last executing test programs: 52.260377798s ago: executing program 4 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e000020000000000000000ff"], 0x5000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) clock_adjtime(0x0, &(0x7f0000000000)={0x66b6, 0x200000000, 0x3, 0x0, 0x7ff, 0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x2, 0x1, 0x8000, 0x8}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) 51.649442164s ago: executing program 4 (id=500): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x482, 0x0) r6 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r6) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x8447, 0x13580, 0x40000000}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r9, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) io_uring_enter(r10, 0xe85, 0x0, 0x0, 0x0, 0x0) sendmsg$can_j1939(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)="aa", 0x1}, 0x1, 0x0, 0x0, 0x20000480}, 0x24000040) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r14, 0xd, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_kvm_setup_cpu$x86(r4, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r15, 0xae80, 0x0) pidfd_getfd(r2, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r16 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r16, 0x81, 0x0, 0x0) 48.788581631s ago: executing program 3 (id=515): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0xfffffffffffffe3b, 0x0}) syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESOCT], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioprio_get$uid(0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1412, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010000}, 0x40000) r4 = fanotify_init(0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) close_range(r4, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 48.119935349s ago: executing program 4 (id=518): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) fcntl$setsig(r0, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x182800, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x80) 47.980895435s ago: executing program 3 (id=519): shmget(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@tcx={@void, @value}}, 0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) 47.710187363s ago: executing program 3 (id=520): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0xfffffffffffffe3b, 0x0}) syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESOCT], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioprio_get$uid(0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1412, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010000}, 0x40000) r4 = fanotify_init(0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) close_range(r4, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 47.709938532s ago: executing program 4 (id=521): socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, {0x1, 0x4e22, [], [0x0, 0xa], 0x0, [0x1, 0x7fff]}}}, 0x4c}}, 0x40028c0) 46.493065929s ago: executing program 4 (id=523): r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 46.046250499s ago: executing program 4 (id=525): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) shutdown(r2, 0x1) sendmmsg$inet(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40400c1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) fchmodat(r4, &(0x7f0000000000)='./file0\x00', 0xa2) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x2, {0x1, 0x1, '0'}}, 0x6) 46.008847272s ago: executing program 3 (id=526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000807000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, r0, 0x97cb8000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x2000000000008, 0x20000008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600), 0x111, 0x1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 44.974414663s ago: executing program 3 (id=529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x2d, 0x4}}) madvise(&(0x7f0000140000/0x2000)=nil, 0x2000, 0x11) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r5, &(0x7f00000007c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x29, 0x5, 0x200, 0x8, 0x8, 0xe86, 0xfffffe01, 0x0, 0x0, 0x80, 0x100}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32=r7, @ANYBLOB="08134f50000c006400000008000d0000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x88, r2, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x1a8, 0x32a, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @val={0x6, 0x2, 0x1}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x3, 0x78, 0x3}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xe, 0xc, 0x19, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x88}}, 0x0) 44.606291755s ago: executing program 3 (id=532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3f, 0xdf, 0x4d, 0x20, 0x46d, 0x92e, 0x82c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x94, 0x0, 0x1, 0x51, 0x79, 0xc0, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x8, 0x1, 0x7, 0x0, [@generic={0x9, 0x4, "d9c847754b9f46"}]}}]}}]}}]}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1000009ee8, 0x12) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x2, 0x800, @loopback, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0xe, 0x0, &(0x7f0000000900)) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @redirect={0x2a, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1843, 0x0) 29.355932531s ago: executing program 32 (id=525): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) shutdown(r2, 0x1) sendmmsg$inet(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40400c1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) fchmodat(r4, &(0x7f0000000000)='./file0\x00', 0xa2) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x2, {0x1, 0x1, '0'}}, 0x6) 28.484858425s ago: executing program 33 (id=532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3f, 0xdf, 0x4d, 0x20, 0x46d, 0x92e, 0x82c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x94, 0x0, 0x1, 0x51, 0x79, 0xc0, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x8, 0x1, 0x7, 0x0, [@generic={0x9, 0x4, "d9c847754b9f46"}]}}]}}]}}]}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1000009ee8, 0x12) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x2, 0x800, @loopback, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0xe, 0x0, &(0x7f0000000900)) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @redirect={0x2a, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1843, 0x0) 24.045878812s ago: executing program 0 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e000100697036677265746170000000400002800400120005000b000700000008000100", @ANYRES32, @ANYBLOB="05000800000000000800040000040000060011004e24000008000100", @ANYRES32, @ANYBLOB="060011004e24000008000300", @ANYRES32], 0x7c}, 0x1, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x1d, 0x4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 22.500608875s ago: executing program 0 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) listen(r1, 0x4) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001180)={0x7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063110700000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x28}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r7 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, &(0x7f0000001980), 0x0) add_key$user(&(0x7f0000001040), &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)="d5eebfd2c84ab69b18a37a6289e59567f6c77db9e035ed8e6a90cd2195059cec1460e11c7cc45addef76025c6eef9b74efe7494611ea37b24fd740114de5ecb69aa5efcde82d3ef7a7c52cb128d356b678d86ecad08e78b773decd8f12e60794c1f983e50f36c84f46c7783b5880e44a7f21e66ddf7d369110", 0x79, r7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000001200)={0x0, 0xe1, "3dd1fe70ce13217e0dcd49da41076bcc0c0f1154120647d38f3587b47319c642aece080b78d5ad5ef2509f8f0581e4099dd532edfedc05934c049bf5a4b6a0010a2dee11d61e8f27cecd94961bc9884731179c4143ce877f3d84e633ffd5cd1e54fa7f4ab5e75d889bc598bfb33a209670add9ed49b128ff379046ffb28756fc4af7892987fe10df5d329f50de2d863610795b90a8eea8469afce2ce51898bb9e48514a77a1c545c86d20f33d9c6bc1ce78200f0dae9f246d6afae1f19d07e0aa50a2850063904d6be7f6c02f9f503c22e62dae1006d4de0ead7fc4336fb75fe92"}, &(0x7f0000001300)=0xe9) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0xffd7, 0x1) 21.777315311s ago: executing program 2 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x20000000) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socket$pptp(0x18, 0x1, 0x2) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xb01aa) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf95345204c696e757800000000"], 0x2000) 21.7577185s ago: executing program 0 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0xfffffffd}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) r9 = syz_open_dev$amidi(&(0x7f0000000280), 0x10000000000006, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0x40045702, 0xfffffffffffffffe) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048045}, 0x8010) socket$netlink(0x10, 0x3, 0x0) 21.657273805s ago: executing program 2 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000000000000020000000200000001000000000000000600000007f7834127de83883b00000000000000000000000000000000000000ffffffff020000000000000000000000ffffffffffffffff0210000000000000fdffffffffffffffe400000001800000ff0f00000400000000000000000000000001000080ffffff000000000000000000000000000000000000000000000000010000000100000000000000000000000800000000000000100000000000000002000000000000000700000063060000"]) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setrlimit(0x5, &(0x7f0000000280)={0x5, 0x3}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='signal_generate\x00', r3}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) shutdown(r6, 0x1) splice(r4, 0x0, r6, 0x0, 0x25a5, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000897d9cc90000003c000000020000000000000002000004ffffffff00000008030000000000000000000000030000000300000000000000000000020000000000000000000000090200000000001f241c70740fd57670b355c6bb2b3db9bab14c0f446f9138f0d25e3179cabbb5b899cf310848c439539ce9a9e3274badbf01a722888c419e9f3f4499750b7438ed189ef3b6565426060a44af0d433ec70caa1d93777511e652567f64931b663953c26254a77cb4db66b2470bbb58480052f54b24ca"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000300000d0000000000000000030000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0def7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934165ded16e411da023b9fba7840a8e50b7f909cc9d51522dc4ac3075e975b35681f8d16915a3d248396f134273ff13a72f082839bd3021d4f0a5550671bb7d267d74dc8a800f3f7e8be6daeacb3e97100fb4ba4379e76bc978e801fbd9d8354477658", 0xc5}], 0x1}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 21.398355717s ago: executing program 2 (id=600): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x0, 0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) 20.708460135s ago: executing program 0 (id=601): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffc, [0x0, 0xffffffff]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5603, 0x10000000000004) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x0, 0x401, 0x6}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="402107000000f3ff17eb3c7da32985d4e7533c93ec6d2e5eb31939d19c6243"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20.620312239s ago: executing program 2 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x13, &(0x7f0000000180), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="0fc75f630f20d86635080000000f22d866b91b09000066b80000000066ba000000000f309a2200fe00d9e46766c7442400060000006766c7442402234600006766c744240600000000670f011424360f01d7baf80c66b8a3b8338866efbafc0cb000ee65360fd1560065660f3a0b1c9f", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r4 = accept4$inet6(r3, &(0x7f00000000c0), &(0x7f0000000180)=0x1c, 0x800) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/191, 0xbf, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 19.154020854s ago: executing program 2 (id=604): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000001095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0xffffffffffffff6e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x6b, 0x2003) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x2d9) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r6, 0x5}, &(0x7f00000001c0)=0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x12, r4, 0x80000000) 18.37989119s ago: executing program 1 (id=606): r0 = syz_open_dev$sg(0x0, 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) 18.279476779s ago: executing program 2 (id=607): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x10000, 0xb5, &(0x7f0000000140)=""/181, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000009060500ffde000000000000010000050900020073798b477a3000000000050001000700000008000940f900000114000880100007800a001100aaaaaaaaaaaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_SAVE(r5, 0x0, 0x8010) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098c000/0x3000)=nil, 0x3000, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0xb, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) timer_create(0x4, &(0x7f0000000080)={0x0, 0x16, 0x4, @tid=r3}, &(0x7f00000000c0)) 18.234140874s ago: executing program 1 (id=608): r0 = userfaultfd(0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$xdp(0x2c, 0x3, 0x0) close_range(r5, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001240)={@fallback=r5, r6, 0x2f, 0x4038, 0x4, @void, @void, @void, @value}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000a20000000020a05000000000000002c19d2d400060c0004400000000b8daa0f8eb8671028ac32171892380004000001140000001100010000002100000000000000000a58e6158e9ea59767e33f5ee9322a80897c24c4d8a96d46ab0d99f490979ab8bbc0907bc0bcddcc6f5ad7"], 0x48}}, 0x80) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x10fe}}) 17.243445481s ago: executing program 1 (id=609): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17.161794687s ago: executing program 1 (id=610): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0xce, 0x8, 0x0, 0x1, [@nested={0x24, 0x12f, 0x0, 0x1, [@typed={0x1e, 0xbf, 0x0, 0x0, @str='blkio.bfq.io_service_time\x00'}]}, @generic="11193ba8650e2835d3cc5481aedfd33117950dd2ee63a119146f1716bb5cf29bc2a587a49d66c25e60c50a83bbe97c1a03b2f2795de7f806615e4d96ef2cc8dc22956d67f56edfc90f0ceca968685e012a33185e0015ae93c03e1a10b9306cf2d731b0b754f1f34639d8f9b707f86989e80aef0be1ef4b83af9c0b4f791ddad4145d", @nested={0x21, 0xf9, 0x0, 0x1, [@nested={0x4, 0x10e}, @nested={0x4, 0x149}, @typed={0x9, 0x4c, 0x0, 0x0, @str=',]][\x00'}, @generic="cc647319bebff7132f"]}]}]}, 0xe0}], 0x1}, 0x80) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x19) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x1, 0x9}}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x4}]}, 0xbc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff7fffffff, 0x80000) 16.692082445s ago: executing program 0 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4a}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0xa87b1ca1aba2f6e5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x6, 0x70}}, 0x30) 16.629720788s ago: executing program 1 (id=612): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x2dd, 0xc}}], 0x30}], 0x1, 0x0) 16.564121775s ago: executing program 0 (id=613): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000300)={0x9, 0x401, 0x2a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) set_mempolicy(0x1, 0x0, 0xd9b) (async) set_mempolicy(0x1, 0x0, 0xd9b) 16.518270685s ago: executing program 1 (id=614): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "75a3d0", 0x64, 0x11, 0x1, @empty, @mcast2, {[], {0x4e20, 0x4e60, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "6efff23fb8f2e29774c25c6b94e3a323eb1dc83ab6f5687fc041f5930f2c00dc", "f2593d70846bbb9fb38b4c2d03dcb283", {"b64d7fce5c648f577edaee33c131f43a", "b39d5be69bbad8c78d78da914fbb18c2"}}}}}}}}}, 0xa2) 2.030707486s ago: executing program 34 (id=607): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x10000, 0xb5, &(0x7f0000000140)=""/181, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000009060500ffde000000000000010000050900020073798b477a3000000000050001000700000008000940f900000114000880100007800a001100aaaaaaaaaaaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_SAVE(r5, 0x0, 0x8010) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098c000/0x3000)=nil, 0x3000, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0xb, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) timer_create(0x4, &(0x7f0000000080)={0x0, 0x16, 0x4, @tid=r3}, &(0x7f00000000c0)) 33.083397ms ago: executing program 35 (id=613): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000300)={0x9, 0x401, 0x2a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) set_mempolicy(0x1, 0x0, 0xd9b) (async) set_mempolicy(0x1, 0x0, 0xd9b) 0s ago: executing program 36 (id=614): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "75a3d0", 