last executing test programs: 11.940331675s ago: executing program 3 (id=752): mkdirat(0xffffffffffffff9c, 0x0, 0x0) close(0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "04db10a087baf9c7ee5e09892b3bea91"}}}, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5760, &(0x7f0000000180)) openat(r4, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x128, 0x8, 0x7f02ae, 0x0, 0x200, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x10000, 0x8, 0x126d6, 0x8b12, 0x6, 0x4, 0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x7}, {0x0, 0x85, 0x4}, 0xe, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 10.739133354s ago: executing program 3 (id=756): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000040050b661800000000000109022400010000000009040000ff03000000092100000001220700090581030800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="003b0800eaff070da756915ea7df"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10.020745982s ago: executing program 2 (id=760): openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200a81) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x4, 0xb0}, &(0x7f0000000540), &(0x7f0000000100)) pipe(&(0x7f0000002480)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) readv(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x10041) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000180)=0x82, 0x4) 8.946194141s ago: executing program 2 (id=763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, 0x0, 0x0) 8.794679924s ago: executing program 2 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800000000"], 0x54}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="100026bd7000fbdbdf25010000000c000180070006006c630000040002800800050009000000280001800800060077727200080009001a00000014000300ac14143500000000000000100000000008000600ab08000020000180080008000600000008000b00736970000c000700210000000400000008000400430700002800018014000300ff010000000000000000000000000001080009003580000008000b00736970000800050005000000"], 0xb4}}, 0x800) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x9) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x54, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x800}}]}, 0x54}, 0x1, 0x0, 0x0, 0x802}, 0x8000) unshare(0x68060200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000320001002abd7000fedbdb25040000000800040002000000"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 8.738217501s ago: executing program 1 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0xfffffdd2}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) lseek(0xffffffffffffffff, 0x300000002, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000003180)=ANY=[@ANYBLOB="1800000008000000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185f000006000000000000000000000018300000020000000000000000000000850000008b000000b510f0ff0800000085100000faffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000b4b7f50d5382ff24169071ad061a2930a9d867b0034b46de13dcd93f57cc3cb1aefc3ab21d65c236597b09d9ddc9ddb8b7402ccddf2febd2a163bb794ab594b7cb75bd7790ca08eeaf6ddcb2e75c8e730d4f0298f21e2ac5f2f92443ff4da8ecb52caacdfb063d322e6164f1f99bdfb8de99e356"], &(0x7f0000000300)='GPL\x00', 0x6, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x0, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x3, 0x62, 0x80}, 0x10, 0x27c95, r3, 0x2, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x5, 0x5, 0x3}, {0x4, 0x4, 0x10, 0xc}], 0x10, 0x64f5, @void, @value}, 0x94) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100f}) syz_open_dev$sg(0x0, 0x0, 0x802) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(r8, 0x0, 0x0, 0x867, 0x8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x3, 0x80000001, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 6.602803925s ago: executing program 1 (id=767): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) r4 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1, 0x1dc}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000b00)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x78, 0x0, 0x3, {0x5, 0xe, 0x1000000, {0x1, 0x5, 0x28, 0x0, 0x2, 0x6, 0x1ff, 0x200, 0x917b, 0x1000, 0x3, r2, r3, 0x8, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.323326145s ago: executing program 2 (id=768): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"ce758f3d", 0x9de, 0xfd, 0x1, 0xffff0000, 0x5, "ed79cd081361921fbe4fa12d6cd66c", "84ed60c5", "5814ec50", "9157e069", ["adf93ed8bb360ef68d6c12b7", "bfc662c6ecf6d94895a3cee0", "c8329cdc71e7130b431c1172", "be8e6b4a2c08f4ba463caaa9"]}) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0xf9) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x5, 0x0, 0x4, 0x0, 0x0, [{{r1}, 0xd5}, {{r1}, 0x3}, {{r0}, 0x7}, {{r1}, 0x1}]}) syz_usb_connect$uac1(0x5, 0xa5, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x8, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x81, 0x1, 0x7, 0xfd, "f89383", 'A'}, @as_header={0x7, 0x24, 0x1, 0x40, 0x1, 0x1002}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0xe, 0x0, "ff"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x6, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x5, 0x9, {0x7, 0x25, 0x1, 0x2, 0x6, 0x32}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x1, "a47846ed7b7a46b8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xa, 0x6, 0x8, {0x7, 0x25, 0x1, 0x1, 0x92, 0x1}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x5, 0x5, 0x5, 0x8, 0xa}, 0x59, &(0x7f00000002c0)={0x5, 0xf, 0x59, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x7, 0x3, 0x7ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0xaa, 0xc, 0xff, 0xfff, 0x9c}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "e9efd10180dc7c40fb1387cc67f26be0"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xff0f, 0x6, [0xff00, 0xf, 0x0, 0xc0, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x3, 0xd, 0xf7, 0x27, 0x70}]}, 0xa, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1801}}, {0xae, &(0x7f00000003c0)=@string={0xae, 0x3, "a031e982ecd2869f425c9adea9be0094501a8aed58824d1c38e874b7b5c4d9de3e6708a5a4ed138e6a200eae39c6a5c43a23edc88b3cbeb6ba46f1d364a0e23b1f9b8c0e1742775f243a87f206d960c6dad43d5bfba7d7ee5dc6908cf16893cd811a832490f1269af25d677a7df4211d5300aa85f9d7d543ff0e7f96a44c82065a759a2004a8177a2d49d3d62562cf49ea6fe111857614b60726ac9959e435d092ce7e9966c107cde94c124c"}}, {0x5, &(0x7f0000000480)=@string={0x5, 0x3, "51ab95"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x849}}, {0xe3, &(0x7f0000000500)=@string={0xe3, 0x3, "887f91a79f1438ee0c6c94128cba5a9c5cc4123ee68888cd8dd69d2ae5450186b0753af8597c5860fb1b8d622e05da042d6691a01938bc9d10f6160588868313c3eb47d9be653c3d6c63dc726a8b6d891a71bb5f6be6e795d725296949e402d1b516425d3b40cf03bd11e4315a49665a7ce59a546658a4630122591d093555e477da5d0d78652d09e18576ec484e34156a969819eba66f34141e82ab514a22a453c97c42bb72c6d86bd8da5bb4a427558815bd080be26bb0594c4d9c380b5434401f7df435bf71b95b9f3bf913f01e5b49dffa17aa03a5c041a91eaba394ca0cce"}}, {0x1e, &(0x7f0000000600)=@string={0x1e, 0x3, "081fe9543d5879d21e36a0a48311749967fadbd7c96c19e425085f71"}}, {0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "7a93b66d348e4e1d05abe02fa7e3054074d7fc3e969268379b97704cdea5d8f468882ea9dbeb35180c3b3c15f1d964ff9a6a65058f970df2478d659e6d98dab48eb5288183ff613c1c66162b5c79cc46ed3b5cdaf560d6176952884da67d0d105f2f6cf6c9a085db22a129b94a40fea39664abdaefc721a597e93720dbfde56378fb869f311a2a3920d6012c10"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x500a}}, {0x16, &(0x7f0000000740)=@string={0x16, 0x3, "7772057441d8ec3bbf4f9e0cda2d9f665b8cc781"}}]}) listen(0xffffffffffffffff, 0x400) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000840)={@desc={0x1, 0x0, @desc1}}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000009c0)={'gretap0\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x20, 0x10, 0x9, 0x401, {{0x14, 0x4, 0x2, 0x8, 0x50, 0x68, 0x0, 0x43, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x21, 0x2, [{0x0, 0xb, "2d65c6342e05db9d36"}, {0x2, 0x2}, {0x1, 0xe, "9fb1f10e09f5a126d2fd7bd7"}]}, @timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x8, [{@broadcast, 0x3}, {@rand_addr=0x64010100, 0x7}]}, @noop, @ra={0x94, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x94, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x44010) bind$x25(r0, &(0x7f0000000b40)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000b80)='cachefiles_mkdir\x00', r0}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000c00)={0x7, 0xfff, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000dc0)={@id={0x2, 0x0, @b}}) gettid() openat$mixer(0xffffffffffffff9c, &(0x7f0000000e00), 0x80000, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000001240)={&(0x7f0000000e40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/81, 0x51}, {&(0x7f0000000f80)=""/114, 0x72}, {&(0x7f0000001000)=""/255, 0xff}], 0x4, &(0x7f0000001140)=""/225, 0xe1}, 0x40010065) sendto(r1, &(0x7f0000001280)="ef27184ded200648b6a9a66a94f04575132908955221a3c3a96f20e000c9b960fba11f5f129a959a3caee7b3db34a43c59b9569cd001eb05730f89d78673bc59bc7bc410576b02e8c9d6557d16b75049e726ebee673ee1ff1ab51defc8fa090e1f414486bed2ffa392265b21b98e161d87455bd016016086c650c372e6911ec11d97d240242e99822bf6060884ffb18867e7437bc330f47e6892670d52b65bc017557b7b78149654", 0xa8, 0x20000841, &(0x7f0000001340)=@isdn={0x22, 0x2, 0x7, 0x6, 0x2}, 0x80) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xdc, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfc}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xcce}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xadab}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3a6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x488c0}, 0x40) socket$inet(0x2, 0x6, 0x7) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001580)=""/24) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000015c0), 0x442000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x20010, r7, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) 6.010135775s ago: executing program 3 (id=770): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r0, 0x5, &(0x7f0000000040)={0x7, 0x2}, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0x2, &(0x7f0000000080)={0x6, 0x7}, &(0x7f00000000c0)) setrlimit(0xb, &(0x7f0000000100)={0x80, 0x10000}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0xc01, 0x0) write$UHID_INPUT(r2, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000011c0)={'rose0\x00', 0x7fffffffffffffff, 0x2}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001300)) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[@ANYBLOB="7000000002060100000000060000000000697000000005000400000000000500040002000000240007800c00028008000140000000000c000180080001400200000000000000000000000d0003006c6973743a736574000000000500010006000000df6608d3c0d8614aa3"], 0x70}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)=@deltaction={0x1dc, 0x31, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7ffe}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3bff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe434}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9c5}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x66}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x80}, 0x11) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000015c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200026bd7000ffdbdf250f0008000a0200000180c20000b1058e4a42b920262faa548da02ead89f160afda57ed9255230895d66ce9bb11928d4e143a135e1d68447c1e"], 0x28}, 0x1, 0x0, 0x0, 0x40dc}, 0x10) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000000)=""/125, 0x7d}, {&(0x7f0000000200)=""/150, 0x96}], 0x3, 0x9, 0x925, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000790fe9000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x18, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="f0000000110001000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000020001000000000000000000"], 0xf0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000001380), 0xc, 0x20600) pipe2$watch_queue(&(0x7f0000007780)={0xffffffffffffffff}, 0x80) pselect6(0x40, &(0x7f0000008d40)={0x7, 0x7, 0xdb0, 0x3, 0xd5, 0x7fffffffffffffff, 0x0, 0xf}, &(0x7f0000008d80)={0x1, 0x7ff, 0x100000000, 0x6, 0x3, 0x3, 0x3c77, 0x10000}, &(0x7f0000008dc0)={0xfd, 0x5, 0x2, 0xa, 0x3, 0xb, 0x7, 0x4}, &(0x7f0000008e00)={0x0, 0x989680}, &(0x7f0000008e80)={&(0x7f0000008e40)={[0x6]}, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000013c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000001340)=r9) 5.962005686s ago: executing program 0 (id=771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4c20, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000200000808000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x4, 0x0, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f00000001c0)=0xf3, 0x4) 5.80058918s ago: executing