last executing test programs: 18.223635813s ago: executing program 0 (id=2570): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000010a0fd20422cf816e3ba0102030109021200010000000009043aff000000b551d200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000000)={0x40, 0x11, 0x100, {0x100, 0x1f, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x89, @string={0x89, 0x3, "af61899cef1f8340af35e8bee9ca4ca7e036377eb2fb1dd2ce878d159bf8cbd2c5135d3c621d4b1b16337f035f5d825c23ce5a12e1290cf8b9783ee7c9cb93e105d92365519400911908252d071b3bc968dc8bb2060893e1302b7c2960bc9e55d301ef7d083592bbdb7a8226cec725010abb4ec2d0637550dff487a73e2c55205e894aa907d723"}}, &(0x7f0000000200)={0x0, 0x22, 0x13, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x2, 0x0, 0x9, 'vb'}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xa, "288cb48b"}, @local=@item_012={0x2, 0x2, 0x1, "df3e"}, @local=@item_4={0x3, 0x2, 0x5, "0da471ae"}, @local]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x874}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x10, 0x93, "5708e9e959c0e66ccb869709e663a2fcdef7cf2d8d08a5144b8100bbddf7e355c9d29810be3b85a24082dd2024f38786e3cdea056f92a355cec50ea5d28cfb27bcc6301261ffefa5035f3dcf2d85f4086cbbdc6ca08a4c040014c00c792ee079332909e8bdd161b43ab2cb1f38577b78b8da1463e86cd2a53a3211d44b998e9a7be6401ad4aa780c112e2d6d1efc29990438bc"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x70}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x20, 0x3, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'sit0\x00'}) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 14.528768607s ago: executing program 0 (id=2585): r0 = creat(0x0, 0x0) close(r0) socket$can_j1939(0x1d, 0x2, 0x7) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 13.655210873s ago: executing program 0 (id=2587): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) r0 = socket(0x1e, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) close(r0) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) personality(0x400000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc66b, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 11.928650727s ago: executing program 0 (id=2592): getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x20008060) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r1, 0x20, &(0x7f0000001440)={0x0, 0x0, 0x0, &(0x7f00000018c0)=""/249, 0xf9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0x12200000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.522648078s ago: executing program 0 (id=2595): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x535da82a9ffc4e5f, [], [], [], [0x0, 0x20000000000000, 0x9]}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)=@multiplanar_overlay={0x5, 0x0, 0x4, 0x0, 0x4, {}, {0x2, 0x1, 0x5, 0x5, 0x8, 0xd, "dfac2182"}, 0x4, 0x3, {&(0x7f0000000680)=[{0x0, 0x0, {0x8ac}, 0x80001}, {0x6, 0x3ff, {0x8}, 0xd}]}, 0x8}) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2, 0x10}}, 0x12) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000080)) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f00000003c0)={0x300, 0x8, 0x80, '\x00', &(0x7f0000000140)=0xda}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) mprotect(&(0x7f00005fc000/0x3000)=nil, 0x3000, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e0000002080002"], 0x4c}}, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff96}, 0x20080005) r7 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f0000000400)=""/239, 0xef}], 0x3) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) 10.292035974s ago: executing program 4 (id=2597): r0 = creat(0x0, 0x0) close(r0) socket$can_j1939(0x1d, 0x2, 0x7) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 9.508673346s ago: executing program 4 (id=2598): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x1c, r2, 0x701, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4001, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000a0000000000000000000000000000009000000000009a8e526c6c47d5fe6544986b578ed242f297454eae967f1a7fc53a0a3cf85a97c95ac1fa643465287344512f721da2a5526c744a5b9021e954100b16f82b2b1a3689df680186270c56e4bb42aef9a35368fb9c7e7dc0ed6f336a5b8d64172a293f4a5033691c369b629f5342c4814fb432830200d867b3cb749a3860"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) r10 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0x7005, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 8.571148844s ago: executing program 1 (id=2600): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/14, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 7.557604196s ago: executing program 4 (id=2603): getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x20008060) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r1, 0x20, &(0x7f0000001440)={0x0, 0x0, 0x0, &(0x7f00000018c0)=""/249, 0xf9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0x12200000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.204364043s ago: executing program 2 (id=2604): getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x20008060) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r1, 0x20, &(0x7f0000001440)={0x0, 0x0, 0x0, &(0x7f00000018c0)=""/249, 0xf9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0x12200000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.4188641s ago: executing program 2 (id=2605): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x5c, 0x2) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) 5.417274781s ago: executing program 4 (id=2606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffff5, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndpcmc(&(0x7f0000002600), 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000440)=""/23) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000bd00020000800900030073797a32000000000900010073797a3000000000"], 0x2c}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012dbd7000fbdbbe25020000000900010073797a30000000000900030073797a320000000014000200626f6e643000000000000000000000001400020073797a6bd9986c6572300000000000000900030073797a30000000000900030073797a30000000000900030073797a3200000000"], 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x20004000) ioctl$SNDRV_PCM_IOCTL_RESUME(r5, 0xc0844123, 0x20000000) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0)={0x0, 0x2804, 0x400}, &(0x7f00000000c0), &(0x7f000000aa80)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b40000000000019078ac1e0001ac1414aa0300907803240000450000000000000000010000ac1414aaac141400867100000000000ce2ffb28c599d1681fb520009020b1736b38f35000e7434954373561de584b71ac80009e706d30bd224f80007cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001224001100000000000000000000000000000cc8f4b8e8823408918475860c0000000000067f36c525000000d6aa7a51"], 0x0) io_uring_register$IORING_REGISTER_FILES2(r8, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) 5.279627474s ago: executing program 3 (id=2607): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x535da82a9ffc4e5f, [], [], [], [0x0, 0x20000000000000, 0x9]}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)=@multiplanar_overlay={0x5, 0x0, 0x4, 0x0, 0x4, {}, {0x2, 0x1, 0x5, 0x5, 0x8, 0xd, "dfac2182"}, 0x4, 0x3, {&(0x7f0000000680)=[{0x0, 0x0, {0x8ac}, 0x80001}, {0x6, 0x3ff, {0x8}, 0xd}]}, 0x8}) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2, 0x10}}, 0x12) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000080)) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f00000003c0)={0x300, 0x8, 0x80, '\x00', &(0x7f0000000140)=0xda}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) mprotect(&(0x7f00005fc000/0x3000)=nil, 0x3000, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e0000002080002"], 0x4c}}, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff96}, 0x20080005) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) 4.642196896s ago: executing program 2 (id=2608): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x40400) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x5c, 0x2) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) 4.64035507s ago: executing program 1 (id=2609): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCFLSH(r0, 0x8924, 0x20000000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x21b, 0x0) ioctl$EVIOCGMASK(r1, 0x541b, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x9, [0x8, 0x3, 0x2, 0x4, 0x2, 0x9]}) 4.250110147s ago: executing program 4 (id=2610): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) statx(r2, 0x0, 0x1000, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x2a000, 0x0) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.82060925s ago: executing program 3 (id=2611): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) mkdir(0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0ab17dfd1fbfa6955b751ed697ff263589987f3de711efae8e2342b2846c1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab43a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c88dac48e0bbb2af55a35efca697fe5435b19f827cf2d9337109", 0xdd}, {&(0x7f0000000200)="a9e47d4ed965685b48214fff756364b93155b267f07697b50eede60445f9730400857dba0deed519dc9a7267b99f19a1b405e7d2", 0x34}, {&(0x7f0000000600)}], 0x3) 3.78099534s ago: executing program 2 (id=2612): socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) 3.680004689s ago: executing program 2 (id=2613): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000009000000010000000101000000000000", @ANYRES32, @ANYBLOB="b60300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000eeffffffffffffff00000000"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = io_uring_setup(0x177f, &(0x7f0000000140)) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x0, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x2, 0x1, [0x6], 0x10}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0xb92, 0xe5, "ccb18189da"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x10, "2a770661a2e6"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x5, '\f'}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x5, 0x6, [0x8, 0xa, 0x2, 0x3, 0x0, 0x1], 0x81}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x2, "a17ca21f3125"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xf40d0d88cf38a5e6, 0xb3, 0x61, 0x1, {0x7, 0x25, 0x1, 0x0, 0xed, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x3, 0x1, 0x4, "", "2408a0"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1000, 0x5, 0xe0, "af"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0x48, 0x3, '^', "e261"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xcc, 0x0, 0x5c, {0x7, 0x25, 0x1, 0x2, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xfe, 0x7, 0x95, 0x20, 0x3}, 0x3a, &(0x7f0000000340)={0x5, 0xf, 0x3a, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0xa, 0x800}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0x1, 0x21fb}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "89897637d3af697c6c9fa141c0ad7962"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x52, 0xa}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}]}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000400)={0x0, 0xfb, 0x3d4, 0x2, 0x8, "de47b8ff9d6748d0cfe067ceecce19a1", "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"}, 0x3d4, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'tunl0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f00000005c0)={&(0x7f0000000480)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x76, 0x1, 0x0, 0x0, "fbb336cc95f2b4412d2ff54edc140e9168804e57e3ca2a3c4c5ed1dd0d76d9fda5d7cf0353fd3ebc7621a858cdf238c6f37bb74ae21922b1a092f7a7feea6a58"}, 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x4305, r10, 0x1, 0x0, 0x6, @remote}, 0x14) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r11, 0x40046208, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x44080) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="881400001200000028bd700047194cc009be05034e214e220100000044000000090000008e53000007000000018000000700000009000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1488}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 3.611110388s ago: executing program 4 (id=2614): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x3}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="07817be51d30"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0xffbd2bcf140de4fb}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x170, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) r4 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000080)=0xffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.49256731s ago: executing program 1 (id=2615): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) statx(r2, 0x0, 0x1000, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) r3 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) mq_getsetattr(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.021769791s ago: executing program 1 (id=2616): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600), 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.532896498s ago: executing program 3 (id=2617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) dup(0xffffffffffffffff) 1.606387276s ago: executing program 3 (id=2618): socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) 1.35832418s ago: executing program 3 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='./file0\x00', 0xd02) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (fail_nth: 2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 1.312159149s ago: executing program 1 (id=2620): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000ffffffeefeff0eff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff000000003509080089ffffff7baaf0ff00000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001828", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000001f00"/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000080), 0xfffffe13) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0xc5b, 0x5, 0x6, 0xe412, 0xffffffffffffffff, 0x95d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4d, 0x51, &(0x7f0000000380)=""/81, 0x100, 0x0, '\x00', r3, @fallback=0x2d, r2, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, &(0x7f00000004c0)=[r6, r7, r8], 0x0, 0x10, 0x80000000, @void, @value}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) 424.468856ms ago: executing program 3 (id=2621): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x3, 0xffff, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x1, 0x1, 0xb, 0x4}, {0x0, 0x1, 0x8, 0x3}, {0x4, 0x5, 0x8, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) preadv(r9, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) 83.983122ms ago: executing program 0 (id=2622): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/14, @ANYRES16], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 14.285231ms ago: executing program 2 (id=2623): syz_clone3(&(0x7f0000000040)={0x200126000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r3, 0x401) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ustat(0xfffffffeffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @union]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0xd511}}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ecffffffffffffff000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000000080002400000000208000640000000020900010073797a30000000000900020073797a32"], 0x94}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfc51}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) socket$can_j1939(0x1d, 0x2, 0x7) 0s ago: executing program 1 (id=2624): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x800, 0x0, 0x103, 0x1, 0xf7b2}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="9800000000000000290000000b000000000f0092de3417f3c2758a70650000000000074800000000100108000500000000000000000000000000009a9fffffffffffff01000000000000006f000049231719e85100000000000500000000000000ff070000000000005700000000000000c910000000000000000000000000000000010720000000220600"/150], 0x98}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x88101) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) kernel console output (not intermixed with test programs): scriptor's value: 3 [ 