last executing test programs:

5.804650958s ago: executing program 2 (id=612):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x7, 0x2, @TCA_ETF_PARMS={0xffffff7f, 0x1, {0xffffffc0, 0xb, 0x1}}}}]}, 0x40}}, 0x0)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="90000000240000000300000000000080040000008000a64ce27672717fb7e05da50087188482dcba92d72587af0f25dee506aaa34ac71698318da6877ab1df00628a2e509be5a79285253c89505572b54266b0420c568a11eeb9aeec761f7a5c83329c8e5cd090a1aa5084d408db825463fd4679d22abc35e13b2715ee7357d4cfc6a7994a37a0f5bb2df200269c80268e00000000000000"], &(0x7f0000000180), 0x800)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)

5.442001854s ago: executing program 2 (id=622):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = userfaultfd(0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16)
ioctl$MEMERASE64(0xffffffffffffffff, 0x40104d14, &(0x7f0000000000)={0x485, 0x8})
shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19)
r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000, 0x2})
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x3ff, 0x1a5240)
r4 = syz_clone(0x20000000, &(0x7f00000000c0)="b050e29bdee56a0cb9295d536b4830adf2ff6e564cc7e05348544c19baba61e999a2aaee19dfd4aa062624720928ab4fe372b5a9c6bd7c5a9f3247595607614d6c7f74352e96667a368dfc72493a5155b8e7d34ac0da31b9d14ab7641f310fd5a2ac3b6b7cd9b2f87cfa76314b9d2b83b66bda8e2ceb21f167", 0x79, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="f3389b85ac1ebacb04d73f67dd51cd1048b57f05c5d53d4c535f377202939690947f65a84ed03df02d6456f7fd65bf0230f3167b523dd49aa1abfad274c32fe485733260b336c9e79e484240698f970004d431aec5effad2bb7cd40687c039818454a46f7e2eb3d3e483eb785b063d")
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1, 0x0, 0xb6, 0x8, 0x4, r4})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r6, 0x321ceabc48a0c830, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="61ab512e9597e3d52213d79e4e810bc1d39a608ce282653d126684b2"}, @NL80211_ATTR_PMKID={0x14, 0x55, "28258cc0c77704bd746469e9ca778a7c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="0f02bdaaae6b"}, @NL80211_ATTR_PMKID={0x14, 0x55, "ba656601fc4baac9333034a4f65f120d"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b14939bea907"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}]}, 0x90}, 0x1, 0x0, 0x0, 0x12000815}, 0x40000)
mkdir(&(0x7f0000000480)='./file0\x00', 0x2)
read(r2, &(0x7f00000004c0)=""/163, 0xa3)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000580), 0xf, 0x4)
pipe2(&(0x7f00000005c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84080)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000600)=0x3)
read(r5, &(0x7f0000000640)=""/99, 0x63)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x480})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
read$FUSE(r8, &(0x7f0000000700)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_LK(r7, &(0x7f0000002740)={0x28, 0x0, r9, {{0x9, 0x80000000, 0x2, r4}}}, 0x28)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000002780)=0x3, 0x81, 0x2)
syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000027c0)={{&(0x7f0000f25000/0xb000)=nil, 0xb000}})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000002800)=0x7fff)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f00000028c0)={'sit0\x00', &(0x7f0000002840)={@rand_addr=0x64010101, 0x1, 0x0, 0x70, 0x0, [{@private}, {@empty}, {@dev}, {}, {@empty}, {@broadcast}, {@broadcast}]}})
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000002940)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000002900), {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@private=0xa010101, [0xff, 0xffffffff, 0xff000000, 0xffffff00], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0x0, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], @ipv6=@remote, [0x0, 0xffffffff, 0x0, 0xffffffff], 0x3965, 0x4, 0x85, 0x4e22, 0x4e24, 0x4e23, 0x4e20, 0x10, 0x404}, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffffff, 0xff000000, 'veth0_macvtap\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc81456d5a4cbcf98, 0x1, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x510, 0x42, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x8, 0x2, 0x1, 0x1], 0x6, 0x3}, {0x1, [0x4, 0x1, 0x4, 0x3, 0x2, 0x3], 0x2, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x100, 0xb133, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)

2.510246169s ago: executing program 2 (id=627):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0], 0x2, r2})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, <r4=>r1, 0x2})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001580)={&(0x7f0000000300)="6f1a38d32b3444f028920388898216f5d672593c0f1b49e89699ece4e7f20dfba7d83f744b4119e97825d205d64611e34018d4ddd89cee1cfea29d517d314c11829a5b9ebcd8f8fedde74222ec436362dd4ca706d75bb6576707dcc204d62953c78d8e46d46b9c8ac52d6631e3dee229991daed0697a926175ef81aa", &(0x7f0000000380)=""/189, &(0x7f0000000480)="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", &(0x7f0000001480)="684dbf2dfc4f96e0f5a5f2c951c057e36d2452c28c12a9f212f7911b6965e696b08f734cdd1e2d48158789d30683dfdf3e8d6cb25f7a9ef281187ed5ba66bfbd1d75cd71de53fe80ebe739589379596edd9aadafd19d8677bf29dac367e9d50b750bfa4baa6aea239688447d832c48a21b7e62f2ef610fe7f0201ca379436957b4cd7438ce651ad8cddb5c638ea76d621129d35d01e66172076009ce18dd049e3a78c51c5d0ae663b9c7654d448047ee85e4daf0d08443c9d15abd99ce52bd538ccfab803f57ce14ccfe4ff879d7d1788535aa5eaaa4bf2b1e1f867b", 0xfffffffa, r4, 0x4}, 0x38)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r5=>0x0], 0x0, 0x0, 0x59, 0x1})
syz_clone(0x40000000, &(0x7f00000015c0)="ddfa97f0695d22ed68c95fa52a0ac1cb5a1f59166638dae0cdc8f17ed7b591d6032b84e967bf3bc7ae2cff11adc368f679d26f901ba242e4d8fe7500f16b6fabc59fb54ef5aac4ac4da3b53759a8194775ec4cdf391ab950cbf3045e98663b03b7a8eacf20d96cce63c98a78870b957e171f44a306a63585b2d0c0cbae82dd1ab266938bed30f210231922b11868abd3267182d7122094945d07a006951975419ea78e36a87111128175", 0xaa, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)="648f598078559eac8490697604916b0901889b170504e8af026f3c59e5c2f74206d00221def826cb73dc6288ecddde7737ff479d68323474f406afd8d5a69484068feb92e3404fe84912c911529684ec1ed9fdb91ec7c85e0fd5d993a14717d0a64deee5dd0a3ee4dea298ecba14a117e3c7f01ad1e1cbb3b7d2b0707fd159590cc275c272018bb2526f7415a3d0fca290282b739fd6d6d88fcd20d6790b6b20718349e9f064ad8e85998e2d8cc9af3a72a5e99e284786d9e64c1a89e4543e58045478ffcd3d452b2e5b76727d8a7e9db1e77d06db")
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r5, 0xff, 0x100007, 0xa, 0x1ff, 0x1})

2.048413143s ago: executing program 2 (id=638):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x48000, 0x18)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) (async)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
setreuid(0x0, 0xee00) (async)
io_submit(r3, 0x1, &(0x7f0000000980)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0x1, 0x407f0b00}]) (async)
dup3(r2, r0, 0x0)

1.861311678s ago: executing program 3 (id=641):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)

1.859007015s ago: executing program 2 (id=642):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, <r3=>r1, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) (fail_nth: 13)

1.712224s ago: executing program 3 (id=643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48014}, 0x4000000)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5d2c7973c7bf8b01}, 0x20000050)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0xffff, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="73937d34c401b8501aac1ce4ce30c655713dba78a96ffe8e0dba03be3598f397bff2567ffadbc5baa3402550c62c2c5f30a13d18b78611f60323b744cc7f8edd7d9bdcd2e5a31e6c6f174d336bed8085b31d52cf6a186f2ed49a41016c5e1af19fb70c4339b87760", &(0x7f00000002c0), 0x1006, r2, 0x0, 0xd88d02a0}, 0x38)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x11)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000000)={0x10004, 0x0, 0xd000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})

1.711808302s ago: executing program 3 (id=644):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42)
syz_usb_disconnect(r1)
r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x0, 0x5})
r4 = dup2(r2, r2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000980)={0x4, 0x3e0, 0x200, @empty, 'vlan0\x00'})

1.71153346s ago: executing program 2 (id=645):
modify_ldt$write(0x1, &(0x7f00000001c0)={0x100000fa, 0x20000800, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = syz_clone(0x1000, 0x0, 0xfffffffffffffce0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7040010000000f00000008000300d052a621971d3b861cbd343a7ef477798378c13fb06b5bd88598d6460da031bf3a2f147e2c09233fd1c4093fe4a49eb3a75a4ed7023f9c70ec549f6fbcf301cffe86d2d66e6d1fb12d6e1d6d3dbdc1f2c63b5bb0c6099c8b0d374027b40a19e0cd548f2907161cf09b952dce8aa285e19ef2274505dffca13e88f443a605371bb7803295024ce836dc0a70155b20694ca5c58625e5688d2793974aa733fd950b8ba1767f3cba2e56e68ac24ecb5ced06b8c6ec590c48bb88240a9bcaa239137a3df58a73fd2898055f1e8060b38bcfe1ec01d055f68effe05bd6e2911ffb44e72391b54a5d5159974310151351ecfc3094e0740f56691604fea67bf6a2e1fcc3e11970633484f8bd94a587dca2ebf486045e7401c2eb0194118b165d5de00ed42064971350d56a98ce04578f0a1a7e1cbb30ba49be5dd7000000000000000000", @ANYRES32=r4, @ANYBLOB="050035003a000000"], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x4040058)
write$binfmt_elf64(r1, &(0x7f0000001a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x1, 0x4, 0x3, 0x3e, 0xfffffff7, 0x1db, 0x40, 0x223, 0x2, 0x6, 0x38, 0x4, 0x74, 0x7, 0x104}, [{0x4, 0x0, 0x660, 0xfffffffffffffffd, 0x2, 0xff, 0x5, 0x10001}, {0x70000000, 0x2, 0x8, 0x10000, 0x0, 0x9, 0x3, 0x7ff}, {0x2, 0x6, 0x1000, 0xa4, 0x40, 0x7fff, 0x4, 0x55fc}, {0x2, 0x5f, 0x1000, 0x6, 0x8, 0x8000, 0x0, 0x21ff}], "e47c9dffaf0749b9c19673df4c81500693927246e13ac4707601", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x83a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000002ac0), 0xeb74, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000002b00)={0x1, 0x0, {0xa, 0x4, 0x1011, 0x6, 0x2, 0x8, 0x0, 0x5}})
prlimit64(0x0, 0xb, &(0x7f0000000300), 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000dc0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r5, @ANYRES16=r3], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd61a7000200442f00fe8000000000000000000800000000bbfe800000000000004da6ae136bb778ef0c2088be0000000201009900000086dd080088be000000031c0885140100000000fe7840080022ebf2000000230223f4de986e7a7a82ae0300ebb41b0800655800000004"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r8 = dup(0xffffffffffffffff)
ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0xffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
syz_usb_connect$cdc_ncm(0x7, 0x7e, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010003020000102505a10102030109026c00020101209d0904000401020d0000092406000134296c4805240005000d240f0100000000a720b20009062f7f00090581031000f801fc0904010000020d00000904010102020d000009058202ff03fe00400905030220000603fed2325b084a65665f05baadb30c63248a023ee0f655816ed22a729b034ad83d56e769e9de51ae8d407e60f6f3495474ac008bb5c6ebb92e258d497121aadd3e97d142f9263ccd19688c780adad4"], &(0x7f0000000a40)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x110, 0x3, 0x6d, 0x2, 0x8, 0x9}, 0x1e, &(0x7f0000000b00)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xb, 0x6, 0xc, 0x7ff, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xb, 0x9, 0x10}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x3, 0x36}]}, 0x4, [{0xe2, &(0x7f0000000e40)=ANY=[@ANYBLOB="e2036b401599caddde780efd44f26966a40fe4e039fdcd3fe2e742baba9acaf2fac46ee9b236fdbb28d664c13755100a61736eafc86be086aad93667b445a5cc0771f9560083a64f0ebd6b3063dc8e5baa8aaecd79eabef36de206c36d544b4bfd96a1f38dfa36e4c5d54be5d63b12c85e757f8aedf7bc2660632e81416169c590381938160069018c37581aa75a0012b94d615b14e4811b576d718190658526f9fab63de07871e7fe5e95e0de14862ce0f11766aaa98270b9404162710829619c440f13ce3de0638fc6a55055acb19a43b3a516730e69a11cce3652c9e0808a4968"]}, {0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="3603388b18eeac0350fa85776482937c0fa14f786bc1ad0d6259542347720d0932c81602bb5f959a8a6044da36aa4a3aff455c1d5e06"]}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x404}}, {0x9a, &(0x7f0000001100)=ANY=[@ANYBLOB="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"]}]})
mount(&(0x7f0000000180)=@filename='./file1\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)

1.292720696s ago: executing program 1 (id=651):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)=<r2=>0x0, &(0x7f0000001240)=<r3=>0x0, &(0x7f0000001280)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000012c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400000000000000f20be80000000000", @ANYRES32=0x0, @ANYBLOB="7b13000004000000200012800b00010067656e657665000010000280060005004e2000000400060008000400b2000000"], 0x48}}, 0x40800)
socketpair(0x2, 0x1, 0x100, &(0x7f0000000440))

1.292199821s ago: executing program 1 (id=652):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400000000000000000000000059a049807a1195279a1fa2aa4dfa926f1d8a74ce8cd8a868fd4b7da26a1624996baf8a53337247649997e2eedea10d7afb58de0e91a268e6125ce1886ec628e56a62a5d2ff8dfff39e7d5bb97e7f440a280bcceef5a1b6931828", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000400b2000000"], 0x48}}, 0x40800)

1.186340263s ago: executing program 1 (id=653):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, <r3=>r1, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) (fail_nth: 14)

1.12275281s ago: executing program 1 (id=654):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1})
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r3, r1, 0x1c, 0x3, 0x2})

612.352014ms ago: executing program 0 (id=656):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$igmp(0x2, 0x3, 0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)
prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0})

552.448086ms ago: executing program 0 (id=657):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32)
r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) (async)
recvfrom$phonet(r1, &(0x7f0000000440)=""/26, 0x1a, 0x160, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x4c, r3, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44010}, 0x8000)

551.936171ms ago: executing program 0 (id=658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0xfffffff7, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

442.75169ms ago: executing program 0 (id=659):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a)
r3 = creat(&(0x7f0000000080)='./file1\x00', 0xec)
write$cgroup_int(r2, &(0x7f0000000000)=0x1, 0x12)
write$cgroup_int(r3, &(0x7f0000000540)=0xffffffffffffffff, 0x74)
writev(r3, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="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", 0xe9f}], 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4010)

341.129733ms ago: executing program 0 (id=660):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, {0xa, 0xfffd, 0xfffffffd, @remote}, r2, 0xfffffffc}}, 0x48)

270.607911ms ago: executing program 1 (id=661):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000630000000000aa089500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0xfffffff8, 0xbc, &(0x7f0000000400)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b37a3cb917c1855}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='+5', 0x2) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xad}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}]})
r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x21001, 0x0) (async)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000040))
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000300)={0x4, 0x80, 0x6, 0xfeff, 0xe, "4cb76d7466c97674"}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$LOOP_CONFIGURE(r3, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0x3}, {0x3, 0xb}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x840c0}, 0x44840)
nanosleep(&(0x7f0000000080), &(0x7f00000004c0))
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)) (async)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
write$char_usb(r7, &(0x7f00000008c0)='-0', 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x26, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000600000000000000040000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000d294828d6ee06e41deebf5b1813349401c213b1a5e4e82e33aa4741be404a8eb5e9849c42ec00e26712b0fe5d0f3be9a59697c37cec92f1bbbde2dc150720d6067e1c811867a72fd03efac3cbf61", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183000000300000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000085000000310000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000810000008500000006000000180000000400000000000000040000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xc16, 0x0, 0x0, 0x41000, 0x9, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xd, 0x10001, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0xffffffffffffffff, r7], &(0x7f00000002c0)=[{0x2, 0x1, 0x0, 0xa}, {0x3, 0x3, 0x4, 0x7}, {0x2, 0x3, 0x2, 0x9}, {0x2, 0x4, 0x9, 0xc}, {0x0, 0x3, 0x4, 0x9}, {0x4, 0x5, 0xf, 0x5}], 0x10, 0x1}, 0x94)
ioctl$KVM_GET_PIT(r7, 0xc048ae65, &(0x7f0000000140))

132.688715ms ago: executing program 1 (id=662):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, <r3=>r1, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) (fail_nth: 15)