program 0 (id=772): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xdc) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f00000001c0)=[{0x0, 0xffff}, {0x0, 0xfff3, 0x800}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x310) 5.799226469s ago: executing program 3 (id=773): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffffe]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='btrfs_find_cluster\x00', r3, 0x0, 0x2}, 0xffffffffffffff3c) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec300070007ab08001b000000f0ffff", 0x1b) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) close(r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80040}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d81201"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 4.774592534s ago: executing program 4 (id=775): openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200a81) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x4, 0xb0}, &(0x7f0000000540), &(0x7f0000000100)) pipe(&(0x7f0000002480)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) readv(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000180)=0x82, 0x4) 4.626611777s ago: executing program 1 (id=776): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x3, 0xffffffffffffffb4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48084}, 0x28d4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x110}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='net/netstat\x00') read$FUSE(r4, &(0x7f0000003240)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r3], 0x50) 3.795601962s ago: executing program 0 (id=777): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x5a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffff", 0x45}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.793208255s ago: executing program 0 (id=778): socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 3.72390414s ago: executing program 4 (id=779): chmod(&(0x7f0000000000)='./file0\x00', 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1ff, 0x0, 0x0, 0x54d5, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) 3.645058514s ago: executing program 1 (id=780): syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008050}, 0x44880) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote, 0x0, 0x56, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x7, 0x3, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x4, 0x0, 0x0, 0x40000, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000140)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{}, {0x40, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {}, {}, {0xff}]}}) ioperm(0x0, 0x401, 0xfffffffffffffffc) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x4, 0x7}) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) 3.574882359s ago: executing program 0 (id=781): get_mempolicy(0x0, &(0x7f00000000c0), 0x6, &(0x7f0000ffb000/0x3000)=nil, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.514246654s ago: executing program 4 (id=782): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x3, 0xffffffffffffffb4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48084}, 0x28d4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x110}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='net/netstat\x00') read$FUSE(r5, &(0x7f0000003240)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r3], 0x50) 3.51353847s ago: executing program 0 (id=783): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000002060500000000000000000000000f00"], 0x14}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x6, 0x0) 2.411338289s ago: executing program 3 (id=784): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x46, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x5a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffff", 0x45}], 0x1) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r6, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x14, 0x4, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x802}, @CTA_LABELS_MASK={0x14, 0x17, [0x8a, 0xe9, 0x200, 0x44c]}]}, 0x8c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 2.388776592s ago: executing program 4 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0xa8, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffffffffffff8, 0x1, {0x7fffffff, 0x8}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0x2, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xa8}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2.154277646s ago: executing program 3 (id=786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003a40)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 1.950795046s ago: executing program 2 (id=787): memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) syz_open_dev$evdev(0x0, 0x0, 0x121c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @local, 0xfffffffc}}, {{0xa, 0x0, 0xffffffff, @loopback, 0x4082}}}, 0x108) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}]}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 1.227552429s ago: executing program 1 (id=788): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) recvfrom(r6, 0x0, 0x0, 0x3e8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x10, &(0x7f0000000300)={0xa, 0x4e22, 0x3, @remote, 0x7}, 0x1c) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 1.225485171s ago: executing program 4 (id=789): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) tee(r1, r0, 0xa03, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 172.51818ms ago: executing program 1 (id=790): openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200a81) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x4, 0xb0}, &(0x7f0000000540), &(0x7f0000000100)) pipe(&(0x7f0000002480)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) readv(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000180)=0x82, 0x4) 76.46654ms ago: executing program 4 (id=791): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r4}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x18, 0x3a, 0x229, 0x9e, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) 0s ago: executing program 2 (id=792): socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) kernel console output (not intermixed with test programs): pid=7205 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.059379][ T5867] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 195.079818][ T30] audit: type=1400 audit(1741845951.945:515): avc: denied { connect } for pid=7205 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.148001][ T7215] ./file0: Can't lookup blockdev [ 195.249357][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 195.268921][ T7217] FAULT_INJECTION: forcing a failure. [ 195.268921][ T7217] name failslab, interval 1, probability 0, space 0, times 1 [ 195.337231][ T5867] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 195.397934][ T30] audit: type=1400 audit(1741845951.975:516): avc: denied { write } for pid=7205 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.437140][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.449458][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.1.365 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 195.449482][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.449492][ T7217] Call Trace: [ 195.449497][ T7217] [ 195.449504][ T7217] dump_stack_lvl+0x16c/0x1f0 [ 195.449533][ T7217] should_fail_ex+0x50a/0x650 [ 195.449559][ T7217] ? fs_reclaim_acquire+0xae/0x150 [ 195.449585][ T7217] should_failslab+0xc2/0x120 [ 195.449604][ T7217] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 195.449619][ T7217] ? __pfx___might_resched+0x10/0x10 [ 195.449645][ T7217] ? __anon_vma_prepare+0xae/0x5e0 [ 195.449668][ T7217] __anon_vma_prepare+0xae/0x5e0 [ 195.449688][ T7217] expand_downwards+0xcf0/0xfa0 [ 195.449714][ T7217] ? __pfx_expand_downwards+0x10/0x10 [ 195.449740][ T7217] ? __pfx_find_vma+0x10/0x10 [ 195.449763][ T7217] ? lock_mm_and_find_vma+0x20a/0x6e0 [ 195.449794][ T7217] lock_mm_and_find_vma+0x2b3/0x6e0 [ 195.449821][ T7217] do_user_addr_fault+0x2b5/0x13f0 [ 195.449851][ T7217] exc_page_fault+0x5c/0xc0 [ 195.449873][ T7217] asm_exc_page_fault+0x26/0x30 [ 195.449895][ T7217] RIP: 0010:filldir+0x2b7/0x5f0 [ 195.449917][ T7217] Code: e8 be 9a 85 ff 0f 01 cb 0f ae e8 48 8b 04 24 49 89 47 08 e8 ab 9a 85 ff 4c 8b 7c 24 30 48 8b 44 24 10 49 89 07 e8 99 9a 85 ff <66> 45 89 6f 10 e8 8f 9a 85 ff 49 63 f5 0f b6 7c 24 1c 48 89 34 24 [ 195.449932][ T7217] RSP: 0018:ffffc90003cafd00 EFLAGS: 00050293 [ 195.449947][ T7217] RAX: 0000000000000000 RBX: ffffc90003cafe80 RCX: ffffffff823455ca [ 195.449957][ T7217] RDX: ffff88802f70c880 RSI: ffffffff82345647 RDI: 0000000000000006 [ 195.449968][ T7217] RBP: 0000400000002010 R08: 0000000000000006 R09: 0000400000001fd8 [ 195.449977][ T7217] R10: 0000400000002010 R11: 0000000000000003 R12: 0000000000000008 [ 195.449987][ T7217] R13: 0000000000000020 R14: ffff8880466cdae0 R15: 0000400000001ff0 [ 195.450005][ T7217] ? filldir+0x23a/0x5f0 [ 195.450026][ T7217] ? filldir+0x2b7/0x5f0 [ 195.450060][ T7217] ? __pfx_filldir+0x10/0x10 [ 195.450082][ T7217] offset_readdir+0x459/0x6c0 [ 195.450103][ T7217] iterate_dir+0x293/0xab0 [ 195.450130][ T7217] __x64_sys_getdents+0x148/0x2c0 [ 195.450153][ T7217] ? irqentry_exit+0x3b/0x90 [ 195.450176][ T7217] ? __pfx___x64_sys_getdents+0x10/0x10 [ 195.450201][ T7217] ? __pfx_filldir+0x10/0x10 [ 195.450234][ T7217] do_syscall_64+0xcd/0x250 [ 195.450259][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.450281][ T7217] RIP: 0033:0x7f1d8bb8d169 [ 195.450293][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.450308][ T7217] RSP: 002b:00007f1d8cacd038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 195.450322][ T7217] RAX: ffffffffffffffda RBX: 00007f1d8bda5fa0 RCX: 00007f1d8bb8d169 [ 195.450332][ T7217] RDX: 00000000000000b8 RSI: 0000400000001fc0 RDI: 0000000000000003 [ 195.450346][ T7217] RBP: 00007f1d8cacd090 R08: 0000000000000000 R09: 0000000000000000 [ 195.450356][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.450365][ T7217] R13: 0000000000000000 R14: 00007f1d8bda5fa0 R15: 00007fff58e00648 [ 195.450389][ T7217] [ 195.756987][ T5870] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 195.766081][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.774112][ T5870] usb 5-1: Product: syz [ 195.778270][ T5870] usb 5-1: Manufacturer: syz [ 195.782918][ T5870] usb 5-1: SerialNumber: syz [ 195.808754][ T5870] usb 5-1: config 0 descriptor?? [ 195.814882][ T5870] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 196.023508][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 196.110393][ T5867] usb 4-1: config 0 has no interface number 0 [ 196.167645][ T30] audit: type=1400 audit(1741845951.985:517): avc: denied { accept } for pid=7205 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.199782][ T5867] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 196.250670][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.284217][ T30] audit: type=1400 audit(1741845951.995:518): avc: denied { read } for pid=7205 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.320975][ T5867] usb 4-1: Product: syz [ 196.348879][ T5867] usb 4-1: Manufacturer: syz [ 196.396090][ T5867] usb 4-1: SerialNumber: syz [ 196.435969][ T5867] usb 4-1: config 0 descriptor?? [ 196.469102][ T30] audit: type=1400 audit(1741845953.535:519): avc: denied { append } for pid=7220 comm="syz.0.367" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 196.505712][ T5867] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 196.677373][ T30] audit: type=1400 audit(1741845953.725:520): avc: denied { write } for pid=7220 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.836823][ T5867] usb 5-1: USB disconnect, device number 15 [ 198.127437][ T5903] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.411501][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 198.760812][ T7240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.199838][ T9] usb 4-1: USB disconnect, device number 8 [ 199.292047][ T7243] pimreg: entered allmulticast mode [ 199.328478][ T7243] pimreg: left allmulticast mode [ 199.426387][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.548058][ T7249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.768407][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 200.203134][ T7259] ./file0: Can't lookup blockdev [ 200.832374][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 200.832389][ T30] audit: type=1400 audit(1741845958.105:532): avc: denied { create } for pid=7263 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.929466][ T30] audit: type=1400 audit(1741845958.145:533): avc: denied { bind } for pid=7263 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.978041][ T30] audit: type=1400 audit(1741845958.145:534): avc: denied { connect } for pid=7263 