686.231334][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.240618][ T5873] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.248785][ T5873] usb 5-1: Manufacturer: syz [ 686.262554][ T5873] usb 5-1: config 0 descriptor?? [ 687.833334][ T5873] rc_core: IR keymap rc-hauppauge not found [ 687.839283][ T5873] Registered IR keymap rc-empty [ 687.848584][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.895728][ T29] audit: type=1400 audit(1733099863.940:1759): avc: denied { write } for pid=13301 comm="syz.4.2147" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 687.963241][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.998270][T13309] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2148'. [ 688.010946][T13310] FAULT_INJECTION: forcing a failure. [ 688.010946][T13310] name failslab, interval 1, probability 0, space 0, times 1 [ 688.066072][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 688.079457][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 688.127092][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.144910][T13310] CPU: 1 UID: 0 PID: 13310 Comm: syz.0.2145 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 688.155369][T13310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 688.165436][T13310] Call Trace: [ 688.168697][T13310] [ 688.171624][T13310] dump_stack_lvl+0x16c/0x1f0 [ 688.176297][T13310] should_fail_ex+0x497/0x5b0 [ 688.180971][T13310] ? fs_reclaim_acquire+0xae/0x150 [ 688.186071][T13310] should_failslab+0xc2/0x120 [ 688.190729][T13310] __kmalloc_noprof+0xcb/0x510 [ 688.195477][T13310] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 688.201091][T13310] tomoyo_realpath_from_path+0xb9/0x720 [ 688.206641][T13310] ? tomoyo_path_number_perm+0x235/0x590 [ 688.212299][T13310] ? tomoyo_path_number_perm+0x235/0x590 [ 688.217965][T13310] tomoyo_path_number_perm+0x248/0x590 [ 688.223446][T13310] ? tomoyo_path_number_perm+0x235/0x590 [ 688.229098][T13310] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 688.235120][T13310] ? __pfx_lock_release+0x10/0x10 [ 688.240160][T13310] ? trace_lock_acquire+0x14e/0x1f0 [ 688.245380][T13310] ? lock_acquire+0x2f/0xb0 [ 688.249896][T13310] ? __fget_files+0x40/0x3a0 [ 688.254512][T13310] ? __fget_files+0x206/0x3a0 [ 688.259206][T13310] security_file_ioctl+0x9b/0x240 [ 688.264257][T13310] __x64_sys_ioctl+0xb7/0x200 [ 688.268955][T13310] do_syscall_64+0xcd/0x250 [ 688.273478][T13310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.279395][T13310] RIP: 0033:0x7f3d87180849 [ 688.283822][T13310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.303449][T13310] RSP: 002b:00007f3d87f72058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.311871][T13310] RAX: ffffffffffffffda RBX: 00007f3d87346160 RCX: 00007f3d87180849 [ 688.319834][T13310] RDX: 0000000020000040 RSI: 00000000c05c5340 RDI: 0000000000000003 [ 688.327785][T13310] RBP: 00007f3d87f720a0 R08: 0000000000000000 R09: 0000000000000000 [ 688.335750][T13310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.343720][T13310] R13: 0000000000000001 R14: 00007f3d87346160 R15: 00007ffd91377d18 [ 688.351684][T13310] [ 688.364053][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.405275][T13316] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 688.424113][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.428831][T13310] ERROR: Out of memory at tomoyo_realpath_from_path. [ 688.443176][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.463194][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.483137][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.503214][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.523556][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.581717][ T29] audit: type=1400 audit(1733099864.580:1760): avc: denied { mount } for pid=13315 comm="syz.4.2149" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 688.643563][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.663517][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.959050][ T5873] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 689.000511][ T5873] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 689.063508][ T5873] usb 5-1: USB disconnect, device number 14 [ 689.136571][T13321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2150'. [ 689.703236][ T5873] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 689.795386][ T29] audit: type=1400 audit(1733099865.810:1761): avc: denied { getopt } for pid=13343 comm="syz.1.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 689.888309][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.888376][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.905183][ T5873] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 689.905255][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 689.905317][ T5873] usb 5-1: SerialNumber: syz [ 690.233539][ T5873] usb 5-1: 0:2 : does not exist [ 690.289166][ T5873] usb 5-1: USB disconnect, device number 15 [ 690.653328][ T973] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 690.755717][T13166] udevd[13166]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.818747][ T973] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.853214][ T5900] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 690.869110][ T973] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.889338][ T973] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 690.918003][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.964175][ T973] usb 2-1: config 0 descriptor?? [ 691.030789][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 691.053606][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.084171][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.145043][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.172533][ T5900] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 691.206821][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.249277][ T5900] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 691.268970][ T5900] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 691.319535][ T5900] usb 3-1: Manufacturer: syz [ 691.344973][ T5900] usb 3-1: config 0 descriptor?? [ 691.427940][ T973] wacom 0003:056A:0003.0010: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 691.442762][ T973] wacom 0003:056A:0003.0010: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 691.470261][ T973] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0010/input/input20 [ 691.653175][ T5900] rc_core: IR keymap rc-hauppauge not found [ 691.659115][ T5900] Registered IR keymap rc-empty [ 691.768982][T13361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.783317][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.825206][T13361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.834548][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.873847][ T5900] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 691.958298][ T5900] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 692.043773][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.081538][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.137184][ T973] usb 2-1: USB disconnect, device number 21 [ 692.186913][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.255710][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.308813][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.343368][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.693213][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.716773][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.755704][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.773305][ T5900] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 692.794111][ T5900] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 692.847819][ T5900] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 692.895975][ T5900] usb 3-1: USB disconnect, device number 22 [ 692.924423][T13386] trusted_key: encrypted_key: insufficient parameters specified [ 693.005146][T13386] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 693.325285][ T29] audit: type=1400 audit(1733099869.390:1763): avc: denied { create } for pid=13391 comm="syz.4.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 693.406694][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'. [ 693.953509][ T29] audit: type=1400 audit(1733099869.390:1762): avc: denied { map } for pid=13389 comm="syz.2.2161" path="socket:[35408]" dev="sockfs" ino=35408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 693.978208][ T29] audit: type=1400 audit(1733099870.000:1765): avc: denied { accept } for pid=13389 comm="syz.2.2161" path="socket:[35408]" dev="sockfs" ino=35408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 694.047244][ T29] audit: type=1400 audit(1733099870.000:1764): avc: denied { connect } for pid=13391 comm="syz.4.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 694.097274][T13392] input: syz0 as /devices/virtual/input/input24 [ 694.653700][ T5900] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 694.710369][ T29] audit: type=1400 audit(1733099870.770:1766): avc: denied { ioctl } for pid=13413 comm="syz.0.2167" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 695.523209][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 695.810198][ T29] audit: type=1326 audit(1733099871.510:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.0.2168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d87180849 code=0x0 [ 695.949953][ T5900] usb 3-1: config 1 has an invalid interface number: 6 but max is 0 [ 695.969223][ T5900] usb 3-1: config 1 has no interface number 0 [ 695.976782][T13418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2165'. [ 696.006811][ T5900] usb 3-1: string descriptor 0 read error: -71 [ 696.014650][ T5900] usb 3-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 696.025421][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.071308][ T5900] usb 3-1: can't set config #1, error -71 [ 696.119784][ T5900] usb 3-1: USB disconnect, device number 23 [ 696.975862][ T29] audit: type=1400 audit(1733099872.790:1768): avc: denied { setopt } for pid=13432 comm="syz.4.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 697.353264][ T5876] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 697.393129][ T51] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 697.399111][ T29] audit: type=1400 audit(1733099873.460:1769): avc: denied { write } for pid=13440 comm="syz.4.2174" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 697.513230][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 697.528982][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.543104][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 697.546700][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.549863][ T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.560080][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 697.604267][ T51] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 697.608924][ T5876] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 697.630938][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.647801][ T5876] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 697.657002][ T5876] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 697.677738][ T51] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.677764][ T5876] usb 1-1: Manufacturer: syz [ 697.679721][ T5876] usb 1-1: config 0 descriptor?? [ 697.700411][ T973] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 697.729433][ T51] usb 2-1: config 1 interface 0 has no altsetting 0 [ 697.756481][ T51] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.766590][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.797700][ T51] usb 2-1: Product: syz [ 697.808066][ T51] usb 2-1: Manufacturer: syz [ 697.812665][ T51] usb 2-1: SerialNumber: syz [ 697.852639][ T51] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 697.878594][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 697.906984][ T51] cdc_ncm 2-1:1.1: bind() failure [ 697.910316][ T973] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 697.933299][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.950904][ T973] usb 5-1: Product: syz [ 697.958106][ T973] usb 5-1: Manufacturer: syz [ 697.967048][ T973] usb 5-1: SerialNumber: syz [ 697.992135][ T973] usb 5-1: config 0 descriptor?? [ 698.023357][ T973] as10x_usb: device has been detected [ 698.037180][ T973] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 698.046142][ T5876] rc_core: IR keymap rc-hauppauge not found [ 698.052116][ T5876] Registered IR keymap rc-empty [ 698.057135][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.084172][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.103102][ T973] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 698.133746][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 698.148244][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.163826][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.175555][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 698.200530][ T973] as10x_usb: error during firmware upload part1 [ 698.229531][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.240529][ T973] Registered device Sky IT Digital Key (green led) [ 698.262887][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.289871][ T973] usb 5-1: USB disconnect, device number 16 [ 698.320031][ T973] Unregistered device Sky IT Digital Key (green led) [ 698.321974][ T973] as10x_usb: device has been disconnected [ 698.343860][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.373668][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.384991][ T29] audit: type=1400 audit(1733099874.440:1770): avc: denied { write } for pid=13447 comm="syz.3.2176" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 698.407759][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.414518][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.443224][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.457150][ T5900] usb 2-1: USB disconnect, device number 22 [ 698.473486][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.498345][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.526145][T13455] binder: 13454:13455 ioctl 4018620d 0 returned -22 [ 698.549827][T13455] syz.1.2178 (13455): drop_caches: 2 [ 698.553121][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.583821][ T5876] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.609070][ T5876] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 698.662283][ T5876] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 698.714187][ T5876] usb 1-1: USB disconnect, device number 23 [ 698.860218][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2177'. [ 699.928974][T13477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13477 comm=syz.4.2180 [ 700.081300][T13482] FAULT_INJECTION: forcing a failure. [ 700.081300][T13482] name failslab, interval 1, probability 0, space 0, times 0 [ 700.104341][T13482] CPU: 1 UID: 0 PID: 13482 Comm: syz.0.2183 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 700.114795][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 700.124862][T13482] Call Trace: [ 700.128150][T13482] [ 700.131086][T13482] dump_stack_lvl+0x16c/0x1f0 [ 700.135826][T13482] should_fail_ex+0x497/0x5b0 [ 700.140531][T13482] ? fs_reclaim_acquire+0xae/0x150 [ 700.145665][T13482] should_failslab+0xc2/0x120 [ 700.150335][T13482] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 700.156136][T13482] ? __alloc_skb+0x2b1/0x380 [ 700.160720][T13482] __alloc_skb+0x2b1/0x380 [ 700.165131][T13482] ? __pfx___alloc_skb+0x10/0x10 [ 700.170055][T13482] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 700.176028][T13482] netlink_alloc_large_skb+0x69/0x130 [ 700.181392][T13482] netlink_sendmsg+0x689/0xd70 [ 700.186141][T13482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.191415][T13482] ____sys_sendmsg+0xaaf/0xc90 [ 700.196164][T13482] ? copy_msghdr_from_user+0x10b/0x160 [ 700.201629][T13482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.206907][T13482] ___sys_sendmsg+0x135/0x1e0 [ 700.211575][T13482] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.216788][T13482] ? __pfx_lock_release+0x10/0x10 [ 700.221796][T13482] ? trace_lock_acquire+0x14e/0x1f0 [ 700.226984][T13482] ? __fget_files+0x206/0x3a0 [ 700.231660][T13482] __sys_sendmsg+0x16e/0x220 [ 700.236256][T13482] ? __pfx___sys_sendmsg+0x10/0x10 [ 700.241367][T13482] do_syscall_64+0xcd/0x250 [ 700.245880][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.251766][T13482] RIP: 0033:0x7f3d87180849 [ 700.256189][T13482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.275792][T13482] RSP: 002b:00007f3d87fb4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.284198][T13482] RAX: ffffffffffffffda RBX: 00007f3d87345fa0 RCX: 00007f3d87180849 [ 700.292177][T13482] RDX: 0000000020000000 RSI: 0000000020000a80 RDI: 0000000000000006 [ 700.300160][T13482] RBP: 00007f3d87fb40a0 R08: 0000000000000000 R09: 0000000000000000 [ 700.308132][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.316142][T13482] R13: 0000000000000000 R14: 00007f3d87345fa0 R15: 00007ffd91377d18 [ 700.324127][T13482] [ 700.923267][ T51] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 701.107905][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 701.120886][ T51] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 701.160096][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.249019][ T51] usb 1-1: config 0 descriptor?? [ 701.261077][T13491] infiniband syz0: set active [ 701.268979][T13491] infiniband syz0: added bond0 [ 701.354812][ T51] smsusb:smsusb_probe: board id=8, interface number 0 [ 701.374349][ T51] smsusb:smsusb_probe: Device initialized with return code -19 [ 701.454926][T13491] RDS/IB: syz0: added [ 701.459769][T13491] smc: adding ib device syz0 with port count 1 [ 701.466435][T13491] smc: ib device syz0 port 1 has pnetid [ 701.566658][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2188'. [ 701.600227][T13503] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.608816][T13503] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.617140][T13503] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.625378][T13503] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.666511][T13503] vxlan0: entered promiscuous mode [ 701.706703][T13507] hub 2-0:1.0: USB hub found [ 701.735376][T13507] hub 2-0:1.0: 1 port detected [ 703.296289][T13515] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2191'. [ 703.310710][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 703.475132][T13520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2193'. [ 703.583160][ T51] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 703.588554][ T5876] usb 1-1: USB disconnect, device number 24 [ 704.433309][ T29] audit: type=1400 audit(1733099879.930:1771): avc: denied { mount } for pid=13526 comm="syz.3.2195" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 704.455389][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.554216][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 704.623331][ T29] audit: type=1400 audit(1733099880.680:1772): avc: denied { map } for pid=13522 comm="syz.0.2194" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 704.770285][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.780532][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.791452][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.801139][ T51] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 704.810866][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.973233][ T29] audit: type=1400 audit(1733099880.680:1773): avc: denied { execute } for pid=13522 comm="syz.0.2194" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 704.998628][ T29] audit: type=1400 audit(1733099880.680:1774): avc: denied { getopt } for pid=13522 comm="syz.0.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 705.824736][ T51] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 705.834069][ T51] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 705.842082][ T51] usb 3-1: Manufacturer: syz [ 705.849568][ T51] usb 3-1: config 0 descriptor?? [ 706.533792][T13517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.549031][T13517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.593356][ T51] rc_core: IR keymap rc-hauppauge not found [ 706.599271][ T51] Registered IR keymap rc-empty [ 706.643604][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 706.683188][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 706.704089][ T51] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 706.722621][ T51] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 706.845108][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 706.863187][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 706.883243][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 706.903157][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 706.930331][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 706.969797][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.003193][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.095143][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.133304][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.153666][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.191264][ T51] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 707.205515][ T29] audit: type=1400 audit(1733099883.270:1775): avc: denied { bind } for pid=13557 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 707.232617][ T51] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 707.262453][ T29] audit: type=1400 audit(1733099883.290:1776): avc: denied { name_bind } for pid=13557 comm="syz.2.2203" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 707.326270][ T51] usb 3-1: USB disconnect, device number 24 [ 707.382830][ T29] audit: type=1400 audit(1733099883.290:1777): avc: denied { node_bind } for pid=13557 comm="syz.2.2203" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 707.543183][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 707.557207][ T29] audit: type=1400 audit(1733099883.290:1778): avc: denied { listen } for pid=13557 comm="syz.2.2203" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 708.201882][ T29] audit: type=1400 audit(1733099883.290:1779): avc: denied { connect } for pid=13557 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 708.253137][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 708.296501][ T9] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 708.330538][ T9] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 708.404549][ T29] audit: type=1400 audit(1733099883.290:1780): avc: denied { name_connect } for pid=13557 comm="syz.2.2203" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 708.422411][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 708.445496][T13576] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2206'. [ 708.468887][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 708.478106][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.491015][ T9] usb 4-1: Product: 勉疈乥텸矿螷稩Ⴤ辑ꂻⴾᑓ流噷綢埾阮༵帪 [ 708.500593][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2206'. [ 708.510118][T13576] tipc: MTU too low for tipc bearer [ 708.524435][ T9] usb 4-1: Manufacturer: 蘺끭ⲗ種輐輆廸େ疏쇛풔ក緋黓ꎹᢆ隕է偢ᅠꌡ捘緫锕浧휼喠鄣㶔灨⟋⇔듻濘敻ꘉ瑷˽曔퀢儩莧개椼缲ᇼධ矈癹峺ģ䞄땚쥵翣졶稿ꏿ绝꟱대䵘⒄ኹ቎䞪﹔ꓳꠡ䔳Ⅺ迥嬭㓕囇ゞ鍤᪰䶇鈹➚⒠⼮⏰ [ 708.576195][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2206'. [ 708.601999][ T9] usb 4-1: SerialNumber: 㸰ﬖ챂拾㯼팯鬨圁᱗샎ꠐ牁᪌檿㇫ [ 708.670584][T13554] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 708.834635][T13554] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 709.643455][ T9] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8 [ 709.669131][ T9] usb 4-1: USB disconnect, device number 16 [ 709.993326][ T51] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 710.255432][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 710.255793][ T29] audit: type=1400 audit(1733099885.740:1782): avc: denied { read } for pid=13588 comm="syz.0.2210" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 710.256293][ T9] usblp0: removed [ 710.261838][ T29] audit: type=1400 audit(1733099885.740:1783): avc: denied { open } for pid=13588 comm="syz.0.2210" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 711.410382][ T51] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 711.418828][ T51] usb 3-1: config 0 has no interface number 0 [ 711.425055][ T51] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 711.436165][ T51] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 711.451956][T13606] netlink: 'syz.0.2214': attribute type 10 has an invalid length. [ 711.462251][T13606] bond0: (slave wlan1): Opening slave failed [ 711.462646][ T51] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 711.477582][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.485675][ T51] usb 3-1: Product: syz [ 711.490431][ T51] usb 3-1: Manufacturer: syz [ 711.495304][ T51] usb 3-1: SerialNumber: syz [ 711.503505][ T51] usb 3-1: config 0 descriptor?? [ 711.513187][ T51] ums-alauda 3-1:0.189: USB Mass Storage device detected [ 711.547898][T13606] syz.0.2214 (13606): drop_caches: 2 [ 711.695162][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 711.751121][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 711.757880][T13613] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2216'. [ 711.883268][ T973] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 711.891339][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 711.903406][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.913835][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.925829][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 711.935993][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 711.945802][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.960508][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.970973][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.979419][ T9] usb 5-1: Manufacturer: syz [ 712.003445][ T9] usb 5-1: config 0 descriptor?? [ 712.023214][ T973] usb 4-1: device descriptor read/64, error -71 [ 712.264653][ T973] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 712.284508][ T9] rc_core: IR keymap rc-hauppauge not found [ 712.291804][ T9] Registered IR keymap rc-empty [ 712.301077][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.324017][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.349157][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 712.367356][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 712.385991][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.416516][ T973] usb 4-1: device descriptor read/64, error -71 [ 712.422869][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.433251][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.448546][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.466146][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.497189][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.525553][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.566380][ T973] usb usb4-port1: attempt power cycle [ 712.574049][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.613495][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.643820][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.684781][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.753306][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.804919][ T51] usb 3-1: USB disconnect, device number 25 [ 712.866250][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.905901][T13622] netlink: 'syz.4.2217': attribute type 10 has an invalid length. [ 712.914087][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 712.918494][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 712.925958][T13624] capability: warning: `syz.2.2218' uses deprecated v2 capabilities in a way that may be insecure [ 712.943545][ T973] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 713.003725][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 713.025738][ T973] usb 4-1: device descriptor read/8, error -71 [ 713.069885][ T9] usb 5-1: USB disconnect, device number 17 [ 713.287106][ T973] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 713.369841][ T51] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 714.003396][ T973] usb 4-1: device descriptor read/8, error -71 [ 714.073112][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 714.113488][ T973] usb usb4-port1: unable to enumerate USB device [ 714.115032][ T51] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 714.128972][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.143873][ T51] usb 3-1: config 0 descriptor?? [ 714.348713][T13622] syz.4.2217 (13622): drop_caches: 2 [ 714.803211][ T29] audit: type=1400 audit(1733099890.850:1784): avc: denied { mounton } for pid=13632 comm="syz.1.2220" path="/proc/1588/task" dev="proc" ino=36236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 714.985128][ T51] ath6kl: Failed to read usb control message: -71 [ 714.991626][ T51] ath6kl: Unable to read the bmi data from the device: -71 [ 714.998911][ T51] ath6kl: unable to read target info byte count: -71 [ 715.006993][ T51] ath6kl: Failed to init ath6kl core: -71 [ 715.017988][ T51] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 715.039837][ T29] audit: type=1326 audit(1733099891.100:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eabf80849 code=0x7fc00000 [ 715.073269][ T51] usb 3-1: USB disconnect, device number 26 [ 715.138505][ T29] audit: type=1326 audit(1733099891.130:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.1.2220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2eabf80849 code=0x0 [ 715.308423][ T29] audit: type=1326 audit(1733099891.280:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2eabf80849 code=0x7fc00000 [ 715.544525][T13648] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2221'. [ 715.565357][T13649] netlink: 'syz.4.2223': attribute type 10 has an invalid length. [ 716.276846][T13655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13655 comm=syz.3.2226 [ 716.278981][T13657] hub 2-0:1.0: USB hub found [ 716.295236][T13657] hub 2-0:1.0: 1 port detected [ 716.373720][T13649] syz.4.2223 (13649): drop_caches: 2 [ 717.944416][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'. [ 719.086811][T13692] syz.1.2235 (13692): drop_caches: 2 [ 719.253319][ T973] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 719.557861][ T973] usb 5-1: unable to get BOS descriptor or descriptor too short [ 719.570473][ T973] usb 5-1: config 123 has an invalid interface number: 6 but max is 0 [ 719.582276][ T973] usb 5-1: config 123 has no interface number 0 [ 719.610901][ T973] usb 5-1: config 123 interface 6 has no altsetting 0 [ 720.407257][ T973] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 720.416509][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.424674][ T973] usb 5-1: Product: syz [ 720.428841][ T973] usb 5-1: Manufacturer: syz [ 720.433716][ T973] usb 5-1: SerialNumber: syz [ 720.617765][ T29] audit: type=1400 audit(1733099896.680:1788): avc: denied { create } for pid=13710 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 721.181130][ T973] go7007 5-1:123.6: probe with driver go7007 failed with error -12 [ 721.197563][ T973] usb 5-1: USB disconnect, device number 18 [ 721.203888][ T29] audit: type=1400 audit(1733099896.680:1789): avc: denied { bind } for pid=13710 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 721.237302][ T29] audit: type=1400 audit(1733099897.300:1790): avc: denied { create } for pid=13710 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 721.588804][ T29] audit: type=1400 audit(1733099897.330:1791): avc: denied { write } for pid=13710 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 721.727643][ T29] audit: type=1400 audit(1733099897.330:1792): avc: denied { bind } for pid=13710 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 721.763377][T13717] netlink: 'syz.2.2243': attribute type 1 has an invalid length. [ 721.819836][T13717] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2243'. [ 721.939341][ T29] audit: type=1400 audit(1733099898.000:1793): avc: denied { relabelfrom } for pid=13718 comm="syz.0.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 721.973971][ T29] audit: type=1400 audit(1733099898.020:1794): avc: denied { relabelto } for pid=13718 comm="syz.0.