last executing test programs: 30.379000685s ago: executing program 1 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0xb2403) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0x17a) add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, 0xfffffffffffffffc) mount$9p_fd(0x0, 0x0, 0x0, 0x800040, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000780)={&(0x7f0000000200)=[0x0], 0x1, 0xe9}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 28.729894614s ago: executing program 1 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), 0x0, &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 27.83594711s ago: executing program 1 (id=687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 27.458216957s ago: executing program 1 (id=689): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x800000000020000}, 0x18) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x141780, 0x2, 0xb}, 0x18) faccessat2(r0, &(0x7f0000000100)='./file0\x00', 0x4, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x400c) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) socket$inet(0x2, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000183e8e25170e7b70000000000000000000000000000556dc0d049a888c82583a42869dffe6e962ccd60368fafeea15e131ccd35f786fdffffffffca2740d7"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000280)=@udp6=r7, 0x1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = io_uring_setup(0x6f49, &(0x7f0000000080)={0x0, 0xffffeffd, 0x18, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x133f) 26.197945002s ago: executing program 1 (id=699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.090006124s ago: executing program 1 (id=700): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x40, r2, 0x1, 0x0, 0x2, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x40080) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close(0x3) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$nci(r3, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057f030603f93677ff6fcad8cf254cac"], 0x12) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x40, r2, 0x1, 0x0, 0x2, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x40080) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async) close(0x3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) write$nci(r3, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057f030603f93677ff6fcad8cf254cac"], 0x12) (async) 24.058231109s ago: executing program 3 (id=708): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000040)={@mcast1}, 0x14) epoll_create(0x200008) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0x427, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40080) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x81}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000002c0)) r6 = gettid() r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000340)={0x1, 0x2, 0x7b, 0x6, r6}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000100)={[0x7ff]}, &(0x7f0000000480), &(0x7f00000003c0), 0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff, 0x6}, 0x0, &(0x7f0000004680)={0x9, 0x4, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23.967384604s ago: executing program 2 (id=710): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000000), 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x20002000}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14927e, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xb, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0xd000) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 23.787092214s ago: executing program 4 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close(r2) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = io_uring_setup(0x71f7, &(0x7f00000002c0)={0x0, 0x0, 0x91, 0x0, 0x10fff}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x7}}}, 0x24}}, 0x488c0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) 22.964761766s ago: executing program 3 (id=713): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x180, 0x10, 0x1, 0xfffffffd, 0x0, {{@in6=@local, @in6=@remote, 0xffff, 0x0, 0x0, 0x0, 0x80ff}, {@in6=@mcast1, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0x2}, {0x0, 0x3, 0xb}, 0x70bd27, 0x4000, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x4, {{'ecb(arc4)\x00'}}}]}, 0x180}}, 0x0) 22.763171561s ago: executing program 2 (id=714): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x35, 0x2b, 0xab, 0x10, 0x5ac, 0xe6dd, 0xe5c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0xfc, 0x0, 0xff, 0x1, 0x1}}]}}]}}, 0x0) 22.69384594s ago: executing program 4 (id=715): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 22.203351122s ago: executing program 3 (id=716): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x1, 0x3, 0x0, 0x3, 0xfffe}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000740)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202e20614ac051c0211e8010203010902240001040000000904990202039802000905040310000c02020905050010000705ff"], 0x0) 21.924085898s ago: executing program 4 (id=718): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x8, 0x7ffffffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0500000004000000e27f000001"], 0x50) close(0x3) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x10001, r0}) 21.79093391s ago: executing program 4 (id=720): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "03fc8eee296910f45d1ec0471b454d448414a7984983f183fe6d09e46b22772701ef000000000000000000"}, 0x36) write$UHID_INPUT(r0, &(0x7f0000002140)={0x8, {"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", 0x1000}}, 0x1006) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r7, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r7, 0x0, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 21.56583613s ago: executing program 4 (id=722): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) unshare(0x62020600) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 20.603685722s ago: executing program 0 (id=724): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{}, [@TCA_NETEM_ECN={0x8}]}}}, @qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xcc}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe4}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0xf, 0x7, 0x0, 0x1c0d, 0xe7, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x33, 0x200, 0x7, 0x0, 0xffff, 0x1000, 0x2}}, {0x8, 0x2, [0x6, 0xd]}}]}]}, 0xd4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x3, 0xe}, {0xe, 0xe}, {0x4, 0xfff2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x824}, 0xc080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r1, 0x0) (rerun: 32) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="080001009068000040e9f8cc1a23f52eb2a5182e5cf5ce0fb4016eace9ee7be286752bd96866054781f851c188e4aba8c20058a6651a9580f754339f1723d440c2e895a499a7a57d8df5e93f55"], 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x4f) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0xcc844) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r9 = getpid() r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x7, 0x7, 0x0, 0x2, 0xd, 0x3, 0x1, 0x9, 0xe, 0x6, 0xa, 0xc, 0x5, 0x2e, 0x9, 0xc], 0x0, [0x0, 0x400, 0x5, 0x45, 0x6, 0x1, 0x360, 0xfff8, 0x9, 0x8, 0x10, 0x5, 0x8, 0x8c, 0x8000, 0x4], [0x5, 0x0, 0x1, 0x401, 0x81, 0x3, 0xf, 0x81, 0x7, 0x7fff, 0xf, 0x4, 0x51f, 0xfff8, 0x80, 0x5]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x90}}, 0x0) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 64) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 64) 20.463882096s ago: executing program 0 (id=725): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0xcf7d3000) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 20.352181514s ago: executing program 0 (id=726): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"877e9e0cf69a7bba6521d170b4d449c1", 0x0, 0x0, {0x8a, 0xa59}, {0x6, 0x4}, 0xa, [0x100, 0x2e16fc48, 0x84, 0x100000001, 0x7, 0xe, 0x4, 0x3, 0x0, 0x100, 0x2, 0x3, 0x5, 0xe, 0x4, 0x87]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x4, 0xa}, {0x5, 0x2, 0xf33, 0xf3, 0x6a1}}}}, 0x17) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)={0x60, r5, 0x201, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34d4}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0xf000}, 0x8080) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000009c655f4812299f8dcc1c3bd9030e9859d7b39601ff4383094e1fdb595bf12b65bb17676ec62f3fb9014460dec3eed203af332e55145"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000180)='team\x00', &(0x7f00000001c0)='\x00', 0x0) 19.894083443s ago: executing program 2 (id=727): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000240)='nolazytime\x00', 0x0, 0x0) r4 = getpid() r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f000000da80), &(0x7f000000dac0)=0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1f7fa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x8, r9) tgkill(r9, r9, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x38, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r0, 0xf}) 18.781005126s ago: executing program 3 (id=728): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000240)='nolazytime\x00', 0x0, 0x0) r4 = getpid() r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f000000da80), &(0x7f000000dac0)=0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1f7fa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x8, r9) tgkill(r9, r9, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x38, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r0, 0xf}) 18.779959026s ago: executing program 2 (id=729): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000012c0)={0x14, &(0x7f0000001180)={0x40, 0x7, 0xc0, {0xc0, 0xc, "1590793e6ae210c83a09bcdb2fadd359261dfcaa06de6abe6ea5af8fda6457bde7f1b0049f092083f602397a794092a45fd7bad1629d2fcf0e91470756fb9b6640f589108216268b5c271763ca16b7083bcbe01ac0e72a9bfba01013814baf845bb3d7a51759c9c409f8d98db9f0631bddc84972349d3d0f10ea8d0082c22872c48f05d0b31a4cece8ee2d7841ca61395e95fd3a537cbd74056a8b10f5d0498e42d72e55c9c6497ce44d9e813438e4c0b0d3fc12c8b8967158ac9857d056"}}, &(0x7f0000001280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x44, &(0x7f0000001300)={0x0, 0xd, 0x8f, "8885e2a229ed42ba21c31b01bbccd62650d624ba6196215012d07098b95cf5d15631827f346bc08942d35f5590da1047ab70ce4c8511bb8402495fa6da32939f971860be7de04eb28831b7dae9d722e02afa2ce243dd3c96c466fcb3edcdcf39fbe5f2268d89038822039e0ba3490cf75b3a2150524754fe78767d99a09a7fe0c6b351b08b29f6a391b573469f3868"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000001440)={0x20, 0x80, 0x1c, {0xfff, 0x200, 0xf254, 0x1ddd, 0x1, 0x7, 0xe, 0x81, 0x9, 0xa, 0xe44, 0x1}}, &(0x7f0000001480)={0x20, 0x85, 0x4, 0x7fff}, &(0x7f00000014c0)={0x20, 0x83, 0x2}, &(0x7f0000001500)={0x20, 0x87, 0x2, 0xfa1c}, &(0x7f0000001540)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf2, 0xe0, 0x6, [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x7, 0x1, 0x1, 0xb0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7, 0xbd, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x81, 0x5}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x2, 0x9, 0x0, 0x20, 0x6a}, 0x30, &(0x7f00000000c0)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "6c66a4b1bc410dae8450943f4aba53ca"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "fe71f7eac4458987f3ce707351c760d5"}]}, 0x4, [{0xd, &(0x7f0000000100)=@string={0xd, 0x3, "f02cadeaee1303eaaa88c1"}}, {0x7, &(0x7f0000000140)=@string={0x7, 0x3, "4bad154cf4"}}, {0xcb, &(0x7f0000000180)=@string={0xcb, 0x3, "366be1a83898eca64c6adfa00b12e78ae27aa9b6616aabf2227d3c3ad5356193f13e94bad6da5ebe95942fe6666e602be3e5df5f1923db8b3f72dd987cc649e67097ebd819eb35bee9dda0036f148893d47615005673a946c9651253024467158d197c79e49a34ddeec15255c968d456ec3bf4e5fa007e5d94918bc2950ff73b9a98967d1f128e731e1bc898a0aa896071eed60ae165f01e14b79f7e5b996e8db849d378c17024531efc88dea8345eef632c88abc4553e65fc73eec3cdf4c01ea256c58099a138b782"}}, {0x20, &(0x7f00000002c0)=ANY=[@ANYBLOB="200301819264dd0f7327ea73b29057fbe00585e3f898d1c6c160da5057cd221a"]}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000037c0)={0x14, &(0x7f0000003680)={0x20, 0x11, 0xce, {0xce, 0x24, "8d35f0586b923b6c2790a8210dfd2d06a0482b76a790ba9cd1f607c29b86ee10e59c928b2900572278648ec3f949bbf3da13dab4e26156d6fcf4e5c50361428bf66c1adb8046fd4b4159959a0e73b54b406ad862199a9f39d6cfd6553d141c4c4f2d9e13eb7a259a025b4fd19013ab45ec07235f729bc7b0f534c6b3838a466153d63c944762ca5eb054f2e631eb7a2f2a1c0f377162e8c6e02c4776596782cd40256bdb398c16e3ecb9fcf6135cee86e9f88fb8d195611c7bbd78c118241cca2e6decdfc037ca46e8f94539"}}, &(0x7f0000003780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003a80)={0x44, &(0x7f0000003800)={0x20, 0x14, 0x86, "135ac2231e33adcbd7f08c1bab6c90703787f9c8b10b0754e0241e89271820f51186e8e8d71cefac8fb74c3160395f748ac4cad6e0cc17e32c5c7de8dd410917ebd7a4b6afea6628dbe073434bd364277f4d351771418d857e1204d3029b124ca8d5f3ea4c5423c3d72faa73a3859ce6d9d42962070c6c5bd46242a4fd6ca54df6d6f3424f79"}, &(0x7f00000038c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003900)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000003940)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x2, 0xf0e5, 0x2, 0xffff, 0x4, 0x8, 0x1, 0xd9, 0xf8, 0x8000}}, &(0x7f0000003980)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000039c0)={0x20, 0x83, 0x2}, &(0x7f0000003a00)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000003a40)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, &(0x7f0000000c40)={0x20, 0x7, 0xf6, {0xf6, 0xd, "82822dbb9183a225bb646aba2c6ddc7d1ff5874cdcc3dee0d4584d2a34fbfe4b06f711cbc01f09323351953a1a7a26485d133fb68f49cf082b22edf7ee14ba9f21fa3e531ef19cdbed2fc35f422a623d5a1655e3fd4c4aaeec51adc330f13379bfd8b46a639574603691e07b60de86e93503e8292dfb7c8ad4ae94bfa853cabee3ce9ef60241f45471c8b58821710d5de65bd5f578ec6123ad8053cdce0b88574d89f837ba8ff1beb57669a2c78d3bec4160ebb0af16101f4e89a503f43c81e1254581c86d9f6008f8841b7d200f8b014e711e57ea5f155312ff8ac9bfb8f831b378337bb1a2dee8b2986c938fae54cd902ed97e"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x8, "5f618162"}]}}, &(0x7f0000000e80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x392}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f00)={0x40, 0x14, 0xe0, "8a24405009aca7325e8406b1d24513df47fa96b83dcfa46db9afb92eed0521f06b122f562c863fb6be8a9e5286cc2d828e8d7b3b0c4de54440b8887dcbbd394ac6d4ca209c19234ecb7e0eeab61e9a1a5f1e492f5e298a6c0a8dcfd0a111d71d6495eb205209bee1c1e1bdade77d44a713e069d08ced98bf5d561524e9011a81335d2013dc400c27e413883682d40941ed2b374e135d1d0b6e749c6a6bdc9af0c70eb3a70694dcf5ecffa752ed2c9d9a58cfcef94eefb7520176fda1c2a14e4092fa0e5499f943e56101c6df04f5a9e93bfcfd93290c156638e17218a37f0f75"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001080)={0x20, 0x1, 0x6a, "7b3246b32e4f6d59009634976316c6b200b8f92e7bd3c8e3b1c387551cde25c7137f892f28358d8a8dcd78e04c7351324e0b646377b6c7c9d1f3ded807a48e025834eff6dcef0e24b8f22ff1054ff565b4df1afa200bea611b76731a364e8a2139f7c06ac3297f1d78a0"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x10}}) syz_usb_control_io$printer(r0, &(0x7f0000002080)={0x14, &(0x7f0000001e80)={0x0, 0xe, 0xde, {0xde, 0x31, "69b4fcc2be0d406a1e4ef82cf56a7e6a0e3268a925bf3a524fa7a96ec906771891ad9d65b9c9b4ae77d2fb4bbfecb43b406b240f247368efe34df5764a89ac354077f3ee35b741f8eb72c169216125c6e386d28be1999ba2f89558393c7386b8818d91f32b5ac163f58d882c1e7821e29255ad2b17f87ce78657083dff0317fb6e60278283ff5a5ec27f65b74774e09c5ff45b539359236013976d9dc7d022ae28eb32d63f8dfda5cf7ae248a182a07427a02701d27d285289e3a0e4ca406f33fa0404474f12410afe144a12b32f4ef65b46721ac0728e80bbee5c76"}}, &(0x7f0000001f80)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "63859ab3081e987cdc566078acaad5d1afd508181447a96fa067a46faf6a69fa5f4783b5dec5e46a1ed14128e54240f36356add6426686cd06f96bccca6b6e8c5b327a0131548038e06c39f4e88fc40d52302b8d955348c7856738d6f82eb20bb32c7d1f377e00c57564b0d9e7a7d1e3d8c1a5165cdda4c96559bb690001c09aa0af8835d0ff6ec64f0acb4c6cd01fd3c7caaa5813493948c99a63379a8ce009d3e8fe6b8fed7e4ab267ff6bab3bbcf73d9d3002239e98e2d3a87d7f06c431c9f7"}}}, &(0x7f0000003340)={0x34, &(0x7f0000003180)={0x20, 0x31, 0xda, "f5a3baacb36cd5940cc03c0fb60b050e3ed6fd87e74a62198620ac038a85953231bdc71f8e50c81b5038127f6cadd44fb9536f3578ad5f179651f5008c9e65c8d4ecf164ee686f6d8a1b05be0af1cd8a927cbd6f18ba6198396084ebb9dc31c547d351829d47313b87d3f64d137cec94ca7b668363985ea69c4b1c0c6b9bd96409910cfec8f0be34bb82aca2a47097406f2d5606d70f1ecd7d7490ffc9231b11f8605787303b21b0b4835e35011186df9a80b356c7fbf3c2914e26e76b10f20349d4476f224e156fbdd4d1c38462cd712d83730cc2c00c43145a"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003280)={0x20, 0x0, 0x21, {0x1f, "29b28817e07c34eb2cd2e8441b890ba33cc9dfa4cda8b79b829e5a9dd7f14e"}}, &(0x7f00000032c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000003300)={0x20, 0x0, 0x1, 0x4}}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001d40)={0x14, &(0x7f0000001c80)={0x0, 0x3, 0x5b, {0x5b, 0x2, "61382db880cf7b0ebe1d3ced00cb3d5fdef473e15474051edf5ba8f47f300bacfd37716657b1e64ad7f0aec5a4465d47f7b8e3a7b5570473b82999f8df7b0972c7cbe88cceccbf824dd06802b4242e39aca06624b8ad2131d8"}}, &(0x7f0000001d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001e40)={0x1c, &(0x7f0000001d80)={0x20, 0x14, 0x1, "9b"}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001e00)={0x0, 0x8, 0x1, 0x10}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') syz_usb_control_io$cdc_ecm(r0, &(0x7f0000003480)={0x14, &(0x7f00000033c0)={0x20, 0x14, 0x95, {0x95, 0x23, "8aeef4041f86bb1c6ccd0e74fcff5ffebc9a2a9744cc1494342e5777761f6c4887419daf47b08572ed23fb69c3836295ae3e1d6b9b5af3f2dc68a075f475dd8d71c21adc9402ed2e5e189155f76b257d4b069cf05a2f82a9b1bc608892b4fd9cba19c7558946737beb537d9fe18078aa0244efd4444730f0029930e9c454f591422fc6e9e5ef645ea5cae06567486624b76e59"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003640)={0x1c, &(0x7f00000034c0)={0xc0, 0x31, 0xcb, "f8c6c53efb1d4ab1a5e4bcf7b920096bc2325e80f63583edb8d85bba602478ac519f7124e5c35ff0a482a44ba5e25e52b7073cf69b2e7f3b59bf2d5be053f012f13b54b13840d0cb89ece12f24bc242228082a79b5e512f3d3b675e355b7adb460ba70f217bf7cb11ebf66a264361c0d126d59add9c4d44cf021889307b2572f9af239494400b1e906f75a5811dfeae6f6d9dcd79b89ca36e731dc659cd7e1c6e9297c1c62883f58f3f526b23b3a9e384b6b842d2f5c74b7894ace8dae8eea04565361d01fd2232af2c1f0"}, &(0x7f00000035c0)={0x0, 0xa, 0x1}, &(0x7f0000003600)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f0000000d40)={0x40, 0x24, 0xd, {0xd, 0xb, "c83adb62d49c7b7670631d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x62, @string={0x62, 0x3, "af150a33960d070287a9489b7a0468f59a81deaaf0be800fc40cc6671bd91ab6470cc1ea70e2f5db6bd5493d4c95ac3dbe3b0a6dac3fa9c60fd0a314a4df5aed5788fcb4664105676086a17eae505c1497d15f07505d3a68a6c8c66c8107999e"}}, &(0x7f0000001600)={0x0, 0xf, 0x77, {0x5, 0xf, 0x77, 0x2, [@generic={0x6f, 0x10, 0x2, "b6615f7fa48a05f6154a4fe2289c58853c5b7b9d50663140edeb781b9d97b36a36d1728258e5b28716ab07f3f97d4b8e4e2a745b1843f8eb27b20e707e8b6e9794edfc099063ead58517549365e83415821f7caf4fc6885b1677b211a9bf2dacfece91222877ee4b92493993"}, @ptm_cap={0x3}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x4, 0xff, 0x10, "ffa8f6ba", "37d154a3"}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x6, 0xc, 0x6, 0x7, 0x7f}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001740)={0x40, 0x31, 0xa9, "7d5f2078cfeb0d798e411fdba27e1d3f359fcd26a5f4e92f0a57f3bdfb2dc9592f49efd672fa856fe8ba31478fb7f0913d7c6786733d3e92fd414b2d9ad12d0cc57a5a4ed6d39abd849d3a2f4027ee331ac205a88c9be54018659d96372715ce02d6fc161c302ce4929e76a211412969de7d70aaea7b7161b156eac593e4d9f9a2b01483594662e8aa73a0d500f0214c0011580c9546e690c590851f884df5c0828d28db8a94180d94"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000018c0)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x27}, &(0x7f0000001980)={0x40, 0xb, 0x2, 'F='}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001a40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "10f6"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x9}}) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000002140)=""/4100, 0x1004}], 0x1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xc, 0x4f, {0x4f, 0x30, "6379f15fd38d4967392775efd0058ac4240de68bfd14b8a485360a73d848f7c753ae75bc78baa14d2004d3dc28a9704db087ced95e5038035f6b690397e6a12f5f9050bffd78df477681ecc913"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f0000000480)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "00000400000000000000edff00"}, @ss_container_id={0x14, 0x10, 0x4, 0x18, "c44641330a7baf7be42e8ab2f988e671"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x0, 0x780f, 0x7f, [0x3f00, 0xff3f00, 0x7d5f112baccd5178, 0xc0, 0x3f0f, 0xc0]}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0x89, 0x3, "0833ecb5", "7e4b3382"}}, &(0x7f0000000540)={0x20, 0x2a, 0xffffffffffffff0e, {0xc, 0x2a, 0x1, 0x2, 0x2b, 0xd, 0xff, 0x3, 0x6}}}, &(0x7f0000000b80)={0x84, &(0x7f00000005c0)={0x40, 0xd, 