_open+0x10/0x10 [ 731.615890][T17394] ? alloc_fd+0x471/0x7d0 [ 731.615921][T17394] do_sys_openat2+0x11b/0x1d0 [ 731.615939][T17394] ? __pfx_do_sys_openat2+0x10/0x10 [ 731.615966][T17394] __x64_sys_openat+0x174/0x210 [ 731.615985][T17394] ? __pfx___x64_sys_openat+0x10/0x10 [ 731.616005][T17394] ? do_user_addr_fault+0x843/0x1370 [ 731.616030][T17394] do_syscall_64+0xcd/0x260 [ 731.616050][T17394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.616067][T17394] RIP: 0033:0x7fec23f8d2d0 [ 731.616080][T17394] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 731.616095][T17394] RSP: 002b:00007fec24d2fef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 731.616111][T17394] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fec23f8d2d0 [ 731.616122][T17394] RDX: 0000000000000002 RSI: 00007fec2401078c RDI: 00000000ffffff9c [ 731.616131][T17394] RBP: 00007fec2401078c R08: 0000000000000000 R09: 0000000000000000 [ 731.616141][T17394] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 731.616150][T17394] R13: 000000000000002d R14: 0000200000000200 R15: 00007ffc95b15f88 [ 731.616172][T17394] [ 731.852283][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.550477][T17394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 732.562004][T17394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.577767][T17394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.942402][T17416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.951432][T17416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.250116][ T5813] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 733.526385][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 733.640534][ T5813] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 733.656883][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 733.683563][ T5813] usb 2-1: Product: syz [ 733.720414][ T5813] usb 2-1: Manufacturer: syz [ 733.725084][ T5813] usb 2-1: SerialNumber: syz [ 733.771477][ T5813] usb 2-1: config 0 descriptor?? [ 736.289285][T17471] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 736.298440][T17471] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 736.348583][ T30] audit: type=1400 audit(2000000961.675:1152): avc: denied { connect } for pid=17463 comm="syz.2.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 736.653470][ T30] audit: type=1400 audit(2000000961.755:1153): avc: denied { listen } for pid=17463 comm="syz.2.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 736.669315][T17468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.713117][T17468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3315'. [ 736.776954][ T48] usb 2-1: USB disconnect, device number 10 [ 736.921479][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3315'. [ 736.980740][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3317'. [ 737.275743][T17487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.328996][T17487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.528013][T17494] lo speed is unknown, defaulting to 1000 [ 738.562449][T17494] lo speed is unknown, defaulting to 1000 [ 738.690630][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 739.201901][ T5813] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 739.244948][T17515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3324'. [ 739.653309][ T5813] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.667472][T17511] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3323'. [ 739.678336][ T5813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 739.688737][ T5813] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 739.708508][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 739.725449][ T5813] usb 3-1: SerialNumber: syz [ 739.968393][ T5813] usb 3-1: 0:2 : does not exist [ 740.029846][ T5813] usb 3-1: USB disconnect, device number 13 [ 740.308183][ T30] audit: type=1400 audit(2000000965.655:1154): avc: denied { write } for pid=17524 comm="syz.4.3329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 740.318443][T15437] udevd[15437]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.360854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 740.629778][ T30] audit: type=1400 audit(2000000965.665:1155): avc: denied { read } for pid=17524 comm="syz.4.3329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 741.320009][ T5820] Bluetooth: hci0: command 0x0405 tx timeout [ 741.599536][T17552] netlink: 'syz.3.3336': attribute type 12 has an invalid length. [ 741.698741][T17552] evm: overlay not supported [ 741.835258][ T30] audit: type=1400 audit(2000000967.095:1156): avc: denied { create } for pid=17545 comm="syz.3.3336" name="#4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 741.919978][ T30] audit: type=1400 audit(2000000967.095:1157): avc: denied { link } for pid=17545 comm="syz.3.3336" name="#4" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 741.942314][ T30] audit: type=1400 audit(2000000967.095:1158): avc: denied { rename } for pid=17545 comm="syz.3.3336" name="#5" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 742.026646][T17548] lo speed is unknown, defaulting to 1000 [ 742.035702][T17548] lo speed is unknown, defaulting to 1000 [ 742.103923][ T10] libceph: connect (1)[c::]:6789 error -101 [ 742.133512][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 742.180458][T17557] ceph: No mds server is up or the cluster is laggy [ 742.318735][T17564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3339'. [ 742.332557][T17571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.378827][T17564] bond0: option ad_select: unable to set because the bond device is up [ 742.453713][ T30] audit: type=1400 audit(2000000967.805:1159): avc: denied { append } for pid=17579 comm="syz.1.3343" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 742.507537][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3343'. [ 743.015722][T16506] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 743.093325][T17594] netlink: 'syz.3.3348': attribute type 3 has an invalid length. [ 743.101567][T17594] netlink: 'syz.3.3348': attribute type 1 has an invalid length. [ 743.206169][T16506] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 743.231452][T16506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.297524][T16506] usb 3-1: Product: syz [ 743.321933][T16506] usb 3-1: Manufacturer: syz [ 743.329492][T16506] usb 3-1: SerialNumber: syz [ 743.583212][T16506] usb 3-1: config 0 descriptor?? [ 743.610918][ T5820] Bluetooth: hci2: urb ffff888031027200 submission failed (2) [ 743.690405][T17593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.830188][T17603] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 743.843951][ T5813] usb 3-1: USB disconnect, device number 14 [ 743.864806][T17603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.915997][T17603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.981509][T17603] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3351'. [ 744.018178][T17603] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3351'. [ 744.117958][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.139408][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.457023][ T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0) [ 745.473754][ T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0) [ 745.575192][T17604] infiniband syz1: set down [ 745.580207][T17604] infiniband syz1: added ipvlan0 [ 745.630092][T17604] RDS/IB: syz1: added [ 745.641009][T17604] smc: adding ib device syz1 with port count 1 [ 745.647344][T17604] smc: ib device syz1 port 1 has pnetid [ 746.214378][ T30] audit: type=1400 audit(2000000971.545:1160): avc: denied { write } for pid=17647 comm="syz.2.3365" path="socket:[44873]" dev="sockfs" ino=44873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 746.337740][ T30] audit: type=1400 audit(2000000971.685:1161): avc: denied { append } for pid=17649 comm="syz.3.3366" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 746.360507][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.412439][T17653] hpfs: Bad magic ... probably not HPFS [ 746.437165][ T30] audit: type=1400 audit(2000000971.775:1162): avc: denied { bind } for pid=17652 comm="syz.3.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 746.456469][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.600126][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.606517][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.165752][ T30] audit: type=1400 audit(2000000974.495:1163): avc: denied { load_policy } for pid=17652 comm="syz.3.3368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 749.489515][T17670] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3372'. [ 749.519397][T17670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3372'. [ 749.633494][T17654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.652258][T17671] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3371'. [ 749.677056][T12253] Bluetooth: (null): Invalid header checksum [ 749.684764][T17658] SELinux: ebitmap: truncated map [ 749.689743][T17654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.699401][T17658] SELinux: failed to load policy [ 749.704118][T12253] Bluetooth: (null): Invalid header checksum [ 749.725886][T12253] Bluetooth: (null): Invalid header checksum [ 749.800358][T12709] Bluetooth: (null): Invalid header checksum [ 749.910914][T12253] Bluetooth: (null): Invalid header checksum [ 749.953293][ T5813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 750.121864][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 750.128897][ T5813] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.143082][ T5813] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 750.156030][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 750.212350][ T5813] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 750.536503][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.576396][ T5813] usb 3-1: config 0 descriptor?? [ 750.631218][T17677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3374'. [ 750.647172][T17677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3374'. [ 750.805800][T17680] pim6reg: entered allmulticast mode [ 750.933455][T17680] pim6reg: left allmulticast mode [ 751.088888][T17677] sctp: [Deprecated]: syz.0.3374 (pid 17677) Use of int in max_burst socket option deprecated. [ 751.088888][T17677] Use struct sctp_assoc_value instead [ 751.116804][ T30] audit: type=1400 audit(2000000976.465:1164): avc: denied { read write } for pid=17683 comm="syz.1.3376" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 751.272529][ T30] audit: type=1400 audit(2000000976.465:1165): avc: denied { open } for pid=17683 comm="syz.1.3376" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 751.337176][ T5813] chicony 0003:04F2:1421.0001: collection stack underflow [ 751.366935][ T5813] chicony 0003:04F2:1421.0001: item 0 2 0 12 parsing failed [ 751.662827][ T5813] chicony 0003:04F2:1421.0001: Chicony hid parse failed: -22 [ 751.681998][ T5813] chicony 0003:04F2:1421.0001: probe with driver chicony failed with error -22 [ 751.798908][T17690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3371'. [ 751.823696][T17696] Bluetooth: MGMT ver 1.23 [ 751.842392][ T5813] usb 3-1: USB disconnect, device number 15 [ 751.881150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 752.137074][T17694] ubi31: attaching mtd0 [ 752.145038][T17694] ubi31: scanning is finished [ 752.155598][T17694] ubi31: empty MTD device detected [ 752.885281][T17708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.942352][T17708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.126172][T17694] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 753.169684][T17694] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 753.177131][T17694] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 753.226021][T17694] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 753.239860][ T30] audit: type=1400 audit(2000000978.575:1166): avc: denied { accept } for pid=17707 comm="syz.4.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 753.244222][T17694] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 753.323927][T17694] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 753.374719][T17694] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4139508083 [ 753.389191][T17726] FAULT_INJECTION: forcing a failure. [ 753.389191][T17726] name failslab, interval 1, probability 0, space 0, times 0 [ 753.449658][T17726] CPU: 0 UID: 0 PID: 17726 Comm: syz.2.3386 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 753.449682][T17726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 753.449691][T17726] Call Trace: [ 753.449696][T17726] [ 753.449702][T17726] dump_stack_lvl+0x16c/0x1f0 [ 753.449728][T17726] should_fail_ex+0x512/0x640 [ 753.449746][T17726] ? fs_reclaim_acquire+0xae/0x150 [ 753.449769][T17726] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 753.449790][T17726] should_failslab+0xc2/0x120 [ 753.449807][T17726] __kmalloc_noprof+0xd2/0x510 [ 753.449835][T17726] tomoyo_realpath_from_path+0xc2/0x6e0 [ 753.449859][T17726] ? tomoyo_profile+0x47/0x60 [ 753.449884][T17726] tomoyo_path_number_perm+0x245/0x580 [ 753.449901][T17726] ? tomoyo_path_number_perm+0x237/0x580 [ 753.449920][T17726] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 753.449938][T17726] ? find_held_lock+0x2b/0x80 [ 753.449978][T17726] ? find_held_lock+0x2b/0x80 [ 753.449996][T17726] ? hook_file_ioctl_common+0x145/0x410 [ 753.450025][T17726] ? __fget_files+0x20e/0x3c0 [ 753.450054][T17726] security_file_ioctl+0x9b/0x240 [ 753.450076][T17726] __x64_sys_ioctl+0xb7/0x200 [ 753.450099][T17726] do_syscall_64+0xcd/0x260 [ 753.450118][T17726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.450135][T17726] RIP: 0033:0x7f8388f8e969 [ 753.450148][T17726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.450168][T17726] RSP: 002b:00007f8389e1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.450184][T17726] RAX: ffffffffffffffda RBX: 00007f83891b6080 RCX: 00007f8388f8e969 [ 753.450195][T17726] RDX: 0000200000000000 RSI: 0000000000005602 RDI: 0000000000000006 [ 753.450204][T17726] RBP: 00007f8389e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 753.450213][T17726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.450222][T17726] R13: 0000000000000000 R14: 00007f83891b6080 R15: 00007ffce62f2ad8 [ 753.450245][T17726] [ 753.450268][T17726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 753.466967][T17694] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 753.684879][T17733] program syz.1.3388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.695091][T17715] ubi31: background thread "ubi_bgt31d" started, PID 17715 [ 753.794612][T17738] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3390'. [ 754.397843][T17754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=17754 comm=syz.1.3392 [ 755.163459][T17764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.177861][T17764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.236461][T17764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.251161][T17764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.753502][T17797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.803158][T17792] block nbd0: shutting down sockets [ 756.819533][T17797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.904102][ T30] audit: type=1400 audit(2000000982.235:1167): avc: denied { read write } for pid=17795 comm="syz.3.3400" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 756.932741][T17792] all (unregistering): Released all slaves [ 756.937051][ T30] audit: type=1400 audit(2000000982.235:1168): avc: denied { open } for pid=17795 comm="syz.3.3400" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 756.965934][ T30] audit: type=1400 audit(2000000982.315:1169): avc: denied { ioctl } for pid=17795 comm="syz.3.3400" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 759.182458][T14059] Bluetooth: hci1: command 0x0406 tx timeout [ 759.752318][T17806] orangefs_mount: mount request failed with -4 [ 759.779130][ T30] audit: type=1400 audit(2000000985.075:1170): avc: denied { execute } for pid=17821 comm="syz.1.3408" path="/39/file0/cpu.stat" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 760.216625][ T30] audit: type=1400 audit(2000000985.565:1171): avc: denied { unmount } for pid=16649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 761.206882][T17837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3412'. [ 761.266871][T17837] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.275711][T17837] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.284586][T17837] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.293401][T17837] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.314565][T17837] vxlan0: entered promiscuous mode [ 761.423985][T17797] syz.3.3400 (17797): drop_caches: 2 [ 761.880419][T17848] FAULT_INJECTION: forcing a failure. [ 761.880419][T17848] name failslab, interval 1, probability 0, space 0, times 0 [ 761.893292][T17848] CPU: 0 UID: 0 PID: 17848 Comm: syz.2.3414 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 761.893315][T17848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 761.893325][T17848] Call Trace: [ 761.893330][T17848] [ 761.893336][T17848] dump_stack_lvl+0x16c/0x1f0 [ 761.893359][T17848] should_fail_ex+0x512/0x640 [ 761.893377][T17848] ? fs_reclaim_acquire+0xae/0x150 [ 761.893403][T17848] ? tomoyo_encode2+0x100/0x3e0 [ 761.893423][T17848] should_failslab+0xc2/0x120 [ 761.893439][T17848] __kmalloc_noprof+0xd2/0x510 [ 761.893468][T17848] tomoyo_encode2+0x100/0x3e0 [ 761.893489][T17848] tomoyo_encode+0x29/0x50 [ 761.893505][T17848] tomoyo_realpath_from_path+0x18f/0x6e0 [ 761.893527][T17848] ? tomoyo_profile+0x47/0x60 [ 761.893550][T17848] tomoyo_path_number_perm+0x245/0x580 [ 761.893564][T17848] ? tomoyo_path_number_perm+0x237/0x580 [ 761.893580][T17848] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 761.893596][T17848] ? find_held_lock+0x2b/0x80 [ 761.893629][T17848] ? find_held_lock+0x2b/0x80 [ 761.893642][T17848] ? hook_file_ioctl_common+0x145/0x410 [ 761.893669][T17848] ? __fget_files+0x20e/0x3c0 [ 761.893693][T17848] security_file_ioctl+0x9b/0x240 [ 761.893729][T17848] __x64_sys_ioctl+0xb7/0x200 [ 761.893748][T17848] do_syscall_64+0xcd/0x260 [ 761.893764][T17848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.893777][T17848] RIP: 0033:0x7f8388f8e969 [ 761.893789][T17848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.893804][T17848] RSP: 002b:00007f8389e40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.893817][T17848] RAX: ffffffffffffffda RBX: 00007f83891b5fa0 RCX: 00007f8388f8e969 [ 761.893826][T17848] RDX: 0000200000000340 RSI: 000000004008ae8a RDI: 0000000000000005 [ 761.893834][T17848] RBP: 00007f8389e40090 R08: 0000000000000000 R09: 0000000000000000 [ 761.893841][T17848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.893849][T17848] R13: 0000000000000000 R14: 00007f83891b5fa0 R15: 00007ffce62f2ad8 [ 761.893867][T17848] [ 761.893898][T17848] ERROR: Out of memory at tomoyo_realpath_from_path. [ 762.121447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 762.308298][T17857] loop6: detected capacity change from 0 to 524287999 [ 762.320012][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.328485][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.337001][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.345250][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.353540][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.362242][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.370508][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.378648][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.386702][T17857] ldm_validate_partition_table(): Disk read failed. [ 762.393777][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.401973][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.410588][T17857] Dev loop6: unable to read RDB block 0 [ 762.418239][T17857] loop6: unable to read partition table [ 762.424560][T17857] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 762.496505][ T30] audit: type=1400 audit(2000000987.655:1172): avc: denied { append } for pid=17849 comm="syz.3.3415" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 762.665769][T17863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3419'. [ 762.978276][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3425'. [ 764.660702][ T30] audit: type=1400 audit(2000000990.003:1173): avc: denied { read } for pid=17896 comm="syz.1.3431" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 765.252436][ T30] audit: type=1400 audit(2000000990.003:1174): avc: denied { open } for pid=17896 comm="syz.1.3431" path="/43/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 765.255525][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 765.438615][T17904] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3433'. [ 765.480608][T17903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.579209][ T30] audit: type=1400 audit(2000000990.925:1175): avc: denied { create } for pid=17908 comm="syz.1.