last executing test programs: 7m43.998680003s ago: executing program 2 (id=2123): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x2000077c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r4, &(0x7f0000001f00)="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", 0x1ea) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m43.041680661s ago: executing program 2 (id=2125): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 7m41.008460927s ago: executing program 2 (id=2133): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff000000004800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000050100000000000000000080bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r1 = userfaultfd(0x80001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x81) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r1}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 7m39.730263342s ago: executing program 2 (id=2136): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffff9c, r2, 0x41, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0', 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x41) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) read(r5, &(0x7f0000004000), 0x2000) write(0xffffffffffffffff, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x2d) read(r5, &(0x7f0000004000), 0x2000) read(r5, &(0x7f0000004000), 0x2000) write(0xffffffffffffffff, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x3c) 7m39.538325359s ago: executing program 2 (id=2139): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x59, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m36.268257965s ago: executing program 2 (id=2145): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x17, 0xb, "7a91934ae4b05108"}}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="096827bd7000ffdbeb85a066df252897050000000300fca0793501ca44799470c93cb357308ed5ee64b735f0bd15c52476419b77d1c79bb1255547a79eaf44137ab6d51d79ec289ae1d87b3374106eef4cbb05a414b0224843e1e6b6590083ab9a49ecff872cb9b8160456a942a5c03a3010d6592e01d092dc1618cf76baa7045825682dcde64ac99cf8edd5c1afa420e4e1b2a58efa6b596252ca94987406491c5e59690e3c663d11b9544086586e9d14b2a085", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}}, 0x0) 7m35.22783452s ago: executing program 32 (id=2145): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x17, 0xb, "7a91934ae4b05108"}}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="096827bd7000ffdbeb85a066df252897050000000300fca0793501ca44799470c93cb357308ed5ee64b735f0bd15c52476419b77d1c79bb1255547a79eaf44137ab6d51d79ec289ae1d87b3374106eef4cbb05a414b0224843e1e6b6590083ab9a49ecff872cb9b8160456a942a5c03a3010d6592e01d092dc1618cf76baa7045825682dcde64ac99cf8edd5c1afa420e4e1b2a58efa6b596252ca94987406491c5e59690e3c663d11b9544086586e9d14b2a085", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}}, 0x0) 7.689902556s ago: executing program 5 (id=3342): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000003c0)='exfat\x00', 0x80802d, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000007, 0x20010, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x6699, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, 0x0, 0x0, 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x8001, 0xa00, 0x0, 0x0}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='#\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r9, &(0x7f0000001600), &(0x7f0000001700)=@udp=r8}, 0x20) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r10, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ff", @ANYRES64=r5], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$can_bcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) write(r6, &(0x7f0000000960)='1', 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x68000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 7.030196533s ago: executing program 5 (id=3346): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0), 0x10) sendto$l2tp(r3, &(0x7f0000000000)="e578720d000000000000003b", 0xc, 0x40448c5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) recvfrom$l2tp(r3, 0x0, 0xffffffd9, 0xa2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000500000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)={[{0x2d, 'io'}]}, 0x4) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r7}) 6.626994784s ago: executing program 0 (id=3347): socket$key(0xf, 0x3, 0x2) syz_emit_vhci(0x0, 0xf8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0xf, @mcast2, 0x9}}, 0x7, 0x23}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x60000000, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8800000190000032dbdfb837000f4dbdf251c0000e672376a3cdf48eadbc7d97d8eb7d669998c2aad978b7cb7599ac54ebebc2ef6f97687a1b1b8576f4b16dafa6e396d6044788124d4c48b098f96136d701877a8df87d9ea6fe6904d12e8963867ae4d40f2535f6d1fb3ca324f6f82d0ab3e8e2faf89c3f2931b77b7bd8974e3464ca9e66418b16767e5783690d5d203c0b94e66f0a01c80f229556ec57baf29088c975c1ffe1db8e323", @ANYRES32=r2, @ANYBLOB="84001300000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "98b40a7664ff7d56", "bb6710bc8150e4fef9a1a117d7b27caf", "00000100", '=B!\x00'}, 0x28) 6.278074468s ago: executing program 1 (id=3348): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0xc000000000000, 0x100) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x2, &(0x7f0000000140)={0x1f, "ab3e86ab29b387aa7a7f063556dd8a1ebd2462f61370589bc5916ea51aad98c64f"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r4, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x60c042, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000280)) write(r5, &(0x7f0000000040)='add yz0 27.0.0.1', 0x12) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x8) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x86a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xd, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xc, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x4, 0x1, {0x8, 0x25, 0x1, 0x80, 0x30, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x5, 0x5, {0x8, 0x25, 0x1, 0x80, 0xc, 0xf, 0x1}}}}}}}}]}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a081, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) 5.520320514s ago: executing program 0 (id=3349): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) readv(r1, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1) r2 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d"], 0x44}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000440)={0x1, 0xfd, 0x1, 0x0}) 5.374283682s ago: executing program 5 (id=3350): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000003c0)={&(0x7f0000000340)=[{0xf00, 0x1000, 0x0, 0x0}, {0xa, 0x8001, 0x2000, 0x0}, {0x8, 0x8000, 0x0, 0x0}], 0x3}) 4.766055994s ago: executing program 0 (id=3353): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0x8008b70d, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fcffffff3200000018000180140002"], 0x2c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0xfffffffffffffd86, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x3500) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="33c1dbe7aedbb92c726f08746d6f64653d301a3030303030303030303030303030303031303030302c757365725f69643d", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',max_read=0x0000000000000004,default_permissions,allow_other,max_read=0x00000000000000e1,blksize=0x0000000000000c00,allow_other,\x00']) 4.581257707s ago: executing program 0 (id=3356): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb014, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0xd, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xfffff801, @private2, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e20, 0xfffffff6, @remote, 0xffffffff}}}, &(0x7f0000000440)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FITHAW(r6, 0xc0045878) r7 = dup2(r0, r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={r5}, 0x8) 4.49351776s ago: executing program 0 (id=3358): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) readv(r0, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d"], 0x44}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000440)={0x1, 0xfd, 0x1, 0x0}) gettimeofday(0xfffffffffffffffe, 0x0) 4.221940689s ago: executing program 3 (id=3361): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfff7ffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xffffffff, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) mlockall(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000080)='yeah\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usbip_server_init(0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r7, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00004b9000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, &(0x7f0000000680)="c1d8f326f086810600000066b870008ee8f0f6100f011ec4c24da7bd00000000c4e2918c4acdc4e191dfc80f01d40fc76f1d", 0x32}], 0x1, 0x2535222dcd849f80, &(0x7f0000000700)=[@cr0={0x0, 0x60010059}, @vmwrite={0x8, 0x0, 0x7, 0x0, 0x3, 0x0, 0x3, 0x0, 0x5}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00030200000002036db0e7193b243d80791ec1d1f6c223fe6e812125519aee4e355d50c691fa76c43f34522f4172e087162de61d329a6156572c0c5416d58d889ab8eeb143171a2b5a8193126b9c324ec487200567e58003f692d05eba9d03a0a179df3a68e024655be81b7fe47dbb991ce96e7bf19159d14cab29153668f43f4290b14d838ff2ab1f9356709fb779aea21820a0"]}, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0xc0, 0xa1, 0x4}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x7ffe}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "7634ceb0b45964b7a599d867cbf9c09b4e6a8d2b1f54e8561093079864769a84d3890a5901fb1f1c82edd767e700be"}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 4.181389166s ago: executing program 1 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x300) 3.894918793s ago: executing program 5 (id=3363): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) readv(r1, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1) r2 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d"], 0x44}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000440)={0x1, 0xfd, 0x1, 0x0}) 3.376395151s ago: executing program 3 (id=3365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x3000, 0x3, 0x3}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_restrict_self(r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffff1, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc}}}]}, 0x3c}}, 0x0) 3.222662668s ago: executing program 3 (id=3366): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) writev(r4, &(0x7f0000001640)=[{&(0x7f00000001c0)="9701e2732f", 0x5}], 0x1) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={&(0x7f0000000380), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)='d', 0x1}], 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3.222066625s ago: executing program 1 (id=3367): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/256, 0x100) io_uring_register$IORING_REGISTER_FILES(r1, 0x25, &(0x7f0000000000)=[r1], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x1, 0x4, 0x8000, 0x80085}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000040)) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d") r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0x2004c000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) 3.054561802s ago: executing program 4 (id=3369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=@newtaction={0x230, 0x1e, 0x109, 0x70bd26, 0x25dfdc01, {}, [{0x21c, 0x1, [@m_xt={0x218, 0x17, 0x0, 0x0, {{0x7}, {0x160, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xd8, 0x6, {0x6, 'filter\x00', 0xa, 0x9, "3e2577bbf324746bcd9151c4de431f72c407014accbde412ad00cbb9e35f9ccf1d008e8c0f50c679b43ee5412fac73c452acec0f63b1964858dc52694175d76d056de8b86cf72e6949f2986dce9713264dd372ca0d11595030a2c908508d8f723ab791388f3138c6ecacf8671c0d1c6816d71448b658edf4a8dbe6e3cb18a63228dd02ebdb836080aea179b6e5812ebaacf91ac2dd5e0d5661799da451a9d9ead056a9d32d711f59451766158576"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x92, 0x6, "48a527a054b28812fce05ff0450e06675fd203cde57f7f490a8eedf8da1a755b3234ccb32b296f5b0cdd3624a6e25dd34887cc0672aaa44f0a374cedbf92d7c12982d4e84db7bc08082ecd0ce1ed990921cdcb6958c76dd7295ffc3d8cff7121328b9be87bd9efc86b2af7cf36ac3afac01c50fd06d82dbd3354bfa6e526149b2248efe0014db8dce94fb283f773"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x230}, 0x1, 0x2b1e}, 0x8058) r1 = open(&(0x7f0000000780)='.\x00', 0x80400, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, &(0x7f0000000200)=""/76, 0x4c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf252b0000000c00050000000000001500000a0001007770616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010022bd000100000000fe008000000000016f8ffc43d2a15fe8327887e91ad9b0af1e07525a67e4f8fade0c652f21d6df99", @ANYRES32=r2, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r11, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1}) syz_clone(0x800800, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="17863fb16ca16647b1b02499c5e1fb8bf3a23e3f48edacb7ad91b5cc23a16dcc41e714be50db6f9ed0070c9dd5a7c86f08d389947c33bf5bcc040fcceb2293d2cbf21536e91648a40777f38c56c76af4c4bdd9ce2b9e825d0d9d09") ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r12 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 3.053976296s ago: executing program 1 (id=3370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0xdf9, &(0x7f00000000c0)}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@local, 0x7}, @hyper, 0x0, 0x1, 0x5d, 0x0, 0x0, 0x0, 0x5}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@host, 0x2}, {@local, 0x4}, 0x400, "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"}, 0x418, 0xf}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) read$FUSE(r4, &(0x7f0000007400)={0x2020}, 0x2020) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 3.005657965s ago: executing program 3 (id=3371): r0 = socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000300000000200000000061120c80000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x9}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000200)=@unspec, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001640)=[{&(0x7f00000002c0)="4ecebb2640b0924828a05494bbb81a25b5ec564e3e07dfc1f8e37417f0b5d7839129f3969a00e24a3e6118cf2a2e989fc78936a6460083deaf28d8b78bc0fa861802e38819cce9342e16999642d043c2ba6a20d87cc4919f435cd04592c12aec3d4cd00945b655c8662ebd5781eacdd00fe9b7b20d5a286c7e381be2daa0af6751b3fa848183ef4c13c7c64b633e0d85bb96b9b51f842312e6f8968f68daf3", 0x9f}, {&(0x7f0000000640)="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", 0x1000}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x118}}], 0x1, 0x80800) write(0xffffffffffffffff, &(0x7f0000001f00)="ef976461", 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4008, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.982975712s ago: executing program 4 (id=3372): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="6993462ead2300000001290086dd6919391400462f00fe880000000000000000000000000101ff0200000000000000000000000000010c2088be0000ffff00060c000800080086dd88be00000004162cfcfb000000000000007f0800186ab8ff4572dd22eb010000012901930902000000000000020040181208"], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x200, @loopback, 0x1}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x77800000, @loopback, 0x22b1}], 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x1a400c0, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/mm/ksm/sleep_millisecs\x00', 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r7, 0x1, 0x0, 0x6, @remote}, 0x14) write(r1, &(0x7f0000000500)='0', 0x1) 2.827368248s ago: executing program 4 (id=3373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = signalfd(r3, &(0x7f00000001c0)={[0xabda]}, 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000200)=0x9, 0x4) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x2, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0xa, 0x7, 0x200, 0x0, 0xc29, 0xd069, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0xd443, 0x3, 0x81, 0x5, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85], 0x9}}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x40000) ioctl$FS_IOC_SETFLAGS(r5, 0xc0606610, &(0x7f0000000040)=0x60) r10 = getpgid(0x0) r11 = syz_pidfd_open(r10, 0x0) r12 = pidfd_getfd(r11, r11, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r12, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) mmap(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x8, 0x110, r5, 0x7a2af000) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet6_IPV6_DSTOPTS(r13, 0x29, 0x3b, &(0x7f0000000140)={0x3c}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000000040)={r14, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$packet_int(r1, 0x107, 0x3, 0x0, 0x0) 2.664107465s ago: executing program 4 (id=3374): socket$netlink(0x10, 0x3, 0x5) r0 = socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001940)={0x0, r3}, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001b40)=@IORING_OP_READ=@pass_buffer={0x16, 0x3c, 0x4000, @fd=r5, 0x9, &(0x7f0000000680)=""/244, 0xf4, 0x4, 0x1, {0x2, 0x0, 0x0, '\x00', &(0x7f0000001b00)={0x9, 0xff71, 0x3c, &(0x7f0000001a80)="e86a1faf3b42ce05861a9db0c58d7f0cb8b2a4f3f0c4de794565619896b6d1ad96bcda5bf59d179c49204420c80acfdbe629c855f1fc919e59e62039", 0x7}, 0xc}}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000249c0000000800000009000000f7ffffffcd324f29985b48725c8c8abd51f821e323b56838790f053200268c9ab2a96937b219173fdcddc86e9c4d6c5277e6b4e862113a90f69b9a9ea01829ca347173a31b2935a506ed68ddfc1ec00c4ca527037e41422c", @ANYRES32], &(0x7f0000000340), 0x1a00) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x485b, 0x9, 0x8, 0x6, 0x0, 0xffffffff, 0xfaa, 0x9}}) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 0'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r8 = socket$kcm(0xa, 0x5, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x208400, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r8}) 2.619005742s ago: executing program 3 (id=3375): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$inet_smc(0x2b, 0x1, 0x0) r2 = memfd_create(0x0, 0x2) ftruncate(r2, 0xffff) socket$packet(0x11, 0x3, 0x300) unshare(0xa000200) syz_ublk_setup_io_uring(0x1f3e, &(0x7f00000007c0)={0x0, 0x9445, 0x2000, 0x0, 0xba}, &(0x7f0000000040), 0x0, &(0x7f0000000140)) munmap$IORING_OFF_CQ_RING(0x0, 0x401) semtimedop(0x0, &(0x7f0000000080)=[{0x4, 0x6, 0x1800}], 0x45, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000000c0)='cifs.spnego\x00', 0x0, &(0x7f0000000340)='\\$:\xebC8\x84\xf9T\x82\'\xf2Y\x00h\xd4\xc0,N\xfc\x06\x0e\xa9\xf0YB;s\xfb\xb7\xbb\x00\xb1\xf60\xa1\x16{\x9e5\xf0#~\xc2\x90`[\x03G\"(\x94#\x98h#t\"\xc4Z\x90\xc6\xe1\xddR\xc2\xbfI\xab\x1d\x9d\xb2\xca\xd7T\x03\x8bhc\xf6\x13<\xc1#\x1b\xba\xf0\xc31+\xaa\xa7z\xc7\x1d\x11n\xf8\r\xb03\xdbi\xe7\x87\x83\v\xaevW\xc5\x8fV\xe4\xcd\xd0\x00\xfb\xde\xff|%\x8bx\xd4\x1c\xfcsz\xbc\xb1\x9b\xa1\xafPs\xa5\x12\x84\xaf\xdcWeA\xb0L(\xb5\x06\xbfI\xbf\x0eH\xe9\xec*\x15\xd7\x06u?\xadw\x89zK\xff\x89Y\xae:\xbe\x86V\xd7=\xc6J\xdf\xcd\'d(\xb8/\xc2\xf8\x9d^5\x88\xf9\x8fP\xa2\x87e8\xe24\xf2\xa82\aa{x\'c\xbb\xb5\xf3x\xe2Q\xa5q+\x0f\xe6\xbf\x98\xcf\x16ym\x12m\xc4ve\xee\xbf\xd3\x1b\r\xfbC\al\xd5\x10Hq\x8e\x14@,\x11S\xb2/\xd8\xf6\xc8\xea>\xd49\a\x05\xd3\xa7\x0e\xf8\x14r\x02}7\xd7FR\xcc\xd3eP\fu\x16o\xb36\x97\x84\xf0\xab\xfeZ\xf6\xe0\xf4H\xc6%\xc7T\xb2\xae!