0x100, "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"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x46}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0x11f00]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x4af4}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0xb, 0x2, 'jg'}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x17, 0x6}, &(0x7f0000003380)={0x40, 0x19, 0x2, "03d0"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x9}}) 18.473721811s ago: executing program 4 (id=730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_crypto(0x10, 0x3, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000780)="0000fffffff4aef7a000aea488a8", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) iopl(0x3) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r6, 0xfffffffd) r7 = accept(r6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 17.687590387s ago: executing program 3 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000"], 0x14}}, 0x0) 17.250676702s ago: executing program 0 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2400000020000103000000000000000102000000000000000000000008000600008416b541bf"], 0x24}}, 0x24040098) 17.211755475s ago: executing program 3 (id=733): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x2041000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x498, 0x0, &(0x7f0000000340), &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x88800) syz_usb_connect(0x3, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100070000001096050100f5050102030109021b0001000000000904d60001b5e1450009058300ff0303070466f4f618804929d065b9a5f40d31c918f5cb2ff680dbf0b0f908df635423207f21e0ed02655d0b55b2a4a4b9f8bc4efbe2903a08250cd8842bb77f37c446bd746ba7166272e5ccce1486245dde908f7060fa157acfa28b99cb1ab20c047eaeb031d8e2e1c519903cc54cbfbd5b35a456705da197012cd947ce40fb4f"], 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001780)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x4}, 0x80, 0x0}, 0x50626d3e06e3a849) 17.16177471s ago: executing program 0 (id=734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000"], 0x14}}, 0x0) 17.110486692s ago: executing program 0 (id=735): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000240)='nolazytime\x00', 0x0, 0x0) r4 = getpid() r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f000000da80), &(0x7f000000dac0)=0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1f7fa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x8, r9) tgkill(r9, r9, 0x1a) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x38, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r0, 0xf}) 15.563746212s ago: executing program 2 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001508000140000000140900010073797a30000000000900020073797a32"], 0x78}}, 0x0) (fail_nth: 4) 15.229797603s ago: executing program 2 (id=737): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000000), 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x20002000}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14927e, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xb, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0xd000) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 11.019239989s ago: executing program 32 (id=700): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x40, r2, 0x1, 0x0, 0x2, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x40080) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close(0x3) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$nci(r3, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057f030603f93677ff6fcad8cf254cac"], 0x12) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x40, r2, 0x1, 0x0, 0x2, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x40080) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async) close(0x3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) write$nci(r3, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057f030603f93677ff6fcad8cf254cac"], 0x12) (async) 2.511611104s ago: executing program 33 (id=730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_crypto(0x10, 0x3, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000780)="0000fffffff4aef7a000aea488a8", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) iopl(0x3) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r6, 0xfffffffd) r7 = accept(r6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 1.504548278s ago: executing program 34 (id=735): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000240)='nolazytime\x00', 0x0, 0x0) r4 = getpid() r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f000000da80), &(0x7f000000dac0)=0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1f7fa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x8, r9) tgkill(r9, r9, 0x1a) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x38, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r0, 0xf}) 1.465150638s ago: executing program 35 (id=733): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x2041000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x498, 0x0, &(0x7f0000000340), &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x88800) syz_usb_connect(0x3, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100070000001096050100f5050102030109021b0001000000000904d60001b5e1450009058300ff0303070466f4f618804929d065b9a5f40d31c918f5cb2ff680dbf0b0f908df635423207f21e0ed02655d0b55b2a4a4b9f8bc4efbe2903a08250cd8842bb77f37c446bd746ba7166272e5ccce1486245dde908f7060fa157acfa28b99cb1ab20c047eaeb031d8e2e1c519903cc54cbfbd5b35a456705da197012cd947ce40fb4f"], 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001780)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x4}, 0x80, 0x0}, 0x50626d3e06e3a849) 0s ago: executing program 36 (id=737): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000000), 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x20002000}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14927e, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xb, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0xd000) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T52] usb 5-1: Using ep0 maxpacket: 16 [ 130.497019][ T52] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.497049][ T52] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.497083][ T52] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 130.497104][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.506123][ T52] usb 5-1: config 0 descriptor?? [ 130.773482][ T6964] capability: warning: `syz.2.249' uses deprecated v2 capabilities in a way that may be insecure [ 130.829787][ T30] audit: type=1400 audit(1742671356.293:395): avc: denied { mount } for pid=6958 comm="syz.2.249" name="/" dev="rpc_pipefs" ino=13423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 131.125205][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 131.143388][ T6947] vlan2: entered allmulticast mode [ 131.163171][ T6947] geneve0: entered allmulticast mode [ 131.281563][ T30] audit: type=1400 audit(1742671357.213:396): avc: denied { recv } for pid=6969 comm="syz.1.251" saddr=10.128.0.169 src=30006 daddr=10.128.10.7 dest=53920 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 131.306895][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.441911][ T5874] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.716500][ T5871] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 131.795788][ T5874] usb 3-1: device descriptor read/64, error -71 [ 131.804193][ T6947] bridge0: port 3(vlan2) entered blocking state [ 132.430882][ T5871] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 132.535527][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.541895][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.568655][ T6947] bridge0: port 3(vlan2) entered disabled state [ 132.577138][ T5871] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 132.602986][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.612711][ T6947] vlan2: entered promiscuous mode [ 132.619921][ T5871] usb 2-1: Product: syz [ 132.624219][ T6947] geneve0: entered promiscuous mode [ 132.639948][ T5871] usb 2-1: Manufacturer: syz [ 132.651510][ T5871] usb 2-1: SerialNumber: syz [ 132.652016][ T6947] bridge0: port 3(vlan2) entered blocking state [ 132.662492][ T6947] bridge0: port 3(vlan2) entered forwarding state [ 132.683643][ T5871] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 132.910420][ T52] usbhid 5-1:0.0: can't add hid device: -71 [ 132.917495][ T52] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.943210][ T52] usb 5-1: USB disconnect, device number 12 [ 132.959696][ T30] audit: type=1400 audit(1742671358.893:397): avc: denied { append } for pid=6985 comm="syz.3.254" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.168065][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 133.177030][ T6996] openvswitch: netlink: Message has 8 unknown bytes. [ 133.197232][ T6996] pim6reg: entered allmulticast mode [ 133.976303][ T30] audit: type=1400 audit(1742671359.383:398): avc: denied { read } for pid=6994 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.204731][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 134.223342][ T5871] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 134.269887][ T7008] openvswitch: netlink: Message has 8 unknown bytes. [ 135.257301][ T5871] usb 2-1: USB disconnect, device number 14 [ 135.478519][ T7028] ipt_ECN: cannot use operation on non-tcp rule [ 136.407542][ T30] audit: type=1326 audit(1742671362.333:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.1.270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc59d8d169 code=0x0 [ 136.480986][ T7047] input: syz1 as /devices/virtual/input/input10 [ 136.501549][ T30] audit: type=1400 audit(1742671362.403:400): avc: denied { create } for pid=7039 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.520841][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.597352][ T30] audit: type=1400 audit(1742671362.403:401): avc: denied { connect } for pid=7039 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.674502][ T30] audit: type=1400 audit(1742671362.403:402): avc: denied { write } for pid=7039 comm="syz.1.270" laddr=fe80::a8aa:aaff:feaa:aaaa lport=1 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.127157][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 138.145069][ T7067] openvswitch: netlink: Message has 8 unknown bytes. [ 139.316920][ T7079] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 139.731808][ T30] audit: type=1400 audit(1742671365.653:403): avc: denied { view } for pid=7082 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 139.770664][ T30] audit: type=1400 audit(1742671365.653:404): avc: denied { create } for pid=7082 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.822201][ T30] audit: type=1400 audit(1742671365.653:405): avc: denied { setopt } for pid=7082 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.921707][ T30] audit: type=1400 audit(1742671365.653:406): avc: denied { ioctl } for pid=7082 comm="syz.4.280" path="socket:[12881]" dev="sockfs" ino=12881 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.025301][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.283241][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 140.293527][ T30] audit: type=1400 audit(1742671366.223:407): avc: denied { read } for pid=7093 comm="syz.4.284" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.316879][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.328222][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.341437][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.350612][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.376870][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.511102][ T10] usb 3-1: invalid MIDI out EP 0 [ 141.242167][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 141.349305][ T10] usb 3-1: USB disconnect, device number 11 [ 141.368856][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.482412][ T7110] block nbd4: Unsupported socket: shutdown callout must be supported. [ 141.741667][ T30] audit: type=1400 audit(1742671367.453:408): avc: denied { watch } for pid=7102 comm="syz.1.288" path="/57" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 141.742739][ T5871] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.905015][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.022490][ T7113] mmap: syz.1.288 (7113) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.034493][ T30] audit: type=1400 audit(1742671367.953:409): avc: denied { getopt } for pid=7102 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.035063][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 142.070044][ T30] audit: type=1400 audit(1742671368.003:410): avc: denied { read write } for pid=7102 comm="syz.1.288" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 142.111299][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.111566][ T30] audit: type=1400 audit(1742671368.003:411): avc: denied { open } for pid=7102 comm="syz.1.288" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 142.132422][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.150466][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 142.164973][ T26] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 142.167822][ T5874] usb 1-1: config 4 has an invalid interface number: 153 but max is 0 [ 142.180977][ T5874] usb 1-1: config 4 has no interface number 0 [ 142.187164][ T5874] usb 1-1: config 4 interface 153 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 142.304698][ T5871] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.335104][ T5874] usb 1-1: config 4 interface 153 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 142.344978][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.354034][ T5874] usb 1-1: config 4 interface 153 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 142.364852][ T5874] usb 1-1: config 4 interface 153 has no altsetting 0 [ 142.376072][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=e8.11 [ 142.383477][ T5871] usb 4-1: config 0 descriptor?? [ 142.406380][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.417906][ T5874] usb 1-1: Product: syz [ 142.422115][ T5874] usb 1-1: Manufacturer: syz [ 142.427070][ T5874] usb 1-1: SerialNumber: syz [ 142.434072][ T5871] hub 4-1:0.0: USB hub found [ 142.446661][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.451508][ T5874] appletouch 1-1:4.153: Could not find int-in endpoint [ 142.457084][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.464079][ T5874] appletouch 1-1:4.153: probe with driver appletouch failed with error -5 [ 142.525687][ T5874] usbhid 1-1:4.153: couldn't find an input interrupt endpoint [ 142.546968][ T26] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 142.574993][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.666256][ T26] usb 5-1: config 0 descriptor?? [ 142.696288][ T5874] usb 1-1: USB disconnect, device number 10 [ 142.723940][ T5871] hub 4-1:0.0: 1 port detected [ 143.035284][ T7123] syzkaller1: entered promiscuous mode [ 143.040797][ T7123] syzkaller1: entered allmulticast mode [ 143.298765][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 143.304804][ T26] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 143.890000][ T30] audit: type=1400 audit(1742671369.273:412): avc: denied { ioctl } for pid=7125 comm="syz.1.294" path="socket:[13798]" dev="sockfs" ino=13798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.891821][ T26] usb 5-1: USB disconnect, device number 13 [ 144.013852][ T7131] netlink: 'syz.0.295': attribute type 12 has an invalid length. [ 144.080714][ T5871] hub 4-1:0.0: activate --> -90 [ 144.541358][ T7140] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 144.960440][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.166219][ T5871] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 145.302608][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.727159][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 145.727175][ T30] audit: type=1400 audit(1742671371.663:415): avc: denied { write } for pid=7152 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.839983][ T30] audit: type=1400 audit(1742671371.713:416): avc: denied { getopt } for pid=7152 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.859576][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.895258][ T5874] usb 4-1: USB disconnect, device number 11 [ 146.036984][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.063674][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.090717][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.103629][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.119901][ T7156] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 146.133264][ T7161] Illegal XDP return value 4294967294 on prog (id 46) dev N/A, expect packet loss! [ 146.149792][ T30] audit: type=1400 audit(1742671372.083:417): avc: denied { sqpoll } for pid=7164 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 146.202992][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.424064][ T30] audit: type=1400 audit(1742671372.353:418): avc: denied { append } for pid=7155 comm="syz.0.302" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 146.424292][ T7156] random: crng reseeded on system resumption [ 146.528762][ T30] audit: type=1400 audit(1742671372.353:419): avc: denied { open } for pid=7155 comm="syz.0.302" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 146.656433][ T26] usb 1-1: USB disconnect, device number 11 [ 147.588127][ T30] audit: type=1400 audit(1742671372.953:420): avc: denied { listen } for pid=7180 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 147.688068][ T30] audit: type=1400 audit(1742671372.953:421): avc: denied { accept } for pid=7180 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 147.781895][ T7191] 9pnet_fd: Insufficient options for proto=fd [ 147.804705][ T7177] syzkaller1: entered promiscuous mode [ 147.821650][ T7177] syzkaller1: entered allmulticast mode [ 148.059247][ T7200] input: syz0 as /devices/virtual/input/input11 [ 148.269143][ T7203] input: syz1 as /devices/virtual/input/input12 [ 148.315124][ T7203] netlink: 124 bytes leftover after parsing attributes in process `syz.0.316'. [ 148.398149][ T7205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.430556][ T7205] atomic_op ffff888025755998 conn xmit_atomic 0000000000000000 [ 148.746507][ T30] audit: type=1400 audit(1742671374.353:422): avc: denied { bind } for pid=7202 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.856482][ T30] audit: type=1400 audit(1742671374.363:423): avc: denied { write } for pid=7202 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.356915][ T30] audit: type=1400 audit(1742671375.283:424): avc: denied { write } for pid=7214 comm="syz.2.321" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.445479][ T7219] capability: warning: `syz.2.321' uses 32-bit capabilities (legacy support in use) [ 149.585079][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 149.693760][ T5871] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.789022][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 149.832129][ T10] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 149.844263][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 149.848312][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.861609][ T10] usb 2-1: Product: syz [ 149.865807][ T10] usb 2-1: Manufacturer: syz [ 149.870389][ T10] usb 2-1: SerialNumber: syz [ 149.876582][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 149.882873][ T10] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 149.885389][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 149.901721][ T5871] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 149.919631][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.929324][ T5871] usb 4-1: config 0 descriptor?? [ 149.937048][ T5871] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 150.044974][ T971] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 150.216646][ T971] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 150.238612][ T971] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 150.255645][ T971] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 150.264940][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.282524][ T971] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 150.482554][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.499638][ T7242] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 150.504616][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.560403][ T971] gspca_sn9c2028: read1 error -71 [ 150.570592][ T5874] usb 4-1: USB disconnect, device number 12 [ 150.577847][ T971] gspca_sn9c2028: read1 error -71 [ 150.596109][ T971] gspca_sn9c2028: read1 error -71 [ 150.603066][ T971] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -71 [ 150.671913][ T971] usb 1-1: USB disconnect, device number 12 [ 150.706998][ T7246] input: syz0 as /devices/virtual/input/input13 [ 150.908252][ T10] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 