0x64, 0x11, 0x1, @empty, @mcast2, {[], {0x4e20, 0x4e60, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "6efff23fb8f2e29774c25c6b94e3a323eb1dc83ab6f5687fc041f5930f2c00dc", "f2593d70846bbb9fb38b4c2d03dcb283", {"b64d7fce5c648f577edaee33c131f43a", "b39d5be69bbad8c78d78da914fbb18c2"}}}}}}}}}, 0xa2) kernel console output (not intermixed with test programs): 0002: unknown main item tag 0x0 [ 78.082179][ T5876] holtek 0003:1241:5015.0002: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 78.135739][ T5876] holtek 0003:1241:5015.0002: no inputs found [ 78.175823][ T29] audit: type=1400 audit(1738689996.883:281): avc: denied { append } for pid=6114 comm="syz.3.59" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.326231][ T5876] usb 5-1: USB disconnect, device number 2 [ 78.590033][ T6130] syz.4.64 uses obsolete (PF_INET,SOCK_PACKET) [ 78.930084][ T5825] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.384339][ T5825] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 79.479446][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.865282][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 79.865297][ T29] audit: type=1400 audit(1738689998.573:286): avc: denied { setopt } for pid=6150 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.067159][ T5825] usb 2-1: Product: syz [ 80.221154][ T5825] usb 2-1: Manufacturer: syz [ 80.670988][ T5825] usb 2-1: SerialNumber: syz [ 81.206833][ T6151] syz.3.70 (6151): drop_caches: 2 [ 81.223697][ T6151] syz.3.70 (6151): drop_caches: 2 [ 81.399585][ T6157] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 81.488042][ T5825] usb 2-1: config 0 descriptor?? [ 81.960783][ T6160] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 82.305669][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.3.73'. [ 82.496955][ T29] audit: type=1400 audit(1738690001.183:287): avc: denied { write } for pid=6155 comm="syz.2.71" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.577897][ T6164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.74'. [ 83.200864][ T29] audit: type=1400 audit(1738690001.903:288): avc: denied { create } for pid=6170 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.380921][ T29] audit: type=1400 audit(1738690002.093:289): avc: denied { create } for pid=6172 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.940491][ T29] audit: type=1400 audit(1738690002.173:290): avc: denied { connect } for pid=6170 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.987685][ T29] audit: type=1400 audit(1738690002.273:291): avc: denied { ioctl } for pid=6170 comm="syz.2.75" path="socket:[8133]" dev="sockfs" ino=8133 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 84.160129][ T5825] usb 2-1: can't set config #0, error -71 [ 84.173388][ T29] audit: type=1400 audit(1738690002.273:292): avc: denied { listen } for pid=6170 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 84.197209][ T5825] usb 2-1: USB disconnect, device number 5 [ 84.256885][ T29] audit: type=1400 audit(1738690002.273:293): avc: denied { accept } for pid=6170 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 84.306411][ T29] audit: type=1400 audit(1738690002.363:294): avc: denied { write } for pid=6170 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 84.337253][ T29] audit: type=1400 audit(1738690002.653:295): avc: denied { shutdown } for pid=6172 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.560193][ T6197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.582464][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.752237][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 85.090150][ T970] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.280110][ T970] usb 2-1: Using ep0 maxpacket: 32 [ 85.341977][ T970] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 85.435995][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.445037][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.460682][ T25] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 85.469729][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.478976][ T970] usb 2-1: Product: syz [ 85.494572][ T25] usb 4-1: config 0 descriptor?? [ 85.524334][ T970] usb 2-1: Manufacturer: syz [ 85.542357][ T970] usb 2-1: SerialNumber: syz [ 85.566398][ T970] usb 2-1: config 0 descriptor?? [ 85.587251][ T970] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 85.668842][ T6225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.92'. [ 86.201050][ T6231] tun0: tun_chr_ioctl cmd 1074025675 [ 86.206357][ T6231] tun0: persist enabled [ 86.212029][ T6231] tun0: tun_chr_ioctl cmd 1074025675 [ 86.217329][ T6231] tun0: persist disabled [ 86.238307][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 86.238322][ T29] audit: type=1400 audit(1738690004.933:323): avc: denied { ioctl } for pid=6228 comm="syz.0.93" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.686997][ T29] audit: type=1400 audit(1738690005.363:324): avc: denied { bind } for pid=6239 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.788229][ T29] audit: type=1400 audit(1738690005.363:325): avc: denied { setopt } for pid=6239 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.840300][ T29] audit: type=1400 audit(1738690005.373:326): avc: denied { write } for pid=6239 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.580854][ T970] gspca_stk1135: reg_w 0x200 err -110 [ 87.591145][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 87.608770][ T970] gspca_stk1135: Sensor write failed [ 87.624259][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 87.663523][ T970] gspca_stk1135: Sensor write failed [ 87.680683][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 87.687160][ T970] gspca_stk1135: Sensor read failed [ 87.692514][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 87.699022][ T970] gspca_stk1135: Sensor read failed [ 87.704662][ T970] gspca_stk1135: Detected sensor type unknown (0x0) [ 87.732797][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 87.755408][ T970] gspca_stk1135: Sensor read failed [ 87.774892][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 87.789681][ T970] gspca_stk1135: Sensor read failed [ 87.801149][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 87.816264][ T970] gspca_stk1135: Sensor write failed [ 87.827967][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 87.853160][ T970] gspca_stk1135: Sensor write failed [ 87.953438][ T970] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 87.996344][ T25] usb 4-1: USB disconnect, device number 2 [ 88.084381][ T6260] bridge1: entered promiscuous mode [ 88.190086][ T6260] CUSE: unknown device info "€" [ 88.195023][ T6260] CUSE: zero length info key specified [ 88.686904][ T5931] usb 2-1: USB disconnect, device number 6 [ 89.179095][ T29] audit: type=1400 audit(1738690007.883:327): avc: denied { mount } for pid=6261 comm="syz.1.100" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 89.221146][ T5931] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.249690][ T6276] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 89.269819][ T6276] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.390090][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 89.407193][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.426150][ T5931] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 89.435728][ T29] audit: type=1400 audit(1738690008.133:328): avc: denied { name_bind } for pid=6280 comm="syz.2.106" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 89.468598][ T5931] usb 5-1: config 0 has no interface number 0 [ 89.478930][ T5931] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 89.495445][ T5931] usb 5-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 89.508132][ T5931] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 89.551527][ T5931] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.562251][ T5931] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 89.572610][ T5931] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 89.583573][ T5931] usb 5-1: config 0 interface 122 has no altsetting 0 [ 89.611707][ T5931] usb 5-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 89.621718][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.629720][ T5931] usb 5-1: Product: syz [ 89.654264][ T5931] usb 5-1: Manufacturer: syz [ 89.680109][ T5931] usb 5-1: SerialNumber: syz [ 89.691812][ T5931] usb 5-1: config 0 descriptor?? [ 89.715490][ T6268] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.725404][ T6268] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 90.252911][ T29] audit: type=1400 audit(1738690008.953:329): avc: denied { ioctl } for pid=6286 comm="syz.3.108" path="socket:[10420]" dev="sockfs" ino=10420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.311544][ T29] audit: type=1400 audit(1738690008.953:330): avc: denied { bind } for pid=6286 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.331435][ T29] audit: type=1400 audit(1738690008.993:331): avc: denied { connect } for pid=6286 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.358282][ T5931] pl2303 5-1:0.122: pl2303 converter detected [ 90.393047][ T5931] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 90.405661][ T5931] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 90.406858][ T29] audit: type=1400 audit(1738690008.993:332): avc: denied { write } for pid=6286 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.457686][ T6291] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 90.476579][ T5931] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 90.516285][ T5931] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 90.547315][ T5931] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 90.547534][ T6295] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 90.590050][ T5931] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 90.640800][ T5931] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 90.710078][ T5931] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 90.774191][ T5931] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 90.820362][ T5931] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 90.829175][ T5931] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 90.848066][ T5931] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 90.962486][ T5931] usb 5-1: USB disconnect, device number 3 [ 91.001914][ T5931] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 91.022897][ T5931] pl2303 5-1:0.122: device disconnected [ 91.293420][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 91.293431][ T29] audit: type=1326 audit(1738690010.003:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f57faf8cda9 code=0x7ffc0000 [ 91.298228][ T6309] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 91.495186][ T29] audit: type=1326 audit(1738690010.203:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7ffc0000 [ 92.068350][ T6317] overlayfs: missing 'lowerdir' [ 93.057435][ T29] audit: type=1400 audit(1738690011.763:370): avc: denied { mount } for pid=6334 comm="syz.4.124" name="/" dev="pstore" ino=3409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 93.133213][ T29] audit: type=1400 audit(1738690011.823:371): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 93.726896][ T6347] bridge2: entered promiscuous mode [ 93.737976][ T6347] CUSE: unknown device info "€" [ 93.742918][ T6347] CUSE: zero length info key specified [ 94.543923][ T29] audit: type=1400 audit(1738690013.253:372): avc: denied { bind } for pid=6353 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.620447][ T29] audit: type=1400 audit(1738690013.273:373): avc: denied { name_bind } for pid=6353 comm="syz.1.128" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 94.816206][ T6358] pimreg3: entered allmulticast mode [ 95.298847][ T29] audit: type=1400 audit(1738690013.273:374): avc: denied { node_bind } for pid=6353 comm="syz.1.128" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 95.320962][ T29] audit: type=1400 audit(1738690013.273:375): avc: denied { connect } for pid=6353 comm="syz.1.128" laddr=ff01::1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.349971][ T29] audit: type=1400 audit(1738690013.273:376): avc: denied { name_connect } for pid=6353 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 95.387517][ T29] audit: type=1400 audit(1738690013.303:377): avc: denied { unlink } for pid=6349 comm="syz.4.127" name="#1" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.916938][ T6369] SELinux: policydb string length 1277183315 does not match expected length 8 [ 95.927096][ T6369] SELinux: failed to load policy [ 95.951151][ T6371] fuse: Bad value for 'group_id' [ 95.957352][ T6371] fuse: Bad value for 'group_id' [ 97.352543][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 97.352558][ T29] audit: type=1400 audit(1738690016.063:394): avc: denied { create } for pid=6387 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.382104][ T29] audit: type=1400 audit(1738690016.093:395): avc: denied { write } for pid=6387 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.545404][ T6393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.344373][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.421615][ T29] audit: type=1400 audit(1738690017.123:396): avc: denied { shutdown } for pid=6407 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.556523][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 98.579272][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.602596][ T6414] netlink: 64 bytes leftover after parsing attributes in process `syz.1.146'. [ 98.626231][ T8] usb 1-1: Product: syz [ 98.635956][ T8] usb 1-1: Manufacturer: syz [ 98.649411][ T6414] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 98.663938][ T8] usb 1-1: SerialNumber: syz [ 98.694316][ T8] usb 1-1: config 0 descriptor?? [ 98.719791][ T6414] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 98.735158][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 98.743048][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 98.762541][ T6414] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 98.780844][ T8] f81232 1-1:0.0: f81534a converter detected [ 98.809460][ T6414] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 98.958529][ T29] audit: type=1400 audit(1738690017.663:397): avc: denied { read } for pid=6394 comm="syz.0.142" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.062000][ T29] audit: type=1400 audit(1738690017.663:398): avc: denied { ioctl } for pid=6394 comm="syz.0.142" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.101702][ T29] audit: type=1400 audit(1738690017.803:399): avc: denied { read append } for pid=6418 comm="syz.3.148" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 99.127700][ T29] audit: type=1400 audit(1738690017.803:400): avc: denied { open } for pid=6418 comm="syz.3.148" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 99.153793][ T29] audit: type=1400 audit(1738690017.803:401): avc: denied { write } for pid=6418 comm="syz.3.148" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 99.299338][ T6424] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 99.508881][ T6428] netlink: 'syz.1.150': attribute type 12 has an invalid length. [ 99.517035][ T6428] netlink: 'syz.1.150': attribute type 29 has an invalid length. [ 99.546682][ T6428] netlink: 148 bytes leftover after parsing attributes in process `syz.1.150'. [ 99.878380][ T6437] netlink: 60 bytes leftover after parsing attributes in process `syz.3.154'. [ 100.045887][ T5931] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 100.240083][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 100.343357][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 209, changing to 11 [ 100.599390][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.627100][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.716201][ T6452] bridge2: entered promiscuous mode [ 100.735402][ T6452] CUSE: unknown device info "€" [ 100.740350][ T6452] CUSE: zero length info key specified [ 101.350644][ T5931] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 101.359744][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.388094][ T5931] usb 2-1: config 0 descriptor?? [ 101.511694][ T6457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6457 comm=syz.4.156 [ 102.108932][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.386619][ T5931] lenovo 0003:17EF:6067.0003: item fetching failed at offset 0/2 [ 102.400424][ T5931] lenovo 0003:17EF:6067.0003: hid_parse failed [ 102.406672][ T5931] lenovo 0003:17EF:6067.0003: probe with driver lenovo failed with error -22 [ 102.427605][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.478104][ T29] audit: type=1400 audit(1738690021.173:402): avc: denied { read } for pid=6453 comm="syz.4.156" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.517966][ T52] usb 2-1: USB disconnect, device number 7 [ 102.660169][ T6454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.670272][ T29] audit: type=1400 audit(1738690021.173:403): avc: denied { open } for pid=6453 comm="syz.4.156" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.743959][ T29] audit: type=1400 audit(1738690021.213:404): avc: denied { ioctl } for pid=6453 comm="syz.4.156" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.771207][ T29] audit: type=1400 audit(1738690021.363:405): avc: denied { bind } for pid=6462 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.811100][ T29] audit: type=1400 audit(1738690021.363:406): avc: denied { name_bind } for pid=6462 comm="syz.3.158" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 102.930595][ T29] audit: type=1400 audit(1738690021.363:407): avc: denied { node_bind } for pid=6462 comm="syz.3.158" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 102.960160][ T29] audit: type=1400 audit(1738690021.363:408): avc: denied { ioctl } for pid=6453 comm="syz.4.156" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.021781][ T8] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 103.093273][ T29] audit: type=1400 audit(1738690021.383:409): avc: denied { write } for pid=6462 comm="syz.3.158" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.352509][ T8] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 103.492641][ T8] usb 1-1: USB disconnect, device number 3 [ 103.590589][ T29] audit: type=1400 audit(1738690021.383:410): avc: denied { name_connect } for pid=6462 comm="syz.3.158" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 103.612520][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.797821][ T29] audit: type=1400 audit(1738690021.413:411): avc: denied { read write } for pid=6453 comm="syz.4.156" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.960839][ T8] f81232 1-1:0.0: device disconnected [ 104.168209][ T6481] netlink: 'syz.1.163': attribute type 12 has an invalid length. [ 104.204088][ T6481] netlink: 'syz.1.163': attribute type 29 has an invalid length. [ 104.234107][ T6481] netlink: 148 bytes leftover after parsing attributes in process `syz.1.163'. [ 104.761857][ T6505] bridge1: entered promiscuous mode [ 104.788944][ T6505] CUSE: unknown device info "€" [ 104.793892][ T6505] CUSE: zero length info key specified [ 105.298340][ T5931] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 105.700093][ T5931] usb 4-1: device descriptor read/64, error -71 [ 105.883942][ T6515] FAULT_INJECTION: forcing a failure. [ 105.883942][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.897153][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.4.173 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 105.897167][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 105.897175][ T6515] Call Trace: [ 105.897179][ T6515] [ 105.897187][ T6515] dump_stack_lvl+0x16c/0x1f0 [ 105.897207][ T6515] should_fail_ex+0x50a/0x650 [ 105.897225][ T6515] _copy_to_user+0x32/0xd0 [ 105.897236][ T6515] simple_read_from_buffer+0xd0/0x160 [ 105.897253][ T6515] proc_fail_nth_read+0x198/0x270 [ 105.897268][ T6515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.897283][ T6515] ? rw_verify_area+0xcf/0x680 [ 105.897297][ T6515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.897311][ T6515] vfs_read+0x1df/0xbf0 [ 105.897326][ T6515] ? __fget_files+0x1fc/0x3a0 [ 105.897336][ T6515] ? __pfx___mutex_lock+0x10/0x10 [ 105.897348][ T6515] ? __pfx_vfs_read+0x10/0x10 [ 105.897366][ T6515] ? __fget_files+0x206/0x3a0 [ 105.897379][ T6515] ksys_read+0x12b/0x250 [ 105.897394][ T6515] ? __pfx_ksys_read+0x10/0x10 [ 105.897413][ T6515] do_syscall_64+0xcd/0x250 [ 105.897425][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.897439][ T6515] RIP: 0033:0x7f9d75f8b7bc [ 105.897451][ T6515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.897462][ T6515] RSP: 002b:00007f9d73dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.897472][ T6515] RAX: ffffffffffffffda RBX: 00007f9d761a6080 RCX: 00007f9d75f8b7bc [ 105.897479][ T6515] RDX: 000000000000000f RSI: 00007f9d73dd50a0 RDI: 0000000000000005 [ 105.897485][ T6515] RBP: 00007f9d73dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 105.897491][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.897496][ T6515] R13: 0000000000000000 R14: 00007f9d761a6080 R15: 00007fffd4e2ca68 [ 105.897510][ T6515] [ 106.118295][ T6511] Mount JFS Failure: -22 [ 106.122729][ T6511] jfs_mount failed w/return code = -22 [ 106.153572][ T5931] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 106.300493][ T5931] usb 4-1: device descriptor read/64, error -71 [ 106.618115][ T5931] usb usb4-port1: attempt power cycle [ 106.880004][ T52] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.622617][ T5931] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 107.818267][ T52] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 107.818732][ T5931] usb 4-1: device descriptor read/8, error -71 [ 107.870027][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.878778][ T52] usb 3-1: Product: syz [ 107.930840][ T52] usb 3-1: Manufacturer: syz [ 107.935530][ T52] usb 3-1: SerialNumber: syz [ 107.997313][ T6539] netlink: 60 bytes leftover after parsing attributes in process `syz.3.180'. [ 108.030720][ T52] usb 3-1: config 0 descriptor?? [ 108.086593][ T52] hub 3-1:0.0: bad descriptor, ignoring hub [ 108.099145][ T52] hub 3-1:0.0: probe with driver hub failed with error -5 [ 108.156831][ T52] f81232 3-1:0.0: f81534a converter detected [ 108.284831][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 108.284841][ T29] audit: type=1400 audit(1738690026.993:419): avc: denied { write } for pid=6518 comm="syz.1.174" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.954481][ T6558] bridge2: entered promiscuous mode [ 108.987214][ T6558] CUSE: unknown device info "€" [ 108.992183][ T6558] CUSE: zero length info key specified [ 109.724527][ T6566] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 109.859045][ T29] audit: type=1400 audit(1738690028.553:420): avc: denied { read write } for pid=6568 comm="syz.3.186" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.999078][ T6570] capability: warning: `syz.3.186' uses 32-bit capabilities (legacy support in use) [ 110.234031][ T52] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 110.243041][ T29] audit: type=1400 audit(1738690028.553:421): avc: denied { open } for pid=6568 comm="syz.3.186" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.266767][ T52] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 110.319293][ T6575] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 110.333190][ T6575] netlink: 'syz.2.187': attribute type 8 has an invalid length. [ 110.345647][ T6575] netlink: 132 bytes leftover after parsing attributes in process `syz.2.187'. [ 110.350903][ T52] usb 3-1: USB disconnect, device number 3 [ 110.364856][ T29] audit: type=1400 audit(1738690028.563:422): avc: denied { ioctl } for pid=6568 comm="syz.3.186" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.397927][ T52] f81232 3-1:0.0: device disconnected [ 111.008117][ T6584] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 111.683164][ T6584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.758503][ T6595] netlink: 'syz.2.192': attribute type 12 has an invalid length. [ 111.804350][ T6595] netlink: 'syz.2.192': attribute type 29 has an invalid length. [ 111.833536][ T29] audit: type=1400 audit(1738690030.543:423): avc: denied { read } for pid=6593 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.860010][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.860122][ T6595] netlink: 148 bytes leftover after parsing attributes in process `syz.2.192'. [ 111.966662][ T5832] Bluetooth: hci5: sending frame failed (-49) [ 111.973760][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 111.999571][ T6603] trusted_key: syz.4.195 sent an empty control message without MSG_MORE. [ 112.052556][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.067823][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.086125][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.096789][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.107980][ T9] usb 4-1: SerialNumber: syz [ 112.181454][ T6608] SELinux: policydb string length 1277183315 does not match expected length 8 [ 112.191591][ T6608] SELinux: failed to load policy [ 112.220086][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.381974][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.407905][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.430096][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.436047][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.445888][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 112.457365][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.470670][ T8] usb 2-1: config 0 descriptor?? [ 112.533267][ T9] usb 4-1: 0:2 : does not exist [ 112.538734][ T9] usb 4-1: unit 5: unexpected type 0x0b [ 112.568838][ T9] usb 4-1: USB disconnect, device number 7 [ 112.791212][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.914732][ T8] pyra 0003:1E7D:2CF6.0004: item fetching failed at offset 0/7 [ 112.950521][ T8] pyra 0003:1E7D:2CF6.0004: parse failed [ 112.956264][ T8] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -22 [ 113.030178][ T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.126437][ T6616] SELinux: policydb string length 1277183315 does not match expected length 8 [ 113.136237][ T6616] SELinux: failed to load policy [ 113.628221][ T29] audit: type=1400 audit(1738690032.333:424): avc: denied { write } for pid=6619 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.743161][ T52] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 113.752282][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.770001][ T52] usb 1-1: Product: syz [ 113.774250][ T52] usb 1-1: Manufacturer: syz [ 113.778853][ T52] usb 1-1: SerialNumber: syz [ 114.525971][ T52] usb 1-1: config 0 descriptor?? [ 114.579386][ T52] hub 1-1:0.0: bad descriptor, ignoring hub [ 114.608466][ T52] hub 1-1:0.0: probe with driver hub failed with error -5 [ 114.686010][ T52] f81232 1-1:0.0: f81534a converter detected [ 114.833652][ T5876] usb 2-1: USB disconnect, device number 8 [ 115.054637][ T52] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 115.077642][ T52] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 115.262439][ T52] usb 1-1: USB disconnect, device number 4 [ 115.380307][ T52] f81232 1-1:0.0: device disconnected [ 115.924968][ T6635] syz.4.201 (6635): drop_caches: 2 [ 115.977309][ T6635] syz.4.201 (6635): drop_caches: 2 [ 116.049376][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.204'. [ 116.097735][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.204'. [ 116.402482][ T6648] 9pnet_virtio: no channels available for device syz [ 118.246453][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.329426][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.211'. [ 118.496408][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.211'. [ 118.761237][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 119.616754][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 119.633345][ T9] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 119.653478][ T9] usb 3-1: config 8 has no interface number 0 [ 119.675282][ T9] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 119.694884][ T6672] SELinux: policydb string length 1277183315 does not match expected length 8 [ 119.704770][ T6672] SELinux: failed to load policy [ 119.764328][ T9] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.780856][ T9] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 119.793076][ T9] usb 3-1: config 8 interface 39 has no altsetting 0 [ 119.802464][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 119.838126][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.849830][ T9] usb 3-1: Product: syz [ 119.858429][ T9] usb 3-1: Manufacturer: syz [ 119.969835][ T29] audit: type=1400 audit(1738690038.673:425): avc: denied { getopt } for pid=6673 comm="syz.0.215" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.664277][ T9] usb 3-1: SerialNumber: syz [ 120.786476][ T9] usb 3-1: can't set config #8, error -71 [ 120.787459][ T9] usb 3-1: USB disconnect, device number 4 [ 121.140112][ T52] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.369736][ T52] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 121.463765][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.540597][ T52] usb 2-1: Product: syz [ 121.548557][ T52] usb 2-1: Manufacturer: syz [ 121.548577][ T52] usb 2-1: SerialNumber: syz [ 121.556982][ T52] usb 2-1: config 0 descriptor?? [ 121.557865][ T52] hub 2-1:0.0: bad descriptor, ignoring hub [ 121.557881][ T52] hub 2-1:0.0: probe with driver hub failed with error -5 [ 121.558183][ T52] f81232 2-1:0.0: f81534a converter detected [ 121.583802][ T6698] dvmrp8: entered allmulticast mode [ 121.777723][ T52] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 121.795059][ T52] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 121.841682][ T52] usb 2-1: USB disconnect, device number 9 [ 121.867123][ T52] f81232 2-1:0.0: device disconnected [ 122.209750][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 123.870456][ T970] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.810040][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 124.817508][ T970] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 124.827484][ T970] usb 2-1: config 8 has no interface number 0 [ 124.846480][ T970] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 124.880135][ T970] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.921393][ T970] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 124.940993][ T970] usb 2-1: config 8 interface 39 has no altsetting 0 [ 125.186284][ T970] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 125.335641][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.376970][ T970] usb 2-1: Product: syz [ 125.393729][ T970] usb 2-1: Manufacturer: syz [ 125.398359][ T970] usb 2-1: SerialNumber: syz [ 125.903646][ T29] audit: type=1400 audit(1738690044.613:426): avc: denied { read } for pid=6744 comm="syz.4.234" lport=39866 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 125.988313][ T6746] bridge3: entered promiscuous mode [ 126.037914][ T6746] CUSE: unknown device info "€" [ 126.042892][ T6746] CUSE: zero length info key specified [ 126.614469][ T970] ipheth 2-1:8.39: ipheth_enable_ncm: usb_control_msg: -110 [ 126.650242][ T970] ipheth 2-1:8.39: Apple iPhone USB Ethernet device attached [ 126.704221][ T29] audit: type=1400 audit(1738690045.413:427): avc: denied { setopt } for pid=6744 comm="syz.4.234" lport=39866 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 126.833231][ T29] audit: type=1400 audit(1738690045.523:428): avc: denied { ioctl } for pid=6744 comm="syz.4.234" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 127.388064][ T29] audit: type=1400 audit(1738690046.093:429): avc: denied { search } for pid=5488 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.610815][ T29] audit: type=1400 audit(1738690046.093:430): avc: denied { read } for pid=5488 comm="dhcpcd" name="n100" dev="tmpfs" ino=2771 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.734361][ T29] audit: type=1400 audit(1738690046.143:431): avc: denied { open } for pid=5488 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2771 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.764540][ T29] audit: type=1400 audit(1738690046.143:432): avc: denied { getattr } for pid=5488 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2771 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.861004][ T9] usb 2-1: USB disconnect, device number 10 [ 128.410008][ T52] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.516118][ T9] ipheth 2-1:8.39: Apple iPhone USB Ethernet now disconnected [ 128.546763][ T29] audit: type=1400 audit(1738690047.253:433): avc: denied { read } for pid=6762 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.686532][ T29] audit: type=1400 audit(1738690047.283:434): avc: denied { open } for pid=6762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.723397][ T29] audit: type=1400 audit(1738690047.283:435): avc: denied { getattr } for pid=6762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.723921][ T52] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 128.840248][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.868638][ T52] usb 1-1: Product: syz [ 128.891263][ T52] usb 1-1: Manufacturer: syz [ 128.895891][ T52] usb 1-1: SerialNumber: syz [ 128.939103][ T52] usb 1-1: config 0 descriptor?? [ 128.954293][ T52] hub 1-1:0.0: bad descriptor, ignoring hub [ 128.960914][ T52] hub 1-1:0.0: probe with driver hub failed with error -5 [ 128.968590][ T52] f81232 1-1:0.0: f81534a converter detected [ 129.197442][ T52] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 129.205288][ T52] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 