\xf5\x1c\xcc\b\x86\xf2q\v\xd2k0\xc8\xbb\t\x8f\xf3b{\x0f\x81\xf0\xc0\\?.l\x009\xcf\xca\x01\xa4\x88}\xca\x04\x8b\xda}\xda\x03\x8d\xc9l\xc1\xa57V\xaa\xf3\xe3\x9e\xfa\xc2)e\xd5M\x83\xc1\x1f\x1f\xffEf\x88)p\xc7L\x1e^\x01G\xfe\xb6p\xf8\x83\xfeB/\a\xf5R\xf4\x97\x12h\x84\xe0\xadO\xb2\xa6\xa4\x13_\xb9\x8d\x932\xb6g\x9cN\xf9\x0f\xf7\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffc) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8000000) 1.606860657s ago: executing program 5 (id=3376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000009000010825bd70fd0004000000000000", @ANYRES32=0x0, @ANYBLOB="000000001415020008001b00000000001c001a8018000a801400070020010000000000000000000000000001", @ANYRESOCT=r0, @ANYRES32=r1, @ANYRESHEX=0x0, @ANYRESDEC=r1], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2001}, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x0, 0x0, @msi={0xd2ef, 0x0, 0x20}}]}) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000800)={0x1, 0x1}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r9, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2022, &(0x7f0000002340)) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) readv(r7, &(0x7f0000000240)=[{0x0}], 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) 1.136716958s ago: executing program 3 (id=3377): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r3, &(0x7f0000002580)=ANY=[@ANYBLOB="01"], 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) shmdt(0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x8d64, 0x9, 0x5, 0xb, 0xfffffffffffffff8], [0x2, 0x0, 0xa, 0x3, 0x5, 0x836, 0x5, 0x3, 0xfffffffffffffff7, 0x1, 0x9, 0xff, 0x5, 0x101, 0x8, 0x7, 0x100, 0x1, 0x81, 0x721f, 0x4, 0x8, 0x3, 0x4, 0xfffffffffffffff9, 0x8, 0x400, 0x3, 0xffffffffffffffff, 0x2, 0x3, 0x9, 0xffffffffffffffff, 0x5, 0x7, 0xfffffffffffffffb, 0x8, 0x4, 0x0, 0x62a, 0x2, 0xff, 0x3, 0x200, 0x1, 0x2, 0x7, 0x6, 0xcda, 0x10, 0x8, 0x800, 0xff, 0x43896108, 0x7, 0x6, 0x0, 0x1, 0x40000000400, 0x0, 0x0, 0x3, 0x10000, 0x1, 0x0, 0x0, 0xfffffffffffffe01, 0x5, 0x42, 0x0, 0x8, 0x5, 0x127, 0x1, 0x5, 0x1, 0xc36, 0x52fce412, 0x7, 0x1, 0x7, 0x30bf, 0x2, 0x0, 0x100, 0x10001, 0x6, 0x0, 0x9, 0x0, 0x5, 0x800000, 0x4, 0x8, 0x10001, 0x3, 0x2, 0x8, 0x7b5, 0xd3, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xfffffffffffffff8, 0x6, 0x5, 0x17, 0x1, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x5ff5e235, 0x67, 0x5, 0x69e9, 0x4, 0xff, 0xbff, 0x1]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af83, &(0x7f00000008c0)=0x8000) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d6100010000000109022000010100803209"], 0x0) 939.027787ms ago: executing program 0 (id=3378): r0 = socket$inet6(0xa, 0x80000, 0x9a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8b, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x8, 0x0, 0x6, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1000000004, 0x0, 0xffffffffffffff20, 0x0, 0x1, 0x0, 0x0, 0x10}) write(r6, &(0x7f0000000100)='0', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='1', 0x1) ftruncate(r4, 0x2007ffd) sendfile(r2, r3, 0x0, 0x1000a3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 546.645267ms ago: executing program 4 (id=3379): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_submit(0x0, 0xfffffffffffffcf9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000010) socket$nl_xfrm(0x10, 0x3, 0x6) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f00000001c0)=0x6e, 0x800) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x531fde58ddc35b0, 0x4, 0xfffffffa) r1 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) open(&(0x7f0000000040)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x503081, 0xc0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000070000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfffffffffffffd41, 0x0}}], 0x1, 0x10142, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', &(0x7f0000000140)='aio\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1', 0x1) sendto$inet6(r5, 0x0, 0x0, 0x44, 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 543.653994ms ago: executing program 1 (id=3380): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000700)=[{0xb, '\x00', @buffer={"21e109bbd40fa147212cff67a0000000000004903e9583d9fa9372c5b07700", 0x20}, 0x6}, {0xa, '\x00', @st={0x4, [{0x0, @svalue=0xfe9}, {0x3, @svalue=0x4}, {0x2, @uvalue=0x8}, {0x2, @svalue=0x1}]}, 0x2}]}) r1 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) chmod(&(0x7f0000000140)='./cgroup\x00', 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="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"]) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000", @ANYRESHEX=r5], 0x15) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x4) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x104, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r8, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, &(0x7f0000000000)={0x1, "1c0672ac0ec4d40111c8bd8a6c0dfd79d4824b85a28ec95ded2e6f77c5802d290f332c8dd68e86f954ed2a581ccf9efea71b7a1404850ce7f77626f5bd93cbf6", {0x101, 0x11e}}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r7, 0x7a9, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0x3, 0x1) read$FUSE(r2, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002800)={0x50, 0xfffffffffffffffe, r9, {0x7, 0x2d, 0xf, 0x402b0004, 0xcf, 0x4, 0x3, 0x2e, 0x0, 0x0, 0x80, 0x8001}}, 0x50) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) 39.639445ms ago: executing program 1 (id=3381): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1831c2, 0x20) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = socket(0x9, 0x1, 0x800003) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$key(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x2000408, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') socket$inet(0x2, 0x2, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000000)={'s526\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x912, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0xfffffffd, 0x10990e, 0x5, 0x18, 0x2, 0x2000006, 0x5, 0x8000000]}) 32.501236ms ago: executing program 4 (id=3382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=@newtaction={0x230, 0x1e, 0x109, 0x70bd26, 0x25dfdc01, {}, [{0x21c, 0x1, [@m_xt={0x218, 0x17, 0x0, 0x0, {{0x7}, {0x160, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xd8, 0x6, {0x6, 'filter\x00', 0xa, 0x9, "3e2577bbf324746bcd9151c4de431f72c407014accbde412ad00cbb9e35f9ccf1d008e8c0f50c679b43ee5412fac73c452acec0f63b1964858dc52694175d76d056de8b86cf72e6949f2986dce9713264dd372ca0d11595030a2c908508d8f723ab791388f3138c6ecacf8671c0d1c6816d71448b658edf4a8dbe6e3cb18a63228dd02ebdb836080aea179b6e5812ebaacf91ac2dd5e0d5661799da451a9d9ead056a9d32d711f59451766158576"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x92, 0x6, "48a527a054b28812fce05ff0450e06675fd203cde57f7f490a8eedf8da1a755b3234ccb32b296f5b0cdd3624a6e25dd34887cc0672aaa44f0a374cedbf92d7c12982d4e84db7bc08082ecd0ce1ed990921cdcb6958c76dd7295ffc3d8cff7121328b9be87bd9efc86b2af7cf36ac3afac01c50fd06d82dbd3354bfa6e526149b2248efe0014db8dce94fb283f773"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x230}, 0x1, 0x2b1e}, 0x8058) r1 = open(&(0x7f0000000780)='.\x00', 0x80400, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, &(0x7f0000000200)=""/76, 0x4c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf252b0000000c00050000000000001500000a0001007770616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010022bd000100000000fe008000000000016f8ffc43d2a15fe8327887e91ad9b0af1e07525a67e4f8fade0c652f21d6df99", @ANYRES32=r2, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r11, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1}) syz_clone(0x800800, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="17863fb16ca16647b1b02499c5e1fb8bf3a23e3f48edacb7ad91b5cc23a16dcc41e714be50db6f9ed0070c9dd5a7c86f08d389947c33bf5bcc040fcceb2293d2cbf21536e91648a40777f38c56c76af4c4bdd9ce2b9e825d0d9d09") ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r12 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 0s ago: executing program 5 (id=3383): socket$key(0xf, 0x3, 0x2) syz_emit_vhci(0x0, 0xf8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0xf, @mcast2, 0x9}}, 0x7, 0x23}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x60000000, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8800000190000032dbdfb837000f4dbdf251c0000e672376a3cdf48eadbc7d97d8eb7d669998c2aad978b7cb7599ac54ebebc2ef6f97687a1b1b8576f4b16dafa6e396d6044788124d4c48b098f96136d701877a8df87d9ea6fe6904d12e8963867ae4d40f2535f6d1fb3ca324f6f82d0ab3e8e2faf89c3f2931b77b7bd8974e3464ca9e66418b16767e5783690d5d203c0b94e66f0a01c80f229556ec57baf29088c975c1ffe1db8e323", @ANYRES32=r2, @ANYBLOB="84001300000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "98b40a7664ff7d56", "bb6710bc8150e4fef9a1a117d7b27caf", "00000100", '=B!\x00'}, 0x28) kernel console output (not intermixed with test programs): 8472 - 0 [ 1237.904005][T18459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.989170][T18459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.009891][T18583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.045202][T18583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.059784][T18576] ip_tables: iptables: counters copy to user failed while replacing table [ 1238.167277][T18585] Invalid source name [ 1238.172944][ T8298] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.308740][T18459] team0: Port device team_slave_0 added [ 1238.692369][ T5595] Bluetooth: hci0: command tx timeout [ 1238.994345][T18459] team0: Port device team_slave_1 added [ 1239.094895][T18579] syzkaller0: entered promiscuous mode [ 1239.104601][T18579] syzkaller0: entered allmulticast mode [ 1239.218491][T18605] input: syz0 as /devices/virtual/input/input234 [ 1239.796035][T18612] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input235 [ 1240.351922][ T30] audit: type=1400 audit(1787326632.389:1780): avc: denied { write } for pid=18569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1240.420237][ T5805] hsr_slave_0: left promiscuous mode [ 1240.457438][ T5805] hsr_slave_1: left promiscuous mode [ 1240.474166][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.494602][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.582832][T18620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.593016][T18620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.729537][T18621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.742485][T18621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.792735][ T30] audit: type=1400 audit(1787326632.829:1781): avc: denied { write } for pid=18619 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.837805][T18628] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3045'. [ 1242.664150][ T5805] team0 (unregistering): Port device team_slave_1 removed [ 1242.676092][ T5805] team0 (unregistering): Port device team_slave_0 removed [ 1242.783277][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1242.819168][T18459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.828576][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.869071][T18459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.883115][T16571] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.925080][T18459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.946162][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.974384][T18459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.535970][T18459] hsr_slave_0: entered promiscuous mode [ 1243.542327][T18459] hsr_slave_1: entered promiscuous mode [ 1243.641798][T12077] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.651866][T15605] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1244.116390][T15605] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1244.211359][T15605] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1244.334207][T15605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1244.414298][T15605] usb 6-1: Product: syz [ 1244.467763][T15605] usb 6-1: Manufacturer: syz [ 1244.627012][T18659] input: syz0 as /devices/virtual/input/input237 [ 1245.118511][ T5805] IPVS: stop unused estimator thread 0... [ 1245.393695][T18667] Invalid source name [ 1247.641073][T15605] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input236 [ 1247.742470][T15605] usb 6-1: USB disconnect, device number 44 [ 1248.124287][T18680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.199598][T18680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.318956][ T30] audit: type=1400 audit(1787326641.409:1782): avc: denied { write } for pid=18648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1249.444188][ T30] audit: type=1400 audit(1787326641.529:1783): avc: denied { write } for pid=18693 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1249.502127][T13342] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1249.595331][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1249.685635][T13342] usb 6-1: Using ep0 maxpacket: 8 [ 1249.704455][T13342] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1249.730495][T13342] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1249.857271][T12077] IPVS: starting estimator thread 0... [ 1249.884319][ T30] audit: type=1400 audit(1787326641.959:1784): avc: denied { setcurrent } for pid=18704 comm="syz.1.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1249.927922][T13342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.945663][T13342] usb 6-1: Product: syz [ 1250.001872][T18710] IPVS: using max 38 ests per chain, 91200 per kthread [ 1250.011041][T13342] usb 6-1: Manufacturer: syz [ 1250.027833][T13342] usb 6-1: SerialNumber: syz [ 1250.654615][T13342] usb 6-1: selecting invalid altsetting 1 [ 1250.836852][T13342] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1251.089962][T17329] udevd[17329]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1251.185336][T13342] usb 6-1: USB disconnect, device number 45 [ 1251.963475][T18730] input: syz0 as /devices/virtual/input/input238 [ 1252.951495][ T30] audit: type=1400 audit(1787326644.959:1785): avc: denied { write } for pid=18715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1253.586316][T18751] netlink: 'syz.5.3068': attribute type 1 has an invalid length. [ 1253.958034][T18751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1254.394595][T18755] bond4: (slave dummy0): Releasing active interface [ 1254.474064][T18755] bond5: (slave dummy0): making interface the new active one [ 1254.487041][T18755] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1254.695999][ T30] audit: type=1400 audit(1787326646.789:1786): avc: denied { write } for pid=18758 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1254.723772][T18762] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3069'. [ 1254.733101][T18762] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3069'. [ 1254.742548][T18459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1254.787596][T18459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1254.798273][T18767] jffs2: notice: (18767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1254.820241][T18459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1254.845306][T18459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1254.859841][T18459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1254.870943][T18767] libceph: secret too big 55 [ 1254.880857][T18459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1254.882593][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1254.913896][T18459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1254.945112][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1254.979313][T18769] netlink: 'syz.3.3072': attribute type 30 has an invalid length. [ 1255.014393][T13342] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1255.015811][T18459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1255.179128][T18767] netlink: 'syz.3.3072': attribute type 30 has an invalid length. [ 1255.192399][T18769] vxlan1: entered promiscuous mode [ 1255.220273][T18769] vxlan1: entered allmulticast mode [ 1255.331783][T13342] usb 2-1: Using ep0 maxpacket: 16 [ 1255.425804][T18767] vxlan2: entered promiscuous mode [ 1255.438664][T18767] vxlan2: entered allmulticast mode [ 1255.532779][ T30] audit: type=1400 audit(1787326647.579:1787): avc: denied { write } for pid=18766 comm="syz.3.3072" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1255.558957][T12077] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.693725][ T7353] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.707345][ T30] audit: type=1400 audit(1787326647.669:1788): avc: denied { add_name } for pid=18766 comm="syz.3.3072" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1255.750624][ T7353] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.797282][ T7353] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.831955][ T30] audit: type=1400 audit(1787326647.679:1789): avc: denied { create } for pid=18766 comm="syz.3.3072" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1255.937384][ T30] audit: type=1400 audit(1787326647.969:1790): avc: denied { read write open } for pid=18766 comm="syz.3.3072" path="/605/file0/test2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1256.049588][T13342] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1256.152713][T13342] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1256.167649][T13342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.176279][T13342] usb 2-1: Product: syz [ 1256.180737][T13342] usb 2-1: Manufacturer: syz [ 1256.283832][T13342] usb 2-1: SerialNumber: syz [ 1256.309632][T13342] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1256.317143][T13342] r8152-cfgselector 2-1: config 0 descriptor?? [ 1257.278509][ T30] audit: type=1400 audit(1787326648.409:1791): avc: denied { kexec_image_load } for pid=18788 comm="syz.0.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1258.308700][T13342] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1258.316004][T13342] r8152-cfgselector 2-1: No union descriptors [ 1258.316543][T18459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.497599][T18789] kexec: Could not allocate control_code_buffer [ 1258.560381][T18459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.578881][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.585954][ T7353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.621247][T13342] r8152-cfgselector 2-1: USB disconnect, device number 94 [ 1258.643367][T18799] FAULT_INJECTION: forcing a failure. [ 1258.643367][T18799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.692876][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1258.694873][T12077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.708952][T12077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1258.723729][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1258.735995][T18799] CPU: 0 UID: 0 PID: 18799 Comm: syz.1.3077 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.736024][T18799] Tainted: [L]=SOFTLOCKUP [ 1258.736031][T18799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1258.736042][T18799] Call Trace: [ 1258.736048][T18799] [ 1258.736055][T18799] dump_stack_lvl+0x100/0x190 [ 1258.736085][T18799] should_fail_ex.cold+0x5/0xa [ 1258.736110][T18799] _copy_from_user+0x2e/0xd0 [ 1258.736140][T18799] memdup_user+0x6b/0xe0 [ 1258.736163][T18799] strndup_user+0x78/0xe0 [ 1258.736186][T18799] __x64_sys_fsopen+0x9e/0x220 [ 1258.736216][T18799] do_syscall_64+0x123/0x790 [ 1258.736239][T18799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.736258][T18799] RIP: 0033:0x7f9af619e0d9 [ 1258.736273][T18799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.736290][T18799] RSP: 002b:00007f9af7043028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1258.736307][T18799] RAX: ffffffffffffffda RBX: 00007f9af6425fa0 RCX: 00007f9af619e0d9 [ 1258.736320][T18799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1258.736330][T18799] RBP: 00007f9af7043090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.736340][T18799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.736351][T18799] R13: 00007f9af6426038 R14: 00007f9af6425fa0 R15: 00007fffad9c2eb8 [ 1258.736375][T18799] [ 1258.801758][ T30] audit: type=1400 audit(1787326650.849:1792): avc: denied { bind } for pid=18804 comm="syz.5.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1258.819287][T18801] geneve0: entered promiscuous mode [ 1258.965931][ T30] audit: type=1400 audit(1787326651.059:1793): avc: denied { mount } for pid=18800 comm="syz.0.3078" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1259.040793][ T30] audit: type=1400 audit(1787326651.089:1794): avc: denied { listen } for pid=18800 comm="syz.0.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1259.083580][ T30] audit: type=1400 audit(1787326651.089:1795): avc: denied { accept } for pid=18800 comm="syz.0.