132.266882ms ago: executing program 0 (id=663):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x565d43, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x2, 0x100)
write(0xffffffffffffffff, &(0x7f0000000640)="626173653d307832303030303130300873697a650400000030303077726974652d6261636b2c136c479f3bc5fe13d1df81869ec7b1682cc882d3b10d5666d7d62a018512544eec9e566e7645dd588111bd554fe59da37a01d08bd9efa625b40d80ea355c1f91505dee49429a7a247586308a800b3e88fec0892bdc77db3d83a72787b6bd8e61c956c7b9756c68000000000000b8176b747eee00000f9950e25f4051b0215e08423965a6d293784473f5", 0xb0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/80, 0x5}], 0x1)
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x30, 0x8, @buffer={0x0, 0x20, &(0x7f0000000740)=""/32}, &(0x7f0000000240)="000400001900712caddb9e1a659d07cf9c7c500433320296c324211a609f758521fc512d6bda2aedf6b3ca74b392d443", 0x0, 0x80000000, 0x10013, 0x1002, 0x0})
write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3f)
mount(0x0, &(0x7f0000000140)='\x00', &(0x7f0000000180)='msdos\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./debug/fail_page_alloc/times\x00', &(0x7f0000000480)='openpromfs\x00', 0x10004, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='10', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='timerslack_ns\x00')
write$cgroup_pid(r6, 0x0, 0x0)
r7 = openat(0xffffffffffffffff, &(0x7f0000000500)='./proc\x00', 0x100001, 0x0)
write(r7, &(0x7f0000000600)='0', 0x1)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3b)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0), &(0x7f00000004c0)=0x4)
r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bfe000/0x400000)=nil)
ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f0000000880))
syz_kvm_add_vcpu$x86(r9, &(0x7f0000000040)={0x0, &(0x7f0000000900)=[@wrmsr={0x65, 0x20, {0x370, 0x6}}, @nested_amd_vmsave={0x183, 0x18}, @nested_create_vm={0x12d, 0x0, 0x2}, @set_irq_handler={0xc8, 0x0, {0x76, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x7ff}}, @out_dx={0x6a, 0x28, {0x925b, 0x4, 0x4}}, @code={0xa, 0x60, {"c4022dbc7af281d5274533b70fc764ad40363e0f01c266bad104b010eec74424007cb099c1c744240238000000c7442406000000000f011424dbe0d9f10fada884df5c0b0f20d835200000000f22d8"}}, @nested_amd_invlpga={0x17d, 0x20, {0xa000, 0x53a2}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0x2cc8}}, @wr_crn={0x67, 0x20, {0x4, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x1a, 0x0, 0xb0d, 0x2}}, @nested_amd_set_intercept={0x181, 0x26, {0x3, 0x0, 0x8, 0x1}}], 0x210})
openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

130.435815ms ago: executing program 3 (id=664):
syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000087300fec00000000000000000000000000000ff020000000000000000000000000001"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)

12.627624ms ago: executing program 3 (id=665):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x4000, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b07007461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d097ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcef1bf1373669caaa2f19b9640000000000000000001200", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x3a9d, 0x69, 0x10001, 0x4, 0x6, 0x8, 0x191, 0x7}, &(0x7f0000000100)={0xffffffff, 0x8000, 0x100000001, 0x2, 0x8, 0x200, 0x6, 0x8}, &(0x7f0000000180)={0x7fff, 0x80000000, 0xffffffffffffffff, 0x85f, 0xffffffff00000000, 0x7, 0x8, 0xff}, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f00000002c0)={&(0x7f0000000240)={[0xcc]}, 0x8})
r5 = socket(0xa, 0x2, 0x0)
getsockopt$inet_mreqn(r5, 0x29, 0x3e, 0x0, &(0x7f0000000040)=0x2000)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='vegas', 0x5)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)

0s ago: executing program 3 (id=666):
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000200)=""/177, 0xb1, 0x0, &(0x7f0000000340)=""/161, 0xa1}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000200)=""/177, 0xb1, <r2=>0x0, &(0x7f0000000340)=""/161, 0xa1}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r2, 0x4)
r3 = fsmount(r0, 0x1, 0x4)
fchdir(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, r5, 0x50dc85624ea6cf59, 0x0, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x40490) (async)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, r5, 0x50dc85624ea6cf59, 0x0, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x40490)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
write$FUSE_ATTR(r6, &(0x7f0000000400)={0x78, 0xfffffffffffffff5, 0x0, {0x9, 0x7175, 0x0, {0x6, 0x6, 0x7f, 0x9, 0x7, 0x0, 0x2, 0x8000, 0x7, 0x4000, 0x4f2b44c9, 0x0, 0x0, 0x5, 0xb0277700}}}, 0x78) (async)
write$FUSE_ATTR(r6, &(0x7f0000000400)={0x78, 0xfffffffffffffff5, 0x0, {0x9, 0x7175, 0x0, {0x6, 0x6, 0x7f, 0x9, 0x7, 0x0, 0x2, 0x8000, 0x7, 0x4000, 0x4f2b44c9, 0x0, 0x0, 0x5, 0xb0277700}}}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

kernel console output (not intermixed with test programs):