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 722.258529][T13728] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 722.623443][ T5876] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 722.799770][ T5876] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 722.811903][ T5876] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 722.882249][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2246'. [ 723.385494][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.404537][ T5876] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 723.958997][T13746] netlink: 'syz.3.2251': attribute type 10 has an invalid length. [ 723.977279][T13746] bond0: (slave wlan1): Opening slave failed [ 724.004872][T13746] syz.3.2251 (13746): drop_caches: 2 [ 724.412572][ T29] audit: type=1326 audit(1733099900.410:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7ffc0000 [ 724.446289][ T5876] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 724.469131][ T29] audit: type=1326 audit(1733099900.410:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7ffc0000 [ 724.500227][ T29] audit: type=1326 audit(1733099900.410:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ff2e5380849 code=0x7ffc0000 [ 724.583123][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2253'. [ 725.153308][ T5876] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 725.161618][ T5876] stv0680 3-1:4.0: last error: 73, command = 0x9f [ 725.209238][ T5876] usb 3-1: USB disconnect, device number 27 [ 727.288887][ T29] audit: type=1400 audit(1733099902.820:1798): avc: denied { create } for pid=13786 comm="syz.1.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 727.991370][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2264'. [ 728.917061][T13806] veth0_to_team: entered promiscuous mode [ 728.922817][T13806] veth0_to_team: entered allmulticast mode [ 729.824446][ T29] audit: type=1400 audit(1733099905.890:1799): avc: denied { setopt } for pid=13821 comm="syz.4.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 729.915996][ T29] audit: type=1400 audit(1733099905.980:1800): avc: denied { read } for pid=5175 comm="acpid" name="event8" dev="devtmpfs" ino=3075 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 730.010043][ T29] audit: type=1400 audit(1733099905.980:1801): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3075 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 730.085373][ T29] audit: type=1400 audit(1733099905.980:1802): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3075 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 732.371596][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2276'. [ 732.901281][T13851] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 733.362238][ T29] audit: type=1400 audit(1733099909.420:1803): avc: denied { mount } for pid=13859 comm="syz.4.2281" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 733.396158][ T29] audit: type=1400 audit(1733099909.450:1804): avc: denied { read } for pid=13859 comm="syz.4.2281" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.413165][ T5900] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 733.418533][ T29] audit: type=1400 audit(1733099909.450:1805): avc: denied { open } for pid=13859 comm="syz.4.2281" path="/445/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.555998][T13857] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 733.570343][T13857] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 733.587135][T13857] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 733.684824][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 733.695940][ T5900] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 733.706046][ T5900] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 733.715240][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.723206][ T5876] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 734.299966][ T29] audit: type=1326 audit(1733099910.350:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.0.2274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d87180849 code=0x0 [ 734.413883][ T5900] usb 1-1: can't set config #27, error -71 [ 734.421271][ T5900] usb 1-1: USB disconnect, device number 25 [ 734.485487][ T5876] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 734.502473][ T5876] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 734.530579][ T5876] usb 5-1: config 1 interface 0 has no altsetting 0 [ 734.542575][ T29] audit: type=1400 audit(1733099910.600:1807): avc: denied { setopt } for pid=13874 comm="syz.2.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 734.576399][ T5876] usb 5-1: string descriptor 0 read error: -22 [ 734.582887][ T5876] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40 [ 734.592572][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.609958][T13866] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 734.763290][ T5873] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 734.973356][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 735.035435][ T5873] usb 2-1: unable to get BOS descriptor or descriptor too short [ 735.088944][ T5873] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 735.105447][ T5873] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 735.157346][ T5873] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 735.168970][ T5873] usb 2-1: config 128 has no interface number 0 [ 735.177980][ T5873] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 735.191923][ T5873] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 735.207083][ T5873] usb 2-1: config 128 interface 127 has no altsetting 0 [ 735.217808][ T5873] usb 2-1: string descriptor 0 read error: -22 [ 735.231098][ T5873] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 735.240930][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.351048][T13166] udevd[13166]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.734417][ T973] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 735.758798][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2287'. [ 736.696351][ T5876] usbhid 5-1:1.0: can't add hid device: -71 [ 736.702389][ T5876] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 736.732090][ T973] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 736.740398][ T973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.773137][ T973] usb 3-1: config 0 has no interface number 0 [ 736.811243][ T5876] usb 5-1: USB disconnect, device number 19 [ 736.817362][ T973] usb 3-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.902515][ T29] audit: type=1400 audit(1733099912.930:1808): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 736.944135][ T973] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 736.957664][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.974186][ T973] usb 3-1: Product: syz [ 736.982616][ T973] usb 3-1: Manufacturer: syz [ 736.992566][ T973] usb 3-1: SerialNumber: syz [ 737.048309][ T973] usb 3-1: config 0 descriptor?? [ 737.614396][T13897] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 738.372279][ T973] usb 3-1: probing VID:PID(0424:012C) [ 738.380834][ T973] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 738.460480][ T5900] usb 2-1: USB disconnect, device number 23 [ 738.551588][ T29] audit: type=1400 audit(1733099914.580:1809): avc: denied { create } for pid=13901 comm="syz.4.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 738.580481][ T973] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 738.610613][ T973] usb 3-1: USB disconnect, device number 28 [ 738.754238][ T29] audit: type=1400 audit(1733099914.820:1810): avc: denied { write } for pid=13901 comm="syz.4.2294" path="socket:[36638]" dev="sockfs" ino=36638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 738.983196][ T5876] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 739.033160][ T5900] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 739.191474][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.205686][ T29] audit: type=1326 audit(1733099915.240:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4b80849 code=0x7ffc0000 [ 739.229224][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.240686][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.256902][ T5900] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 739.269606][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.280622][ T29] audit: type=1326 audit(1733099915.240:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2fa4b80849 code=0x7ffc0000 [ 739.397430][ T5900] usb 4-1: config 0 descriptor?? [ 739.403122][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 739.411546][ T5876] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 739.416635][ T29] audit: type=1326 audit(1733099915.240:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4b80849 code=0x7ffc0000 [ 739.420865][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.452230][ T5876] usb 2-1: Product: syz [ 739.456561][ T5876] usb 2-1: Manufacturer: syz [ 739.461186][ T5876] usb 2-1: SerialNumber: syz [ 739.471894][ T5876] usb 2-1: config 0 descriptor?? [ 739.478439][ T29] audit: type=1326 audit(1733099915.240:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2fa4b80849 code=0x7ffc0000 [ 739.514747][ T29] audit: type=1326 audit(1733099915.240:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4b80849 code=0x7ffc0000 [ 739.534813][ T5876] usb 2-1: selecting invalid altsetting 1 [ 739.544179][ T29] audit: type=1326 audit(1733099915.240:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa4b80849 code=0x7ffc0000 [ 739.544250][ T29] audit: type=1326 audit(1733099915.240:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4b80849 code=0x7ffc0000 [ 739.544284][ T29] audit: type=1326 audit(1733099915.240:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fa4b80849 code=0x7ffc0000 [ 739.671450][ T5900] usbhid 4-1:0.0: can't add hid device: -71 [ 739.678682][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 739.686058][ T5876] technisat-usb2: could not set alternate setting to 0 [ 739.716989][ T5900] usb 4-1: USB disconnect, device number 21 [ 739.729343][ T5876] technisat-usb2: firmware version: 0.0 [ 739.735093][ T5876] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 740.222831][T13944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'. [ 740.289692][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.377237][ T5876] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 740.399578][ T5876] usb 2-1: media controller created [ 740.510144][ T5876] technisat-usb2: i2c-error: out failed 53 = -22 [ 741.243989][ T5876] dvb-usb: MAC address reading failed. [ 741.283011][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 741.304409][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.346584][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 741.495973][ T5876] DVB: Unable to find symbol stv090x_attach() [ 741.506484][ T5876] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 741.553465][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.620882][T13963] hub 5-0:1.0: USB hub found [ 741.631184][T13963] hub 5-0:1.0: 1 port detected [ 741.683939][ T5876] rc_core: IR keymap rc-technisat-usb2 not found [ 741.690413][ T5876] Registered IR keymap rc-empty [ 741.711766][ T5876] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 741.730189][ T5876] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input28 [ 741.766100][T13970] FAULT_INJECTION: forcing a failure. [ 741.766100][T13970] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 741.787978][ T5876] dvb-usb: schedule remote query interval to 100 msecs. [ 741.819867][T13970] CPU: 0 UID: 0 PID: 13970 Comm: syz.0.2309 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 741.830349][T13970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 741.840422][T13970] Call Trace: [ 741.843708][T13970] [ 741.846645][T13970] dump_stack_lvl+0x16c/0x1f0 [ 741.851338][T13970] should_fail_ex+0x497/0x5b0 [ 741.856038][T13970] _copy_to_user+0x32/0xd0 [ 741.860464][T13970] copy_to_sockptr_offset.constprop.0+0x12b/0x150 [ 741.866885][T13970] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 741.873819][T13970] ? btf_new_fd+0x3ee3/0x5370 [ 741.878510][T13970] ? bpf_vlog_finalize+0x1ba/0x360 [ 741.883636][T13970] btf_new_fd+0x4157/0x5370 [ 741.888157][T13970] ? avc_has_perm_noaudit+0x143/0x3a0 [ 741.893565][T13970] ? __pfx_btf_new_fd+0x10/0x10 [ 741.898435][T13970] ? cap_capable+0x1cf/0x240 [ 741.903033][T13970] ? bpf_lsm_capable+0x9/0x10 [ 741.907737][T13970] ? security_capable+0x7e/0x260 [ 741.912675][T13970] ? ns_capable+0xd7/0x110 [ 741.917092][T13970] __sys_bpf+0x1747/0x49c0 [ 741.921521][T13970] ? __pfx_lock_release+0x10/0x10 [ 741.926547][T13970] ? __pfx___sys_bpf+0x10/0x10 [ 741.931293][T13970] ? vfs_write+0x306/0x1150 [ 741.935782][T13970] ? __mutex_unlock_slowpath+0x164/0x690 [ 741.941403][T13970] ? fput+0x67/0x440 [ 741.945293][T13970] ? ksys_write+0x1ba/0x250 [ 741.949806][T13970] ? __pfx_ksys_write+0x10/0x10 [ 741.954672][T13970] __x64_sys_bpf+0x78/0xc0 [ 741.959104][T13970] ? lockdep_hardirqs_on+0x7c/0x110 [ 741.964306][T13970] do_syscall_64+0xcd/0x250 [ 741.968794][T13970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.974668][T13970] RIP: 0033:0x7f3d87180849 [ 741.979062][T13970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.998651][T13970] RSP: 002b:00007f3d87fb4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 742.007066][T13970] RAX: ffffffffffffffda RBX: 00007f3d87345fa0 RCX: 00007f3d87180849 [ 742.015026][T13970] RDX: 0000000000000020 RSI: 0000000020000380 RDI: 0000000000000012 [ 742.023019][T13970] RBP: 00007f3d87fb40a0 R08: 0000000000000000 R09: 0000000000000000 [ 742.030984][T13970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 742.038935][T13970] R13: 0000000000000000 R14: 00007f3d87345fa0 R15: 00007ffd91377d18 [ 742.046901][T13970] [ 742.104434][ T5876] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 742.123359][ T8] dvb-usb: error -71 while querying for an remote control event. [ 742.218739][ T5876] usb 2-1: USB disconnect, device number 24 [ 742.250728][ T5876] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 742.423277][ T973] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 742.488630][T13981] netlink: 'syz.0.2313': attribute type 21 has an invalid length. [ 742.502534][T13981] netlink: 'syz.0.2313': attribute type 6 has an invalid length. [ 742.518102][T13981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2313'. [ 742.573134][ T973] usb 5-1: Using ep0 maxpacket: 32 [ 742.582419][ T973] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 742.594636][ T973] usb 5-1: config 0 has no interface number 0 [ 742.606374][ T973] usb 5-1: config 0 interface 58 has no altsetting 0 [ 742.624632][ T973] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 742.645214][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.665923][ T973] usb 5-1: Product: syz [ 742.670208][ T973] usb 5-1: Manufacturer: syz [ 742.675349][ T973] usb 5-1: SerialNumber: syz [ 742.688162][ T973] usb 5-1: config 0 descriptor?? [ 742.915169][ T973] f81534a_ctrl 5-1:0.58: failed to set register 0x116: -5 [ 742.929512][ T973] f81534a_ctrl 5-1:0.58: failed to enable ports: -5 [ 742.945761][ T973] f81534a_ctrl 5-1:0.58: probe with driver f81534a_ctrl failed with error -5 [ 743.658826][ T973] usb 5-1: USB disconnect, device number 20 [ 743.945710][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 743.945729][ T29] audit: type=1400 audit(1733099920.000:1834): avc: denied { getattr } for pid=13992 comm="syz.1.2317" path="cgroup:[4026532801]" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 744.069576][T13995] binder: BINDER_SET_CONTEXT_MGR already set [ 744.114567][T13995] binder: 13991:13995 ioctl 4018620d 200001c0 returned -16 [ 744.123599][T14000] netlink: 'syz.1.2318': attribute type 10 has an invalid length. [ 744.142641][T14000] bond0: (slave wlan1): Opening slave failed [ 744.255087][T14000] syz.1.2318 (14000): drop_caches: 2 [ 744.320932][T14002] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 744.353622][T14002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2319'. [ 745.283260][ T973] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 745.445027][T14019] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 746.245862][ T973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.256959][ T973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 746.270720][ T29] audit: type=1400 audit(1733099922.330:1835): avc: denied { create } for pid=14021 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 746.309973][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 746.354094][ T973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.363324][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.371423][ T973] usb 4-1: Product: syz [ 746.376071][ T973] usb 4-1: Manufacturer: syz [ 746.380695][ T973] usb 4-1: SerialNumber: syz [ 746.567425][T14028] hub 5-0:1.0: USB hub found [ 746.578282][T14028] hub 5-0:1.0: 1 port detected [ 746.604272][T14008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 747.223557][T14008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 747.235605][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.514640][ T973] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 747.593144][T14038] sd 0:0:1:0: device reset [ 747.987121][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'. [ 748.560594][ T973] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 748.587721][ T973] usb 4-1: USB disconnect, device number 22 [ 748.594384][ T973] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 748.740797][ T29] audit: type=1400 audit(1733099924.800:1836): avc: denied { bind } for pid=14048 comm="syz.4.