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1260.032256][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1260.032274][ T30] audit: type=1400 audit(1787326651.679:1797): avc: denied { read write } for pid=18810 comm="syz.1.3082" name="video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0" [ 1260.184727][ T30] audit: type=1400 audit(1787326651.689:1798): avc: denied { open } for pid=18810 comm="syz.1.3082" path="/dev/video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0" [ 1260.360582][ T30] audit: type=1400 audit(1787326652.269:1799): avc: denied { write } for pid=18826 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.492776][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1260.683045][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1260.717385][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1260.776778][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.835478][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1260.898917][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1260.955047][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1261.016219][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.102120][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1261.142601][ T9] usb 6-1: Manufacturer: syz [ 1261.241379][ T9] usb 6-1: config 0 descriptor?? [ 1262.085802][T18840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.096980][T18840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.232154][ T9] rc_core: IR keymap rc-hauppauge not found [ 1262.244196][ T30] audit: type=1400 audit(1787326654.319:1800): avc: denied { unmount } for pid=17097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1262.273888][ T9] Registered IR keymap rc-empty [ 1262.315287][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.342061][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.375104][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1262.417484][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input239 [ 1262.475662][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.534931][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.550047][T18856] tipc: Enabling of bearer rejected, failed to enable media [ 1262.597997][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.643892][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.681919][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.700846][ T30] audit: type=1400 audit(1787326654.789:1801): avc: denied { write } for pid=18835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.763050][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.852381][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1262.933333][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1263.014377][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1263.085226][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1263.230638][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1263.356255][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1263.585154][ T9] usb 6-1: USB disconnect, device number 46 [ 1263.626224][ T30] audit: type=1400 audit(1787326655.719:1802): avc: denied { write } for pid=18866 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1263.664191][T18867] netlink: 'syz.0.3088': attribute type 1 has an invalid length. [ 1263.757541][T18870] syz.1.3084 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=2, oom_score_adj=1000 [ 1263.767720][T18870] CPU: 1 UID: 0 PID: 18870 Comm: syz.1.3084 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.767751][T18870] Tainted: [L]=SOFTLOCKUP [ 1263.767759][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1263.767771][T18870] Call Trace: [ 1263.767779][T18870] [ 1263.767788][T18870] dump_stack_lvl+0x100/0x190 [ 1263.767820][T18870] dump_header+0xfb/0x606 [ 1263.767844][T18870] oom_kill_process.cold+0xd/0x380 [ 1263.767870][T18870] out_of_memory+0x340/0x14f0 [ 1263.767897][T18870] ? __pfx_out_of_memory+0x10/0x10 [ 1263.767925][T18870] mem_cgroup_out_of_memory+0xc6/0x130 [ 1263.767952][T18870] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1263.767975][T18870] ? find_held_lock+0x2b/0x80 [ 1263.768003][T18870] ? do_raw_spin_unlock+0x145/0x1e0 [ 1263.768025][T18870] ? _raw_spin_unlock+0x28/0x50 [ 1263.768057][T18870] try_charge_memcg+0x6e1/0xdf0 [ 1263.768082][T18870] ? __pfx_try_charge_memcg+0x10/0x10 [ 1263.768103][T18870] ? find_held_lock+0x2b/0x80 [ 1263.768125][T18870] ? rcu_read_unlock+0x17/0x60 [ 1263.768145][T18870] ? rcu_read_unlock+0x17/0x60 [ 1263.768181][T18870] __memcg_slab_post_alloc_hook+0x470/0x1150 [ 1263.768211][T18870] ? kasan_save_track+0x14/0x30 [ 1263.768242][T18870] kmem_cache_alloc_node_noprof+0x4fc/0x6b0 [ 1263.768270][T18870] ? copy_process+0x590/0x8370 [ 1263.768303][T18870] ? copy_process+0x6a2/0x8370 [ 1263.768338][T18870] copy_process+0x6a2/0x8370 [ 1263.768368][T18870] ? try_to_wake_up+0x714/0x1c90 [ 1263.768390][T18870] ? __pfx_try_to_wake_up+0x10/0x10 [ 1263.768408][T18870] ? futex_hash+0x311/0x400 [ 1263.768435][T18870] ? __pfx_copy_process+0x10/0x10 [ 1263.768466][T18870] ? futex_wake+0x4ea/0x5e0 [ 1263.768493][T18870] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1263.768529][T18870] kernel_clone+0x176/0x9d0 [ 1263.768548][T18870] ? __pfx_futex_wake+0x10/0x10 [ 1263.768572][T18870] ? __pfx_kernel_clone+0x10/0x10 [ 1263.768605][T18870] __do_sys_clone+0xd9/0x120 [ 1263.768624][T18870] ? __pfx___do_sys_clone+0x10/0x10 [ 1263.768670][T18870] do_syscall_64+0x123/0x790 [ 1263.768694][T18870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.768715][T18870] RIP: 0033:0x7f9af619e0d9 [ 1263.768733][T18870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.768752][T18870] RSP: 002b:00007f9af7042fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1263.768772][T18870] RAX: ffffffffffffffda RBX: 00007f9af6425fa0 RCX: 00007f9af619e0d9 [ 1263.768786][T18870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000011000000 [ 1263.768799][T18870] RBP: 00007f9af6235024 R08: 0000000000000000 R09: 0000000000000000 [ 1263.768811][T18870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1263.768822][T18870] R13: 00007f9af6426038 R14: 00007f9af6425fa0 R15: 00007fffad9c2eb8 [ 1263.768846][T18870] [ 1263.768864][T18870] memory: usage 4kB, limit 8kB, failcnt 114 [ 1264.102311][T18867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1264.122361][T18875] bond2: (slave dummy0): making interface the new active one [ 1264.146091][T18875] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1264.289238][T18878] netlink: 'syz.3.3090': attribute type 32 has an invalid length. [ 1264.601298][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1264.641119][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1264.767246][T18459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.813798][T18870] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 1264.821374][T18870] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 1264.837129][T18870] Memory cgroup stats for /syz1/test: [ 1264.837352][T18870] cache 0 [ 1264.861698][T18870] rss 0 [ 1264.866388][T18870] rss_huge 0 [ 1264.873218][T18870] shmem 0 [ 1264.882028][T18870] mapped_file 0 [ 1264.887164][T18870] dirty 0 [ 1264.893800][T18870] writeback 0 [ 1264.901175][T18870] workingset_refault_anon 0 [ 1264.907651][T18870] workingset_refault_file 0 [ 1264.913316][T18870] swap 0 [ 1264.916182][T18870] swapcached 0 [ 1264.919642][T18870] pgpgin 0 [ 1264.923005][T18870] pgpgout 0 [ 1264.926272][T18870] pgfault 4 [ 1264.930401][T18870] pgmajfault 0 [ 1264.933993][T18870] inactive_anon 0 [ 1264.937639][T18870] active_anon 0 [ 1264.941212][T18870] inactive_file 0 [ 1264.953518][T18870] active_file 0 [ 1264.960647][T18870] unevictable 0 [ 1264.969801][T18870] hierarchical_memory_limit 8192 [ 1264.981779][T18870] hierarchical_memsw_limit 9223372036854771712 [ 1264.996086][T18870] total_cache 0 [ 1265.001923][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1265.013383][T18870] total_rss 0 [ 1265.019837][T18870] total_rss_huge 0 [ 1265.026261][T18897] trusted_key: encrypted_key: key user:syz not found [ 1265.030266][T18870] total_shmem 0 [ 1265.051726][T13342] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1265.059330][T18870] total_mapped_file 0 [ 1265.064985][T18870] total_dirty 0 [ 1265.070427][T18870] total_writeback 0 [ 1265.077000][T18870] total_workingset_refault_anon 0 [ 1265.082055][T18870] total_workingset_refault_file 0 [ 1265.099195][T18870] total_swap 0 [ 1265.111711][T18870] total_swapcached 0 [ 1265.119428][T18870] total_pgpgin 0 [ 1265.129549][T18870] total_pgpgout 0 [ 1265.139655][T18870] total_pgfault 4 [ 1265.146419][T18870] total_pgmajfault 0 [ 1265.151835][ T9] usb 6-1: device descriptor read/64, error -71 [ 1265.158118][T18870] total_inactive_anon 0 [ 1265.166225][T18870] total_active_anon 0 [ 1265.170228][T18870] total_inactive_file 0 [ 1265.181707][T18870] total_active_file 0 [ 1265.187292][T18870] total_unevictable 0 [ 1265.195914][T18870] anon_cost 0 [ 1265.199249][T18459] veth0_vlan: entered promiscuous mode [ 1265.201711][T18870] file_cost 0 [ 1265.219113][T18459] veth1_vlan: entered promiscuous mode [ 1265.221397][T18870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 1265.233770][T13342] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1265.252736][T18870] /,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3084,pid=18869,uid=0 [ 1265.305491][T18870] Memory cgroup out of memory: Killed process 18870 (syz.1.3084) total-vm:102252kB, anon-rss:1436kB, file-rss:22992kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1265.417362][T18913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.427243][T18913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.456516][ T30] audit: type=1400 audit(1787326657.479:1803): avc: denied { write } for pid=18893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.537183][T13342] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1265.541271][T18459] veth0_macvtap: entered promiscuous mode [ 1265.545927][T13342] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1265.561798][T13342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1265.570772][T13342] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1265.587894][T18459] veth1_macvtap: entered promiscuous mode [ 1265.609515][T13342] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1265.631385][T13342] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1265.661742][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1265.672003][T18459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.680673][T13342] usb 4-1: Product: syz [ 1265.687797][ T30] audit: type=1400 audit(1787326657.779:1804): avc: denied { write } for pid=18917 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.801526][T13342] usb 4-1: Manufacturer: syz [ 1265.811077][T13342] cdc_wdm 4-1:1.0: skipping garbage [ 1265.816499][T13342] cdc_wdm 4-1:1.0: skipping garbage [ 1265.822015][T13342] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1265.847342][T18459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.922775][ T9] usb 6-1: device descriptor read/64, error -71 [ 1265.942153][T18920] sctp: [Deprecated]: syz.1.3096 (pid 18920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1265.942153][T18920] Use struct sctp_sack_info instead [ 1266.093622][ T9] usb usb6-port1: attempt power cycle [ 1266.355033][T18891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1266.472622][ T9040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.555031][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1266.593668][T15607] usb 4-1: USB disconnect, device number 70 [ 1266.616538][ T134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.640958][ T9] usb 6-1: device descriptor read/8, error -71 [ 1266.654995][ T134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.821806][ T9040] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.849788][ T9040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.862390][T12075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.875227][ T9040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.888389][T12075] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.963764][T18940] loop9: detected capacity change from 0 to 7 [ 1266.984778][T12075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.994632][ T6863] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.003168][T18940] Dev loop9: unable to read RDB block 7 [ 1267.013872][T12075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.014060][T18940] loop9: unable to read partition table [ 1267.023084][ T6863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.030106][T18940] loop9: partition table beyond EOD, truncated [ 1267.048026][T18940] loop_reread_partitions: partition scan of loop9 (úů) failed (rc=-5) [ 1267.060466][ C0] blk_print_req_error: 25 callbacks suppressed [ 1267.060481][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 1267.076649][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1267.100000][ T30] audit: type=1400 audit(1787326659.189:1805): avc: denied { write } for pid=18924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.168383][T18940] binder: 18939:18940 ioctl c018620c 200000000240 returned -22 [ 1267.345238][ T30] audit: type=1400 audit(1787326659.429:1806): avc: denied { write } for pid=18946 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.437359][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1267.501728][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1267.516711][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1267.525158][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1267.534704][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1267.545333][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1267.752551][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1267.811807][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1267.863007][ T9] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1267.875393][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1267.895379][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1267.908674][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.918971][ T24] usb 5-1: Product: syz [ 1267.925849][ T24] usb 5-1: Manufacturer: syz [ 1267.929951][ T9] usb 6-1: Product: syz [ 1267.956492][ T30] audit: type=1400 audit(1787326660.039:1807): avc: denied { shutdown } for pid=18958 comm="syz.1.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1267.956759][ T9] usb 6-1: Manufacturer: syz [ 1267.987231][T18960] [U] vÔ3¸Âfůľ"SçÁ/Éę4:ĂXTz“Wˇt‘’lWµ«= [ 1267.993354][T18960] [U] J"—e:ŔĆ" [ 1268.045767][ T9] usb 6-1: SerialNumber: syz [ 1268.071198][ T9] usb 6-1: config 0 descriptor?? [ 1268.079836][ T9] ch341 6-1:0.0: ch341-uart converter detected [ 1268.127574][ T9040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.155664][T18968] kvm: user requested TSC rate below hardware speed [ 1268.171213][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1268.278432][ T9040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.449967][ T9040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.582457][ T9040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.596996][T18979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1268.608619][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1268.624615][T18952] lo speed is unknown, defaulting to 1000 [ 1268.642192][T18979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1268.661987][T18988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.686150][T18988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.741826][ T6863] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.781851][ T7353] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.862212][ T5685] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1268.872038][T12073] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.905049][ T9040] bridge_slave_0: left allmulticast mode [ 1268.912346][ T9040] bridge_slave_0: left promiscuous mode [ 1268.918837][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.043591][ T5685] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1269.065948][ T5685] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1269.086726][ T5685] usb 2-1: config 0 has no interface number 0 [ 1269.095951][ T5685] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1269.113630][ T9] usb 6-1: failed to send control message: -71 [ 1269.124343][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1269.138559][ T5685] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1269.146484][ T9] usb 6-1: USB disconnect, device number 50 [ 1269.169193][ T5685] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1269.199568][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.204607][ T9] ch341 6-1:0.0: device disconnected [ 1269.215020][ T5685] usb 2-1: Product: syz [ 1269.225717][ T5685] usb 2-1: Manufacturer: syz [ 1269.242964][ T5685] usb 2-1: SerialNumber: syz [ 1269.258508][ T9040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.265658][ T24] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input240 [ 1269.289869][ T5685] usb 2-1: config 0 descriptor?? [ 1269.298539][ T9040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.309146][ T9040] bond0 (unregistering): Released all slaves [ 1269.346365][ T30] audit: type=1400 audit(1787326661.439:1808): avc: denied { write } for pid=18992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.347529][ T9040] bond1 (unregistering): Released all slaves [ 1269.460257][ T9040] bond2 (unregistering): Released all slaves [ 1269.466406][ T30] audit: type=1400 audit(1787326661.559:1809): avc: denied { write } for pid=19005 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.523374][ T9040] bond3 (unregistering): Released all slaves [ 1269.558865][ T9040] bond4 (unregistering): Released all slaves [ 1269.570141][ T9040] bond5 (unregistering): Released all slaves [ 1269.586204][ T9040] bond6 (unregistering): Released all slaves [ 1269.597221][ T9040] bond7 (unregistering): Released all slaves [ 1269.608283][ T9040] bond8 (unregistering): Released all slaves [ 1269.620837][ T9040] bond9 (unregistering): Released all slaves [ 1269.633701][ T9040] bond10 (unregistering): Released all slaves [ 1269.651785][ T5608] Bluetooth: hci1: command tx timeout [ 1269.661256][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1269.684118][T12070] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.796490][ T9040] tipc: Left network mode [ 1269.934748][T19016] siw: device registration error -23 [ 1270.021064][T18952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.028265][T18952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.035544][T18952] bridge_slave_0: entered allmulticast mode [ 1270.046620][T18952] bridge_slave_0: entered promiscuous mode [ 1270.067049][T18952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.079187][T18952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.088334][T18952] bridge_slave_1: entered allmulticast mode [ 1270.096496][T18952] bridge_slave_1: entered promiscuous mode [ 1270.153368][T19021] syzkaller0: entered promiscuous mode [ 1270.159967][T19021] syzkaller0: entered allmulticast mode [ 1270.170267][ T30] audit: type=1400 audit(1787326662.259:1810): avc: denied { write } for pid=19012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1270.174514][T18952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.206820][T19021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.236659][T15607] usb 5-1: USB disconnect, device number 88 [ 1270.243586][T18952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.738138][ T30] audit: type=1400 audit(1787326662.819:1811): avc: denied { write } for pid=19029 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.454288][ T9040] hsr_slave_0: left promiscuous mode [ 1271.490578][ T9040] hsr_slave_1: left promiscuous mode [ 1271.526807][T15607] usb 2-1: USB disconnect, device number 95 [ 1271.538798][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.630243][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.646092][T19047] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1271.732065][ T5608] Bluetooth: hci1: command tx timeout [ 1271.837020][ T5685] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1272.822974][T19065] siw: device registration error -23 [ 1272.890885][T12075] IPVS: starting estimator thread 0... [ 1273.027245][T19068] IPVS: using max 43 ests per chain, 103200 per kthread [ 1273.788269][ T9040] team0 (unregistering): Port device team_slave_1 removed [ 1273.814288][ T5608] Bluetooth: hci1: command tx timeout [ 1273.863532][T19080] netlink: 'syz.0.3118': attribute type 1 has an invalid length. [ 1273.880745][ T9040] team0 (unregistering): Port device team_slave_0 removed [ 1274.847360][T18952] team0: Port device team_slave_0 added [ 1274.867422][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1274.909040][T19080] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1274.913727][T19086] bond2: (slave dummy0): Releasing active interface [ 1275.032608][T18952] team0: Port device team_slave_1 added [ 1275.495709][T18952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.539114][T18952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.634662][T18952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.744468][T18952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.716099][ T5608] Bluetooth: hci1: command tx timeout [ 1276.772038][T18952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.964853][T18952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.157913][T19115] vivid-000: ================= START STATUS ================= [ 1277.181742][T19115] vivid-000: Generate PTS: true [ 1277.201712][T19115] vivid-000: Generate SCR: true [ 1277.209455][T19115] tpg source WxH: 720x576 (Y'CbCr) [ 1277.226789][T19115] tpg field: 4 [ 1277.241702][T19115] tpg crop: (0,560)/720x16 [ 1277.246141][T19115] tpg compose: (0,0)/720x64 [ 1277.250638][T19115] tpg colorspace: 1 [ 1277.279436][T19115] tpg transfer function: 0/1 [ 1277.285192][T18952] hsr_slave_0: entered promiscuous mode [ 1277.289630][ T9040] IPVS: stop unused estimator thread 0... [ 1277.300635][T19115] tpg Y'CbCr encoding: 0/1 [ 1277.301880][T18952] hsr_slave_1: entered promiscuous mode [ 1277.312992][T19115] tpg quantization: 0/2 [ 1277.324505][T18952] debugfs: 'hsr0' already exists in 'hsr' [ 1277.327742][T19115] tpg RGB range: 0/2 [ 1277.335937][T18952] Cannot create hsr debugfs directory [ 1277.344316][T19115] vivid-000: ================== END STATUS ================== [ 1277.773443][T18952] netdevsim netdevsim3 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.899480][T18952] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.929443][ T30] audit: type=1400 audit(1787326670.019:1812): avc: denied { write } for pid=19123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.091254][T18952] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.147878][ T30] audit: type=1400 audit(1787326670.239:1813): avc: denied { write } for pid=19135 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.260167][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'. [ 1278.263979][ T30] audit: type=1400 audit(1787326670.289:1814): avc: denied { validate_trans } for pid=19136 comm="syz.0.3127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1278.314693][T18952] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.532665][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1278.703967][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1278.728515][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1278.761516][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1278.789024][ T9] usb 2-1: Product: syz [ 1279.138766][ T9] usb 2-1: Manufacturer: syz [ 1279.259281][T18952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1279.288976][ T30] audit: type=1400 audit(1787326671.379:1815): avc: denied { write } for pid=19146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1279.333760][T18952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1279.370420][T18952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1279.397415][T18952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1279.413269][T18952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1279.450096][T18952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1279.468715][ T30] audit: type=1400 audit(1787326671.559:1816): avc: denied { write } for pid=19173 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1279.470246][T18952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1279.516484][T18952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1279.682306][T19189] fuse: Bad value for 'fd' [ 1279.700378][T19189] netlink: 'syz.0.3134': attribute type 5 has an invalid length. [ 1279.729092][T18952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.789090][T18952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.816827][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.823959][ T8298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.890933][T12070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.898078][T12070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.414960][ T9] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input241 [ 1280.525597][ T9] usb 2-1: USB disconnect, device number 96 [ 1280.615234][T19215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.626131][T19215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.924807][ T5782] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1281.181080][ T5782] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1281.338225][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1281.598875][T19222] hpfs: Bad magic ... probably not HPFS [ 1281.698658][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1281.838919][ T30] audit: type=1400 audit(1787326673.909:1817): avc: denied { write } for pid=19187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1281.910489][ T5782] usb 6-1: Product: syz [ 1281.985697][ T5782] usb 6-1: Manufacturer: syz [ 1282.449820][ T30] audit: type=1400 audit(1787326674.539:1818): avc: denied { write } for pid=19229 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.619357][T19234] siw: device registration error -23 [ 1283.407300][ T5782] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input242 [ 1283.642182][ T5782] usb 6-1: USB disconnect, device number 52 [ 1283.728209][T19241] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1283.784493][T19241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.989603][T18952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.169323][T18952] veth0_vlan: entered promiscuous mode [ 1284.198210][T18952] veth1_vlan: entered promiscuous mode [ 1284.289307][T18952] veth0_macvtap: entered promiscuous mode [ 1284.337763][T18952] veth1_macvtap: entered promiscuous mode [ 1284.381794][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1284.418289][T18952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.469409][T18952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.584351][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1284.606062][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1284.622785][ T9040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.654405][ T9040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.669864][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1285.101997][ T9040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.104160][ T24] usb 6-1: Product: syz [ 1285.132590][ T24] usb 6-1: Manufacturer: syz [ 1285.231139][ T9040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.244279][ T30] audit: type=1400 audit(1787326677.319:1819): avc: denied { write } for pid=19237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1285.277882][T19287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.313854][T19287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.367516][T19293] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3152'. [ 1285.426798][T12070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.429612][ T30] audit: type=1400 audit(1787326677.519:1820): avc: denied { create } for pid=19292 comm="syz.1.3152" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1285.454765][T12070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.064077][ T7353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.099251][ T7353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.155667][T19293] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3152'. [ 1286.704934][ T24] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input243 [ 1287.079927][ T30] audit: type=1400 audit(1787326677.729:1821): avc: denied { write } for pid=19292 comm="syz.1.3152" name="file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1287.377601][ T30] audit: type=1400 audit(1787326677.729:1822): avc: denied { open } for pid=19292 comm="syz.1.3152" path="/37/file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1287.711118][ T30] audit: type=1400 audit(1787326677.739:1823): avc: denied { ioctl } for pid=19292 comm="syz.1.3152" path="/37/file0" dev="tmpfs" ino=223 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1287.971810][ T30] audit: type=1400 audit(1787326678.169:1824): avc: denied { write } for pid=19295 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.154248][ T24] usb 6-1: USB disconnect, device number 53 [ 1288.231916][T19310] siw: device registration error -23 [ 1288.279747][T19315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3156'. [ 1289.397890][T19325] fuse: Bad value for 'fd' [ 1289.581012][ T30] audit: type=1400 audit(1787326681.669:1825): avc: denied { unlink } for pid=18056 comm="syz-executor" name="file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1290.067622][T19339] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input244 [ 1291.738976][ T30] audit: type=1400 audit(1787326683.829:1826): avc: denied { write } for pid=19313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1291.865264][ T30] audit: type=1400 audit(1787326683.959:1827): avc: denied { write } for pid=19353 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1291.944790][T19356] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1291.971811][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1292.394448][T19357] team0 (unregistering): Port device team_slave_0 removed [ 1292.429886][T19357] team0 (unregistering): Port device team_slave_1 removed [ 1292.551527][T19366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.581777][T19366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.433545][T19385] siw: device registration error -23 [ 1294.535459][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.549227][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.849545][T19405] input: syz0 as /devices/virtual/input/input246 [ 1295.396842][ T30] audit: type=1400 audit(1787326687.489:1828): avc: denied { write } for pid=19368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1295.551401][T19416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.635158][T19416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.677064][T19418] Invalid source name [ 1295.699637][ T30] audit: type=1400 audit(1787326687.779:1829): avc: denied { write } for pid=19413 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.770830][T19430] input: syz1 as /devices/virtual/input/input247 [ 1296.987145][T19447] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1297.005845][T19430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.014410][T19430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.094744][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1297.165822][ T30] audit: type=1400 audit(1787326689.259:1830): avc: denied { read write } for pid=19449 comm="syz.5.3182" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1297.324698][ T30] audit: type=1400 audit(1787326689.259:1831): avc: denied { open } for pid=19449 comm="syz.5.3182" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1297.379647][T15607] asus 0003:048D:1239.0017: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 1297.411712][ T5782] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1297.496205][T19464] udevd[19464]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 1297.593504][ T5782] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1297.632703][ T5782] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1297.685517][T15607] asus 0003:048D:1239.0017: Asus handshake 5d failed to send: -5 [ 1297.700979][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.749210][ T5782] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 7 [ 1297.781974][ T30] audit: type=1400 audit(1787326689.869:1832): avc: denied { write } for pid=19426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.836219][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.846736][T19469] syzkaller0: entered promiscuous mode [ 1297.856827][ T5782] usb 2-1: Product: syz [ 1297.865405][T19469] syzkaller0: entered allmulticast mode [ 1297.871264][ T5782] usb 2-1: Manufacturer: syz [ 1297.886645][T15607] asus 0003:048D:1239.0017: Failed to initialize 0x5d: -5. [ 1297.891604][ T5782] usb 2-1: SerialNumber: syz [ 1299.031311][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 1299.643855][ T30] audit: type=1400 audit(1787326691.719:1833): avc: denied { setopt } for pid=19482 comm="syz.3.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1299.664824][ T5782] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1299.689857][ T5782] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1299.705353][ T5782] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1299.723142][ T5782] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1299.805017][ T5782] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1299.814572][ T30] audit: type=1400 audit(1787326691.769:1834): avc: denied { write } for pid=19474 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1300.482509][T19505] netlink: 'syz.3.3194': attribute type 21 has an invalid length. [ 1300.598218][T19505] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3194'. [ 1300.800432][ T5685] lg-g15 0003:046D:0A07.0018: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1300.812780][ T5782] usb 2-1: USB disconnect, device number 97 [ 1300.825664][T19503] udevd[19503]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 1300.922329][ T5685] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0018/input/input248 [ 1300.988062][T17273] udevd[17273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1301.516775][T19521] batman_adv: batadv0: Adding interface: veth0 [ 1301.541075][T19521] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.647875][T19521] batman_adv: batadv0: Interface activated: veth0 [ 1301.674078][T19520] bond0: option arp_interval: invalid value (18446744073709551615) [ 1301.712749][T19520] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1301.827265][T19527] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3198'. [ 1301.836899][T19527] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3198'. [ 1301.966943][T19529] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 1302.239077][T19529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1304.785243][T19535] bond3: (slave dummy0): making interface the new active one [ 1304.821352][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3200'. [ 1304.848184][T19535] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1304.885877][T19544] dlm: non-version read from control device 36 [ 1305.088011][ T30] audit: type=1400 audit(1787326697.179:1835): avc: denied { connect } for pid=19542 comm="syz.5.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1305.307033][T19556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.392133][T19556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.771980][T19585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.825057][T19585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.852331][ T30] audit: type=1400 audit(1787326702.929:1836): avc: denied { associate } for pid=19597 comm="syz.4.3215" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1310.873958][T19603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3216'. [ 1311.023662][T19606] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input249 [ 1311.104146][T19607] sctp: [Deprecated]: syz.3.3213 (pid 19607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1311.104146][T19607] Use struct sctp_sack_info instead [ 1312.702270][T15607] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1312.932230][T15607] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1312.974655][T15607] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1313.003201][T15607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1313.009967][T19635] netlink: 'syz.5.3224': attribute type 13 has an invalid length. [ 1313.020020][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3224'. [ 1313.037250][T15607] usb 4-1: Product: syz [ 1313.049037][T15607] usb 4-1: Manufacturer: syz [ 1313.175481][ T30] audit: type=1400 audit(1787326705.259:1837): avc: denied { write } for pid=19638 comm="syz.5.3225" name="functions" dev="configfs" ino=8801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1313.268377][ T30] audit: type=1400 audit(1787326705.339:1838): avc: denied { write } for pid=19638 comm="syz.5.3225" name="hs" dev="configfs" ino=69174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1313.351920][ T30] audit: type=1400 audit(1787326705.339:1839): avc: denied { write } for pid=19638 comm="syz.5.3225" name="c.1" dev="configfs" ino=8806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1313.408499][ T30] audit: type=1400 audit(1787326705.339:1840): avc: denied { write } for pid=19638 comm="syz.5.3225" name="c.1" dev="configfs" ino=8806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1313.583342][T19652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.978684][T19652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.670159][T15607] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input250 [ 1315.680654][T19656] bond5: (slave dummy0): Releasing active interface [ 1315.707256][T19654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.829306][T19654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.901411][T15607] usb 4-1: USB disconnect, device number 71 [ 1316.103408][T19677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.138687][T19677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.072757][T19685] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input251 [ 1317.521811][T19695] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 1318.756271][ T30] audit: type=1400 audit(1787326710.849:1841): avc: denied { watch } for pid=19708 comm="syz.3.3243" path="/proc/56" dev="proc" ino=68472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1318.852016][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1318.853687][T19714] overlayfs: failed to resolve './file0': -2 [ 1319.031784][T15606] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1319.328650][ T24] usb 6-1: New USB device found, idVendor=7a73, idProduct=feba, bcdDevice=c7.c1 [ 1319.924868][ T30] audit: type=1400 audit(1787326711.679:1842): avc: denied { mount } for pid=19720 comm="syz.0.3246" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1320.000977][ T30] audit: type=1400 audit(1787326711.689:1843): avc: denied { search } for pid=19720 comm="syz.0.3246" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1320.030381][ T24] usb 6-1: config 2 has an invalid interface number: 137 but max is 0 [ 1320.042833][ T24] usb 6-1: config 2 has no interface number 0 [ 1320.050151][ T24] usb 6-1: config 2 interface 137 has no altsetting 0 [ 1320.060915][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.068996][ T24] usb 6-1: Product: syz [ 1320.074040][ T24] usb 6-1: Manufacturer: syz [ 1320.079955][ T24] usb 6-1: SerialNumber: syz [ 1320.090116][ T30] audit: type=1400 audit(1787326711.689:1844): avc: denied { write } for pid=19720 comm="syz.0.3246" name="max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1320.133535][T19725] FAULT_INJECTION: forcing a failure. [ 1320.133535][T19725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.146857][T19725] CPU: 1 UID: 0 PID: 19725 Comm: syz.3.3247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.146882][T19725] Tainted: [L]=SOFTLOCKUP [ 1320.146891][T19725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1320.146902][T19725] Call Trace: [ 1320.146908][T19725] [ 1320.146915][T19725] dump_stack_lvl+0x100/0x190 [ 1320.146945][T19725] should_fail_ex.cold+0x5/0xa [ 1320.146971][T19725] _copy_to_user+0x32/0xd0 [ 1320.147001][T19725] simple_read_from_buffer+0xcb/0x170 [ 1320.147030][T19725] proc_fail_nth_read+0x1af/0x230 [ 1320.147058][T19725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1320.147086][T19725] ? rw_verify_area+0xce/0x6d0 [ 1320.147106][T19725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1320.147132][T19725] vfs_read+0x1e4/0xb40 [ 1320.147157][T19725] ? __pfx_vfs_read+0x10/0x10 [ 1320.147177][T19725] ? find_held_lock+0x2b/0x80 [ 1320.147199][T19725] ? __fget_files+0x215/0x3d0 [ 1320.147230][T19725] ? __fget_files+0x21f/0x3d0 [ 1320.147263][T19725] ksys_read+0x12a/0x250 [ 1320.147284][T19725] ? __pfx_ksys_read+0x10/0x10 [ 1320.147314][T19725] do_syscall_64+0x123/0x790 [ 1320.147336][T19725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.147355][T19725] RIP: 0033:0x7f74aed5e90e [ 1320.147370][T19725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1320.147386][T19725] RSP: 002b:00007f74afd1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1320.147404][T19725] RAX: ffffffffffffffda RBX: 00007f74afd1b6c0 RCX: 00007f74aed5e90e [ 1320.147416][T19725] RDX: 000000000000000f RSI: 00007f74afd1b0a0 RDI: 0000000000000004 [ 1320.147426][T19725] RBP: 00007f74afd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.147437][T19725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.147448][T19725] R13: 00007f74af026038 R14: 00007f74af025fa0 R15: 00007fffb15c8978 [ 1320.147474][T19725] [ 1320.153126][ T30] audit: type=1400 audit(1787326711.689:1845): avc: denied { open } for pid=19720 comm="syz.0.3246" path="/102/nfsd/max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1320.222435][T15606] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1320.398401][ T30] audit: type=1400 audit(1787326712.489:1846): avc: denied { write } for pid=19726 comm="syz.4.3244" name="functions" dev="configfs" ino=8801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1320.422754][T19734] syz_tun: entered allmulticast mode [ 1320.446407][ T24] rndis_host 6-1:2.137: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1320.461889][ T24] usb 6-1: USB disconnect, device number 54 [ 1320.469446][T15606] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1320.485567][T15606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1320.494542][T15606] usb 2-1: Product: syz [ 1320.498755][T15606] usb 2-1: Manufacturer: syz [ 1320.520961][T19726] syz_tun: left allmulticast mode [ 1320.526289][ T30] audit: type=1400 audit(1787326712.609:1847): avc: denied { unmount } for pid=17097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1320.645136][T19738] CUSE: unknown device info "" [ 1320.650092][T19738] CUSE: unknown device info "Ö" [ 1320.655023][T19738] CUSE: unknown device info "" [ 1320.660652][T19738] CUSE: unknown device info "" [ 1320.665645][T19738] CUSE: unknown device info "" [ 1320.670529][T19738] CUSE: unknown device info "" [ 1320.675780][T19738] CUSE: unknown device info "đ˙˙˙" [ 1320.681165][T19738] CUSE: unknown device info "" [ 1320.686115][T19738] CUSE: unknown device info "" [ 1320.690989][T19738] CUSE: unknown device info "" [ 1320.703544][T19739] CUSE: unknown device info "" [ 1320.708408][T19739] CUSE: unknown device info "" [ 1320.713601][T19739] CUSE: unknown device info "" [ 1320.718442][T19739] CUSE: unknown device info "" [ 1320.723378][T19739] CUSE: unknown device info "˙" [ 1320.728339][T19739] CUSE: zero length info key specified [ 