T5868] usb 6-1: config 0 interface 0 has no altsetting 0
[  382.107902][ T5868] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  382.110724][ T5868] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  382.114145][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0
[  382.117328][ T5868] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  382.120650][ T5868] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  382.124494][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0
[  382.127056][   T42] kauditd_printk_skb: 157 callbacks suppressed
[  382.127068][   T42] audit: type=1400 audit(1785598466.288:504): avc:  denied  { write } for  pid=6437 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  382.129179][ T5868] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  382.139988][ T5868] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  382.142799][ T5868] usb 6-1: Product: syz
[  382.144165][ T5868] usb 6-1: Manufacturer: syz
[  382.145664][ T5868] usb 6-1: SerialNumber: syz
[  382.149000][ T5868] usb 6-1: config 0 descriptor??
[  382.157246][ T5868] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  382.275344][   T42] audit: type=1400 audit(1785598466.438:505): avc:  denied  { execute } for  pid=6448 comm="syz.3.140" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  382.284570][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'.
[  382.288155][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'.
[  382.313219][ T6452] vxcan3: entered promiscuous mode
[  382.314984][ T6452] vxcan3: entered allmulticast mode
[  382.357691][ T5903] usb 6-1: USB disconnect, device number 4
[  382.363791][   T42] audit: type=1400 audit(1785598466.528:506): avc:  denied  { append } for  pid=6430 comm="syz.1.134" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  382.381011][   T42] audit: type=1400 audit(1785598466.538:507): avc:  denied  { append } for  pid=6445 comm="syz.2.139" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  382.389434][ T5903] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  382.481085][   T42] audit: type=1400 audit(1785598466.638:508): avc:  denied  { create } for  pid=6465 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  382.490397][   T42] audit: type=1400 audit(1785598466.638:509): avc:  denied  { write } for  pid=6465 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  382.529296][   T42] audit: type=1400 audit(1785598466.688:510): avc:  denied  { getopt } for  pid=6468 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  382.572039][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'.
[  382.650877][   T42] audit: type=1400 audit(1785598466.808:511): avc:  denied  { unlink } for  pid=6465 comm="syz.3.143" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  382.752140][   T42] audit: type=1400 audit(1785598466.918:512): avc:  denied  { create } for  pid=6483 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  382.799273][   T42] audit: type=1400 audit(1785598466.958:513): avc:  denied  { ioctl } for  pid=6487 comm="syz.2.149" path="socket:[12867]" dev="sockfs" ino=12867 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  382.801345][ T6489] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[  382.873801][ T6488] netlink: 'syz.0.150': attribute type 1 has an invalid length.
[  382.898686][ T6495] ��: renamed from lo (while UP)
[  382.940813][ T6503] netlink: 'syz.3.155': attribute type 15 has an invalid length.
[  382.991237][ T6506] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  382.993403][ T6506] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  382.998021][ T6506] vhci_hcd vhci_hcd.0: Device attached
[  383.019678][ T6510] vhci_hcd: connection closed
[  383.022067][ T5879] vhci_hcd vhci_hcd.3: stop threads
[  383.022352][ T5879] vhci_hcd vhci_hcd.3: release socket
[  383.022366][ T5879] vhci_hcd vhci_hcd.3: disconnect device
[  383.156427][ T6527] vlan2: entered promiscuous mode
[  383.158147][ T6527] bridge0: entered promiscuous mode
[  383.205589][ T6541] =======================================================
[  383.205589][ T6541] WARNING: The mand mount option has been deprecated and
[  383.205589][ T6541]          and is ignored by this kernel. Remove the mand
[  383.205589][ T6541]          option from the mount to silence this warning.
[  383.205589][ T6541] =======================================================
[  383.312731][ T6551] �x9�: renamed from bridge_slave_0 (while UP)
[  383.540241][ T6561] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  383.715794][ T6584] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  383.851864][ T6603] loop2: detected capacity change from 0 to 7
[  383.862957][ T6607] netlink: 'syz.3.181': attribute type 4 has an invalid length.
[  383.863056][ T6603] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  383.869261][ T6603] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  383.871716][ T6603] Dev loop2: unable to read RDB block 7
[  383.873567][ T6603]  loop2: unable to read partition table
[  383.875484][ T6603] loop2: partition table beyond EOD, truncated
[  383.877515][ T6603] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  383.882350][ T6603] netlink: 'syz.2.180': attribute type 1 has an invalid length.
[  383.954654][ T6611] bridge1: port 1(macvlan2) entered blocking state
[  383.956875][ T6611] bridge1: port 1(macvlan2) entered disabled state
[  383.959111][ T6611] macvlan2: entered allmulticast mode
[  383.989701][ T5824] Bluetooth: hci4: Frame reassembly failed (-84)
[  384.016278][ T6615] loop9: detected capacity change from 0 to 524287999
[  384.020251][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.023213][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.025874][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.028438][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.030958][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.033783][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.036814][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.039376][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.042093][ T6615] ldm_validate_partition_table(): Disk read failed.
[  384.044406][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.047225][ T6615] Buffer I/O error on dev loop9, logical block 0, async page read
[  384.049756][ T6615] Dev loop9: unable to read RDB block 0
[  384.052029][ T6615]  loop9: unable to read partition table
[  384.054500][ T6615] loop_reread_partitions: partition scan of loop9 (3��x) failed (rc=-5)
[  384.131868][ T5903] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  384.292736][ T5903] usb 8-1: config 0 has no interfaces?
[  384.294596][ T5903] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  384.297709][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.303529][ T5903] usb 8-1: config 0 descriptor??
[  384.508168][ T5903] usb 8-1: USB disconnect, device number 3
[  385.045021][ T6643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2051 sclass=netlink_tcpdiag_socket pid=6643 comm=syz.3.192
[  385.119142][ T6653] bond0: entered promiscuous mode
[  385.120851][ T6653] bond_slave_0: entered promiscuous mode
[  385.123199][ T6653] bond_slave_1: entered promiscuous mode
[  385.126357][ T6653] bond0: entered allmulticast mode
[  385.128056][ T6653] bond_slave_0: entered allmulticast mode
[  385.129884][ T6653] bond_slave_1: entered allmulticast mode
[  385.306699][ T6674] syzkaller1: tun_chr_ioctl cmd 1074025676
[  385.309120][ T6674] syzkaller1: owner set to 259
[  386.043131][   T64] Bluetooth: hci4: command 0x1003 tx timeout
[  386.043299][ T5097] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  386.177596][ T6682] loop8: detected capacity change from 0 to 7
[  386.182850][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.188217][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.194175][    C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.198264][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.203183][    C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.206612][    C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.209833][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.212943][ T6682] ldm_validate_partition_table(): Disk read failed.
[  386.216327][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.219611][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.222786][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  386.226016][ T6682] Dev loop8: unable to read RDB block 0
[  386.228725][ T6682]  loop8: unable to read partition table
[  386.230728][ T6682] loop8: partition table beyond EOD, truncated
[  386.233553][ T6682] loop_reread_partitions: partition scan of loop8 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  387.191564][ T5868] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  387.343086][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.346765][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  387.352864][ T5868] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  387.355898][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.358407][ T5868] usb 7-1: Product: syz
[  387.359738][ T5868] usb 7-1: Manufacturer: syz
[  387.361301][ T5868] usb 7-1: SerialNumber: syz
[  387.568952][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.575925][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.592919][ T5868] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  387.605112][ T5868] usb 7-1: USB disconnect, device number 3
[  388.141518][ T5868] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  388.188598][   T42] kauditd_printk_skb: 67 callbacks suppressed
[  388.188618][   T42] audit: type=1400 audit(1785598472.348:581): avc:  denied  { mount } for  pid=6698 comm="syz.0.208" name="/" dev="ramfs" ino=15404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  388.189334][ T6699] overlayfs: workdir and upperdir must reside under the same mount
[  388.190568][   T42] audit: type=1400 audit(1785598472.348:582): avc:  denied  { mounton } for  pid=6698 comm="syz.0.208" path="/67/file0" dev="ramfs" ino=15404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  388.227248][   T42] audit: type=1400 audit(1785598472.388:583): avc:  denied  { write } for  pid=6700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.267892][   T42] audit: type=1400 audit(1785598472.428:584): avc:  denied  { write } for  pid=6707 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.277649][ T6708] /dev/sg0: Can't lookup blockdev
[  388.291631][ T6703] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  388.313731][   T42] audit: type=1400 audit(1785598472.478:585): avc:  denied  { unmount } for  pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  388.321639][ T5868] usb 7-1: Using ep0 maxpacket: 8
[  388.330615][ T5868] usb 7-1: config index 0 descriptor too short (expected 301, got 72)
[  388.336239][ T5868] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  388.342144][   T42] audit: type=1400 audit(1785598472.508:586): avc:  denied  { write } for  pid=6711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.343013][ T5868] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  388.360899][ T5868] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  388.365173][ T5868] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  388.369535][ T5868] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.374042][ T5868] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  388.377691][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.385203][   T42] audit: type=1400 audit(1785598472.548:587): avc:  denied  { ioctl } for  pid=6716 comm="syz.3.211" path="net:[4026533150]" dev="nsfs" ino=4026533150 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  388.399880][   T42] audit: type=1400 audit(1785598472.558:588): avc:  denied  { write } for  pid=6717 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.437372][ T6718] /dev/sr0: Can't open blockdev
[  388.450282][ T6722] __nla_validate_parse: 4 callbacks suppressed
[  388.450294][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'.
[  388.456281][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'.
[  388.504589][ T6734] geneve2: entered promiscuous mode
[  388.506429][ T6734] geneve2: entered allmulticast mode
[  388.587960][ T5868] usb 7-1: GET_CAPABILITIES returned 0
[  388.589767][ T5868] usbtmc 7-1:16.0: can't read capabilities
[  388.652869][ T6750] syzkaller0: entered promiscuous mode
[  388.654637][ T6750] syzkaller0: entered allmulticast mode
[  388.786989][   T42] audit: type=1400 audit(1785598472.948:589): avc:  denied  { mount } for  pid=6751 comm="syz.1.221" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  388.794023][   T42] audit: type=1400 audit(1785598472.948:590): avc:  denied  { mounton } for  pid=6751 comm="syz.1.221" path="/39/nfsd" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  388.796760][ T5903] usb 7-1: USB disconnect, device number 4
[  388.841706][ T5893] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  389.004770][ T5893] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  389.010397][ T5893] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  389.013527][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  389.016195][ T5893] usb 8-1: Product: syz
[  389.017525][ T5893] usb 8-1: Manufacturer: syz
[  389.018991][ T5893] usb 8-1: SerialNumber: syz
[  389.227061][ T5893] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  389.402060][ T6793] netlink: 'syz.0.232': attribute type 21 has an invalid length.
[  389.480024][    C1] usblp0: nonzero write bulk status received: -71
[  389.483082][ T5893] usb 8-1: USB disconnect, device number 4
[  389.489211][ T6799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2525402522 (323251522816 ns) > initial count (185678303104 ns). Using initial count to start timer.
[  389.494354][ T6748] usblp0: removed
[  389.497361][ T6799] Bluetooth: MGMT ver 1.23
[  389.628225][ T6808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.661087][ T6812] netlink: 48 bytes leftover after parsing attributes in process `syz.0.237'.
[  389.680727][ T6811] fuse: Bad value for 'fd'
[  389.784005][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'.
[  389.796666][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'.
[  389.805914][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'.
[  389.812888][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'.
[  389.820160][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'.
[  389.827015][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'.
[  389.834459][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'.
[  390.091774][ T5893] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  390.251687][ T5893] usb 8-1: Using ep0 maxpacket: 8
[  390.255174][ T5893] usb 8-1: config 0 has an invalid interface number: 143 but max is 0
[  390.258100][ T5893] usb 8-1: config 0 has no interface number 0
[  390.260111][ T5893] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  390.263372][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.288017][ T5893] usb 8-1: config 0 descriptor??
[  390.403150][ T5893] viperboard 8-1:0.143: version 0.00 found at bus 008 address 005
[  390.418513][ T6902] geneve1: entered allmulticast mode
[  390.449451][ T5893] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  390.452711][ T5893] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  390.478561][ T6910] tipc: Started in network mode
[  390.480644][ T6910] tipc: Node identity ac14140f, cluster identity 4711
[  390.489381][ T6910] tipc: Enabled bearer <udp:syz2>, priority 10
[  390.498090][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.503080][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.508205][ T6914] comedi comedi3: dt2817: a I/O base address must be specified
[  390.520113][ T6914] program syz.1.259 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  390.527860][ T6917] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  390.528579][ T6826] binder: 6825:6826 ioctl 400c620e 200000000180 returned -22
[  390.538165][ T5768] usb 8-1: USB disconnect, device number 5
[  390.757366][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.778113][ T6960] binder: 6958:6960 ioctl c0306201 200000000640 returned -22
[  390.780654][ T6960] binder: 6958:6960 ioctl c018aec0 2000000006c0 returned -22
[  390.810701][ T6965] loop2: detected capacity change from 0 to 7
[  390.825523][ T6965] Dev loop2: unable to read RDB block 7
[  390.831626][ T6965]  loop2: AHDI p1 p2 p3
[  390.833602][ T6965] loop2: partition table partially beyond EOD, truncated
[  390.836683][ T6965] loop2: p1 start 1601398130 is beyond EOD, truncated
[  390.839263][ T6965] loop2: p2 start 1702059890 is beyond EOD, truncated
[  390.853380][ T5147] Dev loop2: unable to read RDB block 7
[  390.858872][ T5147]  loop2: AHDI p1 p2 p3
[  390.861899][ T5147] loop2: partition table partially beyond EOD, truncated
[  390.864811][ T5147] loop2: p1 start 1601398130 is beyond EOD, truncated
[  390.871569][ T5147] loop2: p2 start 1702059890 is beyond EOD, truncated
[  390.980266][ T5147] Dev loop2: unable to read RDB block 7
[  390.982440][ T5147]  loop2: AHDI p1 p2 p3
[  390.983800][ T5147] loop2: partition table partially beyond EOD, truncated
[  390.986071][ T5147] loop2: p1 start 1601398130 is beyond EOD, truncated
[  390.988183][ T5147] loop2: p2 start 1702059890 is beyond EOD, truncated
[  391.043663][ T5147] Dev loop2: unable to read RDB block 7
[  391.045465][ T5147]  loop2: AHDI p1 p2 p3
[  391.046828][ T5147] loop2: partition table partially beyond EOD, truncated
[  391.049181][ T5147] loop2: p1 start 1601398130 is beyond EOD, truncated
[  391.051406][ T5147] loop2: p2 start 1702059890 is beyond EOD, truncated
[  391.064873][ T6980] ieee802154 phy0 wpan0: encryption failed: -22
[  391.067582][ T6980] ieee802154 phy0 wpan0: encryption failed: -22
[  391.333592][ T6997] bond1: entered promiscuous mode
[  391.336193][ T6997] 8021q: adding VLAN 0 to HW filter on device bond1
[  391.605024][ T5950] tipc: Node number set to 2886997007
[  391.885373][ T7023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.943937][ T7030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.957447][ T7032] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  392.003123][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.359785][ T7053] vivid-000: =================  START STATUS  =================
[  392.363733][ T7053] vivid-000: Test Pattern: 75% Colorbar
[  392.366579][ T7053] vivid-000: Fill Percentage of Frame: 100
[  392.368558][ T7053] vivid-000: Horizontal Movement: No Movement
[  392.370517][ T7053] vivid-000: Vertical Movement: No Movement
[  392.374432][ T7053] vivid-000: OSD Text Mode: All
[  392.376224][ T7053] vivid-000: Show Border: false
[  392.378215][ T7053] vivid-000: Show Square: false
[  392.379876][ T7053] vivid-000: Sensor Flipped Horizontally: false
[  392.381906][ T7053] vivid-000: Sensor Flipped Vertically: false
[  392.383853][ T7053] vivid-000: Insert SAV Code in Image: false
[  392.385974][ T7053] vivid-000: Insert EAV Code in Image: false
[  392.387911][ T7053] vivid-000: Insert Video Guard Band: false
[  392.390011][ T7053] vivid-000: Reduced Framerate: false
[  392.392717][ T7053] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  392.395174][ T7053] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  392.397595][ T7053] vivid-000: Enable Capture Cropping: true grabbed
[  392.399628][ T7053] vivid-000: Enable Capture Composing: true grabbed
[  392.401750][ T7053] vivid-000: Enable Capture Scaler: false grabbed
[  392.403841][ T7053] vivid-000: Timestamp Source: End of Frame
[  392.405797][ T7053] vivid-000: Colorspace: sRGB
[  392.407718][ T7053] vivid-000: Transfer Function: Default
[  392.409453][ T7053] vivid-000: Y'CbCr Encoding: Default
[  392.411168][ T7053] vivid-000: HSV Encoding: Hue 0-179
[  392.413268][ T7053] vivid-000: Quantization: Default
[  392.414868][ T7053] vivid-000: Apply Alpha To Red Only: false
[  392.416715][ T7053] vivid-000: Standard Aspect Ratio: 4x3
[  392.418448][ T7053] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  392.420819][ T7053] vivid-000: DV Timings: 640x480p59 inactive
[  392.422840][ T7053] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  392.425497][ T7053] vivid-000: Maximum EDID Blocks: 2
[  392.427241][ T7053] vivid-000: Limited RGB Range (16-235): false
[  392.429172][ T7053] vivid-000: Rx RGB Quantization Range: Automatic