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 767.107872][T17936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.120402][T17936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.309701][ T5914] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 767.469659][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 767.481172][ T5914] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 767.499652][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.566237][T17942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.567904][ T5914] usb 2-1: config 0 descriptor?? [ 767.675431][T17945] syz_tun: entered allmulticast mode [ 768.065749][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 768.080371][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 768.109375][ T5914] usb 2-1: USB disconnect, device number 11 [ 768.190576][T17947] xt_time: unknown flags 0xc [ 768.195194][T17940] syz_tun: left allmulticast mode [ 768.206600][T17948] xt_time: unknown flags 0xc [ 768.635773][T17953] vlan2: entered promiscuous mode [ 768.679940][T17953] bond0: entered promiscuous mode [ 768.685879][T17953] bond_slave_0: entered promiscuous mode [ 768.699908][T17953] bond_slave_1: entered promiscuous mode [ 769.049878][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 769.129944][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 769.274459][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3452'. [ 769.305006][T17969] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.313796][T17969] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.322611][T17969] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.331349][T17969] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.340467][T17969] vxlan0: entered promiscuous mode [ 769.499679][T14059] Bluetooth: hci3: command 0x0406 tx timeout [ 769.528250][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 769.580604][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 769.648376][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 769.717097][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 769.786661][ T24] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 769.838416][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.985809][ T24] usb 3-1: Product: syz [ 770.012317][ T24] usb 3-1: Manufacturer: syz [ 770.036678][ T24] usb 3-1: SerialNumber: syz [ 770.137317][ T24] usb 3-1: config 0 descriptor?? [ 770.171457][ T24] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 770.279029][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 770.480694][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 770.540021][ T10] usb 2-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 770.830934][ T10] usb 2-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.996887][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 771.014007][ T10] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 771.023680][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.059295][ T10] usb 2-1: Product: syz [ 771.063708][ T10] usb 2-1: Manufacturer: પì¡êŽŽá‚°åŒ¸ï‚—ൾ〞ᙱໆ✻溋钲áŸì€‘혷ꉳéƒâ—‘䦩ɋ㛻튧⺖尿唆兄鈭࡚⮉ä‰î½á§¾î†ëœˆïº’ꢡꩧ떇ƽᢊⰨ膛á쀀褣㰲â“ç´éˆ®ã±¤æ†•å™»è—²ê¹®î¼±àµœì£€ï†„擅ᶢï½ïŸœí…Žé¦Šé›¬ã¿œá½°î¼´Ø¿ãœ‹ìŸ¶ëº„넲㫽曗縠舸⒗䯎焞ⶕ砘䛰⺰ȧ⪔螺≊ï™æ•†ä²½ï§´âŸ ä¿¬ì‹†è‹†æ¦€È䚄㡤ç§á‘Œá££èŠ­ê³ªç¢ïª¬èš‘猯煉伭 [ 771.065440][ T24] scsi host3: usb-storage 3-1:0.0 [ 771.106359][ T10] usb 2-1: SerialNumber: syz [ 771.115180][T17962] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 771.156448][T17962] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 771.262639][ T24] usb 3-1: USB disconnect, device number 16 [ 771.877382][T17992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.039787][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 772.363063][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 772.387253][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 772.402370][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 772.444774][ T10] usb 2-1: USB disconnect, device number 12 [ 772.795337][T18007] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55 sclass=netlink_xfrm_socket pid=18007 comm=syz.1.3458 [ 773.028053][T18017] overlayfs: missing 'lowerdir' [ 773.419996][ T5861] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 773.731316][T18031] rdma_rxe: rxe_newlink: failed to add lo [ 773.989988][T18031] netlink: 'syz.1.3464': attribute type 1 has an invalid length. [ 773.997826][T18031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3464'. [ 774.275274][ T5861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.329697][ T5861] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.352985][ T5861] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 774.480305][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 774.488448][ T5861] usb 3-1: SerialNumber: syz [ 774.719338][ T5861] usb 3-1: 0:2 : does not exist [ 774.798704][ T5861] usb 3-1: USB disconnect, device number 17 [ 775.450006][T17985] udevd[17985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.810068][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 776.904764][T18052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.994909][T18062] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 777.319949][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 777.374216][T18082] FAULT_INJECTION: forcing a failure. [ 777.374216][T18082] name failslab, interval 1, probability 0, space 0, times 0 [ 777.388156][T18082] CPU: 1 UID: 0 PID: 18082 Comm: syz.2.3478 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 777.388179][T18082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 777.388188][T18082] Call Trace: [ 777.388194][T18082] [ 777.388203][T18082] dump_stack_lvl+0x16c/0x1f0 [ 777.388227][T18082] should_fail_ex+0x512/0x640 [ 777.388245][T18082] ? fs_reclaim_acquire+0xae/0x150 [ 777.388266][T18082] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 777.388282][T18082] should_failslab+0xc2/0x120 [ 777.388293][T18082] __kmalloc_noprof+0xd2/0x510 [ 777.388313][T18082] tomoyo_realpath_from_path+0xc2/0x6e0 [ 777.388328][T18082] ? tomoyo_profile+0x47/0x60 [ 777.388352][T18082] tomoyo_path_number_perm+0x245/0x580 [ 777.388369][T18082] ? tomoyo_path_number_perm+0x237/0x580 [ 777.388388][T18082] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 777.388406][T18082] ? find_held_lock+0x2b/0x80 [ 777.388433][T18082] ? find_held_lock+0x2b/0x80 [ 777.388443][T18082] ? hook_file_ioctl_common+0x145/0x410 [ 777.388462][T18082] ? __fget_files+0x20e/0x3c0 [ 777.388483][T18082] security_file_ioctl+0x9b/0x240 [ 777.388506][T18082] __x64_sys_ioctl+0xb7/0x200 [ 777.388532][T18082] do_syscall_64+0xcd/0x260 [ 777.388551][T18082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.388564][T18082] RIP: 0033:0x7f8388f8e969 [ 777.388573][T18082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.388583][T18082] RSP: 002b:00007f8389e40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.388593][T18082] RAX: ffffffffffffffda RBX: 00007f83891b5fa0 RCX: 00007f8388f8e969 [ 777.388600][T18082] RDX: 0000200000000040 RSI: 0000000000004b31 RDI: 0000000000000003 [ 777.388605][T18082] RBP: 00007f8389e40090 R08: 0000000000000000 R09: 0000000000000000 [ 777.388611][T18082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.388617][T18082] R13: 0000000000000000 R14: 00007f83891b5fa0 R15: 00007ffce62f2ad8 [ 777.388637][T18082] [ 777.588909][ C1] vkms_vblank_simulate: vblank timer overrun [ 777.611900][T18082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.681728][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 777.708693][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 777.754835][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.783735][ T10] usb 2-1: Product: syz [ 777.798232][ T10] usb 2-1: Manufacturer: syz [ 777.825228][ T10] usb 2-1: SerialNumber: syz [ 777.870642][T18086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.879232][T18086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.045297][T16297] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 778.361987][T16297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 778.372190][T16297] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 778.391338][T16297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 778.401712][T16297] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 778.688509][T16297] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 778.699388][T16297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.709732][T16297] usb 3-1: Product: syz [ 778.717229][T16297] usb 3-1: Manufacturer: syz [ 778.722342][T16297] usb 3-1: SerialNumber: syz [ 778.730872][T16297] usb 3-1: config 0 descriptor?? [ 778.737956][T16297] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 778.809108][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 779.037890][ T30] audit: type=1400 audit(2000001004.385:1176): avc: denied { read } for pid=18097 comm="syz.3.