1320.746186][T19738] CUSE: unknown device info "" [ 1320.751085][T19738] CUSE: unknown device info "r" [ 1320.756030][T19738] CUSE: unknown device info "ý˙˙˙˙˙˙˙#Ű" [ 1320.761734][T19738] CUSE: unknown device info "˙˙˙˙" [ 1320.770431][T19738] CUSE: unknown device info "" [ 1320.777230][T19738] CUSE: unknown device info "€" [ 1320.782808][T19738] CUSE: DEVNAME unspecified [ 1321.070405][T19743] FAULT_INJECTION: forcing a failure. [ 1321.070405][T19743] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.084879][T19743] CPU: 1 UID: 0 PID: 19743 Comm: syz.3.3250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.084907][T19743] Tainted: [L]=SOFTLOCKUP [ 1321.084914][T19743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1321.084925][T19743] Call Trace: [ 1321.084931][T19743] [ 1321.084941][T19743] dump_stack_lvl+0x100/0x190 [ 1321.084972][T19743] should_fail_ex.cold+0x5/0xa [ 1321.084995][T19743] ? __pfx_rpc_fill_super+0x10/0x10 [ 1321.085016][T19743] should_failslab+0xc2/0x120 [ 1321.085044][T19743] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1321.085072][T19743] ? alloc_inode+0x68/0x250 [ 1321.085096][T19743] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 1321.085124][T19743] ? __pfx_rpc_fill_super+0x10/0x10 [ 1321.085143][T19743] alloc_inode+0x68/0x250 [ 1321.085165][T19743] new_inode+0x22/0x1c0 [ 1321.085184][T19743] ? __pfx_rpc_fill_super+0x10/0x10 [ 1321.085204][T19743] ? __pfx_rpc_fill_super+0x10/0x10 [ 1321.085224][T19743] rpc_fill_super+0x191/0x4f0 [ 1321.085244][T19743] ? __pfx_rpc_fill_super+0x10/0x10 [ 1321.085263][T19743] get_tree_keyed+0x10e/0x1d0 [ 1321.085288][T19743] vfs_get_tree+0x92/0x320 [ 1321.085308][T19743] vfs_cmd_create+0xd7/0x2a0 [ 1321.085332][T19743] __do_sys_fsconfig+0x55a/0xcb0 [ 1321.085357][T19743] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1321.085380][T19743] ? fput+0x7c/0x100 [ 1321.085410][T19743] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1321.085438][T19743] do_syscall_64+0x123/0x790 [ 1321.085460][T19743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.085479][T19743] RIP: 0033:0x7f74aed9e0d9 [ 1321.085495][T19743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.085512][T19743] RSP: 002b:00007f74afbb8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1321.085535][T19743] RAX: ffffffffffffffda RBX: 00007f74af026180 RCX: 00007f74aed9e0d9 [ 1321.085547][T19743] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 1321.085558][T19743] RBP: 00007f74afbb8090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.085569][T19743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.085581][T19743] R13: 00007f74af026218 R14: 00007f74af026180 R15: 00007fffb15c8978 [ 1321.085606][T19743] [ 1321.836523][T15606] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input252 [ 1321.909329][T15606] usb 2-1: USB disconnect, device number 98 [ 1321.931712][T19745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.987494][T19748] device-mapper: table: 248:2: too large device [ 1322.017333][ T30] audit: type=1400 audit(1787326714.109:1848): avc: denied { setattr } for pid=19753 comm="syz.1.3255" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1322.039493][T19748] device-mapper: ioctl: error adding target to table [ 1322.231772][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1322.320985][T19768] netlink: 'syz.1.3258': attribute type 1 has an invalid length. [ 1322.362926][T19770] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3259'. [ 1322.372026][T19770] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3259'. [ 1322.392237][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1322.393022][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1322.469487][T19768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1322.555301][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1322.589273][ T9] usb 6-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 1322.685152][T19775] bond1: (slave dummy0): making interface the new active one [ 1322.698483][T19775] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1322.754955][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.831401][ T9] usb 6-1: Product: syz [ 1322.889594][ T9] usb 6-1: Manufacturer: syz [ 1322.936741][ T9] usb 6-1: SerialNumber: syz [ 1323.219371][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1323.228058][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1323.238811][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1323.248181][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1323.259181][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1323.272632][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1323.280846][ T24] usb 4-1: Product: syz [ 1323.285502][ T24] usb 4-1: Manufacturer: syz [ 1323.301955][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 1323.307170][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 1323.325307][T19779] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1323.334616][T19779] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1323.376205][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1323.399155][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 1324.164276][ T30] audit: type=1400 audit(1787326716.249:1849): avc: denied { read write } for pid=19750 comm="syz.3.3252" name="cdc-wdm0" dev="devtmpfs" ino=4598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1324.282433][ T30] audit: type=1400 audit(1787326716.249:1850): avc: denied { open } for pid=19750 comm="syz.3.3252" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1324.308224][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1324.439575][ T9] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1324.489972][T19794] sctp: [Deprecated]: syz.5.3262 (pid 19794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1324.489972][T19794] Use struct sctp_sack_info instead [ 1324.503096][ T9] usb 6-1: USB disconnect, device number 55 [ 1324.570500][ T10] usb 4-1: USB disconnect, device number 72 [ 1324.579811][T17329] udevd[17329]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1324.588623][T19794] sctp: [Deprecated]: syz.5.3262 (pid 19794) Use of int in max_burst socket option. [ 1324.588623][T19794] Use struct sctp_assoc_value instead [ 1324.798313][T19803] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1324.871716][T15606] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1324.881707][ T5782] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1325.022205][T15606] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=ff.de [ 1325.032883][T15606] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.044281][T15606] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1325.053362][ T5782] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1325.055223][T15606] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1325.074125][ T5782] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1325.091857][ T5782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1325.096226][T15606] usb 2-1: Product: syz [ 1325.113388][ T5782] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1325.115546][T15606] usb 2-1: SerialNumber: syz [ 1325.138013][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.168523][T19799] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1325.193458][ T5782] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1325.218667][ T5782] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1325.393177][T19799] FAULT_INJECTION: forcing a failure. [ 1325.393177][T19799] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.419885][T19799] CPU: 0 UID: 0 PID: 19799 Comm: syz.4.3264 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.419913][T19799] Tainted: [L]=SOFTLOCKUP [ 1325.419920][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1325.419931][T19799] Call Trace: [ 1325.419937][T19799] [ 1325.419944][T19799] dump_stack_lvl+0x100/0x190 [ 1325.419982][T19799] should_fail_ex.cold+0x5/0xa [ 1325.420006][T19799] should_failslab+0xc2/0x120 [ 1325.420033][T19799] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1325.420057][T19799] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1325.420082][T19799] ? security_file_alloc+0x34/0x2c0 [ 1325.420113][T19799] security_file_alloc+0x34/0x2c0 [ 1325.420140][T19799] init_file+0x95/0x480 [ 1325.420168][T19799] alloc_empty_file+0x79/0x1c0 [ 1325.420185][T19799] path_openat+0xdb/0x2440 [ 1325.420215][T19799] ? __pfx_path_openat+0x10/0x10 [ 1325.420247][T19799] do_file_open+0x20e/0x430 [ 1325.420274][T19799] ? __pfx_do_file_open+0x10/0x10 [ 1325.420315][T19799] ? _raw_spin_unlock+0x28/0x50 [ 1325.420341][T19799] ? alloc_fd+0x471/0x7a0 [ 1325.420370][T19799] do_sys_openat2+0x10f/0x1e0 [ 1325.420388][T19799] ? __pfx_do_sys_openat2+0x10/0x10 [ 1325.420406][T19799] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1325.420426][T19799] ? __fget_files+0x21f/0x3d0 [ 1325.420453][T19799] __x64_sys_openat+0x12d/0x210 [ 1325.420470][T19799] ? __pfx___x64_sys_openat+0x10/0x10 [ 1325.420487][T19799] ? ksys_write+0x1ac/0x250 [ 1325.420516][T19799] do_syscall_64+0x123/0x790 [ 1325.420536][T19799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.420555][T19799] RIP: 0033:0x7fb0a1f9e0d9 [ 1325.420571][T19799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.420587][T19799] RSP: 002b:00007fb0a2f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1325.420604][T19799] RAX: ffffffffffffffda RBX: 00007fb0a2225fa0 RCX: 00007fb0a1f9e0d9 [ 1325.420616][T19799] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1325.420626][T19799] RBP: 00007fb0a2f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.420637][T19799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.420647][T19799] R13: 00007fb0a2226038 R14: 00007fb0a2225fa0 R15: 00007ffca15338a8 [ 1325.420670][T19799] [ 1325.679643][ T5782] usb 5-1: USB disconnect, device number 90 [ 1325.696260][ T5782] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1325.707455][ T5782] cyberjack 5-1:1.0: device disconnected [ 1325.855869][T15606] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1326.135341][T19821] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3270'. [ 1326.144403][T19821] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3270'. [ 1326.202637][T15606] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1326.213956][T15606] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1326.250341][T15606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1326.259906][T15606] usb 6-1: Product: syz [ 1326.271708][T15606] usb 6-1: Manufacturer: syz [ 1327.331867][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 1327.528718][T19816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1327.537021][T19816] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1327.543783][T19816] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1327.551269][T19816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1327.557529][T19816] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1327.565453][T19816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1327.571419][T19816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1327.585545][T15606] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input253 [ 1327.615203][T19816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1327.651232][T19816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1327.667762][T19816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1327.750813][T19816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1327.788255][ T5685] usb 2-1: USB disconnect, device number 99 [ 1327.851291][T19834] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 1327.875684][T19834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1327.893331][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 1328.022036][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1328.141697][T15606] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1328.181850][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1328.188585][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1328.205140][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1328.217533][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1328.221727][ T5685] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1328.227678][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1328.249600][T19838] bond3: (slave dummy0): Releasing active interface [ 1328.274695][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1328.295683][T19838] bond4: (slave dummy0): making interface the new active one [ 1328.312325][T19838] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1328.330713][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1328.406699][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.541588][ T10] usb 6-1: USB disconnect, device number 56 [ 1328.787644][T19826] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3271'. [ 1328.807215][T19842] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 1, id = 0 [ 1328.826221][T19826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.834791][T19826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.854479][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 1328.874035][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1328.965129][ T5685] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1328.975322][T15606] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1328.985755][T15606] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1328.996492][ T5685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1329.008065][T15606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1329.016107][T15606] usb 5-1: Product: syz [ 1329.021338][T15606] usb 5-1: Manufacturer: syz [ 1329.021454][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1329.041538][ T5685] usb 2-1: Product: syz [ 1329.051923][ T5685] usb 2-1: Manufacturer: syz [ 1329.571697][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 1329.571741][ T5595] Bluetooth: hci4: command 0x0406 tx timeout [ 1329.579644][T17099] Bluetooth: hci5: command 0x0406 tx timeout [ 1329.651839][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 1329.829089][T19848] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input254 [ 1330.378231][T15606] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input255 [ 1330.438000][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1330.476354][T15606] usb 5-1: USB disconnect, device number 91 [ 1330.484064][ T9] usb 4-1: USB disconnect, device number 73 [ 1330.531404][T19853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.564844][T19853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.577110][ T30] audit: type=1400 audit(1787326722.669:1851): avc: denied { create } for pid=19855 comm="syz.4.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1330.609482][T19853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.622598][T19853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.698549][ T30] audit: type=1400 audit(1787326722.789:1852): avc: denied { map } for pid=19855 comm="syz.4.3277" path="/dev/video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0" [ 1330.728919][T19856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1330.770095][ T5685] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input256 [ 1330.826216][ T5685] usb 2-1: USB disconnect, device number 100 [ 1330.973448][T19870] l2tp_ppp: sess 2/0: no socket in recv [ 1331.138546][T19875] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3281'. [ 1331.148149][T19875] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3281'. [ 1331.651757][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 1331.652080][ T5595] Bluetooth: hci5: command 0x0406 tx timeout [ 1331.657820][T17099] Bluetooth: hci4: command 0x0406 tx timeout [ 1331.694851][T19881] bond4: (slave dummy0): Releasing active interface [ 1331.741725][ T5685] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1331.742274][T17099] Bluetooth: hci1: command 0x0c1a tx timeout [ 1332.199402][T19884] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 1332.258956][T19889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.283626][T19889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.332084][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 1332.339269][ T5685] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1332.351292][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.362463][ T5782] libceph: connect (1)[c::]:6789 error -101 [ 1332.370491][ T5782] libceph: mon0 (1)[c::]:6789 connect error [ 1332.377649][ T5685] usb 4-1: selecting invalid altsetting 3 [ 1332.383977][ T5685] comedi comedi5: could not set alternate setting 3 in high speed [ 1332.392087][ T5685] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1332.401848][T19889] ceph: No mds server is up or the cluster is laggy [ 1332.428546][ T5685] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1332.481803][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1332.511704][T13342] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1332.649427][T15607] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1332.662465][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1332.683580][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1332.700533][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1332.730319][T13342] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1332.980058][ T10] usb 2-1: Product: syz [ 1332.990683][ T10] usb 2-1: Manufacturer: syz [ 1332.995340][T13342] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1333.006861][T13342] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 1333.015421][T13342] usb 5-1: config 114 has no interface number 0 [ 1333.021956][T15607] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1333.033249][T13342] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1333.043844][T15607] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1333.068097][T13342] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1333.070926][T15607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1333.099868][T15607] usb 6-1: Product: syz [ 1333.114313][T15607] usb 6-1: Manufacturer: syz [ 1333.118013][T13342] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1333.157828][T13342] usb 5-1: config 114 interface 240 has no altsetting 0 [ 1333.178371][T13342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.206702][T13342] usb 5-1: Product: syz [ 1333.234382][T13342] usb 5-1: Manufacturer: syz [ 1333.244416][T13342] usb 5-1: SerialNumber: syz [ 1333.266121][T19903] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 1333.271244][T19890] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1333.281086][T19890] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1333.318852][T19903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1333.731836][T17099] Bluetooth: hci0: command 0x0c1a tx timeout [ 1333.821692][T17099] Bluetooth: hci1: command 0x0c1a tx timeout [ 1333.995822][T15607] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input258 [ 1334.050871][T15607] usb 6-1: USB disconnect, device number 57 [ 1334.309620][ T10] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input257 [ 1334.785215][T15607] usb 4-1: USB disconnect, device number 74 [ 1334.815718][T19908] bond5: (slave dummy0): making interface the new active one [ 1334.826094][T19908] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1335.190787][T13342] ir_usb 5-1:114.240: IR Dongle converter detected [ 1335.550524][T13342] usb 5-1: IRDA class descriptor not found, device not bound [ 1335.573654][T13342] usb 5-1: USB disconnect, device number 92 [ 1335.590603][ T10] usb 2-1: USB disconnect, device number 101 [ 1335.623780][ T30] audit: type=1400 audit(1787326727.719:1853): avc: denied { create } for pid=19911 comm="syz.3.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1335.654738][ T30] audit: type=1400 audit(1787326727.749:1854): avc: denied { write } for pid=19911 comm="syz.3.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1335.951818][ T30] audit: type=1400 audit(1787326727.889:1855): avc: denied { ioctl } for pid=19911 comm="syz.3.3289" path="/25/trace/set_event" dev="tracefs" ino=1505 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1336.227070][ T30] audit: type=1400 audit(1787326727.929:1856): avc: denied { ioctl } for pid=19923 comm="syz.1.3292" path="socket:[69602]" dev="sockfs" ino=69602 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1336.253952][ T30] audit: type=1400 audit(1787326727.929:1857): avc: denied { connect } for pid=19923 comm="syz.1.