[  392.431108][ T7053] vivid-000: Power Present: 0x00000001
[  392.433058][ T7053] tpg source WxH: 320x240 (Y'CbCr)
[  392.434668][ T7053] tpg field: 1
[  392.437146][ T7053] tpg crop: (0,0)/320x240
[  392.438514][ T7053] tpg compose: (0,0)/320x240
[  392.439986][ T7053] tpg colorspace: 8
[  392.441167][ T7053] tpg transfer function: 0/2
[  392.443115][ T7053] tpg Y'CbCr encoding: 0/1
[  392.444570][ T7053] tpg quantization: 0/2
[  392.445953][ T7053] tpg RGB range: 0/2
[  392.447189][ T7053] vivid-000: ==================  END STATUS  ==================
[  392.596926][ T7067] block nbd0: server does not support multiple connections per device.
[  392.604083][ T7067] block nbd0: shutting down sockets
[  392.735667][ T5097] Bluetooth: Unexpected continuation frame (len 12)
[  392.768795][ T7098] netlink: 'syz.3.316': attribute type 2 has an invalid length.
[  392.883148][ T7105] netlink: 'syz.3.318': attribute type 21 has an invalid length.
[  392.915081][ T7105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7105 comm=syz.3.318
[  392.918803][ T7109] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[  392.934688][ T7109] 8021q: adding VLAN 0 to HW filter on device bond1
[  392.940346][ T7109] netlink: 'syz.0.319': attribute type 10 has an invalid length.
[  392.944666][ T7109] dummy0: entered promiscuous mode
[  393.084898][ T7131] IPv6: NLM_F_CREATE should be specified when creating new route
[  393.087682][ T7131] netlink: 'syz.0.326': attribute type 1 has an invalid length.
[  393.171060][ T7139] 9pnet_fd: p9_fd_create_unix (7139): problem creating socket
[  393.284261][   T42] kauditd_printk_skb: 111 callbacks suppressed
[  393.284283][   T42] audit: type=1400 audit(1785598477.448:702): avc:  denied  { relabelfrom } for  pid=7151 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  393.293378][   T42] audit: type=1400 audit(1785598477.458:703): avc:  denied  { relabelto } for  pid=7151 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  393.299570][   T42] audit: type=1400 audit(1785598477.458:704): avc:  denied  { mount } for  pid=7150 comm="syz.1.334" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  393.362451][   T42] audit: type=1400 audit(1785598477.528:705): avc:  denied  { create } for  pid=7157 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  393.465168][ T7174] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  393.467743][ T7174] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  393.470954][ T7174] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  393.474891][ T7174] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  393.484057][   T42] audit: type=1400 audit(1785598477.638:706): avc:  denied  { bind } for  pid=7173 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  393.497242][   T42] audit: type=1400 audit(1785598477.648:707): avc:  denied  { name_bind } for  pid=7173 comm="syz.2.343" src=18460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  393.505518][   T42] audit: type=1400 audit(1785598477.648:708): avc:  denied  { node_bind } for  pid=7173 comm="syz.2.343" saddr=172.20.20.187 src=18460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  393.514303][   T42] audit: type=1400 audit(1785598477.648:709): avc:  denied  { connect } for  pid=7173 comm="syz.2.343" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  393.521334][   T42] audit: type=1400 audit(1785598477.648:710): avc:  denied  { getopt } for  pid=7173 comm="syz.2.343" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  393.660906][ T7190] usb 2-1: USB disconnect, device number 2
[  393.711547][ T6220] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  393.714644][   T42] audit: type=1400 audit(1785598477.878:711): avc:  denied  { map } for  pid=7189 comm="syz.3.348" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  393.761522][ T5950] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  393.906340][ T6220] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  393.913732][ T6220] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  393.918541][ T6220] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  393.922728][ T6220] usb 6-1: config 0 interface 0 has no altsetting 0
[  393.928407][ T6220] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  393.932032][ T6220] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  393.933917][ T7203] hfsplus: unable to find HFS+ superblock
[  393.935034][ T6220] usb 6-1: Product: syz
[  393.935045][ T6220] usb 6-1: Manufacturer: syz
[  393.935054][ T6220] usb 6-1: SerialNumber: syz
[  393.938150][ T6220] usb 6-1: config 0 descriptor??
[  393.940959][ T7203] __nla_validate_parse: 33 callbacks suppressed
[  393.940978][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'.
[  393.945074][ T7175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  393.947743][ T7203] netlink: 'syz.3.351': attribute type 30 has an invalid length.
[  393.959650][ T5950] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  393.962865][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.963178][ T6220] usb 6-1: selecting invalid altsetting 0
[  393.965549][ T5950] usb 5-1: Product: syz
[  393.965559][ T5950] usb 5-1: Manufacturer: syz
[  393.965567][ T5950] usb 5-1: SerialNumber: syz
[  393.988791][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'.
[  393.991732][ T7203] netlink: 'syz.3.351': attribute type 30 has an invalid length.
[  394.011895][ T5849] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.018150][ T5849] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  394.027939][ T5849] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  394.034239][ T5849] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  394.039280][ T7205] warning: `syz.3.352' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  394.046248][ T7205] gfs2: error -5 reading superblock
[  394.053494][ T7205] fuse: Unknown parameter 'r'
[  394.151984][ T6220] usb 6-1: USB disconnect, device number 5
[  394.174820][ T5950] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  394.179292][ T5950] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  394.185261][ T5950] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  394.194048][ T5950] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  394.205027][ T5950] usb 5-1: USB disconnect, device number 3
[  394.475121][ T7188] Process accounting resumed
[  394.746989][ T7233] veth1_vlan (unregistering): left allmulticast mode
[  394.754670][ T7233] macvlan0 (unregistering): left allmulticast mode
[  394.945865][ T7242] cgroup: fork rejected by pids controller in /syz2
[  395.196741][ T7340] VFS: file-max limit 0 reached
[  395.199612][ T7341] loop5: detected capacity change from 0 to 7
[  395.209587][ T7341] Dev loop5: unable to read RDB block 7
[  395.211942][ T7341]  loop5: AHDI p1 p3 p4
[  395.213663][ T7341] loop5: partition table partially beyond EOD, truncated
[  395.218970][ T7341] loop5: p1 size 100663296 extends beyond EOD, truncated
[  395.226052][ T7341] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  395.242643][ T7349] fuse: Bad value for 'group_id'
[  395.244694][ T7349] fuse: Bad value for 'group_id'
[  395.265010][ T7351] tipc: Started in network mode
[  395.266769][ T7351] tipc: Node identity ac14142f, cluster identity 4711
[  395.269309][ T7351] tipc: New replicast peer: 127.0.0.1
[  395.271284][ T7351] tipc: Enabled bearer <udp:syz2>, priority 10
[  395.277788][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  395.279168][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  395.284297][ T7351] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0004
[  395.288980][ T7353] [U] 
[  395.290536][ T7353] [U] 
[  395.291768][ T7353] [U] 
[  395.292992][ T7353] [U] 
[  395.295830][ T7353] [U] 
[  395.296742][ T7353] [U] 
[  395.297629][ T7353] [U] 
[  395.298511][ T7353] [U] 
[  395.299508][ T7353] [U] 
[  395.300396][ T7353] [U] 
[  395.301283][ T7353] [U] 
[  395.302214][ T7353] [U] 
[  395.308526][ T7353] [U] 
[  395.309489][ T7353] [U] 
[  395.310378][ T7353] [U] 
[  395.311401][ T7353] [U] 
[  395.336745][ T7353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.373'.
[  395.379931][ T7352] [U] 
[  395.456513][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.381'.
[  395.515579][ T7363] netlink: 'syz.2.377': attribute type 10 has an invalid length.
[  395.527274][ T7363] team0: Port device dummy0 added
[  395.532832][ T7379] tipc: Started in network mode
[  395.534888][ T7379] tipc: Node identity 4004, cluster identity 4711
[  395.536887][ T7379] tipc: Node number set to 16388
[  395.539988][ T7379] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[  395.545277][ T7379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.604595][ T7387] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  395.721584][ T6220] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  395.840547][ T7425] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[  395.844309][ T7425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.397'.
[  395.873746][ T6220] usb 8-1: Using ep0 maxpacket: 32
[  395.876867][ T6220] usb 8-1: config 0 has an invalid interface number: 119 but max is 0
[  395.879505][ T6220] usb 8-1: config 0 has no interface number 0
[  395.881545][ T6220] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  395.884987][ T6220] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  395.889598][ T6220] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  395.893292][ T6220] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  395.901187][ T6220] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  395.904397][ T6220] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.906955][ T6220] usb 8-1: Product: syz
[  395.908204][ T6220] usb 8-1: Manufacturer: syz
[  395.909799][ T6220] usb 8-1: SerialNumber: syz
[  395.914341][ T6220] usb 8-1: config 0 descriptor??
[  395.921270][ T6220] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input10
[  395.962142][ T5868] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  396.119288][ T7445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.402'.
[  396.120456][   T58] usb 8-1: USB disconnect, device number 6
[  396.135765][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  396.141192][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.145606][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  396.150600][ T5868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  396.154949][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.174738][ T5868] usb 6-1: config 0 descriptor??
[  396.180267][ T7450] ip6erspan0: entered allmulticast mode
[  396.392694][    T9] tipc: Node number set to 2886997039
[  396.593895][ T5868] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  396.608544][ T7479] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7479 comm=syz.2.405
[  396.615104][ T7479] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[  396.638518][ T7479] 8021q: adding VLAN 0 to HW filter on device bond1
[  396.708719][ T7483] e1000e 0000:00:02.0 eth1: removed PHC
[  396.836862][ T7483] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  396.898173][ T7495] trusted_key: syz.1.389 sent an empty control message without MSG_MORE.
[  397.127288][ T7512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18944 sclass=netlink_route_socket pid=7512 comm=syz.3.410
[  397.133535][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'.
[  397.345081][ T7525] autofs: Unknown parameter '�'
[  397.349459][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'.
[  397.599849][ T7540] netlink: 'syz.0.404': attribute type 26 has an invalid length.
[  397.613861][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'.
[  397.649297][ T7547] binder: 7546:7547 ioctl 40186f02 200000000000 returned -22
[  398.010068][ T7569] netlink: 112 bytes leftover after parsing attributes in process `syz.0.421'.
[  398.118444][ T7573] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  398.422826][ T7582] 
: renamed from bond0 (while UP)
[  398.521970][   T42] kauditd_printk_skb: 56 callbacks suppressed
[  398.521999][   T42] audit: type=1400 audit(1785598482.678:768): avc:  denied  { write } for  pid=7591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  398.577585][   T42] audit: type=1400 audit(1785598482.738:769): avc:  denied  { write } for  pid=7597 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  398.653835][   T42] audit: type=1400 audit(1785598482.818:770): avc:  denied  { write } for  pid=7608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  398.700394][   T42] audit: type=1400 audit(1785598482.858:771): avc:  denied  { write } for  pid=7623 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  398.708233][ T5768] usb 6-1: USB disconnect, device number 6
[  398.808091][   T42] audit: type=1400 audit(1785598482.968:772): avc:  denied  { write } for  pid=7627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  398.851573][   T42] audit: type=1400 audit(1785598483.008:773): avc:  denied  { write } for  pid=7631 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  398.884651][ T7635] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  398.895125][ T7634] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  398.898069][ T7634] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  398.923908][   T42] audit: type=1400 audit(1785598483.088:774): avc:  denied  { write } for  pid=7637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  398.942004][ T7634] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  398.965876][   T42] audit: type=1400 audit(1785598483.128:775): avc:  denied  { write } for  pid=7640 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  399.075852][   T42] audit: type=1400 audit(1785598483.238:776): avc:  denied  { write } for  pid=7645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  399.112342][ T7648] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  399.116765][ T7648] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  399.131599][   T42] audit: type=1400 audit(1785598483.288:777): avc:  denied  { write } for  pid=7650 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  399.148112][ T7652] syz.0.438 (7652): drop_caches: 0
[  399.346213][ T7667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.441'.
[  399.637409][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'.
[  399.740463][ T7715] CIFS: enabling forcegid mount option implicitly because gid= option is specified
[  399.743481][ T7715] CIFS mount error: No usable UNC path provided in device string!
[  399.743481][ T7715] 
[  399.746611][ T7715] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  399.771788][   T58] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  399.858556][ T7731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7731 comm=syz.1.457
[  399.864147][ T7731] netlink: 'syz.1.457': attribute type 1 has an invalid length.
[  399.932534][   T58] usb 7-1: Using ep0 maxpacket: 8
[  399.942759][   T58] usb 7-1: config 3 has an invalid interface number: 145 but max is 1
[  399.948676][   T58] usb 7-1: config 3 has an invalid interface number: 12 but max is 1
[  399.956554][   T58] usb 7-1: config 3 has no interface number 0
[  399.958502][   T58] usb 7-1: config 3 has no interface number 1
[  399.960509][   T58] usb 7-1: config 3 interface 145 altsetting 2 endpoint 0x5 has invalid maxpacket 28721, setting to 64
[  399.964052][   T58] usb 7-1: config 3 interface 145 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64
[  399.968247][   T58] usb 7-1: config 3 interface 145 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  399.975982][   T58] usb 7-1: config 3 interface 145 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  399.979825][   T58] usb 7-1: config 3 interface 145 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  399.985410][ T7746] xt_hashlimit: size too large, truncated to 1048576
[  399.987773][   T58] usb 7-1: config 3 interface 145 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 16
[  399.990921][   T58] usb 7-1: config 3 interface 145 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[  399.994544][   T58] usb 7-1: config 3 interface 145 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  399.997914][   T58] usb 7-1: config 3 interface 12 altsetting 2 bulk endpoint 0xE has invalid maxpacket 16
[  400.000923][   T58] usb 7-1: config 3 interface 12 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64
[  400.004572][   T58] usb 7-1: config 3 interface 12 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  400.007925][   T58] usb 7-1: config 3 interface 12 altsetting 2 endpoint 0xB has an invalid bInterval 249, changing to 7
[  400.011306][   T58] usb 7-1: config 3 interface 12 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[  400.016684][   T58] usb 7-1: config 3 interface 12 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  400.020839][   T58] usb 7-1: config 3 interface 12 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  400.025315][   T58] usb 7-1: config 3 interface 12 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  400.029437][   T58] usb 7-1: config 3 interface 12 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  400.034371][   T58] usb 7-1: config 3 interface 12 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  400.039210][   T58] usb 7-1: config 3 interface 12 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  400.043792][   T58] usb 7-1: config 3 interface 12 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  400.048018][   T58] usb 7-1: config 3 interface 12 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[  400.052318][   T58] usb 7-1: config 3 interface 145 has no altsetting 0
[  400.055009][   T58] usb 7-1: config 3 interface 12 has no altsetting 0
[  400.059187][   T58] usb 7-1: New USB device found, idVendor=19d2, idProduct=0037, bcdDevice=3f.26
[  400.063268][   T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.065795][   T58] usb 7-1: Product: ч
[  400.067095][   T58] usb 7-1: Manufacturer: 靅햫♻去␁彇틖ꖳ崂⇥娯賟쀟槥棬ሥŎ叫釳軄찍》霕鰌处㳗㠗翃죆갔磹窸望릀嗋ﳈ楬杳ꤚ螄啕﹆稇鈴켻輀磭ꍘ衠偪휎캊㩰䀷䱩귩㛌㘽頍ம䁛㦥곙઄꿩᣺䨆隸㜔陭쎘驡僮璣牀鱂紡ɾ䤋ᄭ࠺㋯傳䱕ꎝ㻘橂➤⮚楇뽑ﲛᤡ耡瞃牸ピ
[  400.077442][   T58] usb 7-1: SerialNumber: ؕ໮式ꅼ偁ꖲ쭠Ô츮㲞ᯔ⋺崥衏᷏憁䓒ᬀ‌뢁噪煂෩嶼装଒䝨ḕ疍祈우飢缈팣⃮╉ᕛ狏Ẁ麱댤㓝꼾ፑ컿샠ﷄ赳曓듽㿄蜅銱ఐ铂ꡔ툈뼱锁簓踊阳ﮠ⦕윋祶䝭걵홾븴䃬ꔉ䯴쬩纹⩂ῆ䅷䣚͟붺斞뽒툍➸㒶
[  400.091872][ T7686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  400.094884][ T7686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  400.340410][   T58] option 7-1:3.145: GSM modem (1-port) converter detected
[  400.362719][   T58] usb 7-1: USB disconnect, device number 5
[  400.377559][   T58] option 7-1:3.145: device disconnected
[  400.453262][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'.
[  400.453665][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'.
[  400.478052][ T5908] IPVS: starting estimator thread 0...
[  400.480868][ T7788] IPVS: dh: FWM 3 0x00000003 - no destination available
[  400.488503][ T7788] bridge0: port 3(syz_tun) entered blocking state
[  400.491248][ T7788] bridge0: port 3(syz_tun) entered disabled state
[  400.496898][ T7788] syz_tun: entered allmulticast mode
[  400.500131][ T7788] syz_tun: entered promiscuous mode
[  400.502712][ T7788] bridge0: port 3(syz_tun) entered blocking state
[  400.505604][ T7788] bridge0: port 3(syz_tun) entered forwarding state
[  400.561741][ T7791] IPVS: using max 45 ests per chain, 108000 per kthread
[  400.630114][ T7804] bpf: Bad value for 'uid'
[  400.906679][ T7829] macvlan0: entered promiscuous mode
[  400.949788][ T7834] bridge0: port 3(syz_tun) entered blocking state
[  400.958407][ T7834] bridge0: port 3(syz_tun) entered disabled state
[  400.960656][ T7834] syz_tun: entered allmulticast mode
[  400.963255][ T7834] syz_tun: entered promiscuous mode
[  400.964296][ T5845] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  400.965375][ T7834] bridge0: port 3(syz_tun) entered blocking state
[  400.969455][ T7834] bridge0: port 3(syz_tun) entered listening state
[  400.974500][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'.
[  400.981650][    C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost
[  400.985628][    C0] bridge0: topology change detected, propagating
[  400.994184][ T7838] 9p: Bad value for 'dfltgid'
[  400.998460][ T7838] 9p: Bad value for 'dfltgid'
[  401.085906][ T7847] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[  401.096064][ T7850] VFS: file-max limit 0 reached
[  401.143726][ T5845] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 24, changing to 8