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.249249][ T5868] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 202.101956][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 202.112673][ T5868] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 202.179871][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.209253][ T5868] usb 4-1: config 0 has no interface number 0 [ 202.215449][ T5868] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.257273][ T5868] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 202.270156][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.283850][ T5868] usb 4-1: Product: syz [ 202.292925][ T5868] usb 4-1: Manufacturer: syz [ 202.300907][ T7276] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 202.316712][ T5868] usb 4-1: SerialNumber: syz [ 202.325906][ T5868] usb 4-1: config 0 descriptor?? [ 203.339624][ T5903] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 203.499311][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 203.585250][ T5903] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 203.623599][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.670346][ T5903] usb 2-1: config 0 has no interface number 0 [ 203.692438][ T5903] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 203.758160][ T7273] syz.4.382 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 203.769207][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.4.382 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 203.769231][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.769241][ T7273] Call Trace: [ 203.769246][ T7273] [ 203.769252][ T7273] dump_stack_lvl+0x16c/0x1f0 [ 203.769283][ T7273] dump_header+0x101/0x930 [ 203.769317][ T7273] oom_kill_process+0x270/0xa60 [ 203.769338][ T7273] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 203.769365][ T7273] out_of_memory+0x351/0x1700 [ 203.769395][ T7273] ? __pfx_out_of_memory+0x10/0x10 [ 203.769417][ T7273] ? rcu_read_unlock+0x17/0x60 [ 203.769436][ T7273] ? find_held_lock+0x2d/0x110 [ 203.769459][ T7273] mem_cgroup_out_of_memory+0x207/0x270 [ 203.769482][ T7273] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 203.769512][ T7273] ? do_raw_spin_unlock+0x172/0x230 [ 203.769533][ T7273] try_charge_memcg+0x54c/0xaf0 [ 203.769554][ T7273] ? __pfx_try_charge_memcg+0x10/0x10 [ 203.769573][ T7273] ? rcu_read_unlock+0x17/0x60 [ 203.769592][ T7273] ? __pfx_lock_release+0x10/0x10 [ 203.769614][ T7273] ? trace_lock_acquire+0x14e/0x1f0 [ 203.769632][ T7273] ? mem_cgroup_swapin_charge_folio+0x200/0x460 [ 203.769656][ T7273] charge_memcg+0x8a/0x310 [ 203.769675][ T7273] mem_cgroup_swapin_charge_folio+0xbb/0x460 [ 203.769699][ T7273] __read_swap_cache_async+0x436/0x660 [ 203.769729][ T7273] ? __pfx___read_swap_cache_async+0x10/0x10 [ 203.769752][ T7273] ? swp_swap_info+0x90/0x130 [ 203.769772][ T7273] ? __pfx_swp_swap_info+0x10/0x10 [ 203.769793][ T7273] ? __pfx___lock_acquire+0x10/0x10 [ 203.769817][ T7273] swap_cluster_readahead+0x3ec/0x740 [ 203.769849][ T7273] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 203.769879][ T7273] ? __pfx_lock_release+0x10/0x10 [ 203.769913][ T7273] ? get_vma_policy+0x248/0x3c0 [ 203.769937][ T7273] swapin_readahead+0x12c/0xd60 [ 203.769964][ T7273] ? percpu_ref_tryget_live+0xe8/0x320 [ 203.769986][ T7273] ? __pfx_swapin_readahead+0x10/0x10 [ 203.770010][ T7273] ? __filemap_get_folio+0x333/0xbd0 [ 203.770041][ T7273] ? swap_cache_get_folio+0x1e0/0x460 [ 203.770067][ T7273] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 203.770091][ T7273] ? __pfx_get_swap_device+0x10/0x10 [ 203.770109][ T7273] ? __pfx___lock_acquire+0x10/0x10 [ 203.770136][ T7273] do_swap_page+0x680/0x5a70 [ 203.770165][ T7273] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 203.770188][ T7273] ? rcu_is_watching+0x12/0xc0 [ 203.770206][ T7273] ? trace_lock_acquire+0x14e/0x1f0 [ 203.770225][ T7273] ? __pfx_do_swap_page+0x10/0x10 [ 203.770250][ T7273] ? lock_acquire+0x2f/0xb0 [ 203.770270][ T7273] ? ___pte_offset_map+0x42/0x540 [ 203.770293][ T7273] ? __pfx_default_wake_function+0x10/0x10 [ 203.770323][ T7273] ? ___pte_offset_map+0x1b9/0x540 [ 203.770351][ T7273] __handle_mm_fault+0x117f/0x2c60 [ 203.770372][ T7273] ? lock_vma_under_rcu+0x6b9/0x980 [ 203.770399][ T7273] ? __pfx___handle_mm_fault+0x10/0x10 [ 203.770439][ T7273] handle_mm_fault+0x3fa/0xaa0 [ 203.770461][ T7273] do_user_addr_fault+0x60d/0x13f0 [ 203.770492][ T7273] exc_page_fault+0x5c/0xc0 [ 203.770514][ T7273] asm_exc_page_fault+0x26/0x30 [ 203.770536][ T7273] RIP: 0033:0x7fc8ae7bf9d3 [ 203.770550][ T7273] Code: ca 08 00 48 8d 3d 56 ca 08 00 e8 f8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 203.770566][ T7273] RSP: 002b:00007ffd231b79b8 EFLAGS: 00010293 [ 203.770579][ T7273] RAX: 00000000fffffffa RBX: 00007fc8ae9a5fa0 RCX: 0000000000000000 [ 203.770589][ T7273] RDX: 00007ffd231b79d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.770598][ T7273] RBP: 00007fc8ae9a7ba0 R08: 0000000000009456 R09: 00007fc8af662000 [ 203.770608][ T7273] R10: 0000000000000000 R11: 002952e371fb41be R12: 0000000000032259 [ 203.770618][ T7273] R13: 00007fc8ae9a6160 R14: ffffffffffffffff R15: 00007ffd231b7b10 [ 203.770643][ T7273] [ 203.770649][ T7273] memory: usage 307200kB, limit 307200kB, failcnt 2651 [ 204.148206][ T7273] memory+swap: usage 215840kB, limit 9007199254740988kB, failcnt 0 [ 204.160465][ T7273] kmem: usage 210640kB, limit 9007199254740988kB, failcnt 0 [ 204.167770][ T7273] Memory cgroup stats for /syz4: [ 204.167892][ T7273] cache 0 [ 204.176887][ T7273] rss 0 [ 204.179664][ T7273] rss_huge 0 [ 204.182855][ T7273] shmem 0 [ 204.185780][ T7273] mapped_file 0 [ 204.189271][ T7273] dirty 0 [ 204.192199][ T7273] writeback 0 [ 204.195475][ T7273] workingset_refault_anon 1903 [ 204.200267][ T7273] workingset_refault_file 31 [ 204.204846][ T7273] swap 430080 [ 204.208132][ T7273] swapcached 0 [ 204.211524][ T7273] pgpgin 95540 [ 204.214885][ T7273] pgpgout 96562 [ 204.218333][ T7273] pgfault 103965 [ 204.221905][ T7273] pgmajfault 161 [ 204.225442][ T7273] inactive_anon 0 [ 204.229064][ T7273] active_anon 0 [ 204.232689][ T7273] inactive_file 0 [ 204.236314][ T7273] active_file 0 [ 204.240338][ T7273] unevictable 0 [ 204.243796][ T7273] hierarchical_memory_limit 314572800 [ 204.249185][ T7273] hierarchical_memsw_limit 9223372036854771712 [ 204.255331][ T7273] total_cache 0 [ 204.258783][ T7273] total_rss 0 [ 204.262131][ T7273] total_rss_huge 0 [ 204.265841][ T7273] total_shmem 0 [ 204.269335][ T7273] total_mapped_file 0 [ 204.273306][ T7273] total_dirty 0 [ 204.276755][ T7273] total_writeback 0 [ 204.280585][ T7273] total_workingset_refault_anon 1903 [ 204.285859][ T7273] total_workingset_refault_file 31 [ 204.290981][ T7273] total_swap 430080 [ 204.294779][ T7273] total_swapcached 0 [ 204.298661][ T7273] total_pgpgin 95540 [ 204.302585][ T7273] total_pgpgout 96562 [ 204.306556][ T7273] total_pgfault 103965 [ 204.310695][ T7273] total_pgmajfault 161 [ 204.314752][ T7273] total_inactive_anon 0 [ 204.318895][ T7273] total_active_anon 0 [ 204.322911][ T7273] total_inactive_file 0 [ 204.327055][ T7273] total_active_file 0 [ 204.331048][ T7273] total_unevictable 0 [ 204.335020][ T7273] anon_cost 0 [ 204.338296][ T7273] file_cost 0 [ 204.341593][ T7273] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.382,pid=7273,uid=0 [ 204.356933][ T7273] Memory cgroup out of memory: Killed process 7273 (syz.4.382) total-vm:102040kB, anon-rss:1052kB, file-rss:22956kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 204.482954][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.491226][ T5903] usb 2-1: Product: syz [ 204.495391][ T5903] usb 2-1: Manufacturer: syz [ 204.500013][ T5903] usb 2-1: SerialNumber: syz [ 204.528005][ T5903] usb 2-1: config 0 descriptor?? [ 204.558313][ T5903] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 204.572142][ T30] audit: type=1400 audit(1741845961.845:535): avc: denied { write } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.661138][ T5868] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 204.699125][ T5868] usb 4-1: USB disconnect, device number 9 [ 204.877151][ T30] audit: type=1400 audit(1741845961.845:536): avc: denied { remove_name } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.580570][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 205.589284][ T30] audit: type=1400 audit(1741845961.845:537): avc: denied { rename } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.611540][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.900016][ T30] audit: type=1400 audit(1741845961.845:538): avc: denied { add_name } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.001678][ T30] audit: type=1400 audit(1741845961.845:539): avc: denied { unlink } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.084908][ T30] audit: type=1400 audit(1741845961.845:540): avc: denied { create } for pid=5171 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.234042][ T7297] netlink: 288 bytes leftover after parsing attributes in process `syz.2.387'. [ 206.332077][ T7300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.388'. [ 206.818922][ T5868] usb 2-1: USB disconnect, device number 14 [ 207.133994][ T7306] ./file0: Can't lookup blockdev [ 207.371796][ T30] audit: type=1400 audit(1741845963.505:541): avc: denied { connect } for pid=7293 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.396721][ T30] audit: type=1400 audit(1741845964.205:542): avc: denied { map } for pid=7302 comm="syz.0.390" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.729281][ T30] audit: type=1400 audit(1741845964.955:543): avc: denied { map } for pid=7307 comm="syz.1.391" path="socket:[14662]" dev="sockfs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.921539][ T7313] netlink: 'syz.1.391': attribute type 10 has an invalid length. [ 207.979540][ T7313] batman_adv: batadv0: Adding interface: team0 [ 207.985808][ T7313] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.011098][ T7313] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 208.685069][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 208.696915][ T7316] sp0: Synchronizing with TNC [ 209.351880][ T7322] binder: 7321:7322 ioctl c00c620f 400000000000 returned -22 [ 209.365033][ T30] audit: type=1400 audit(1741845966.625:544): avc: denied { ioctl } for pid=7321 comm="syz.3.394" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 209.590918][ T7330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.259613][ T5868] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 210.680510][ T7340] trusted_key: encrypted_key: insufficient parameters specified [ 210.689028][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 210.692392][ T7340] IPVS: rr: TCP [::]:0 - no destination available [ 210.716907][ T5868] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 210.733970][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.751429][ T5868] usb 2-1: config 0 has no interface number 0 [ 210.765852][ T5868] usb 2-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.787984][ T5868] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 210.798962][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.815095][ T5868] usb 2-1: Product: syz [ 210.817431][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.404'. [ 210.821002][ T5868] usb 2-1: Manufacturer: syz [ 210.835714][ T5868] usb 2-1: SerialNumber: syz [ 210.845252][ T5868] usb 2-1: config 0 descriptor?? [ 210.884896][ T5868] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 210.929307][ T5870] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.959338][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 211.975933][ T7350] ./file0: Can't lookup blockdev [ 211.995159][ T5870] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 212.018275][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.557949][ T5870] usb 5-1: config 0 has no interface number 0 [ 212.586128][ T5870] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 212.618389][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.639939][ T30] audit: type=1400 audit(1741845969.915:545): avc: denied { getopt } for pid=7355 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.661172][ T5870] usb 5-1: Product: syz [ 212.675017][ T5870] usb 5-1: Manufacturer: syz [ 212.698360][ T5870] usb 5-1: SerialNumber: syz [ 212.715639][ T5870] usb 5-1: config 0 descriptor?? [ 212.726351][ T30] audit: type=1400 audit(1741845969.955:546): avc: denied { write } for pid=7357 comm="syz.2.406" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.755258][ T7358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.406'. [ 212.765426][ T5870] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 213.069957][ T30] audit: type=1400 audit(1741845970.335:547): avc: denied { connect } for pid=7362 