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 780.243776][T16297] scsi host3: usb-storage 3-1:0.0 [ 780.437329][T16297] usb 3-1: USB disconnect, device number 18 [ 781.530950][ T5864] usb 2-1: USB disconnect, device number 13 [ 781.625290][ T5864] usblp0: removed [ 781.849324][T18129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.858218][T18129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.551544][T18133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=18133 comm=syz.0.3488 [ 782.919973][T18129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.931434][T18129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.177255][ T30] audit: type=1400 audit(2000001008.525:1177): avc: denied { read write } for pid=18144 comm="syz.0.3495" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 783.187608][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'. [ 783.206510][ T30] audit: type=1400 audit(2000001008.525:1178): avc: denied { open } for pid=18144 comm="syz.0.3495" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 783.875116][T18143] overlayfs: failed to resolve './file0': -2 [ 784.546054][T18163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.554856][T18163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.589180][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'. [ 785.784748][ T30] audit: type=1326 audit(2000001011.135:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.0.3502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2efdb8e969 code=0x0 [ 786.292995][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3505'. [ 787.339368][T18197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.349996][T18197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.359989][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'. [ 787.388813][T18201] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3508'. [ 787.554258][ T30] audit: type=1400 audit(2000001012.905:1180): avc: denied { create } for pid=18199 comm="syz.0.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 787.770239][ T30] audit: type=1400 audit(2000001012.925:1181): avc: denied { setopt } for pid=18199 comm="syz.0.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 787.845741][ T30] audit: type=1400 audit(2000001012.925:1182): avc: denied { ioctl } for pid=18199 comm="syz.0.3508" path="socket:[47295]" dev="sockfs" ino=47295 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 790.132880][ T30] audit: type=1400 audit(2000001015.485:1183): avc: denied { accept } for pid=18207 comm="syz.1.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 790.268799][T18230] netlink: 'syz.2.3514': attribute type 11 has an invalid length. [ 790.316752][T18232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.344494][T18230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3514'. [ 790.357004][T18232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.249790][ T5864] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 791.317511][ T30] audit: type=1400 audit(2000001016.665:1184): avc: denied { read } for pid=18244 comm="syz.0.3519" name="file0" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 791.465836][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.760297][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.839043][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.898434][T18260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.907066][T18260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.925218][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 792.233780][ T5864] usb 3-1: Product: syz [ 792.238005][ T5864] usb 3-1: Manufacturer: syz [ 792.259692][ T5864] usb 3-1: SerialNumber: syz [ 792.819018][T18279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 792.826287][T18279] IPv6: NLM_F_CREATE should be set when creating new route [ 792.833509][T18279] IPv6: NLM_F_CREATE should be set when creating new route [ 792.846022][ T30] audit: type=1400 audit(2000001018.165:1185): avc: denied { map } for pid=18276 comm="syz.3.3527" path="socket:[47420]" dev="sockfs" ino=47420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 792.902730][ T30] audit: type=1400 audit(2000001018.165:1186): avc: denied { accept } for pid=18276 comm="syz.3.3527" path="socket:[47420]" dev="sockfs" ino=47420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 793.189494][T18288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.198918][T18288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.265048][T18288] veth0_vlan: entered allmulticast mode [ 793.300065][T18288] veth0_vlan: left promiscuous mode [ 793.310219][T18288] veth0_vlan: entered promiscuous mode [ 794.388438][ T5864] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 794.398024][ T5864] cdc_ncm 3-1:1.0: bind() failure [ 794.418469][ T5864] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 794.425702][ T5864] cdc_ncm 3-1:1.1: bind() failure [ 794.443756][ T5864] usb 3-1: USB disconnect, device number 19 [ 794.919706][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 795.519653][ T30] audit: type=1326 audit(2000001020.835:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18300 comm="syz.1.3534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa02478e969 code=0x0 [ 795.789947][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 796.510185][T18313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.518774][T18313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.535196][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3536'. [ 796.545978][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 796.558632][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 796.605322][ T48] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 796.613639][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 796.648203][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 796.707778][ T24] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 796.720225][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.728446][ T24] usb 3-1: Product: syz [ 796.733551][ T24] usb 3-1: Manufacturer: syz [ 796.738170][ T24] usb 3-1: SerialNumber: syz [ 796.759240][ T24] usb 3-1: config 0 descriptor?? [ 796.768408][ T24] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 796.794560][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 796.890651][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 797.050108][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 797.111010][ T48] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 797.128413][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.137134][ T48] usb 2-1: Product: syz [ 797.145223][ T48] usb 2-1: Manufacturer: syz [ 797.150369][ T48] usb 2-1: SerialNumber: syz [ 797.157466][ T48] usb 2-1: config 0 descriptor?? [ 797.164442][T18304] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 797.182449][T18304] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 797.200714][ T48] usb 2-1: ucan: probing device on interface #0 [ 797.227722][T18324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.239505][T18324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.252727][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3538'. [ 797.470062][ T48] usb 2-1: ucan: could not read protocol version, ret=0 [ 797.494497][ T48] usb 2-1: ucan: probe failed; try to update the device firmware [ 797.691173][ T10] usb 2-1: USB disconnect, device number 14 [ 797.784750][ T24] scsi host3: usb-storage 3-1:0.0 [ 797.844101][ T24] usb 3-1: USB disconnect, device number 20 [ 800.417184][T18349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.427342][T18349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.462067][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'. [ 800.473350][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3545'. [ 800.485176][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3545'. [ 800.506604][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3545'. [ 801.780348][T18364] netlink: 'syz.3.3549': attribute type 2 has an invalid length. [ 802.756019][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3556'. [ 802.839791][ T5861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 803.049261][T18392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.066556][T18392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.185795][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 803.198117][ T5861] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 803.210354][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 803.411665][ T5861] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 803.935265][ T5861] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 803.951931][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.960818][ T5861] usb 3-1: Product: syz [ 803.965024][ T5861] usb 3-1: Manufacturer: syz [ 803.969764][ T5861] usb 3-1: SerialNumber: syz [ 803.979392][ T5861] usb 3-1: config 0 descriptor?? [ 803.988733][ T5861] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 804.452487][T18410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=18410 comm=syz.1.3562 [ 805.032972][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3554'. [ 805.660054][ T5861] scsi host3: usb-storage 3-1:0.0 [ 805.702137][ T5861] usb 3-1: USB disconnect, device number 21 [ 805.838591][T18421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=18421 comm=syz.1.3565 [ 807.686956][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 807.697526][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 807.705940][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 