[  401.147214][ T5845] usb 8-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  401.151194][ T5845] usb 8-1: config 1 interface 0 has no altsetting 0
[  401.162687][ T5845] usb 8-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40
[  401.167885][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.170377][ T5845] usb 8-1: Product: syz
[  401.180311][ T5845] usb 8-1: Manufacturer: 꼁ℛ任촡衟纭㜟਋ꡥ拍㖒ᵶ٨ꇐ뛚툺ﺍ춬䝚㰨莩皂틶할榳↮㉩툽흠꿬彭謒琎漪קּ⓿濥ڧ쉚俧푚ﭲ砎敗膬쓞⿢牣验餯塎쐱壌❖엒뷞ᥰ⇯㷭✕봇ꉸḅ蝛ᆑ豚⵹쭧̉츑㑓씩癄﯐闛髑Ȉꊃ踭筓니蠕쁎ꛮ壦䙋嚑⬼紉뇍삀
[  401.189837][ T5845] usb 8-1: SerialNumber: syz
[  401.227941][ T7866] mmap: syz.1.482 (7866): VmData 37400576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  401.369407][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.480'.
[  401.415078][ T5845] usbhid 8-1:1.0: can't add hid device: -71
[  401.417404][ T5845] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  401.427841][ T5845] usb 8-1: USB disconnect, device number 7
[  401.968557][ T7948] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  402.459746][ T7974] atomic_op ffff88805ab22998 conn xmit_atomic 0000000000000000
[  402.650114][ T7989] VFS: file-max limit 0 reached
[  402.763537][ T7996] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  402.794194][ T8004] netlink: 200 bytes leftover after parsing attributes in process `syz.3.505'.
[  402.902766][ T8008] overlayfs: failed lookup in lower (newroot/154, name='file1', err=-40): overlapping layers
[  402.909121][ T8008] overlayfs: failed lookup in lower (newroot/154, name='file1', err=-40): overlapping layers
[  402.914711][ T8008] capability: warning: `syz.0.506' uses 32-bit capabilities (legacy support in use)
[  402.917961][ T8008] overlayfs: failed lookup in lower (newroot/154, name='file1', err=-40): overlapping layers
[  402.998407][ T8017] syzkaller0: entered promiscuous mode
[  403.003256][ T8017] syzkaller0: entered allmulticast mode
[  403.025685][ T8018] 9pnet_virtio: no channels available for device syz
[  403.171740][ T5893] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  403.331831][ T5893] usb 5-1: Using ep0 maxpacket: 32
[  403.336430][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  403.336817][ T5893] usb 5-1: config 2 has an invalid interface number: 194 but max is 0
[  403.342425][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  403.344992][ T5893] usb 5-1: config 2 has no interface number 0
[  403.347062][ T5893] usb 5-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833
[  403.350242][ T5893] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024
[  403.351021][ T8039] xt_hashlimit: size too large, truncated to 1048576
[  403.355639][ T5893] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  403.359525][ T5893] usb 5-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  403.363050][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.367470][ T8008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  403.369945][ T8008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  403.411057][ T8050] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  403.446716][ T8050] cramfs: wrong magic
[  403.576472][   T42] kauditd_printk_skb: 82 callbacks suppressed
[  403.576494][   T42] audit: type=1400 audit(1785598487.738:860): avc:  denied  { write } for  pid=8056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  403.585129][ T5893] usb 5-1: string descriptor 0 read error: -71
[  403.591296][ T5893] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  403.673720][   T42] audit: type=1400 audit(1785598487.838:861): avc:  denied  { write } for  pid=8066 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  403.684406][ T5908] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  403.692654][ T5893] usb 5-1: USB disconnect, device number 4
[  403.783544][   T42] audit: type=1400 audit(1785598487.948:862): avc:  denied  { write } for  pid=8069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  403.821649][ T5908] usb 8-1: device descriptor read/64, error -71
[  403.848410][   T42] audit: type=1400 audit(1785598488.008:863): avc:  denied  { write } for  pid=8072 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  403.991662][   T42] audit: type=1400 audit(1785598488.158:864): avc:  denied  { write } for  pid=8075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.064344][   T42] audit: type=1400 audit(1785598488.228:865): avc:  denied  { write } for  pid=8078 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.071524][ T5908] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  404.180453][   T42] audit: type=1400 audit(1785598488.338:866): avc:  denied  { write } for  pid=8080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.201552][ T5908] usb 8-1: device descriptor read/64, error -71
[  404.245641][   T42] audit: type=1400 audit(1785598488.408:867): avc:  denied  { write } for  pid=8088 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.311748][ T5908] usb usb8-port1: attempt power cycle
[  404.342989][   T42] audit: type=1400 audit(1785598488.508:868): avc:  denied  { write } for  pid=8093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.385940][   T42] audit: type=1400 audit(1785598488.548:869): avc:  denied  { write } for  pid=8098 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.537039][ T8111] netlink: 59 bytes leftover after parsing attributes in process `syz.2.522'.
[  404.550743][ T8111] netlink: 'syz.2.522': attribute type 1 has an invalid length.
[  404.553311][ T8111] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'.
[  404.663031][ T5908] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  404.692241][ T5908] usb 8-1: device descriptor read/8, error -71
[  404.744578][ T8125] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  404.749831][ T8125] qnx6: wrong signature (magic) in superblock #1.
[  404.755948][ T8125] qnx6: unable to read the first superblock
[  404.783048][ T8128] netlink: 'syz.2.526': attribute type 1 has an invalid length.
[  404.846396][ T8137] FAULT_INJECTION: forcing a failure.
[  404.846396][ T8137] name failslab, interval 1, probability 0, space 0, times 1
[  404.871802][ T8137] CPU: 1 UID: 0 PID: 8137 Comm: syz.2.528 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  404.871822][ T8137] Tainted: [L]=SOFTLOCKUP
[  404.871825][ T8137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  404.871843][ T8137] Call Trace:
[  404.871861][ T8137]  <TASK>
[  404.871866][ T8137]  dump_stack_lvl+0x100/0x190
[  404.871933][ T8137]  should_fail_ex.cold+0x5/0xa
[  404.871956][ T8137]  should_failslab+0xc2/0x120
[  404.871987][ T8137]  __kmalloc_noprof+0xfc/0x820
[  404.872002][ T8137]  ? tomoyo_encode2+0xfb/0x3c0
[  404.872048][ T8137]  tomoyo_encode2+0xfb/0x3c0
[  404.872060][ T8137]  tomoyo_encode+0x29/0x50
[  404.872070][ T8137]  tomoyo_realpath_from_path+0x18c/0x690
[  404.872084][ T8137]  tomoyo_path_number_perm+0x23c/0x580
[  404.872099][ T8137]  ? tomoyo_path_number_perm+0x22e/0x580
[  404.872116][ T8137]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  404.872144][ T8137]  ? find_held_lock+0x2b/0x80
[  404.872165][ T8137]  ? __fget_files+0x215/0x3d0
[  404.872186][ T8137]  ? hook_file_ioctl_common+0x140/0x440
[  404.872200][ T8137]  ? __fget_files+0x215/0x3d0
[  404.872213][ T8137]  ? __fget_files+0x21f/0x3d0
[  404.872226][ T8137]  security_file_ioctl+0xd3/0x230
[  404.872257][ T8137]  __x64_sys_ioctl+0xb7/0x210
[  404.872275][ T8137]  do_syscall_64+0x115/0x870
[  404.872296][ T8137]  ? clear_bhb_loop+0x40/0x90
[  404.872311][ T8137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.872322][ T8137] RIP: 0033:0x7f44f579e019
[  404.872332][ T8137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.872343][ T8137] RSP: 002b:00007f44f6690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  404.872361][ T8137] RAX: ffffffffffffffda RBX: 00007f44f5a25fa0 RCX: 00007f44f579e019
[  404.872368][ T8137] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  404.872374][ T8137] RBP: 00007f44f6690090 R08: 0000000000000000 R09: 0000000000000000
[  404.872380][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.872386][ T8137] R13: 00007f44f5a26038 R14: 00007f44f5a25fa0 R15: 00007ffe94136df8
[  404.872400][ T8137]  </TASK>
[  404.872410][ T8137] ERROR: Out of memory at tomoyo_realpath_from_path.
[  404.994463][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'.
[  405.011516][ T5908] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  405.032040][ T5908] usb 8-1: device descriptor read/8, error -71
[  405.141887][ T5908] usb usb8-port1: unable to enumerate USB device
[  405.332231][ T5768] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  405.371018][ T8182] openvswitch: netlink: Actions may not be safe on all matching packets
[  405.386523][ T8185] FAULT_INJECTION: forcing a failure.
[  405.386523][ T8185] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  405.390645][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.1.537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  405.390662][ T8185] Tainted: [L]=SOFTLOCKUP
[  405.390666][ T8185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  405.390673][ T8185] Call Trace:
[  405.390681][ T8185]  <TASK>
[  405.390686][ T8185]  dump_stack_lvl+0x100/0x190
[  405.390706][ T8185]  should_fail_ex.cold+0x5/0xa
[  405.390724][ T8185]  _copy_from_user+0x2e/0xd0
[  405.390772][ T8185]  drm_ioctl+0x520/0xc60
[  405.390825][ T8185]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  405.390841][ T8185]  ? __pfx_drm_ioctl+0x10/0x10
[  405.390859][ T8185]  ? selinux_file_ioctl+0x13b/0x290
[  405.390878][ T8185]  ? selinux_file_ioctl+0xb6/0x290
[  405.390895][ T8185]  ? __pfx_drm_ioctl+0x10/0x10
[  405.390907][ T8185]  __x64_sys_ioctl+0x18e/0x210
[  405.390925][ T8185]  do_syscall_64+0x115/0x870
[  405.390939][ T8185]  ? clear_bhb_loop+0x40/0x90
[  405.390953][ T8185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.390964][ T8185] RIP: 0033:0x7f122959e019
[  405.390973][ T8185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.390984][ T8185] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  405.390996][ T8185] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  405.391003][ T8185] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  405.391009][ T8185] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  405.391016][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.391022][ T8185] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  405.391037][ T8185]  </TASK>
[  405.484291][ T5768] usb 5-1: unable to get BOS descriptor or descriptor too short
[  405.490419][ T5768] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  405.499110][ T5768] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  405.504684][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.509061][ T5768] usb 5-1: Product: syz
[  405.510438][ T5768] usb 5-1: Manufacturer: syz
[  405.512384][ T5768] usb 5-1: SerialNumber: syz
[  405.545412][ T8192] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  405.844040][ T5768] cdc_ncm 5-1:1.0: bind() failure
[  405.857043][ T5768] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  405.862819][ T5768] cdc_ncm 5-1:1.1: bind() failure
[  405.875038][ T5768] usb 5-1: USB disconnect, device number 5
[  405.994262][ T8238] FAULT_INJECTION: forcing a failure.
[  405.994262][ T8238] name failslab, interval 1, probability 0, space 0, times 0
[  405.999724][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: syz.1.547 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  405.999742][ T8238] Tainted: [L]=SOFTLOCKUP
[  405.999746][ T8238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  405.999764][ T8238] Call Trace:
[  405.999775][ T8238]  <TASK>
[  405.999780][ T8238]  dump_stack_lvl+0x100/0x190
[  405.999841][ T8238]  should_fail_ex.cold+0x5/0xa
[  405.999863][ T8238]  should_failslab+0xc2/0x120
[  405.999888][ T8238]  __kmalloc_cache_noprof+0x91/0x6c0
[  405.999908][ T8238]  ? drm_gem_fb_create+0x4e/0xd0
[  405.999947][ T8238]  drm_gem_fb_create+0x4e/0xd0
[  405.999961][ T8238]  drm_internal_framebuffer_create+0xfc3/0x16f0
[  405.999991][ T8238]  drm_mode_cursor_universal+0x8cb/0xe20
[  406.000008][ T8238]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  406.000027][ T8238]  ? __pfx_drm_lease_held+0x10/0x10
[  406.000040][ T8238]  ? modeset_lock+0x114/0x6d0
[  406.000053][ T8238]  drm_mode_cursor_common+0x308/0x970
[  406.000070][ T8238]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  406.000084][ T8238]  ? avc_has_extended_perms+0x33a/0x1080
[  406.000134][ T8238]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  406.000150][ T8238]  drm_mode_cursor_ioctl+0xd4/0x110
[  406.000165][ T8238]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  406.000179][ T8238]  ? do_raw_spin_lock+0x128/0x260
[  406.000205][ T8238]  ? find_held_lock+0x2b/0x80
[  406.000218][ T8238]  ? do_raw_spin_unlock+0x145/0x1e0
[  406.000235][ T8238]  drm_ioctl_kernel+0x1f3/0x3e0
[  406.000247][ T8238]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  406.000262][ T8238]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  406.000278][ T8238]  drm_ioctl+0x5e6/0xc60
[  406.000292][ T8238]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  406.000307][ T8238]  ? __pfx_drm_ioctl+0x10/0x10
[  406.000324][ T8238]  ? selinux_file_ioctl+0x13b/0x290
[  406.000342][ T8238]  ? selinux_file_ioctl+0xb6/0x290
[  406.000359][ T8238]  ? __pfx_drm_ioctl+0x10/0x10
[  406.000371][ T8238]  __x64_sys_ioctl+0x18e/0x210
[  406.000398][ T8238]  do_syscall_64+0x115/0x870
[  406.000418][ T8238]  ? clear_bhb_loop+0x40/0x90
[  406.000433][ T8238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.000444][ T8238] RIP: 0033:0x7f122959e019
[  406.000454][ T8238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.000465][ T8238] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  406.000477][ T8238] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  406.000484][ T8238] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  406.000491][ T8238] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  406.000497][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.000503][ T8238] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  406.000518][ T8238]  </TASK>
[  406.493467][ T8272] netlink: 232 bytes leftover after parsing attributes in process `syz.0.552'.
[  406.698335][ T8293] FAULT_INJECTION: forcing a failure.
[  406.698335][ T8293] name failslab, interval 1, probability 0, space 0, times 0
[  406.706153][ T8293] CPU: 2 UID: 0 PID: 8293 Comm: syz.2.556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  406.706172][ T8293] Tainted: [L]=SOFTLOCKUP
[  406.706176][ T8293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  406.706183][ T8293] Call Trace:
[  406.706188][ T8293]  <TASK>
[  406.706193][ T8293]  dump_stack_lvl+0x100/0x190
[  406.706214][ T8293]  should_fail_ex.cold+0x5/0xa
[  406.706228][ T8293]  should_failslab+0xc2/0x120
[  406.706244][ T8293]  __kmalloc_cache_noprof+0x91/0x6c0
[  406.706262][ T8293]  ? drm_atomic_commit_alloc+0xb8/0x120
[  406.706281][ T8293]  drm_atomic_commit_alloc+0xb8/0x120
[  406.706294][ T8293]  drm_atomic_helper_update_plane+0x52/0x400
[  406.706312][ T8293]  __setplane_atomic+0x22d/0x350
[  406.706332][ T8293]  drm_mode_cursor_universal+0x5e9/0xe20
[  406.706350][ T8293]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  406.706369][ T8293]  ? __pfx_drm_lease_held+0x10/0x10
[  406.706382][ T8293]  ? modeset_lock+0x114/0x6d0
[  406.706396][ T8293]  drm_mode_cursor_common+0x308/0x970
[  406.706413][ T8293]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  406.706427][ T8293]  ? avc_has_extended_perms+0x33a/0x1080
[  406.706449][ T8293]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  406.706472][ T8293]  drm_mode_cursor_ioctl+0xd4/0x110
[  406.706492][ T8293]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  406.706513][ T8293]  ? do_raw_spin_lock+0x128/0x260
[  406.706539][ T8293]  ? find_held_lock+0x2b/0x80
[  406.706554][ T8293]  ? do_raw_spin_unlock+0x145/0x1e0
[  406.706592][ T8293]  drm_ioctl_kernel+0x1f3/0x3e0
[  406.706604][ T8293]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  406.706619][ T8293]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  406.706635][ T8293]  drm_ioctl+0x5e6/0xc60
[  406.706649][ T8293]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  406.706664][ T8293]  ? __pfx_drm_ioctl+0x10/0x10
[  406.706681][ T8293]  ? selinux_file_ioctl+0x13b/0x290
[  406.706699][ T8293]  ? selinux_file_ioctl+0xb6/0x290
[  406.706716][ T8293]  ? __pfx_drm_ioctl+0x10/0x10
[  406.706728][ T8293]  __x64_sys_ioctl+0x18e/0x210
[  406.706746][ T8293]  do_syscall_64+0x115/0x870
[  406.706761][ T8293]  ? clear_bhb_loop+0x40/0x90
[  406.706774][ T8293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.706785][ T8293] RIP: 0033:0x7f44f579e019
[  406.706795][ T8293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.706805][ T8293] RSP: 002b:00007f44f6690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  406.706816][ T8293] RAX: ffffffffffffffda RBX: 00007f44f5a25fa0 RCX: 00007f44f579e019
[  406.706828][ T8293] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  406.706835][ T8293] RBP: 00007f44f6690090 R08: 0000000000000000 R09: 0000000000000000
[  406.706841][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.706848][ T8293] R13: 00007f44f5a26038 R14: 00007f44f5a25fa0 R15: 00007ffe94136df8
[  406.706861][ T8293]  </TASK>
[  406.806513][ T5768] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  406.962271][ T5768] usb 8-1: Using ep0 maxpacket: 8
[  406.965746][ T5768] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15
[  406.970714][ T5768] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  406.983562][ T5768] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  406.991690][ T5768] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  406.997182][ T5768] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  407.001511][ T5768] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.003948][ T5768] usb 8-1: Product: syz
[  407.008659][ T5768] usb 8-1: Manufacturer: syz
[  407.010079][ T5768] usb 8-1: SerialNumber: syz
[  407.018195][ T5768] usb 8-1: config 0 descriptor??
[  407.020262][ T8267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  407.028102][ T8306] netlink: 96 bytes leftover after parsing attributes in process `syz.2.558'.
[  407.181215][ T8332] gadgetfs: bound to dummy_udc driver
[  407.230538][ T5768] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  407.238248][ T5768] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11
[  407.309718][ T8347] overlay: Unknown parameter 'fowner>00000000000000000000'
[  407.361631][ T8354] FAULT_INJECTION: forcing a failure.
[  407.361631][ T8354] name failslab, interval 1, probability 0, space 0, times 0
[  407.365585][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.1.566 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  407.365603][ T8354] Tainted: [L]=SOFTLOCKUP
[  407.365607][ T8354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  407.365620][ T8354] Call Trace:
[  407.365637][ T8354]  <TASK>
[  407.365642][ T8354]  dump_stack_lvl+0x100/0x190
[  407.365722][ T8354]  should_fail_ex.cold+0x5/0xa
[  407.365750][ T8354]  should_failslab+0xc2/0x120
[  407.365783][ T8354]  __kmalloc_noprof+0xfc/0x820
[  407.365796][ T8354]  ? kasan_save_track+0x14/0x30
[  407.365808][ T8354]  ? __kasan_kmalloc+0xaa/0xb0
[  407.365820][ T8354]  ? drm_atomic_commit_init+0xf4/0x490
[  407.365872][ T8354]  drm_atomic_commit_init+0xf4/0x490
[  407.365886][ T8354]  drm_atomic_commit_alloc+0xd3/0x120
[  407.365899][ T8354]  drm_atomic_helper_update_plane+0x52/0x400
[  407.365923][ T8354]  __setplane_atomic+0x22d/0x350
[  407.365941][ T8354]  drm_mode_cursor_universal+0x5e9/0xe20
[  407.365959][ T8354]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  407.365978][ T8354]  ? __pfx_drm_lease_held+0x10/0x10
[  407.365991][ T8354]  ? modeset_lock+0x114/0x6d0
[  407.366005][ T8354]  drm_mode_cursor_common+0x308/0x970
[  407.366021][ T8354]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  407.366035][ T8354]  ? avc_has_extended_perms+0x33a/0x1080
[  407.366092][ T8354]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  407.366108][ T8354]  drm_mode_cursor_ioctl+0xd4/0x110
[  407.366123][ T8354]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  407.366137][ T8354]  ? do_raw_spin_lock+0x128/0x260
[  407.366170][ T8354]  ? find_held_lock+0x2b/0x80