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.616525][ T30] audit: type=1400 audit(1741845970.365:548): avc: denied { write } for pid=7362 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.702061][ T5932] usb 2-1: USB disconnect, device number 15 [ 214.145263][ T30] audit: type=1400 audit(1741845971.245:549): avc: denied { create } for pid=7369 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 214.165570][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 214.399993][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 214.408945][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 214.628781][ T7381] process 'syz.1.414' launched './file0' with NULL argv: empty string added [ 214.638900][ T30] audit: type=1400 audit(1741845971.895:550): avc: denied { write } for pid=7380 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.684375][ T5932] usb 5-1: USB disconnect, device number 16 [ 214.844425][ T30] audit: type=1400 audit(1741845971.955:551): avc: denied { execute_no_trans } for pid=7380 comm="syz.1.414" path="/85/file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.949633][ T7391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.416'. [ 215.276029][ T7393] ./file0: Can't lookup blockdev [ 216.579987][ T30] audit: type=1400 audit(1741845973.275:552): avc: denied { write } for pid=7388 comm="syz.4.418" name="netstat" dev="proc" ino=4026533186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 217.189043][ T7411] trusted_key: encrypted_key: insufficient parameters specified [ 217.213297][ T30] audit: type=1400 audit(1741845974.485:553): avc: denied { audit_read } for pid=7398 comm="syz.4.421" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.251676][ T7399] block device autoloading is deprecated and will be removed. [ 217.260528][ T7399] syz.4.421: attempt to access beyond end of device [ 217.260528][ T7399] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 217.285413][ T7411] IPVS: rr: TCP [::]:0 - no destination available [ 218.309302][ C1] IPVS: rr: TCP [::]:0 - no destination available [ 218.794550][ T30] audit: type=1400 audit(1741845974.635:554): avc: denied { append } for pid=7412 comm="syz.0.423" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 218.983982][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 219.717908][ T30] audit: type=1400 audit(1741845976.845:555): avc: denied { bind } for pid=7432 comm="syz.3.429" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.738145][ T5865] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 219.927822][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 220.079080][ T5865] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 220.094093][ T30] audit: type=1400 audit(1741845976.845:556): avc: denied { node_bind } for pid=7432 comm="syz.3.429" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 220.124352][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.195186][ T5865] usb 2-1: config 0 has no interface number 0 [ 220.205933][ T5865] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 220.215943][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.228909][ T5865] usb 2-1: Product: syz [ 220.234040][ T5865] usb 2-1: Manufacturer: syz [ 220.238645][ T5865] usb 2-1: SerialNumber: syz [ 220.246348][ T5865] usb 2-1: config 0 descriptor?? [ 220.261724][ T5865] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 220.497863][ T7446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.430'. [ 222.000124][ T7455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.348670][ T30] audit: type=1400 audit(1741845979.615:557): avc: denied { create } for pid=7457 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 222.529035][ T5932] usb 2-1: USB disconnect, device number 16 [ 222.544967][ T30] audit: type=1400 audit(1741845979.615:558): avc: denied { setopt } for pid=7457 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 223.708851][ T7471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.108100][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 224.117233][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 224.197509][ T7476] 9pnet_fd: Insufficient options for proto=fd [ 224.784191][ T7486] ./file0: Can't lookup blockdev [ 225.185325][ T30] audit: type=1400 audit(1741845982.455:559): avc: denied { create } for pid=7483 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.207329][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 225.225733][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 225.242725][ T7488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.442'. [ 225.406865][ T7479] 9pnet_fd: Insufficient options for proto=fd [ 225.951948][ T30] audit: type=1326 audit(1741845983.215:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.333049][ T30] audit: type=1326 audit(1741845983.215:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.419364][ T30] audit: type=1326 audit(1741845983.275:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.456499][ T30] audit: type=1326 audit(1741845983.275:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.509228][ T30] audit: type=1326 audit(1741845983.275:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.572713][ T30] audit: type=1326 audit(1741845983.275:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.678474][ T30] audit: type=1326 audit(1741845983.275:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.763938][ T30] audit: type=1326 audit(1741845983.275:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.794435][ T30] audit: type=1326 audit(1741845983.275:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1bd78d169 code=0x7ffc0000 [ 226.929361][ T5903] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 227.098872][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 227.112270][ T5903] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 227.131783][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.279587][ T5903] usb 5-1: config 0 has no interface number 0 [ 227.295650][ T5903] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 227.853397][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.878245][ T5903] usb 5-1: Product: syz [ 227.890893][ T5903] usb 5-1: Manufacturer: syz [ 227.915520][ T5903] usb 5-1: SerialNumber: syz [ 227.954644][ T5903] usb 5-1: config 0 descriptor?? [ 227.971665][ T5903] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 228.279547][ T7536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.457'. [ 229.816654][ T7553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.451010][ T5865] usb 5-1: USB disconnect, device number 17 [ 230.714263][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 230.714277][ T30] audit: type=1400 audit(1741845987.985:608): avc: denied { listen } for pid=7557 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.056133][ T30] audit: type=1400 audit(1741845987.985:609): avc: denied { accept } for pid=7557 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.078349][ T30] audit: type=1400 audit(1741845988.105:610): avc: denied { listen } for pid=7556 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.099229][ T30] audit: type=1400 audit(1741845988.185:611): avc: denied { getopt } for pid=7530 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.216577][ T30] audit: type=1400 audit(1741845988.185:612): avc: denied { bind } for pid=7530 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.496889][ T30] audit: type=1400 audit(1741845988.325:613): avc: denied { read } for pid=7530 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.684853][ T5903] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 231.763952][ T7582] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 231.979325][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 232.974674][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.986784][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.998905][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.960883][ T30] audit: type=1400 audit(1741845990.925:614): avc: denied { unlink } for pid=7579 comm="syz.4.468" name="#6" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 234.236423][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.266583][ T30] audit: type=1400 audit(1741845990.925:615): avc: denied { mount } for pid=7579 comm="syz.4.468" name="/" dev="overlay" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 234.291512][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.312333][ T7587] capability: warning: `syz.2.470' uses deprecated v2 capabilities in a way that may be insecure [ 234.350748][ T5903] usb 1-1: config 0 descriptor?? [ 234.369429][ T7576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.402169][ T5903] hub 1-1:0.0: USB hub found [ 234.408621][ T30] audit: type=1400 audit(1741845991.305:616): avc: denied { read } for pid=7579 comm="syz.4.468" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 234.470526][ T5903] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 234.491936][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 234.507035][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 234.520330][ T30] audit: type=1400 audit(1741845991.305:617): avc: denied { open } for pid=7579 comm="syz.4.468" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 234.544029][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.605383][ T5903] usb 1-1: USB disconnect, device number 13 [ 234.626539][ T7591] Cannot find add_set index 0 as target [ 234.853224][ T7598] overlayfs: failed to resolve './file1': -2 [ 234.915711][ T7604] trusted_key: encrypted_key: insufficient parameters specified [ 234.952877][ T7604] IPVS: rr: TCP [::]:0 - no destination available [ 235.447107][ T7612] trusted_key: encrypted_key: insufficient parameters specified [ 235.500126][ T7606] tipc: Started in network mode [ 235.505189][ T7606] tipc: Node identity ac14140f, cluster identity 4711 [ 235.512434][ T7606] tipc: New replicast peer: 255.255.255.255 [ 235.519520][ T7606] tipc: Enabled bearer , priority 10 [ 235.619774][ T7615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.476'. [ 235.809279][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 235.809296][ T30] audit: type=1400 audit(1741845993.055:624): avc: denied { setopt } for pid=7616 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 236.131258][ T7627] FAULT_INJECTION: forcing a failure. [ 236.131258][ T7627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.170631][ T7627] CPU: 1 UID: 0 PID: 7627 Comm: syz.3.483 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 236.170648][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.170654][ T7627] Call Trace: [ 236.170658][ T7627] [ 236.170661][ T7627] dump_stack_lvl+0x16c/0x1f0 [ 236.170681][ T7627] should_fail_ex+0x50a/0x650 [ 236.170699][ T7627] _copy_from_user+0x2e/0xd0 [ 236.170710][ T7627] cec_ioctl+0xf01/0x2920 [ 236.170723][ T7627] ? __pfx_cec_ioctl+0x10/0x10 [ 236.170735][ T7627] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.170752][ T7627] ? do_vfs_ioctl+0x513/0x1990 [ 236.170770][ T7627] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 236.170788][ T7627] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 236.170805][ T7627] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 236.170823][ T7627] ? __pfx_lock_release+0x10/0x10 [ 236.170842][ T7627] ? selinux_file_ioctl+0x180/0x270 [ 236.170857][ T7627] ? selinux_file_ioctl+0xb4/0x270 [ 236.170873][ T7627] ? __pfx_cec_ioctl+0x10/0x10 [ 236.170884][ T7627] __x64_sys_ioctl+0x190/0x200 [ 236.170898][ T7627] do_syscall_64+0xcd/0x250 [ 236.170914][ T7627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.170929][ T7627] RIP: 0033:0x7ff1bd78d169 [ 236.170938][ T7627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.170947][ T7627] RSP: 002b:00007ff1be690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.170957][ T7627] RAX: ffffffffffffffda RBX: 00007ff1bd9a5fa0 RCX: 00007ff1bd78d169 [ 236.170963][ T7627] RDX: 0000400000000440 RSI: 00000000c0386105 RDI: 0000000000000005 [ 236.170969][ T7627] RBP: 00007ff1be690090 R08: 0000000000000000 R09: 0000000000000000 [ 236.170974][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.170980][ T7627] R13: 0000000000000000 R14: 00007ff1bd9a5fa0 R15: 00007ffc6583e848 [ 236.170991][ T7627] [ 236.289291][ T5867] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 236.439205][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 236.440683][ T5867] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 236.440709][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.440727][ T5867] usb 3-1: config 0 has no interface number 0 [ 236.442606][ T5867] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 236.442630][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.442648][ T5867] usb 3-1: Product: syz [ 236.442663][ T5867] usb 3-1: Manufacturer: syz [ 236.442676][ T5867] usb 3-1: SerialNumber: syz [ 236.455107][ T5867] usb 3-1: config 0 descriptor?? [ 236.456871][ T5867] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 236.547717][ T30] audit: type=1400 audit(1741845993.815:625): avc: denied { mount } for pid=7630 comm="syz.4.485" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 236.554510][ T30] audit: type=1400 audit(1741845993.825:626): avc: denied { write } for pid=7630 comm="syz.4.485" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.568697][ T30] audit: type=1400 audit(1741845993.835:627): avc: denied { open } for pid=7630 comm="syz.4.485" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.568732][ T30] audit: type=1400 audit(1741845993.835:628): avc: denied { read } for pid=7630 comm="syz.4.485" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.802661][ T5867] tipc: Node number set to 2886997007 [ 237.524591][ T30] audit: type=1800 audit(1741845994.795:629): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.485" name="/" dev="9p" ino=2 res=0 errno=0 [ 237.649286][ T5867] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 237.751466][ T30] audit: type=1400 audit(1741845995.025:630): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 237.799274][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 237.989063][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.006630][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 238.018923][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 238.031311][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 238.140442][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.150268][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.160029][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.175443][ T5867] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 238.184549][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.280336][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 238.480833][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 238.500813][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 238.525396][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 238.661288][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.835043][ T9] usb 2-1: Product: syz [ 238.839308][ T9] usb 2-1: Manufacturer: syz [ 238.843943][ T9] usb 2-1: SerialNumber: syz [ 238.857664][ T9] usb 2-1: config 0 descriptor?? [ 238.919548][ T5868] usb 3-1: USB disconnect, device number 15 [ 238.926712][ T5867] usb 4-1: Product: syz [ 238.933312][ T5867] usb 4-1: Manufacturer: syz [ 238.938111][ T5867] usb 4-1: SerialNumber: syz [ 238.949233][ T5867] usb 4-1: config 0 descriptor?? [ 238.955525][ T7634] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.990667][ T5867] iuu_phoenix 4-1:0.0: iuu_phoenix converter detected [ 239.446008][ T30] audit: type=1400 audit(1741845996.715:631): avc: denied { ioctl } for pid=7644 comm="syz.2.489" path="socket:[15705]" dev="sockfs" ino=15705 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.484704][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 239.561011][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 239.822958][ T5867] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 239.912626][ T9] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 240.247903][ T5870] usb 4-1: USB disconnect, device number 10 [ 240.254429][ T30] audit: type=1400 audit(1741845997.525:632): avc: denied { create } for pid=7640 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 240.885256][ T7664] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 240.894466][ T7664] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 240.945785][ T7665] mmap: syz.4.492 (7665) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 241.232686][ T5870] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 241.241392][ T30] audit: type=1400 audit(1741845997.525:633): avc: denied { bind } for pid=7640 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 241.263135][ T5870] iuu_phoenix 4-1:0.0: device disconnected [ 241.271237][ T30] audit: type=1400 audit(1741845997.525:634): avc: denied { block_suspend } for pid=7640 comm="syz.1.488" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.402457][ T30] audit: type=1400 audit(1741845998.665:635): avc: denied { read } for pid=7667 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.427210][ T30] audit: type=1400 audit(1741845998.665:636): avc: denied { open } for pid=7667 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.614512][ T9] usb 2-1: USB disconnect, device number 17 [ 241.624185][ T30] audit: type=1400 audit(1741845998.665:637): avc: denied { getattr } for pid=7667 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.713873][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 241.799188][ T30] audit: type=1400 audit(1741845999.065:638): avc: denied { write } for pid=7669 comm="syz.2.494" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 242.171984][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 242.181161][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 242.492116][ T5867] kernel write not supported for file /create (pid: 5867 comm: kworker/1:5) [ 242.503865][ T7694] syz.2.498 uses obsolete (PF_INET,SOCK_PACKET) [ 242.545080][ T30] audit: type=1400 audit(1741845999.815:639): avc: denied { write } for pid=7666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.580751][ T7686] 9pnet_fd: Insufficient options for proto=fd [ 242.660028][ T7699] ipt_ECN: cannot use operation on non-tcp rule [ 242.667395][ T30] audit: type=1400 audit(1741845999.815:640): avc: denied { add_name } for pid=7666 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.715202][ T5903] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 242.739582][ T30] audit: type=1400 audit(1741845999.815:641): avc: denied { create } for pid=7666 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.804349][ T30] audit: type=1400 audit(1741845999.815:642): avc: denied { write } for pid=7666 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=3759 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.893448][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 242.999910][ T5903] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 243.516885][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.633560][ T5903] usb 4-1: config 0 has no interface number 0 [ 243.670547][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 243.681272][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 243.701049][ T5903] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 243.969705][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.999399][ T5903] usb 4-1: Product: syz [ 244.013806][ T5903] usb 4-1: Manufacturer: syz [ 244.018469][ T5903] usb 4-1: SerialNumber: syz [ 244.040113][ T7721] FAULT_INJECTION: forcing a failure. [ 244.040113][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.074476][ T5903] usb 4-1: config 0 descriptor?? [ 244.108695][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.0.505 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 244.108717][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.108725][ T7721] Call Trace: [ 244.108730][ T7721] [ 244.108736][ T7721] dump_stack_lvl+0x16c/0x1f0 [ 244.108768][ T7721] should_fail_ex+0x50a/0x650 [ 244.108795][ T7721] _copy_from_user+0x2e/0xd0 [ 244.108813][ T7721] do_sys_poll+0x1d6/0xde0 [ 244.108841][ T7721] ? __pfx_mark_lock+0x10/0x10 [ 244.108866][ T7721] ? __pfx_do_sys_poll+0x10/0x10 [ 244.108907][ T7721] ? __pfx___lock_acquire+0x10/0x10 [ 244.108959][ T7721] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 244.108984][ T7721] ? set_user_sigmask+0x217/0x2a0 [ 244.109004][ T7721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.109025][ T7721] ? __pfx_set_user_sigmask+0x10/0x10 [ 244.109047][ T7721] ? __fget_files+0x206/0x3a0 [ 244.109065][ T7721] __x64_sys_ppoll+0x25a/0x2d0 [ 244.109082][ T7721] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 244.109096][ T7721] ? ksys_write+0x1ba/0x250 [ 244.109109][ T7721] ? __pfx_ksys_write+0x10/0x10 [ 244.109130][ T7721] do_syscall_64+0xcd/0x250 [ 244.109151][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.109170][ T7721] RIP: 0033:0x7f47fdb8d169 [ 244.109189][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.109203][ T7721] RSP: 002b:00007f47fe958038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 244.109219][ T7721] RAX: ffffffffffffffda RBX: 00007f47fdda5fa0 RCX: 00007f47fdb8d169 [ 244.109229][ T7721] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00004000000000c0 [ 244.109238][ T7721] RBP: 00007f47fe958090 R08: 0000000000000000 R09: 0000000000000000 [ 244.109248][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.109257][ T7721] R13: 0000000000000000 R14: 00007f47fdda5fa0 R15: 00007ffe98a1e1d8 [ 244.109276][ T7721] [ 244.308309][ T5903] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 245.370508][ T5903] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 245.590838][ T5903] usb 5-1: config index 0 descriptor too short (expected 64860, got 72) [ 245.608580][ T5903] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 245.799420][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.811710][ T5903] usb 5-1: Product: syz [ 245.818946][ T5903] usb 5-1: Manufacturer: syz [ 245.901160][ T5903] usb 5-1: SerialNumber: syz [ 246.282834][ T5866] usb 4-1: USB disconnect, device number 11 [ 246.353457][ T5903] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 246.384813][ T5870] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.523511][ T7762] trusted_key: encrypted_key: insufficient parameters specified [ 246.526468][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 246.526480][ T30] audit: type=1400 audit(1741846003.795:698): avc: denied { create } for pid=7763 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 246.559096][ T30] audit: type=1400 audit(1741846003.805:699): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 246.685539][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 246.700576][ T7768] sp0: Synchronizing with TNC [ 246.859567][ T30] audit: type=1400 audit(1741846003.835:700): avc: denied { getopt } for pid=7763 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 246.880406][ T30] audit: type=1400 audit(1741846003.835:701): avc: denied { module_request } for pid=7763 comm="syz.1.514" kmod="net-pf-2-proto-2-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 246.903909][ T30] audit: type=1400 audit(1741846003.945:702): avc: denied { create } for pid=7758 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.115275][ T30] audit: type=1400 audit(1741846003.955:703): avc: denied { setopt } for pid=7758 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.437226][ T30] audit: type=1400 audit(1741846003.955:704): avc: denied { accept } for pid=7758 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.457650][ T30] audit: type=1400 audit(1741846004.225:705): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 247.568659][ T30] audit: type=1400 audit(1741846004.755:706): avc: denied { create } for pid=7777 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.674329][ T30] audit: type=1400 audit(1741846004.755:707): avc: denied { create } for pid=7777 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 247.692073][ T5870] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 247.707567][ T5870] ath9k_htc: Failed to initialize the device [ 247.751221][ T5870] usb 5-1: ath9k_htc: USB layer deinitialized [ 247.973086][ T7791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.386121][ T5866] usb 5-1: USB disconnect, device number 18 [ 248.857315][ T7795] 9pnet_fd: Insufficient options for proto=fd [ 249.086150][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 249.096708][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 249.449284][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 249.463595][ T7799] 9pnet_fd: Insufficient options for proto=fd [ 249.849321][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 249.867485][ T9] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 249.906990][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.936036][ T9] usb 5-1: config 0 has no interface number 0 [ 249.954631][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 249.963923][ T7820] netlink: 'syz.1.525': attribute type 12 has an invalid length. [ 249.974915][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.992594][ T9] usb 5-1: Product: syz [ 250.005087][ T9] usb 5-1: Manufacturer: syz [ 250.015204][ T9] usb 5-1: SerialNumber: syz [ 250.030187][ T9] usb 5-1: config 0 descriptor?? [ 250.056540][ T9] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 250.097649][ T7820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.525'. [ 251.094961][ T7814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.409320][ T7814] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 