807.713844][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 807.721729][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 807.825175][T18446] lo speed is unknown, defaulting to 1000 [ 807.873653][T18446] lo speed is unknown, defaulting to 1000 [ 807.888957][ T5914] IPVS: starting estimator thread 0... [ 808.159899][T18460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=18460 comm=syz.2.3573 [ 808.204173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 808.330995][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.535877][T18458] IPVS: using max 39 ests per chain, 93600 per kthread [ 808.926974][T18462] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3574'. [ 809.199946][ T5864] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 809.354098][ T5864] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 809.372688][ T5864] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 809.374582][T18468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3576'. [ 809.589654][T18473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=18473 comm=syz.2.3575 [ 809.753088][ T5864] usb 2-1: config 0 has no interface number 0 [ 809.769959][ T5864] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 809.817545][ T5816] Bluetooth: hci2: command tx timeout [ 809.842465][ T5864] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.885558][ T5864] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 809.911233][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.962091][T18446] chnl_net:caif_netlink_parms(): no params data found [ 810.008759][ T5864] usb 2-1: config 0 descriptor?? [ 810.415363][T18491] netlink: 'syz.4.3579': attribute type 11 has an invalid length. [ 810.430722][T18491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3579'. [ 810.474627][T18446] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.620140][T18503] xt_hashlimit: size too large, truncated to 1048576 [ 810.700838][T18446] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.708686][T18446] bridge_slave_0: entered allmulticast mode [ 810.716793][T18446] bridge_slave_0: entered promiscuous mode [ 811.100756][T18446] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.211148][ T5864] usb 2-1: USB disconnect, device number 15 [ 811.225927][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.255132][T18446] bridge_slave_1: entered allmulticast mode [ 811.274201][T18446] bridge_slave_1: entered promiscuous mode [ 811.285071][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.589676][ T30] audit: type=1400 audit(2000001036.922:1188): avc: denied { bind } for pid=18502 comm="syz.4.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 811.688552][ T30] audit: type=1400 audit(2000001037.032:1189): avc: denied { ioctl } for pid=18514 comm="syz.3.3585" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 811.805077][T18446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.895374][ T5816] Bluetooth: hci2: command tx timeout [ 812.032227][ T5864] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 812.043156][T18446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.251291][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.254821][T18446] team0: Port device team_slave_0 added [ 812.268034][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.268080][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 812.302442][T18446] team0: Port device team_slave_1 added [ 812.315864][ T5864] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.325333][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.348163][ T5864] usb 3-1: config 0 descriptor?? [ 812.360043][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.384026][T18446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.391227][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.439257][T18446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.468589][T18446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.495187][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.554576][T18446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.731237][T18527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.739914][T18527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.762376][T18446] hsr_slave_0: entered promiscuous mode [ 812.768278][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3590'. [ 812.807888][T18446] hsr_slave_1: entered promiscuous mode [ 812.830072][ T30] audit: type=1400 audit(2000001038.172:1190): avc: denied { read } for pid=18530 comm="syz.3.3591" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 812.932267][ T5864] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 813.058301][T18446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 813.085532][T18531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.125812][T18446] Cannot create hsr debugfs directory [ 813.163506][T18531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.400245][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.959923][ T5816] Bluetooth: hci2: command tx timeout [ 814.440359][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.491625][ T5864] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 814.599998][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.114699][T18551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.123571][T18551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.132433][T18551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.500577][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.527911][T18551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.536183][T18551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.545600][T18552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.573844][ T10] usb 3-1: USB disconnect, device number 22 [ 815.584496][T18555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.612589][T18555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.888689][T18446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 815.906725][T18446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 815.922901][T18446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 815.936329][T18446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 816.033150][T18446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.049795][ T5816] Bluetooth: hci2: command tx timeout [ 816.057172][T18446] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.069886][ T5861] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 816.072672][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.084665][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.105985][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.113133][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.243117][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 816.270571][ T5861] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 816.297642][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 816.309975][T18562] fuse: Bad value for 'rootmode' [ 816.332542][ T5861] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 816.345572][ T5861] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 816.356741][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.386947][ T5861] usb 2-1: Product: syz [ 816.401766][ T5861] usb 2-1: Manufacturer: syz [ 816.416605][ T5861] usb 2-1: SerialNumber: syz [ 816.434076][ T5861] usb 2-1: config 0 descriptor?? [ 816.462782][ T5861] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 816.505935][T18446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.659674][ T5914] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 816.684342][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'. [ 817.289609][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 817.301023][T18578] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 817.761763][ T5914] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 817.783871][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.856770][ T5914] usb 3-1: config 0 descriptor?? [ 818.070442][T18586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3603'. [ 818.346049][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 818.354925][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 818.376657][ T5914] usb 3-1: USB disconnect, device number 23 [ 818.800001][ T10] net_ratelimit: 5 callbacks suppressed [ 818.800017][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.998324][T18446] veth0_vlan: entered promiscuous mode [ 819.152403][T18446] veth1_vlan: entered promiscuous mode [ 819.229322][T18446] veth0_macvtap: entered promiscuous mode [ 819.272377][T18446] veth1_macvtap: entered promiscuous mode [ 819.686225][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.712266][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.730445][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.740642][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.751981][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.762089][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.772630][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.790193][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.808647][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.834379][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.864369][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.939488][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.249993][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.250938][T18446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.292708][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.306759][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.316824][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.318879][T18618] netlink: 'syz.1.3609': attribute type 11 has an invalid length. [ 