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1336.703133][ T5782] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1337.171693][ T5782] usb 6-1: Using ep0 maxpacket: 8 [ 1337.235249][T19933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.265858][T19933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.300186][T19933] xt_nfacct: accounting object `syz0' does not exist [ 1337.632364][ T5782] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1337.705766][ T5782] usb 6-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1337.839446][ T5782] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1337.926529][ T5782] usb 6-1: can't read configurations, error -71 [ 1338.246171][T19952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.316338][T19952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.091712][ T5782] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1339.180439][T19959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.195316][T19959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.291712][ T5782] usb 6-1: Using ep0 maxpacket: 8 [ 1339.298717][ T5782] usb 6-1: New USB device found, idVendor=1199, idProduct=c081, bcdDevice=29.c9 [ 1339.309222][ T5782] usb 6-1: config 8 has an invalid interface number: 8 but max is 0 [ 1339.323980][ T5782] usb 6-1: config 8 has no interface number 0 [ 1339.330065][ T5782] usb 6-1: config 8 interface 8 has no altsetting 0 [ 1339.340227][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.348269][ T5782] usb 6-1: Product: syz [ 1339.352604][ T5782] usb 6-1: Manufacturer: syz [ 1339.357205][ T5782] usb 6-1: SerialNumber: syz [ 1339.433165][ T30] audit: type=1400 audit(1787326731.529:1858): avc: denied { ioctl } for pid=19938 comm="syz.1.3295" path="socket:[70027]" dev="sockfs" ino=70027 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1339.462285][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1339.573468][T19955] syz_tun: entered allmulticast mode [ 1339.581339][T19955] syz_tun: left allmulticast mode [ 1339.610325][ T5782] usb 6-1: USB disconnect, device number 59 [ 1339.622489][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1339.632696][ T24] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1339.656330][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.678041][ T24] usb 4-1: selecting invalid altsetting 3 [ 1339.690485][ T24] comedi comedi5: could not set alternate setting 3 in high speed [ 1339.710080][ T24] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1339.725236][ T24] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1340.011373][ T30] audit: type=1400 audit(1787326732.089:1859): avc: denied { read } for pid=19967 comm="syz.0.3304" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1340.966936][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3307'. [ 1341.434454][T19985] FAULT_INJECTION: forcing a failure. [ 1341.434454][T19985] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.489843][T19985] CPU: 0 UID: 0 PID: 19985 Comm: syz.1.3308 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.489873][T19985] Tainted: [L]=SOFTLOCKUP [ 1341.489880][T19985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1341.489891][T19985] Call Trace: [ 1341.489898][T19985] [ 1341.489906][T19985] dump_stack_lvl+0x100/0x190 [ 1341.489937][T19985] should_fail_ex.cold+0x5/0xa [ 1341.489962][T19985] should_failslab+0xc2/0x120 [ 1341.489990][T19985] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1341.490017][T19985] ? __alloc_skb+0x5b7/0x710 [ 1341.490045][T19985] ? __alloc_skb+0x140/0x710 [ 1341.490076][T19985] __alloc_skb+0x140/0x710 [ 1341.490102][T19985] ? __alloc_skb+0x5b7/0x710 [ 1341.490128][T19985] ? __pfx___alloc_skb+0x10/0x10 [ 1341.490163][T19985] netlink_ack+0x117/0xb80 [ 1341.490197][T19985] netlink_rcv_skb+0x333/0x420 [ 1341.490223][T19985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1341.490247][T19985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1341.490282][T19985] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1341.490318][T19985] netlink_unicast+0x585/0x850 [ 1341.490348][T19985] ? __pfx_netlink_unicast+0x10/0x10 [ 1341.490382][T19985] netlink_sendmsg+0x8b0/0xda0 [ 1341.490413][T19985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.490442][T19985] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1341.490473][T19985] ____sys_sendmsg+0xa4d/0xbe0 [ 1341.490495][T19985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.490523][T19985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1341.490549][T19985] ? _kstrtoull+0x13c/0x1f0 [ 1341.490574][T19985] ? __pfx__kstrtoull+0x10/0x10 [ 1341.490600][T19985] ___sys_sendmsg+0x190/0x1e0 [ 1341.490626][T19985] ? __pfx____sys_sendmsg+0x10/0x10 [ 1341.490679][T19985] __sys_sendmmsg+0x20c/0x440 [ 1341.490701][T19985] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1341.490719][T19985] ? ksys_write+0x190/0x250 [ 1341.490761][T19985] ? fput+0x7c/0x100 [ 1341.490788][T19985] ? ksys_write+0x1ac/0x250 [ 1341.490810][T19985] ? __pfx_ksys_write+0x10/0x10 [ 1341.490837][T19985] __x64_sys_sendmmsg+0x9c/0x100 [ 1341.490855][T19985] ? lockdep_hardirqs_on+0x7d/0x110 [ 1341.490875][T19985] do_syscall_64+0x123/0x790 [ 1341.490897][T19985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.490917][T19985] RIP: 0033:0x7f9af619e0d9 [ 1341.490932][T19985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.490949][T19985] RSP: 002b:00007f9af7043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1341.490968][T19985] RAX: ffffffffffffffda RBX: 00007f9af6425fa0 RCX: 00007f9af619e0d9 [ 1341.490980][T19985] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1341.490991][T19985] RBP: 00007f9af7043090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.491003][T19985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.491014][T19985] R13: 00007f9af6426038 R14: 00007f9af6425fa0 R15: 00007fffad9c2eb8 [ 1341.491037][T19985] [ 1342.220325][T13342] usb 4-1: USB disconnect, device number 75 [ 1342.651729][ T5685] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1342.822273][ T5685] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1342.940126][ T5685] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 1342.956412][ T5685] usb 2-1: config 255 has no interface number 0 [ 1342.981909][ T5685] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1343.053727][T20004] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input259 [ 1343.064117][ T5782] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1343.144156][T13342] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1343.223069][ T5782] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1343.351833][T13342] usb 4-1: Using ep0 maxpacket: 32 [ 1343.399883][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1343.413043][T13342] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1343.445751][T13342] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1343.456376][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1343.478295][ T5782] usb 6-1: Product: syz [ 1343.479687][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.482935][T13342] usb 4-1: config 0 has no interface number 0 [ 1343.502164][ T5782] usb 6-1: Manufacturer: syz [ 1343.539263][ T5685] usb 2-1: Product: syz [ 1343.539732][T13342] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1343.559725][ T5685] usb 2-1: Manufacturer: syz [ 1343.561608][T13342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.585590][ T5685] usb 2-1: SerialNumber: syz [ 1343.585607][T13342] usb 4-1: Product: syz [ 1343.585668][T13342] usb 4-1: Manufacturer: syz [ 1343.599630][T13342] usb 4-1: SerialNumber: syz [ 1343.617444][T13342] usb 4-1: config 0 descriptor?? [ 1344.218419][T20014] cgroup: Unknown subsys name 'appraise' [ 1344.258332][T13342] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1344.284571][T13342] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1344.302129][T20014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.312692][T13342] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1344.330229][T20014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.340804][T13342] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1344.367459][ T5782] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input260 [ 1344.393966][T13342] usb 4-1: USB disconnect, device number 76 [ 1344.667736][ T5782] usb 6-1: USB disconnect, device number 60 [ 1345.156858][ T5685] rndis_host 2-1:255.97: ACM capabilities 01, not really RNDIS? [ 1345.174490][ T5685] usb 2-1: USB disconnect, device number 102 [ 1345.234220][T20014] SELinux: policydb magic number 0x84 does not match expected magic number 0xf97cff8c [ 1345.234796][ T30] audit: type=1400 audit(1787326737.219:1860): avc: denied { load_policy } for pid=20013 comm="syz.0.3317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1345.267429][T20014] SELinux: failed to load policy [ 1345.386413][T20024] FAULT_INJECTION: forcing a failure. [ 1345.386413][T20024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.400544][T20024] CPU: 1 UID: 0 PID: 20024 Comm: syz.5.3320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.400572][T20024] Tainted: [L]=SOFTLOCKUP [ 1345.400578][T20024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1345.400589][T20024] Call Trace: [ 1345.400595][T20024] [ 1345.400603][T20024] dump_stack_lvl+0x100/0x190 [ 1345.400633][T20024] should_fail_ex.cold+0x5/0xa [ 1345.400657][T20024] _copy_from_iter+0x1f4/0x1690 [ 1345.400678][T20024] ? __asan_memset+0x23/0x50 [ 1345.400701][T20024] ? __pfx__copy_from_iter+0x10/0x10 [ 1345.400719][T20024] ? __pfx___alloc_skb+0x10/0x10 [ 1345.400763][T20024] netlink_sendmsg+0x808/0xda0 [ 1345.400795][T20024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.400823][T20024] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1345.400853][T20024] ____sys_sendmsg+0xa4d/0xbe0 [ 1345.400874][T20024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.400902][T20024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1345.400935][T20024] ___sys_sendmsg+0x190/0x1e0 [ 1345.400960][T20024] ? __pfx____sys_sendmsg+0x10/0x10 [ 1345.400984][T20024] ? get_pid_task+0x106/0x250 [ 1345.401015][T20024] ? find_held_lock+0x2b/0x80 [ 1345.401051][T20024] __sys_sendmsg+0x160/0x210 [ 1345.401070][T20024] ? __pfx___sys_sendmsg+0x10/0x10 [ 1345.401101][T20024] do_syscall_64+0x123/0x790 [ 1345.401123][T20024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.401142][T20024] RIP: 0033:0x7f8436d9e0d9 [ 1345.401158][T20024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.401175][T20024] RSP: 002b:00007f8437c59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.401193][T20024] RAX: ffffffffffffffda RBX: 00007f8437025fa0 RCX: 00007f8436d9e0d9 [ 1345.401205][T20024] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 1345.401216][T20024] RBP: 00007f8437c59090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.401227][T20024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.401238][T20024] R13: 00007f8437026038 R14: 00007f8437025fa0 R15: 00007fffcc953748 [ 1345.401262][T20024] [ 1345.796595][T20031] scsi_dev_info_list_add_str: bad dev info string 'e' '' '' [ 1345.815190][ T30] audit: type=1400 audit(1787326737.909:1861): avc: denied { mounton } for pid=20030 comm="syz.4.3323" path="/60/my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups" dev="configfs" ino=70205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1345.845112][T20031] cgroup: Unknown subsys name 'subj_type' [ 1345.911874][ T5685] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1345.918874][T20035] netlink: 'syz.4.3325': attribute type 1 has an invalid length. [ 1346.086639][T20038] overlayfs: missing 'lowerdir' [ 1346.147373][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 1346.156347][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3324'. [ 1346.208516][T20041] zero sized request [ 1346.214763][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 1346.246276][T20042] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input261 [ 1346.270673][ T5685] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1346.648686][T20035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1347.369994][ T30] audit: type=1400 audit(1787326739.449:1862): avc: denied { sys_admin } for pid=20046 comm="syz.5.3326" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1347.427514][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.436439][T20047] jffs2: notice: (20047) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1347.507564][T20035] bond1: (slave dummy0): making interface the new active one [ 1347.518255][T20035] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1347.567085][ T30] audit: type=1400 audit(1787326739.619:1863): avc: denied { write } for pid=20046 comm="syz.5.3326" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1347.742451][ T5685] usb 4-1: selecting invalid altsetting 3 [ 1347.748223][ T5685] comedi comedi5: could not set alternate setting 3 in high speed [ 1347.760918][ T5685] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1347.774785][ T5685] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1348.308127][ T5782] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1348.400893][T20065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.436634][T20065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.512272][ T5782] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1348.571159][ T5782] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1348.632451][ T5782] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1348.687849][ T5782] usb 6-1: config 150 has no interface number 0 [ 1348.712761][ T5782] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1348.742914][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.742931][ T5782] usb 6-1: Product: syz [ 1348.742940][ T5782] usb 6-1: Manufacturer: syz [ 1348.742950][ T5782] usb 6-1: SerialNumber: syz [ 1348.951710][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1348.962630][ T5782] xr_serial 6-1:150.204: skipping garbage [ 1348.975220][ T5782] xr_serial 6-1:150.204: xr_serial converter detected [ 1349.103356][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1349.125621][ T9] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1349.159428][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.196058][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1349.230103][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1349.264190][ T9] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1349.302892][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1349.328795][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1349.349850][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1349.367947][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.541578][ T30] audit: type=1400 audit(1787326741.629:1864): avc: denied { lock } for pid=20078 comm="syz.0.3335" path="socket:[70975]" dev="sockfs" ino=70975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1349.657471][ T5685] usb 4-1: USB disconnect, device number 77 [ 1349.954601][ T9] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1350.067272][T20059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.233992][T20059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.684376][ T9] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1350.816262][T20088] zram0: detected capacity change from 0 to 8 [ 1351.090278][ T9] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1351.146269][ T5782] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 1351.165798][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.175877][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.187513][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.346855][T20087] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input262 [ 1351.361790][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.388881][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.402346][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.417613][ T5782] usb 6-1: USB disconnect, device number 61 [ 1351.515685][ T5782] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1351.560185][ T5782] xr_serial 6-1:150.204: device disconnected [ 1351.597141][T20097] netlink: 'syz.5.3340': attribute type 1 has an invalid length. [ 1351.844573][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1352.641816][ T9] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 1352.692754][T20097] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1352.732514][T20102] bond6: (slave dummy0): making interface the new active one [ 1352.744163][T20102] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1352.857794][ T9] usb 5-1: USB disconnect, device number 93 [ 1352.885861][ T30] audit: type=1326 audit(1787326744.979:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1352.898931][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.912547][ T30] audit: type=1326 audit(1787326744.979:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1352.969038][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.984111][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1353.012456][ T30] audit: type=1326 audit(1787326745.029:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1353.038720][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.048089][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1353.062342][ T30] audit: type=1326 audit(1787326745.029:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1353.065036][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.090894][ T30] audit: type=1326 audit(1787326745.029:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1353.135932][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1353.147394][ T10] usb 2-1: Product: syz [ 1353.156630][ T10] usb 2-1: Manufacturer: syz [ 1353.169165][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.192450][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.192791][ T30] audit: type=1326 audit(1787326745.039:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1353.230963][ T30] audit: type=1326 audit(1787326745.039:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1353.232409][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.259977][ T30] audit: type=1326 audit(1787326745.039:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1353.304103][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.344913][ T30] audit: type=1326 audit(1787326745.039:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1353.372191][ T30] audit: type=1326 audit(1787326745.039:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20105 comm="syz.5.3342" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8436d9e0d9 code=0x7ffc0000 [ 1353.482631][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1353.571825][T15607] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1353.610437][ T10] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input263 [ 1353.628426][ T10] usb 2-1: USB disconnect, device number 103 [ 1353.662683][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1353.692916][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1353.722338][T15607] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1353.724361][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1353.741390][ T9] usb 4-1: Product: syz [ 1353.746787][T15607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1353.749454][ T9] usb 4-1: Manufacturer: syz [ 1353.776222][T15607] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1353.794021][T15607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.804162][T15607] usb 5-1: config 0 descriptor?? [ 1353.915967][T20123] netlink: 'syz.0.3347': attribute type 1 has an invalid length. [ 1353.936236][T20123] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1354.096322][T20126] bond5: (slave dummy0): Releasing active interface [ 1354.304110][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.368843][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.424054][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.477428][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.520685][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.537962][T20129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.567317][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.646194][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.705696][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.770233][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.858855][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 1354.869652][ T9] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input264 [ 1354.883630][T20126] bond6: (slave dummy0): making interface the new active one [ 1354.896387][T20126] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1354.899399][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.922843][T15607] aquacomputer_d5next 0003:0C70:F00B.0019: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.4-1/input0 [ 1354.958983][ T9] usb 4-1: USB disconnect, device number 78 [ 1354.959071][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.005358][T20134] udevd[20134]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 1355.124718][T20137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.152080][T20137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.219410][ T9] usb 5-1: USB disconnect, device number 94 [ 1355.236206][ T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1355.391704][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1355.397244][ T24] usb 2-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 1355.408758][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.416769][ T24] usb 2-1: Product: syz [ 1355.420911][ T24] usb 2-1: Manufacturer: syz [ 1355.421894][ T5782] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1355.427033][ T24] usb 2-1: SerialNumber: syz [ 1355.544806][T20146] batman_adv: batadv0: Adding interface: dummy0 [ 1355.551063][T20146] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.577393][T20146] batman_adv: batadv0: Interface activated: dummy0 [ 1355.594518][T20146] batadv0: mtu less than device minimum [ 1355.601427][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.613079][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.621727][ T5782] usb 6-1: Using ep0 maxpacket: 32 [ 1355.624992][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.629403][ T5782] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1355.639640][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.659102][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.661500][ T5782] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1355.670258][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.688773][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.691808][ T5782] usb 6-1: config 0 has no interface number 0 [ 1355.699967][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.711972][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.716653][T20146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1355.731796][ T5782] usb 6-1: Product: syz [ 1355.749269][ T5782] usb 6-1: Manufacturer: syz [ 1355.754154][ T5782] usb 6-1: SerialNumber: syz [ 1355.766110][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1355.771188][ T5782] usb 6-1: config 0 descriptor?? [ 1355.797037][ T5782] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1355.817612][ T5782] usb 6-1: selecting invalid altsetting 1 [ 1355.840950][ T5782] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1355.873774][ T24] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1355.911589][ T24] usb 2-1: USB disconnect, device number 104 [ 1355.913235][ T5782] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1355.932578][T20152] SELinux: Context AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA¤ is not valid (left unmapped). [ 1355.950175][ T5782] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1355.970599][T17329] udevd[17329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1355.999022][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.010849][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.019472][ T5782] usb 6-1: media controller created [ 1356.033871][ T5782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.103612][ T5782] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1356.121059][ T5782] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1356.127929][T20158] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1356.135515][T20158] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1356.136013][ T5782] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1356.178230][T20164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.193302][T20164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.209711][ T5782] usb 6-1: USB disconnect, device number 62 [ 1356.288230][T20167] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1356.390500][T20169] team0: No ports can be present during mode change [ 1356.401040][T20169] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1356.407562][T20169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1356.418264][T20169] vhci_hcd vhci_hcd.0: Device attached [ 1356.556411][T20172] vhci_hcd: connection closed [ 1356.558000][T12073] vhci_hcd vhci_hcd.3: stop threads [ 1356.567934][T12073] vhci_hcd vhci_hcd.3: release socket [ 1356.577143][T12073] vhci_hcd vhci_hcd.3: disconnect device [ 1356.592288][ T5782] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1356.901706][ T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1357.052734][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1357.067115][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1357.097498][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1357.126454][ T10] usb 6-1: Product: syz [ 1357.135752][ T10] usb 6-1: Manufacturer: syz [ 1357.379385][T20191] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1357.599859][T20204] syzkaller0: entered promiscuous mode [ 1357.605674][T20204] syzkaller0: entered allmulticast mode [ 1357.800338][T20202] 9p: Bad value for 'rfdno' [ 1357.887145][T20213] syz_tun: entered allmulticast mode [ 1358.242942][ T10] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input265 [ 1358.613201][ T10] usb 6-1: USB disconnect, device number 63 [ 1359.956874][T20214] syz_tun: left allmulticast mode [ 1360.159698][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1360.159713][ T30] audit: type=1400 audit(1787326758.250:1939): avc: denied { relabelfrom } for pid=20234 comm="syz.1.3380" name="UDPv6" dev="sockfs" ino=71763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1360.208429][T20235] SELinux: Context system_u:object_r:fuse_device_t:s0 is not valid (left unmapped). [ 1360.241398][T20228] smpboot: CPU 1 is now offline [ 1360.252416][T20239] syz.1.3380 (20239): /proc/20234/oom_adj is deprecated, please use /proc/20234/oom_score_adj instead. [ 1360.336803][ T30] audit: type=1400 audit(1787326758.390:1940): avc: denied { relabelto } for pid=20234 comm="syz.1.3380" name="UDPv6" dev="sockfs" ino=71763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 1361.752364][T20232] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1362.592582][T20255] CIFS: Attempting to mount //127.0.0.1/share [ 1362.604216][ T30] audit: type=1400 audit(1787326760.670:1941): avc: denied { node_bind } for pid=20242 comm="syz.1.3381" src=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1362.656696][T20254] comedi comedi1: comedi_config --init_data is deprecated [ 1362.688683][T20243] ------------[ cut here ]------------ [ 1362.689858][T20243] [ 1362.689864][T20243] ====================================================== [ 1362.689869][T20243] WARNING: possible circular locking dependency detected [ 1362.689877][T20243] syzkaller #0 Tainted: G L [ 1362.689885][T20243] ------------------------------------------------------ [ 1362.689890][T20243] syz.3.3377/20243 is trying to acquire lock: [ 1362.689897][T20243] ffffffff8ecf5cc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 1362.689936][T20243] [ 1362.689936][T20243] but task is already holding lock: [ 1362.689940][T20243] ffff8880b843b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1362.689969][T20243] [ 1362.689969][T20243] which lock already depends on the new lock. [ 1362.689969][T20243] [ 1362.689974][T20243] [ 1362.689974][T20243] the existing dependency chain (in reverse order) is: [ 1362.689979][T20243] [ 1362.689979][T20243] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1362.689996][T20243] lock_acquire+0x1b9/0x370 [ 1362.690015][T20243] _raw_spin_lock_nested+0x31/0x40 [ 1362.690036][T20243] raw_spin_rq_lock_nested+0x2c/0x140 [ 1362.690048][T20243] _task_rq_lock+0xcf/0x500 [ 1362.690061][T20243] cgroup_move_task+0x81/0x320 [ 1362.690077][T20243] css_set_move_task+0x285/0x600 [ 1362.690090][T20243] cgroup_post_fork+0x1f9/0x9a0 [ 1362.690110][T20243] copy_process+0x64da/0x8370 [ 1362.690131][T20243] kernel_clone+0x176/0x9d0 [ 1362.690142][T20243] rest_init+0xa3/0x2e0 [ 1362.690158][T20243] start_kernel+0x48e/0x490 [ 1362.690172][T20243] x86_64_start_reservations+0x24/0x30 [ 1362.690187][T20243] x86_64_start_kernel+0x12b/0x130 [ 1362.690202][T20243] common_startup_64+0x13e/0x158 [ 1362.690216][T20243] [ 1362.690216][T20243] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1362.690233][T20243] lock_acquire+0x1b9/0x370 [ 1362.690251][T20243] _raw_spin_lock_irq_disable+0x5e/0x90 [ 1362.690271][T20243] try_to_wake_up+0xc1/0x1c90 [ 1362.690283][T20243] __queue_work+0x4a6/0x1370 [ 1362.690299][T20243] queue_work_on+0x1a9/0x1e0 [ 1362.690316][T20243] rpm_suspend+0xf6b/0x1220 [ 1362.690330][T20243] rpm_idle+0x60c/0x790 [ 1362.690342][T20243] __pm_runtime_idle+0xba/0x1a0 [ 1362.690356][T20243] __device_attach+0x37e/0x4d0 [ 1362.690369][T20243] device_initial_probe+0xaf/0xd0 [ 1362.690383][T20243] bus_probe_device+0x64/0x160 [ 1362.690402][T20243] device_add+0x121d/0x1970 [ 1362.690416][T20243] serial_base_port_add+0x227/0x2b0 [ 1362.690431][T20243] serial_core_register_port+0x13c/0x16f0 [ 1362.690445][T20243] serial8250_register_8250_port+0x15af/0x2330 [ 1362.690463][T20243] serial_pnp_probe+0x436/0x930 [ 1362.690480][T20243] pnp_device_probe+0x2b3/0x4a0 [ 1362.690494][T20243] really_probe+0x241/0xa60 [ 1362.690506][T20243] __driver_probe_device+0x210/0x460 [ 1362.690518][T20243] driver_probe_device+0x4a/0x140 [ 1362.690536][T20243] __driver_attach+0x21f/0x5b0 [ 1362.690549][T20243] bus_for_each_dev+0x13e/0x1d0 [ 1362.690566][T20243] bus_add_driver+0x305/0x5b0 [ 1362.690585][T20243] driver_register+0x1e2/0x360 [ 1362.690599][T20243] serial8250_init+0xcc/0x1c0 [ 1362.690611][T20243] do_one_initcall+0x11c/0x6f0 [ 1362.690624][T20243] kernel_init_freeable+0x6ea/0x7b0 [ 1362.690638][T20243] kernel_init+0x21/0x1e0 [ 1362.690654][T20243] ret_from_fork+0x730/0xd60 [ 1362.690674][T20243] ret_from_fork_asm+0x1a/0x30 [ 1362.690686][T20243] [ 1362.690686][T20243] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 1362.690703][T20243] lock_acquire+0x1b9/0x370 [ 1362.690722][T20243] _raw_spin_lock_irqsave+0x3a/0x60 [ 1362.690741][T20243] __pm_runtime_resume+0xa9/0x170 [ 1362.690755][T20243] __uart_start+0x1b0/0x510 [ 1362.690773][T20243] uart_write+0x211/0xb20 [ 1362.690785][T20243] n_tty_write+0x431/0x1160 [ 1362.690799][T20243] file_tty_write.isra.0+0x4d2/0x890 [ 1362.690811][T20243] redirected_tty_write+0xd4/0x120 [ 1362.690823][T20243] vfs_write+0x6af/0x1050 [ 1362.690839][T20243] ksys_write+0x12a/0x250 [ 1362.690854][T20243] do_syscall_64+0x123/0x790 [ 1362.690867][T20243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.690881][T20243] [ 1362.690881][T20243] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1362.690898][T20243] lock_acquire+0x1b9/0x370 [ 1362.690916][T20243] _raw_spin_lock_irqsave+0x3a/0x60 [ 1362.690936][T20243] serial8250_console_write+0x177/0x1a50 [ 1362.690951][T20243] console_flush_one_record+0x78e/0xf10 [ 1362.690966][T20243] console_unlock+0x103/0x260 [ 1362.690979][T20243] vprintk_emit+0x407/0x6b0 [ 1362.690993][T20243] _printk+0xcf/0x110 [ 1362.691005][T20243] register_console.cold+0xc0/0x248 [ 1362.691018][T20243] univ8250_console_init+0x6f/0x80 [ 1362.691030][T20243] console_init+0x3d5/0x5b0 [ 1362.691048][T20243] start_kernel+0x314/0x490 [ 1362.691061][T20243] x86_64_start_reservations+0x24/0x30 [ 1362.691076][T20243] x86_64_start_kernel+0x12b/0x130 [ 1362.691091][T20243] common_startup_64+0x13e/0x158 [ 1362.691105][T20243] [ 1362.691105][T20243] -> #0 (console_owner){-.-.}-{0:0}: [ 1362.691121][T20243] check_prev_add+0xeb/0xe60 [ 1362.691139][T20243] __lock_acquire+0x1492/0x1ec0 [ 1362.691158][T20243] lock_acquire+0x1b9/0x370 [ 1362.691176][T20243] console_lock_spinning_enable+0x72/0x80 [ 1362.691190][T20243] console_flush_one_record+0x737/0xf10 [ 1362.691205][T20243] console_unlock+0x103/0x260 [ 1362.691218][T20243] vprintk_emit+0x407/0x6b0 [ 1362.691232][T20243] _printk+0xcf/0x110 [ 1362.691243][T20243] __report_bug.cold+0x34/0x141 [ 1362.691260][T20243] report_bug+0xb3/0x220 [ 1362.691273][T20243] handle_bug+0x16a/0x2a0 [ 1362.691288][T20243] exc_invalid_op+0x17/0x50 [ 1362.691303][T20243] asm_exc_invalid_op+0x1a/0x20 [ 1362.691315][T20243] update_rq_clock+0x40a/0xd20 [ 1362.691327][T20243] __schedule+0x1c69/0x6920 [ 1362.691347][T20243] preempt_schedule_irq+0x4e/0x90 [ 1362.691359][T20243] irqentry_exit+0x205/0xa10 [ 1362.691371][T20243] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1362.691385][T20243] lock_release+0x40/0x310 [ 1362.691404][T20243] __update_page_owner_handle+0x390/0x530 [ 1362.691425][T20243] __set_page_owner+0x11f/0x540 [ 1362.691436][T20243] post_alloc_hook+0xfd/0x120 [ 1362.691450][T20243] get_page_from_freelist+0x110d/0x35b0 [ 1362.691466][T20243] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1362.691482][T20243] alloc_pages_mpol+0x201/0x550 [ 1362.691503][T20243] folio_alloc_mpol_noprof+0x36/0x260 [ 1362.691516][T20243] shmem_alloc_folio+0x135/0x160 [ 1362.691541][T20243] shmem_alloc_and_add_folio+0x371/0xd40 [ 1362.691556][T20243] shmem_get_folio_gfp+0x75b/0x1980 [ 1362.691570][T20243] shmem_write_begin+0x1a4/0x420 [ 1362.691584][T20243] generic_perform_write+0x292/0xa40 [ 1362.691604][T20243] shmem_file_write_iter+0x10e/0x140 [ 1362.691622][T20243] __kernel_write_iter+0x2ac/0x930 [ 1362.691638][T20243] dump_user_range+0x3f9/0xad0 [ 1362.691654][T20243] elf_core_dump+0x2d68/0x3d20 [ 1362.691671][T20243] vfs_coredump+0x281a/0x54a0 [ 1362.691686][T20243] get_signal+0x1f2a/0x21e0 [ 1362.691706][T20243] arch_do_signal_or_restart+0x91/0x7e0 [ 1362.691723][T20243] irqentry_exit+0x402/0xa10 [ 1362.691735][T20243] asm_exc_page_fault+0x26/0x30 [ 1362.691748][T20243] [ 1362.691748][T20243] other info that might help us debug this: [ 1362.691748][T20243] [ 1362.691752][T20243] Chain exists of: [ 1362.691752][T20243] console_owner --> &p->pi_lock --> &rq->__lock [ 1362.691752][T20243] [ 1362.691772][T20243] Possible unsafe locking scenario: [ 1362.691772][T20243] [ 1362.691776][T20243] CPU0 CPU1 [ 1362.691780][T20243] ---- ---- [ 1362.691784][T20243] lock(&rq->__lock); [ 1362.691792][T20243] lock(&p->pi_lock); [ 1362.691801][T20243] lock(&rq->__lock); [ 1362.691811][T20243] lock(console_owner); [ 1362.691819][T20243] [ 1362.691819][T20243] *** DEADLOCK *** [ 1362.691819][T20243] [ 1362.691822][T20243] locks held by syz.3.3377/20243: 6, last CPU#0: [ 1362.691832][T20243] #0: ffff8880287b2460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 1362.691872][T20243] #1: ffff8880478194a0 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 1362.691911][T20243] #2: ffffffff8ede9d40 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_handle+0x63/0x530 [ 1362.691950][T20243] #3: ffff8880b843b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1362.691980][T20243] #4: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 1362.692008][T20243] #5: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 1362.692041][T20243] [ 1362.692041][T20243] stack backtrace: [ 1362.692049][T20243] CPU: 0 UID: 0 PID: 20243 Comm: syz.3.3377 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.692069][T20243] Tainted: [L]=SOFTLOCKUP [ 1362.692074][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1362.692083][T20243] Call Trace: [ 1362.692088][T20243] [ 1362.692093][T20243] dump_stack_lvl+0x100/0x190 [ 1362.692112][T20243] print_circular_bug.cold+0x178/0x1be [ 1362.692134][T20243] check_noncircular+0x146/0x160 [ 1362.692155][T20243] check_prev_add+0xeb/0xe60 [ 1362.692175][T20243] __lock_acquire+0x1492/0x1ec0 [ 1362.692198][T20243] lock_acquire+0x1b9/0x370 [ 1362.692217][T20243] ? console_lock_spinning_enable+0x61/0x80 [ 1362.692233][T20243] ? console_lock_spinning_enable+0x4a/0x80 [ 1362.692250][T20243] console_lock_spinning_enable+0x72/0x80 [ 1362.692264][T20243] ? console_lock_spinning_enable+0x61/0x80 [ 1362.692279][T20243] console_flush_one_record+0x737/0xf10 [ 1362.692296][T20243] ? __pfx_console_flush_one_record+0x10/0x10 [ 1362.692315][T20243] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1362.692333][T20243] console_unlock+0x103/0x260 [ 1362.692348][T20243] ? __pfx_console_unlock+0x10/0x10 [ 1362.692364][T20243] ? do_raw_spin_unlock+0x145/0x1e0 [ 1362.692379][T20243] ? _printk+0xcf/0x110 [ 1362.692393][T20243] vprintk_emit+0x407/0x6b0 [ 1362.692409][T20243] ? __pfx_vprintk_emit+0x10/0x10 [ 1362.692424][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1362.692446][T20243] _printk+0xcf/0x110 [ 1362.692458][T20243] ? __pfx__printk+0x10/0x10 [ 1362.692472][T20243] ? lock_acquire+0x1b9/0x370 [ 1362.692492][T20243] ? find_held_lock+0x2b/0x80 [ 1362.692508][T20243] ? __report_bug.cold+0x24/0x141 [ 1362.692530][T20243] __report_bug.cold+0x34/0x141 [ 1362.692547][T20243] ? update_rq_clock+0x40a/0xd20 [ 1362.692561][T20243] ? __pfx___report_bug+0x10/0x10 [ 1362.692575][T20243] ? lapic_next_event+0x10/0x20 [ 1362.692587][T20243] ? clockevents_program_event+0x1ef/0x820 [ 1362.692605][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1362.692626][T20243] ? update_rq_clock+0x40a/0xd20 [ 1362.692640][T20243] report_bug+0xb3/0x220 [ 1362.692653][T20243] ? update_rq_clock+0x40a/0xd20 [ 1362.692667][T20243] handle_bug+0x16a/0x2a0 [ 1362.692683][T20243] exc_invalid_op+0x17/0x50 [ 1362.692699][T20243] asm_exc_invalid_op+0x1a/0x20 [ 1362.692712][T20243] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 1362.692727][T20243] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 1362.692741][T20243] RSP: 0018:ffffc900052561b8 EFLAGS: 00010046 [ 1362.692752][T20243] RAX: 0000000000000000 RBX: ffff8880b853b900 RCX: 0000000000000001 [ 1362.692761][T20243] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 1362.692770][T20243] RBP: ffffc90005256358 R08: 0000000000000001 R09: 0000000000000001 [ 1362.692779][T20243] R10: ffff8880b843c498 R11: 0000000000000000 R12: ffffffff91438a84 [ 1362.692788][T20243] R13: ffff8880b853c7e0 R14: ffff8880b853b900 R15: 0000000000000001 [ 1362.692801][T20243] ? update_rq_clock+0x9c/0xd20 [ 1362.692816][T20243] __schedule+0x1c69/0x6920 [ 1362.692841][T20243] ? __pfx___schedule+0x10/0x10 [ 1362.692865][T20243] preempt_schedule_irq+0x4e/0x90 [ 1362.692878][T20243] irqentry_exit+0x205/0xa10 [ 1362.692893][T20243] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1362.692908][T20243] RIP: 0010:lock_release+0x40/0x310 [ 1362.692928][T20243] Code: 2d cd 86 a1 12 48 89 6c 24 10 48 89 f5 0f 1f 44 00 00 65 8b 05 e9 86 a1 12 83 f8 07 0f 87 07 02 00 00 48 0f a3 05 70 ff 5c 0f <0f> 82 02 02 00 00 44 8b 05 17 31 5d 0f 45 85 c0 0f 84 48 01 00 00 [ 1362.692941][T20243] RSP: 0018:ffffc90005256478 EFLAGS: 00000297 [ 1362.692952][T20243] RAX: 0000000000000000 RBX: ffffffff8ede9d40 RCX: 0000000000000000 [ 1362.692960][T20243] RDX: ffff888033fa2580 RSI: ffffffff828890fb RDI: ffffffff8ede9d40 [ 1362.692970][T20243] RBP: ffffffff828890fb R08: 0000000000000001 R09: 0000000000000000 [ 1362.692978][T20243] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1362.692987][T20243] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88801e5c4d50 [ 1362.692996][T20243] ? __update_page_owner_handle+0x38b/0x530 [ 1362.693019][T20243] ? __update_page_owner_handle+0x38b/0x530 [ 1362.693044][T20243] __update_page_owner_handle+0x390/0x530 [ 1362.693068][T20243] __set_page_owner+0x11f/0x540 [ 1362.693082][T20243] ? __pfx___set_page_owner+0x10/0x10 [ 1362.693095][T20243] ? bad_range+0x257/0x3f0 [ 1362.693115][T20243] ? lockdep_hardirqs_on+0x7d/0x110 [ 1362.693129][T20243] ? get_page_from_freelist+0x10e6/0x35b0 [ 1362.693147][T20243] post_alloc_hook+0xfd/0x120 [ 1362.693162][T20243] get_page_from_freelist+0x110d/0x35b0 [ 1362.693180][T20243] ? find_held_lock+0x2b/0x80 [ 1362.693200][T20243] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1362.693218][T20243] ? prepare_alloc_pages+0x1f0/0x5b0 [ 1362.693241][T20243] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1362.693260][T20243] ? lock_acquire+0x1b9/0x370 [ 1362.693280][T20243] ? find_held_lock+0x2b/0x80 [ 1362.693296][T20243] ? page_table_check_set+0x30f/0x580 [ 1362.693319][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1362.693339][T20243] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1362.693358][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1362.693379][T20243] ? do_raw_spin_lock+0x128/0x260 [ 1362.693393][T20243] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1362.693407][T20243] ? find_held_lock+0x2b/0x80 [ 1362.693425][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1362.693445][T20243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1362.693467][T20243] ? policy_nodemask+0xed/0x4f0 [ 1362.693488][T20243] alloc_pages_mpol+0x201/0x550 [ 1362.693510][T20243] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1362.693536][T20243] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1362.693552][T20243] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1362.693568][T20243] folio_alloc_mpol_noprof+0x36/0x260 [ 1362.693583][T20243] shmem_alloc_folio+0x135/0x160 [ 1362.693605][T20243] shmem_alloc_and_add_folio+0x371/0xd40 [ 1362.693622][T20243] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1362.693639][T20243] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1362.693657][T20243] shmem_get_folio_gfp+0x75b/0x1980 [ 1362.693672][T20243] ? do_raw_spin_lock+0x128/0x260 [ 1362.693687][T20243] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1362.693704][T20243] ? pte_offset_map_lock+0x174/0x320 [ 1362.693723][T20243] ? vm_normal_page+0x1d5/0x390 [ 1362.693743][T20243] shmem_write_begin+0x1a4/0x420 [ 1362.693760][T20243] ? __pfx_shmem_write_begin+0x10/0x10 [ 1362.693776][T20243] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1362.693796][T20243] generic_perform_write+0x292/0xa40 [ 1362.693816][T20243] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1362.693837][T20243] ? __pfx_generic_perform_write+0x10/0x10 [ 1362.693858][T20243] ? file_update_time_flags+0x38c/0x520 [ 1362.693874][T20243] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1362.693893][T20243] shmem_file_write_iter+0x10e/0x140 [ 1362.693911][T20243] __kernel_write_iter+0x2ac/0x930 [ 1362.693929][T20243] ? __pfx___kernel_write_iter+0x10/0x10 [ 1362.693946][T20243] ? __up_read+0x333/0x980 [ 1362.693960][T20243] ? dump_user_range+0x65e/0xad0 [ 1362.693979][T20243] dump_user_range+0x3f9/0xad0 [ 1362.693997][T20243] ? __pfx_dump_user_range+0x10/0x10 [ 1362.694016][T20243] ? __pfx_writenote+0x10/0x10 [ 1362.694035][T20243] ? elf_core_dump+0x1f25/0x3d20 [ 1362.694054][T20243] elf_core_dump+0x2d68/0x3d20 [ 1362.694076][T20243] ? __pfx_elf_core_dump+0x10/0x10 [ 1362.694094][T20243] ? kasan_save_stack+0x3f/0x50 [ 1362.694113][T20243] ? kasan_save_stack+0x30/0x50 [ 1362.694131][T20243] ? kasan_save_track+0x14/0x30 [ 1362.694149][T20243] ? __kasan_kmalloc+0xaa/0xb0 [ 1362.694168][T20243] ? vfs_coredump+0x21f6/0x54a0 [ 1362.694184][T20243] ? get_signal+0x1f2a/0x21e0 [ 1362.694204][T20243] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1362.694223][T20243] ? 