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 749.035492][ T29] audit: type=1400 audit(1733099924.990:1837): avc: denied { bind } for pid=14053 comm="syz.4.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 749.056088][T14055] netlink: 'syz.0.2333': attribute type 10 has an invalid length. [ 749.646661][T14055] bond0: (slave wlan1): Opening slave failed [ 749.816906][T14059] syz.0.2333 (14059): drop_caches: 2 [ 750.728934][ T29] audit: type=1326 audit(1733099926.780:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.3.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496c980849 code=0x7fc00000 [ 751.839488][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 751.871637][T14084] input: syz0 as /devices/virtual/input/input29 [ 752.258061][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 752.369935][T14085] hub 5-0:1.0: USB hub found [ 752.375078][T14085] hub 5-0:1.0: 1 port detected [ 752.643264][ T973] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 752.783251][ T51] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 752.803202][ T973] usb 1-1: Using ep0 maxpacket: 8 [ 752.848580][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 752.929027][ T973] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=4b.1e [ 752.953277][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 752.966795][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.974624][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.990982][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.013793][ T973] usb 1-1: Product: syz [ 753.022988][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 753.052707][ T973] usb 1-1: Manufacturer: syz [ 753.064367][ T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 753.086001][ T973] usb 1-1: SerialNumber: syz [ 753.107914][ T51] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.137851][ T973] usb 1-1: config 0 descriptor?? [ 753.159708][ T973] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 020c [ 753.170169][ T51] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 753.198729][ T51] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 753.269569][ T51] usb 2-1: Manufacturer: syz [ 753.292096][ T51] usb 2-1: config 0 descriptor?? [ 753.533988][ T973] usb 1-1: USB disconnect, device number 26 [ 753.623568][ T51] rc_core: IR keymap rc-hauppauge not found [ 753.634746][ T51] Registered IR keymap rc-empty [ 753.683156][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 753.722672][T14100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.753618][T14100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.774335][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 753.794102][ T51] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 753.817720][ T51] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 753.906606][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 753.933217][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 753.963166][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 753.963328][ T973] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 754.015415][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.043210][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.077117][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.125647][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.159763][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.163400][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 754.197075][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.208232][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.213446][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.225272][ T973] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 754.259424][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.263411][ T51] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.278675][ T973] usb 1-1: config 0 descriptor?? [ 754.321642][ T51] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 754.485543][ T51] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 754.492181][T14114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2348'. [ 754.873303][ T51] usb 2-1: USB disconnect, device number 25 [ 754.938973][ T29] audit: type=1400 audit(1733099931.000:1839): avc: denied { create } for pid=14116 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 755.006127][ T973] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 755.014006][ T973] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 755.725085][ T973] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 755.732189][ T973] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 755.739322][ T973] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 755.747017][ T973] appleir 0003:05AC:8241.0011: No inputs registered, leaving [ 755.763129][ T29] audit: type=1400 audit(1733099931.000:1840): avc: denied { setopt } for pid=14116 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 755.816978][ T973] appleir 0003:05AC:8241.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 755.871358][ T973] usb 1-1: USB disconnect, device number 27 [ 756.618512][ T29] audit: type=1400 audit(1733099932.680:1841): avc: denied { read } for pid=14129 comm="syz.4.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 757.658671][T14132] syz.2.2353 (14132): drop_caches: 2 [ 757.664050][ T29] audit: type=1400 audit(1733099933.710:1842): avc: denied { write } for pid=14137 comm="syz.4.2356" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 758.483862][T14159] netlink: zone id is out of range [ 758.523331][T14159] netlink: zone id is out of range [ 758.528492][T14159] netlink: zone id is out of range [ 758.553174][ T5873] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 758.556611][T14159] netlink: zone id is out of range [ 758.593123][T14159] netlink: zone id is out of range [ 758.598277][T14159] netlink: zone id is out of range [ 758.616091][T14159] netlink: zone id is out of range [ 758.621233][T14159] netlink: zone id is out of range [ 758.645138][T14159] netlink: zone id is out of range [ 758.650323][T14159] netlink: zone id is out of range [ 758.703127][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 758.725247][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.757362][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.793240][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 758.823286][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 758.850715][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.925770][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.992241][ T5873] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 759.318908][ T5873] usb 3-1: Manufacturer: syz [ 759.356334][ T5873] usb 3-1: config 0 descriptor?? [ 759.683128][ T5873] rc_core: IR keymap rc-hauppauge not found [ 759.693388][ T5873] Registered IR keymap rc-empty [ 759.699294][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.724833][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.814894][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 759.835757][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 759.868611][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.879652][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.889984][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.913426][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.933659][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.953211][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 760.034682][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 760.423174][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 760.991211][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 761.325096][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 761.424871][ T29] audit: type=1400 audit(1733099937.160:1843): avc: denied { bind } for pid=14183 comm="syz.0.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 761.643779][ T29] audit: type=1400 audit(1733099937.160:1844): avc: denied { write } for pid=14183 comm="syz.0.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 761.667724][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 762.264472][T14194] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 762.383731][T14187] IPVS: stopping master sync thread 14195 ... [ 762.538557][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 762.564158][ T5873] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 762.587692][ T5873] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 762.652881][ T5873] usb 3-1: USB disconnect, device number 29 [ 762.783229][ T5900] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 762.973882][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 762.981214][ T5900] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 762.993385][ T5900] usb 5-1: config 0 has no interface number 0 [ 763.008273][ T5900] usb 5-1: New USB device found, idVendor=0403, idProduct=a9a0, bcdDevice=3d.e9 [ 763.018498][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.029483][ T5900] usb 5-1: Product: syz [ 763.034767][ T5900] usb 5-1: Manufacturer: syz [ 763.039497][ T5900] usb 5-1: SerialNumber: syz [ 763.051583][ T5900] usb 5-1: config 0 descriptor?? [ 763.062296][ T5900] ftdi_sio 5-1:0.119: FTDI USB Serial Device converter detected [ 763.081377][ T5900] ftdi_sio ttyUSB0: unknown device type: 0x3de9 [ 763.133140][ T5873] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 763.283201][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 763.304758][ T5873] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 763.314230][ T5873] usb 3-1: config 0 has no interface number 0 [ 763.320429][ T5873] usb 3-1: config 0 interface 58 has no altsetting 0 [ 763.869787][ T29] audit: type=1400 audit(1733099939.890:1845): avc: denied { accept } for pid=14180 comm="syz.4.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 764.482402][ T5873] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 764.491706][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.499906][ T5873] usb 3-1: Product: syz [ 764.504235][ T5873] usb 3-1: Manufacturer: syz [ 764.508922][ T5873] usb 3-1: SerialNumber: syz [ 764.515468][ T5873] usb 3-1: config 0 descriptor?? [ 764.522172][ T29] audit: type=1400 audit(1733099940.580:1846): avc: denied { ioctl } for pid=14209 comm="syz.0.2374" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 764.845798][ T5873] f81534a_ctrl 3-1:0.58: failed to set register 0x116: -5 [ 764.853150][ T5873] f81534a_ctrl 3-1:0.58: failed to enable ports: -5 [ 764.859823][ T5873] f81534a_ctrl 3-1:0.58: probe with driver f81534a_ctrl failed with error -5 [ 764.914930][ T5873] usb 3-1: USB disconnect, device number 30 [ 764.982932][T14219] binder: 14214:14219 ioctl c0306201 0 returned -14 [ 764.992573][T14219] binder_alloc: 14214: binder_alloc_buf, no vma [ 765.272321][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2376'. [ 765.858810][T14226] ubi0: attaching mtd0 [ 765.910358][T14226] ubi0: scanning is finished [ 765.915371][T14226] ubi0: empty MTD device detected [ 766.275696][ T5873] usb 5-1: USB disconnect, device number 21 [ 766.282779][ T5873] ftdi_sio 5-1:0.119: device disconnected [ 766.319428][T14231] net_ratelimit: 28 callbacks suppressed [ 766.319440][T14231] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 766.591935][T14226] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 767.221260][ T29] audit: type=1326 audit(1733099943.150:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.263246][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 767.273204][ T29] audit: type=1326 audit(1733099943.330:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.273249][ T29] audit: type=1326 audit(1733099943.330:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.273281][ T29] audit: type=1326 audit(1733099943.330:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.273313][ T29] audit: type=1326 audit(1733099943.330:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.273345][ T29] audit: type=1326 audit(1733099943.330:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.273375][ T29] audit: type=1326 audit(1733099943.330:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.273408][ T29] audit: type=1326 audit(1733099943.330:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.273439][ T29] audit: type=1326 audit(1733099943.330:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.273472][ T29] audit: type=1326 audit(1733099943.330:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7fc00000 [ 767.496922][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 767.621901][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.634424][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.647352][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 767.675186][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 767.685436][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.722641][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 767.761585][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 767.781828][ T8] usb 3-1: Manufacturer: syz [ 767.811921][ T8] usb 3-1: config 0 descriptor?? [ 767.853528][ T5876] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 767.911081][T14257] SELinux: Context system_u:object_r:default_context_t:s0 is not valid (left unmapped). [ 768.003233][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 768.016914][ T5876] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 768.055916][ T5876] usb 5-1: config 0 has no interface number 0 [ 768.078302][ T5876] usb 5-1: config 0 interface 58 has no altsetting 0 [ 768.094988][ T5876] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 768.110078][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.143617][ T5876] usb 5-1: Product: syz [ 768.147781][ T5876] usb 5-1: Manufacturer: syz [ 768.152362][ T5876] usb 5-1: SerialNumber: syz [ 768.162240][ T5876] usb 5-1: config 0 descriptor?? [ 768.351612][T14229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.432209][T14229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.759979][ T8] rc_core: IR keymap rc-hauppauge not found [ 768.766000][ T8] Registered IR keymap rc-empty [ 768.771202][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 768.781987][ T5876] f81534a_ctrl 5-1:0.58: failed to set register 0x116: -5 [ 768.830498][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 768.842769][ T5876] f81534a_ctrl 5-1:0.58: failed to enable ports: -5 [ 768.860891][ T5876] f81534a_ctrl 5-1:0.58: probe with driver f81534a_ctrl failed with error -5 [ 768.876351][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 