151.112894][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 151.112909][ T30] audit: type=1400 audit(1742671377.043:429): avc: denied { write } for pid=7252 comm="syz.2.331" name="fdinfo" dev="proc" ino=14350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 151.178535][ T30] audit: type=1400 audit(1742671377.053:430): avc: denied { add_name } for pid=7252 comm="syz.2.331" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.179571][ T30] audit: type=1400 audit(1742671377.053:431): avc: denied { create } for pid=7252 comm="syz.2.331" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.301020][ T30] audit: type=1400 audit(1742671377.053:432): avc: denied { associate } for pid=7252 comm="syz.2.331" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.392250][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.483485][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.549450][ T30] audit: type=1400 audit(1742671377.083:433): avc: denied { write } for pid=7252 comm="syz.2.331" path="socket:[14022]" dev="sockfs" ino=14022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.577956][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 151.633466][ T7263] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 151.663140][ T30] audit: type=1400 audit(1742671377.533:434): avc: denied { create } for pid=7262 comm="syz.2.335" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.710833][ T30] audit: type=1400 audit(1742671377.533:435): avc: denied { write } for pid=7262 comm="syz.2.335" name="file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.738580][ T10] usb 5-1: device descriptor read/64, error -71 [ 151.754092][ T30] audit: type=1400 audit(1742671377.533:436): avc: denied { open } for pid=7262 comm="syz.2.335" path="/66/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.776550][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.788349][ T30] audit: type=1400 audit(1742671377.553:437): avc: denied { ioctl } for pid=7262 comm="syz.2.335" path="/66/file0" dev="tmpfs" ino=380 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.812231][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.920069][ T30] audit: type=1400 audit(1742671377.843:438): avc: denied { unlink } for pid=5825 comm="syz-executor" name="file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.942579][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.005007][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 152.015327][ T5871] usb 2-1: USB disconnect, device number 15 [ 152.045089][ T5867] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.161456][ T10] usb 5-1: device descriptor read/64, error -71 [ 152.275914][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 152.403295][ T10] usb usb5-port1: attempt power cycle [ 152.444997][ T5870] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 152.486058][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.538640][ T5867] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 152.547843][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.581584][ T5867] usb 4-1: Product: syz [ 152.586488][ T5867] usb 4-1: Manufacturer: syz [ 152.592294][ T5867] usb 4-1: SerialNumber: syz [ 152.613823][ T5867] usb 4-1: config 0 descriptor?? [ 152.625350][ T7282] netlink: 52 bytes leftover after parsing attributes in process `syz.1.342'. [ 152.680938][ T5870] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 152.691981][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.712739][ T5870] usb 3-1: config 0 has no interface number 0 [ 152.719232][ T5870] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 152.739345][ T5870] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 152.752699][ T5870] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 152.779143][ T5870] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 152.795488][ T5870] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 152.810069][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.818836][ T5870] usb 3-1: Product: syz [ 152.933360][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 152.948460][ T5870] usb 3-1: Manufacturer: syz [ 152.953122][ T5870] usb 3-1: SerialNumber: syz [ 152.965601][ T10] usb 5-1: device descriptor read/8, error -71 [ 152.993117][ T5870] usb 3-1: config 0 descriptor?? [ 153.005005][ T5870] symbolserial 3-1:0.175: symbol converter detected [ 153.013662][ T5870] usb 3-1: symbol converter now attached to ttyUSB0 [ 153.055504][ T5871] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.153281][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 153.162327][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.191053][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.210288][ T5867] gs_usb 4-1:0.0: Configuring for 249 interfaces [ 153.218215][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 153.225883][ T5867] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 153.226640][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 153.241352][ T5867] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 153.243703][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.263778][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.265053][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.275916][ T5871] usb 1-1: config 0 has no interfaces? [ 153.286165][ T10] usb 5-1: device descriptor read/8, error -71 [ 153.291075][ T5871] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 153.302531][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.313276][ T971] usb 3-1: USB disconnect, device number 12 [ 153.322389][ T971] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 153.330734][ T5871] usb 1-1: config 0 descriptor?? [ 153.336229][ T971] symbolserial 3-1:0.175: device disconnected [ 153.375069][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 153.405305][ T10] usb usb5-port1: unable to enumerate USB device [ 153.440142][ T10] usb 4-1: USB disconnect, device number 13 [ 153.548041][ T5870] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 153.551907][ T7291] 9pnet_fd: Insufficient options for proto=fd [ 153.557430][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.572034][ T5870] usb 2-1: Product: syz [ 153.576429][ T5870] usb 2-1: Manufacturer: syz [ 153.581112][ T5870] usb 2-1: SerialNumber: syz [ 153.592182][ T5870] usb 2-1: config 0 descriptor?? [ 154.000649][ T5870] usb 2-1: Firmware version (0.0) predates our first public release. [ 154.135072][ T5870] usb 2-1: Please update to version 0.2 or newer [ 154.203347][ T5870] usb 2-1: Firmware: build ÐéÅ‚Š¡Û·[1ùZ¬s4¡f0é [ 154.254983][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 154.406757][ T10] usb 3-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 154.416794][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.434116][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.454860][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.461904][ T10] usb 3-1: config 0 descriptor?? [ 154.473800][ T10] pwc: Samsung MPC-C30 USB webcam detected. [ 154.492706][ T5870] usb 2-1: USB disconnect, device number 16 [ 154.544994][ T5874] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 154.615378][ T7319] dvmrp0: entered allmulticast mode [ 154.674211][ T7306] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 154.696555][ T7306] netlink: 184 bytes leftover after parsing attributes in process `syz.2.349'. [ 154.705786][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 154.740411][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.754978][ T7306] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 154.783170][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.802374][ T10] pwc: send_video_command error -71 [ 154.822845][ T5874] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 154.832202][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 154.851522][ T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 154.865299][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.894218][ T10] usb 3-1: USB disconnect, device number 13 [ 154.902632][ T5874] usb 5-1: config 0 descriptor?? [ 154.936981][ T5874] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 154.962745][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 154.991805][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.011877][ T5874] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 155.035184][ T5870] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 155.053087][ T5874] usb 5-1: media controller created [ 155.094188][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.162321][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 155.192238][ T5874] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 155.207569][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 155.228725][ T5870] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 155.372036][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.578848][ T5870] usb 2-1: Product: syz [ 155.635156][ T5874] dvb-usb: schedule remote query interval to 150 msecs. [ 155.644678][ T7325] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7325 comm=syz.4.351 [ 155.657316][ T5870] usb 2-1: Manufacturer: syz [ 155.661942][ T5870] usb 2-1: SerialNumber: syz [ 155.674969][ T5874] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 155.696343][ T5870] usb 2-1: config 0 descriptor?? [ 155.704743][ T5870] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 017 [ 155.744069][ T971] usb 5-1: USB disconnect, device number 18 [ 155.870558][ T971] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 158.132023][ T5870] i2c i2c-1: failure reading functionality [ 158.166092][ T5870] i2c i2c-1: connected i2c-tiny-usb device [ 158.592840][ T5870] usb 1-1: USB disconnect, device number 13 [ 158.933962][ T7362] tmpfs: Unknown parameter 'uarquota' [ 158.950958][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 158.950972][ T30] audit: type=1400 audit(1742671384.883:443): avc: denied { mount } for pid=7358 comm="syz.2.365" name="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 158.993000][ T30] audit: type=1400 audit(1742671384.923:444): avc: denied { search } for pid=7358 comm="syz.2.365" name="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.015257][ T30] audit: type=1400 audit(1742671384.923:445): avc: denied { read } for pid=7358 comm="syz.2.365" name="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.038884][ T30] audit: type=1400 audit(1742671384.923:446): avc: denied { open } for pid=7358 comm="syz.2.365" path="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.065061][ T30] audit: type=1400 audit(1742671384.923:447): avc: denied { write } for pid=7358 comm="syz.2.365" name="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.094569][ T30] audit: type=1400 audit(1742671384.923:448): avc: denied { add_name } for pid=7358 comm="syz.2.365" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.272524][ T5870] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 159.288279][ T5867] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 159.300618][ T30] audit: type=1400 audit(1742671384.923:449): avc: denied { create } for pid=7358 comm="syz.2.365" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 159.509418][ T5874] usb 2-1: USB disconnect, device number 17 [ 159.632243][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.649801][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.670730][ T5867] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.680801][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.695033][ T5867] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 159.704483][ T5870] usb 5-1: config 1 has no interface number 0 [ 159.711049][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.719289][ T5870] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.732607][ T30] audit: type=1400 audit(1742671385.663:450): avc: denied { create } for pid=7367 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 159.734432][ T5867] usb 4-1: config 0 descriptor?? [ 159.765951][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.776133][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.784143][ T5870] usb 5-1: Product: syz [ 159.801409][ T5870] usb 5-1: Manufacturer: syz [ 159.806264][ T5870] usb 5-1: SerialNumber: syz [ 159.823633][ T5870] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 159.834981][ T30] audit: type=1400 audit(1742671385.693:451): avc: denied { read } for pid=7367 comm="syz.1.368" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 159.838219][ T5870] cdc_ncm 5-1:1.1: bind() failure [ 160.017313][ T30] audit: type=1400 audit(1742671385.703:452): avc: denied { open } for pid=7367 comm="syz.1.368" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 160.300766][ T7385] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 160.332998][ T7385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.353627][ T7385] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.828958][ T7385] syz.2.369 (7385) used greatest stack depth: 20784 bytes left [ 160.909188][ T52] usb 4-1: USB disconnect, device number 14 [ 160.937171][ T5870] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 160.991800][ T7390] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 161.003064][ T7390] SELinux: failed to load policy [ 161.108377][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.136307][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 161.150410][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 161.160275][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.175004][ T5870] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 161.184077][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.192190][ T5870] usb 1-1: Product: syz [ 161.195006][ T971] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 161.196393][ T5870] usb 1-1: Manufacturer: syz [ 161.208563][ T5870] usb 1-1: SerialNumber: syz [ 161.214351][ T5870] usb 1-1: config 0 descriptor?? [ 161.221006][ T5870] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 161.241094][ T26] usb 5-1: USB disconnect, device number 19 [ 161.354991][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 161.361422][ T971] usb 3-1: config 4 has an invalid interface number: 153 but max is 0 [ 161.369866][ T52] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 161.377477][ T971] usb 3-1: config 4 has no interface number 0 [ 161.383552][ T971] usb 3-1: config 4 interface 153 has no altsetting 0 [ 161.392295][ T971] usb 3-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=e8.11 [ 161.401363][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.409760][ T971] usb 3-1: Product: syz [ 161.413927][ T971] usb 3-1: Manufacturer: syz [ 161.418564][ T971] usb 3-1: SerialNumber: syz [ 161.439690][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.450391][ T971] appletouch 3-1:4.153: Could not find int-in endpoint [ 161.454106][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.465538][ T971] appletouch 3-1:4.153: probe with driver appletouch failed with error -5 [ 161.471708][ T5870] usb 1-1: USB disconnect, device number 14 [ 161.481801][ T971] usbhid 3-1:4.153: couldn't find an input interrupt endpoint [ 161.546198][ T52] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.556648][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 161.564163][ T52] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 161.574010][ T52] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 161.582361][ T52] usb 2-1: Product: syz [ 161.589348][ T52] usb 2-1: config 0 descriptor?? [ 161.654638][ T971] usb 3-1: USB disconnect, device number 14 [ 161.775661][ T5874] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.940757][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 162.139228][ T7408] xt_TCPMSS: Only works on TCP SYN packets [ 162.564653][ T5874] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.577834][ T5874] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.587745][ T5874] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.605408][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.624130][ T7398] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.666505][ T5874] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.316380][ T971] usb 4-1: USB disconnect, device number 15 [ 163.636621][ T7415] syzkaller1: entered promiscuous mode [ 163.654783][ T7415] syzkaller1: entered allmulticast mode [ 163.875920][ T7424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 163.882767][ T7424] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.951667][ T7424] vhci_hcd vhci_hcd.0: Device attached [ 163.959602][ T6422] Bluetooth: (null): Invalid header checksum [ 163.983080][ T7428] vhci_hcd: connection closed [ 163.990499][ T6422] Bluetooth: (null): Invalid header checksum [ 163.991988][ T69] vhci_hcd: stop threads [ 164.011227][ T69] vhci_hcd: release socket [ 164.016630][ T69] vhci_hcd: disconnect device [ 164.066171][ T6422] Bluetooth: (null): Invalid header checksum [ 164.205764][ T52] usbhid 2-1:0.0: can't add hid device: -71 [ 164.212448][ T52] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 164.246790][ T6554] Bluetooth: (null): Invalid header checksum [ 164.290171][ T52] usb 2-1: USB disconnect, device number 18 [ 164.348593][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 164.348623][ T30] audit: type=1400 audit(1742671390.253:460): avc: denied { listen } for pid=7439 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.396601][ T6554] Bluetooth: (null): Invalid header checksum [ 164.453297][ T6554] Bluetooth: (null): Invalid header checksum [ 164.586213][ T5887] Bluetooth: (null): Invalid header checksum [ 164.616615][ T6206] Bluetooth: (null): Invalid header checksum [ 164.782109][ T5887] Bluetooth: (null): Invalid header checksum [ 165.040727][ T5887] Bluetooth: (null): Invalid header checksum [ 165.047494][ T5887] Bluetooth: (null): Invalid header checksum [ 165.094988][ T5867] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 165.285010][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 165.293870][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.335186][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.359065][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.372718][ T5867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 165.424958][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.447640][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.456827][ T5867] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.464828][ T5867] usb 2-1: Manufacturer: syz [ 165.478280][ T5867] usb 2-1: config 0 descriptor?? [ 165.505036][ T971] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 165.626143][ T30] audit: type=1400 audit(1742671391.553:461): avc: denied { remount } for pid=7473 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.628437][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.400'. [ 165.657830][ T52] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 165.718063][ T30] audit: type=1400 audit(1742671391.563:462): avc: denied { write } for pid=7473 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.745222][ T971] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 165.812225][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.888246][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 165.903833][ T971] usb 3-1: Product: syz [ 165.939137][ T971] usb 3-1: Manufacturer: syz [ 165.953997][ T52] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 166.003497][ T971] usb 3-1: SerialNumber: syz [ 166.063416][ T971] usb 3-1: config 0 descriptor?? [ 166.068566][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 166.089552][ T52] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 166.125118][ T52] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 166.145401][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.169131][ T52] usb 5-1: config 0 descriptor?? [ 166.397182][ T52] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 166.405036][ T52] hdpvr 5-1:0.0: device init failed [ 166.410315][ T52] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 166.483466][ T971] usb 3-1: Firmware: major: 0, minor: 4, hardware type: ATUSB (0) [ 166.555200][ T5867] rc_core: IR keymap rc-hauppauge not found [ 166.564404][ T5867] Registered IR keymap rc-empty [ 166.575303][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.605227][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.626401][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 166.653690][ T30] audit: type=1326 audit(1742671392.583:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 166.677271][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 166.697368][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 166.727611][ T971] usb 3-1: failed to fetch extended address, random address set [ 166.752711][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 166.762564][ T30] audit: type=1326 audit(1742671392.583:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 167.177583][ T971] usb 3-1: USB disconnect, device number 15 [ 167.536506][ T30] audit: type=1326 audit(1742671392.583:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 167.560003][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.567308][ T30] audit: type=1326 audit(1742671392.583:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 167.594209][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.601812][ T30] audit: type=1326 audit(1742671392.583:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 167.625105][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 167.630300][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.640308][ T30] audit: type=1326 audit(1742671392.583:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 167.674538][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.686509][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.720902][ T5870] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 167.731007][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.745245][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.745367][ T5870] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 167.755457][ T30] audit: type=1326 audit(1742671392.583:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 167.793780][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.814993][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.822554][ T5870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.831856][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.855168][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 167.864930][ T5870] usb 4-1: Product: syz [ 167.869146][ T5870] usb 4-1: Manufacturer: syz [ 167.873743][ T5870] usb 4-1: SerialNumber: syz [ 167.896685][ T5867] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 167.904736][ T5867] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 168.096028][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 168.132904][ T5870] cdc_ncm 4-1:1.0: bind() failure [ 168.147568][ T5870] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 168.154556][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 168.172698][ T5870] cdc_ncm 4-1:1.1: bind() failure [ 168.192583][ T7508] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.201793][ T7508] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.210667][ T7508] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.219451][ T7508] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.232905][ T5870] usb 4-1: USB disconnect, device number 16 [ 168.378458][ T7512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.386285][ T7512] IPv6: NLM_F_CREATE should be set when creating new route [ 169.068242][ T5867] usb 5-1: USB disconnect, device number 20 [ 169.114397][ T7523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7523 comm=syz.3.414 [ 169.141870][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 169.153431][ T7523] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 169.278461][ T7523] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.287272][ T7523] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.295585][ T7523] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.303792][ T7523] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.323791][ T7523] vxlan0: entered promiscuous mode [ 169.365208][ T1539] usb 2-1: USB disconnect, device number 19 [ 169.757717][ T7526] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 169.767627][ T7526] SELinux: failed to load policy [ 171.561711][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 171.730204][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.756178][ T5867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.785027][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.816727][ T5867] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 171.859861][ T7540] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 171.885968][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.886591][ T5867] usb 4-1: config 1 interface 0 has no altsetting 0 [ 171.911090][ T7540] CIFS mount error: No usable UNC path provided in device string! [ 171.911090][ T7540] [ 171.925374][ T7540] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.934769][ T5867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.946182][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.540745][ T5867] usb 4-1: Product: syz [ 172.545312][ T5867] usb 4-1: Manufacturer: syz [ 172.549935][ T5867] usb 4-1: SerialNumber: syz [ 172.583609][ T1539] libceph: connect (1)[c::]:6789 error -101 [ 172.593518][ T1539] libceph: mon0 (1)[c::]:6789 connect error [ 172.604019][ T5870] libceph: connect (1)[b::]:6789 error -101 [ 172.610742][ T5870] libceph: mon0 (1)[b::]:6789 connect error [ 172.719786][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 172.719803][ T30] audit: type=1400 audit(1742671398.653:486): avc: denied { mount } for pid=7565 comm="syz.1.426" name="/" dev="pstore" ino=4312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 172.742048][ T7571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7571 comm=syz.2.427 [ 172.779613][ T30] audit: type=1400 audit(1742671398.713:487): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 172.836355][ T30] audit: type=1400 audit(1742671398.773:488): avc: denied { map } for pid=7566 comm="syz.2.427" path="socket:[14968]" dev="sockfs" ino=14968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 172.915884][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 172.922042][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 172.944005][ T1539] libceph: connect (1)[b::]:6789 error -101 [ 172.999231][ T7578] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 173.029903][ T30] audit: type=1326 audit(1742671398.813:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f640358d169 code=0x0 [ 173.033633][ T1539] libceph: mon0 (1)[b::]:6789 connect error [ 173.052713][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.192737][ T5867] usb 4-1: 0:2 : does not exist [ 173.202491][ T7558] ceph: No mds server is up or the cluster is laggy [ 173.210194][ T7561] ceph: No mds server is up or the cluster is laggy [ 173.226583][ T5867] usb 4-1: USB disconnect, device number 17 [ 173.495554][ T30] audit: type=1400 audit(1742671399.423:490): avc: denied { egress } for pid=17 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 173.519682][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.719759][ T30] audit: type=1400 audit(1742671399.423:491): avc: denied { sendto } for pid=17 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 174.959694][ T7590] kvm: pic: non byte read [ 174.964359][ T7590] kvm: pic: level sensitive irq not supported [ 174.964424][ T7590] kvm: pic: non byte read [ 174.975326][ T7590] kvm: pic: level sensitive irq not supported [ 174.975384][ T7590] kvm: pic: non byte read [ 174.986115][ T7590] kvm: pic: level sensitive irq not supported [ 174.986173][ T7590] kvm: pic: non byte read [ 174.998058][ T7590] kvm: pic: level sensitive irq not supported [ 174.998116][ T7590] kvm: pic: non byte read [ 175.107222][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'. [ 175.156024][ T7609] syz.3.439: attempt to access beyond end of device [ 175.156024][ T7609] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 175.171183][ T7609] SQUASHFS error: Failed to read block 0x0: -5 [ 175.201895][ T7609] unable to read squashfs_super_block [ 176.493872][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 176.508769][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 176.675266][ T7646] netlink: 144 bytes leftover after parsing attributes in process `syz.4.449'. [ 176.685301][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 176.858716][ T30] audit: type=1400 audit(1742671402.653:492): avc: denied { create } for pid=7639 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 176.955391][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 177.062010][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.149521][ T30] audit: type=1400 audit(1742671402.673:493): avc: denied { accept } for pid=7639 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.199316][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.245004][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.256349][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.270035][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.291788][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.293468][ T971] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 177.311468][ T7649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.320047][ T30] audit: type=1400 audit(1742671403.243:494): avc: denied { bind } for pid=7635 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.350647][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.369079][ T10] usb 3-1: Manufacturer: syz [ 177.388007][ T10] usb 3-1: config 0 descriptor?? [ 177.568483][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.620443][ T971] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.620734][ T971] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 177.620968][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.273096][ T971] usb 1-1: config 0 descriptor?? [ 179.095530][ T30] audit: type=1400 audit(1742671405.033:495): avc: denied { write } for pid=7642 comm="syz.2.447" name="unix" dev="proc" ino=4026533415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 179.136047][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 179.184324][ T10] rc_core: IR keymap rc-hauppauge not found [ 179.196944][ T10] Registered IR keymap rc-empty [ 179.210996][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.252487][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.360673][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 179.634934][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 179.794244][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.830008][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.856000][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.895069][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.936365][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.987020][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.037836][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.085110][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.125704][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.175268][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.209510][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.226909][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.259222][ T10] usb 3-1: USB disconnect, device number 16 [ 180.576337][ T30] audit: type=1400 audit(1742671406.503:496): avc: denied { create } for pid=7687 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.353748][ T30] audit: type=1400 audit(1742671407.283:497): avc: denied { read } for pid=7701 comm="syz.4.457" laddr=fe80::b lport=42644 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.434994][ T30] audit: type=1400 audit(1742671407.323:498): avc: denied { watch } for pid=7708 comm="syz.1.458" path="/87" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 181.463353][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 181.635803][ T30] audit: type=1400 audit(1742671407.323:499): avc: denied { watch_sb watch_reads } for pid=7708 comm="syz.1.458" path="/87" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.658747][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.665236][ T30] audit: type=1400 audit(1742671407.323:500): avc: denied { write } for pid=7712 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.766753][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 181.794551][ T7716] openvswitch: netlink: Message has 8 unknown bytes. [ 181.857718][ T971] usbhid 1-1:0.0: can't add hid device: -71 [ 181.863779][ T971] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.967849][ T971] usb 1-1: USB disconnect, device number 15 [ 181.990206][ T30] audit: type=1400 audit(1742671407.913:501): avc: denied { mount } for pid=7727 comm="syz.0.463" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 182.030003][ T7729] lo speed is unknown, defaulting to 1000 [ 182.072856][ T30] audit: type=1400 audit(1742671407.953:502): avc: denied { mounton } for pid=7727 comm="syz.0.463" path="/101/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 182.095084][ T30] audit: type=1400 audit(1742671407.963:503): avc: denied { mount } for pid=7727 comm="syz.0.463" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 182.117312][ T30] audit: type=1400 audit(1742671408.033:504): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 182.610217][ T7729] lo speed is unknown, defaulting to 1000 [ 182.636371][ T7729] lo speed is unknown, defaulting to 1000 [ 182.894474][ T7740] Invalid option length (0) for dns_resolver key [ 182.950325][ T7729] infiniband sz1: set active [ 182.956237][ T26] lo speed is unknown, defaulting to 1000 [ 182.962980][ T7729] infiniband sz1: added lo [ 183.023100][ T7729] RDS/IB: sz1: added [ 183.028128][ T7729] smc: adding ib device sz1 with port count 1 [ 183.034659][ T7729] smc: ib device sz1 port 1 has pnetid [ 183.042824][ T26] lo speed is unknown, defaulting to 1000 [ 183.052882][ T7729] lo speed is unknown, defaulting to 1000 [ 183.075008][ T1539] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 183.115091][ T971] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 183.147475][ T7729] lo speed is unknown, defaulting to 1000 [ 183.221368][ T7729] lo speed is unknown, defaulting to 1000 [ 183.254991][ T1539] usb 2-1: Using ep0 maxpacket: 16 [ 183.269739][ T971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.270800][ T1539] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 183.313227][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 183.331821][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.337462][ T1539] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 183.344515][ T971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.455275][ T971] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.464437][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.490128][ T971] usb 5-1: config 0 descriptor?? [ 183.493135][ T1539] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 183.515056][ T1539] usb 2-1: Product: syz [ 183.515493][ T7737] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 183.519515][ T1539] usb 2-1: Manufacturer: syz [ 184.284312][ T7729] lo speed is unknown, defaulting to 1000 [ 184.368473][ T1539] r8152-cfgselector 2-1: Unknown version 0x0000 [ 184.389941][ T1539] r8152-cfgselector 2-1: config 0 descriptor?? [ 184.400565][ T1539] cdc_acm 2-1:0.0: Zero length descriptor references [ 184.410802][ T1539] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 184.572425][ T7729] lo speed is unknown, defaulting to 1000 [ 184.633792][ T1539] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 184.737211][ T7729] lo speed is unknown, defaulting to 1000 [ 184.790026][ T971] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 184.849794][ T971] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 185.132855][ T7765] input: syz0 as /devices/virtual/input/input17 [ 185.151356][ T971] usb 5-1: USB disconnect, device number 21 [ 185.204481][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 185.219017][ T7767] openvswitch: netlink: Message has 8 unknown bytes. [ 185.235109][ T1539] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 185.441406][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 185.441423][ T30] audit: type=1400 audit(1742671411.373:506): avc: denied { append } for pid=7771 comm="syz.2.478" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 186.224940][ T1539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.314343][ T1539] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.581479][ T1539] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 186.617910][ T1539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.644172][ T1539] usb 1-1: config 0 descriptor?? [ 188.146742][ T1539] gt683r_led 0003:1770:FF00.0006: item fetching failed at offset 5/11 [ 188.175535][ T1539] gt683r_led 0003:1770:FF00.0006: hid parsing failed [ 188.182338][ T1539] gt683r_led 0003:1770:FF00.0006: probe with driver gt683r_led failed with error -22 [ 188.679604][ T7789] syzkaller1: entered promiscuous mode [ 188.705270][ T30] audit: type=1400 audit(1742671414.633:507): avc: denied { ioctl } for pid=7804 comm="syz.2.487" path="socket:[16677]" dev="sockfs" ino=16677 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 188.708910][ T971] usb 1-1: USB disconnect, device number 16 [ 188.735053][ T7789] syzkaller1: entered allmulticast mode [ 189.240925][ T7825] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 189.333341][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 189.342921][ T7831] openvswitch: netlink: Message has 8 unknown bytes. [ 189.815275][ T971] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 189.893914][ T30] audit: type=1400 audit(1742671415.823:508): avc: denied { create } for pid=7842 comm="syz.1.500" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 190.016820][ T5870] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 190.063232][ T30] audit: type=1400 audit(1742671415.943:509): avc: denied { read write } for pid=7842 comm="syz.1.500" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.095266][ T30] audit: type=1400 audit(1742671415.943:510): avc: denied { open } for pid=7842 comm="syz.1.500" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.121513][ T971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.132728][ T971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.142304][ T30] audit: type=1326 audit(1742671415.993:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 190.167740][ T971] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.184131][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.212425][ T971] usb 1-1: SerialNumber: syz [ 190.232675][ T30] audit: type=1326 audit(1742671415.993:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 190.265092][ T30] audit: type=1326 audit(1742671415.993:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 190.288967][ T30] audit: type=1326 audit(1742671415.993:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 190.312927][ T30] audit: type=1326 audit(1742671415.993:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 190.336418][ T5870] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 190.349696][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.365497][ T5870] usb 5-1: Product: syz [ 190.374970][ T5870] usb 5-1: Manufacturer: syz [ 190.379622][ T5870] usb 5-1: SerialNumber: syz [ 190.417481][ T5870] usb 5-1: config 0 descriptor?? [ 190.531727][ T971] usb 1-1: 0:2 : does not exist [ 190.537309][ T971] usb 1-1: unit 5 not found! [ 190.598360][ T971] usb 1-1: USB disconnect, device number 17 [ 190.663836][ T7856] lo speed is unknown, defaulting to 1000 [ 190.824786][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.853609][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 190.853626][ T30] audit: type=1326 audit(1742671416.783:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 190.910241][ T5870] usb 5-1: Firmware version (0.0) predates our first public release. [ 190.926367][ T5870] usb 5-1: Please update to version 0.2 or newer [ 190.941170][ T5870] usb 5-1: Firmware: build [ 190.961779][ T30] audit: type=1326 audit(1742671416.783:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 190.986324][ T30] audit: type=1326 audit(1742671416.783:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 191.009863][ T30] audit: type=1326 audit(1742671416.783:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 191.117116][ T30] audit: type=1326 audit(1742671416.823:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc70ef8cd6b code=0x7ffc0000 [ 191.146722][ T7885] macvlan0: entered allmulticast mode [ 191.152317][ T7885] veth1_vlan: entered allmulticast mode [ 191.161198][ T5870] usb 5-1: USB disconnect, device number 22 [ 191.171555][ T30] audit: type=1326 audit(1742671416.823:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc70ef8cd6b code=0x7ffc0000 [ 191.200102][ T30] audit: type=1326 audit(1742671416.823:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 191.223758][ T7887] macvlan0: left allmulticast mode [ 191.229267][ T7887] veth1_vlan: left allmulticast mode [ 191.273421][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.292042][ T30] audit: type=1326 audit(1742671416.823:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc70ef8cd6b code=0x7ffc0000 [ 191.297179][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.344975][ T30] audit: type=1326 audit(1742671416.843:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc70ef8cd6b code=0x7ffc0000 [ 191.395703][ T30] audit: type=1326 audit(1742671416.843:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70ef8d169 code=0x7ffc0000 [ 191.450741][ T7873] syzkaller1: entered promiscuous mode [ 191.458445][ T7873] syzkaller1: entered allmulticast mode [ 191.514997][ T5836] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 191.832952][ T5836] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 191.868546][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.873295][ T7901] input: syz0 as /devices/virtual/input/input18 [ 191.882334][ T5836] usb 3-1: Product: syz [ 191.921474][ T5836] usb 3-1: Manufacturer: syz [ 191.928437][ T5836] usb 3-1: SerialNumber: syz [ 192.072629][ T5836] usb 3-1: config 0 descriptor?? [ 193.062319][ T5836] usb 3-1: Firmware version (0.0) predates our first public release. [ 193.079418][ T5836] usb 3-1: Please update to version 0.2 or newer [ 193.088331][ T5836] usb 3-1: Firmware: build [ 193.194001][ T7919] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 193.274092][ T7921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32872 sclass=netlink_route_socket pid=7921 comm=syz.0.524 [ 193.325807][ T5836] usb 3-1: USB disconnect, device number 17 [ 193.465336][ T26] IPVS: starting estimator thread 0... [ 193.504177][ T7928] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 193.586402][ T7926] IPVS: using max 33 ests per chain, 79200 per kthread [ 193.755494][ T5874] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 193.855011][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 193.939313][ T5874] usb 2-1: unable to get BOS descriptor set [ 193.954675][ T5874] usb 2-1: not running at top speed; connect to a high speed hub [ 193.971081][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.001694][ T5874] usb 2-1: config 1 interface 0 altsetting 115 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 194.013499][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.020320][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.038087][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.530'. [ 194.056134][ T5874] usb 2-1: config 1 interface 0 has no altsetting 0 [ 194.074969][ T5874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.094542][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.115347][ T1539] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 194.124534][ T5874] usb 2-1: Product: syz [ 194.137919][ T5874] usb 2-1: Manufacturer: syz [ 194.142713][ T5874] usb 2-1: SerialNumber: syz [ 194.154066][ T7925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.154990][ T26] usb 1-1: device descriptor read/64, error -71 [ 194.415183][ T26] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 194.619550][ T26] usb 1-1: device descriptor read/64, error -71 [ 194.703342][ T7948] lo speed is unknown, defaulting to 1000 [ 194.826827][ T26] usb usb1-port1: attempt power cycle [ 194.986353][ T5874] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 194.999292][ T5874] usb 2-1: USB disconnect, device number 21 [ 195.033379][ T7951] FAULT_INJECTION: forcing a failure. [ 195.033379][ T7951] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 195.034968][ T1539] usb 3-1: Invalid ep0 maxpacket: 64 [ 195.107738][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.3.534 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 195.107769][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.107779][ T7951] Call Trace: [ 195.107785][ T7951] [ 195.107792][ T7951] dump_stack_lvl+0x16c/0x1f0 [ 195.107821][ T7951] should_fail_ex+0x50a/0x650 [ 195.107852][ T7951] _copy_from_user+0x2e/0xd0 [ 195.107872][ T7951] copy_msghdr_from_user+0x99/0x160 [ 195.107900][ T7951] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.107945][ T7951] ___sys_sendmsg+0xff/0x1e0 [ 195.107969][ T7951] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 195.107996][ T7951] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.108031][ T7951] ? __pfx_lock_release+0x10/0x10 [ 195.108055][ T7951] ? trace_lock_acquire+0x14e/0x1f0 [ 195.108083][ T7951] ? __fget_files+0x206/0x3a0 [ 195.108107][ T7951] __sys_sendmsg+0x16e/0x220 [ 195.108133][ T7951] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.108169][ T7951] ? rcu_is_watching+0x12/0xc0 [ 195.108191][ T7951] do_syscall_64+0xcd/0x250 [ 195.108217][ T7951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.108240][ T7951] RIP: 0033:0x7efe5a18d169 [ 195.108254][ T7951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.108270][ T7951] RSP: 002b:00007efe5b035038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.108288][ T7951] RAX: ffffffffffffffda RBX: 00007efe5a3a5fa0 RCX: 00007efe5a18d169 [ 195.108299][ T7951] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003 [ 195.108309][ T7951] RBP: 00007efe5b035090 R08: 0000000000000000 R09: 0000000000000000 [ 195.108319][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.108329][ T7951] R13: 0000000000000000 R14: 00007efe5a3a5fa0 R15: 00007ffe06712b18 [ 195.108351][ T7951] [ 195.374982][ T1539] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 195.415066][ T26] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 195.760347][ T26] usb 1-1: device descriptor read/8, error -71 [ 195.835292][ T1539] usb 3-1: Invalid ep0 maxpacket: 64 [ 195.842863][ T1539] usb usb3-port1: attempt power cycle [ 195.852643][ T7960] input: syz0 as /devices/virtual/input/input19 [ 196.017102][ T26] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.065559][ T26] usb 1-1: device descriptor read/8, error -71 [ 196.176498][ T26] usb usb1-port1: unable to enumerate USB device [ 196.266440][ T1539] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 196.494263][ T1539] usb 3-1: Invalid ep0 maxpacket: 64 [ 196.654069][ T7969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.655703][ T1539] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 196.735816][ T1539] usb 3-1: Invalid ep0 maxpacket: 64 [ 196.758019][ T1539] usb usb3-port1: unable to enumerate USB device [ 196.837511][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 196.837529][ T30] audit: type=1400 audit(1742671422.773:544): avc: denied { getopt } for pid=7981 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 197.100794][ T30] audit: type=1400 audit(1742671423.023:545): avc: denied { map } for pid=7984 comm="syz.4.547" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 197.984142][ T30] audit: type=1400 audit(1742671423.893:546): avc: denied { bind } for pid=7991 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.114677][ T8001] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 198.183756][ T7996] lo speed is unknown, defaulting to 1000 [ 198.224339][ T8001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.372931][ T5985] Bluetooth: (null): Invalid header checksum [ 200.467942][ T8023] syzkaller1: entered promiscuous mode [ 200.494993][ T8023] syzkaller1: entered allmulticast mode [ 200.503117][ T5985] Bluetooth: (null): Invalid header checksum [ 200.529442][ T5985] Bluetooth: (null): Invalid header checksum [ 200.584499][ T5985] Bluetooth: (null): Invalid header checksum [ 201.416944][ T5985] Bluetooth: (null): Invalid header checksum [ 201.535317][ T5867] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 201.599970][ T5985] Bluetooth: (null): Invalid header checksum [ 201.678498][ T5985] Bluetooth: (null): Invalid header checksum [ 201.688957][ T5985] Bluetooth: (null): Invalid header checksum [ 201.696540][ T5985] Bluetooth: (null): Invalid header checksum [ 201.710305][ T5985] Bluetooth: (null): Invalid header checksum [ 201.719929][ T5985] Bluetooth: (null): Invalid header checksum [ 201.728444][ T5985] Bluetooth: (null): Invalid header checksum [ 201.734519][ T5985] Bluetooth: (null): Invalid header checksum [ 201.742354][ T5985] Bluetooth: (null): Invalid header checksum [ 201.749724][ T5985] Bluetooth: (null): Invalid header checksum [ 201.785604][ T5867] usb 2-1: device descriptor read/64, error -71 [ 202.011805][ T30] audit: type=1400 audit(1742671427.943:547): avc: denied { write } for pid=8041 comm="syz.0.561" path="socket:[17236]" dev="sockfs" ino=17236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 202.032527][ T5867] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 202.144587][ T30] audit: type=1400 audit(1742671427.943:548): avc: denied { nlmsg_read } for pid=8041 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 202.174171][ T8039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.195254][ T5867] usb 2-1: device descriptor read/64, error -71 [ 202.347859][ T5867] usb usb2-port1: attempt power cycle [ 202.456839][ T5836] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 202.486765][ T5874] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 202.532706][ T30] audit: type=1400 audit(1742671428.433:549): avc: denied { getopt } for pid=8044 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.760973][ T30] audit: type=1400 audit(1742671428.433:550): avc: denied { accept } for pid=8044 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.796969][ T8039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.815020][ T5867] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 202.845612][ T5867] usb 2-1: device descriptor read/8, error -71 [ 202.905096][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 202.911893][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 202.915120][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 202.927066][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 202.954622][ T5874] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 202.967174][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.976676][ T5874] usb 3-1: Product: syz [ 202.980882][ T5874] usb 3-1: Manufacturer: syz [ 203.000507][ T5874] usb 3-1: SerialNumber: syz [ 203.001098][ T5836] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 203.019388][ T5874] usb 3-1: config 0 descriptor?? [ 203.024476][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.033046][ T5836] usb 5-1: Product: syz [ 203.034752][ T8039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.041305][ T5836] usb 5-1: Manufacturer: syz [ 203.050193][ T5874] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 203.053754][ T5836] usb 5-1: SerialNumber: syz [ 203.087105][ T5874] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 203.092050][ T5836] usb 5-1: config 0 descriptor?? [ 203.105062][ T5867] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 203.150116][ T5867] usb 2-1: device descriptor read/8, error -71 [ 203.194454][ T8058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8058 comm=syz.3.564 [ 203.275708][ T5867] usb usb2-port1: unable to enumerate USB device [ 203.378754][ T5836] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 203.680009][ T8039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.720083][ T8065] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 203.960383][ T8039] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.994088][ T8039] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.030935][ T8039] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.077472][ T8039] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.135615][ T5874] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 204.159366][ T8072] syzkaller1: entered promiscuous mode [ 204.165237][ T8072] syzkaller1: entered allmulticast mode [ 204.305293][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 204.352887][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.353162][ T5874] usb 2-1: config 0 has no interface number 0 [ 204.353306][ T5874] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 204.353421][ T5874] usb 2-1: config 0 interface 1 has no altsetting 0 [ 204.425289][ T5874] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 204.463444][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.488542][ T5874] usb 2-1: Product: syz [ 204.492870][ T5874] usb 2-1: Manufacturer: syz [ 204.499405][ T5874] usb 2-1: SerialNumber: syz [ 204.518883][ T5874] usb 2-1: config 0 descriptor?? [ 204.577986][ T13] Bluetooth: (null): Invalid header checksum [ 204.584348][ T13] Bluetooth: (null): Invalid header checksum [ 204.686972][ T6422] Bluetooth: (null): Invalid header checksum [ 204.746524][ T5874] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 204.763123][ T5874] cx231xx 2-1:0.1: Failed to read PCB config [ 204.774294][ T5874] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 204.801647][ T5887] Bluetooth: (null): Invalid header checksum [ 204.802196][ T5874] usb 2-1: USB disconnect, device number 26 [ 205.190539][ T8082] syzkaller1: entered promiscuous mode [ 205.192916][ T971] usb 3-1: USB disconnect, device number 22 [ 205.205080][ T8082] syzkaller1: entered allmulticast mode [ 205.274967][ T5874] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 205.303650][ T971] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 205.389019][ T971] kobil_sct 3-1:0.0: device disconnected [ 205.487411][ T13] Bluetooth: (null): Invalid header checksum [ 205.495497][ T13] Bluetooth: (null): Invalid header checksum [ 205.545605][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 205.560727][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.569773][ T5874] usb 2-1: config 0 has no interface number 0 [ 205.570794][ T5836] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 205.580371][ T5874] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 205.598097][ T5874] usb 2-1: config 0 interface 1 has no altsetting 0 [ 205.606760][ T13] Bluetooth: (null): Invalid header checksum [ 205.611299][ T5874] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 205.622557][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.622760][ T5836] usb 5-1: USB disconnect, device number 23 [ 205.635685][ T5874] usb 2-1: Product: syz [ 205.654771][ T5874] usb 2-1: Manufacturer: syz [ 205.668604][ T5874] usb 2-1: SerialNumber: syz [ 205.681754][ T5874] usb 2-1: config 0 descriptor?? [ 205.715511][ T5887] Bluetooth: (null): Invalid header checksum [ 205.825230][ T5887] Bluetooth: (null): Invalid header checksum [ 205.864842][ T30] audit: type=1326 audit(1742671431.793:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5a18d169 code=0x7ffc0000 [ 205.890611][ T30] audit: type=1326 audit(1742671431.793:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5a18d169 code=0x7ffc0000 [ 205.927551][ T30] audit: type=1326 audit(1742671431.793:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7efe5a18d169 code=0x7ffc0000 [ 205.960216][ T5874] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 205.972552][ T5874] cx231xx 2-1:0.1: bad scenario!!!!! [ 205.972552][ T5874] config_info=0 [ 205.983727][ T30] audit: type=1326 audit(1742671431.793:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5a18d169 code=0x7ffc0000 [ 206.008427][ T5874] cx231xx 2-1:0.1: Failed to read PCB config [ 206.022979][ T30] audit: type=1326 audit(1742671431.793:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7efe5a18d169 code=0x7ffc0000 [ 206.065026][ T30] audit: type=1326 audit(1742671431.803:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5a18d169 code=0x7ffc0000 [ 206.377707][ T8097] openvswitch: netlink: IP tunnel TTL not specified. [ 206.599674][ T8095] veth1_macvtap: left promiscuous mode [ 206.605502][ T8095] macsec0: entered promiscuous mode [ 206.722553][ T8070] lo speed is unknown, defaulting to 1000 [ 206.970113][ T8103] lo speed is unknown, defaulting to 1000 [ 207.465401][ T8107] lo speed is unknown, defaulting to 1000 [ 207.832705][ T8118] syzkaller1: entered promiscuous mode [ 207.867141][ T8118] syzkaller1: entered allmulticast mode [ 207.921378][ T8128] netlink: 56 bytes leftover after parsing attributes in process `syz.3.586'. [ 208.126589][ T6206] Bluetooth: (null): Invalid header checksum [ 208.142253][ T6206] Bluetooth: (null): Invalid header checksum [ 208.242603][ T5887] Bluetooth: (null): Invalid header checksum [ 208.350456][ T6422] Bluetooth: (null): Invalid header checksum [ 208.495075][ T26] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 208.667823][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 208.667842][ T30] audit: type=1400 audit(1742671434.603:568): avc: denied { read } for pid=8139 comm="syz.0.590" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 208.668072][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.676406][ T30] audit: type=1400 audit(1742671434.603:569): avc: denied { open } for pid=8139 comm="syz.0.590" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 208.697000][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.725008][ T26] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.794587][ T5836] usb 2-1: USB disconnect, device number 27 [ 208.810298][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.874392][ T26] usb 5-1: config 0 descriptor?? [ 208.924467][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 209.452064][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 210.217285][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 210.263277][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 210.446944][ T5836] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 210.454796][ T30] audit: type=1326 audit(1742671436.173:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 210.478032][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.502843][ T30] audit: type=1326 audit(1742671436.173:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 210.529976][ T30] audit: type=1326 audit(1742671436.173:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 210.932785][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 210.964977][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 210.974963][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 210.986023][ T30] audit: type=1326 audit(1742671436.173:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 211.018534][ T30] audit: type=1326 audit(1742671436.173:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 211.042860][ T30] audit: type=1326 audit(1742671436.173:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 211.065902][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.086142][ T5836] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.094242][ T5836] usb 1-1: config 0 has no interface number 0 [ 211.101680][ T30] audit: type=1400 audit(1742671436.883:576): avc: denied { watch_mount } for pid=8131 comm="syz.4.587" path="/120" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.142750][ T5836] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 211.155966][ T5836] usb 1-1: config 0 interface 1 has no altsetting 0 [ 211.163592][ T26] pwc: recv_control_msg error -71 req 04 val 1400 [ 211.165765][ T30] audit: type=1326 audit(1742671436.893:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640358d169 code=0x7ffc0000 [ 211.176616][ T26] pwc: recv_control_msg error -71 req 02 val 2000 [ 211.216871][ T5836] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 211.227235][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.236213][ T26] pwc: recv_control_msg error -71 req 02 val 2100 [ 211.243710][ T26] pwc: recv_control_msg error -71 req 04 val 1500 [ 211.389376][ T5836] usb 1-1: Product: syz [ 211.395574][ T5836] usb 1-1: Manufacturer: syz [ 211.400219][ T5836] usb 1-1: SerialNumber: syz [ 211.406287][ T26] pwc: recv_control_msg error -71 req 02 val 2500 [ 211.415417][ T5836] usb 1-1: config 0 descriptor?? [ 211.420579][ T26] pwc: recv_control_msg error -71 req 02 val 2400 [ 211.427493][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 211.434671][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 211.442536][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 211.449757][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 211.458290][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 211.464457][ T26] pwc: Registered as video103. [ 211.466678][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 211.475893][ T26] usb 5-1: USB disconnect, device number 24 [ 211.636075][ T5836] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 211.648474][ T5836] cx231xx 1-1:0.1: Failed to read PCB config [ 211.654535][ T5836] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 211.665247][ T5836] usb 1-1: USB disconnect, device number 22 [ 211.824471][ T8179] lo speed is unknown, defaulting to 1000 [ 211.905030][ T8177] syzkaller1: entered promiscuous mode [ 211.913284][ T8177] syzkaller1: entered allmulticast mode [ 212.048909][ T8165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.100875][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 214.290638][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 214.290657][ T30] audit: type=1400 audit(1742671440.223:579): avc: denied { listen } for pid=8209 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.509556][ T30] audit: type=1400 audit(1742671440.253:580): avc: denied { accept } for pid=8209 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.619272][ T8219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.726596][ T8224] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.054753][ T8234] lo speed is unknown, defaulting to 1000 [ 215.294072][ T8232] syzkaller1: entered promiscuous mode [ 215.300151][ T8232] syzkaller1: entered allmulticast mode [ 215.453695][ T26] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 215.525534][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 215.615373][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 215.742567][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.032878][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.057844][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.070229][ T26] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 216.085197][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.099114][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 216.102981][ T26] usb 3-1: Product: syz [ 216.115072][ T26] usb 3-1: Manufacturer: syz [ 216.119735][ T26] usb 3-1: SerialNumber: syz [ 216.124094][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.149399][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.159077][ T26] usb 3-1: config 0 descriptor?? [ 216.168967][ T10] usb 5-1: config 0 descriptor?? [ 216.174253][ T26] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 216.174649][ T8242] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 216.200674][ T26] sr9700 3-1:0.0: probe with driver sr9700 failed with error -22 [ 216.216905][ T10] hub 5-1:0.0: USB hub found [ 216.413466][ T10] hub 5-1:0.0: 1 port detected [ 216.414375][ T26] usb 3-1: USB disconnect, device number 23 [ 216.505169][ T5874] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 216.677444][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 216.708286][ T5874] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 216.732818][ T5874] usb 1-1: config 0 has no interface number 0 [ 216.760478][ T5874] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.779128][ T5874] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 216.791382][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 216.800629][ T5874] usb 1-1: Product: syz [ 216.806953][ T5874] usb 1-1: SerialNumber: syz [ 216.821726][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.841635][ T5874] usb 1-1: config 0 descriptor?? [ 216.855151][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.860439][ T5874] cm109 1-1:0.8: invalid payload size 142, expected 4 [ 216.872206][ T5874] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input22 [ 216.901685][ T10] usb 5-1: USB disconnect, device number 25 [ 217.224765][ T30] audit: type=1804 audit(1742671443.153:581): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.626" name="/newroot/133/file0" dev="tmpfs" ino=719 res=1 errno=0 [ 217.249780][ T30] audit: type=1400 audit(1742671443.183:582): avc: denied { write } for pid=8260 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 218.575103][ T30] audit: type=1400 audit(1742671444.203:583): avc: denied { nlmsg_read } for pid=8268 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 219.427935][ T971] usb 1-1: USB disconnect, device number 24 [ 219.429007][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 219.440859][ C0] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 219.634982][ T971] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 220.331686][ T8289] syzkaller1: entered promiscuous mode [ 220.345253][ T8289] syzkaller1: entered allmulticast mode [ 220.385049][ T30] audit: type=1400 audit(1742671446.313:584): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 221.142947][ T8309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.880296][ T8314] FAULT_INJECTION: forcing a failure. [ 221.880296][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 221.955609][ T8314] CPU: 1 UID: 0 PID: 8314 Comm: syz.3.642 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 221.955636][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.955647][ T8314] Call Trace: [ 221.955652][ T8314] [ 221.955658][ T8314] dump_stack_lvl+0x16c/0x1f0 [ 221.955678][ T8314] should_fail_ex+0x50a/0x650 [ 221.955697][ T8314] ? fs_reclaim_acquire+0xae/0x150 [ 221.955713][ T8314] ? tomoyo_encode2+0x100/0x3e0 [ 221.955729][ T8314] should_failslab+0xc2/0x120 [ 221.955742][ T8314] __kmalloc_noprof+0xcb/0x510 [ 221.955753][ T8314] ? d_absolute_path+0x137/0x1b0 [ 221.955767][ T8314] ? rcu_is_watching+0x12/0xc0 [ 221.955781][ T8314] tomoyo_encode2+0x100/0x3e0 [ 221.955798][ T8314] tomoyo_encode+0x29/0x50 [ 221.955814][ T8314] tomoyo_realpath_from_path+0x19d/0x720 [ 221.955833][ T8314] tomoyo_path_number_perm+0x248/0x590 [ 221.955847][ T8314] ? tomoyo_path_number_perm+0x235/0x590 [ 221.955861][ T8314] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.955881][ T8314] ? find_held_lock+0x2d/0x110 [ 221.955898][ T8314] ? __pfx_lock_release+0x10/0x10 [ 221.955912][ T8314] ? trace_lock_acquire+0x14e/0x1f0 [ 221.955924][ T8314] ? find_held_lock+0x2d/0x110 [ 221.955935][ T8314] ? lock_acquire+0x2f/0xb0 [ 221.955949][ T8314] ? __fget_files+0x40/0x3a0 [ 221.955961][ T8314] ? __fget_files+0x206/0x3a0 [ 221.955972][ T8314] security_file_ioctl+0x9b/0x240 [ 221.955989][ T8314] __x64_sys_ioctl+0xb7/0x200 [ 221.956006][ T8314] do_syscall_64+0xcd/0x250 [ 221.956023][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.956038][ T8314] RIP: 0033:0x7efe5a18d169 [ 221.956046][ T8314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.956057][ T8314] RSP: 002b:00007efe5b035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.956068][ T8314] RAX: ffffffffffffffda RBX: 00007efe5a3a5fa0 RCX: 00007efe5a18d169 [ 221.956074][ T8314] RDX: 0000200000000380 RSI: 00000000c0405602 RDI: 0000000000000003 [ 221.956080][ T8314] RBP: 00007efe5b035090 R08: 0000000000000000 R09: 0000000000000000 [ 221.956086][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.956092][ T8314] R13: 0000000000000000 R14: 00007efe5a3a5fa0 R15: 00007ffe06712b18 [ 221.956105][ T8314] [ 221.956115][ T8314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.219407][ T8316] netlink: 140 bytes leftover after parsing attributes in process `syz.2.643'. [ 222.322934][ T30] audit: type=1400 audit(1742671448.243:585): avc: denied { ioctl } for pid=8319 comm="syz.4.644" path="socket:[19251]" dev="sockfs" ino=19251 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.515987][ T5836] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 222.735284][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 222.795949][ T5836] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 222.885164][ T5836] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 222.950344][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.967307][ T5836] usb 3-1: Product: syz [ 222.987494][ T5836] usb 3-1: Manufacturer: syz [ 222.992168][ T5836] usb 3-1: SerialNumber: syz [ 223.035958][ T5836] usb 3-1: config 0 descriptor?? [ 223.041599][ T8316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.069626][ T8335] netlink: 272 bytes leftover after parsing attributes in process `syz.4.649'. [ 223.125101][ T26] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 223.178961][ T8337] openvswitch: netlink: Duplicate or invalid key (type 0). [ 223.186415][ T8337] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.196850][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 223.216299][ T30] audit: type=1400 audit(1742671449.153:586): avc: denied { map } for pid=8336 comm="syz.3.650" path="socket:[19837]" dev="sockfs" ino=19837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.218306][ T8337] delete_channel: no stack [ 223.273787][ T30] audit: type=1400 audit(1742671449.153:587): avc: denied { setopt } for pid=8336 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 223.324338][ T8336] delete_channel: no stack [ 223.332115][ T8336] delete_channel: no stack [ 223.335575][ T8341] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 223.346842][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.362601][ T8341] kvm: pic: non byte read [ 223.367866][ T5836] usb 3-1: USB disconnect, device number 24 [ 223.376643][ T30] audit: type=1400 audit(1742671449.183:588): avc: denied { create } for pid=8338 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 223.376969][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.415336][ T8341] kvm: pic: level sensitive irq not supported [ 223.415419][ T8341] kvm: pic: non byte read [ 223.423308][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.440119][ T26] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 223.454333][ T26] usb 1-1: config 1 interface 0 has no altsetting 0 [ 223.475277][ T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.486283][ T30] audit: type=1400 audit(1742671449.183:589): avc: denied { ioctl } for pid=8338 comm="syz.4.652" path="socket:[19845]" dev="sockfs" ino=19845 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 223.504014][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.528472][ T26] usb 1-1: Product: syz [ 223.533083][ T26] usb 1-1: Manufacturer: syz [ 223.541396][ T26] usb 1-1: SerialNumber: syz [ 223.589415][ T30] audit: type=1400 audit(1742671449.183:590): avc: denied { write } for pid=8338 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 223.942598][ T30] audit: type=1400 audit(1742671449.253:591): avc: denied { accept } for pid=8336 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 224.134806][ T8332] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 224.144388][ T8332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'. [ 224.171777][ T30] audit: type=1400 audit(1742671449.983:592): avc: denied { sqpoll } for pid=8348 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 224.295766][ T30] audit: type=1400 audit(1742671449.993:593): avc: denied { map } for pid=8348 comm="syz.3.654" path="pipe:[3835]" dev="pipefs" ino=3835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 224.436714][ T8333] ceph: No mds server is up or the cluster is laggy [ 224.443913][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 224.451260][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 226.199055][ T26] usb 1-1: 0:2 : does not exist [ 226.296447][ T26] usb 1-1: USB disconnect, device number 25 [ 226.343496][ T30] audit: type=1400 audit(1742671452.273:594): avc: denied { create } for pid=8382 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 226.431025][ T30] audit: type=1400 audit(1742671452.303:595): avc: denied { connect } for pid=8382 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 226.510629][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.586689][ T5871] kernel write not supported for file /dsp (pid: 5871 comm: kworker/1:6) [ 226.818942][ T8402] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.830990][ T8402] UDF-fs: Scanning with blocksize 512 failed [ 226.840625][ T8402] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.852060][ T8402] UDF-fs: Scanning with blocksize 1024 failed [ 226.880995][ T8402] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.899496][ T8402] UDF-fs: Scanning with blocksize 2048 failed [ 226.911867][ T8402] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.930865][ T8402] UDF-fs: Scanning with blocksize 4096 failed [ 227.747260][ T5874] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 227.905424][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 227.915911][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 227.923168][ T5874] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.943105][ T5874] usb 1-1: config 0 has no interface number 0 [ 227.953831][ T5874] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 227.965315][ T5874] usb 1-1: config 0 interface 1 has no altsetting 0 [ 227.968128][ T30] audit: type=1400 audit(1742671453.903:596): avc: denied { listen } for pid=8425 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 227.980845][ T5874] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 228.025164][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.042962][ T5874] usb 1-1: Product: syz [ 228.069172][ T5874] usb 1-1: Manufacturer: syz [ 228.073825][ T5874] usb 1-1: SerialNumber: syz [ 228.116741][ T5874] usb 1-1: config 0 descriptor?? [ 228.560109][ T5874] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 228.573890][ T5874] cx231xx 1-1:0.1: Failed to read PCB config [ 228.581879][ T5874] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 228.604559][ T5874] usb 1-1: USB disconnect, device number 26 [ 229.587936][ T30] audit: type=1400 audit(1742671454.763:597): avc: denied { ioctl } for pid=8435 comm="syz.1.684" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.615624][ T5874] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 231.014910][ T5874] usb 1-1: device not accepting address 27, error -71 [ 231.075602][ T30] audit: type=1400 audit(1742671456.983:598): avc: denied { checkpoint_restore } for pid=8444 comm="syz.3.686" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.515691][ T30] audit: type=1400 audit(1742671457.443:599): avc: denied { read } for pid=8449 comm="syz.0.688" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 231.515745][ T30] audit: type=1400 audit(1742671457.443:600): avc: denied { open } for pid=8449 comm="syz.0.688" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 231.515782][ T30] audit: type=1400 audit(1742671457.443:601): avc: denied { ioctl } for pid=8449 comm="syz.0.688" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 231.721137][ T971] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 231.867342][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.867375][ T971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.867414][ T971] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 231.867438][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.869442][ T971] usb 3-1: config 0 descriptor?? [ 232.081772][ T30] audit: type=1400 audit(1742671458.013:602): avc: denied { read } for pid=8479 comm="syz.4.696" name="file0" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.089415][ T8480] xt_NFQUEUE: number of total queues is 0 [ 232.477382][ T971] gt683r_led 0003:1770:FF00.0007: item fetching failed at offset 5/11 [ 232.502402][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.659832][ T971] gt683r_led 0003:1770:FF00.0007: hid parsing failed [ 232.667324][ T971] gt683r_led 0003:1770:FF00.0007: probe with driver gt683r_led failed with error -22 [ 233.670537][ T971] usb 3-1: USB disconnect, device number 25 [ 234.269133][ T8525] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 235.480112][ T8547] xt_policy: neither incoming nor outgoing policy selected [ 236.312042][ T8556] random: crng reseeded on system resumption [ 236.575952][ T8563] Cannot find add_set index 4 as target [ 236.830587][ T30] audit: type=1400 audit(1742671462.763:603): avc: denied { ioctl } for pid=8555 comm="syz.2.714" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.855342][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.064991][ T1539] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 237.226225][ T1539] usb 3-1: Using ep0 maxpacket: 16 [ 237.240383][ T1539] usb 3-1: config 2 has an invalid interface number: 254 but max is 0 [ 237.259506][ T1539] usb 3-1: config 2 has no interface number 0 [ 237.280025][ T1539] usb 3-1: config 2 interface 254 has no altsetting 0 [ 237.727448][ T1539] usb 3-1: New USB device found, idVendor=05ac, idProduct=e6dd, bcdDevice=e5.c2 [ 237.741836][ T1539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.750606][ T1539] usb 3-1: Product: syz [ 237.754807][ T1539] usb 3-1: Manufacturer: syz [ 237.759835][ T1539] usb 3-1: SerialNumber: syz [ 237.765521][ T5870] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 237.965473][ T5870] usb 4-1: device descriptor read/64, error -71 [ 237.982095][ T30] audit: type=1400 audit(1742671463.913:604): avc: denied { map } for pid=8589 comm="syz.0.725" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 237.983909][ T8590] syzkaller0: entered promiscuous mode [ 238.005665][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.018931][ T8590] syzkaller0: entered allmulticast mode [ 238.042320][ T8590] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 238.042649][ T1539] usb 3-1: USB disconnect, device number 26 [ 238.205390][ T5870] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 238.335491][ T5870] usb 4-1: device descriptor read/64, error -71 [ 238.385019][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 238.455553][ T5870] usb usb4-port1: attempt power cycle [ 238.558806][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.569857][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.584287][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.594220][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.611102][ T10] usb 1-1: config 0 descriptor?? [ 238.808053][ T5870] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 238.824818][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 238.831449][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 239.573151][ T5870] usb 4-1: device descriptor read/8, error -71 [ 239.581703][ T10] usb 1-1: USB disconnect, device number 29 [ 240.415827][ T10] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 240.661409][ T10] usb 1-1: device descriptor read/64, error -71 [ 240.685174][ T971] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 240.766956][ T30] audit: type=1400 audit(1742671466.663:605): avc: denied { create } for pid=8605 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 240.910279][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 241.064918][ T971] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 241.100703][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.123912][ T10] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 241.127309][ T971] usb 3-1: Product: syz [ 241.188990][ T971] usb 3-1: Manufacturer: syz [ 241.261088][ T971] usb 3-1: SerialNumber: syz [ 241.271009][ T8607] tap0: tun_chr_ioctl cmd 1074025672 [ 241.276555][ T8607] tap0: ignored: set checksum disabled [ 241.286427][ T971] usb 3-1: config 0 descriptor?? [ 241.302966][ T971] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 241.864058][ T971] gspca_sonixj: reg_w1 err -110 [ 241.869284][ T971] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 242.909633][ T10] usb 3-1: USB disconnect, device number 27 [ 242.941740][ T8628] FAULT_INJECTION: forcing a failure. [ 242.941740][ T8628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.955404][ T8628] CPU: 0 UID: 0 PID: 8628 Comm: syz.2.736 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 242.955428][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.955439][ T8628] Call Trace: [ 242.955444][ T8628] [ 242.955451][ T8628] dump_stack_lvl+0x16c/0x1f0 [ 242.955482][ T8628] should_fail_ex+0x50a/0x650 [ 242.955512][ T8628] _copy_from_iter+0x2a1/0x1560 [ 242.955532][ T8628] ? trace_lock_acquire+0x14e/0x1f0 [ 242.955553][ T8628] ? __alloc_skb+0x1fe/0x380 [ 242.955578][ T8628] ? __pfx__copy_from_iter+0x10/0x10 [ 242.955595][ T8628] ? __virt_addr_valid+0x1a4/0x590 [ 242.955616][ T8628] ? __virt_addr_valid+0x5e/0x590 [ 242.955633][ T8628] ? __phys_addr_symbol+0x30/0x80 [ 242.955650][ T8628] ? __check_object_size+0x488/0x710 [ 242.955675][ T8628] netlink_sendmsg+0x813/0xd70 [ 242.955705][ T8628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.955748][ T8628] ____sys_sendmsg+0xaaf/0xc90 [ 242.955769][ T8628] ? copy_msghdr_from_user+0x10b/0x160 [ 242.955793][ T8628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.955826][ T8628] ___sys_sendmsg+0x135/0x1e0 [ 242.955850][ T8628] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 242.955876][ T8628] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.955912][ T8628] ? __pfx_lock_release+0x10/0x10 [ 242.955936][ T8628] ? trace_lock_acquire+0x14e/0x1f0 [ 242.955964][ T8628] ? __fget_files+0x206/0x3a0 [ 242.955989][ T8628] __sys_sendmsg+0x16e/0x220 [ 242.956015][ T8628] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.956053][ T8628] ? rcu_is_watching+0x12/0xc0 [ 242.956075][ T8628] do_syscall_64+0xcd/0x250 [ 242.956101][ T8628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.956126][ T8628] RIP: 0033:0x7f640358d169 [ 242.956140][ T8628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.956156][ T8628] RSP: 002b:00007f6404412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.956173][ T8628] RAX: ffffffffffffffda RBX: 00007f64037a5fa0 RCX: 00007f640358d169 [ 242.956185][ T8628] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 242.956195][ T8628] RBP: 00007f6404412090 R08: 0000000000000000 R09: 0000000000000000 [ 242.956205][ T8628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.956215][ T8628] R13: 0000000000000000 R14: 00007f64037a5fa0 R15: 00007fff8bcacd58 [ 242.956239][ T8628] [ 255.417967][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.424292][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.635592][ T5192] udevd[5192]: worker [5821] /devices/virtual/nfc/nfc2 is taking a long time [ 316.848254][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.854581][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.327492][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.073678][ T30] audit: type=1400 