129.812261][ T52] usb 1-1: USB disconnect, device number 5 [ 129.818908][ T52] f81232 1-1:0.0: device disconnected [ 130.197795][ T5825] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.432586][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 130.461639][ T5825] usb 4-1: config 4 has an invalid interface number: 6 but max is 3 [ 130.482705][ T5825] usb 4-1: config 4 has an invalid interface number: 65 but max is 3 [ 130.514696][ T5825] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 130.557800][ T5825] usb 4-1: config 4 has 2 interfaces, different from the descriptor's value: 4 [ 130.578833][ T5825] usb 4-1: config 4 has no interface number 0 [ 130.593521][ T5825] usb 4-1: config 4 has no interface number 1 [ 130.609065][ T5825] usb 4-1: config 4 interface 6 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 130.635086][ T5825] usb 4-1: config 4 interface 6 altsetting 7 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 130.651259][ T5825] usb 4-1: config 4 interface 65 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 130.855922][ T5825] usb 4-1: config 4 interface 65 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 130.888426][ T5825] usb 4-1: config 4 interface 65 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 130.977049][ T6809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.246'. [ 131.191587][ T6811] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.248' resets device [ 131.767624][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 131.767637][ T29] audit: type=1400 audit(1738690049.793:451): avc: denied { write } for pid=6803 comm="syz.1.248" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 131.863571][ T5825] usb 4-1: config 4 interface 6 has no altsetting 0 [ 131.870782][ T5825] usb 4-1: config 4 interface 65 has no altsetting 0 [ 131.878608][ T5825] usb 4-1: string descriptor 0 read error: -71 [ 131.885857][ T5825] usb 4-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 131.895392][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.922461][ T5825] usb 4-1: can't set config #4, error -71 [ 131.934392][ T29] audit: type=1400 audit(1738690049.913:452): avc: denied { create } for pid=6803 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 131.955939][ T5825] usb 4-1: USB disconnect, device number 8 [ 132.011711][ T29] audit: type=1400 audit(1738690049.923:453): avc: denied { bind } for pid=6803 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 132.298021][ T29] audit: type=1400 audit(1738690051.003:454): avc: denied { ioctl } for pid=6827 comm="syz.0.254" path="socket:[11661]" dev="sockfs" ino=11661 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 132.771730][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778082][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.051281][ T6832] xt_CT: No such helper "netbios-ns" [ 133.969437][ T6872] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 134.039372][ T6872] audit: out of memory in audit_log_start [ 134.106027][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'. [ 134.115962][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 134.183478][ T5931] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.350034][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 134.381857][ T5931] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.384746][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.266'. [ 134.405968][ T5931] usb 1-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.447878][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 134.518595][ T5931] usb 1-1: config 1 interface 0 has no altsetting 0 [ 134.585300][ T5931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.594550][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.606597][ T5931] usb 1-1: Product: 쳵뗀䕱럺䌫庄死킑鿧gꪌ↲䯓ྗ弿䖰稷뎲곸⛆麆쮆ã‰ë°˜è‚ºá¹‰èˆŠé‘£æ¬¹è¡€äµ›â«šá©åµ¸à«° [ 134.657094][ T5931] usb 1-1: Manufacturer: 쀚溲㰈몾퀠걦é™ïŸ‰ï²¢ä©ƒíŸ²ëµ²æ²»â•«ì¤ä»šæ¬ïƒ¢î•¸â€á Žé˜«â«³æš¨äº°â³°Ô¡è¹ƒé­¸æº¯å¼¤ [ 134.690302][ T5931] usb 1-1: SerialNumber: syz [ 134.699728][ T6869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.708858][ T6869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.941118][ T6886] fuse: blksize only supported for fuseblk [ 135.155187][ T9] IPVS: starting estimator thread 0... [ 135.179151][ T5931] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 135.244183][ T5931] usb 1-1: USB disconnect, device number 6 [ 135.303220][ T6890] IPVS: using max 22 ests per chain, 52800 per kthread [ 135.814993][ T29] audit: type=1400 audit(1738690054.523:455): avc: denied { bind } for pid=6896 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.876395][ T29] audit: type=1400 audit(1738690054.523:456): avc: denied { connect } for pid=6896 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.961488][ T29] audit: type=1400 audit(1738690054.563:457): avc: denied { open } for pid=6898 comm="syz.3.273" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 136.038882][ T29] audit: type=1400 audit(1738690054.573:458): avc: denied { ioctl } for pid=6898 comm="syz.3.273" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 136.070312][ T52] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.240840][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 136.294046][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.330878][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.407379][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.520078][ T52] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 136.920442][ T29] audit: type=1400 audit(1738690055.333:459): avc: denied { map } for pid=6904 comm="syz.0.275" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.217030][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.226779][ T52] usb 5-1: config 0 descriptor?? [ 137.378436][ T29] audit: type=1400 audit(1738690055.333:460): avc: denied { execute } for pid=6904 comm="syz.0.275" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.993430][ T29] audit: type=1400 audit(1738690056.693:461): avc: denied { create } for pid=6910 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.034405][ T52] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 138.050185][ T52] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 138.065809][ T52] koneplus 0003:1E7D:2E22.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 138.524648][ T29] audit: type=1400 audit(1738690057.233:462): avc: denied { execute } for pid=6896 comm="syz.4.272" path="/69/cpu.stat" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.621905][ T29] audit: type=1400 audit(1738690057.333:463): avc: denied { create } for pid=6896 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.692902][ T5876] usb 5-1: USB disconnect, device number 4 [ 138.709807][ T29] audit: type=1400 audit(1738690057.333:464): avc: denied { connect } for pid=6896 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.163202][ T6939] fuse: Bad value for 'fd' [ 140.035723][ T29] audit: type=1400 audit(1738690058.743:465): avc: denied { create } for pid=6956 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.080208][ T29] audit: type=1400 audit(1738690058.743:466): avc: denied { setopt } for pid=6956 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.067128][ T6969] syz.4.286: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 141.098582][ T6969] CPU: 0 UID: 0 PID: 6969 Comm: syz.4.286 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 141.098610][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 141.098622][ T6969] Call Trace: [ 141.098628][ T6969] [ 141.098636][ T6969] dump_stack_lvl+0x16c/0x1f0 [ 141.098664][ T6969] warn_alloc+0x24d/0x3a0 [ 141.098688][ T6969] ? __pfx_warn_alloc+0x10/0x10 [ 141.098721][ T6969] ? __get_vm_area_node+0x1b0/0x2f0 [ 141.098750][ T6969] ? __get_vm_area_node+0x1dc/0x2f0 [ 141.098787][ T6969] __vmalloc_node_range_noprof+0x1102/0x1530 [ 141.098816][ T6969] ? __pfx___mutex_trylock_common+0x10/0x10 [ 141.098854][ T6969] ? xp_alloc_tx_descs+0x7e/0xe0 [ 141.098890][ T6969] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.098921][ T6969] ? rcu_is_watching+0x12/0xc0 [ 141.098942][ T6969] ? trace_kmalloc+0x2d/0xd0 [ 141.098965][ T6969] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 141.098989][ T6969] ? xp_alloc_tx_descs+0x7e/0xe0 [ 141.099019][ T6969] __kvmalloc_node_noprof+0x14f/0x1a0 [ 141.099050][ T6969] ? xp_alloc_tx_descs+0x7e/0xe0 [ 141.099079][ T6969] xp_alloc_tx_descs+0x7e/0xe0 [ 141.099109][ T6969] xsk_bind+0x1062/0x13c0 [ 141.099139][ T6969] ? __pfx_xsk_bind+0x10/0x10 [ 141.099171][ T6969] __sys_bind+0x213/0x260 [ 141.099193][ T6969] ? __pfx___sys_bind+0x10/0x10 [ 141.099224][ T6969] ? rcu_is_watching+0x12/0xc0 [ 141.099252][ T6969] __x64_sys_bind+0x72/0xb0 [ 141.099271][ T6969] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.099292][ T6969] do_syscall_64+0xcd/0x250 [ 141.099322][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.099350][ T6969] RIP: 0033:0x7f9d75f8cda9 [ 141.099366][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.099385][ T6969] RSP: 002b:00007f9d73991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 141.099403][ T6969] RAX: ffffffffffffffda RBX: 00007f9d761a6240 RCX: 00007f9d75f8cda9 [ 141.099417][ T6969] RDX: 0000000000000010 RSI: 0000000020000240 RDI: 0000000000000004 [ 141.099429][ T6969] RBP: 00007f9d7600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.099441][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.099453][ T6969] R13: 0000000000000000 R14: 00007f9d761a6240 R15: 00007fffd4e2ca68 [ 141.099482][ T6969] [ 141.099490][ T6969] Mem-Info: [ 141.295518][ T29] audit: type=1400 audit(1738690060.003:467): avc: denied { ioctl } for pid=6979 comm="syz.0.295" path="socket:[12673]" dev="sockfs" ino=12673 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.309955][ T29] audit: type=1400 audit(1738690060.013:468): avc: denied { bind } for pid=6984 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.398083][ T6969] active_anon:7557 inactive_anon:0 isolated_anon:0 [ 141.398083][ T6969] active_file:11337 inactive_file:38586 isolated_file:0 [ 141.398083][ T6969] unevictable:768 dirty:317 writeback:0 [ 141.398083][ T6969] slab_reclaimable:6556 slab_unreclaimable:100234 [ 141.398083][ T6969] mapped:31104 shmem:1728 pagetables:1072 [ 141.398083][ T6969] sec_pagetables:0 bounce:0 [ 141.398083][ T6969] kernel_misc_reclaimable:0 [ 141.398083][ T6969] free:1321521 free_pcp:400 free_cma:0 [ 141.479837][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 141.543430][ T6969] Node 0 active_anon:39728kB inactive_anon:0kB active_file:45348kB inactive_file:154268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138816kB dirty:1268kB writeback:0kB shmem:15476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12272kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no [ 141.602669][ T6994] fuse: Unknown parameter 'group_id00000000000000000000' [ 141.621232][ T6969] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 141.665297][ T6969] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.697688][ T6969] lowmem_reserve[]: 0 2487 2487 0 0 [ 141.703163][ T6969] Node 0 DMA32 free:1354088kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:37928kB inactive_anon:0kB active_file:45348kB inactive_file:154176kB unevictable:1536kB writepending:1268kB present:3129332kB managed:2547440kB mlocked:0kB bounce:0kB free_pcp:948kB local_pcp:704kB free_cma:0kB [ 141.733912][ T6969] lowmem_reserve[]: 0 0 0 0 0 [ 141.738722][ T6969] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 141.765690][ T6969] lowmem_reserve[]: 0 0 0 0 0 [ 141.771986][ T6969] Node 1 Normal free:3910768kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 141.816603][ T6969] lowmem_reserve[]: 0 0 0 0 0 [ 141.826486][ T6969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 141.841896][ T6969] Node 0 DMA32: 254*4kB (UME) 328*8kB (UME) 161*16kB (UME) 349*32kB (UME) 372*64kB (UME) 91*128kB (UME) 38*256kB (UME) 27*512kB (UME) 6*1024kB (ME) 3*2048kB (UE) 309*4096kB (UM) = 1354344kB [ 141.863766][ T6969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 141.886644][ T6969] Node 1 Normal: 162*4kB (U) 39*8kB (UME) 35*16kB (UME) 180*32kB (UME) 90*64kB (UME) 31*128kB (UME) 18*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 946*4096kB (M) = 3910768kB [ 141.910924][ T6969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.922507][ T6969] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 141.936807][ T6969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.948943][ T6969] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.988221][ T6969] 54199 total pagecache pages [ 141.999400][ T6969] 0 pages in swap cache [ 142.006173][ T6969] Free swap = 124700kB [ 142.012366][ T6969] Total swap = 124996kB [ 142.017196][ T6969] 2097051 pages RAM [ 142.168654][ T6969] 0 pages HighMem/MovableOnly [ 142.212225][ T6969] 428533 pages reserved [ 142.257019][ T6969] 0 pages cma reserved [ 142.500387][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 142.500426][ T29] audit: type=1400 audit(1738690061.193:471): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 142.630311][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.894302][ T29] audit: type=1400 audit(1738690061.603:472): avc: denied { ioctl } for pid=7007 comm="syz.4.304" path="socket:[12717]" dev="sockfs" ino=12717 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.951511][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.978155][ T5876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.990963][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.998967][ T5876] usb 2-1: Product: syz [ 143.238200][ T5876] usb 2-1: Manufacturer: syz [ 143.280060][ T5876] usb 2-1: SerialNumber: syz [ 144.090007][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.409678][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.442306][ T29] audit: type=1400 audit(1738690063.103:473): avc: denied { ioctl } for pid=6998 comm="syz.1.300" path="socket:[12790]" dev="sockfs" ino=12790 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.889221][ T5876] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 144.915642][ T5876] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 144.928743][ T5876] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 144.939540][ T7025] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 145.010995][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.087866][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.115640][ T8] usb 3-1: Product: syz [ 145.126328][ T8] usb 3-1: Manufacturer: syz [ 145.140227][ T8] usb 3-1: SerialNumber: syz [ 145.765645][ T7038] CUSE: DEVNAME unspecified [ 145.807093][ T29] audit: type=1400 audit(1738690064.513:474): avc: denied { write } for pid=7036 comm="syz.3.311" path="socket:[12812]" dev="sockfs" ino=12812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.832664][ T29] audit: type=1400 audit(1738690064.543:475): avc: denied { getopt } for pid=7040 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.964854][ T29] audit: type=1400 audit(1738690064.663:476): avc: denied { bind } for pid=7040 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.218774][ T5876] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 146.238208][ T5876] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 146.516281][ T8] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 146.554267][ T8] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 146.645479][ T29] audit: type=1400 audit(1738690065.353:477): avc: denied { create } for pid=7047 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.731002][ T8] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 146.776415][ T5876] usb 2-1: USB disconnect, device number 11 [ 146.781280][ T7051] @: renamed from vlan0 (while UP) [ 146.810997][ T5876] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 146.820557][ T29] audit: type=1400 audit(1738690065.483:478): avc: denied { write } for pid=7047 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.859807][ T29] audit: type=1400 audit(1738690065.483:479): avc: denied { ioctl } for pid=7047 comm="syz.4.313" path="socket:[13450]" dev="sockfs" ino=13450 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.909602][ T7047] block nbd4: shutting down sockets [ 146.925153][ T7048] netlink: 'syz.2.306': attribute type 12 has an invalid length. [ 147.740248][ T5876] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 147.930148][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 147.995565][ T5876] usb 4-1: config 0 has no interfaces? [ 148.028454][ T5876] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 148.054618][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.055087][ T29] audit: type=1400 audit(1738690066.763:480): avc: denied { accept } for pid=7054 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.067023][ T5876] usb 4-1: Product: syz [ 148.120402][ T8] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 148.135692][ T29] audit: type=1400 audit(1738690066.793:481): avc: denied { read } for pid=7054 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.176054][ T8] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 148.193403][ T8] usb 3-1: USB disconnect, device number 5 [ 148.200144][ T8] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 148.210124][ T5876] usb 4-1: Manufacturer: syz [ 148.240021][ T5876] usb 4-1: SerialNumber: syz [ 148.416773][ T7083] 9pnet_fd: Insufficient options for proto=fd [ 148.468758][ T5876] usb 4-1: config 0 descriptor?? [ 148.622781][ T29] audit: type=1326 audit(1738690067.333:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7078 comm="syz.2.319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x0 [ 149.079287][ T29] audit: type=1400 audit(1738690067.783:483): avc: denied { getopt } for pid=7062 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.101748][ T7064] ubi0: attaching mtd0 [ 149.107961][ T7064] ubi0: scanning is finished [ 149.171082][ T7093] trusted_key: encrypted_key: insufficient parameters specified [ 149.223533][ T7064] ubi0: empty MTD device detected [ 149.272144][ T29] audit: type=1400 audit(1738690067.983:484): avc: denied { search } for pid=5488 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=12853 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 149.572432][ T7111] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.596844][ T7064] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 149.610345][ T7064] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 149.705386][ T7064] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 149.731696][ T7064] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 149.752446][ T7064] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 149.824864][ T7116] CUSE: unknown device info "€" [ 149.829781][ T7116] CUSE: zero length info key specified [ 149.910948][ T7064] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 150.364325][ T7064] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4139246140 [ 150.491019][ T7121] SELinux: policydb string length 1277183315 does not match expected length 8 [ 150.518855][ T7121] SELinux: failed to load policy [ 150.528544][ T7064] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 150.704358][ T7113] ubi0: background thread "ubi_bgt0d" started, PID 7113 [ 151.052117][ T52] usb 4-1: USB disconnect, device number 9 [ 151.132740][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.470719][ T25] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.950097][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.964284][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.006092][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.035046][ T25] usb 5-1: Product: syz [ 152.043246][ T25] usb 5-1: Manufacturer: syz [ 152.075478][ T25] usb 5-1: SerialNumber: syz [ 152.100895][ T7150] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 152.108172][ T29] audit: type=1400 audit(1738690070.803:485): avc: denied { write } for pid=7149 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.159141][ T25] usb 5-1: config 0 descriptor?? [ 152.188515][ T25] usb 5-1: selecting invalid altsetting 0 [ 152.209141][ T29] audit: type=1400 audit(1738690070.813:486): avc: denied { write } for pid=7149 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.427989][ T29] audit: type=1400 audit(1738690071.103:487): avc: denied { create } for pid=7123 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.663546][ T25] usb 5-1: USB disconnect, device number 5 [ 152.802352][ T29] audit: type=1400 audit(1738690071.503:488): avc: denied { setrlimit } for pid=7156 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 152.886503][ T7162] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.897816][ T29] audit: type=1400 audit(1738690071.613:489): avc: denied { bind } for pid=7155 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.921026][ T7162] xt_TCPMSS: Only works on TCP SYN packets [ 153.082508][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.135014][ T7173] fuse: Bad value for 'user_id' [ 153.156215][ T7173] fuse: Bad value for 'user_id' [ 153.834983][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 153.892439][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.905538][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.950112][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'. [ 153.980061][ T970] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 154.070177][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.132357][ T970] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.160936][ T970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 154.221909][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 154.229093][ T25] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 154.238687][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 154.243243][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.349177][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 154.381176][ T25] usb 3-1: config 0 descriptor?? [ 154.439644][ T25] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 154.457158][ T970] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.490998][ T970] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 154.513482][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.541006][ T970] usb 4-1: Product: syz [ 154.553646][ T970] usb 4-1: Manufacturer: syz [ 154.574704][ T970] usb 4-1: SerialNumber: syz [ 154.627095][ T970] usb 4-1: config 0 descriptor?? [ 154.645241][ T7194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.670484][ T970] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 154.704558][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 154.704572][ T29] audit: type=1400 audit(1738690073.413:493): avc: denied { read } for pid=5179 comm="acpid" name="mouse1" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.759510][ T29] audit: type=1400 audit(1738690073.413:494): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.785031][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 154.794210][ T29] audit: type=1400 audit(1738690073.413:495): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2925 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.946009][ T29] audit: type=1400 audit(1738690073.653:496): avc: denied { write } for pid=7193 comm="syz.3.339" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.960790][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.969325][ T9] usb 2-1: device descriptor read/64, error -71 [ 155.019687][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.078545][ T29] audit: type=1400 audit(1738690073.653:497): avc: denied { open } for pid=7193 comm="syz.3.339" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.116386][ T29] audit: type=1400 audit(1738690073.663:498): avc: denied { block_suspend } for pid=7193 comm="syz.3.339" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.202939][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.344'. [ 155.212060][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 155.253709][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.266405][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.280224][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 155.309333][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 155.321130][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.338969][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.420068][ T9] usb 2-1: device descriptor read/64, error -71 [ 155.540598][ T9] usb usb2-port1: attempt power cycle [ 155.563201][ T25] gspca_vc032x: reg_w err -110 [ 155.568535][ T7194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.571273][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.589226][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.599399][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.605160][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.610933][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.616364][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.622640][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.628034][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.634468][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.640859][ T7194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.644846][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.655592][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.661381][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.666906][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.677278][ T7194] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 155.687765][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.693687][ T5825] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.702503][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.712946][ T7194] bond0 (unregistering): Released all slaves [ 155.732462][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.737995][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.744267][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.751864][ T25] gspca_vc032x: Unknown sensor... [ 155.757125][ T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 155.819097][ T25] usb 3-1: USB disconnect, device number 6 [ 155.890352][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 155.890684][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 155.930987][ T9] usb 2-1: device descriptor read/8, error -71 [ 155.934577][ T5825] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 155.954736][ T5825] usb 1-1: config 0 has no interface number 0 [ 155.964343][ T5825] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 155.975772][ T5825] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 155.988499][ T5825] usb 1-1: config 0 interface 41 has no altsetting 0 [ 155.997473][ T5825] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 156.007114][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.008164][ T8] usb 4-1: USB disconnect, device number 10 [ 156.028726][ T5825] usb 1-1: Product: syz [ 156.036827][ T5825] usb 1-1: Manufacturer: syz [ 156.042022][ T5825] usb 1-1: SerialNumber: syz [ 156.055858][ T5825] usb 1-1: config 0 descriptor?? [ 156.064515][ T7223] raw-gadget.7 gadget.0: fail, usb_ep_enable returned -22 [ 156.078232][ T7223] raw-gadget.7 gadget.0: fail, usb_ep_enable returned -22 [ 156.180125][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.221482][ T9] usb 2-1: device descriptor read/8, error -71 [ 156.311138][ T7223] raw-gadget.7 gadget.0: fail, usb_ep_enable returned -22 [ 156.320966][ T7223] raw-gadget.7 gadget.0: fail, usb_ep_enable returned -22 [ 156.336701][ T7227] fuse: Bad value for 'user_id' [ 156.344182][ T7227] fuse: Bad value for 'user_id' [ 156.350137][ T9] usb usb2-port1: unable to enumerate USB device [ 156.750811][ T5825] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 156.954405][ T29] audit: type=1400 audit(1738690075.643:499): avc: denied { name_bind } for pid=7230 comm="syz.2.348" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 157.072021][ T7237] bridge3: entered promiscuous mode [ 157.107090][ T7237] CUSE: unknown device info "€" [ 157.112032][ T7237] CUSE: zero length info key specified [ 157.779539][ T5825] usb 1-1: USB disconnect, device number 7 [ 158.165858][ T29] audit: type=1400 audit(1738690076.843:500): avc: denied { bind } for pid=7238 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.641600][ T29] audit: type=1400 audit(1738690076.893:501): avc: denied { listen } for pid=7238 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.031289][ T29] audit: type=1400 audit(1738690078.733:502): avc: denied { listen } for pid=7260 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.121067][ T7268] SELinux: policydb string length 1277183315 does not match expected length 8 [ 160.140153][ T7268] SELinux: failed to load policy [ 160.483753][ T29] audit: type=1400 audit(1738690079.193:503): avc: denied { map } for pid=7260 comm="syz.2.357" path="socket:[13918]" dev="sockfs" ino=13918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.710690][ T29] audit: type=1400 audit(1738690079.293:504): avc: denied { read } for pid=7260 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.025187][ T7283] bridge4: entered promiscuous mode [ 161.056719][ T7283] CUSE: unknown device info "€" [ 161.061693][ T7283] CUSE: zero length info key specified [ 161.834415][ T29] audit: type=1400 audit(1738690080.543:505): avc: denied { read } for pid=7285 comm="syz.4.363" path="socket:[13935]" dev="sockfs" ino=13935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.997074][ T7295] netlink: 60 bytes leftover after parsing attributes in process `syz.3.364'. [ 162.874873][ T29] audit: type=1400 audit(1738690081.583:506): avc: denied { create } for pid=7302 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 162.904133][ T29] audit: type=1400 audit(1738690081.613:507): avc: denied { sys_admin } for pid=7302 comm="syz.0.366" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 163.080059][ T7306] FAULT_INJECTION: forcing a failure. [ 163.080059][ T7306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.093189][ T7306] CPU: 0 UID: 0 PID: 7306 Comm: syz.2.367 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 163.093203][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 163.093209][ T7306] Call Trace: [ 163.093213][ T7306] [ 163.093217][ T7306] dump_stack_lvl+0x16c/0x1f0 [ 163.093233][ T7306] should_fail_ex+0x50a/0x650 [ 163.093250][ T7306] _copy_from_user+0x2e/0xd0 [ 163.093267][ T7306] do_sock_getsockopt+0x5f6/0x800 [ 163.093283][ T7306] ? trace_lock_acquire+0x90/0x1f0 [ 163.093297][ T7306] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 163.093311][ T7306] ? lock_acquire+0x2f/0xb0 [ 163.093324][ T7306] ? __fget_files+0x40/0x3a0 [ 163.093336][ T7306] ? __fget_files+0x206/0x3a0 [ 163.093348][ T7306] __sys_getsockopt+0x12f/0x260 [ 163.093363][ T7306] __x64_sys_getsockopt+0xbd/0x160 [ 163.093374][ T7306] ? do_syscall_64+0x91/0x250 [ 163.093386][ T7306] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.093396][ T7306] do_syscall_64+0xcd/0x250 [ 163.093408][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.093422][ T7306] RIP: 0033:0x7f57faf8cda9 [ 163.093431][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.093442][ T7306] RSP: 002b:00007f57fbd2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 163.093452][ T7306] RAX: ffffffffffffffda RBX: 00007f57fb1a5fa0 RCX: 00007f57faf8cda9 [ 163.093459][ T7306] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 163.093465][ T7306] RBP: 00007f57fbd2c090 R08: 0000000020000540 R09: 0000000000000000 [ 163.093471][ T7306] R10: 0000000020001580 R11: 0000000000000246 R12: 0000000000000001 [ 163.093477][ T7306] R13: 0000000000000000 R14: 00007f57fb1a5fa0 R15: 00007ffe2bd8c818 [ 163.093490][ T7306] [ 163.382883][ T29] audit: type=1400 audit(1738690082.093:508): avc: denied { mount } for pid=7311 comm="syz.0.369" name="/" dev="autofs" ino=14372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 164.949020][ T7330] SELinux: policydb string length 1277183315 does not match expected length 8 [ 164.958817][ T7330] SELinux: failed to load policy [ 165.290400][ T29] audit: type=1400 audit(1738690083.973:509): avc: denied { read } for pid=7323 comm="syz.3.373" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 165.584814][ T7338] bridge3: entered promiscuous mode [ 165.613706][ T7338] CUSE: unknown device info "€" [ 165.618625][ T7338] CUSE: zero length info key specified [ 166.076819][ T29] audit: type=1400 audit(1738690083.973:510): avc: denied { open } for pid=7323 comm="syz.3.373" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 166.407133][ T7347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.378'. [ 166.450126][ T29] audit: type=1400 audit(1738690085.093:511): avc: denied { connect } for pid=7344 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.526713][ T29] audit: type=1400 audit(1738690085.093:512): avc: denied { write } for pid=7344 comm="syz.1.378" path="socket:[14024]" dev="sockfs" ino=14024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.078038][ T29] audit: type=1400 audit(1738690085.783:513): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 167.117171][ T6443] Bluetooth: hci5: Frame reassembly failed (-84) [ 167.220913][ T5825] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 167.292791][ T29] audit: type=1400 audit(1738690085.993:514): avc: denied { read append } for pid=7366 comm="syz.0.383" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 167.338296][ T29] audit: type=1400 audit(1738690085.993:515): avc: denied { open } for pid=7366 comm="syz.0.383" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 167.413965][ T5825] usb 3-1: Invalid ep0 maxpacket: 64 [ 167.450185][ T970] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.578793][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 