821.327389][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.327410][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.355837][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.383214][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.407492][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.425417][T18446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.436190][T18618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3609'. [ 821.490758][T18446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.505683][T18446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.577547][T18446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.619653][T18446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.628399][T18446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.679633][T18446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.081744][T18632] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 822.280965][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.499274][T18634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.508432][T18634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.535698][T18636] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3614'. [ 822.563465][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3615'. [ 822.759880][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.854374][T12709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.907535][T12709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.091271][T18643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.114647][T18643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.119788][T12708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.144604][T12708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.253463][ T30] audit: type=1400 audit(2000001048.602:1191): avc: denied { mounton } for pid=18446 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 823.328452][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.236798][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.360416][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.486390][T18665] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 824.646744][T18665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.696550][T18669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3621'. [ 824.833155][T18674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.853933][T18674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.254754][T18679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3626'. [ 825.318805][T18683] QAT: failed to copy from user cfg_data. [ 825.400911][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.800273][T16295] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 825.868474][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.123927][T16295] usb 3-1: Using ep0 maxpacket: 32 [ 826.226468][T18697] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 826.357625][T16295] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 826.679964][T16295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.690971][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.780234][T16295] usb 3-1: config 0 descriptor?? [ 827.132388][T16295] usbhid 3-1:0.0: can't add hid device: -71 [ 827.138441][T16295] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 827.207477][T16295] usb 3-1: USB disconnect, device number 24 [ 827.830900][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.042069][T18707] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 828.586840][ T30] audit: type=1400 audit(2000001053.921:1192): avc: denied { append } for pid=18718 comm="syz.4.3637" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 828.774292][ T30] audit: type=1400 audit(2000001054.121:1193): avc: denied { mounton } for pid=18730 comm="syz.3.3641" path="/152/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 828.797339][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.839073][ T30] audit: type=1400 audit(2000001054.151:1194): avc: denied { write } for pid=18730 comm="syz.3.3641" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 828.871094][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.991453][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.026670][ T30] audit: type=1400 audit(2000001054.181:1195): avc: denied { unmount } for pid=15724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 829.047014][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.065709][T18736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.074887][T18736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.123201][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3644'. [ 829.671109][ T5914] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 829.684561][ T5914] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 829.692279][ T5914] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 829.706412][ T5816] Bluetooth: hci1: Malformed LE Event: 0x0d [ 829.723790][ T5914] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 829.815521][T18749] netlink: 'syz.4.3647': attribute type 11 has an invalid length. [ 830.306896][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.392362][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3652'. [ 830.418932][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.625799][T18756] bridge_slave_1 (unregistering): left allmulticast mode [ 830.642576][T18756] bridge_slave_1 (unregistering): left promiscuous mode [ 830.693391][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.355877][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.159919][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.298467][T18797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=18797 comm=syz.1.3662 [ 832.552332][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.579894][ T5864] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 832.589699][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 832.758985][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.774384][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 832.803164][ T5864] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 832.817744][ T10] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 832.830907][T18800] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3663'. [ 832.849622][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.857688][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.876506][T18800] netlink: zone id is out of range [ 832.910612][ T10] usb 3-1: config 0 descriptor?? [ 832.922355][ T5864] usb 6-1: config 0 descriptor?? [ 832.960590][T18800] netlink: get zone limit has 8 unknown bytes [ 833.212488][T18808] netlink: 'syz.1.3663': attribute type 2 has an invalid length. [ 833.315453][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 833.321945][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 833.342922][ T10] usb 3-1: USB disconnect, device number 25 [ 833.571564][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.800914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.820734][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.831845][T12253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.290961][ T5864] cmedia_hs100b 0003:0D8C:0014.0004: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.5-1/input0 [ 835.377074][ T5864] usb 6-1: USB disconnect, device number 2 [ 835.641201][T16295] net_ratelimit: 5 callbacks suppressed [ 835.641217][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.712858][T18844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=18844 comm=syz.3.3673 [ 835.788282][T18846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.796989][T18846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.825471][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 835.879786][T14059] Bluetooth: hci0: command 0x0405 tx timeout [ 836.098845][ T30] audit: type=1400 audit(2000001061.435:1196): avc: denied { read } for pid=18849 comm="syz.2.3675" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 836.363621][ T30] audit: type=1400 audit(2000001061.435:1197): avc: denied { open } for pid=18849 comm="syz.2.3675" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 836.565648][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.069388][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.198986][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3679'. [ 837.609878][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 837.630121][ T5864] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 837.930729][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 837.936338][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 837.974957][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 837.988388][ T5864] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 837.997811][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.013665][ T5864] usb 6-1: config 0 descriptor?? [ 838.026193][ T24] usb 3-1: config 0 has no interface number 0 [ 838.057986][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 838.120492][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.210353][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 838.243215][ T24] usb 3-1: Product: syz [ 838.248277][ T24] usb 3-1: Manufacturer: syz [ 838.253747][ T24] usb 3-1: SerialNumber: syz [ 838.266354][ T24] usb 3-1: config 0 descriptor?? [ 838.275165][ T24] hub 3-1:0.132: bad descriptor, ignoring hub [ 838.281568][ T24] hub 3-1:0.132: probe with driver hub failed with error -5 [ 838.294154][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input12 [ 838.630299][ T5864] usbhid 6-1:0.0: can't add hid device: -71 [ 838.639396][ T5864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 838.875033][ T5864] usb 6-1: USB disconnect, device number 3 [ 838.920752][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.025583][ T24] usb 3-1: USB disconnect, device number 26 [ 839.162210][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.201853][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.364931][ T5816] Bluetooth: hci0: ISO packet for unknown connection handle 2791 [ 840.580357][T16297] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 840.784388][T16297] usb 3-1: Using ep0 maxpacket: 16 [ 840.825931][T16297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.864785][T12252] Bluetooth: (null): Invalid header checksum [ 840.983239][T12252] Bluetooth: (null): Invalid header checksum [ 841.057335][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.061343][T16297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 841.078275][T16297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 841.079501][T12252] Bluetooth: (null): Invalid header checksum [ 841.088333][T16297] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 841.098464][T12252] Bluetooth: (null): Invalid header checksum [ 841.147816][T12252] Bluetooth: (null): Invalid header checksum [ 841.171079][T16297] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.221625][T16297] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 841.230979][T16297] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 841.240363][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.257713][T12707] Bluetooth: (null): Invalid header checksum [ 841.312608][T16297] usb 3-1: Manufacturer: syz [ 841.323868][T16297] usb 3-1: config 0 descriptor?? [ 842.388938][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.480949][T16297] rc_core: IR keymap rc-hauppauge not found [ 842.496468][T16297] Registered IR keymap rc-empty [ 842.614753][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 842.634096][T18922] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 842.653231][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 842.694260][T16297] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 842.797839][T16297] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 842.803869][T18937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.847357][T18937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.901707][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 842.919888][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 842.949883][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 842.979743][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 842.999921][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.013286][T18933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.021957][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.027353][T18933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.089859][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.122476][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.159783][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.189663][T16297] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 843.235514][T16297] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 843.244658][T16297] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 843.271950][T16297] usb 3-1: USB disconnect, device number 27 [ 843.332058][T18946] netlink: 'syz.3.3700': attribute type 7 has an invalid length. [ 843.412875][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.421002][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.040023][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.282292][T16295] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 844.461928][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.555491][ T30] audit: type=1326 audit(2000001069.905:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8388f8e969 code=0x7ffc0000 [ 844.612554][T16295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 844.704185][T16295] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 844.709612][ T30] audit: type=1326 audit(2000001069.905:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8388f8e969 code=0x7ffc0000 [ 844.738436][T16295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 844.749372][T16295] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 844.762966][T16295] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 844.934817][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3704'. [ 844.949831][T16295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.137299][T18970] bridge_slave_1: left allmulticast mode [ 845.201745][T18970] bridge_slave_1: left promiscuous mode [ 845.212612][T16295] usb 6-1: Product: syz [ 845.216883][ T30] audit: type=1400 audit(2000001070.565:1200): avc: denied { read } for pid=18972 comm="syz.2.3706" path="socket:[51480]" dev="sockfs" ino=51480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 845.252222][T16295] usb 6-1: Manufacturer: syz [ 845.259869][T18970] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.276038][T16295] usb 6-1: SerialNumber: syz [ 845.313388][ T5816] Bluetooth: hci0: Invalid handle: 0x2900 > 0x0eff [ 845.322445][T16295] usb 6-1: config 0 descriptor?? [ 845.330001][T16295] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 845.492478][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.734270][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3702'. [ 845.985334][T18970] bridge_slave_0: left allmulticast mode [ 846.079992][T18970] bridge_slave_0: left promiscuous mode [ 846.093646][T18970] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.562031][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.865950][T18995] netlink: 'syz.4.3709': attribute type 4 has an invalid length. [ 847.200039][T16295] scsi host4: usb-storage 6-1:0.0 [ 847.220853][T16295] usb 6-1: USB disconnect, device number 4 [ 847.634814][T19004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=19004 comm=syz.3.3711 [ 847.832609][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.838890][T19021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.849892][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.866968][T19021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.894875][T19015] netlink: 'syz.3.3716': attribute type 32 has an invalid length. [ 848.916960][T19024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.927325][T19024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.312968][T19022] overlayfs: conflicting lowerdir path [ 849.355837][T19015] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 849.391727][T19015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.401966][T19015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.669823][ T5914] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 849.833105][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 849.843920][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 849.853775][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 849.863615][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 849.876330][ T5914] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 849.885700][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.892883][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.893813][ T5914] usb 3-1: Product: syz [ 849.906217][ T5914] usb 3-1: Manufacturer: syz [ 849.910902][ T5914] usb 3-1: SerialNumber: syz [ 849.921341][ T5914] usb 3-1: config 0 descriptor?? [ 849.930960][ T5914] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 850.065144][T19042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.088190][T19042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.380752][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3720'. [ 851.086730][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.384769][ T5914] scsi host4: usb-storage 3-1:0.0 [ 851.484717][ T5914] usb 3-1: USB disconnect, device number 28 [ 852.133675][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.310039][ T48] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 852.495974][ T31] INFO: task udevd:16089 blocked for more than 143 seconds. [ 852.522838][ T31] Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 [ 852.530688][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 852.542085][ T31] task:udevd state:D stack:26632 pid:16089 tgid:16089 ppid:5185 task_flags:0x400140 flags:0x00000002 [ 853.150283][T19078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10498 sclass=netlink_route_socket pid=19078 comm=syz.1.3734 [ 853.330397][ T31] Call Trace: [ 853.333839][ T31] [ 853.336864][ T31] __schedule+0x116f/0x5de0 [ 853.344406][ T31] ? register_lock_class+0x41/0x4c0 [ 853.351348][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.360217][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 853.365669][ T31] ? __pfx___schedule+0x10/0x10 [ 853.370933][ T31] ? find_held_lock+0x2b/0x80 [ 853.375717][ T31] ? schedule+0x2d7/0x3a0 [ 853.380139][ T31] schedule+0xe7/0x3a0 [ 853.384276][ T31] schedule_preempt_disabled+0x13/0x30 [ 853.389868][ T31] __mutex_lock+0x6c7/0xb90 [ 853.394561][ T31] ? uevent_show+0x187/0x3b0 [ 853.399238][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 853.405668][ T31] ? uevent_show+0x187/0x3b0 [ 853.411547][ T31] uevent_show+0x187/0x3b0 [ 853.416086][ T31] ? __pfx_uevent_show+0x10/0x10 [ 853.421086][ T31] dev_attr_show+0x53/0xe0 [ 853.425525][ T31] ? __pfx_dev_attr_show+0x10/0x10 [ 853.431156][ T31] sysfs_kf_seq_show+0x213/0x3e0 [ 853.436152][ T31] seq_read_iter+0x506/0x12c0 [ 853.440884][ T31] kernfs_fop_read_iter+0x40f/0x5a0 [ 853.446158][ T31] ? rw_verify_area+0xcf/0x680 [ 853.450959][ T31] vfs_read+0x8c8/0xc70 [ 853.455336][ T31] ? __pfx_vfs_read+0x10/0x10 [ 853.460682][ T31] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 853.466372][ T31] ksys_read+0x12a/0x240 [ 853.470893][ T31] ? __pfx_ksys_read+0x10/0x10 [ 853.475681][ T31] ? rcu_is_watching+0x12/0xc0 [ 853.480480][ T31] do_syscall_64+0xcd/0x260 [ 853.493846][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 853.510575][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.511613][ T48] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 853.517712][ T31] RIP: 0033:0x7fbd3cd71b6a [ 853.533205][ T31] RSP: 002b:00007ffe8a5f1ee8 EFLAGS: 00000246 [ 853.533383][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.533440][ T31] ORIG_RAX: 0000000000000000 [ 853.553620][ T48] usb 6-1: config 0 descriptor?? [ 853.558979][ T31] RAX: ffffffffffffffda RBX: 000055a5a1e227e0 RCX: 00007fbd3cd71b6a [ 853.567494][ T31] RDX: 0000000000001000 RSI: 000055a5a1e2cd40 RDI: 0000000000000008 [ 853.575797][ T31] RBP: 000055a5a1e227e0 R08: 0000000000000008 R09: 0000000000000004 [ 853.584189][ T31] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 853.592337][ T31] R13: 0000000000003fff R14: 00007ffe8a5f23c8 R15: 000000000000000a [ 853.601299][ T31] [ 853.604600][ T31] [ 853.604600][ T31] Showing all locks held in the system: [ 853.619453][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 853.626686][ T31] 1 lock held by khungtaskd/31: [ 853.641255][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.657353][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 853.670367][ T31] 5 locks held by kworker/1:1/48: [ 853.675681][ T31] #0: ffff888022af9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 853.688576][ T31] #1: ffffc90000b97d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 853.702735][ T31] #2: ffff8881453b5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 853.713310][ T31] #3: ffff88802ad05198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 853.727530][ T31] #4: ffff88802ad03160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 853.738003][ T31] 2 locks held by getty/5572: [ 853.744121][ T31] #0: ffff88814d7ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 853.754320][ T31] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 853.765057][ T31] 5 locks held by kworker/1:3/5861: [ 853.771273][ T31] #0: ffff888022af9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 853.789688][ T31] #1: ffffc9000446fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 853.795194][ T48] usbhid 6-1:0.0: can't add hid device: -71 [ 853.805450][ T31] #2: ffff8880290d5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 853.816997][ T31] #3: ffff88805b25e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 853.818147][ T48] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 853.842328][ T31] #4: ffff888088159160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 853.845963][ T48] usb 6-1: USB disconnect, device number 5 [ 853.874523][ T31] 5 locks held by kworker/1:6/5919: [ 853.881950][ T31] #0: ffff888022af9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 853.896452][ T31] #1: ffffc9000527fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 853.908365][ T31] #2: ffff8880293dd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 853.926525][ T31] #3: ffff88807f604198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 853.936642][ T31] #4: ffff88805da82160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 853.948195][ T31] 3 locks held by kworker/u8:15/12252: [ 853.958132][ T31] 2 locks held by kworker/u8:16/12253: [ 853.964186][ T31] #0: ffff888021b88948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 853.975166][ T31] #1: ffffc900039dfd18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 853.986971][ T31] 4 locks held by udevd/15437: [ 853.992664][ T31] #0: ffff88802b0ea0a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 854.002029][ T31] #1: ffff88803c913488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 854.011862][ T31] #2: ffff888046ca01e8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 854.022820][ T31] #3: ffff88805b25e198 (&dev->mutex){....}-{4:4}, at: uevent_show+0x187/0x3b0 [ 854.032965][ T31] 5 locks held by kworker/0:0/15842: [ 854.038932][ T31] #0: ffff888022af9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 854.052738][ T31] #1: ffffc9001a9bfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 854.067048][ T31] #2: ffff88814539d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 854.078388][ T31] #3: ffff88814c93d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 854.088752][ T31] #4: ffff88807afae160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 854.098450][ T31] 4 locks held by udevd/16089: [ 854.103521][ T31] #0: ffff8880799ae2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 854.113014][ T31] #1: ffff88805ca22c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 854.122863][ T31] #2: ffff8880341eef08 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 854.132723][ T31] #3: ffff88814c93d198 (&dev->mutex){....}-{4:4}, at: uevent_show+0x187/0x3b0 [ 854.142371][ T31] 1 lock held by syz.0.3519/18245: [ 854.147735][ T31] #0: ffff88814539d198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 854.157934][ T31] 4 locks held by syz.3.3735/19072: [ 854.163268][ T31] #0: ffff8880254de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x153/0x2e0 [ 854.173693][ T31] #1: ffff888059a3d0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x17d/0x2e0 [ 854.184227][ T31] #2: ffff888025497590 (&hu->proto_lock){++++}-{0:0}, at: hci_uart_tty_close+0x162/0x2a0 [ 854.194398][ T31] #3: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 854.206511][ T31] [ 854.209042][ T31] ============================================= [ 854.209042][ T31] [ 854.225061][ T31] NMI backtrace for cpu 0 [ 854.225080][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 854.225099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 854.225108][ T31] Call Trace: [ 854.225114][ T31] [ 854.225121][ T31] dump_stack_lvl+0x116/0x1f0 [ 854.225141][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 854.225160][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 854.225173][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 854.225189][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 854.225212][ T31] watchdog+0xf70/0x12c0 [ 854.225228][ T31] ? __pfx_watchdog+0x10/0x10 [ 854.225238][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 854.225253][ T31] ? __kthread_parkme+0x19e/0x250 [ 854.225272][ T31] ? __pfx_watchdog+0x10/0x10 [ 854.225283][ T31] kthread+0x3c2/0x780 [ 854.225295][ T31] ? __pfx_kthread+0x10/0x10 [ 854.225305][ T31] ? __pfx_kthread+0x10/0x10 [ 854.225315][ T31] ? __pfx_kthread+0x10/0x10 [ 854.225328][ T31] ? __pfx_kthread+0x10/0x10 [ 854.225341][ T31] ? rcu_is_watching+0x12/0xc0 [ 854.225361][ T31] ? __pfx_kthread+0x10/0x10 [ 854.225373][ T31] ret_from_fork+0x45/0x80 [ 854.225385][ T31] ? __pfx_kthread+0x10/0x10 [ 854.225396][ T31] ret_from_fork_asm+0x1a/0x30 [ 854.225423][ T31] [ 854.225456][ T31] Sending NMI from CPU 0 to CPUs 1: [ 854.364692][ C1] NMI backtrace for cpu 1 [ 854.364707][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 854.364723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 854.364730][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 854.364748][ C1] Code: c5 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 ea 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 854.364760][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 854.364771][ C1] RAX: 0000000002f56367 RBX: 0000000000000001 RCX: ffffffff8b6c0419 [ 854.364779][ C1] RDX: 0000000000000000 RSI: ffffffff8dbdebe6 RDI: ffffffff8bf47720 [ 854.364789][ C1] RBP: ffffed1003b5a488 R08: 0000000000000001 R09: ffffed10170a65bd [ 854.364798][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 854.364807][ C1] R13: ffff88801dad2440 R14: ffffffff9084e710 R15: 0000000000000000 [ 854.364815][ C1] FS: 0000000000000000(0000) GS:ffff888124ae5000(0000) knlGS:0000000000000000 [ 854.364828][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 854.364836][ C1] CR2: 000000110c43555e CR3: 000000000e180000 CR4: 00000000003526f0 [ 854.364844][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000007fff132f [ 854.364851][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 854.364859][ C1] Call Trace: [ 854.364863][ C1] [ 854.364867][ C1] default_idle+0x13/0x20 [ 854.364882][ C1] default_idle_call+0x6d/0xb0 [ 854.364895][ C1] do_idle+0x391/0x510 [ 854.364913][ C1] ? __pfx_do_idle+0x10/0x10 [ 854.364927][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 854.364947][ C1] cpu_startup_entry+0x4f/0x60 [ 854.364961][ C1] start_secondary+0x21d/0x2b0 [ 854.364980][ C1] ? __pfx_start_secondary+0x10/0x10 [ 854.365000][ C1] common_startup_64+0x13e/0x148 [ 854.365019][ C1] [ 854.366060][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.562043][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.572215][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 854.579074][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 854.590864][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 854.600895][ T31] Call Trace: [ 854.604150][ T31] [ 854.607066][ T31] dump_stack_lvl+0x3d/0x1f0 [ 854.611640][ T31] panic+0x71c/0x800 [ 854.615533][ T31] ? __pfx_panic+0x10/0x10 [ 854.619930][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 854.625280][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 854.631233][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 854.636581][ T31] ? watchdog+0xdda/0x12c0 [ 854.640979][ T31] ? watchdog+0xdcd/0x12c0 [ 854.645390][ T31] watchdog+0xdeb/0x12c0 [ 854.649622][ T31] ? __pfx_watchdog+0x10/0x10 [ 854.654280][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 854.659459][ T31] ? __kthread_parkme+0x19e/0x250 [ 854.664491][ T31] ? __pfx_watchdog+0x10/0x10 [ 854.669139][ T31] kthread+0x3c2/0x780 [ 854.673189][ T31] ? __pfx_kthread+0x10/0x10 [ 854.677752][ T31] ? __pfx_kthread+0x10/0x10 [ 854.682345][ T31] ? __pfx_kthread+0x10/0x10 [ 854.686923][ T31] ? __pfx_kthread+0x10/0x10 [ 854.691484][ T31] ? rcu_is_watching+0x12/0xc0 [ 854.696225][ T31] ? __pfx_kthread+0x10/0x10 [ 854.700805][ T31] ret_from_fork+0x45/0x80 [ 854.705194][ T31] ? __pfx_kthread+0x10/0x10 [ 854.709762][ T31] ret_from_fork_asm+0x1a/0x30 [ 854.714528][ T31] [ 854.717728][ T31] Kernel Offset: disabled [ 854.722030][ T31] Rebooting in 86400 seconds..