audit(1742671574.003:606): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=38848 daddr=10.128.10.7 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 378.286612][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.292940][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.205817][ T31] INFO: task syz-executor:5815 blocked for more than 143 seconds. [ 396.213741][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 396.222118][ T31] Blocked by coredump. [ 396.227158][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.236002][ T31] task:syz-executor state:D stack:22496 pid:5815 tgid:5815 ppid:1 task_flags:0x40054c flags:0x00004006 [ 396.248098][ T31] Call Trace: [ 396.251392][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 396.254329][ T31] __schedule+0xf43/0x5890 [ 396.259283][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 396.264635][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 396.270470][ T31] ? __pfx___schedule+0x10/0x10 [ 396.275690][ T31] ? schedule+0x298/0x350 [ 396.280045][ T31] ? __pfx_lock_release+0x10/0x10 [ 396.315205][ T31] ? __mutex_trylock_common+0x78/0x250 [ 396.320781][ T31] ? lock_acquire+0x2f/0xb0 [ 396.344845][ T31] ? schedule+0x1fd/0x350 [ 396.349255][ T31] schedule+0xe7/0x350 [ 396.353355][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.358904][ T31] __mutex_lock+0x6bd/0xb10 [ 396.363419][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 396.368670][ T31] ? rfkill_unregister+0xde/0x2c0 [ 396.373716][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.378836][ T31] ? device_del+0x6b6/0x9f0 [ 396.383349][ T31] ? __pfx_device_del+0x10/0x10 [ 396.388257][ T31] ? _raw_read_unlock+0x28/0x50 [ 396.393212][ T31] ? rfkill_unregister+0xde/0x2c0 [ 396.398848][ T31] rfkill_unregister+0xde/0x2c0 [ 396.403714][ T31] hci_unregister_dev+0x323/0x620 [ 396.408778][ T31] ? __pfx_vhci_release+0x10/0x10 [ 396.413847][ T31] vhci_release+0x79/0xf0 [ 396.418307][ T31] __fput+0x3ff/0xb70 [ 396.422308][ T31] task_work_run+0x14e/0x250 [ 396.426997][ T31] ? __pfx_task_work_run+0x10/0x10 [ 396.432159][ T31] do_exit+0xad8/0x2db0 [ 396.436468][ T31] ? get_signal+0x8f7/0x26c0 [ 396.441092][ T31] ? __pfx_do_exit+0x10/0x10 [ 396.445730][ T31] ? do_raw_spin_lock+0x12d/0x2c0 [ 396.450773][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 396.456279][ T31] do_group_exit+0xd3/0x2a0 [ 396.460824][ T31] get_signal+0x24ed/0x26c0 [ 396.465416][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 396.470650][ T31] ? __pfx_get_signal+0x10/0x10 [ 396.475604][ T31] ? find_held_lock+0x2d/0x110 [ 396.480375][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 396.486002][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 396.492175][ T31] ? __might_fault+0xe3/0x190 [ 396.496966][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 396.502630][ T31] do_syscall_64+0xda/0x250 [ 396.507205][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.513150][ T31] RIP: 0033:0x7fcc59d833d7 [ 396.517638][ T31] RSP: 002b:00007ffd89bdfb70 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 396.526122][ T31] RAX: fffffffffffffe00 RBX: 00000000000001b4 RCX: 00007fcc59d833d7 [ 396.534081][ T31] RDX: 0000000040000000 RSI: 00007ffd89bdfbdc RDI: 00000000ffffffff [ 396.542163][ T31] RBP: 00007ffd89bdfbdc R08: 0000000000000000 R09: 0000000000000000 [ 396.550182][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000080 [ 396.558260][ T31] R13: 00005555894a8590 R14: 0000000000039030 R15: 00007ffd89bdfc30 [ 396.566282][ T31] [ 396.569319][ T31] INFO: task udevd:5821 blocked for more than 143 seconds. [ 396.576670][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 396.584326][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.593059][ T31] task:udevd state:D stack:24240 pid:5821 tgid:5821 ppid:5192 task_flags:0x400140 flags:0x00000002 [ 396.605078][ T31] Call Trace: [ 396.608374][ T31] [ 396.611332][ T31] __schedule+0xf43/0x5890 [ 396.615898][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 396.621134][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 396.626751][ T31] ? __pfx___schedule+0x10/0x10 [ 396.631662][ T31] ? schedule+0x298/0x350 [ 396.636118][ T31] ? __pfx_lock_release+0x10/0x10 [ 396.641164][ T31] ? __mutex_trylock_common+0x78/0x250 [ 396.646698][ T31] ? lock_acquire+0x2f/0xb0 [ 396.651248][ T31] ? schedule+0x1fd/0x350 [ 396.655673][ T31] schedule+0xe7/0x350 [ 396.659778][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.665304][ T31] __mutex_lock+0x6bd/0xb10 [ 396.669839][ T31] ? uevent_show+0x188/0x3b0 [ 396.674431][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.679582][ T31] ? uevent_show+0x188/0x3b0 [ 396.684184][ T31] uevent_show+0x188/0x3b0 [ 396.688804][ T31] ? __pfx_uevent_show+0x10/0x10 [ 396.693770][ T31] dev_attr_show+0x53/0xe0 [ 396.698309][ T31] ? __pfx_dev_attr_show+0x10/0x10 [ 396.703450][ T31] sysfs_kf_seq_show+0x23e/0x410 [ 396.708517][ T31] seq_read_iter+0x4f4/0x12b0 [ 396.713246][ T31] kernfs_fop_read_iter+0x414/0x580 [ 396.718521][ T31] ? rw_verify_area+0xcf/0x680 [ 396.723335][ T31] vfs_read+0x886/0xbf0 [ 396.727576][ T31] ? __pfx_vfs_read+0x10/0x10 [ 396.732269][ T31] ? strncpy_from_kernel_nofault+0x18b/0x260 [ 396.738321][ T31] ? bpf_probe_read_compat_str+0x10e/0x170 [ 396.744157][ T31] ? syscall_trace_enter+0x1cd/0x260 [ 396.749548][ T31] ksys_read+0x12b/0x250 [ 396.753814][ T31] ? __pfx_ksys_read+0x10/0x10 [ 396.758677][ T31] ? rcu_is_watching+0x12/0xc0 [ 396.763468][ T31] do_syscall_64+0xcd/0x250 [ 396.768011][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.773950][ T31] RIP: 0033:0x7f784d116b6a [ 396.778503][ T31] RSP: 002b:00007ffeb2ec9e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.786993][ T31] RAX: ffffffffffffffda RBX: 0000563e80a1f470 RCX: 00007f784d116b6a [ 396.795051][ T31] RDX: 0000000000001000 RSI: 0000563e80a6b180 RDI: 0000000000000008 [ 396.803059][ T31] RBP: 0000563e80a1f470 R08: 0000000000000008 R09: 0000000000000010 [ 396.811116][ T31] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 396.819135][ T31] R13: 0000000000003fff R14: 00007ffeb2eca308 R15: 000000000000000a [ 396.827223][ T31] [ 396.830396][ T31] INFO: task kworker/0:3:5867 blocked for more than 143 seconds. [ 396.838211][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 396.846585][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.855613][ T31] task:kworker/0:3 state:D stack:19664 pid:5867 tgid:5867 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 396.867753][ T31] Workqueue: events rfkill_sync_work [ 396.873036][ T31] Call Trace: [ 396.876358][ T31] [ 396.879304][ T31] __schedule+0xf43/0x5890 [ 396.883737][ T31] ? __pfx_mark_lock+0x10/0x10 [ 396.888570][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 396.893805][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.899811][ T31] ? find_held_lock+0x2d/0x110 [ 396.904590][ T31] ? __pfx___schedule+0x10/0x10 [ 396.909469][ T31] ? schedule+0x298/0x350 [ 396.913905][ T31] ? __pfx_lock_release+0x10/0x10 [ 396.919026][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.924232][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.929682][ T31] schedule+0xe7/0x350 [ 396.933938][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.939492][ T31] __mutex_lock+0x6bd/0xb10 [ 396.944007][ T31] ? __pfx_lock_release+0x10/0x10 [ 396.949109][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 396.953721][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.958881][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 396.964188][ T31] ? rfkill_set_block+0x198/0x560 [ 396.969316][ T31] ? __pfx_lock_release+0x10/0x10 [ 396.974395][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 396.979064][ T31] nfc_dev_down+0x2d/0x2e0 [ 396.983496][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 396.988576][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 396.994310][ T31] rfkill_set_block+0x203/0x560 [ 396.999277][ T31] rfkill_sync+0x10a/0x1c0 [ 397.003752][ T31] rfkill_sync_work+0x27/0x40 [ 397.008548][ T31] process_one_work+0x9c5/0x1ba0 [ 397.013546][ T31] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 397.019558][ T31] ? __pfx_process_one_work+0x10/0x10 [ 397.025333][ T31] ? assign_work+0x1a0/0x250 [ 397.029957][ T31] worker_thread+0x6c8/0xf00 [ 397.034544][ T31] ? __pfx_worker_thread+0x10/0x10 [ 397.039745][ T31] kthread+0x3af/0x750 [ 397.043932][ T31] ? __pfx_kthread+0x10/0x10 [ 397.048610][ T31] ? lock_acquire+0x2f/0xb0 [ 397.053244][ T31] ? __pfx_kthread+0x10/0x10 [ 397.057903][ T31] ret_from_fork+0x45/0x80 [ 397.062418][ T31] ? __pfx_kthread+0x10/0x10 [ 397.067111][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.071913][ T31] [ 397.075231][ T31] INFO: task kworker/0:5:5874 blocked for more than 144 seconds. [ 397.083104][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 397.093509][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.102594][ T31] task:kworker/0:5 state:D stack:22464 pid:5874 tgid:5874 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 397.117202][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 397.124061][ T31] Call Trace: [ 397.127521][ T31] [ 397.130837][ T31] __schedule+0xf43/0x5890 [ 397.136263][ T31] ? __pfx_mark_lock+0x10/0x10 [ 397.141199][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 397.148053][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 397.153895][ T31] ? find_held_lock+0x2d/0x110 [ 397.159336][ T31] ? __pfx___schedule+0x10/0x10 [ 397.164192][ T31] ? schedule+0x298/0x350 [ 397.169597][ T31] ? __pfx_lock_release+0x10/0x10 [ 397.175288][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.180542][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.186491][ T31] schedule+0xe7/0x350 [ 397.190701][ T31] schedule_preempt_disabled+0x13/0x30 [ 397.196831][ T31] __mutex_lock+0x6bd/0xb10 [ 397.201357][ T31] ? lock_acquire+0x2f/0xb0 [ 397.206039][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 397.212419][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 397.217595][ T31] ? rcu_is_watching+0x12/0xc0 [ 397.222415][ T31] ? trace_lock_acquire+0x14e/0x1f0 [ 397.227765][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 397.234338][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 397.241351][ T31] process_one_work+0x9c5/0x1ba0 [ 397.247165][ T31] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 397.252833][ T31] ? __pfx_process_one_work+0x10/0x10 [ 397.258392][ T31] ? assign_work+0x1a0/0x250 [ 397.263041][ T31] worker_thread+0x6c8/0xf00 [ 397.267838][ T31] ? __kthread_parkme+0x148/0x220 [ 397.272900][ T31] ? __pfx_worker_thread+0x10/0x10 [ 397.278121][ T31] kthread+0x3af/0x750 [ 397.282230][ T31] ? __pfx_kthread+0x10/0x10 [ 397.287498][ T31] ? lock_acquire+0x2f/0xb0 [ 397.292054][ T31] ? __pfx_kthread+0x10/0x10 [ 397.297274][ T31] ret_from_fork+0x45/0x80 [ 397.301744][ T31] ? __pfx_kthread+0x10/0x10 [ 397.306600][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.311425][ T31] [ 397.314509][ T31] INFO: task syz.1.700:8490 blocked for more than 144 seconds. [ 397.322214][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 397.330112][ T31] Blocked by coredump. [ 397.334719][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.343842][ T31] task:syz.1.700 state:D stack:25920 pid:8490 tgid:8489 ppid:5815 task_flags:0x40054c flags:0x00004002 [ 397.356881][ T31] Call Trace: [ 397.360157][ T31] [ 397.363069][ T31] __schedule+0xf43/0x5890 [ 397.367672][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 397.372923][ T31] ? __pfx_lockdep_lock+0x10/0x10 [ 397.378106][ T31] ? __pfx___schedule+0x10/0x10 [ 397.383317][ T31] ? schedule+0x298/0x350 [ 397.387769][ T31] ? __pfx_lock_release+0x10/0x10 [ 397.392926][ T31] ? lock_acquire+0x2f/0xb0 [ 397.398060][ T31] ? schedule+0x1fd/0x350 [ 397.402407][ T31] schedule+0xe7/0x350 [ 397.406950][ T31] schedule_timeout+0x244/0x280 [ 397.411795][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 397.417449][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.422698][ T31] __wait_for_common+0x3e1/0x600 [ 397.427817][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 397.433284][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 397.438860][ T31] ? lock_acquire+0x2f/0xb0 [ 397.443386][ T31] ? __flush_work+0x4db/0xcd0 [ 397.448660][ T31] ? __flush_work+0x4db/0xcd0 [ 397.453345][ T31] __flush_work+0x7d8/0xcd0 [ 397.458329][ T31] ? __pfx___flush_work+0x10/0x10 [ 397.463352][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 397.468769][ T31] ? __pfx___might_resched+0x10/0x10 [ 397.474087][ T31] __cancel_work_sync+0x10c/0x130 [ 397.479209][ T31] rfkill_unregister+0x95/0x2c0 [ 397.484078][ T31] nfc_unregister_device+0x94/0x330 [ 397.489436][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 397.495809][ T31] virtual_ncidev_close+0x4b/0xa0 [ 397.500914][ T31] __fput+0x3ff/0xb70 [ 397.505534][ T31] task_work_run+0x14e/0x250 [ 397.510171][ T31] ? __pfx_task_work_run+0x10/0x10 [ 397.515518][ T31] do_exit+0xad8/0x2db0 [ 397.519687][ T31] ? get_signal+0x8f7/0x26c0 [ 397.524283][ T31] ? __pfx_do_exit+0x10/0x10 [ 397.529144][ T31] ? do_raw_spin_lock+0x12d/0x2c0 [ 397.534313][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 397.539937][ T31] do_group_exit+0xd3/0x2a0 [ 397.544455][ T31] get_signal+0x24ed/0x26c0 [ 397.549476][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 397.554695][ T31] ? putname+0x13c/0x180 [ 397.559456][ T31] ? __pfx_get_signal+0x10/0x10 [ 397.564431][ T31] ? find_held_lock+0x2d/0x110 [ 397.569543][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 397.575208][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 397.581378][ T31] ? __might_fault+0xe3/0x190 [ 397.586147][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 397.591810][ T31] do_syscall_64+0xda/0x250 [ 397.596806][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.603316][ T31] RIP: 0033:0x7fcc59d8d169 [ 397.608451][ T31] RSP: 002b:00007fcc5acbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 397.617029][ T31] RAX: 0000000000000005 RBX: 00007fcc59fa5fa0 RCX: 00007fcc59d8d169 [ 397.625081][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 397.633367][ T31] RBP: 00007fcc59e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 397.641474][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.650514][ T31] R13: 0000000000000000 R14: 00007fcc59fa5fa0 R15: 00007ffd89bdf818 [ 397.659003][ T31] [ 397.662121][ T31] INFO: task syz.4.730:8606 blocked for more than 144 seconds. [ 397.670042][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 397.677773][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.686492][ T31] task:syz.4.730 state:D stack:27488 pid:8606 tgid:8605 ppid:5816 task_flags:0x400040 flags:0x00004004 [ 397.698991][ T31] Call Trace: [ 397.702359][ T31] [ 397.705827][ T31] __schedule+0xf43/0x5890 [ 397.710302][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 397.715832][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 397.721082][ T31] ? __pfx___schedule+0x10/0x10 [ 397.726162][ T31] ? schedule+0x298/0x350 [ 397.730501][ T31] ? __pfx_lock_release+0x10/0x10 [ 397.735634][ T31] ? __mutex_trylock_common+0x78/0x250 [ 397.741159][ T31] ? lock_acquire+0x2f/0xb0 [ 397.746769][ T31] ? schedule+0x1fd/0x350 [ 397.751175][ T31] schedule+0xe7/0x350 [ 397.756082][ T31] schedule_preempt_disabled+0x13/0x30 [ 397.761613][ T31] __mutex_lock+0x6bd/0xb10 [ 397.766382][ T31] ? rfkill_fop_open+0x13b/0x750 [ 397.771382][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 397.776546][ T31] ? lockdep_init_map_type+0x16d/0x7d0 [ 397.782040][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 397.787426][ T31] ? rfkill_fop_open+0x13b/0x750 [ 397.792371][ T31] rfkill_fop_open+0x13b/0x750 [ 397.797642][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 397.803276][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 397.809323][ T31] misc_open+0x35a/0x420 [ 397.813934][ T31] ? __pfx_misc_open+0x10/0x10 [ 397.818834][ T31] chrdev_open+0x237/0x6a0 [ 397.823274][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 397.828332][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 397.835246][ T31] do_dentry_open+0x735/0x1c40 [ 397.840022][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 397.845755][ T31] ? inode_permission+0xdd/0x5f0 [ 397.850906][ T31] vfs_open+0x82/0x3f0 [ 397.855567][ T31] ? may_open+0x1f2/0x400 [ 397.859968][ T31] path_openat+0x1e88/0x2d80 [ 397.864564][ T31] ? __pfx_path_openat+0x10/0x10 [ 397.869647][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 397.875073][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 397.880377][ T31] ? find_held_lock+0x2d/0x110 [ 397.885507][ T31] do_filp_open+0x20c/0x470 [ 397.890045][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 397.895726][ T31] ? find_held_lock+0x2d/0x110 [ 397.900601][ T31] ? alloc_fd+0x41f/0x760 [ 397.906016][ T31] do_sys_openat2+0x17a/0x1e0 [ 397.910778][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 397.916140][ T31] ? __pfx_lock_release+0x10/0x10 [ 397.921210][ T31] __x64_sys_openat+0x175/0x210 [ 397.926231][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 397.931660][ T31] ? rcu_read_unlock_trace_special+0x2aa/0x3f0 [ 397.937923][ T31] ? rcu_is_watching+0x12/0xc0 [ 397.942740][ T31] do_syscall_64+0xcd/0x250 [ 397.947719][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.953614][ T31] RIP: 0033:0x7fc70ef8d169 [ 397.958746][ T31] RSP: 002b:00007fc70fe6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 397.967296][ T31] RAX: ffffffffffffffda RBX: 00007fc70f1a5fa0 RCX: 00007fc70ef8d169 [ 397.975385][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 397.983363][ T31] RBP: 00007fc70f00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 397.991537][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.000095][ T31] R13: 0000000000000000 R14: 00007fc70f1a5fa0 R15: 00007fffad58de38 [ 398.008655][ T31] [ 398.011715][ T31] INFO: task syz.3.733:8615 blocked for more than 145 seconds. [ 398.019473][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 398.027150][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.035905][ T31] task:syz.3.733 state:D stack:28416 pid:8615 tgid:8614 ppid:5814 task_flags:0x400140 flags:0x00000004 [ 398.048402][ T31] Call Trace: [ 398.051686][ T31] [ 398.054616][ T31] __schedule+0xf43/0x5890 [ 398.060215][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 398.065726][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 398.071113][ T31] ? __pfx___schedule+0x10/0x10 [ 398.076081][ T31] ? schedule+0x298/0x350 [ 398.080545][ T31] ? __pfx_lock_release+0x10/0x10 [ 398.085653][ T31] ? __mutex_trylock_common+0x78/0x250 [ 398.091243][ T31] ? lock_acquire+0x2f/0xb0 [ 398.097362][ T31] ? schedule+0x1fd/0x350 [ 398.101767][ T31] schedule+0xe7/0x350 [ 398.106411][ T31] schedule_preempt_disabled+0x13/0x30 [ 398.113042][ T31] __mutex_lock+0x6bd/0xb10 [ 398.117804][ T31] ? misc_open+0x63/0x420 [ 398.122189][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 398.128142][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 398.133479][ T31] ? chrdev_open+0x10e/0x6a0 [ 398.138220][ T31] ? __pfx_lock_release+0x10/0x10 [ 398.143251][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 398.149400][ T31] ? __pfx_misc_open+0x10/0x10 [ 398.154174][ T31] ? misc_open+0x63/0x420 [ 398.159022][ T31] misc_open+0x63/0x420 [ 398.163184][ T31] ? __pfx_misc_open+0x10/0x10 [ 398.168080][ T31] chrdev_open+0x237/0x6a0 [ 398.172517][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 398.177619][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 398.184430][ T31] do_dentry_open+0x735/0x1c40 [ 398.189252][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 398.194188][ T31] ? inode_permission+0xdd/0x5f0 [ 398.199641][ T31] vfs_open+0x82/0x3f0 [ 398.203705][ T31] ? may_open+0x1f2/0x400 [ 398.208626][ T31] path_openat+0x1e88/0x2d80 [ 398.213209][ T31] ? __pfx_path_openat+0x10/0x10 [ 398.218302][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 398.223511][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 398.228874][ T31] ? find_held_lock+0x2d/0x110 [ 398.233644][ T31] do_filp_open+0x20c/0x470 [ 398.238238][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 398.243289][ T31] ? find_held_lock+0x2d/0x110 [ 398.248548][ T31] ? alloc_fd+0x41f/0x760 [ 398.252908][ T31] do_sys_openat2+0x17a/0x1e0 [ 398.258369][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.263639][ T31] ? bpf_probe_read_compat_str+0x10e/0x170 [ 398.269606][ T31] ? find_held_lock+0x2d/0x110 [ 398.274385][ T31] __x64_sys_openat+0x175/0x210 [ 398.279346][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 398.284753][ T31] ? rcu_is_watching+0x12/0xc0 [ 398.289604][ T31] do_syscall_64+0xcd/0x250 [ 398.294137][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.300774][ T31] RIP: 0033:0x7efe5a18d169 [ 398.305899][ T31] RSP: 002b:00007efe5b035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.314333][ T31] RAX: ffffffffffffffda RBX: 00007efe5a3a5fa0 RCX: 00007efe5a18d169 [ 398.322637][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 398.330816][ T31] RBP: 00007efe5a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 398.338880][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.347402][ T31] R13: 0000000000000000 R14: 00007efe5a3a5fa0 R15: 00007ffe06712b18 [ 398.356054][ T31] [ 398.359095][ T31] INFO: task syz.3.733:8621 blocked for more than 145 seconds. [ 398.366765][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 398.374519][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.383279][ T31] task:syz.3.733 state:D stack:25824 pid:8621 tgid:8614 ppid:5814 task_flags:0x400040 flags:0x00000004 [ 398.395765][ T31] Call Trace: [ 398.399068][ T31] [ 398.401995][ T31] __schedule+0xf43/0x5890 [ 398.407033][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 398.412270][ T31] ? __pfx___schedule+0x10/0x10 [ 398.417287][ T31] ? schedule+0x298/0x350 [ 398.421632][ T31] ? __pfx_lock_release+0x10/0x10 [ 398.426886][ T31] ? __mutex_trylock_common+0x78/0x250 [ 398.432412][ T31] ? lock_acquire+0x2f/0xb0 [ 398.437073][ T31] ? schedule+0x1fd/0x350 [ 398.441435][ T31] schedule+0xe7/0x350 [ 398.446136][ T31] schedule_preempt_disabled+0x13/0x30 [ 398.451627][ T31] __mutex_lock+0x6bd/0xb10 [ 398.456783][ T31] ? misc_open+0x63/0x420 [ 398.461110][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 398.466294][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 398.471615][ T31] ? chrdev_open+0x10e/0x6a0 [ 398.476284][ T31] ? __pfx_lock_release+0x10/0x10 [ 398.481344][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 398.487054][ T31] ? __pfx_misc_open+0x10/0x10 [ 398.491837][ T31] ? misc_open+0x63/0x420 [ 398.496809][ T31] misc_open+0x63/0x420 [ 398.500970][ T31] ? __pfx_misc_open+0x10/0x10 [ 398.506215][ T31] chrdev_open+0x237/0x6a0 [ 398.510662][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 398.515794][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 398.522612][ T31] do_dentry_open+0x735/0x1c40 [ 398.527484][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 398.532439][ T31] ? inode_permission+0xdd/0x5f0 [ 398.537607][ T31] vfs_open+0x82/0x3f0 [ 398.541698][ T31] ? may_open+0x1f2/0x400 [ 398.546685][ T31] path_openat+0x1e88/0x2d80 [ 398.551305][ T31] ? __pfx_path_openat+0x10/0x10 [ 398.556846][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 398.562067][ T31] ? find_held_lock+0x2d/0x110 [ 398.566972][ T31] do_filp_open+0x20c/0x470 [ 398.571482][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 398.576600][ T31] ? find_held_lock+0x2d/0x110 [ 398.581408][ T31] ? alloc_fd+0x41f/0x760 [ 398.585996][ T31] do_sys_openat2+0x17a/0x1e0 [ 398.590727][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.596439][ T31] ? bpf_probe_read_compat_str+0x10e/0x170 [ 398.602277][ T31] ? find_held_lock+0x2d/0x110 [ 398.607745][ T31] __x64_sys_openat+0x175/0x210 [ 398.612636][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 398.618201][ T31] ? rcu_is_watching+0x12/0xc0 [ 398.622978][ T31] do_syscall_64+0xcd/0x250 [ 398.627590][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.633568][ T31] RIP: 0033:0x7efe5a18bad0 [ 398.638071][ T31] RSP: 002b:00007efe5aff0ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 398.647209][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007efe5a18bad0 [ 398.655886][ T31] RDX: 0000000000000002 RSI: 00007efe5a20df84 RDI: 00000000ffffff9c [ 398.663909][ T31] RBP: 00007efe5a20df84 R08: 0000000000000000 R09: 0000000000000000 [ 398.672033][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 398.680081][ T31] R13: 000000000000002d R14: 0000200000000500 R15: 00007ffe06712b18 [ 398.688416][ T31] [ 398.691535][ T31] INFO: task syz.0.735:8619 blocked for more than 145 seconds. [ 398.699527][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 398.707939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.716948][ T31] task:syz.0.735 state:D stack:28176 pid:8619 tgid:8618 ppid:5824 task_flags:0x400140 flags:0x00000006 [ 398.729097][ T31] Call Trace: [ 398.732382][ T31] [ 398.735375][ T31] __schedule+0xf43/0x5890 [ 398.739811][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 398.745122][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 398.750375][ T31] ? __pfx___schedule+0x10/0x10 [ 398.755343][ T31] ? schedule+0x298/0x350 [ 398.759730][ T31] ? __pfx_lock_release+0x10/0x10 [ 398.764757][ T31] ? __mutex_trylock_common+0x78/0x250 [ 398.770653][ T31] ? lock_acquire+0x2f/0xb0 [ 398.775282][ T31] ? schedule+0x1fd/0x350 [ 398.779627][ T31] schedule+0xe7/0x350 [ 398.783694][ T31] schedule_preempt_disabled+0x13/0x30 [ 398.789221][ T31] __mutex_lock+0x6bd/0xb10 [ 398.793742][ T31] ? misc_open+0x63/0x420 [ 398.798137][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 398.803178][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 398.808654][ T31] ? chrdev_open+0x10e/0x6a0 [ 398.813252][ T31] ? __pfx_lock_release+0x10/0x10 [ 398.818376][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 398.824024][ T31] ? __pfx_misc_open+0x10/0x10 [ 398.828868][ T31] ? misc_open+0x63/0x420 [ 398.833237][ T31] misc_open+0x63/0x420 [ 398.837435][ T31] ? __pfx_misc_open+0x10/0x10 [ 398.842217][ T31] chrdev_open+0x237/0x6a0 [ 398.846852][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 398.851802][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 398.858658][ T31] do_dentry_open+0x735/0x1c40 [ 398.863425][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 398.868464][ T31] ? inode_permission+0xdd/0x5f0 [ 398.873430][ T31] vfs_open+0x82/0x3f0 [ 398.877610][ T31] ? may_open+0x1f2/0x400 [ 398.881956][ T31] path_openat+0x1e88/0x2d80 [ 398.886696][ T31] ? __pfx_path_openat+0x10/0x10 [ 398.891683][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 398.896981][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 398.902293][ T31] ? find_held_lock+0x2d/0x110 [ 398.907156][ T31] do_filp_open+0x20c/0x470 [ 398.911671][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 398.916754][ T31] ? find_held_lock+0x2d/0x110 [ 398.921548][ T31] ? alloc_fd+0x41f/0x760 [ 398.926545][ T31] do_sys_openat2+0x17a/0x1e0 [ 398.931267][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.936666][ T31] ? bpf_probe_read_compat_str+0x10e/0x170 [ 398.942595][ T31] ? find_held_lock+0x2d/0x110 [ 398.947462][ T31] __x64_sys_openat+0x175/0x210 [ 398.952341][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 398.957914][ T31] ? rcu_is_watching+0x12/0xc0 [ 398.962704][ T31] do_syscall_64+0xcd/0x250 [ 398.967388][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.973399][ T31] RIP: 0033:0x7f564418d169 [ 398.977905][ T31] RSP: 002b:00007f5644f0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.986399][ T31] RAX: ffffffffffffffda RBX: 00007f56443a5fa0 RCX: 00007f564418d169 [ 398.994392][ T31] RDX: 0000000000020080 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 399.002422][ T31] RBP: 00007f564420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 399.010633][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.019421][ T31] R13: 0000000000000000 R14: 00007f56443a5fa0 R15: 00007ffe3fc143d8 [ 399.027995][ T31] [ 399.031098][ T31] INFO: task syz.2.737:8630 blocked for more than 146 seconds. [ 399.038806][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 399.047278][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.056306][ T31] task:syz.2.737 state:D stack:27104 pid:8630 tgid:8629 ppid:5825 task_flags:0x400140 flags:0x00000004 [ 399.068763][ T31] Call Trace: [ 399.072039][ T31] [ 399.075612][ T31] __schedule+0xf43/0x5890 [ 399.080057][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 399.086152][ T31] ? __pfx___schedule+0x10/0x10 [ 399.091094][ T31] ? schedule+0x298/0x350 [ 399.095684][ T31] ? __pfx_lock_release+0x10/0x10 [ 399.100754][ T31] ? __mutex_trylock_common+0x78/0x250 [ 399.106373][ T31] ? lock_acquire+0x2f/0xb0 [ 399.110911][ T31] ? schedule+0x1fd/0x350 [ 399.115866][ T31] schedule+0xe7/0x350 [ 399.119952][ T31] schedule_preempt_disabled+0x13/0x30 [ 399.126047][ T31] __mutex_lock+0x6bd/0xb10 [ 399.130863][ T31] ? misc_open+0x63/0x420 [ 399.135420][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 399.140475][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 399.145934][ T31] ? chrdev_open+0x10e/0x6a0 [ 399.150561][ T31] ? __pfx_lock_release+0x10/0x10 [ 399.155688][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 399.161343][ T31] ? __pfx_misc_open+0x10/0x10 [ 399.167169][ T31] ? misc_open+0x63/0x420 [ 399.171545][ T31] misc_open+0x63/0x420 [ 399.176404][ T31] ? __pfx_misc_open+0x10/0x10 [ 399.181186][ T31] chrdev_open+0x237/0x6a0 [ 399.185753][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 399.190696][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 399.197798][ T31] do_dentry_open+0x735/0x1c40 [ 399.202589][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 399.207602][ T31] ? inode_permission+0xdd/0x5f0 [ 399.212555][ T31] vfs_open+0x82/0x3f0 [ 399.217411][ T31] ? may_open+0x1f2/0x400 [ 399.221798][ T31] path_openat+0x1e88/0x2d80 [ 399.226956][ T31] ? __pfx_path_openat+0x10/0x10 [ 399.231906][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 399.237262][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 399.242580][ T31] ? find_held_lock+0x2d/0x110 [ 399.247416][ T31] do_filp_open+0x20c/0x470 [ 399.251923][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 399.257046][ T31] ? find_held_lock+0x2d/0x110 [ 399.261855][ T31] ? alloc_fd+0x41f/0x760 [ 399.266812][ T31] do_sys_openat2+0x17a/0x1e0 [ 399.271502][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.277600][ T31] ? bpf_probe_read_compat_str+0x10e/0x170 [ 399.283444][ T31] ? find_held_lock+0x2d/0x110 [ 399.288336][ T31] __x64_sys_openat+0x175/0x210 [ 399.293228][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 399.298696][ T31] ? rcu_is_watching+0x12/0xc0 [ 399.303465][ T31] do_syscall_64+0xcd/0x250 [ 399.308160][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.314053][ T31] RIP: 0033:0x7f640358d169 [ 399.319146][ T31] RSP: 002b:00007f6404412038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 399.328247][ T31] RAX: ffffffffffffffda RBX: 00007f64037a5fa0 RCX: 00007f640358d169 [ 399.336391][ T31] RDX: 0000000000000002 RSI: 00002000000015c0 RDI: ffffffffffffff9c [ 399.344375][ T31] RBP: 00007f640360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 399.352464][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.360621][ T31] R13: 0000000000000000 R14: 00007f64037a5fa0 R15: 00007fff8bcacd58 [ 399.369246][ T31] [ 399.372281][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 399.381870][ T31] INFO: task syz-executor:8634 blocked for more than 146 seconds. [ 399.390357][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 399.398411][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.407132][ T31] task:syz-executor state:D stack:28416 pid:8634 tgid:8634 ppid:1 task_flags:0x400040 flags:0x00000000 [ 399.419583][ T31] Call Trace: [ 399.422863][ T31] [ 399.426390][ T31] __schedule+0xf43/0x5890 [ 399.430840][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 399.436222][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 399.441471][ T31] ? __pfx___schedule+0x10/0x10 [ 399.446403][ T31] ? schedule+0x298/0x350 [ 399.450736][ T31] ? __pfx_lock_release+0x10/0x10 [ 399.455852][ T31] ? __mutex_trylock_common+0x78/0x250 [ 399.461319][ T31] ? lock_acquire+0x2f/0xb0 [ 399.466451][ T31] ? schedule+0x1fd/0x350 [ 399.470815][ T31] schedule+0xe7/0x350 [ 399.475748][ T31] schedule_preempt_disabled+0x13/0x30 [ 399.481243][ T31] __mutex_lock+0x6bd/0xb10 [ 399.485913][ T31] ? misc_open+0x63/0x420 [ 399.490333][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 399.495451][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 399.500758][ T31] ? chrdev_open+0x10e/0x6a0 [ 399.505413][ T31] ? __pfx_lock_release+0x10/0x10 [ 399.510461][ T31] ? kobject_get_unless_zero+0x157/0x1e0 [ 399.516813][ T31] ? __pfx_misc_open+0x10/0x10 [ 399.521606][ T31] ? misc_open+0x63/0x420 [ 399.526678][ T31] misc_open+0x63/0x420 [ 399.530848][ T31] ? __pfx_misc_open+0x10/0x10 [ 399.535755][ T31] chrdev_open+0x237/0x6a0 [ 399.540178][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 399.545196][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 399.552035][ T31] do_dentry_open+0x735/0x1c40 [ 399.556962][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 399.561937][ T31] ? inode_permission+0xdd/0x5f0 [ 399.567567][ T31] vfs_open+0x82/0x3f0 [ 399.571674][ T31] ? may_open+0x1f2/0x400 [ 399.577024][ T31] path_openat+0x1e88/0x2d80 [ 399.581685][ T31] ? __pfx_path_openat+0x10/0x10 [ 399.587035][ T31] ? handle_mm_fault+0x497/0xaa0 [ 399.592017][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 399.597370][ T31] do_filp_open+0x20c/0x470 [ 399.601925][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 399.607085][ T31] ? find_held_lock+0x2d/0x110 [ 399.611929][ T31] ? alloc_fd+0x41f/0x760 [ 399.616903][ T31] do_sys_openat2+0x17a/0x1e0 [ 399.621619][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.627471][ T31] ? bpf_probe_read_compat_str+0x10e/0x170 [ 399.633303][ T31] ? find_held_lock+0x2d/0x110 [ 399.638341][ T31] __x64_sys_openat+0x175/0x210 [ 399.643207][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 399.648685][ T31] ? rcu_is_watching+0x12/0xc0 [ 399.653495][ T31] do_syscall_64+0xcd/0x250 [ 399.658099][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.664024][ T31] RIP: 0033:0x7fd07e78ba51 [ 399.668964][ T31] RSP: 002b:00007ffd18103db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 399.678167][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd07e78ba51 [ 399.686299][ T31] RDX: 0000000000000002 RSI: 00007fd07e80ec76 RDI: 00000000ffffff9c [ 399.694282][ T31] RBP: 00007fd07e80ec76 R08: 0000000000000000 R09: 00007fd07f4dd6c0 [ 399.702352][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 399.710421][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 399.718917][ T31] [ 399.721933][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 399.734477][ T31] [ 399.734477][ T31] Showing all locks held in the system: [ 399.742464][ T31] 1 lock held by khungtaskd/31: [ 399.747470][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 399.757540][ T31] 1 lock held by syslogd/5174: [ 399.762324][ T31] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 399.772903][ T31] 2 locks held by getty/5576: [ 399.777980][ T31] #0: ffff88803279d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 399.788000][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 399.798242][ T31] 1 lock held by syz-executor/5815: [ 399.803437][ T31] #0: ffffffff9039c068 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 399.813770][ T31] 4 locks held by udevd/5821: [ 399.819238][ T31] #0: ffff88807dd122f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 399.828654][ T31] #1: ffff8880299c2c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 399.838205][ T31] #2: ffff88801248e008 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 399.847753][ T31] #3: ffff88807fc0f100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x188/0x3b0 [ 399.856894][ T31] 4 locks held by kworker/0:3/5867: [ 399.862112][ T31] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 399.873552][ T31] #1: ffffc9000428fd18 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 399.885839][ T31] #2: ffffffff9039c068 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 399.895895][ T31] #3: ffff88807fc0f100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 399.904993][ T31] 3 locks held by kworker/0:5/5874: [ 399.910188][ T31] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 399.920700][ T31] #1: ffffc900042efd18 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 399.934124][ T31] #2: ffffffff9039c068 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 399.946043][ T31] 1 lock held by syz.2.36/6070: [ 399.950883][ T31] #0: ffffffff9039c068 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 399.961133][ T31] 1 lock held by syz.1.700/8490: [ 399.966346][ T31] #0: ffff88807fc0f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 399.976460][ T31] 2 locks held by syz.4.730/8606: [ 399.981499][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 399.990475][ T31] #1: ffffffff9039c068 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x13b/0x750 [ 400.001035][ T31] 1 lock held by syz.3.733/8615: [ 400.006098][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.014573][ T31] 1 lock held by syz.3.733/8621: [ 400.019590][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.028173][ T31] 1 lock held by syz.0.735/8619: [ 400.033132][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.042110][ T31] 1 lock held by syz.2.737/8630: [ 400.048251][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.056970][ T31] 1 lock held by syz-executor/8634: [ 400.062450][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.071034][ T31] 1 lock held by syz-executor/8636: [ 400.076312][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.085564][ T31] 1 lock held by syz-executor/8639: [ 400.090774][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.099707][ T31] 1 lock held by syz-executor/8640: [ 400.105014][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.113483][ T31] 1 lock held by syz-executor/8642: [ 400.118838][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.127635][ T31] 1 lock held by syz-executor/8644: [ 400.132825][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.141929][ T31] 1 lock held by syz-executor/8646: [ 400.147857][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.156448][ T31] 1 lock held by syz-executor/8649: [ 400.161645][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.170231][ T31] 1 lock held by syz-executor/8650: [ 400.175542][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.184037][ T31] 1 lock held by syz-executor/8652: [ 400.189737][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.198980][ T31] 1 lock held by syz-executor/8658: [ 400.204175][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.213150][ T31] 1 lock held by syz-executor/8660: [ 400.218430][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.226996][ T31] 1 lock held by syz-executor/8663: [ 400.232204][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.241172][ T31] 1 lock held by syz-executor/8664: [ 400.246803][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.255405][ T31] 1 lock held by syz-executor/8666: [ 400.261224][ T31] #0: ffffffff8eec3c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 400.269808][ T31] [ 400.272136][ T31] ============================================= [ 400.272136][ T31] [ 400.280673][ T31] NMI backtrace for cpu 0 [ 400.280682][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 400.280700][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.280710][ T31] Call Trace: [ 400.280715][ T31] [ 400.280721][ T31] dump_stack_lvl+0x116/0x1f0 [ 400.280752][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 400.280772][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.280797][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 400.280819][ T31] watchdog+0xf62/0x12b0 [ 400.280849][ T31] ? __pfx_watchdog+0x10/0x10 [ 400.280873][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 400.280897][ T31] ? __kthread_parkme+0x148/0x220 [ 400.280918][ T31] ? __pfx_watchdog+0x10/0x10 [ 400.280943][ T31] kthread+0x3af/0x750 [ 400.280964][ T31] ? __pfx_kthread+0x10/0x10 [ 400.280987][ T31] ? __pfx_kthread+0x10/0x10 [ 400.281008][ T31] ret_from_fork+0x45/0x80 [ 400.281031][ T31] ? __pfx_kthread+0x10/0x10 [ 400.281051][ T31] ret_from_fork_asm+0x1a/0x30 [ 400.281082][ T31] [ 400.281088][ T31] Sending NMI from CPU 0 to CPUs 1: [ 400.396166][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 400.397447][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 400.412469][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 400.423024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.433079][ T31] Call Trace: [ 400.436344][ T31] [ 400.439264][ T31] dump_stack_lvl+0x3d/0x1f0 [ 400.443883][ T31] panic+0x71d/0x800 [ 400.447805][ T31] ? __pfx_panic+0x10/0x10 [ 400.452244][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 400.457628][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.463615][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 400.469027][ T31] ? watchdog+0xdcc/0x12b0 [ 400.473452][ T31] ? watchdog+0xdbf/0x12b0 [ 400.477891][ T31] watchdog+0xddd/0x12b0 [ 400.482135][ T31] ? __pfx_watchdog+0x10/0x10 [ 400.486806][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 400.492051][ T31] ? __kthread_parkme+0x148/0x220 [ 400.497088][ T31] ? __pfx_watchdog+0x10/0x10 [ 400.501807][ T31] kthread+0x3af/0x750 [ 400.505893][ T31] ? __pfx_kthread+0x10/0x10 [ 400.510479][ T31] ? __pfx_kthread+0x10/0x10 [ 400.515062][ T31] ret_from_fork+0x45/0x80 [ 400.519478][ T31] ? __pfx_kthread+0x10/0x10 [ 400.524073][ T31] ret_from_fork_asm+0x1a/0x30 [ 400.528840][ T31] [ 400.532078][ T31] Kernel Offset: disabled [ 400.536386][ T31] Rebooting in 86400 seconds..