[  407.366182][ T8354]  ? do_raw_spin_unlock+0x145/0x1e0
[  407.366199][ T8354]  drm_ioctl_kernel+0x1f3/0x3e0
[  407.366210][ T8354]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  407.366225][ T8354]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  407.366242][ T8354]  drm_ioctl+0x5e6/0xc60
[  407.366255][ T8354]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  407.366271][ T8354]  ? __pfx_drm_ioctl+0x10/0x10
[  407.366288][ T8354]  ? selinux_file_ioctl+0x13b/0x290
[  407.366306][ T8354]  ? selinux_file_ioctl+0xb6/0x290
[  407.366323][ T8354]  ? __pfx_drm_ioctl+0x10/0x10
[  407.366336][ T8354]  __x64_sys_ioctl+0x18e/0x210
[  407.366366][ T8354]  do_syscall_64+0x115/0x870
[  407.366403][ T8354]  ? clear_bhb_loop+0x40/0x90
[  407.366417][ T8354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.366429][ T8354] RIP: 0033:0x7f122959e019
[  407.366439][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.366450][ T8354] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  407.366468][ T8354] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  407.366475][ T8354] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  407.366482][ T8354] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  407.366488][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.366495][ T8354] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  407.366509][ T8354]  </TASK>
[  407.471789][    C2] powermate: config urb returned -71
[  407.475885][    C2] powermate: config urb returned -71
[  407.476032][ T6220] usb 8-1: USB disconnect, device number 12
[  407.477584][    C2] powermate: usb_submit_urb(config) failed
[  407.477617][    C2] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  407.747111][ T8388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.850645][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'.
[  407.891106][ T8388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.988409][ T8415] FAULT_INJECTION: forcing a failure.
[  407.988409][ T8415] name failslab, interval 1, probability 0, space 0, times 0
[  407.993895][ T8415] CPU: 2 UID: 0 PID: 8415 Comm: syz.0.576 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  407.993913][ T8415] Tainted: [L]=SOFTLOCKUP
[  407.993917][ T8415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  407.993934][ T8415] Call Trace:
[  407.993945][ T8415]  <TASK>
[  407.993950][ T8415]  dump_stack_lvl+0x100/0x190
[  407.994013][ T8415]  should_fail_ex.cold+0x5/0xa
[  407.994035][ T8415]  should_failslab+0xc2/0x120
[  407.994062][ T8415]  __kmalloc_noprof+0xfc/0x820
[  407.994075][ T8415]  ? __kasan_kmalloc+0xaa/0xb0
[  407.994088][ T8415]  ? drm_atomic_commit_init+0x190/0x490
[  407.994129][ T8415]  drm_atomic_commit_init+0x190/0x490
[  407.994143][ T8415]  drm_atomic_commit_alloc+0xd3/0x120
[  407.994157][ T8415]  drm_atomic_helper_update_plane+0x52/0x400
[  407.994180][ T8415]  __setplane_atomic+0x22d/0x350
[  407.994199][ T8415]  drm_mode_cursor_universal+0x5e9/0xe20
[  407.994217][ T8415]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  407.994236][ T8415]  ? __pfx_drm_lease_held+0x10/0x10
[  407.994249][ T8415]  ? modeset_lock+0x114/0x6d0
[  407.994262][ T8415]  drm_mode_cursor_common+0x308/0x970
[  407.994279][ T8415]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  407.994293][ T8415]  ? avc_has_extended_perms+0x33a/0x1080
[  407.994359][ T8415]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  407.994376][ T8415]  drm_mode_cursor_ioctl+0xd4/0x110
[  407.994390][ T8415]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  407.994413][ T8415]  ? do_raw_spin_lock+0x128/0x260
[  407.994438][ T8415]  ? find_held_lock+0x2b/0x80
[  407.994451][ T8415]  ? do_raw_spin_unlock+0x145/0x1e0
[  407.994468][ T8415]  drm_ioctl_kernel+0x1f3/0x3e0
[  407.994480][ T8415]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  407.994495][ T8415]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  407.994511][ T8415]  drm_ioctl+0x5e6/0xc60
[  407.994525][ T8415]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  407.994540][ T8415]  ? __pfx_drm_ioctl+0x10/0x10
[  407.994577][ T8415]  ? selinux_file_ioctl+0x13b/0x290
[  407.994597][ T8415]  ? selinux_file_ioctl+0xb6/0x290
[  407.994614][ T8415]  ? __pfx_drm_ioctl+0x10/0x10
[  407.994626][ T8415]  __x64_sys_ioctl+0x18e/0x210
[  407.994653][ T8415]  do_syscall_64+0x115/0x870
[  407.994675][ T8415]  ? clear_bhb_loop+0x40/0x90
[  407.994690][ T8415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.994701][ T8415] RIP: 0033:0x7f1f7bb9e019
[  407.994711][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.994721][ T8415] RSP: 002b:00007f1f7caee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  407.994733][ T8415] RAX: ffffffffffffffda RBX: 00007f1f7be25fa0 RCX: 00007f1f7bb9e019
[  407.994740][ T8415] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  407.994746][ T8415] RBP: 00007f1f7caee090 R08: 0000000000000000 R09: 0000000000000000
[  407.994752][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.994759][ T8415] R13: 00007f1f7be26038 R14: 00007f1f7be25fa0 R15: 00007ffd33702dd8
[  407.994773][ T8415]  </TASK>
[  408.145415][ T8388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.217513][ T8388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.224556][ T8430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.579'.
[  408.351542][ T8448] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0
[  408.396982][   T64] Bluetooth: hci2: Malformed LE Event: 0x0b
[  408.409017][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[  408.413835][ T8453] netlink: 'syz.0.585': attribute type 5 has an invalid length.
[  408.450990][ T8459] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  408.550066][ T8466] Invalid ELF header type: 0 != 1
[  408.591541][   T42] kauditd_printk_skb: 70 callbacks suppressed
[  408.591563][   T42] audit: type=1400 audit(1785598492.748:940): avc:  denied  { write } for  pid=8467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.633064][   T42] audit: type=1400 audit(1785598492.798:941): avc:  denied  { write } for  pid=8472 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.726226][   T42] audit: type=1400 audit(1785598492.888:942): avc:  denied  { write } for  pid=8478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.769092][   T42] audit: type=1400 audit(1785598492.928:943): avc:  denied  { write } for  pid=8485 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.825742][   T42] audit: type=1400 audit(1785598492.988:944): avc:  denied  { write } for  pid=8491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.879933][   T42] audit: type=1400 audit(1785598493.038:945): avc:  denied  { write } for  pid=8497 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.972872][   T42] audit: type=1400 audit(1785598493.128:946): avc:  denied  { write } for  pid=8504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  409.021300][   T42] audit: type=1400 audit(1785598493.178:947): avc:  denied  { write } for  pid=8508 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  409.028928][ T8510] comedi comedi0: ni_at_a2150: I/O base address not correctly aligned
[  409.039373][ T8513] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  409.082051][   T42] audit: type=1400 audit(1785598493.238:948): avc:  denied  { write } for  pid=8515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  409.127495][   T42] audit: type=1400 audit(1785598493.288:949): avc:  denied  { write } for  pid=8524 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  409.164638][ T8530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.168442][ T8536] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[  409.169111][ T8530] syzkaller0: entered promiscuous mode
[  409.180018][ T8530] syzkaller0: entered allmulticast mode
[  409.185943][ T8530] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  409.198470][ T8538] SELinux:  Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped).
[  409.217374][ T8529] tipc: Resetting bearer <eth:syzkaller0>
[  409.240561][ T8529] tipc: Disabling bearer <eth:syzkaller0>
[  409.262838][ T8551] netlink: 5 bytes leftover after parsing attributes in process `syz.2.599'.
[  409.278122][ T8555] i2c i2c-1: dtv_property_process_set: SET cmd 0x79732f70 undefined
[  409.282831][ T8555] loop5: detected capacity change from 0 to 7
[  409.295313][ T8551] A link change request failed with some changes committed already. Interface 
2
6�� may have been left with an inconsistent configuration, please check.
[  409.295437][ T8555] Dev loop5: unable to read RDB block 7
[  409.308350][ T8555]  loop5: unable to read partition table
[  409.310326][ T8555] loop5: partition table beyond EOD, truncated
[  409.313527][ T8555] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  409.345029][ T8559] FAULT_INJECTION: forcing a failure.
[  409.345029][ T8559] name failslab, interval 1, probability 0, space 0, times 0
[  409.349098][ T8559] CPU: 1 UID: 0 PID: 8559 Comm: syz.1.604 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  409.349117][ T8559] Tainted: [L]=SOFTLOCKUP
[  409.349120][ T8559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  409.349127][ T8559] Call Trace:
[  409.349131][ T8559]  <TASK>
[  409.349137][ T8559]  dump_stack_lvl+0x100/0x190
[  409.349156][ T8559]  should_fail_ex.cold+0x5/0xa
[  409.349171][ T8559]  should_failslab+0xc2/0x120
[  409.349186][ T8559]  __kmalloc_cache_noprof+0x91/0x6c0
[  409.349204][ T8559]  ? vkms_plane_duplicate_state+0x87/0x130
[  409.349250][ T8559]  vkms_plane_duplicate_state+0x87/0x130
[  409.349264][ T8559]  drm_atomic_get_plane_state+0x279/0x7d0
[  409.349279][ T8559]  drm_atomic_helper_update_plane+0x96/0x400
[  409.349297][ T8559]  __setplane_atomic+0x22d/0x350
[  409.349316][ T8559]  drm_mode_cursor_universal+0x5e9/0xe20
[  409.349333][ T8559]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  409.349352][ T8559]  ? __pfx_drm_lease_held+0x10/0x10
[  409.349365][ T8559]  ? modeset_lock+0x114/0x6d0
[  409.349379][ T8559]  drm_mode_cursor_common+0x308/0x970
[  409.349395][ T8559]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  409.349409][ T8559]  ? avc_has_extended_perms+0x33a/0x1080
[  409.349431][ T8559]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  409.349448][ T8559]  drm_mode_cursor_ioctl+0xd4/0x110
[  409.349462][ T8559]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  409.349476][ T8559]  ? do_raw_spin_lock+0x128/0x260
[  409.349492][ T8559]  ? find_held_lock+0x2b/0x80
[  409.349504][ T8559]  ? do_raw_spin_unlock+0x145/0x1e0
[  409.349521][ T8559]  drm_ioctl_kernel+0x1f3/0x3e0
[  409.349533][ T8559]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  409.349548][ T8559]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  409.349564][ T8559]  drm_ioctl+0x5e6/0xc60
[  409.349578][ T8559]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  409.349593][ T8559]  ? __pfx_drm_ioctl+0x10/0x10
[  409.349610][ T8559]  ? selinux_file_ioctl+0x13b/0x290
[  409.349627][ T8559]  ? selinux_file_ioctl+0xb6/0x290
[  409.349644][ T8559]  ? __pfx_drm_ioctl+0x10/0x10
[  409.349657][ T8559]  __x64_sys_ioctl+0x18e/0x210
[  409.349675][ T8559]  do_syscall_64+0x115/0x870
[  409.349688][ T8559]  ? clear_bhb_loop+0x40/0x90
[  409.349724][ T8559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.349735][ T8559] RIP: 0033:0x7f122959e019
[  409.349745][ T8559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.349756][ T8559] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  409.349767][ T8559] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  409.349774][ T8559] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  409.349780][ T8559] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  409.349786][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.349792][ T8559] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  409.349806][ T8559]  </TASK>
[  409.601691][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'.
[  409.671040][ T8602] FAULT_INJECTION: forcing a failure.
[  409.671040][ T8602] name failslab, interval 1, probability 0, space 0, times 0
[  409.676537][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.1.614 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  409.676555][ T8602] Tainted: [L]=SOFTLOCKUP
[  409.676559][ T8602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  409.676572][ T8602] Call Trace:
[  409.676583][ T8602]  <TASK>
[  409.676587][ T8602]  dump_stack_lvl+0x100/0x190
[  409.676662][ T8602]  should_fail_ex.cold+0x5/0xa
[  409.676689][ T8602]  should_failslab+0xc2/0x120
[  409.676719][ T8602]  __kmalloc_cache_noprof+0x91/0x6c0
[  409.676738][ T8602]  ? ww_mutex_lock_interruptible+0x37/0x160
[  409.676759][ T8602]  ? vkms_atomic_crtc_duplicate_state+0x7a/0x1e0
[  409.676804][ T8602]  vkms_atomic_crtc_duplicate_state+0x7a/0x1e0
[  409.676820][ T8602]  drm_atomic_get_crtc_state+0x1de/0x690
[  409.676845][ T8602]  drm_atomic_set_crtc_for_plane+0x1c1/0x560
[  409.676861][ T8602]  drm_atomic_helper_update_plane+0xc5/0x400
[  409.676889][ T8602]  __setplane_atomic+0x22d/0x350
[  409.676908][ T8602]  drm_mode_cursor_universal+0x5e9/0xe20
[  409.676926][ T8602]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  409.676945][ T8602]  ? __pfx_drm_lease_held+0x10/0x10
[  409.676959][ T8602]  ? modeset_lock+0x114/0x6d0
[  409.676972][ T8602]  drm_mode_cursor_common+0x308/0x970
[  409.676989][ T8602]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  409.677003][ T8602]  ? avc_has_extended_perms+0x33a/0x1080
[  409.677052][ T8602]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  409.677068][ T8602]  drm_mode_cursor_ioctl+0xd4/0x110
[  409.677083][ T8602]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  409.677097][ T8602]  ? do_raw_spin_lock+0x128/0x260
[  409.677123][ T8602]  ? find_held_lock+0x2b/0x80
[  409.677135][ T8602]  ? do_raw_spin_unlock+0x145/0x1e0
[  409.677152][ T8602]  drm_ioctl_kernel+0x1f3/0x3e0
[  409.677164][ T8602]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  409.677179][ T8602]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  409.677196][ T8602]  drm_ioctl+0x5e6/0xc60
[  409.677210][ T8602]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  409.677225][ T8602]  ? __pfx_drm_ioctl+0x10/0x10
[  409.677243][ T8602]  ? selinux_file_ioctl+0x13b/0x290
[  409.677262][ T8602]  ? selinux_file_ioctl+0xb6/0x290
[  409.677279][ T8602]  ? __pfx_drm_ioctl+0x10/0x10
[  409.677292][ T8602]  __x64_sys_ioctl+0x18e/0x210
[  409.677319][ T8602]  do_syscall_64+0x115/0x870
[  409.677332][ T8602]  ? clear_bhb_loop+0x40/0x90
[  409.677346][ T8602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.677358][ T8602] RIP: 0033:0x7f122959e019
[  409.677367][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.677378][ T8602] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  409.677394][ T8602] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  409.677401][ T8602] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  409.677407][ T8602] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  409.677413][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  409.677425][ T8602] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  409.677440][ T8602]  </TASK>
[  409.906979][ T8628] overlayfs: failed to resolve './file7': -2
[  409.959055][ T5879] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  409.971637][ T8637] 9p: Bad value for 'version'
[  409.993800][ T8633] netlink: 144 bytes leftover after parsing attributes in process `syz.1.618'.
[  410.036140][ T8645] overlayfs: failed to resolve '/��[�
[  410.036140][ T8645] �Z�f����鐣(!A-#'': -2
[  410.234067][ T8651] FAULT_INJECTION: forcing a failure.
[  410.234067][ T8651] name failslab, interval 1, probability 0, space 0, times 0
[  410.238100][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.3.623 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  410.238118][ T8651] Tainted: [L]=SOFTLOCKUP
[  410.238122][ T8651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  410.238129][ T8651] Call Trace:
[  410.238134][ T8651]  <TASK>
[  410.238138][ T8651]  dump_stack_lvl+0x100/0x190
[  410.238157][ T8651]  should_fail_ex.cold+0x5/0xa
[  410.238172][ T8651]  should_failslab+0xc2/0x120
[  410.238187][ T8651]  __kmalloc_cache_noprof+0x91/0x6c0
[  410.238205][ T8651]  ? vkms_plane_duplicate_state+0x45/0x130
[  410.238224][ T8651]  vkms_plane_duplicate_state+0x45/0x130
[  410.238237][ T8651]  drm_atomic_get_plane_state+0x279/0x7d0
[  410.238253][ T8651]  drm_atomic_add_affected_planes+0x2fe/0x450
[  410.238268][ T8651]  ? __pfx_vkms_crtc_atomic_check+0x10/0x10
[  410.238284][ T8651]  vkms_crtc_atomic_check+0x12a/0x7c0
[  410.238302][ T8651]  ? __pfx_vkms_crtc_atomic_check+0x10/0x10
[  410.238317][ T8651]  drm_atomic_helper_check_planes+0x4dc/0x900
[  410.238342][ T8651]  drm_atomic_helper_check+0xae/0x190
[  410.238356][ T8651]  vkms_atomic_check+0x1d9/0x250
[  410.238368][ T8651]  ? __pfx_vkms_atomic_check+0x10/0x10
[  410.238381][ T8651]  drm_atomic_check_only+0x19ea/0x31b0
[  410.238400][ T8651]  drm_atomic_commit+0x132/0x300
[  410.238412][ T8651]  ? __pfx_drm_atomic_commit+0x10/0x10
[  410.238424][ T8651]  ? __pfx___drm_printfn_info+0x10/0x10
[  410.238442][ T8651]  ? drm_atomic_set_fb_for_plane+0x144/0x280
[  410.238455][ T8651]  ? drm_atomic_set_fb_for_plane+0x186/0x280
[  410.238470][ T8651]  drm_atomic_helper_update_plane+0x314/0x400
[  410.238487][ T8651]  __setplane_atomic+0x22d/0x350
[  410.238505][ T8651]  drm_mode_cursor_universal+0x5e9/0xe20
[  410.238523][ T8651]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  410.238560][ T8651]  ? __pfx_drm_lease_held+0x10/0x10
[  410.238576][ T8651]  ? modeset_lock+0x114/0x6d0
[  410.238589][ T8651]  drm_mode_cursor_common+0x308/0x970
[  410.238606][ T8651]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  410.238619][ T8651]  ? avc_has_extended_perms+0x33a/0x1080
[  410.238642][ T8651]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  410.238658][ T8651]  drm_mode_cursor_ioctl+0xd4/0x110
[  410.238673][ T8651]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  410.238687][ T8651]  ? do_raw_spin_lock+0x128/0x260
[  410.238703][ T8651]  ? find_held_lock+0x2b/0x80
[  410.238715][ T8651]  ? do_raw_spin_unlock+0x145/0x1e0
[  410.238732][ T8651]  drm_ioctl_kernel+0x1f3/0x3e0
[  410.238743][ T8651]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  410.238758][ T8651]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  410.238774][ T8651]  drm_ioctl+0x5e6/0xc60
[  410.238788][ T8651]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  410.238803][ T8651]  ? __pfx_drm_ioctl+0x10/0x10
[  410.238821][ T8651]  ? selinux_file_ioctl+0x13b/0x290
[  410.238837][ T8651]  ? selinux_file_ioctl+0xb6/0x290
[  410.238854][ T8651]  ? __pfx_drm_ioctl+0x10/0x10
[  410.238867][ T8651]  __x64_sys_ioctl+0x18e/0x210
[  410.238885][ T8651]  do_syscall_64+0x115/0x870
[  410.238899][ T8651]  ? clear_bhb_loop+0x40/0x90
[  410.238912][ T8651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.238923][ T8651] RIP: 0033:0x7fc83879e019
[  410.238933][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.238943][ T8651] RSP: 002b:00007fc8396fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  410.238955][ T8651] RAX: ffffffffffffffda RBX: 00007fc838a25fa0 RCX: 00007fc83879e019
[  410.238961][ T8651] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  410.238968][ T8651] RBP: 00007fc8396fc090 R08: 0000000000000000 R09: 0000000000000000
[  410.238974][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  410.238981][ T8651] R13: 00007fc838a26038 R14: 00007fc838a25fa0 R15: 00007ffd549f0678
[  410.238995][ T8651]  </TASK>
[  410.731571][ T5845] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  410.882901][ T5845] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  410.886808][ T5845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.891032][ T5845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.894655][ T5845] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  410.899592][ T5845] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  410.902563][ T5845] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  410.905106][ T5845] usb 8-1: Manufacturer: syz
[  410.908566][ T5845] usb 8-1: config 0 descriptor??
[  411.316148][ T5845] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[  411.326666][ T5845] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  411.676126][ T8659] syzkaller0: entered promiscuous mode
[  411.678003][ T8659] syzkaller0: entered allmulticast mode