768.934372][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 769.214877][ T5876] usb 5-1: USB disconnect, device number 22 [ 769.289614][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.353263][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.389471][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.433269][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.453177][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.468051][T14278] netlink: 'syz.0.2389': attribute type 10 has an invalid length. [ 769.484069][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.496296][T14279] netlink: 'syz.1.2390': attribute type 3 has an invalid length. [ 769.504749][T14278] bond0: (slave wlan1): Opening slave failed [ 769.517860][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.543244][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.563192][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.571644][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'. [ 769.585029][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 769.597201][T14278] syz.0.2389 (14278): drop_caches: 2 [ 769.609190][ T8] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 769.619010][ T8] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 769.643705][ T8] usb 3-1: USB disconnect, device number 31 [ 769.667080][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 769.889081][T14283] hub 5-0:1.0: USB hub found [ 769.899601][T14283] hub 5-0:1.0: 1 port detected [ 770.093165][ T5876] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 770.097387][T14285] binder_alloc: 14284: binder_alloc_buf, no vma [ 770.266813][ T5876] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 770.315922][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.331094][ T5876] usb 2-1: config 0 descriptor?? [ 771.289963][T14298] i2c i2c-0: Invalid block write size 252 [ 771.400327][ T5876] ath6kl: Unsupported hardware version: 0x0 [ 771.414058][ T5876] ath6kl: Failed to init ath6kl core: -22 [ 771.431241][ T5876] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 771.650470][T11465] usb 2-1: USB disconnect, device number 26 [ 772.186008][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 772.559004][T14324] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2404'. [ 772.595633][T14324] netlink: 'syz.4.2404': attribute type 1 has an invalid length. [ 772.603864][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 772.603878][ T29] audit: type=1400 audit(1733099948.650:2131): avc: denied { mount } for pid=14318 comm="syz.3.2402" name="/" dev="hugetlbfs" ino=38731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 772.611051][T14324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2404'. [ 772.762884][ T29] audit: type=1400 audit(1733099948.790:2132): avc: denied { create } for pid=14318 comm="syz.3.2402" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 772.970429][ T29] audit: type=1400 audit(1733099949.030:2133): avc: denied { append } for pid=14330 comm="syz.1.2407" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 773.111264][ T29] audit: type=1400 audit(1733099949.170:2134): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 778.234536][T14350] netlink: 'syz.4.2412': attribute type 10 has an invalid length. [ 779.594801][T14350] syz.4.2412 (14350): drop_caches: 2 [ 779.959177][ T29] audit: type=1400 audit(1733099956.000:2135): avc: denied { map } for pid=14363 comm="syz.2.2415" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 780.063194][ T29] audit: type=1400 audit(1733099956.000:2136): avc: denied { execute } for pid=14363 comm="syz.2.2415" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 780.923413][ T29] audit: type=1326 audit(1733099956.860:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.3.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496c980849 code=0x7fc00000 [ 780.947046][ T29] audit: type=1326 audit(1733099956.970:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.3.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f496c980849 code=0x7fc00000 [ 781.476747][T11465] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 781.703194][T11465] usb 4-1: Using ep0 maxpacket: 32 [ 782.124627][T11465] usb 4-1: too many configurations: 54, using maximum allowed: 8 [ 782.156738][T11465] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 782.202960][T11465] usb 4-1: can't read configurations, error -61 [ 782.403232][T11465] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 782.407884][ T29] audit: type=1800 audit(1733099958.470:2139): pid=14407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2427" name="bus" dev="overlay" ino=2457 res=0 errno=0 [ 782.573227][ T973] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 782.643253][T11465] usb 4-1: Using ep0 maxpacket: 32 [ 782.668466][T11465] usb 4-1: too many configurations: 54, using maximum allowed: 8 [ 782.696560][T11465] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 782.704492][T11465] usb 4-1: can't read configurations, error -61 [ 782.731173][T11465] usb usb4-port1: attempt power cycle [ 782.783203][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 783.053194][ T29] audit: type=1326 audit(1733099959.010:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7ffc0000 [ 783.197177][ T29] audit: type=1326 audit(1733099959.010:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7ffc0000 [ 783.221068][ T29] audit: type=1326 audit(1733099959.030:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff2e5380849 code=0x7ffc0000 [ 783.245216][ T29] audit: type=1326 audit(1733099959.110:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5380849 code=0x7ffc0000 [ 783.262017][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.269596][ T29] audit: type=1326 audit(1733099959.110:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2e53b2925 code=0x7ffc0000 [ 783.304149][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.311961][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.322138][ T973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.359215][ T973] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.368536][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.378654][ T973] usb 3-1: config 0 descriptor?? [ 783.507104][T11465] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 783.605598][T11465] usb 4-1: Using ep0 maxpacket: 32 [ 783.621613][T11465] usb 4-1: too many configurations: 54, using maximum allowed: 8 [ 783.624850][T14422] sock: sock_set_timeout: `syz.4.2432' (pid 14422) tries to set negative timeout [ 783.652303][T11465] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 783.869887][T11465] usb 4-1: can't read configurations, error -61 [ 783.881283][ T973] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 783.890043][ T973] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 783.920520][ T973] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 784.003299][T11465] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 784.035929][T11465] usb 4-1: Using ep0 maxpacket: 32 [ 784.048105][T11465] usb 4-1: too many configurations: 54, using maximum allowed: 8 [ 784.094489][T11465] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 784.102131][T11465] usb 4-1: can't read configurations, error -61 [ 784.143179][T11465] usb usb4-port1: unable to enumerate USB device [ 784.389696][T14437] hub 2-0:1.0: USB hub found [ 784.396333][T14437] hub 2-0:1.0: 1 port detected [ 784.424712][ T8] usb 3-1: USB disconnect, device number 32 [ 784.806437][T14445] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 785.490549][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 785.490565][ T29] audit: type=1400 audit(1733099961.550:2185): avc: denied { bind } for pid=14447 comm="syz.3.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 785.806981][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2439'. [ 785.816374][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2439'. [ 786.326605][ T29] audit: type=1400 audit(1733099962.390:2186): avc: denied { nlmsg_read } for pid=14449 comm="syz.2.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 786.478463][T14461] overlayfs: invalid origin (0000) [ 786.783414][ T5873] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 786.953286][ T29] audit: type=1400 audit(1733099963.010:2187): avc: denied { shutdown } for pid=14462 comm="syz.4.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 786.993381][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 787.008092][ T5873] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 787.071948][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.217347][ T5873] usb 4-1: config 0 descriptor?? [ 787.234215][ T5873] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 788.513496][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 788.851900][T14497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2451'. [ 789.658264][ T5873] gspca_vc032x: reg_w err -71 [ 789.663010][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.668416][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.674974][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.704831][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.713159][T11465] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 789.724267][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.741602][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.761898][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.782121][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.798822][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.808186][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.814384][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.819748][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.830052][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.840174][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.852096][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.857867][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.863952][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.869323][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 789.875258][ T5873] gspca_vc032x: Unknown sensor... [ 789.880711][ T5873] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 789.888616][T11465] usb 2-1: Using ep0 maxpacket: 16 [ 789.895992][T11465] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.906808][T11465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 789.930315][ T5873] usb 4-1: USB disconnect, device number 27 [ 789.938668][T11465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 789.960231][T11465] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 789.971425][T11465] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.986727][T11465] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 789.999981][T11465] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 790.018590][T11465] usb 2-1: Manufacturer: syz [ 790.042230][T11465] usb 2-1: config 0 descriptor?? [ 790.357639][ T29] audit: type=1400 audit(1733099966.410:2188): avc: denied { write } for pid=14508 comm="syz.3.2454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 790.357732][T14509] warning: `syz.3.2454' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 790.393396][T11465] rc_core: IR keymap rc-hauppauge not found [ 790.399324][T11465] Registered IR keymap rc-empty [ 790.400105][T14509] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2454'. [ 790.430258][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.473857][T14499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.482435][T14499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.490325][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.533635][T11465] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 790.550340][T14512] Bluetooth: hci5: Frame reassembly failed (-84) [ 790.570606][T11465] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 790.596421][T14511] Bluetooth: hci5: Frame reassembly failed (-84) [ 790.603302][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.611650][T14513] Bluetooth: hci5: Frame reassembly failed (-84) [ 790.625124][T11568] Bluetooth: hci5: Frame reassembly failed (-84) [ 790.633531][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.652254][T14521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14521 comm=syz.4.2456 [ 790.675882][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.723322][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.753193][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.803245][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.986773][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.013147][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.033149][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.053137][T11465] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.075584][T11465] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 791.093094][T11465] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 791.119155][T11465] usb 2-1: USB disconnect, device number 27 [ 791.534214][ T29] audit: type=1400 audit(1733099967.600:2189): avc: denied { map } for pid=14546 comm="syz.1.2466" path="/dev/vcsa1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 792.622439][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 794.354628][ T973] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 794.683124][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 794.689896][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.701399][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.789372][ T973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.864613][ T973] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 794.893145][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.925563][ T973] usb 2-1: config 0 descriptor?? [ 796.100809][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 796.584119][ T29] audit: type=1400 audit(1733099972.420:2190): avc: denied { setopt } for pid=14596 comm="syz.2.