167.587939][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 167.596059][ T5825] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 167.646173][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.675033][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.705498][ T970] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 167.724849][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.758712][ T970] usb 5-1: config 0 descriptor?? [ 168.424799][ T5825] usb 3-1: Invalid ep0 maxpacket: 64 [ 168.430365][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 168.435926][ T5825] usb usb3-port1: attempt power cycle [ 168.448117][ T25] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 168.451297][ T970] usbhid 5-1:0.0: can't add hid device: -71 [ 168.470751][ T25] usb 2-1: config 0 has no interface number 0 [ 168.475864][ T970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 168.488106][ T25] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 168.515805][ T970] usb 5-1: USB disconnect, device number 6 [ 168.561099][ T29] audit: type=1400 audit(1738690087.263:516): avc: denied { setopt } for pid=7384 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.580131][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.589611][ T25] usb 2-1: Product: syz [ 168.594667][ T25] usb 2-1: Manufacturer: syz [ 168.599279][ T25] usb 2-1: SerialNumber: syz [ 168.626506][ T25] usb 2-1: config 0 descriptor?? [ 168.916684][ T25] viperboard 2-1:0.98: version 0.00 found at bus 002 address 016 [ 168.941733][ T25] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 168.951965][ T5825] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 168.961429][ T25] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 168.983294][ T5825] usb 3-1: Invalid ep0 maxpacket: 64 [ 169.036024][ T7393] bridge1: entered promiscuous mode [ 169.065586][ T7393] CUSE: unknown device info "€" [ 169.070982][ T7393] CUSE: zero length info key specified [ 169.150524][ T5825] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 169.483032][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 169.489401][ T5832] Bluetooth: hci5: command 0x1003 tx timeout [ 169.577233][ T5825] usb 3-1: Invalid ep0 maxpacket: 64 [ 169.604863][ T5825] usb usb3-port1: unable to enumerate USB device [ 169.617002][ T25] usb 2-1: USB disconnect, device number 16 [ 169.823834][ T7399] FAULT_INJECTION: forcing a failure. [ 169.823834][ T7399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.837705][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.3.392 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 169.837728][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 169.837739][ T7399] Call Trace: [ 169.837745][ T7399] [ 169.837752][ T7399] dump_stack_lvl+0x16c/0x1f0 [ 169.837778][ T7399] should_fail_ex+0x50a/0x650 [ 169.837809][ T7399] _copy_from_user+0x2e/0xd0 [ 169.837838][ T7399] kstrtouint_from_user+0xd7/0x1c0 [ 169.837862][ T7399] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 169.837895][ T7399] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 169.837925][ T7399] proc_fail_nth_write+0x84/0x250 [ 169.837951][ T7399] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 169.837974][ T7399] ? ksys_write+0x12b/0x250 [ 169.838008][ T7399] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 169.838032][ T7399] vfs_write+0x24c/0x1150 [ 169.838060][ T7399] ? __fget_files+0x1fc/0x3a0 [ 169.838078][ T7399] ? __pfx___mutex_lock+0x10/0x10 [ 169.838099][ T7399] ? __pfx_vfs_write+0x10/0x10 [ 169.838135][ T7399] ? __fget_files+0x206/0x3a0 [ 169.838162][ T7399] ksys_write+0x12b/0x250 [ 169.838188][ T7399] ? __pfx_ksys_write+0x10/0x10 [ 169.838224][ T7399] do_syscall_64+0xcd/0x250 [ 169.838248][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.838273][ T7399] RIP: 0033:0x7fa0c0f8b85f [ 169.838288][ T7399] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 169.838310][ T7399] RSP: 002b:00007fa0bedd5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 169.838328][ T7399] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0c0f8b85f [ 169.838340][ T7399] RDX: 0000000000000001 RSI: 00007fa0bedd50a0 RDI: 0000000000000006 [ 169.838352][ T7399] RBP: 00007fa0bedd5090 R08: 0000000000000000 R09: 0000000000000000 [ 169.838363][ T7399] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 169.838374][ T7399] R13: 0000000000000000 R14: 00007fa0c11a6160 R15: 00007ffd9ea7bf48 [ 169.838401][ T7399] [ 170.035722][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.205568][ T7405] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 4, id = 0 [ 170.389252][ T7406] netlink: 80 bytes leftover after parsing attributes in process `syz.3.393'. [ 170.398794][ T7406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.393'. [ 170.702504][ T7409] fuse: Bad value for 'fd' [ 170.792039][ T7411] netlink: 'syz.4.396': attribute type 2 has an invalid length. [ 170.851211][ T7411] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 170.914928][ T29] audit: type=1400 audit(1738690089.613:517): avc: denied { nlmsg_write } for pid=7418 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 171.008820][ T29] audit: type=1326 audit(1738690089.693:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363338cda9 code=0x7ffc0000 [ 171.130954][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.285108][ T7427] pimreg3: entered allmulticast mode [ 171.759092][ T7424] netlink: 'syz.0.400': attribute type 9 has an invalid length. [ 171.767329][ T29] audit: type=1326 audit(1738690089.693:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f363338cda9 code=0x7ffc0000 [ 171.790536][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.858087][ T7424] netlink: 'syz.0.400': attribute type 7 has an invalid length. [ 171.867562][ T7424] netlink: 'syz.0.400': attribute type 8 has an invalid length. [ 171.971399][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.102888][ T29] audit: type=1326 audit(1738690089.693:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363338cda9 code=0x7ffc0000 [ 172.126162][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.135904][ T8] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 172.275565][ T29] audit: type=1326 audit(1738690089.693:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f363338b85f code=0x7ffc0000 [ 172.299874][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.366827][ T8] usb 3-1: config 0 descriptor?? [ 172.418301][ T8] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 172.433764][ T29] audit: type=1326 audit(1738690089.693:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363338cda9 code=0x7ffc0000 [ 172.588311][ T29] audit: type=1326 audit(1738690089.703:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363338cda9 code=0x7ffc0000 [ 172.632101][ T25] usb 3-1: USB disconnect, device number 11 [ 172.738206][ T29] audit: type=1400 audit(1738690089.773:524): avc: denied { getopt } for pid=7418 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.922260][ T7445] SELinux: policydb string length 1277183315 does not match expected length 8 [ 172.931846][ T7445] SELinux: failed to load policy [ 174.284862][ T7452] fuse: Bad value for 'fd' [ 174.352862][ T8] IPVS: starting estimator thread 0... [ 174.580082][ T7456] IPVS: using max 45 ests per chain, 108000 per kthread [ 174.675952][ T29] audit: type=1400 audit(1738690093.383:525): avc: denied { setopt } for pid=7461 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 175.680331][ T29] audit: type=1400 audit(1738690094.353:526): avc: denied { read } for pid=7472 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.004356][ T29] audit: type=1400 audit(1738690094.713:527): avc: denied { setopt } for pid=7475 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.056747][ T7479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.417'. [ 176.067249][ T7479] warning: `syz.1.417' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.309304][ T7497] SELinux: policydb string length 1277183315 does not match expected length 8 [ 177.319197][ T7497] SELinux: failed to load policy [ 178.269217][ T7508] syz.0.426 (7508): drop_caches: 2 [ 178.313533][ T7505] futex_wake_op: syz.2.427 tries to shift op by 32; fix this program [ 178.391654][ T7508] syz.0.426 (7508): drop_caches: 2 [ 178.450615][ T29] audit: type=1400 audit(1738690097.133:528): avc: denied { mounton } for pid=7503 comm="syz.2.427" path="/proc/296/task" dev="proc" ino=14823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 178.683099][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 178.810546][ T7518] bio_check_eod: 2 callbacks suppressed [ 178.810580][ T7518] syz.4.429: attempt to access beyond end of device [ 178.810580][ T7518] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 178.829491][ T7518] gfs2: error -5 reading superblock [ 178.869518][ T29] audit: type=1400 audit(1738690097.513:529): avc: denied { mounton } for pid=7511 comm="syz.4.429" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 179.440861][ T25] usb 3-1: device descriptor read/64, error -71 [ 179.449167][ T5825] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 179.630175][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 179.657643][ T5825] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 179.680585][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.691351][ T5825] usb 2-1: config 8 has no interface number 0 [ 179.694377][ T29] audit: type=1400 audit(1738690098.403:530): avc: denied { ioctl } for pid=7521 comm="syz.4.431" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.697724][ T5825] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 179.736284][ T5825] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 179.849986][ T5825] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 179.876134][ T5825] usb 2-1: config 8 interface 39 has no altsetting 0 [ 179.884684][ T5825] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 179.894716][ T25] usb 3-1: device descriptor read/64, error -71 [ 179.908043][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.916457][ T5825] usb 2-1: Product: syz [ 179.931850][ T5825] usb 2-1: Manufacturer: syz [ 179.936973][ T5825] usb 2-1: SerialNumber: syz [ 179.993595][ T7528] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7528 comm=syz.0.432 [ 180.007165][ T29] audit: type=1400 audit(1738690098.713:531): avc: denied { read } for pid=7524 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 180.025483][ T25] usb usb3-port1: attempt power cycle [ 180.044834][ T29] audit: type=1400 audit(1738690098.753:532): avc: denied { bind } for pid=7524 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.098109][ T7527] nvme_fabrics: missing parameter 'transport=%s' [ 180.104823][ T7527] nvme_fabrics: missing parameter 'nqn=%s' [ 180.443880][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 180.851302][ T5825] ipheth 2-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 180.866769][ T5825] ipheth 2-1:8.39: Apple iPhone USB Ethernet device attached [ 180.931019][ T25] usb 3-1: device descriptor read/8, error -71 [ 181.096307][ T5825] usb 2-1: USB disconnect, device number 17 [ 181.198096][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.437'. [ 181.303988][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 181.330108][ T7520] Bluetooth: hci2: command 0x0406 tx timeout [ 181.330227][ T5133] Bluetooth: hci0: command 0x0406 tx timeout [ 181.336172][ T7520] Bluetooth: hci1: command 0x0406 tx timeout [ 181.346541][ T5133] Bluetooth: hci4: command 0x0406 tx timeout [ 181.410260][ T5133] Bluetooth: hci3: command 0x0406 tx timeout [ 182.080834][ T7545] gretap1: entered allmulticast mode [ 182.099800][ T5825] ipheth 2-1:8.39: Apple iPhone USB Ethernet now disconnected [ 182.309997][ T7558] netlink: 80 bytes leftover after parsing attributes in process `syz.4.439'. [ 182.319230][ T7558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.439'. [ 183.915923][ T7591] netlink: 'syz.4.445': attribute type 12 has an invalid length. [ 183.976755][ T7591] netlink: 248 bytes leftover after parsing attributes in process `syz.4.445'. [ 184.093087][ T7573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.144964][ T7573] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 184.197427][ T7573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.211965][ T7573] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 184.267978][ T7573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.290371][ T7573] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 184.504219][ T7573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.530269][ T7573] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 184.748168][ T7573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.785335][ T7573] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 184.970006][ T970] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 185.008969][ T7614] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.447'. [ 185.194671][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 185.821185][ T970] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 185.842892][ T7623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.450'. [ 185.853173][ T970] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 185.894161][ T970] usb 3-1: config 0 has no interface number 0 [ 185.917311][ T970] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 185.938873][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.946922][ T970] usb 3-1: Product: syz [ 185.951186][ T970] usb 3-1: Manufacturer: syz [ 185.955790][ T970] usb 3-1: SerialNumber: syz [ 185.961783][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.447'. [ 185.972896][ T970] usb 3-1: config 0 descriptor?? [ 186.092577][ T5830] block nbd4: Receive control failed (result -32) [ 186.126767][ T7603] block nbd4: shutting down sockets [ 186.784265][ T970] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 186.791227][ T970] usb 3-1: No valid video chain found. [ 186.801122][ T970] usb 3-1: USB disconnect, device number 16 [ 187.732008][ T29] audit: type=1400 audit(1738690105.883:533): avc: denied { getopt } for pid=7635 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.877242][ T7669] netlink: 'syz.4.458': attribute type 12 has an invalid length. [ 188.893041][ T7669] netlink: 248 bytes leftover after parsing attributes in process `syz.4.458'. [ 189.683410][ T29] audit: type=1326 audit(1738690108.393:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 189.742243][ T29] audit: type=1326 audit(1738690108.393:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 189.848836][ T29] audit: type=1326 audit(1738690108.393:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 189.923161][ T29] audit: type=1326 audit(1738690108.393:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 190.069823][ T29] audit: type=1326 audit(1738690108.393:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 190.275140][ T29] audit: type=1326 audit(1738690108.393:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 190.299242][ T29] audit: type=1326 audit(1738690108.393:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 190.347818][ T29] audit: type=1326 audit(1738690108.393:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 190.422653][ T29] audit: type=1326 audit(1738690108.393:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57faf8cda9 code=0x7fc00000 [ 190.514788][ T7724] kAFS: No cell specified [ 190.804621][ T6443] Bluetooth: hci5: Frame reassembly failed (-84) [ 191.040722][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.201634][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.233971][ T7759] fuse: Bad value for 'rootmode' [ 191.239087][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.289480][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 191.344928][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.406630][ T25] usb 5-1: config 0 descriptor?? [ 192.004660][ T25] pyra 0003:1E7D:2CF6.0006: item fetching failed at offset 0/7 [ 192.023430][ T25] pyra 0003:1E7D:2CF6.0006: parse failed [ 192.029202][ T25] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -22 [ 192.081450][ T7774] netlink: 76 bytes leftover after parsing attributes in process `syz.1.474'. [ 192.262937][ T8] usb 5-1: USB disconnect, device number 7 [ 192.850007][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 194.026289][ T7802] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 194.036659][ T7802] SELinux: failed to load policy [ 194.256269][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.262830][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.921521][ T25] IPVS: starting estimator thread 0... [ 195.010267][ T7824] IPVS: using max 23 ests per chain, 55200 per kthread [ 196.490321][ T52] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.703154][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 196.703170][ T29] audit: type=1400 audit(1738690115.413:563): avc: denied { mount } for pid=7820 