[  412.870068][ T8621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  412.936963][ T8665] xt_hashlimit: size too large, truncated to 1048576
[  413.032954][ T8675] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  413.039751][ T8676] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  413.077810][ T8681] FAULT_INJECTION: forcing a failure.
[  413.077810][ T8681] name failslab, interval 1, probability 0, space 0, times 0
[  413.086076][ T8681] CPU: 0 UID: 0 PID: 8681 Comm: syz.1.632 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  413.086095][ T8681] Tainted: [L]=SOFTLOCKUP
[  413.086100][ T8681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  413.086106][ T8681] Call Trace:
[  413.086111][ T8681]  <TASK>
[  413.086115][ T8681]  dump_stack_lvl+0x100/0x190
[  413.086136][ T8681]  should_fail_ex.cold+0x5/0xa
[  413.086150][ T8681]  should_failslab+0xc2/0x120
[  413.086166][ T8681]  __kmalloc_cache_noprof+0x91/0x6c0
[  413.086184][ T8681]  ? vkms_plane_duplicate_state+0x87/0x130
[  413.086204][ T8681]  vkms_plane_duplicate_state+0x87/0x130
[  413.086217][ T8681]  drm_atomic_get_plane_state+0x279/0x7d0
[  413.086233][ T8681]  drm_atomic_add_affected_planes+0x2fe/0x450
[  413.086249][ T8681]  ? __pfx_vkms_crtc_atomic_check+0x10/0x10
[  413.086264][ T8681]  vkms_crtc_atomic_check+0x12a/0x7c0
[  413.086282][ T8681]  ? __pfx_vkms_crtc_atomic_check+0x10/0x10
[  413.086298][ T8681]  drm_atomic_helper_check_planes+0x4dc/0x900
[  413.086315][ T8681]  drm_atomic_helper_check+0xae/0x190
[  413.086329][ T8681]  vkms_atomic_check+0x1d9/0x250
[  413.086344][ T8681]  ? __pfx_vkms_atomic_check+0x10/0x10
[  413.086357][ T8681]  drm_atomic_check_only+0x19ea/0x31b0
[  413.086376][ T8681]  drm_atomic_commit+0x132/0x300
[  413.086388][ T8681]  ? __pfx_drm_atomic_commit+0x10/0x10
[  413.086399][ T8681]  ? __pfx___drm_printfn_info+0x10/0x10
[  413.086416][ T8681]  ? drm_atomic_set_fb_for_plane+0x144/0x280
[  413.086429][ T8681]  ? drm_atomic_set_fb_for_plane+0x186/0x280
[  413.086445][ T8681]  drm_atomic_helper_update_plane+0x314/0x400
[  413.086461][ T8681]  __setplane_atomic+0x22d/0x350
[  413.086479][ T8681]  drm_mode_cursor_universal+0x5e9/0xe20
[  413.086497][ T8681]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  413.086516][ T8681]  ? __pfx_drm_lease_held+0x10/0x10
[  413.086550][ T8681]  ? modeset_lock+0x114/0x6d0
[  413.086566][ T8681]  drm_mode_cursor_common+0x308/0x970
[  413.086582][ T8681]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  413.086596][ T8681]  ? avc_has_extended_perms+0x33a/0x1080
[  413.086619][ T8681]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  413.086635][ T8681]  drm_mode_cursor_ioctl+0xd4/0x110
[  413.086662][ T8681]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  413.086676][ T8681]  ? do_raw_spin_lock+0x128/0x260
[  413.086692][ T8681]  ? find_held_lock+0x2b/0x80
[  413.086704][ T8681]  ? do_raw_spin_unlock+0x145/0x1e0
[  413.086721][ T8681]  drm_ioctl_kernel+0x1f3/0x3e0
[  413.086733][ T8681]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  413.086748][ T8681]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  413.086765][ T8681]  drm_ioctl+0x5e6/0xc60
[  413.086779][ T8681]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  413.086794][ T8681]  ? __pfx_drm_ioctl+0x10/0x10
[  413.086811][ T8681]  ? selinux_file_ioctl+0x13b/0x290
[  413.086829][ T8681]  ? selinux_file_ioctl+0xb6/0x290
[  413.086851][ T8681]  ? __pfx_drm_ioctl+0x10/0x10
[  413.086863][ T8681]  __x64_sys_ioctl+0x18e/0x210
[  413.086882][ T8681]  do_syscall_64+0x115/0x870
[  413.086896][ T8681]  ? clear_bhb_loop+0x40/0x90
[  413.086909][ T8681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.086920][ T8681] RIP: 0033:0x7f122959e019
[  413.086929][ T8681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.086940][ T8681] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  413.086952][ T8681] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  413.086960][ T8681] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  413.086966][ T8681] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  413.086973][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  413.086979][ T8681] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  413.086993][ T8681]  </TASK>
[  413.229355][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  413.233495][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  413.237482][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  413.241399][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  413.251990][ T8697] ehci-pci 0000:00:1d.7: remove, state 4
[  413.255248][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  413.255257][ T8697] usb usb2: USB disconnect, device number 1
[  413.258749][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  413.258854][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  413.268440][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  413.330989][ T8697] ehci-pci 0000:00:1d.7: USB bus 2 deregistered
[  413.386899][ T8721] fuse: Bad value for 'fd'
[  413.412598][ T5845] usb 8-1: USB disconnect, device number 13
[  413.513806][ T8703] uhci_hcd 0000:00:1d.0: remove, state 1
[  413.516782][ T8703] usb usb1: USB disconnect, device number 1
[  413.544158][ T2327] usb usb1-port1: attempt power cycle
[  413.551182][ T8739] FAULT_INJECTION: forcing a failure.
[  413.551182][ T8739] name failslab, interval 1, probability 0, space 0, times 0
[  413.564499][ T8739] CPU: 0 UID: 0 PID: 8739 Comm: syz.2.642 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  413.564519][ T8739] Tainted: [L]=SOFTLOCKUP
[  413.564523][ T8739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  413.564529][ T8739] Call Trace:
[  413.564533][ T8739]  <TASK>
[  413.564538][ T8739]  dump_stack_lvl+0x100/0x190
[  413.564557][ T8739]  should_fail_ex.cold+0x5/0xa
[  413.564572][ T8739]  should_failslab+0xc2/0x120
[  413.564587][ T8739]  __kmalloc_cache_noprof+0x91/0x6c0
[  413.564605][ T8739]  ? vkms_plane_duplicate_state+0x45/0x130
[  413.564623][ T8739]  vkms_plane_duplicate_state+0x45/0x130
[  413.564637][ T8739]  drm_atomic_get_plane_state+0x279/0x7d0
[  413.564652][ T8739]  drm_atomic_add_affected_planes+0x2fe/0x450
[  413.564683][ T8739]  ? __pfx_vkms_crtc_atomic_check+0x10/0x10
[  413.564699][ T8739]  vkms_crtc_atomic_check+0x12a/0x7c0
[  413.564717][ T8739]  ? __pfx_vkms_crtc_atomic_check+0x10/0x10
[  413.564736][ T8739]  drm_atomic_helper_check_planes+0x4dc/0x900
[  413.564754][ T8739]  drm_atomic_helper_check+0xae/0x190
[  413.564768][ T8739]  vkms_atomic_check+0x1d9/0x250
[  413.564781][ T8739]  ? __pfx_vkms_atomic_check+0x10/0x10
[  413.564793][ T8739]  drm_atomic_check_only+0x19ea/0x31b0
[  413.564814][ T8739]  drm_atomic_commit+0x132/0x300
[  413.564832][ T8739]  ? __pfx_drm_atomic_commit+0x10/0x10
[  413.564849][ T8739]  ? __pfx___drm_printfn_info+0x10/0x10
[  413.564873][ T8739]  ? drm_atomic_set_fb_for_plane+0x144/0x280
[  413.564892][ T8739]  ? drm_atomic_set_fb_for_plane+0x186/0x280
[  413.564914][ T8739]  drm_atomic_helper_update_plane+0x314/0x400
[  413.564938][ T8739]  __setplane_atomic+0x22d/0x350
[  413.564966][ T8739]  drm_mode_cursor_universal+0x5e9/0xe20
[  413.564992][ T8739]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  413.565022][ T8739]  ? __pfx_drm_lease_held+0x10/0x10
[  413.565036][ T8739]  ? modeset_lock+0x114/0x6d0
[  413.565054][ T8739]  drm_mode_cursor_common+0x308/0x970
[  413.565079][ T8739]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  413.565099][ T8739]  ? avc_has_extended_perms+0x33a/0x1080
[  413.565129][ T8739]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  413.565146][ T8739]  drm_mode_cursor_ioctl+0xd4/0x110
[  413.565168][ T8739]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  413.565187][ T8739]  ? do_raw_spin_lock+0x128/0x260
[  413.565211][ T8739]  ? find_held_lock+0x2b/0x80
[  413.565241][ T8739]  ? do_raw_spin_unlock+0x145/0x1e0
[  413.565267][ T8739]  drm_ioctl_kernel+0x1f3/0x3e0
[  413.565284][ T8739]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  413.565307][ T8739]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  413.565332][ T8739]  drm_ioctl+0x5e6/0xc60
[  413.565354][ T8739]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  413.565377][ T8739]  ? __pfx_drm_ioctl+0x10/0x10
[  413.565405][ T8739]  ? selinux_file_ioctl+0x13b/0x290
[  413.565429][ T8739]  ? selinux_file_ioctl+0xb6/0x290
[  413.565455][ T8739]  ? __pfx_drm_ioctl+0x10/0x10
[  413.565475][ T8739]  __x64_sys_ioctl+0x18e/0x210
[  413.565501][ T8739]  do_syscall_64+0x115/0x870
[  413.565521][ T8739]  ? clear_bhb_loop+0x40/0x90
[  413.565541][ T8739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.565558][ T8739] RIP: 0033:0x7f44f579e019
[  413.565573][ T8739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.565588][ T8739] RSP: 002b:00007f44f6690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  413.565606][ T8739] RAX: ffffffffffffffda RBX: 00007f44f5a25fa0 RCX: 00007f44f579e019
[  413.565617][ T8739] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  413.565626][ T8739] RBP: 00007f44f6690090 R08: 0000000000000000 R09: 0000000000000000
[  413.565636][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  413.565645][ T8739] R13: 00007f44f5a26038 R14: 00007f44f5a25fa0 R15: 00007ffe94136df8
[  413.565668][ T8739]  </TASK>
[  413.628962][   T42] kauditd_printk_skb: 50 callbacks suppressed
[  413.628986][   T42] audit: type=1400 audit(1785598497.788:1000): avc:  denied  { write } for  pid=8743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.702763][ T8703] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[  413.733155][   T42] audit: type=1400 audit(1785598497.888:1001): avc:  denied  { write } for  pid=8750 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.806685][   T42] audit: type=1400 audit(1785598497.968:1002): avc:  denied  { write } for  pid=8754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.867741][   T42] audit: type=1400 audit(1785598498.028:1003): avc:  denied  { write } for  pid=8758 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.965337][   T42] audit: type=1400 audit(1785598498.128:1004): avc:  denied  { write } for  pid=8764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.972290][ T5845] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  414.010183][   T42] audit: type=1400 audit(1785598498.168:1005): avc:  denied  { write } for  pid=8769 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  414.051943][   T58] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  414.069552][   T42] audit: type=1400 audit(1785598498.228:1006): avc:  denied  { write } for  pid=8774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  414.086403][   T42] audit: type=1400 audit(1785598498.248:1007): avc:  denied  { mount } for  pid=8776 comm="syz.0.649" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  414.120565][   T42] audit: type=1400 audit(1785598498.278:1008): avc:  denied  { write } for  pid=8788 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  414.147233][ T5845] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  414.152042][ T5845] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  414.158782][ T5845] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  414.163253][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.172315][ T8746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  414.180992][ T5845] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  414.181762][   T58] usb 7-1: device descriptor read/64, error -71
[  414.195264][ T8797] FAULT_INJECTION: forcing a failure.
[  414.195264][ T8797] name failslab, interval 1, probability 0, space 0, times 0
[  414.199067][ T8797] CPU: 0 UID: 0 PID: 8797 Comm: syz.1.653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.199084][ T8797] Tainted: [L]=SOFTLOCKUP
[  414.199088][ T8797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  414.199095][ T8797] Call Trace:
[  414.199100][ T8797]  <TASK>
[  414.199104][ T8797]  dump_stack_lvl+0x100/0x190
[  414.199124][ T8797]  should_fail_ex.cold+0x5/0xa
[  414.199138][ T8797]  should_failslab+0xc2/0x120
[  414.199154][ T8797]  __kmalloc_cache_noprof+0x91/0x6c0
[  414.199172][ T8797]  ? drm_atomic_helper_setup_commit+0x56f/0x14f0
[  414.199191][ T8797]  drm_atomic_helper_setup_commit+0x56f/0x14f0
[  414.199215][ T8797]  drm_atomic_helper_commit+0xa9/0x380
[  414.199229][ T8797]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  414.199243][ T8797]  drm_atomic_commit+0x230/0x300
[  414.199256][ T8797]  ? __pfx_drm_atomic_commit+0x10/0x10
[  414.199268][ T8797]  ? __pfx___drm_printfn_info+0x10/0x10
[  414.199285][ T8797]  ? drm_atomic_set_fb_for_plane+0x144/0x280
[  414.199298][ T8797]  ? drm_atomic_set_fb_for_plane+0x186/0x280
[  414.199313][ T8797]  drm_atomic_helper_update_plane+0x314/0x400
[  414.199329][ T8797]  __setplane_atomic+0x22d/0x350
[  414.199346][ T8797]  drm_mode_cursor_universal+0x5e9/0xe20
[  414.199364][ T8797]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  414.199383][ T8797]  ? __pfx_drm_lease_held+0x10/0x10
[  414.199396][ T8797]  ? modeset_lock+0x114/0x6d0
[  414.199409][ T8797]  drm_mode_cursor_common+0x308/0x970
[  414.199425][ T8797]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  414.199439][ T8797]  ? avc_has_extended_perms+0x33a/0x1080
[  414.199462][ T8797]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  414.199478][ T8797]  drm_mode_cursor_ioctl+0xd4/0x110
[  414.199493][ T8797]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  414.199506][ T8797]  ? do_raw_spin_lock+0x128/0x260
[  414.199522][ T8797]  ? find_held_lock+0x2b/0x80
[  414.199534][ T8797]  ? do_raw_spin_unlock+0x145/0x1e0
[  414.199551][ T8797]  drm_ioctl_kernel+0x1f3/0x3e0
[  414.199562][ T8797]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  414.199577][ T8797]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  414.199593][ T8797]  drm_ioctl+0x5e6/0xc60
[  414.199607][ T8797]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  414.199622][ T8797]  ? __pfx_drm_ioctl+0x10/0x10
[  414.199639][ T8797]  ? selinux_file_ioctl+0x13b/0x290
[  414.199656][ T8797]  ? selinux_file_ioctl+0xb6/0x290
[  414.199673][ T8797]  ? __pfx_drm_ioctl+0x10/0x10
[  414.199685][ T8797]  __x64_sys_ioctl+0x18e/0x210
[  414.199703][ T8797]  do_syscall_64+0x115/0x870
[  414.199716][ T8797]  ? clear_bhb_loop+0x40/0x90
[  414.199730][ T8797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.199741][ T8797] RIP: 0033:0x7f122959e019
[  414.199751][ T8797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.199761][ T8797] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  414.199773][ T8797] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  414.199780][ T8797] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  414.199786][ T8797] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  414.199793][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  414.199799][ T8797] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  414.199813][ T8797]  </TASK>
[  414.255721][   T42] audit: type=1400 audit(1785598498.418:1009): avc:  denied  { write } for  pid=8798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  414.387369][    T9] usb 8-1: USB disconnect, device number 14
[  414.461588][   T58] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  414.601780][   T58] usb 7-1: device descriptor read/64, error -71
[  414.670312][ T8820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  414.713626][   T58] usb usb7-port1: attempt power cycle
[  414.909312][ T8839] __nla_validate_parse: 60 callbacks suppressed
[  414.909341][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'.
[  414.926590][ T8839] vxcan3: entered promiscuous mode
[  415.002617][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.659'.
[  415.034421][ T8843] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8843 comm=syz.0.659
[  415.081666][   T58] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  415.104940][   T58] usb 7-1: device descriptor read/8, error -71
[  415.271271][ T8866] FAULT_INJECTION: forcing a failure.
[  415.271271][ T8866] name failslab, interval 1, probability 0, space 0, times 0
[  415.275697][ T8866] CPU: 2 UID: 0 PID: 8866 Comm: syz.1.662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.275715][ T8866] Tainted: [L]=SOFTLOCKUP
[  415.275719][ T8866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  415.275726][ T8866] Call Trace:
[  415.275741][ T8866]  <TASK>
[  415.275746][ T8866]  dump_stack_lvl+0x100/0x190
[  415.275808][ T8866]  should_fail_ex.cold+0x5/0xa
[  415.275831][ T8866]  should_failslab+0xc2/0x120
[  415.275857][ T8866]  __kmalloc_cache_node_noprof+0x94/0x6c0
[  415.275873][ T8866]  ? __get_vm_area_node+0x101/0x330
[  415.275890][ T8866]  __get_vm_area_node+0x101/0x330
[  415.275907][ T8866]  __vmalloc_node_range_noprof+0x228/0x1630
[  415.275923][ T8866]  ? system_heap_vmap+0x227/0x5d0
[  415.275978][ T8866]  ? system_heap_vmap+0x227/0x5d0
[  415.275991][ T8866]  ? system_heap_vmap+0xab/0x5d0
[  415.276005][ T8866]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  415.276021][ T8866]  ? __pfx___mutex_lock+0x10/0x10
[  415.276043][ T8866]  ? arch_stack_walk+0xa6/0xf0
[  415.276067][ T8866]  ? system_heap_vmap+0x227/0x5d0
[  415.276079][ T8866]  __vmalloc_node_noprof+0xad/0xf0
[  415.276094][ T8866]  ? system_heap_vmap+0x227/0x5d0
[  415.276107][ T8866]  system_heap_vmap+0x227/0x5d0
[  415.276122][ T8866]  ? __pfx_system_heap_vmap+0x10/0x10
[  415.276134][ T8866]  ? trace_contention_end+0x126/0x160
[  415.276163][ T8866]  dma_buf_vmap+0x275/0x430
[  415.276175][ T8866]  ? __pfx_system_heap_vmap+0x10/0x10
[  415.276188][ T8866]  ? __pfx_dma_buf_vmap+0x10/0x10
[  415.276204][ T8866]  drm_gem_shmem_vmap_locked+0x113/0x860
[  415.276240][ T8866]  ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10
[  415.276259][ T8866]  ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10
[  415.276275][ T8866]  drm_gem_vmap_locked+0xc8/0x1c0
[  415.276300][ T8866]  drm_gem_vmap+0x4a/0xa0
[  415.276316][ T8866]  drm_gem_fb_vmap+0xc7/0x450
[  415.276333][ T8866]  vkms_prepare_fb+0x87/0xb0
[  415.276354][ T8866]  drm_atomic_helper_prepare_planes+0x1f2/0xbe0
[  415.276366][ T8866]  ? __pfx_vkms_prepare_fb+0x10/0x10
[  415.276382][ T8866]  drm_atomic_helper_commit+0x191/0x380
[  415.276397][ T8866]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  415.276411][ T8866]  drm_atomic_commit+0x230/0x300
[  415.276425][ T8866]  ? __pfx_drm_atomic_commit+0x10/0x10
[  415.276436][ T8866]  ? __pfx___drm_printfn_info+0x10/0x10
[  415.276453][ T8866]  ? drm_atomic_set_fb_for_plane+0x144/0x280
[  415.276467][ T8866]  ? drm_atomic_set_fb_for_plane+0x186/0x280
[  415.276482][ T8866]  drm_atomic_helper_update_plane+0x314/0x400
[  415.276498][ T8866]  __setplane_atomic+0x22d/0x350
[  415.276517][ T8866]  drm_mode_cursor_universal+0x5e9/0xe20
[  415.276535][ T8866]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  415.276554][ T8866]  ? __pfx_drm_lease_held+0x10/0x10
[  415.276566][ T8866]  ? modeset_lock+0x114/0x6d0
[  415.276579][ T8866]  drm_mode_cursor_common+0x308/0x970
[  415.276596][ T8866]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  415.276610][ T8866]  ? avc_has_extended_perms+0x33a/0x1080
[  415.276697][ T8866]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  415.276714][ T8866]  drm_mode_cursor_ioctl+0xd4/0x110
[  415.276728][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.276742][ T8866]  ? do_raw_spin_lock+0x128/0x260
[  415.276757][ T8866]  ? find_held_lock+0x2b/0x80
[  415.276769][ T8866]  ? do_raw_spin_unlock+0x145/0x1e0
[  415.276786][ T8866]  drm_ioctl_kernel+0x1f3/0x3e0
[  415.276798][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.276813][ T8866]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  415.276829][ T8866]  drm_ioctl+0x5e6/0xc60
[  415.276843][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.276858][ T8866]  ? __pfx_drm_ioctl+0x10/0x10
[  415.276876][ T8866]  ? selinux_file_ioctl+0x13b/0x290
[  415.276894][ T8866]  ? selinux_file_ioctl+0xb6/0x290
[  415.276911][ T8866]  ? __pfx_drm_ioctl+0x10/0x10
[  415.276923][ T8866]  __x64_sys_ioctl+0x18e/0x210
[  415.276950][ T8866]  do_syscall_64+0x115/0x870
[  415.276963][ T8866]  ? clear_bhb_loop+0x40/0x90
[  415.276978][ T8866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.276989][ T8866] RIP: 0033:0x7f122959e019