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 796.913325][ T5873] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 797.067235][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.093241][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 797.135229][ T5873] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 797.186614][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.249896][ T5873] usb 3-1: config 0 descriptor?? [ 797.677236][ T5873] Bluetooth: Can't get version to change to load ram patch err [ 797.704188][ T5873] Bluetooth: Loading patch file failed [ 797.721769][ T5873] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 797.769476][ T5873] usb 3-1: USB disconnect, device number 33 [ 797.836662][ T973] usbhid 2-1:0.0: can't add hid device: -71 [ 797.852639][ T973] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 797.867007][ T973] usb 2-1: USB disconnect, device number 28 [ 797.961042][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 797.970243][T14613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.978855][T14613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.084200][T14613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.099667][T14613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.460794][T14618] dvmrp8: entered allmulticast mode [ 798.475922][T14618] dvmrp8: left allmulticast mode [ 799.551042][T14634] hub 2-0:1.0: USB hub found [ 799.556569][T14634] hub 2-0:1.0: 1 port detected [ 800.196717][ T5876] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 800.433225][ T5900] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 800.512666][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 800.520618][ T5876] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 800.531069][ T5876] usb 5-1: config 0 has no interface number 0 [ 800.538352][ T5876] usb 5-1: config 0 interface 58 has no altsetting 0 [ 800.547333][ T5876] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 800.556859][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.573143][ T5876] usb 5-1: Product: syz [ 800.577430][ T5876] usb 5-1: Manufacturer: syz [ 800.588758][ T5876] usb 5-1: SerialNumber: syz [ 800.756501][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.766709][ T5900] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 800.816661][ T5876] usb 5-1: config 0 descriptor?? [ 800.835385][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.964698][ T5900] usb 4-1: config 0 descriptor?? [ 800.972850][ T5900] pwc: Askey VC010 type 2 USB webcam detected. [ 801.063927][ T5876] f81534a_ctrl 5-1:0.58: failed to set register 0x116: -5 [ 801.076555][ T5876] f81534a_ctrl 5-1:0.58: failed to enable ports: -5 [ 801.123232][ T5876] f81534a_ctrl 5-1:0.58: probe with driver f81534a_ctrl failed with error -5 [ 801.182863][ T5876] usb 5-1: USB disconnect, device number 23 [ 801.410238][ T5900] pwc: recv_control_msg error -32 req 02 val 2b00 [ 801.438979][ T5900] pwc: recv_control_msg error -32 req 02 val 2700 [ 801.483646][ T5900] pwc: recv_control_msg error -32 req 02 val 2c00 [ 801.524032][ T5900] pwc: recv_control_msg error -32 req 04 val 1000 [ 801.533404][T14636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.547607][T14636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.581054][ T5900] pwc: recv_control_msg error -32 req 04 val 1300 [ 801.590411][ T5900] pwc: recv_control_msg error -32 req 04 val 1400 [ 801.601334][ T5900] pwc: recv_control_msg error -32 req 02 val 2000 [ 801.609261][ T5900] pwc: recv_control_msg error -32 req 02 val 2100 [ 801.626979][ T5900] pwc: recv_control_msg error -32 req 04 val 1500 [ 801.662268][ T5900] pwc: recv_control_msg error -32 req 02 val 2500 [ 801.676807][ T5900] pwc: recv_control_msg error -32 req 02 val 2400 [ 801.687160][ T5900] pwc: recv_control_msg error -32 req 02 val 2600 [ 801.701916][ T5900] pwc: recv_control_msg error -32 req 02 val 2900 [ 801.709886][ T5900] pwc: recv_control_msg error -32 req 02 val 2800 [ 801.926750][ T5900] pwc: recv_control_msg error -71 req 04 val 1200 [ 801.965694][ T5900] pwc: Registered as video103. [ 801.992655][ T5900] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 802.063673][ T5900] usb 4-1: USB disconnect, device number 28 [ 802.909727][T14671] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 803.493150][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 803.717614][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=4d.67 [ 803.949191][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.957371][ T8] usb 3-1: Product: syz [ 803.961561][ T8] usb 3-1: Manufacturer: syz [ 803.983105][ T8] usb 3-1: SerialNumber: syz [ 804.136300][ T8] usb 3-1: config 0 descriptor?? [ 804.285888][T14687] binder: BINDER_SET_CONTEXT_MGR already set [ 804.292049][T14687] binder: 14686:14687 ioctl 4018620d 20004a80 returned -16 [ 804.302361][ T8] ati_remote2 3-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 804.396111][T14690] hub 2-0:1.0: USB hub found [ 804.403289][T14690] hub 2-0:1.0: 1 port detected [ 805.129631][ T8] usb 3-1: USB disconnect, device number 34 [ 805.462694][T14698] hub 2-0:1.0: USB hub found [ 805.468246][T14698] hub 2-0:1.0: 1 port detected [ 806.196749][T14706] netlink: 'syz.3.2515': attribute type 10 has an invalid length. [ 806.206729][T14706] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.215061][T14706] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.879222][T14706] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.886741][T14706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.897290][T14706] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.904458][T14706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.007118][T14722] hub 2-0:1.0: USB hub found [ 807.013260][T14722] hub 2-0:1.0: 1 port detected [ 807.429881][T14706] team0: Port device bridge0 added [ 807.599000][ T29] audit: type=1400 audit(1733099983.650:2191): avc: denied { remount } for pid=14720 comm="syz.4.2517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 807.874909][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 808.989230][ T29] audit: type=1400 audit(1733099984.900:2192): avc: denied { block_suspend } for pid=14731 comm="syz.1.2520" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.010887][ T29] audit: type=1400 audit(1733099984.900:2193): avc: denied { read write } for pid=14731 comm="syz.1.2520" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 809.034408][ T29] audit: type=1400 audit(1733099984.900:2194): avc: denied { open } for pid=14731 comm="syz.1.2520" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 809.057666][ T29] audit: type=1400 audit(1733099984.900:2195): avc: denied { map } for pid=14731 comm="syz.1.2520" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 809.081035][ T29] audit: type=1400 audit(1733099984.900:2196): avc: denied { execute } for pid=14731 comm="syz.1.2520" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 809.108493][T14738] hub 2-0:1.0: USB hub found [ 809.113271][T14738] hub 2-0:1.0: 1 port detected [ 809.125080][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 809.525287][ T29] audit: type=1400 audit(1733099985.580:2197): avc: denied { create } for pid=14731 comm="syz.1.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 809.875626][ T29] audit: type=1400 audit(1733099985.920:2198): avc: denied { ioctl } for pid=14747 comm="syz.3.2524" path="socket:[40430]" dev="sockfs" ino=40430 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 809.901534][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.911004][ T8] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 810.085485][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 810.105631][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 810.116012][ T8] usb 2-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 810.128354][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 810.137829][ T8] usb 2-1: config 1 has no interface number 1 [ 810.144372][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 810.157592][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 810.180113][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 810.195309][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 810.213502][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.227676][ T8] usb 2-1: Product: syz [ 810.246559][ T8] usb 2-1: Manufacturer: syz [ 810.277450][ T8] usb 2-1: SerialNumber: syz [ 810.540545][ T29] audit: type=1400 audit(1733099986.600:2199): avc: denied { getopt } for pid=14752 comm="syz.3.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 810.619055][ T29] audit: type=1400 audit(1733099986.630:2200): avc: denied { write } for pid=14731 comm="syz.1.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 810.660325][ T8] hub 2-1:1.0: bad descriptor, ignoring hub [ 810.673902][ T8] hub 2-1:1.0: probe with driver hub failed with error -5 [ 810.696406][ T8] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 810.851419][ T8] usb 2-1: USB disconnect, device number 29 [ 811.756134][T14358] udevd[14358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 811.901155][T11465] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 812.753602][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 812.753620][ T29] audit: type=1326 audit(1733099988.640:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496c980849 code=0x7fc00000 [ 812.783095][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.869215][ T29] audit: type=1326 audit(1733099988.780:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f496c980849 code=0x7fc00000 [ 812.944618][T11465] usb 5-1: unable to get BOS descriptor or descriptor too short [ 812.963770][T11465] usb 5-1: not running at top speed; connect to a high speed hub [ 813.006775][T11465] usb 5-1: config 15 has an invalid interface number: 168 but max is 0 [ 813.013013][ T29] audit: type=1400 audit(1733099989.060:2205): avc: denied { ioctl } for pid=14778 comm="syz.3.2531" path="socket:[40460]" dev="sockfs" ino=40460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 813.055972][T11465] usb 5-1: config 15 has no interface number 0 [ 813.109398][T11465] usb 5-1: config 15 interface 168 has no altsetting 0 [ 813.190792][T11465] usb 5-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=f0.ca [ 813.200126][T11465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.208343][T11465] usb 5-1: Product: syz [ 813.213473][T11465] usb 5-1: Manufacturer: syz [ 813.218081][T11465] usb 5-1: SerialNumber: syz [ 813.403184][ T973] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 813.563201][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 813.571836][ T973] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 813.580591][ T973] usb 2-1: config 0 has no interface number 0 [ 813.596252][ T973] usb 2-1: config 0 interface 58 has no altsetting 0 [ 813.616547][ T973] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 813.628296][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.641063][ T973] usb 2-1: Product: syz [ 813.653457][ T973] usb 2-1: Manufacturer: syz [ 813.660100][ T973] usb 2-1: SerialNumber: syz [ 813.671540][ T973] usb 2-1: config 0 descriptor?? [ 813.857184][T11465] dvb-usb: found a 'Gigabyte U8000-RH' in warm state. [ 813.866164][T11465] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 813.892549][ T973] f81534a_ctrl 2-1:0.58: failed to set register 0x116: -5 [ 813.899917][ T973] f81534a_ctrl 2-1:0.58: failed to enable ports: -5 [ 813.912926][ T973] f81534a_ctrl 2-1:0.58: probe with driver f81534a_ctrl failed with error -5 [ 813.936160][T11465] dvbdev: DVB: registering new adapter (Gigabyte U8000-RH) [ 813.957628][T11465] usb 5-1: media controller created [ 813.982998][T11465] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 814.013462][ T973] usb 2-1: USB disconnect, device number 30 [ 814.527681][ T29] audit: type=1400 audit(1733099990.570:2206): avc: denied { mount } for pid=14799 comm="syz.2.2537" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 814.550046][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.550185][T11465] DVB: Unable to find symbol dib7000p_attach() [ 814.550197][T11465] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 815.113260][T11465] rc_core: IR keymap rc-dib0700-rc5 not found [ 815.120948][T11465] Registered IR keymap rc-empty [ 815.136457][T11465] dvb-usb: could not initialize remote control. [ 815.142777][T11465] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 815.196881][T11465] usb 5-1: USB disconnect, device number 24 [ 815.240850][T11465] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 815.414031][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2538'. [ 815.508203][ T29] audit: type=1400 audit(1733099991.540:2207): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 816.415705][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 816.425715][T14828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2545'. [ 816.520516][ T29] audit: type=1400 audit(1733099992.560:2208): avc: denied { write } for pid=14829 comm="syz.0.2546" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 816.555113][ T29] audit: type=1400 audit(1733099992.620:2209): avc: denied { ioctl } for pid=14829 comm="syz.0.2546" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 817.108790][T14846] hub 2-0:1.0: USB hub found [ 817.114473][T14846] hub 2-0:1.0: 1 port detected [ 817.142529][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'. [ 819.553429][ T973] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 819.883232][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.906492][ T973] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 820.031685][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 820.425248][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.438260][ T973] usb 5-1: config 0 descriptor?? [ 820.904059][ T973] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 820.913366][ T5876] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 820.924614][ T973] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input36 [ 821.011435][ T973] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 821.065344][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.090189][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.112124][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 821.154063][ T5876] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 821.173187][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.197212][ T5876] usb 2-1: config 0 descriptor?? [ 821.623771][ T5876] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 821.632138][ T5876] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 821.646835][ T5876] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 821.785555][T14893] binder_alloc: 14892: binder_alloc_buf, no vma [ 821.990676][T14889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 823.311130][ T51] usb 2-1: USB disconnect, device number 31 [ 823.561936][T11465] usb 5-1: USB disconnect, device number 25 [ 824.337962][T14923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2575'. [ 824.904534][T14931] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 826.077661][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2579'. [ 827.223334][ T973] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 827.434386][T14962] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 827.913306][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 827.922151][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.934664][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 827.956312][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 827.968265][ T973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 827.978497][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.999351][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 828.005253][ T29] audit: type=1400 audit(1733100004.070:2210): avc: denied { write } for pid=14963 comm="syz.0.2587" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 828.010550][ T973] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 828.263587][T14965] overlayfs: missing 'workdir' [ 828.503137][ T973] usb 5-1: Manufacturer: syz [ 828.529845][ T973] usb 5-1: config 0 descriptor?? [ 828.731977][T14973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14973 comm=syz.2.2589 [ 828.745179][ T29] audit: type=1400 audit(1733100004.810:2211): avc: denied { read } for pid=14971 comm="syz.2.