comm="syz.2.486" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.791079][ T7857] kAFS: No cell specified [ 196.834322][ T52] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.843750][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.899612][ T52] usb 5-1: config 0 descriptor?? [ 196.912046][ T52] cp210x 5-1:0.0: cp210x converter detected [ 196.959373][ T29] audit: type=1400 audit(1738690115.663:564): avc: denied { read write } for pid=7820 comm="syz.2.486" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 196.964601][ T8] hid-generic 0004:0004:0000.0007: unknown main item tag 0x0 [ 197.022118][ T29] audit: type=1400 audit(1738690115.663:565): avc: denied { open } for pid=7820 comm="syz.2.486" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 197.092115][ T8] hid-generic 0004:0004:0000.0007: unknown main item tag 0x0 [ 197.127796][ T8] hid-generic 0004:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 197.906252][ T29] audit: type=1400 audit(1738690116.613:566): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 198.264617][ T7887] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 198.274613][ T7887] SELinux: failed to load policy [ 198.883912][ T52] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 198.910485][ T52] cp210x 5-1:0.0: querying part number failed [ 198.943184][ T52] usb 5-1: cp210x converter now attached to ttyUSB0 [ 199.018382][ T52] usb 5-1: USB disconnect, device number 8 [ 199.075189][ T52] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.120823][ T52] cp210x 5-1:0.0: device disconnected [ 199.932480][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 200.039394][ T7917] syz.3.503: attempt to access beyond end of device [ 200.039394][ T7917] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 200.073004][ T5876] hid-generic 0004:0004:0000.0008: unknown main item tag 0x0 [ 200.089723][ T5876] hid-generic 0004:0004:0000.0008: unknown main item tag 0x0 [ 200.101897][ T7917] XFS (nbd3): SB validate failed with error -5. [ 200.106312][ T5876] hid-generic 0004:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 200.201499][ T7937] FAULT_INJECTION: forcing a failure. [ 200.201499][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 200.266524][ T52] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.324011][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.1.505 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 200.324037][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 200.324048][ T7937] Call Trace: [ 200.324060][ T7937] [ 200.324067][ T7937] dump_stack_lvl+0x16c/0x1f0 [ 200.324093][ T7937] should_fail_ex+0x50a/0x650 [ 200.324119][ T7937] ? fs_reclaim_acquire+0xae/0x150 [ 200.324147][ T7937] ? tomoyo_realpath_from_path+0xb9/0x720 [ 200.324172][ T7937] should_failslab+0xc2/0x120 [ 200.324193][ T7937] __kmalloc_noprof+0xcb/0x510 [ 200.324212][ T7937] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 200.324243][ T7937] tomoyo_realpath_from_path+0xb9/0x720 [ 200.324267][ T7937] ? tomoyo_path_number_perm+0x235/0x590 [ 200.324291][ T7937] ? tomoyo_path_number_perm+0x235/0x590 [ 200.324315][ T7937] tomoyo_path_number_perm+0x248/0x590 [ 200.324336][ T7937] ? tomoyo_path_number_perm+0x235/0x590 [ 200.324360][ T7937] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.324408][ T7937] ? __pfx_lock_release+0x10/0x10 [ 200.324431][ T7937] ? trace_lock_acquire+0x14e/0x1f0 [ 200.324456][ T7937] ? lock_acquire+0x2f/0xb0 [ 200.324478][ T7937] ? __fget_files+0x40/0x3a0 [ 200.324500][ T7937] ? __fget_files+0x206/0x3a0 [ 200.324521][ T7937] security_file_ioctl+0x9b/0x240 [ 200.324547][ T7937] __x64_sys_ioctl+0xb7/0x200 [ 200.324574][ T7937] do_syscall_64+0xcd/0x250 [ 200.324597][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.324625][ T7937] RIP: 0033:0x7f363338cda9 [ 200.324640][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.324657][ T7937] RSP: 002b:00007f36341e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.324675][ T7937] RAX: ffffffffffffffda RBX: 00007f36335a5fa0 RCX: 00007f363338cda9 [ 200.324687][ T7937] RDX: 00000000200000c0 RSI: 0000000000003b82 RDI: 0000000000000003 [ 200.324698][ T7937] RBP: 00007f36341e0090 R08: 0000000000000000 R09: 0000000000000000 [ 200.324709][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.324720][ T7937] R13: 0000000000000000 R14: 00007f36335a5fa0 R15: 00007ffc83e9f018 [ 200.324746][ T7937] [ 200.324753][ T7937] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.658389][ T52] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.684285][ T52] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 200.734651][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.769787][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 200.955806][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 200.968903][ T52] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.978118][ T52] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.994223][ T52] usb 5-1: Product: syz [ 200.998397][ T52] usb 5-1: Manufacturer: syz [ 201.041981][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 201.047215][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 201.458588][ T52] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 201.555883][ T52] cdc_wdm 5-1:1.0: Unknown control protocol [ 201.709023][ T5876] usb 5-1: USB disconnect, device number 9 [ 201.727224][ T7963] syzkaller1: entered promiscuous mode [ 201.819756][ T7963] syzkaller1: entered allmulticast mode [ 202.127596][ T7970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.512'. [ 202.161980][ T52] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.516977][ T29] audit: type=1400 audit(1738690121.002:567): avc: denied { getopt } for pid=7953 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.326165][ T29] audit: type=1400 audit(1738690121.779:568): avc: denied { watch } for pid=7991 comm="syz.4.518" path="/116" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 203.368231][ T29] audit: type=1400 audit(1738690121.797:569): avc: denied { read } for pid=7991 comm="syz.4.518" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.392362][ T29] audit: type=1400 audit(1738690121.797:570): avc: denied { open } for pid=7991 comm="syz.4.518" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.416025][ T29] audit: type=1400 audit(1738690121.854:571): avc: denied { getopt } for pid=7984 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 203.485568][ T25] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 203.486326][ T29] audit: type=1400 audit(1738690121.919:572): avc: denied { write } for pid=7975 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.577441][ T7998] input: syz0 as /devices/virtual/input/input6 [ 203.838978][ T29] audit: type=1400 audit(1738690122.246:573): avc: denied { append } for pid=7997 comm="syz.2.522" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 203.871898][ T25] usb 2-1: device descriptor read/64, error -71 [ 205.037694][ T7998] kvm: emulating exchange as write [ 205.259807][ T25] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 205.287437][ T29] audit: type=1400 audit(1738690123.603:574): avc: denied { map } for pid=8016 comm="syz.3.526" path="socket:[17585]" dev="sockfs" ino=17585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 205.398981][ T25] usb 2-1: device descriptor read/64, error -71 [ 205.550564][ T25] usb usb2-port1: attempt power cycle [ 206.354000][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'. [ 206.865801][ T29] audit: type=1400 audit(1738690125.071:575): avc: denied { setattr } for pid=8042 comm="syz.0.534" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.662998][ T8036] block nbd2: shutting down sockets [ 208.492761][ T29] audit: type=1400 audit(1738690126.502:576): avc: denied { ioctl } for pid=8053 comm="syz.0.537" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 209.944239][ T8072] pimreg3: entered allmulticast mode [ 211.582440][ T8080] input: syz0 as /devices/virtual/input/input7 [ 211.649382][ T8081] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.702276][ T8095] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 213.713672][ T8095] SELinux: failed to load policy [ 214.413499][ T8104] IPVS: Error joining to the multicast group [ 214.909829][ T8112] pimreg3: entered allmulticast mode [ 217.516852][ T8135] SELinux: policydb string length 1277183315 does not match expected length 8 [ 217.526098][ T8135] SELinux: failed to load policy [ 217.639727][ T5931] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 217.799998][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 217.807502][ T5931] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 217.823154][ T8137] netlink: 64 bytes leftover after parsing attributes in process `syz.2.561'. [ 217.833693][ T5931] usb 1-1: config 0 has no interface number 0 [ 217.839802][ T5931] usb 1-1: too many endpoints for config 0 interface 151 altsetting 103: 116, using maximum allowed: 30 [ 217.851244][ T5931] usb 1-1: config 0 interface 151 altsetting 103 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 217.867120][ T8139] netlink: 64 bytes leftover after parsing attributes in process `syz.2.561'. [ 217.879318][ T5931] usb 1-1: config 0 interface 151 has no altsetting 0 [ 217.939256][ T5931] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 217.948328][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.019875][ T5931] usb 1-1: config 0 descriptor?? [ 218.030460][ T5931] gspca_main: sq930x-2.14.0 probing 041e:403c [ 219.154815][ T5931] gspca_sq930x: reg_r 001f failed -110 [ 219.166122][ T5931] sq930x 1-1:0.151: probe with driver sq930x failed with error -110 [ 219.294917][ T8150] netlink: 'syz.2.564': attribute type 12 has an invalid length. [ 219.306422][ T8150] netlink: 'syz.2.564': attribute type 29 has an invalid length. [ 219.314499][ T8150] netlink: 148 bytes leftover after parsing attributes in process `syz.2.564'. [ 219.350800][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.368762][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.596087][ T5876] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 219.767259][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 219.775653][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 219.786911][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 219.798473][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 219.883044][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 219.894108][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.912112][ T5876] usb 2-1: config 0 descriptor?? [ 219.929218][ T8152] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.940991][ T8152] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 220.168495][ T5876] usb 2-1: USB disconnect, device number 21 [ 220.319877][ T29] audit: type=1400 audit(1738690137.662:577): avc: denied { mount } for pid=8169 comm="syz.2.570" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 220.577386][ T29] audit: type=1400 audit(1738690137.671:578): avc: denied { mounton } for pid=8169 comm="syz.2.570" path="/122/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 220.633980][ T5876] usb 1-1: USB disconnect, device number 8 [ 221.525075][ T29] audit: type=1400 audit(1738690138.251:579): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 221.545500][ T29] audit: type=1400 audit(1738690138.756:580): avc: denied { create } for pid=8178 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.599739][ T29] audit: type=1400 audit(1738690138.784:581): avc: denied { connect } for pid=8178 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.756363][ T29] audit: type=1400 audit(1738690138.868:582): avc: denied { bind } for pid=8178 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.775541][ T29] audit: type=1400 audit(1738690138.896:583): avc: denied { bind } for pid=8182 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.830367][ T29] audit: type=1400 audit(1738690138.943:584): avc: denied { getopt } for pid=8178 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.442201][ T8192] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 222.696302][ T29] audit: type=1400 audit(1738690139.888:585): avc: denied { read } for pid=5179 comm="acpid" name="event6" dev="devtmpfs" ino=2980 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 222.779098][ T29] audit: type=1400 audit(1738690139.888:586): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=2980 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 225.233576][ T8222] netlink: 'syz.2.585': attribute type 12 has an invalid length. [ 225.243359][ T8222] netlink: 'syz.2.585': attribute type 29 has an invalid length. [ 225.252385][ T8222] netlink: 148 bytes leftover after parsing attributes in process `syz.2.585'. [ 226.847566][ T5874] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 227.026030][ T5874] usb 3-1: device descriptor read/64, error -71 [ 227.300845][ T5874] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 227.572736][ T5874] usb 3-1: device descriptor read/64, error -71 [ 227.635868][ T25] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 227.787767][ T5874] usb usb3-port1: attempt power cycle [ 227.809182][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 227.831478][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 227.853121][ T25] usb 2-1: config 2 has an invalid interface number: 226 but max is 0 [ 227.870417][ T25] usb 2-1: config 2 has no interface number 0 [ 227.881169][ T25] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 228.070785][ T25] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 228.098550][ T25] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 228.158804][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.170405][ T5874] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 228.170880][ T25] usb 2-1: Product: syz [ 228.182994][ T25] usb 2-1: Manufacturer: syz [ 228.188809][ T25] usb 2-1: SerialNumber: syz [ 228.203318][ T5874] usb 3-1: device descriptor read/8, error -71 [ 228.435117][ T25] usb 2-1: USB disconnect, device number 22 [ 228.458479][ T5874] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 228.480844][ T5874] usb 3-1: device descriptor read/8, error -71 [ 228.601084][ T5874] usb usb3-port1: unable to enumerate USB device [ 229.045561][ T8262] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 229.071365][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 229.071378][ T29] audit: type=1400 audit(1738690145.847:589): avc: denied { relabelto } for pid=8259 comm="syz.0.595" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 229.270057][ T29] audit: type=1400 audit(1738690145.847:590): avc: denied { associate } for pid=8259 comm="syz.0.595" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 229.407663][ T29] audit: type=1400 audit(1738690146.165:591): avc: denied { create } for pid=8263 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 229.476834][ T8266] SELinux: policydb string length 1277183315 does not match expected length 8 [ 229.511390][ T8266] SELinux: failed to load policy [ 229.655781][ T5931] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 230.351038][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 230.359655][ T5931] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 230.388425][ T5931] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.410570][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.420999][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.429287][ T5931] usb 2-1: Product: syz [ 230.434155][ T5931] usb 2-1: Manufacturer: syz [ 230.439010][ T5931] usb 2-1: SerialNumber: syz [ 230.909188][ T5931] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 231.699728][ T52] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 231.725839][ T5931] usb 2-1: USB disconnect, device number 23 [ 232.251476][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.276992][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.371882][ T52] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 232.383349][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.744915][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.805952][ T52] usb 1-1: config 0 descriptor?? [ 233.376257][ T52] pyra 0003:1E7D:2CF6.0009: item fetching failed at offset 0/7 [ 233.399378][ T52] pyra 0003:1E7D:2CF6.0009: parse failed [ 233.406842][ T52] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -22 [ 233.757645][ T52] usb 1-1: USB disconnect, device number 9 [ 233.999532][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 234.009112][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 234.020661][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 234.593447][ T8317] fuse: Bad value for 'fd' [ 234.696420][ T29] audit: type=1400 audit(1738690380.119:592): avc: denied { ioctl } for pid=8322 comm="syz.0.613" path="socket:[18224]" dev="sockfs" ino=18224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.559736][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.566042][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.038933][ T5194] udevd[5194]: worker [5842] /devices/virtual/nfc/nfc2 is taking a long time [ 325.234375][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.240955][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.661446][ T30] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 367.669157][ T30] Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 367.676868][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.685720][ T30] task:kworker/0:1 state:D stack:22128 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 367.698119][ T30] Workqueue: events rfkill_sync_work [ 367.703440][ T30] Call Trace: [ 367.706758][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 367.709697][ T30] __schedule+0xf43/0x5890 [ 367.714213][ T30] ? __pfx_mark_lock+0x10/0x10 [ 367.719064][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 367.724364][ T30] ? find_held_lock+0x2d/0x110 [ 367.729658][ T30] ? __pfx___schedule+0x10/0x10 [ 367.734792][ T30] ? schedule+0x298/0x350 [ 367.778571][ T30] ? __pfx_lock_release+0x10/0x10 [ 367.783655][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.788879][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.802087][ T30] schedule+0xe7/0x350 [ 367.806195][ T30] schedule_preempt_disabled+0x13/0x30 [ 367.811754][ T30] __mutex_lock+0x6bd/0xb10 [ 367.816261][ T30] ? __pfx_lock_release+0x10/0x10 [ 367.821801][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 367.826406][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 367.831434][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 367.836776][ T30] ? rfkill_set_block+0x198/0x560 [ 367.841801][ T30] ? __pfx_lock_release+0x10/0x10 [ 367.846865][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 367.851451][ T30] nfc_dev_down+0x2d/0x2e0 [ 367.856380][ T30] nfc_rfkill_set_block+0x39/0xe0 [ 367.861412][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 367.867152][ T30] rfkill_set_block+0x203/0x560 [ 367.872009][ T30] rfkill_sync+0x10a/0x1c0 [ 367.876498][ T30] rfkill_sync_work+0x27/0x40 [ 367.881182][ T30] process_one_work+0x9c5/0x1ba0 [ 367.886598][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 367.892239][ T30] ? __pfx_process_one_work+0x10/0x10 [ 367.897711][ T30] ? assign_work+0x1a0/0x250 [ 367.902315][ T30] worker_thread+0x6c8/0xf00 [ 367.907109][ T30] ? __pfx_worker_thread+0x10/0x10 [ 367.912236][ T30] kthread+0x3af/0x750 [ 367.916307][ T30] ? __pfx_kthread+0x10/0x10 [ 367.921289][ T30] ? lock_acquire+0x2f/0xb0 [ 367.925786][ T30] ? __pfx_kthread+0x10/0x10 [ 367.930439][ T30] ret_from_fork+0x45/0x80 [ 367.934860][ T30] ? __pfx_kthread+0x10/0x10 [ 367.939541][ T30] ret_from_fork_asm+0x1a/0x30 [ 367.944331][ T30] [ 367.947386][ T30] INFO: task kworker/0:2:970 blocked for more than 143 seconds. [ 367.955366][ T30] Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 367.963043][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.971737][ T30] task:kworker/0:2 state:D stack:22032 pid:970 tgid:970 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 367.984145][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 367.990817][ T30] Call Trace: [ 367.994110][ T30] [ 367.997037][ T30] __schedule+0xf43/0x5890 [ 368.001463][ T30] ? __pfx_mark_lock+0x10/0x10 [ 368.006280][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 368.011576][ T30] ? find_held_lock+0x2d/0x110 [ 368.016695][ T30] ? __pfx___schedule+0x10/0x10 [ 368.021536][ T30] ? schedule+0x298/0x350 [ 368.026057][ T30] ? __pfx_lock_release+0x10/0x10 [ 368.031089][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.036335][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 368.041549][ T30] schedule+0xe7/0x350 [ 368.045643][ T30] schedule_preempt_disabled+0x13/0x30 [ 368.051508][ T30] __mutex_lock+0x6bd/0xb10 [ 368.055999][ T30] ? lock_acquire+0x2f/0xb0 [ 368.060536][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 368.066879][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 368.072019][ T30] ? rcu_is_watching+0x12/0xc0 [ 368.076783][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 368.082311][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 368.088688][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 368.094843][ T30] process_one_work+0x9c5/0x1ba0 [ 368.099826][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 368.105463][ T30] ? __pfx_process_one_work+0x10/0x10 [ 368.111180][ T30] ? assign_work+0x1a0/0x250 [ 368.115759][ T30] worker_thread+0x6c8/0xf00 [ 368.120339][ T30] ? __kthread_parkme+0x148/0x220 [ 368.125379][ T30] ? __pfx_worker_thread+0x10/0x10 [ 368.130495][ T30] kthread+0x3af/0x750 [ 368.134621][ T30] ? __pfx_kthread+0x10/0x10 [ 368.139213][ T30] ? lock_acquire+0x2f/0xb0 [ 368.144322][ T30] ? __pfx_kthread+0x10/0x10 [ 368.148917][ T30] ret_from_fork+0x45/0x80 [ 368.153380][ T30] ? __pfx_kthread+0x10/0x10 [ 368.157979][ T30] ret_from_fork_asm+0x1a/0x30 [ 368.162744][ T30] [ 368.165903][ T30] INFO: task udevd:5842 blocked for more than 143 seconds. [ 368.173101][ T30] Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 368.181223][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.189972][ T30] task:udevd state:D stack:26032 pid:5842 tgid:5842 ppid:5194 task_flags:0x400140 flags:0x00000002 [ 368.201964][ T30] Call Trace: [ 368.205237][ T30] [ 368.208611][ T30] __schedule+0xf43/0x5890 [ 368.213046][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 368.218312][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 368.223520][ T30] ? __pfx___schedule+0x10/0x10 [ 368.228414][ T30] ? schedule+0x298/0x350 [ 368.232751][ T30] ? __pfx_lock_release+0x10/0x10 [ 368.237765][ T30] ? __mutex_trylock_common+0x78/0x250 [ 368.243628][ T30] ? lock_acquire+0x2f/0xb0 [ 368.248125][ T30] ? schedule+0x1fd/0x350 [ 368.252568][ T30] schedule+0xe7/0x350 [ 368.256647][ T30] schedule_preempt_disabled+0x13/0x30 [ 368.262299][ T30] __mutex_lock+0x6bd/0xb10 [ 368.266808][ T30] ? uevent_show+0x188/0x3b0 [ 368.271933][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 368.276973][ T30] ? uevent_show+0x188/0x3b0 [ 368.281614][ T30] uevent_show+0x188/0x3b0 [ 368.286030][ T30] ? __pfx_uevent_show+0x10/0x10 [ 368.290952][ T30] dev_attr_show+0x53/0xe0 [ 368.295405][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 368.300547][ T30] sysfs_kf_seq_show+0x23e/0x410 [ 368.305830][ T30] seq_read_iter+0x4f4/0x12b0 [ 368.310503][ T30] kernfs_fop_read_iter+0x414/0x580 [ 368.315753][ T30] ? rw_verify_area+0xcf/0x680 [ 368.320539][ T30] vfs_read+0x886/0xbf0 [ 368.324764][ T30] ? __pfx_vfs_read+0x10/0x10 [ 368.329459][ T30] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 368.335584][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.340803][ T30] ksys_read+0x12b/0x250 [ 368.345108][ T30] ? __pfx_ksys_read+0x10/0x10 [ 368.349993][ T30] do_syscall_64+0xcd/0x250 [ 368.354505][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.360431][ T30] RIP: 0033:0x7fa915116b6a [ 368.364841][ T30] RSP: 002b:00007ffd1e38d0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.373624][ T30] RAX: ffffffffffffffda RBX: 000055794e783a50 RCX: 00007fa915116b6a [ 368.381772][ T30] RDX: 0000000000001000 RSI: 000055794e7fcd30 RDI: 0000000000000008 [ 368.389780][ T30] RBP: 000055794e783a50 R08: 0000000000000008 R09: 0000000000000010 [ 368.397758][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 368.406139][ T30] R13: 0000000000003fff R14: 00007ffd1e38d5d8 R15: 000000000000000a [ 368.414165][ T30] [ 368.417216][ T30] INFO: task syz.4.525:8013 blocked for more than 144 seconds. [ 368.425047][ T30] Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 368.433852][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.442574][ T30] task:syz.4.525 state:D stack:26048 pid:8013 tgid:8013 ppid:5834 task_flags:0x400040 flags:0x00004004 [ 368.454649][ T30] Call Trace: [ 368.457941][ T30] [ 368.460876][ T30] __schedule+0xf43/0x5890 [ 368.465766][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 368.470985][ T30] ? __pfx_lockdep_lock+0x10/0x10 [ 368.476120][ T30] ? __pfx___schedule+0x10/0x10 [ 368.480988][ T30] ? schedule+0x298/0x350 [ 368.485387][ T30] ? __pfx_lock_release+0x10/0x10 [ 368.490422][ T30] ? lock_acquire+0x2f/0xb0 [ 368.495466][ T30] ? schedule+0x1fd/0x350 [ 368.499831][ T30] schedule+0xe7/0x350 [ 368.503882][ T30] schedule_timeout+0x244/0x280 [ 368.515561][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 368.521122][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.526375][ T30] __wait_for_common+0x3e1/0x600 [ 368.531725][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 368.537094][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 368.542639][ T30] ? lock_acquire+0x2f/0xb0 [ 368.547169][ T30] ? __flush_work+0x4db/0xcd0 [ 368.551915][ T30] ? __flush_work+0x4db/0xcd0 [ 368.556599][ T30] __flush_work+0x7d8/0xcd0 [ 368.561456][ T30] ? nfc_unregister_device+0x60/0x330 [ 368.566814][ T30] ? __pfx___flush_work+0x10/0x10 [ 368.571903][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 368.577193][ T30] ? __pfx___might_resched+0x10/0x10 [ 368.582627][ T30] __cancel_work_sync+0x10c/0x130 [ 368.587673][ T30] rfkill_unregister+0x95/0x2c0 [ 368.592980][ T30] nfc_unregister_device+0x94/0x330 [ 368.598186][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 368.603952][ T30] virtual_ncidev_close+0x4b/0xa0 [ 368.608989][ T30] __fput+0x3ff/0xb70 [ 368.613615][ T30] task_work_run+0x14e/0x250 [ 368.618217][ T30] ? __pfx_task_work_run+0x10/0x10 [ 368.623847][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 368.629577][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 368.635242][ T30] do_syscall_64+0xda/0x250 [ 368.639754][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.645725][ T30] RIP: 0033:0x7f9d75f8cda9 [ 368.650136][ T30] RSP: 002b:00007fffd4e2cbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 368.658883][ T30] RAX: 0000000000000000 RBX: 00007f9d761a7ba0 RCX: 00007f9d75f8cda9 [ 368.666948][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 368.674915][ T30] RBP: 00007f9d761a7ba0 R08: 00000000000144fc R09: 00007fffd4e2cecf [ 368.682925][ T30] R10: 00000000005e653c R11: 0000000000000246 R12: 000000000003234e [ 368.691153][ T30] R13: 00007f9d761a6080 R14: 0000000000000032 R15: ffffffffffffffff [ 368.699175][ T30] [ 368.702223][ T30] [ 368.702223][ T30] Showing all locks held in the system: [ 368.710049][ T30] 4 locks held by kworker/0:1/9: [ 368.714976][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 368.725825][ T30] #1: ffffc900000e7d18 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 368.737648][ T30] #2: ffffffff90397d88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 368.747631][ T30] #3: ffff888031516100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 368.757111][ T30] 1 lock held by khungtaskd/30: [ 368.762120][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 368.772039][ T30] 3 locks held by kworker/0:2/970: [ 368.777336][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 368.788076][ T30] #1: ffffc90003a0fd18 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 368.800996][ T30] #2: ffffffff90397d88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 368.812454][ T30] 2 locks held by getty/5580: [ 368.817607][ T30] #0: ffff88803259d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 368.827411][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 368.837553][ T30] 1 lock held by syz-executor/5837: [ 368.842738][ T30] #0: ffffffff90397d88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 368.853527][ T30] 4 locks held by udevd/5842: [ 368.858378][ T30] #0: ffff88807ec199e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 368.867286][ T30] #1: ffff8880363a0088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 368.876728][ T30] #2: ffff888030d6ad28 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 368.886485][ T30] #3: ffff888031516100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x188/0x3b0 [ 368.895532][ T30] 2 locks held by kworker/u8:11/6165: [ 368.900908][ T30] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 368.910928][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 368.922741][ T30] 1 lock held by syz.4.525/8013: [ 368.927657][ T30] #0: ffff888031516100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 368.937465][ T30] 2 locks held by syz-executor/8211: [ 368.942736][ T30] #0: ffff888078e0b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 368.952179][ T30] #1: ffffffff90397d88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 368.962421][ T30] 2 locks held by syz-executor/8216: [ 368.967739][ T30] #0: ffff888078e0f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 368.977202][ T30] #1: ffffffff90397d88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 368.987642][ T30] 2 locks held by syz.2.607/8305: [ 368.992654][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.001118][ T30] #1: ffffffff90397d88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x13b/0x750 [ 369.011189][ T30] 1 lock held by syz.1.614/8321: [ 369.016115][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.025760][ T30] 1 lock held by syz.0.613/8323: [ 369.033393][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.041949][ T30] 1 lock held by syz-executor/8331: [ 369.047139][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.055724][ T30] 1 lock held by syz-executor/8334: [ 369.061014][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.069916][ T30] 1 lock held by syz-executor/8335: [ 369.075379][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.083872][ T30] 1 lock held by syz-executor/8337: [ 369.089041][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.098071][ T30] 1 lock held by syz-executor/8339: [ 369.103263][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.111886][ T30] 1 lock held by syz-executor/8341: [ 369.117178][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.125988][ T30] 1 lock held by syz-executor/8344: [ 369.131163][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.139743][ T30] 1 lock held by syz-executor/8345: [ 369.144934][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.153445][ T30] 1 lock held by syz-executor/8347: [ 369.159206][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.167688][ T30] 1 lock held by syz-executor/8349: [ 369.172934][ T30] #0: ffffffff8eec1e88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 369.181601][ T30] [ 369.183925][ T30] ============================================= [ 369.183925][ T30] [ 369.192904][ T30] NMI backtrace for cpu 1 [ 369.192911][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 369.192924][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 369.192930][ T30] Call Trace: [ 369.192933][ T30] [ 369.192938][ T30] dump_stack_lvl+0x116/0x1f0 [ 369.192952][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 369.192968][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 369.192982][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 369.192998][ T30] watchdog+0xf62/0x12b0 [ 369.193015][ T30] ? __pfx_watchdog+0x10/0x10 [ 369.193029][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.193041][ T30] ? __kthread_parkme+0x148/0x220 [ 369.193052][ T30] ? __pfx_watchdog+0x10/0x10 [ 369.193067][ T30] kthread+0x3af/0x750 [ 369.193079][ T30] ? __pfx_kthread+0x10/0x10 [ 369.193093][ T30] ? __pfx_kthread+0x10/0x10 [ 369.193105][ T30] ret_from_fork+0x45/0x80 [ 369.193118][ T30] ? __pfx_kthread+0x10/0x10 [ 369.193130][ T30] ret_from_fork_asm+0x1a/0x30 [ 369.193147][ T30] [ 369.193151][ T30] Sending NMI from CPU 1 to CPUs 0: [ 369.305818][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 369.306856][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 369.321797][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 369.332281][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 369.342324][ T30] Call Trace: [ 369.345589][ T30] [ 369.348510][ T30] dump_stack_lvl+0x3d/0x1f0 [ 369.353093][ T30] panic+0x71d/0x800 [ 369.356979][ T30] ? __pfx_panic+0x10/0x10 [ 369.361405][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 369.366772][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 369.372745][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 369.378108][ T30] ? watchdog+0xdcc/0x12b0 [ 369.382518][ T30] ? watchdog+0xdbf/0x12b0 [ 369.386932][ T30] watchdog+0xddd/0x12b0 [ 369.391172][ T30] ? __pfx_watchdog+0x10/0x10 [ 369.395842][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.401032][ T30] ? __kthread_parkme+0x148/0x220 [ 369.406044][ T30] ? __pfx_watchdog+0x10/0x10 [ 369.410716][ T30] kthread+0x3af/0x750 [ 369.414775][ T30] ? __pfx_kthread+0x10/0x10 [ 369.419357][ T30] ? __pfx_kthread+0x10/0x10 [ 369.423934][ T30] ret_from_fork+0x45/0x80 [ 369.428342][ T30] ? __pfx_kthread+0x10/0x10 [ 369.432924][ T30] ret_from_fork_asm+0x1a/0x30 [ 369.437686][ T30] [ 369.440907][ T30] Kernel Offset: disabled [ 369.445233][ T30] Rebooting in 86400 seconds..