[  415.276999][ T8866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.277010][ T8866] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  415.277022][ T8866] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  415.277030][ T8866] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  415.277036][ T8866] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  415.277043][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  415.277049][ T8866] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  415.277064][ T8866]  </TASK>
[  415.277239][ T8866] syz.1.662: vmalloc error: size 264, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[  415.361610][   T58] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  415.363299][ T8866] ,cpuset=
[  415.391977][   T58] usb 7-1: device descriptor read/8, error -71
[  415.393351][ T8866] /,mems_allowed=0-1
[  415.433408][ T8866] CPU: 2 UID: 0 PID: 8866 Comm: syz.1.662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.433425][ T8866] Tainted: [L]=SOFTLOCKUP
[  415.433430][ T8866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  415.433437][ T8866] Call Trace:
[  415.433453][ T8866]  <TASK>
[  415.433458][ T8866]  dump_stack_lvl+0x100/0x190
[  415.433478][ T8866]  warn_alloc.cold+0x94/0xa8
[  415.433491][ T8866]  ? __pfx_warn_alloc+0x10/0x10
[  415.433502][ T8866]  ? __kasan_kmalloc+0x8a/0xb0
[  415.433521][ T8866]  ? __get_vm_area_node+0x208/0x330
[  415.433539][ T8866]  __vmalloc_node_range_noprof+0xccd/0x1630
[  415.433560][ T8866]  ? system_heap_vmap+0x227/0x5d0
[  415.433574][ T8866]  ? system_heap_vmap+0xab/0x5d0
[  415.433588][ T8866]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  415.433604][ T8866]  ? __pfx___mutex_lock+0x10/0x10
[  415.433619][ T8866]  ? arch_stack_walk+0xa6/0xf0
[  415.433641][ T8866]  ? system_heap_vmap+0x227/0x5d0
[  415.433653][ T8866]  __vmalloc_node_noprof+0xad/0xf0
[  415.433668][ T8866]  ? system_heap_vmap+0x227/0x5d0
[  415.433682][ T8866]  system_heap_vmap+0x227/0x5d0
[  415.433696][ T8866]  ? __pfx_system_heap_vmap+0x10/0x10
[  415.433708][ T8866]  ? trace_contention_end+0x126/0x160
[  415.433728][ T8866]  dma_buf_vmap+0x275/0x430
[  415.433739][ T8866]  ? __pfx_system_heap_vmap+0x10/0x10
[  415.433752][ T8866]  ? __pfx_dma_buf_vmap+0x10/0x10
[  415.433767][ T8866]  drm_gem_shmem_vmap_locked+0x113/0x860
[  415.433787][ T8866]  ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10
[  415.433806][ T8866]  ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10
[  415.433822][ T8866]  drm_gem_vmap_locked+0xc8/0x1c0
[  415.433842][ T8866]  drm_gem_vmap+0x4a/0xa0
[  415.433858][ T8866]  drm_gem_fb_vmap+0xc7/0x450
[  415.433874][ T8866]  vkms_prepare_fb+0x87/0xb0
[  415.433889][ T8866]  drm_atomic_helper_prepare_planes+0x1f2/0xbe0
[  415.433901][ T8866]  ? __pfx_vkms_prepare_fb+0x10/0x10
[  415.433918][ T8866]  drm_atomic_helper_commit+0x191/0x380
[  415.433933][ T8866]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  415.433947][ T8866]  drm_atomic_commit+0x230/0x300
[  415.433960][ T8866]  ? __pfx_drm_atomic_commit+0x10/0x10
[  415.433972][ T8866]  ? __pfx___drm_printfn_info+0x10/0x10
[  415.433989][ T8866]  ? drm_atomic_set_fb_for_plane+0x144/0x280
[  415.434002][ T8866]  ? drm_atomic_set_fb_for_plane+0x186/0x280
[  415.434017][ T8866]  drm_atomic_helper_update_plane+0x314/0x400
[  415.434034][ T8866]  __setplane_atomic+0x22d/0x350
[  415.434051][ T8866]  drm_mode_cursor_universal+0x5e9/0xe20
[  415.434070][ T8866]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  415.434089][ T8866]  ? __pfx_drm_lease_held+0x10/0x10
[  415.434101][ T8866]  ? modeset_lock+0x114/0x6d0
[  415.434115][ T8866]  drm_mode_cursor_common+0x308/0x970
[  415.434132][ T8866]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  415.434145][ T8866]  ? avc_has_extended_perms+0x33a/0x1080
[  415.434168][ T8866]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  415.434185][ T8866]  drm_mode_cursor_ioctl+0xd4/0x110
[  415.434199][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.434213][ T8866]  ? do_raw_spin_lock+0x128/0x260
[  415.434232][ T8866]  ? find_held_lock+0x2b/0x80
[  415.434244][ T8866]  ? do_raw_spin_unlock+0x145/0x1e0
[  415.434261][ T8866]  drm_ioctl_kernel+0x1f3/0x3e0
[  415.434273][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.434288][ T8866]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  415.434304][ T8866]  drm_ioctl+0x5e6/0xc60
[  415.434318][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.434333][ T8866]  ? __pfx_drm_ioctl+0x10/0x10
[  415.434351][ T8866]  ? selinux_file_ioctl+0x13b/0x290
[  415.434367][ T8866]  ? selinux_file_ioctl+0xb6/0x290
[  415.434384][ T8866]  ? __pfx_drm_ioctl+0x10/0x10
[  415.434397][ T8866]  __x64_sys_ioctl+0x18e/0x210
[  415.434415][ T8866]  do_syscall_64+0x115/0x870
[  415.434428][ T8866]  ? clear_bhb_loop+0x40/0x90
[  415.434441][ T8866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.434452][ T8866] RIP: 0033:0x7f122959e019
[  415.434462][ T8866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.434473][ T8866] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  415.434484][ T8866] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  415.434490][ T8866] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  415.434497][ T8866] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  415.434503][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  415.434509][ T8866] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  415.434545][ T8866]  </TASK>
[  415.434578][ T8866] Mem-Info:
[  415.449008][ T8880] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  415.449301][ T8866] active_anon:11412 inactive_anon:13061 isolated_anon:0
[  415.449301][ T8866]  active_file:229 inactive_file:39117 isolated_file:0
[  415.449301][ T8866]  unevictable:1768 dirty:93 writeback:0
[  415.449301][ T8866]  slab_reclaimable:9121 slab_unreclaimable:69316
[  415.449301][ T8866]  mapped:25147 shmem:15270 pagetables:6092
[  415.449301][ T8866]  sec_pagetables:299 bounce:0
[  415.449301][ T8866]  kernel_misc_reclaimable:0
[  415.449301][ T8866]  free:450954 free_pcp:15559 free_cma:0
[  415.449407][ T8866] Node 0 active_anon:45428kB inactive_anon:52244kB active_file:916kB inactive_file:153924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100332kB dirty:372kB writeback:0kB shmem:57544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14720kB pagetables:17304kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  415.449439][ T8866] Node 1 active_anon:220kB inactive_anon:0kB active_file:0kB inactive_file:2544kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:256kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:7064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  415.449469][ T8866] Node 0 DMA free:14324kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132kB inactive_anon:584kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB
[  415.449502][ T8866] lowmem_reserve[]: 0 1225 1225 1225 1225
[  415.449526][ T8866] Node 0 DMA32 free:184636kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45296kB inactive_anon:51660kB active_file:916kB inactive_file:153924kB unevictable:3536kB writepending:372kB zspages:2140kB present:2080628kB managed:1255188kB mlocked:0kB bounce:0kB free_pcp:26940kB local_pcp:8376kB free_cma:0kB
[  415.449559][ T8866] lowmem_reserve[]: 0 0 0 0 0
[  415.449581][ T8866] Node 1 Normal free:1604856kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:220kB inactive_anon:0kB active_file:0kB inactive_file:2544kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:35280kB local_pcp:8312kB free_cma:0kB
[  415.449613][ T8866] lowmem_reserve[]: 0 0 0 0 0
[  415.449636][ T8866] Node 0 DMA: 31*4kB (UM) 35*8kB (UM) 38*16kB (UM) 34*32kB (UM) 21*64kB (UM) 9*128kB (U) 10*256kB (UM) 6*512kB (UM) 2*1024kB (U) 1*2048kB (M) 
[  415.452222][ T8880] overlayfs: failed to set xattr on upper
[  415.453646][ T8866] 0*4096kB = 14324kB
[  415.453659][ T8866] Node 0 DMA32: 862*4kB (UME) 849*8kB (UME) 443*16kB (UME) 
[  415.455635][ T8880] overlayfs: ...falling back to redirect_dir=nofollow.
[  415.457102][ T8866] 705*32kB (UME) 385*64kB (UME) 191*128kB (UME) 119*256kB (UME) 67*512kB (UME) 28*1024kB 
[  415.459323][ T8880] overlayfs: ...falling back to metacopy=off.
[  415.461186][ T8866] (UM) 1*2048kB (M) 0*4096kB = 184464kB
[  415.461209][ T8866] Node 1 Normal: 688*4kB (UM) 593*8kB (UM) 
[  415.463286][ T8880] overlayfs: ...falling back to index=off.
[  415.464624][ T8866] 521*16kB (UME) 489*32kB (UME) 454*64kB (UME) 393*128kB (UME) 322*256kB 
[  415.466620][ T8880] overlayfs: ...falling back to uuid=null.
[  415.468083][ T8866] (UM) 313*512kB (UME) 266*1024kB (UME) 14*2048kB (UE) 232*4096kB (UM) = 1604856kB
[  415.468127][ T8866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  415.513837][   T58] usb usb7-port1: unable to enumerate USB device
[  415.514573][ T8866] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  415.685267][ T8866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  415.688247][ T8866] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  415.691088][ T8866] 54616 total pagecache pages
[  415.692642][ T8866] 3 pages in swap cache
[  415.693983][ T8866] Free swap  = 110836kB
[  415.695306][ T8866] Total swap = 124996kB
[  415.696629][ T8866] 1048443 pages RAM
[  415.697841][ T8866] 0 pages HighMem/MovableOnly
[  415.699514][ T8866] 285335 pages reserved
[  415.700825][ T8866] 0 pages cma reserved
[  415.702506][ T8866] ------------[ cut here ]------------
[  415.704603][ T8866] ret
[  415.704612][ T8866] WARNING: drivers/dma-buf/dma-buf.c:1653 at dma_buf_vmap+0x3c5/0x430, CPU#2: syz.1.662/8866
[  415.709439][ T8866] Modules linked in:
[  415.710960][ T8866] CPU: 2 UID: 0 PID: 8866 Comm: syz.1.662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.714554][ T8866] Tainted: [L]=SOFTLOCKUP
[  415.715988][ T8866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  415.719125][ T8866] RIP: 0010:dma_buf_vmap+0x3c5/0x430
[  415.720779][ T8866] Code: fb e9 22 fd ff ff 48 8b 3c 24 e8 d6 8c fb fb e9 30 ff ff ff e8 2c 02 8b fb 90 0f 0b e8 24 02 8b fb 90 0f 0b e8 1c 02 8b fb 90 <0f> 0b 90 e9 3f fe ff ff e8 ae 4b 3c 05 4c 89 ff e8 e6 8b fb fb e9
[  415.726827][ T8866] RSP: 0018:ffffc900047cf3f8 EFLAGS: 00010293
[  415.728720][ T8866] RAX: 0000000000000000 RBX: ffff8880564a8000 RCX: ffffffff867f5e81
[  415.731178][ T8866] RDX: ffff888043e38000 RSI: ffffffff867f5fc4 RDI: ffff888043e38000
[  415.733749][ T8866] RBP: ffffc900047cf498 R08: 0000000000000005 R09: 0000000000000000
[  415.736226][ T8866] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff8880564a88d0
[  415.738678][ T8866] R13: 1ffff920008f9e82 R14: 00000000fffffff4 R15: ffff8880564a8030
[  415.741060][ T8866] FS:  00007f122a4896c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000
[  415.743928][ T8866] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  415.746053][ T8866] CR2: 00007f1229587640 CR3: 00000000583ad000 CR4: 0000000000352ef0
[  415.748597][ T8866] Call Trace:
[  415.749675][ T8866]  <TASK>
[  415.750631][ T8866]  ? __pfx_system_heap_vmap+0x10/0x10
[  415.752386][ T8866]  ? __pfx_dma_buf_vmap+0x10/0x10
[  415.754154][ T8866]  drm_gem_shmem_vmap_locked+0x113/0x860
[  415.756077][ T8866]  ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10
[  415.758040][ T8866]  ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10
[  415.759973][ T8866]  drm_gem_vmap_locked+0xc8/0x1c0
[  415.761621][ T8866]  drm_gem_vmap+0x4a/0xa0
[  415.763185][ T8866]  drm_gem_fb_vmap+0xc7/0x450
[  415.764741][ T8866]  vkms_prepare_fb+0x87/0xb0
[  415.766210][ T8866]  drm_atomic_helper_prepare_planes+0x1f2/0xbe0
[  415.768175][ T8866]  ? __pfx_vkms_prepare_fb+0x10/0x10
[  415.769845][ T8866]  drm_atomic_helper_commit+0x191/0x380
[  415.771665][ T8866]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  415.773611][ T8866]  drm_atomic_commit+0x230/0x300
[  415.775175][ T8866]  ? __pfx_drm_atomic_commit+0x10/0x10
[  415.776875][ T8866]  ? __pfx___drm_printfn_info+0x10/0x10
[  415.778625][ T8866]  ? drm_atomic_set_fb_for_plane+0x144/0x280
[  415.780508][ T8866]  ? drm_atomic_set_fb_for_plane+0x186/0x280
[  415.782463][ T8866]  drm_atomic_helper_update_plane+0x314/0x400
[  415.784423][ T8866]  __setplane_atomic+0x22d/0x350
[  415.786005][ T8866]  drm_mode_cursor_universal+0x5e9/0xe20
[  415.787807][ T8866]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  415.789828][ T8866]  ? __pfx_drm_lease_held+0x10/0x10
[  415.791663][ T8866]  ? modeset_lock+0x114/0x6d0
[  415.793190][ T8866]  drm_mode_cursor_common+0x308/0x970
[  415.794900][ T8866]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  415.796751][ T8866]  ? avc_has_extended_perms+0x33a/0x1080
[  415.798538][ T8866]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  415.800229][ T8866]  drm_mode_cursor_ioctl+0xd4/0x110
[  415.801939][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.803793][ T8866]  ? do_raw_spin_lock+0x128/0x260
[  415.805536][ T8866]  ? find_held_lock+0x2b/0x80
[  415.807060][ T8866]  ? do_raw_spin_unlock+0x145/0x1e0
[  415.808677][ T8866]  drm_ioctl_kernel+0x1f3/0x3e0
[  415.808821][ T8893] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.667'.
[  415.810199][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.814382][ T8893] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.667'.
[  415.815577][ T8866]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  415.815600][ T8866]  drm_ioctl+0x5e6/0xc60
[  415.815627][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  415.825594][ T8866]  ? __pfx_drm_ioctl+0x10/0x10
[  415.827648][ T8866]  ? selinux_file_ioctl+0x13b/0x290
[  415.829927][ T8866]  ? selinux_file_ioctl+0xb6/0x290
[  415.832235][ T8866]  ? __pfx_drm_ioctl+0x10/0x10
[  415.834392][ T8866]  __x64_sys_ioctl+0x18e/0x210
[  415.836413][ T8866]  do_syscall_64+0x115/0x870
[  415.838492][ T8866]  ? clear_bhb_loop+0x40/0x90
[  415.840634][ T8866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.843335][ T8866] RIP: 0033:0x7f122959e019
[  415.845216][ T8866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.853596][ T8866] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  415.857481][ T8866] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  415.860202][ T8866] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  415.863230][ T8866] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  415.866788][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  415.869585][ T8866] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  415.872078][ T8866]  </TASK>
[  415.873111][ T8866] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  415.875328][ T8866] CPU: 2 UID: 0 PID: 8866 Comm: syz.1.662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.879069][ T8866] Tainted: [L]=SOFTLOCKUP
[  415.880423][ T8866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  415.883564][ T8866] Call Trace:
[  415.884623][ T8866]  <TASK>
[  415.885563][ T8866]  dump_stack_lvl+0x100/0x190
[  415.887180][ T8866]  vpanic+0x552/0x970
[  415.888530][ T8866]  ? __pfx_vpanic+0x10/0x10
[  415.889967][ T8866]  panic+0xd1/0xe0
[  415.891162][ T8866]  ? __pfx_panic+0x10/0x10
[  415.892588][ T8866]  ? check_panic_on_warn+0x1f/0x90
[  415.894231][ T8866]  check_panic_on_warn.cold+0x19/0x34
[  415.895946][ T8866]  ? dma_buf_vmap+0x3c5/0x430
[  415.897447][ T8866]  __warn.cold+0x191/0x318
[  415.898864][ T8866]  __report_bug+0x30f/0x440
[  415.900308][ T8866]  ? dma_buf_vmap+0x3c5/0x430
[  415.901790][ T8866]  ? __pfx___report_bug+0x10/0x10
[  415.903397][ T8866]  ? __mutex_unlock_slowpath+0x35d/0x930
[  415.905149][ T8866]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  415.907072][ T8866]  ? system_heap_vmap+0x227/0x5d0
[  415.908648][ T8866]  ? __vmalloc_node_noprof+0xad/0xf0
[  415.910308][ T8866]  ? dma_buf_vmap+0x3c5/0x430
[  415.911790][ T8866]  report_bug+0xb2/0x220
[  415.913175][ T8866]  ? dma_buf_vmap+0x3c5/0x430
[  415.914659][ T8866]  handle_bug+0x16a/0x2a0
[  415.916023][ T8866]  exc_invalid_op+0x17/0x50
[  415.917734][ T8866]  asm_exc_invalid_op+0x1a/0x20
[  415.919259][ T8866] RIP: 0010:dma_buf_vmap+0x3c5/0x430
[  415.920903][ T8866] Code: fb e9 22 fd ff ff 48 8b 3c 24 e8 d6 8c fb fb e9 30 ff ff ff e8 2c 02 8b fb 90 0f 0b e8 24 02 8b fb 90 0f 0b e8 1c 02 8b fb 90 <0f> 0b 90 e9 3f fe ff ff e8 ae 4b 3c 05 4c 89 ff e8 e6 8b fb fb e9
[  415.926954][ T8866] RSP: 0018:ffffc900047cf3f8 EFLAGS: 00010293
[  415.929528][ T8866] RAX: 0000000000000000 RBX: ffff8880564a8000 RCX: ffffffff867f5e81
[  415.932766][ T8866] RDX: ffff888043e38000 RSI: ffffffff867f5fc4 RDI: ffff888043e38000
[  415.935235][ T8866] RBP: ffffc900047cf498 R08: 0000000000000005 R09: 0000000000000000
[  415.938250][ T8866] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff8880564a88d0
[  415.941623][ T8866] R13: 1ffff920008f9e82 R14: 00000000fffffff4 R15: ffff8880564a8030
[  415.945017][ T8866]  ? dma_buf_vmap+0x281/0x430
[  415.946977][ T8866]  ? dma_buf_vmap+0x3c4/0x430
[  415.948983][ T8866]  ? dma_buf_vmap+0x3c4/0x430
[  415.950852][ T8866]  ? __pfx_system_heap_vmap+0x10/0x10
[  415.952553][ T8866]  ? __pfx_dma_buf_vmap+0x10/0x10
[  415.954159][ T8866]  drm_gem_shmem_vmap_locked+0x113/0x860
[  415.955959][ T8866]  ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10
[  415.958009][ T8866]  ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10
[  415.960667][ T8866]  drm_gem_vmap_locked+0xc8/0x1c0
[  415.962790][ T8866]  drm_gem_vmap+0x4a/0xa0
[  415.964174][ T8866]  drm_gem_fb_vmap+0xc7/0x450
[  415.965659][ T8866]  vkms_prepare_fb+0x87/0xb0
[  415.967090][ T8866]  drm_atomic_helper_prepare_planes+0x1f2/0xbe0
[  415.969013][ T8866]  ? __pfx_vkms_prepare_fb+0x10/0x10
[  415.970682][ T8866]  drm_atomic_helper_commit+0x191/0x380
[  415.972412][ T8866]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  415.974349][ T8866]  drm_atomic_commit+0x230/0x300
[  415.975818][ T8866]  ? __pfx_drm_atomic_commit+0x10/0x10
[  415.977468][ T8866]  ? __pfx___drm_printfn_info+0x10/0x10
[  415.979208][ T8866]  ? drm_atomic_set_fb_for_plane+0x144/0x280
[  415.981039][ T8866]  ? drm_atomic_set_fb_for_plane+0x186/0x280
[  415.982800][ T8866]  drm_atomic_helper_update_plane+0x314/0x400
[  415.984700][ T8866]  __setplane_atomic+0x22d/0x350
[  415.986161][ T8866]  drm_mode_cursor_universal+0x5e9/0xe20
[  415.987827][ T8866]  ? __pfx_drm_mode_cursor_universal+0x10/0x10
[  415.989743][ T8866]  ? __pfx_drm_lease_held+0x10/0x10
[  415.991373][ T8866]  ? modeset_lock+0x114/0x6d0
[  415.992859][ T8866]  drm_mode_cursor_common+0x308/0x970
[  415.994597][ T8866]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[  415.996444][ T8866]  ? avc_has_extended_perms+0x33a/0x1080
[  415.998198][ T8866]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  416.000049][ T8866]  drm_mode_cursor_ioctl+0xd4/0x110
[  416.001680][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  416.003547][ T8866]  ? do_raw_spin_lock+0x128/0x260
[  416.005124][ T8866]  ? find_held_lock+0x2b/0x80
[  416.006614][ T8866]  ? do_raw_spin_unlock+0x145/0x1e0
[  416.008235][ T8866]  drm_ioctl_kernel+0x1f3/0x3e0
[  416.009671][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  416.011481][ T8866]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  416.013195][ T8866]  drm_ioctl+0x5e6/0xc60
[  416.014545][ T8866]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[  416.016369][ T8866]  ? __pfx_drm_ioctl+0x10/0x10
[  416.017885][ T8866]  ? selinux_file_ioctl+0x13b/0x290
[  416.019543][ T8866]  ? selinux_file_ioctl+0xb6/0x290
[  416.021158][ T8866]  ? __pfx_drm_ioctl+0x10/0x10
[  416.022676][ T8866]  __x64_sys_ioctl+0x18e/0x210
[  416.024208][ T8866]  do_syscall_64+0x115/0x870
[  416.025681][ T8866]  ? clear_bhb_loop+0x40/0x90
[  416.027145][ T8866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.028990][ T8866] RIP: 0033:0x7f122959e019
[  416.030399][ T8866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.036386][ T8866] RSP: 002b:00007f122a489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  416.038979][ T8866] RAX: ffffffffffffffda RBX: 00007f1229825fa0 RCX: 00007f122959e019
[  416.041430][ T8866] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003
[  416.043900][ T8866] RBP: 00007f122a489090 R08: 0000000000000000 R09: 0000000000000000
[  416.046343][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  416.048807][ T8866] R13: 00007f1229826038 R14: 00007f1229825fa0 R15: 00007fffd25b4a68
[  416.051180][ T8866]  </TASK>
[  416.052764][ T8866] Kernel Offset: disabled
[  416.054127][ T8866] Rebooting in 86400 seconds..