0xffffffffff600000 [ 1362.694246][T20243] ? vfs_coredump+0x281a/0x54a0 [ 1362.694262][T20243] vfs_coredump+0x281a/0x54a0 [ 1362.694281][T20243] ? __pfx_vfs_coredump+0x10/0x10 [ 1362.694298][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1362.694319][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1362.694340][T20243] ? lock_acquire+0x1b9/0x370 [ 1362.694362][T20243] ? lock_acquire+0x1b9/0x370 [ 1362.694383][T20243] ? bpf_ksym_find+0x128/0x1c0 [ 1362.694400][T20243] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1362.694421][T20243] ? arch_stack_walk+0xa6/0xf0 [ 1362.694438][T20243] ? __sigqueue_free+0xbe/0x2a0 [ 1362.694454][T20243] ? stack_trace_save+0x8e/0xc0 [ 1362.694471][T20243] ? __pfx_stack_trace_save+0x10/0x10 [ 1362.694488][T20243] ? stack_depot_save_flags+0x27/0x9f0 [ 1362.694505][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1362.694542][T20243] ? proc_coredump_connector+0x2d3/0x4f0 [ 1362.694562][T20243] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1362.694584][T20243] ? rcu_is_watching+0x13/0xc0 [ 1362.694600][T20243] get_signal+0x1f2a/0x21e0 [ 1362.694624][T20243] ? __pfx_get_signal+0x10/0x10 [ 1362.694647][T20243] arch_do_signal_or_restart+0x91/0x7e0 [ 1362.694664][T20243] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1362.694687][T20243] irqentry_exit+0x402/0xa10 [ 1362.694702][T20243] asm_exc_page_fault+0x26/0x30 [ 1362.694715][T20243] RIP: 0033:0x7f74aed9e0e1 [ 1362.694726][T20243] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1362.694739][T20243] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1362.694749][T20243] RAX: 0000000000000000 RBX: 00007f74af025fa0 RCX: 00007f74aed9e0d9 [ 1362.694758][T20243] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1362.694767][T20243] RBP: 00007f74aee35024 R08: 0000000000000000 R09: 0000000000000000 [ 1362.694776][T20243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1362.694784][T20243] R13: 00007f74af026038 R14: 00007f74af025fa0 R15: 00007fffb15c8978 [ 1362.694798][T20243] [ 1364.477758][T20243] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 1364.477772][T20243] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#0: syz.3.3377/20243 [ 1364.495676][T20243] Modules linked in: [ 1364.499566][T20243] CPU: 0 UID: 0 PID: 20243 Comm: syz.3.3377 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.510478][T20243] Tainted: [L]=SOFTLOCKUP [ 1364.514777][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1364.524809][T20243] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 1364.530335][T20243] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 1364.549927][T20243] RSP: 0018:ffffc900052561b8 EFLAGS: 00010046 [ 1364.555970][T20243] RAX: 0000000000000000 RBX: ffff8880b853b900 RCX: 0000000000000001 [ 1364.563918][T20243] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 1364.571880][T20243] RBP: ffffc90005256358 R08: 0000000000000001 R09: 0000000000000001 [ 1364.579832][T20243] R10: ffff8880b843c498 R11: 0000000000000000 R12: ffffffff91438a84 [ 1364.587780][T20243] R13: ffff8880b853c7e0 R14: ffff8880b853b900 R15: 0000000000000001 [ 1364.595728][T20243] FS: 00007f74afd1b6c0(0000) GS:ffff888123ba2000(0000) knlGS:0000000000000000 [ 1364.604639][T20243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1364.611202][T20243] CR2: 00007f9af61eb7c0 CR3: 00000000759e9000 CR4: 00000000003526f0 [ 1364.619153][T20243] DR0: 0000000000000000 DR1: 6085f59d27ae5551 DR2: 0000000000000000 [ 1364.627101][T20243] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1364.635053][T20243] Call Trace: [ 1364.638310][T20243] [ 1364.641225][T20243] __schedule+0x1c69/0x6920 [ 1364.645721][T20243] ? __pfx___schedule+0x10/0x10 [ 1364.650558][T20243] preempt_schedule_irq+0x4e/0x90 [ 1364.655562][T20243] irqentry_exit+0x205/0xa10 [ 1364.660133][T20243] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1364.666093][T20243] RIP: 0010:lock_release+0x40/0x310 [ 1364.671276][T20243] Code: 2d cd 86 a1 12 48 89 6c 24 10 48 89 f5 0f 1f 44 00 00 65 8b 05 e9 86 a1 12 83 f8 07 0f 87 07 02 00 00 48 0f a3 05 70 ff 5c 0f <0f> 82 02 02 00 00 44 8b 05 17 31 5d 0f 45 85 c0 0f 84 48 01 00 00 [ 1364.690862][T20243] RSP: 0018:ffffc90005256478 EFLAGS: 00000297 [ 1364.696904][T20243] RAX: 0000000000000000 RBX: ffffffff8ede9d40 RCX: 0000000000000000 [ 1364.704853][T20243] RDX: ffff888033fa2580 RSI: ffffffff828890fb RDI: ffffffff8ede9d40 [ 1364.712800][T20243] RBP: ffffffff828890fb R08: 0000000000000001 R09: 0000000000000000 [ 1364.720750][T20243] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1364.728698][T20243] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88801e5c4d50 [ 1364.736648][T20243] ? __update_page_owner_handle+0x38b/0x530 [ 1364.742533][T20243] ? __update_page_owner_handle+0x38b/0x530 [ 1364.748425][T20243] __update_page_owner_handle+0x390/0x530 [ 1364.754133][T20243] __set_page_owner+0x11f/0x540 [ 1364.758964][T20243] ? __pfx___set_page_owner+0x10/0x10 [ 1364.764312][T20243] ? bad_range+0x257/0x3f0 [ 1364.768713][T20243] ? lockdep_hardirqs_on+0x7d/0x110 [ 1364.773891][T20243] ? get_page_from_freelist+0x10e6/0x35b0 [ 1364.779607][T20243] post_alloc_hook+0xfd/0x120 [ 1364.784266][T20243] get_page_from_freelist+0x110d/0x35b0 [ 1364.789793][T20243] ? find_held_lock+0x2b/0x80 [ 1364.794455][T20243] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1364.800328][T20243] ? prepare_alloc_pages+0x1f0/0x5b0 [ 1364.805599][T20243] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1364.811474][T20243] ? lock_acquire+0x1b9/0x370 [ 1364.816134][T20243] ? find_held_lock+0x2b/0x80 [ 1364.820790][T20243] ? page_table_check_set+0x30f/0x580 [ 1364.826148][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1364.831072][T20243] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1364.837382][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1364.842304][T20243] ? do_raw_spin_lock+0x128/0x260 [ 1364.847306][T20243] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1364.852656][T20243] ? find_held_lock+0x2b/0x80 [ 1364.857315][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1364.862238][T20243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1364.868117][T20243] ? policy_nodemask+0xed/0x4f0 [ 1364.872955][T20243] alloc_pages_mpol+0x201/0x550 [ 1364.877792][T20243] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1364.883149][T20243] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1364.889022][T20243] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1364.894895][T20243] folio_alloc_mpol_noprof+0x36/0x260 [ 1364.900247][T20243] shmem_alloc_folio+0x135/0x160 [ 1364.905170][T20243] shmem_alloc_and_add_folio+0x371/0xd40 [ 1364.910784][T20243] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1364.916918][T20243] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1364.922880][T20243] shmem_get_folio_gfp+0x75b/0x1980 [ 1364.928056][T20243] ? do_raw_spin_lock+0x128/0x260 [ 1364.933059][T20243] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1364.938673][T20243] ? pte_offset_map_lock+0x174/0x320 [ 1364.943940][T20243] ? vm_normal_page+0x1d5/0x390 [ 1364.948776][T20243] shmem_write_begin+0x1a4/0x420 [ 1364.953693][T20243] ? __pfx_shmem_write_begin+0x10/0x10 [ 1364.959131][T20243] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1364.965965][T20243] generic_perform_write+0x292/0xa40 [ 1364.971234][T20243] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1364.977024][T20243] ? __pfx_generic_perform_write+0x10/0x10 [ 1364.982814][T20243] ? file_update_time_flags+0x38c/0x520 [ 1364.988339][T20243] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1364.994129][T20243] shmem_file_write_iter+0x10e/0x140 [ 1364.999399][T20243] __kernel_write_iter+0x2ac/0x930 [ 1365.004492][T20243] ? __pfx___kernel_write_iter+0x10/0x10 [ 1365.010109][T20243] ? __up_read+0x333/0x980 [ 1365.014506][T20243] ? dump_user_range+0x65e/0xad0 [ 1365.019444][T20243] dump_user_range+0x3f9/0xad0 [ 1365.024191][T20243] ? __pfx_dump_user_range+0x10/0x10 [ 1365.029460][T20243] ? __pfx_writenote+0x10/0x10 [ 1365.034207][T20243] ? elf_core_dump+0x1f25/0x3d20 [ 1365.039127][T20243] elf_core_dump+0x2d68/0x3d20 [ 1365.043877][T20243] ? __pfx_elf_core_dump+0x10/0x10 [ 1365.048972][T20243] ? kasan_save_stack+0x3f/0x50 [ 1365.053805][T20243] ? kasan_save_stack+0x30/0x50 [ 1365.058649][T20243] ? kasan_save_track+0x14/0x30 [ 1365.063482][T20243] ? __kasan_kmalloc+0xaa/0xb0 [ 1365.068234][T20243] ? vfs_coredump+0x21f6/0x54a0 [ 1365.073066][T20243] ? get_signal+0x1f2a/0x21e0 [ 1365.077728][T20243] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1365.083431][T20243] ? 0xffffffffff600000 [ 1365.087576][T20243] ? vfs_coredump+0x281a/0x54a0 [ 1365.092405][T20243] vfs_coredump+0x281a/0x54a0 [ 1365.097066][T20243] ? __pfx_vfs_coredump+0x10/0x10 [ 1365.102072][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.106997][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.111919][T20243] ? lock_acquire+0x1b9/0x370 [ 1365.116583][T20243] ? lock_acquire+0x1b9/0x370 [ 1365.121244][T20243] ? bpf_ksym_find+0x128/0x1c0 [ 1365.125988][T20243] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1365.132127][T20243] ? arch_stack_walk+0xa6/0xf0 [ 1365.136872][T20243] ? __sigqueue_free+0xbe/0x2a0 [ 1365.141702][T20243] ? stack_trace_save+0x8e/0xc0 [ 1365.146536][T20243] ? __pfx_stack_trace_save+0x10/0x10 [ 1365.151889][T20243] ? stack_depot_save_flags+0x27/0x9f0 [ 1365.157332][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.162266][T20243] ? proc_coredump_connector+0x2d3/0x4f0 [ 1365.167883][T20243] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1365.173847][T20243] ? rcu_is_watching+0x13/0xc0 [ 1365.178593][T20243] get_signal+0x1f2a/0x21e0 [ 1365.183085][T20243] ? __pfx_get_signal+0x10/0x10 [ 1365.187923][T20243] arch_do_signal_or_restart+0x91/0x7e0 [ 1365.193450][T20243] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1365.199590][T20243] irqentry_exit+0x402/0xa10 [ 1365.204159][T20243] asm_exc_page_fault+0x26/0x30 [ 1365.208989][T20243] RIP: 0033:0x7f74aed9e0e1 [ 1365.213384][T20243] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1365.232968][T20243] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1365.239010][T20243] RAX: 0000000000000000 RBX: 00007f74af025fa0 RCX: 00007f74aed9e0d9 [ 1365.246958][T20243] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1365.254906][T20243] RBP: 00007f74aee35024 R08: 0000000000000000 R09: 0000000000000000 [ 1365.262852][T20243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1365.270813][T20243] R13: 00007f74af026038 R14: 00007f74af025fa0 R15: 00007fffb15c8978 [ 1365.278766][T20243] [ 1365.281765][T20243] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1365.289022][T20243] CPU: 0 UID: 0 PID: 20243 Comm: syz.3.3377 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.299932][T20243] Tainted: [L]=SOFTLOCKUP [ 1365.304231][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1365.314264][T20243] Call Trace: [ 1365.317523][T20243] [ 1365.320432][T20243] dump_stack_lvl+0x100/0x190 [ 1365.325095][T20243] vpanic+0x553/0x970 [ 1365.329056][T20243] ? __pfx_vpanic+0x10/0x10 [ 1365.333535][T20243] ? lock_release+0x24d/0x310 [ 1365.338197][T20243] panic+0xd1/0xe0 [ 1365.341897][T20243] ? __pfx_panic+0x10/0x10 [ 1365.346296][T20243] check_panic_on_warn.cold+0x19/0x34 [ 1365.351648][T20243] ? update_rq_clock+0x40a/0xd20 [ 1365.356564][T20243] __warn.cold+0x191/0x318 [ 1365.360960][T20243] __report_bug+0x30f/0x440 [ 1365.365441][T20243] ? update_rq_clock+0x40a/0xd20 [ 1365.370358][T20243] ? __pfx___report_bug+0x10/0x10 [ 1365.375360][T20243] ? lapic_next_event+0x10/0x20 [ 1365.380187][T20243] ? clockevents_program_event+0x1ef/0x820 [ 1365.385976][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.390899][T20243] ? update_rq_clock+0x40a/0xd20 [ 1365.395817][T20243] report_bug+0xb3/0x220 [ 1365.400038][T20243] ? update_rq_clock+0x40a/0xd20 [ 1365.404953][T20243] handle_bug+0x16a/0x2a0 [ 1365.409263][T20243] exc_invalid_op+0x17/0x50 [ 1365.413747][T20243] asm_exc_invalid_op+0x1a/0x20 [ 1365.418574][T20243] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 1365.424102][T20243] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 1365.443686][T20243] RSP: 0018:ffffc900052561b8 EFLAGS: 00010046 [ 1365.449729][T20243] RAX: 0000000000000000 RBX: ffff8880b853b900 RCX: 0000000000000001 [ 1365.457691][T20243] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 1365.465642][T20243] RBP: ffffc90005256358 R08: 0000000000000001 R09: 0000000000000001 [ 1365.473590][T20243] R10: ffff8880b843c498 R11: 0000000000000000 R12: ffffffff91438a84 [ 1365.481540][T20243] R13: ffff8880b853c7e0 R14: ffff8880b853b900 R15: 0000000000000001 [ 1365.489493][T20243] ? update_rq_clock+0x9c/0xd20 [ 1365.494327][T20243] __schedule+0x1c69/0x6920 [ 1365.498820][T20243] ? __pfx___schedule+0x10/0x10 [ 1365.503658][T20243] preempt_schedule_irq+0x4e/0x90 [ 1365.508660][T20243] irqentry_exit+0x205/0xa10 [ 1365.513230][T20243] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1365.519189][T20243] RIP: 0010:lock_release+0x40/0x310 [ 1365.524378][T20243] Code: 2d cd 86 a1 12 48 89 6c 24 10 48 89 f5 0f 1f 44 00 00 65 8b 05 e9 86 a1 12 83 f8 07 0f 87 07 02 00 00 48 0f a3 05 70 ff 5c 0f <0f> 82 02 02 00 00 44 8b 05 17 31 5d 0f 45 85 c0 0f 84 48 01 00 00 [ 1365.543964][T20243] RSP: 0018:ffffc90005256478 EFLAGS: 00000297 [ 1365.550007][T20243] RAX: 0000000000000000 RBX: ffffffff8ede9d40 RCX: 0000000000000000 [ 1365.557956][T20243] RDX: ffff888033fa2580 RSI: ffffffff828890fb RDI: ffffffff8ede9d40 [ 1365.565904][T20243] RBP: ffffffff828890fb R08: 0000000000000001 R09: 0000000000000000 [ 1365.573855][T20243] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1365.581803][T20243] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88801e5c4d50 [ 1365.589764][T20243] ? __update_page_owner_handle+0x38b/0x530 [ 1365.595645][T20243] ? __update_page_owner_handle+0x38b/0x530 [ 1365.601528][T20243] __update_page_owner_handle+0x390/0x530 [ 1365.607235][T20243] __set_page_owner+0x11f/0x540 [ 1365.612063][T20243] ? __pfx___set_page_owner+0x10/0x10 [ 1365.617413][T20243] ? bad_range+0x257/0x3f0 [ 1365.621816][T20243] ? lockdep_hardirqs_on+0x7d/0x110 [ 1365.626993][T20243] ? get_page_from_freelist+0x10e6/0x35b0 [ 1365.632694][T20243] post_alloc_hook+0xfd/0x120 [ 1365.637351][T20243] get_page_from_freelist+0x110d/0x35b0 [ 1365.642879][T20243] ? find_held_lock+0x2b/0x80 [ 1365.647542][T20243] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1365.653416][T20243] ? prepare_alloc_pages+0x1f0/0x5b0 [ 1365.658687][T20243] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1365.664575][T20243] ? lock_acquire+0x1b9/0x370 [ 1365.669236][T20243] ? find_held_lock+0x2b/0x80 [ 1365.673895][T20243] ? page_table_check_set+0x30f/0x580 [ 1365.679254][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.684177][T20243] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1365.690487][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.695414][T20243] ? do_raw_spin_lock+0x128/0x260 [ 1365.700416][T20243] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1365.705765][T20243] ? find_held_lock+0x2b/0x80 [ 1365.710426][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.715348][T20243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1365.721228][T20243] ? policy_nodemask+0xed/0x4f0 [ 1365.726065][T20243] alloc_pages_mpol+0x201/0x550 [ 1365.730901][T20243] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1365.736259][T20243] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1365.742130][T20243] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1365.748004][T20243] folio_alloc_mpol_noprof+0x36/0x260 [ 1365.753356][T20243] shmem_alloc_folio+0x135/0x160 [ 1365.758281][T20243] shmem_alloc_and_add_folio+0x371/0xd40 [ 1365.763895][T20243] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1365.770031][T20243] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1365.775993][T20243] shmem_get_folio_gfp+0x75b/0x1980 [ 1365.781173][T20243] ? do_raw_spin_lock+0x128/0x260 [ 1365.786176][T20243] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1365.791790][T20243] ? pte_offset_map_lock+0x174/0x320 [ 1365.797057][T20243] ? vm_normal_page+0x1d5/0x390 [ 1365.801892][T20243] shmem_write_begin+0x1a4/0x420 [ 1365.806812][T20243] ? __pfx_shmem_write_begin+0x10/0x10 [ 1365.812250][T20243] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1365.819082][T20243] generic_perform_write+0x292/0xa40 [ 1365.824352][T20243] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1365.830155][T20243] ? __pfx_generic_perform_write+0x10/0x10 [ 1365.835949][T20243] ? file_update_time_flags+0x38c/0x520 [ 1365.841475][T20243] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1365.847268][T20243] shmem_file_write_iter+0x10e/0x140 [ 1365.852539][T20243] __kernel_write_iter+0x2ac/0x930 [ 1365.857632][T20243] ? __pfx___kernel_write_iter+0x10/0x10 [ 1365.863252][T20243] ? __up_read+0x333/0x980 [ 1365.867649][T20243] ? dump_user_range+0x65e/0xad0 [ 1365.872570][T20243] dump_user_range+0x3f9/0xad0 [ 1365.877316][T20243] ? __pfx_dump_user_range+0x10/0x10 [ 1365.882584][T20243] ? __pfx_writenote+0x10/0x10 [ 1365.887329][T20243] ? elf_core_dump+0x1f25/0x3d20 [ 1365.892250][T20243] elf_core_dump+0x2d68/0x3d20 [ 1365.897001][T20243] ? __pfx_elf_core_dump+0x10/0x10 [ 1365.902094][T20243] ? kasan_save_stack+0x3f/0x50 [ 1365.906928][T20243] ? kasan_save_stack+0x30/0x50 [ 1365.911760][T20243] ? kasan_save_track+0x14/0x30 [ 1365.916597][T20243] ? __kasan_kmalloc+0xaa/0xb0 [ 1365.921345][T20243] ? vfs_coredump+0x21f6/0x54a0 [ 1365.926175][T20243] ? get_signal+0x1f2a/0x21e0 [ 1365.930842][T20243] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1365.936548][T20243] ? 0xffffffffff600000 [ 1365.940693][T20243] ? vfs_coredump+0x281a/0x54a0 [ 1365.945526][T20243] vfs_coredump+0x281a/0x54a0 [ 1365.950186][T20243] ? __pfx_vfs_coredump+0x10/0x10 [ 1365.955193][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.960116][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1365.965039][T20243] ? lock_acquire+0x1b9/0x370 [ 1365.969705][T20243] ? lock_acquire+0x1b9/0x370 [ 1365.974367][T20243] ? bpf_ksym_find+0x128/0x1c0 [ 1365.979111][T20243] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1365.985248][T20243] ? arch_stack_walk+0xa6/0xf0 [ 1365.989994][T20243] ? __sigqueue_free+0xbe/0x2a0 [ 1365.994824][T20243] ? stack_trace_save+0x8e/0xc0 [ 1365.999659][T20243] ? __pfx_stack_trace_save+0x10/0x10 [ 1366.005011][T20243] ? stack_depot_save_flags+0x27/0x9f0 [ 1366.010450][T20243] ? __lock_acquire+0x4c5/0x1ec0 [ 1366.015387][T20243] ? proc_coredump_connector+0x2d3/0x4f0 [ 1366.021006][T20243] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1366.026971][T20243] ? rcu_is_watching+0x13/0xc0 [ 1366.031715][T20243] get_signal+0x1f2a/0x21e0 [ 1366.036208][T20243] ? __pfx_get_signal+0x10/0x10 [ 1366.041047][T20243] arch_do_signal_or_restart+0x91/0x7e0 [ 1366.046579][T20243] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1366.052719][T20243] irqentry_exit+0x402/0xa10 [ 1366.057288][T20243] asm_exc_page_fault+0x26/0x30 [ 1366.062118][T20243] RIP: 0033:0x7f74aed9e0e1 [ 1366.066511][T20243] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1366.086095][T20243] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1366.092138][T20243] RAX: 0000000000000000 RBX: 00007f74af025fa0 RCX: 00007f74aed9e0d9 [ 1366.100086][T20243] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1366.108033][T20243] RBP: 00007f74aee35024 R08: 0000000000000000 R09: 0000000000000000 [ 1366.115982][T20243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1366.123930][T20243] R13: 00007f74af026038 R14: 00007f74af025fa0 R15: 00007fffb15c8978 [ 1366.131883][T20243] [ 1366.135023][T20243] Kernel Offset: disabled [ 1366.139339][T20243] Rebooting in 86400 seconds..