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 829.454325][ T973] rc_core: IR keymap rc-hauppauge not found [ 829.460368][ T973] Registered IR keymap rc-empty [ 829.465432][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 829.503139][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 829.646232][ T973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 829.701356][T14953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.702182][ T973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 829.710242][T14953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.177435][T14984] hub 2-0:1.0: USB hub found [ 830.182318][T14984] hub 2-0:1.0: 1 port detected [ 830.203218][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 831.044787][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 831.063182][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 831.089191][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 831.245615][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 831.343852][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'. [ 831.877040][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 831.905830][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 831.923153][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 831.946462][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 832.006122][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 832.046246][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 832.127396][ T973] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 832.137657][ T973] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 832.240343][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 832.249663][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2595'. [ 832.345953][T15009] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 832.803290][ T973] usb 5-1: USB disconnect, device number 26 [ 832.877191][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2598'. [ 833.370584][T15015] hub 5-0:1.0: USB hub found [ 833.389284][T15015] hub 5-0:1.0: 1 port detected [ 833.870424][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2601'. [ 834.113073][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 834.122490][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 837.085731][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'. [ 837.095189][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2607'. [ 837.777266][T15055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2610'. [ 838.207572][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2615'. [ 838.475405][ T973] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 838.483055][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 838.754271][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 838.759685][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.770626][ T973] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 838.779999][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.789034][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.809895][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.823117][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 838.833487][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 838.843319][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.861293][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 838.874332][ T973] usb 5-1: config 0 descriptor?? [ 838.900359][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 838.914541][T15080] syz.1.2616 (15080): drop_caches: 2 [ 838.940352][ T9] usb 3-1: Manufacturer: syz [ 838.969865][ T9] usb 3-1: config 0 descriptor?? [ 839.324755][T15085] hub 2-0:1.0: USB hub found [ 839.330084][T15085] hub 2-0:1.0: 1 port detected [ 839.508189][T15067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.839708][ T9] rc_core: IR keymap rc-hauppauge not found [ 839.845925][ T9] Registered IR keymap rc-empty [ 839.848233][T15067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.850944][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.867327][ T973] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 839.877733][ T973] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0015/input/input39 [ 839.891026][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.949549][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 839.962698][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 840.046717][ T973] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 840.060062][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.123213][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.143387][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.163285][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.183196][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.204077][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.233855][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.392277][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.424814][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.443608][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.463499][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.571530][T15090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 840.598632][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 840.613957][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 840.634694][T15090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 840.686989][ T9] usb 3-1: USB disconnect, device number 35 [ 842.039904][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2623'. [ 947.083051][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 947.090035][ C1] rcu: 0-...!: (17 ticks this GP) idle=0b74/1/0x4000000000000000 softirq=57070/57072 fqs=15 [ 947.101607][ C1] rcu: (detected by 1, t=10505 jiffies, g=54789, q=72 ncpus=2) [ 947.109259][ C1] Sending NMI from CPU 1 to CPUs 0: [ 947.109288][ C0] NMI backtrace for cpu 0 [ 947.109302][ C0] CPU: 0 UID: 0 PID: 15111 Comm: syz.2.2623 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 947.109325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 947.109336][ C0] RIP: 0010:hlock_class+0x41/0x130 [ 947.109371][ C0] Code: ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e da 00 00 00 0f b7 5b 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 <48> 8d 3c c5 c0 1c e5 96 e8 52 32 87 00 48 0f a3 1d 2a 5a 6f 15 73 [ 947.109389][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000003 [ 947.109405][ C0] RAX: 0000000000000001 RBX: 000000000000006c RCX: ffffffff81767842 [ 947.109417][ C0] RDX: 1ffff1100b4f5a70 RSI: 0000000000000008 RDI: ffff88805a7ad380 [ 947.109430][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dca398 [ 947.109442][ C0] R10: ffffffff96e51cc7 R11: 0000000000000001 R12: ffffed100b4f5a6b [ 947.109454][ C0] R13: ffff88805a7ac880 R14: 0000000000000002 R15: ffff88805a7ad388 [ 947.109467][ C0] FS: 00007f2fa58fe6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 947.109487][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.109500][ C0] CR2: 00007f2fa58ddd58 CR3: 000000001b7d8000 CR4: 00000000003526f0 [ 947.109521][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 947.109532][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 947.109545][ C0] Call Trace: [ 947.109551][ C0] [ 947.109561][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 947.109586][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 947.109605][ C0] ? nmi_handle+0x1ac/0x5d0 [ 947.109626][ C0] ? hlock_class+0x41/0x130 [ 947.109653][ C0] ? default_do_nmi+0x6a/0x160 [ 947.109672][ C0] ? exc_nmi+0x170/0x1e0 [ 947.109689][ C0] ? end_repeat_nmi+0xf/0x53 [ 947.109719][ C0] ? __lock_acquire+0xf32/0x3c40 [ 947.109740][ C0] ? hlock_class+0x41/0x130 [ 947.109767][ C0] ? hlock_class+0x41/0x130 [ 947.109795][ C0] ? hlock_class+0x41/0x130 [ 947.109822][ C0] [ 947.109827][ C0] [ 947.109833][ C0] __lock_acquire+0x13a6/0x3c40 [ 947.109858][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 947.109883][ C0] lock_acquire.part.0+0x11b/0x380 [ 947.109904][ C0] ? debug_object_activate+0x149/0x4a0 [ 947.109929][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 947.109952][ C0] ? rcu_is_watching+0x12/0xc0 [ 947.109978][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 947.110007][ C0] ? debug_object_activate+0x149/0x4a0 [ 947.110030][ C0] ? lock_acquire+0x2f/0xb0 [ 947.110049][ C0] ? debug_object_activate+0x149/0x4a0 [ 947.110073][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 947.110095][ C0] ? debug_object_activate+0x149/0x4a0 [ 947.110118][ C0] debug_object_activate+0x149/0x4a0 [ 947.110141][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 947.110163][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 947.110189][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 947.110214][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 947.110241][ C0] ? __pfx_advance_sched+0x10/0x10 [ 947.110261][ C0] enqueue_hrtimer+0x25/0x3c0 [ 947.110288][ C0] __hrtimer_run_queues+0x903/0xae0 [ 947.110318][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 947.110344][ C0] ? read_tsc+0x9/0x20 [ 947.110371][ C0] ? rcu_is_watching+0x12/0xc0 [ 947.110399][ C0] hrtimer_interrupt+0x392/0x8e0 [ 947.110432][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 947.110456][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 947.110480][ C0] [ 947.110485][ C0] [ 947.110491][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 947.110525][ C0] RIP: 0010:lock_is_held_type+0x45/0x150 [ 947.110550][ C0] Code: 7d 35 05 85 c9 0f 84 dd 00 00 00 65 8b 05 4b d2 d8 74 85 c0 0f 85 ce 00 00 00 65 4c 8b 25 73 1f da 74 41 8b 94 24 dc 0a 00 00 <85> d2 0f 85 b6 00 00 00 48 89 fd 41 89 f6 9c 8f 04 24 fa 48 c7 c7 [ 947.110567][ C0] RSP: 0018:ffffc9001b787c00 EFLAGS: 00000246 [ 947.110582][ C0] RAX: 0000000000000000 RBX: 1ffff920036f0f8a RCX: 0000000000000001 [ 947.110594][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e1bb4a0 [ 947.110606][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 947.110617][ C0] R10: 0000000000000000 R11: 000000000007fffc R12: ffff88805a7ac880 [ 947.110629][ C0] R13: 00000000ffffffff R14: 00000000201ae240 R15: ffff88802378b340 [ 947.110651][ C0] __might_resched+0x473/0x5e0 [ 947.110675][ C0] ? lock_acquire+0x2f/0xb0 [ 947.110695][ C0] ? __pfx___might_resched+0x10/0x10 [ 947.110718][ C0] ? __might_fault+0xe3/0x190 [ 947.110746][ C0] do_recvmmsg+0x519/0x740 [ 947.110766][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 947.110785][ C0] ? read_tsc+0x9/0x20 [ 947.110810][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 947.110837][ C0] ? handle_softirqs+0x5bb/0x8f0 [ 947.110860][ C0] ? lockdep_softirqs_on+0x221/0x340 [ 947.110883][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 947.110904][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 947.110925][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 947.110950][ C0] do_syscall_64+0xcd/0x250 [ 947.110976][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.111002][ C0] RIP: 0033:0x7f2fa4b80849 [ 947.111018][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.111036][ C0] RSP: 002b:00007f2fa58fe058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 947.111053][ C0] RAX: ffffffffffffffda RBX: 00007f2fa4d46080 RCX: 00007f2fa4b80849 [ 947.111066][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 947.111078][ C0] RBP: 00007f2fa4bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 947.111090][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 947.111102][ C0] R13: 0000000000000000 R14: 00007f2fa4d46080 R15: 00007ffdd3ee4c48 [ 947.111120][ C0] [ 947.111282][ C1] rcu: rcu_preempt kthread starved for 10430 jiffies! g54789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 947.691818][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 947.701788][ C1] rcu: RCU grace-period kthread stack dump: [ 947.707672][ C1] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 947.719457][ C1] Call Trace: [ 947.722734][ C1] [ 947.725687][ C1] __schedule+0xe58/0x5ad0 [ 947.730128][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 947.735359][ C1] ? __pfx___schedule+0x10/0x10 [ 947.740228][ C1] ? schedule+0x298/0x350 [ 947.744563][ C1] ? __pfx_lock_release+0x10/0x10 [ 947.749603][ C1] ? lock_acquire+0x2f/0xb0 [ 947.754111][ C1] ? schedule+0x1fd/0x350 [ 947.758449][ C1] schedule+0xe7/0x350 [ 947.762541][ C1] schedule_timeout+0x124/0x280 [ 947.767399][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 947.772778][ C1] ? __pfx_process_timeout+0x10/0x10 [ 947.778081][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 947.783894][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 947.789366][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 947.794138][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 947.799430][ C1] ? rcu_gp_init+0xc82/0x1630 [ 947.804121][ C1] ? lock_acquire+0x2f/0xb0 [ 947.808627][ C1] ? finish_swait+0xc5/0x280 [ 947.813227][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 947.819043][ C1] rcu_gp_kthread+0x271/0x380 [ 947.823730][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 947.828944][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 947.834155][ C1] ? __kthread_parkme+0x148/0x220 [ 947.839193][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 947.844404][ C1] kthread+0x2c1/0x3a0 [ 947.848487][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 947.853694][ C1] ? __pfx_kthread+0x10/0x10 [ 947.858297][ C1] ret_from_fork+0x45/0x80 [ 947.862720][ C1] ? __pfx_kthread+0x10/0x10 [ 947.867321][ C1] ret_from_fork_asm+0x1a/0x30 [ 947.872111][ C1] [ 947.875132][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 947.881448][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 947.891778][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 947.901835][ C1] Workqueue: events_unbound toggle_allocation_gate [ 947.908353][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 947.915041][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7a 0d 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 947.934649][ C1] RSP: 0018:ffffc90000ab7998 EFLAGS: 00000293 [ 947.940718][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818df7cc [ 947.948690][ C1] RDX: ffff888020eaa440 RSI: ffffffff818df7a6 RDI: 0000000000000005 [ 947.956663][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 947.964632][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 947.972602][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 947.980573][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 947.989504][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.996093][ C1] CR2: 00007f4079d449de CR3: 000000000df7e000 CR4: 00000000003526f0 [ 948.004066][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 948.012039][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 948.020010][ C1] Call Trace: [ 948.023291][ C1] [ 948.026135][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 948.032477][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 948.037698][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 948.043182][ C1] ? timekeeping_advance+0x70a/0xa60 [ 948.048477][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 948.054126][ C1] ? __asan_memcpy+0x3c/0x60 [ 948.058730][ C1] ? rcu_is_watching+0x12/0xc0 [ 948.063508][ C1] ? update_process_times+0x178/0x2d0 [ 948.068887][ C1] ? __pfx_update_process_times+0x10/0x10 [ 948.074620][ C1] ? update_wall_time+0x1c/0x40 [ 948.079478][ C1] ? tick_nohz_handler+0x376/0x530 [ 948.084608][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 948.090080][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 948.095476][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 948.101206][ C1] ? read_tsc+0x9/0x20 [ 948.105298][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 948.110436][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 948.116599][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 948.122412][ C1] [ 948.125345][ C1] [ 948.128276][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 948.134453][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 948.140533][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 948.146610][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 948.152710][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 948.158807][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 948.163858][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 948.168906][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 948.174042][ C1] text_poke_bp_batch+0x22b/0x760 [ 948.179094][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 948.184665][ C1] ? __jump_label_patch+0x1db/0x400 [ 948.189888][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 948.196148][ C1] text_poke_finish+0x30/0x40 [ 948.200837][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 948.206829][ C1] jump_label_update+0x1d7/0x400 [ 948.211786][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 948.217696][ C1] static_key_enable+0x1a/0x20 [ 948.222475][ C1] toggle_allocation_gate+0xfc/0x260 [ 948.227767][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 948.233758][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 948.238982][ C1] ? process_one_work+0x921/0x1ba0 [ 948.244103][ C1] ? lock_acquire+0x2f/0xb0 [ 948.248611][ C1] ? process_one_work+0x921/0x1ba0 [ 948.253735][ C1] process_one_work+0x9c5/0x1ba0 [ 948.258692][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 948.264859][ C1] ? __pfx_process_one_work+0x10/0x10 [ 948.270235][ C1] ? rcu_is_watching+0x12/0xc0 [ 948.275017][ C1] ? assign_work+0x1a0/0x250 [ 948.279617][ C1] worker_thread+0x6c8/0xf00 [ 948.284229][ C1] ? __kthread_parkme+0x148/0x220 [ 948.289265][ C1] ? __pfx_worker_thread+0x10/0x10 [ 948.294382][ C1] kthread+0x2c1/0x3a0 [ 948.298459][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 948.303666][ C1] ? __pfx_kthread+0x10/0x10 [ 948.308267][ C1] ret_from_fork+0x45/0x80 [ 948.312685][ C1] ? __pfx_kthread+0x10/0x10 [ 948.317289][ C1] ret_from_fork_asm+0x1a/0x30 [ 948.322082][ C1]