251.509006][ T7814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.542340][ T7814] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 251.581901][ T7814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.587841][ T7814] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 251.624926][ T7855] sctp: [Deprecated]: syz.2.532 (pid 7855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.624926][ T7855] Use struct sctp_sack_info instead [ 251.642221][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 251.642235][ T30] audit: type=1400 audit(1741846008.895:740): avc: denied { create } for pid=7854 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 251.685565][ T30] audit: type=1400 audit(1741846008.895:741): avc: denied { getopt } for pid=7854 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 251.812467][ T7814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.842990][ T30] audit: type=1400 audit(1741846009.045:742): avc: denied { name_bind } for pid=7854 comm="syz.2.532" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 251.870782][ T30] audit: type=1400 audit(1741846009.105:743): avc: denied { map } for pid=7854 comm="syz.2.532" path="socket:[16123]" dev="sockfs" ino=16123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.874985][ T7814] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 251.908437][ T30] audit: type=1400 audit(1741846009.105:744): avc: denied { read } for pid=7854 comm="syz.2.532" path="socket:[16123]" dev="sockfs" ino=16123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.944635][ T7858] trusted_key: encrypted_key: insufficient parameters specified [ 252.085425][ T30] audit: type=1400 audit(1741846009.205:745): avc: denied { create } for pid=7854 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.253254][ T9] usb 5-1: USB disconnect, device number 19 [ 252.315106][ T30] audit: type=1400 audit(1741846009.215:746): avc: denied { setopt } for pid=7854 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.385084][ T7868] trusted_key: encrypted_key: insufficient parameters specified [ 252.962754][ T30] audit: type=1400 audit(1741846009.725:747): avc: denied { name_bind } for pid=7860 comm="syz.0.533" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 253.079745][ T30] audit: type=1400 audit(1741846009.725:748): avc: denied { create } for pid=7860 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.300900][ T30] audit: type=1400 audit(1741846010.565:749): avc: denied { map_read map_write } for pid=7878 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 254.792461][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 254.807964][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 254.831940][ T5870] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 255.039302][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 255.058187][ T5870] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 255.087450][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.118487][ T5870] usb 2-1: config 0 has no interface number 0 [ 255.141431][ T5870] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 255.173991][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.203116][ T5870] usb 2-1: Product: syz [ 255.214008][ T5870] usb 2-1: Manufacturer: syz [ 255.227362][ T5870] usb 2-1: SerialNumber: syz [ 255.251654][ T5870] usb 2-1: config 0 descriptor?? [ 255.267467][ T5870] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 255.350736][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.357279][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.745086][ T7946] trusted_key: encrypted_key: insufficient parameters specified [ 256.661868][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 256.661905][ T30] audit: type=1400 audit(1741846013.865:766): avc: denied { open } for pid=7909 comm="syz.2.541" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 256.831830][ T30] audit: type=1400 audit(1741846014.105:767): avc: denied { read } for pid=7952 comm="syz.4.548" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.027876][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 257.208775][ T30] audit: type=1400 audit(1741846014.215:768): avc: denied { open } for pid=7952 comm="syz.4.548" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.319550][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 257.450531][ T30] audit: type=1400 audit(1741846014.245:769): avc: denied { connect } for pid=7952 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.497313][ T30] audit: type=1400 audit(1741846014.255:770): avc: denied { bind } for pid=7952 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.530892][ T30] audit: type=1400 audit(1741846014.255:771): avc: denied { write } for pid=7952 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.579296][ T5905] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 257.625923][ T5868] usb 2-1: USB disconnect, device number 18 [ 257.653287][ T30] audit: type=1400 audit(1741846014.915:772): avc: denied { mounton } for pid=7965 comm="syz.0.551" path="/107/file0" dev="configfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 257.695349][ T30] audit: type=1400 audit(1741846014.925:773): avc: denied { read } for pid=7965 comm="syz.0.551" name="/" dev="configfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 257.736663][ T30] audit: type=1400 audit(1741846014.925:774): avc: denied { open } for pid=7965 comm="syz.0.551" path="/107/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 257.801488][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 257.817614][ T5905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 257.817644][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.817662][ T5905] usb 4-1: Product: syz [ 257.817676][ T5905] usb 4-1: Manufacturer: syz [ 257.817690][ T5905] usb 4-1: SerialNumber: syz [ 257.819329][ T5905] usb 4-1: config 0 descriptor?? [ 258.027268][ T5905] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 258.027291][ T5905] 33 a8 f5 02 e4 58 9c 4d [ 258.027364][ T5905] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 258.289619][ T30] audit: type=1400 audit(1741846015.545:775): avc: denied { read write } for pid=7985 comm="syz.1.554" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 258.289682][ T5868] usb 4-1: USB disconnect, device number 12 [ 258.679257][ T5905] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 258.767533][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 258.789431][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 258.899310][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 259.409624][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 259.422915][ T5905] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 259.646778][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 259.724839][ T5905] usb 1-1: Product: syz [ 259.733835][ T5905] usb 1-1: Manufacturer: syz [ 259.738954][ T8010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=8010 comm=syz.2.558 [ 259.751473][ T5905] usb 1-1: SerialNumber: syz [ 259.757698][ T5905] usb 1-1: config 0 descriptor?? [ 259.766658][ T7992] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 259.782755][ T5905] hub 1-1:0.0: bad descriptor, ignoring hub [ 259.792455][ T5905] hub 1-1:0.0: probe with driver hub failed with error -5 [ 260.365787][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 260.374723][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 260.791133][ T8037] vim2m vim2m.0: vidioc_s_fmt queue busy [ 261.098822][ T8043] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 261.189357][ T5905] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 261.273785][ T5870] usb 1-1: USB disconnect, device number 14 [ 261.415510][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 261.560560][ T5905] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 261.568765][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.591417][ T5905] usb 4-1: config 0 has no interface number 0 [ 261.619052][ T5905] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 261.643806][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.679405][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 261.679425][ T30] audit: type=1400 audit(1741846018.935:795): avc: denied { mounton } for pid=8056 comm="syz.1.569" path="/113/file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.709093][ T30] audit: type=1400 audit(1741846018.945:796): avc: denied { mount } for pid=8056 comm="syz.1.569" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 261.772502][ T30] audit: type=1400 audit(1741846019.045:797): avc: denied { ioctl } for pid=8056 comm="syz.1.569" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 261.797818][ T5905] usb 4-1: Product: syz [ 261.971284][ T8061] ./file0: Can't lookup blockdev [ 262.363606][ T5905] usb 4-1: Manufacturer: syz [ 262.378477][ T5905] usb 4-1: SerialNumber: syz [ 262.385517][ T5905] usb 4-1: config 0 descriptor?? [ 262.398711][ T5905] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 262.606444][ T30] audit: type=1326 audit(1741846019.835:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8068 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ae78d169 code=0x7ffc0000 [ 262.640213][ T30] audit: type=1326 audit(1741846019.835:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8068 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ae78d169 code=0x7ffc0000 [ 263.620979][ T8076] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 263.845605][ T8072] overlayfs: failed to resolve './file1': -2 [ 263.860608][ T30] audit: type=1326 audit(1741846019.835:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8068 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ae78d169 code=0x7ffc0000 [ 263.884035][ T30] audit: type=1326 audit(1741846019.835:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8068 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ae78d169 code=0x7ffc0000 [ 264.250289][ T30] audit: type=1326 audit(1741846019.835:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8068 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ae78d169 code=0x7ffc0000 [ 264.287324][ T30] audit: type=1326 audit(1741846019.835:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8068 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc8ae78d169 code=0x7ffc0000 [ 264.377393][ T30] audit: type=1326 audit(1741846019.835:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8068 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ae78d169 code=0x7ffc0000 [ 264.981016][ T5903] usb 4-1: USB disconnect, device number 13 [ 266.078943][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 267.424303][ T8107] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 267.944998][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 267.945013][ T30] audit: type=1400 audit(1741846025.215:869): avc: denied { execute } for pid=8105 comm="syz.2.580" path="/110/cpuset.memory_pressure_enabled" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 268.245156][ T8111] netlink: 'syz.3.577': attribute type 4 has an invalid length. [ 268.367718][ T8111] netlink: 'syz.3.577': attribute type 4 has an invalid length. [ 268.989458][ T8124] ./file0: Can't lookup blockdev [ 269.534868][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 269.565050][ T8128] sp0: Synchronizing with TNC [ 270.676912][ T30] audit: type=1400 audit(1741846027.945:870): avc: denied { read } for pid=8142 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.770244][ T8143] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 270.839360][ T8143] netlink: 244 bytes leftover after parsing attributes in process `syz.4.590'. [ 271.301585][ T8161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.837381][ T8169] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.063900][ T30] audit: type=1400 audit(1741846029.155:871): avc: denied { write } for pid=8163 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.368922][ T8180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.728709][ T30] audit: type=1400 audit(1741846029.325:872): avc: denied { ioctl } for pid=8163 comm="syz.3.597" path="socket:[18541]" dev="sockfs" ino=18541 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.754006][ T30] audit: type=1400 audit(1741846029.885:873): avc: denied { sys_module } for pid=8163 comm="syz.3.597" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 273.240266][ T8186] warning: `syz.0.599' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 273.302249][ T8190] 9pnet_fd: Insufficient options for proto=fd [ 273.576801][ T30] audit: type=1400 audit(1741846030.765:874): avc: denied { create } for pid=8196 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.596536][ T30] audit: type=1400 audit(1741846030.765:875): avc: denied { connect } for pid=8196 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.319255][ T5903] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 275.573729][ T8213] ./file0: Can't lookup blockdev [ 276.157734][ T8220] netlink: 'syz.0.607': attribute type 21 has an invalid length. [ 276.166528][ T8220] netlink: 156 bytes leftover after parsing attributes in process `syz.0.607'. [ 276.265642][ T8220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=8220 comm=syz.0.607 [ 276.278982][ T8220] netlink: 'syz.0.607': attribute type 21 has an invalid length. [ 276.287401][ T8220] netlink: 156 bytes leftover after parsing attributes in process `syz.0.607'. [ 276.369707][ T5903] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 276.377986][ T5903] usb 3-1: config 0 has no interface number 0 [ 276.393698][ T5903] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 276.416285][ T5903] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 276.451702][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 276.470477][ T5903] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 276.515890][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.530014][ T5903] usb 3-1: Product: syz [ 276.536229][ T5903] usb 3-1: Manufacturer: syz [ 276.543238][ T5903] usb 3-1: SerialNumber: syz [ 276.556111][ T5903] usb 3-1: config 0 descriptor?? [ 276.899087][ T5903] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input8 [ 276.910945][ T30] audit: type=1400 audit(1741846034.185:876): avc: denied { read } for pid=5174 comm="acpid" name="mouse1" dev="devtmpfs" ino=2968 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.999115][ T30] audit: type=1400 audit(1741846034.185:877): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2968 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.069430][ T5866] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 277.140382][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 277.151523][ T30] audit: type=1400 audit(1741846034.415:878): avc: denied { getopt } for pid=8204 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.171797][ T8205] netlink: 'syz.2.604': attribute type 21 has an invalid length. [ 277.308580][ T5903] usb 3-1: USB disconnect, device number 16 [ 277.349241][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 277.903865][ T8232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.911449][ T5903] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 277.926044][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 277.960824][ T5866] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 278.069992][ T5903] usb 3-1: device descriptor read/64, error -32 [ 278.087531][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 278.209232][ T5866] usb 1-1: can't read configurations, error -61 [ 279.079621][ T5903] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 279.376385][ T8247] 9pnet_fd: Insufficient options for proto=fd [ 279.582204][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 279.652038][ T8249] 9pnet_fd: Insufficient options for proto=fd [ 279.678893][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.690523][ T5903] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 279.706361][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.811261][ T5903] usb 3-1: config 0 descriptor?? [ 280.180200][ T30] audit: type=1400 audit(1741846037.455:879): avc: denied { write } for pid=8251 comm="syz.0.616" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 280.268599][ T5903] pantherlord 0003:0E8F:0003.0002: item fetching failed at offset 3/5 [ 280.287643][ T5903] pantherlord 0003:0E8F:0003.0002: parse failed [ 280.299306][ T5903] pantherlord 0003:0E8F:0003.0002: probe with driver pantherlord failed with error -22 [ 280.350963][ T8256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.616'. [ 280.363453][ T30] audit: type=1400 audit(1741846037.625:880): avc: denied { getopt } for pid=8251 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.469814][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.490393][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.515915][ T5866] usb 3-1: USB disconnect, device number 18 [ 280.747911][ T5903] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 280.806714][ T30] audit: type=1400 audit(1741846038.065:881): avc: denied { append } for pid=8267 comm="syz.0.620" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.978321][ T8273] FAULT_INJECTION: forcing a failure. [ 280.978321][ T8273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.994659][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 281.004727][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.0.620 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 281.004753][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.004764][ T8273] Call Trace: [ 281.004769][ T8273] [ 281.004779][ T8273] dump_stack_lvl+0x16c/0x1f0 [ 281.004808][ T8273] should_fail_ex+0x50a/0x650 [ 281.004838][ T8273] _copy_to_user+0x32/0xd0 [ 281.004858][ T8273] drm_read+0x3df/0x920 [ 281.004886][ T8273] ? __pfx_drm_read+0x10/0x10 [ 281.004910][ T8273] ? avc_policy_seqno+0x9/0x20 [ 281.004927][ T8273] ? selinux_file_permission+0x11f/0x580 [ 281.004955][ T8273] ? bpf_lsm_file_permission+0x9/0x10 [ 281.004974][ T8273] ? security_file_permission+0x71/0x210 [ 281.004999][ T8273] ? rw_verify_area+0xcf/0x680 [ 281.005023][ T8273] ? __pfx_drm_read+0x10/0x10 [ 281.005042][ T8273] vfs_read+0x1df/0xbf0 [ 281.005068][ T8273] ? __fget_files+0x1fc/0x3a0 [ 281.005085][ T8273] ? __pfx_lock_release+0x10/0x10 [ 281.005108][ T8273] ? __pfx_vfs_read+0x10/0x10 [ 281.005134][ T8273] ? lock_acquire+0x2f/0xb0 [ 281.005156][ T8273] ? __fget_files+0x40/0x3a0 [ 281.005175][ T8273] ? __fget_files+0x206/0x3a0 [ 281.005198][ T8273] ksys_read+0x12b/0x250 [ 281.005213][ T8273] ? __pfx_ksys_read+0x10/0x10 [ 281.005236][ T8273] do_syscall_64+0xcd/0x250 [ 281.005262][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.005285][ T8273] RIP: 0033:0x7f47fdb8d169 [ 281.005300][ T8273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.005316][ T8273] RSP: 002b:00007f47fe937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.005332][ T8273] RAX: ffffffffffffffda RBX: 00007f47fdda6080 RCX: 00007f47fdb8d169 [ 281.005344][ T8273] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 281.005353][ T8273] RBP: 00007f47fe937090 R08: 0000000000000000 R09: 0000000000000000 [ 281.005363][ T8273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.005372][ T8273] R13: 0000000000000001 R14: 00007f47fdda6080 R15: 00007ffe98a1e1d8 [ 281.005395][ T8273] [ 281.006355][ T5903] usb 5-1: config 254 has an invalid interface number: 167 but max is 0 [ 281.228525][ T5903] usb 5-1: config 254 has no interface number 0 [ 281.242792][ T5903] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 281.252430][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.262717][ T5903] usb 5-1: Product: syz [ 281.272370][ T5903] usb 5-1: Manufacturer: syz [ 281.281448][ T5903] usb 5-1: SerialNumber: syz [ 281.730377][ T8282] ./file0: Can't lookup blockdev [ 282.077951][ T30] audit: type=1400 audit(1741846039.345:882): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 282.097923][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.379304][ T30] audit: type=1400 audit(1741846039.505:883): avc: denied { setopt } for pid=8285 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.231854][ T5903] mxuport 5-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 284.268091][ T5903] mxuport 5-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 284.284984][ T5903] mxuport 5-1:254.167: probe with driver mxuport failed with error -71 [ 284.312327][ T5903] usb 5-1: USB disconnect, device number 20 [ 284.550354][ T30] audit: type=1400 audit(1741846041.695:884): avc: denied { create } for pid=8283 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 284.815614][ T8311] fuse: Bad value for 'fd' [ 285.017029][ T8309] 9pnet_fd: Insufficient options for proto=fd [ 285.072383][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 285.339424][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 285.571297][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.662450][ T30] audit: type=1400 audit(1741846042.915:885): avc: denied { connect } for pid=8331 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.929250][ T5865] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 286.082161][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 286.093742][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 286.103531][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 286.113361][ T9] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 286.123658][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.133909][ T5865] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 286.144654][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.157631][ T30] audit: type=1400 audit(1741846042.925:886): avc: denied { write } for pid=8331 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.183731][ T5865] usb 4-1: config 0 descriptor?? [ 286.183744][ T9] usb 5-1: config 0 descriptor?? [ 286.190911][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 286.203656][ T30] audit: type=1400 audit(1741846043.475:887): avc: denied { ioctl } for pid=8338 comm="syz.0.634" path="socket:[18017]" dev="sockfs" ino=18017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.205381][ T8340] vlan2: entered allmulticast mode [ 286.261743][ T8340] geneve0: entered allmulticast mode [ 286.280072][ T8340] bridge0: port 3(vlan2) entered blocking state [ 286.289276][ T8340] bridge0: port 3(vlan2) entered disabled state [ 286.307654][ T8340] vlan2: entered promiscuous mode [ 286.322183][ T8340] geneve0: entered promiscuous mode [ 286.329081][ T8340] bridge0: port 3(vlan2) entered blocking state [ 286.335906][ T8340] bridge0: port 3(vlan2) entered forwarding state [ 286.398676][ T9] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 286.418974][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.437448][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 286.649636][ T30] audit: type=1400 audit(1741846043.815:888): avc: denied { create } for pid=8342 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 286.939083][ T9] usb 5-1: USB disconnect, device number 21 [ 286.988135][ T5932] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 287.013838][ T30] audit: type=1400 audit(1741846043.825:889): avc: denied { read } for pid=8342 comm="syz.2.633" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.042637][ T30] audit: type=1400 audit(1741846043.825:890): avc: denied { open } for pid=8342 comm="syz.2.633" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.081748][ T8354] netlink: 'syz.2.636': attribute type 3 has an invalid length. [ 287.089944][ T8354] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.636'. [ 287.104404][ T30] audit: type=1400 audit(1741846043.835:891): avc: denied { ioctl } for pid=8342 comm="syz.2.633" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.154074][ T30] audit: type=1400 audit(1741846043.835:892): avc: denied { set_context_mgr } for pid=8342 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 287.174407][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 287.181278][ T5932] usb 1-1: config 1 has an invalid interface number: 9 but max is 2 [ 287.189487][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.200122][ T5932] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 287.209445][ T30] audit: type=1400 audit(1741846043.845:893): avc: denied { map } for pid=8342 comm="syz.2.633" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.234877][ T5932] usb 1-1: config 1 has no interface number 1 [ 287.241364][ T5932] usb 1-1: config 1 interface 9 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.254515][ T30] audit: type=1400 audit(1741846043.945:894): avc: denied { getopt } for pid=8347 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 287.274201][ T5932] usb 1-1: config 1 interface 9 has no altsetting 0 [ 287.284669][ T5932] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.293982][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.297775][ T8351] udevd[8351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.318424][ T5932] usb 1-1: Product: syz [ 287.323186][ T5932] usb 1-1: Manufacturer: syz [ 287.327855][ T5932] usb 1-1: SerialNumber: syz [ 287.405461][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.423743][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.574145][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 287.583165][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 287.624509][ T8365] 9pnet_fd: Insufficient options for proto=fd [ 287.639414][ T5866] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 288.599504][ T5865] usbhid 4-1:0.0: can't add hid device: -71 [ 288.631974][ T5865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.749096][ T5865] usb 4-1: USB disconnect, device number 14 [ 288.759438][ T8374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=8374 comm=syz.2.640 [ 289.252146][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 289.288752][ T8387] sp0: Synchronizing with TNC [ 289.684870][ T5932] usb 1-1: 0:2 : does not exist [ 289.776656][ T8392] IPVS: rr: TCP [::]:0 - no destination available [ 289.896157][ T5932] usb 1-1: unknown interface protocol 0x1, assuming v1 [ 290.005418][ T8394] block device autoloading is deprecated and will be removed. [ 290.356600][ T5932] usb 1-1: cannot find UAC_HEADER [ 290.431015][ T5932] snd-usb-audio 1-1:1.9: probe with driver snd-usb-audio failed with error -22 [ 290.453137][ T5932] usb 1-1: USB disconnect, device number 17 [ 291.123257][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.397531][ T5905] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 292.057821][ T8419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.069402][ T5905] usb 5-1: not running at top speed; connect to a high speed hub [ 292.079494][ T5905] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.094452][ T5905] usb 5-1: config 1 interface 0 has no altsetting 0 [ 292.108528][ T5905] usb 5-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.40 [ 292.117849][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.217981][ T5905] usb 5-1: Product: ᣽퍼쬬⷗鱝뙕₰艭ᴐഠ폵᧛佖닏䞠嬈㍓廛ೝ膬꩘퉨聯絍牣攒඿ᬂ芠兵낟粧ꊎ㜦⠒㰖戊鋻茆˪鏾퉞̵茷孂䨠喎绛襉ܯ꾦瞅藷깘鮄줲Ꙃ୽㜅閝䌬ꭼ伛퐪蝏殬᧼뮌漢⢼ࢢ䀩୻䪽恵㈷ [ 292.459301][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 292.459336][ T30] audit: type=1400 audit(1741846049.675:903): avc: denied { create } for pid=8420 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.746627][ T5905] usb 5-1: Manufacturer: ࠧ [ 292.751553][ T5905] usb 5-1: SerialNumber: syz [ 292.758152][ T30] audit: type=1400 audit(1741846049.685:904): avc: denied { setopt } for pid=8420 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.882495][ T8396] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.999286][ T30] audit: type=1400 audit(1741846050.135:905): avc: denied { create } for pid=8416 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 293.018939][ T30] audit: type=1400 audit(1741846050.145:906): avc: denied { connect } for pid=8416 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 293.996239][ T5905] usbhid 5-1:1.0: can't add hid device: -71 [ 294.036550][ T5905] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 294.152312][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 294.578584][ T5905] usb 5-1: USB disconnect, device number 23 [ 294.589661][ T8440] sp0: Synchronizing with TNC [ 294.664687][ T30] audit: type=1400 audit(1741846051.935:907): avc: denied { ioctl } for pid=8447 comm="syz.3.659" path="socket:[19093]" dev="sockfs" ino=19093 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.794126][ T30] audit: type=1400 audit(1741846051.935:908): avc: denied { setopt } for pid=8447 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.851383][ T30] audit: type=1400 audit(1741846051.935:909): avc: denied { write } for pid=8447 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.882879][ T30] audit: type=1400 audit(1741846052.105:910): avc: denied { listen } for pid=8446 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 294.903075][ T5866] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 294.925840][ T30] audit: type=1400 audit(1741846052.115:911): avc: denied { setopt } for pid=8446 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.075205][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 295.219399][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 295.281856][ T5866] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 295.331550][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.377584][ T5866] usb 4-1: Product: syz [ 295.397842][ T5866] usb 4-1: Manufacturer: syz [ 295.413257][ T5905] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 295.419179][ T5866] usb 4-1: SerialNumber: syz [ 295.531825][ T5866] usb 4-1: config 0 descriptor?? [ 295.539071][ T5866] appledisplay 4-1:0.0: Could not find int-in endpoint [ 295.547463][ T5866] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 295.594154][ T8459] binder: 8458:8459 ioctl c00c620f 0 returned -14 [ 295.612656][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 295.619315][ T5905] usb 2-1: no configurations [ 295.623925][ T5905] usb 2-1: can't read configurations, error -22 [ 295.892127][ T5905] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 295.893204][ T5866] usb 4-1: USB disconnect, device number 15 [ 296.112630][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 296.259218][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 296.311036][ T5905] usb 2-1: no configurations [ 296.315774][ T5905] usb 2-1: can't read configurations, error -22 [ 296.327029][ T5905] usb usb2-port1: attempt power cycle [ 296.486583][ T30] audit: type=1400 audit(1741846053.755:912): avc: denied { create } for pid=8460 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 296.759570][ T5905] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 296.784375][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 296.793514][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 296.880060][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 296.886594][ T5905] usb 2-1: no configurations [ 296.891635][ T5905] usb 2-1: can't read configurations, error -22 [ 297.041194][ T5905] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 297.050020][ T8482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.101010][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 297.106605][ T5905] usb 2-1: no configurations [ 297.112292][ T5905] usb 2-1: can't read configurations, error -22 [ 297.151342][ T5905] usb usb2-port1: unable to enumerate USB device [ 297.686227][ T8490] IPVS: rr: TCP [::]:0 - no destination available [ 298.198035][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 298.198045][ T30] audit: type=1400 audit(1741846055.465:914): avc: denied { append } for pid=8496 comm="syz.0.674" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 298.327463][ T8501] ipt_REJECT: ECHOREPLY no longer supported. [ 298.349727][ T30] audit: type=1400 audit(1741846055.625:915): avc: denied { bind } for pid=8500 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.475622][ T30] audit: type=1400 audit(1741846055.625:916): avc: denied { connect } for pid=8500 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.730597][ T5868] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 298.903175][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.072574][ T5868] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 299.142336][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.490185][ T5868] usb 2-1: config 0 descriptor?? [ 299.561556][ T8521] JFS: discard option not supported on device [ 299.782558][ T8521] Mount JFS Failure: -22 [ 299.786864][ T8521] jfs_mount failed w/return code = -22 [ 300.011391][ T8531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.684'. [ 300.445630][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 300.453545][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 300.578711][ T5868] usb 2-1: USB disconnect, device number 23 [ 301.036395][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 301.322177][ T30] audit: type=1400 audit(1741846058.565:917): avc: denied { create } for pid=8539 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 301.372384][ T30] audit: type=1400 audit(1741846058.565:918): avc: denied { write } for pid=8539 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 301.449423][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 301.780193][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 301.841577][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 301.853635][ T9] usb 1-1: no configurations [ 301.864009][ T9] usb 1-1: can't read configurations, error -22 [ 301.999456][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 302.469263][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 302.482190][ T9] usb 1-1: no configurations [ 302.508523][ T9] usb 1-1: can't read configurations, error -22 [ 302.532273][ T9] usb usb1-port1: attempt power cycle [ 302.899307][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 302.932171][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 302.938555][ T9] usb 1-1: no configurations [ 302.947943][ T9] usb 1-1: can't read configurations, error -22 [ 302.997389][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 303.109213][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 303.152605][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 303.168273][ T9] usb 1-1: no configurations [ 303.186644][ T9] usb 1-1: can't read configurations, error -22 [ 303.202663][ T9] usb usb1-port1: unable to enumerate USB device [ 304.993572][ T8588] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 306.552691][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.669826][ T8596] ./file0: Can't lookup blockdev [ 307.091673][ T8605] overlayfs: failed to resolve './file0': -2 [ 307.909882][ T30] audit: type=1400 audit(1741846065.185:919): avc: denied { bind } for pid=8604 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.401659][ T8614] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 309.780323][ T8607] syz.3.706 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 309.791271][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.3.706 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 309.791293][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.791303][ T8607] Call Trace: [ 309.791309][ T8607] [ 309.791316][ T8607] dump_stack_lvl+0x16c/0x1f0 [ 309.791346][ T8607] dump_header+0x101/0x930 [ 309.791374][ T8607] oom_kill_process+0x270/0xa60 [ 309.791396][ T8607] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 309.791423][ T8607] out_of_memory+0x351/0x1700 [ 309.791452][ T8607] ? __pfx_out_of_memory+0x10/0x10 [ 309.791474][ T8607] ? rcu_read_unlock+0x17/0x60 [ 309.791492][ T8607] ? find_held_lock+0x2d/0x110 [ 309.791517][ T8607] mem_cgroup_out_of_memory+0x207/0x270 [ 309.791540][ T8607] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 309.791569][ T8607] ? do_raw_spin_unlock+0x172/0x230 [ 309.791590][ T8607] try_charge_memcg+0x54c/0xaf0 [ 309.791612][ T8607] ? __pfx_try_charge_memcg+0x10/0x10 [ 309.791631][ T8607] ? rcu_read_unlock+0x17/0x60 [ 309.791649][ T8607] ? __pfx_lock_release+0x10/0x10 [ 309.791672][ T8607] ? trace_lock_acquire+0x14e/0x1f0 [ 309.791695][ T8607] ? mem_cgroup_swapin_charge_folio+0x200/0x460 [ 309.791720][ T8607] charge_memcg+0x8a/0x310 [ 309.791739][ T8607] mem_cgroup_swapin_charge_folio+0xbb/0x460 [ 309.791763][ T8607] __read_swap_cache_async+0x436/0x660 [ 309.791793][ T8607] ? __pfx___read_swap_cache_async+0x10/0x10 [ 309.791819][ T8607] ? swp_swap_info+0x90/0x130 [ 309.791839][ T8607] ? __pfx_swp_swap_info+0x10/0x10 [ 309.791860][ T8607] ? __pfx___lock_acquire+0x10/0x10 [ 309.791885][ T8607] swap_cluster_readahead+0x3ec/0x740 [ 309.791917][ T8607] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 309.791946][ T8607] ? __pfx_lock_release+0x10/0x10 [ 309.791981][ T8607] ? get_vma_policy+0x248/0x3c0 [ 309.792004][ T8607] swapin_readahead+0x12c/0xd60 [ 309.792031][ T8607] ? percpu_ref_tryget_live+0xe8/0x320 [ 309.792054][ T8607] ? __pfx_swapin_readahead+0x10/0x10 [ 309.792078][ T8607] ? __filemap_get_folio+0x333/0xbd0 [ 309.792109][ T8607] ? swap_cache_get_folio+0x1e0/0x460 [ 309.792135][ T8607] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 309.792159][ T8607] ? __pfx_get_swap_device+0x10/0x10 [ 309.792177][ T8607] ? __pfx___lock_acquire+0x10/0x10 [ 309.792204][ T8607] do_swap_page+0x680/0x5a70 [ 309.792236][ T8607] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 309.792261][ T8607] ? rcu_is_watching+0x12/0xc0 [ 309.792279][ T8607] ? trace_lock_acquire+0x14e/0x1f0 [ 309.792298][ T8607] ? __pfx_do_swap_page+0x10/0x10 [ 309.792322][ T8607] ? lock_acquire+0x2f/0xb0 [ 309.792343][ T8607] ? ___pte_offset_map+0x42/0x540 [ 309.792365][ T8607] ? __pfx_default_wake_function+0x10/0x10 [ 309.792390][ T8607] ? ___pte_offset_map+0x1b9/0x540 [ 309.792419][ T8607] __handle_mm_fault+0x117f/0x2c60 [ 309.792440][ T8607] ? lock_vma_under_rcu+0x6b9/0x980 [ 309.792466][ T8607] ? __pfx___handle_mm_fault+0x10/0x10 [ 309.792507][ T8607] handle_mm_fault+0x3fa/0xaa0 [ 309.792530][ T8607] do_user_addr_fault+0x60d/0x13f0 [ 309.792560][ T8607] exc_page_fault+0x5c/0xc0 [ 309.792583][ T8607] asm_exc_page_fault+0x26/0x30 [ 309.792605][ T8607] RIP: 0033:0x7ff1bd7b4f00 [ 309.792619][ T8607] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 309.792635][ T8607] RSP: 002b:00007ffc6583e938 EFLAGS: 00010202 [ 309.792648][ T8607] RAX: 00000000fffffffa RBX: 00007ff1bd9a5fa0 RCX: 0000000000000000 [ 309.792658][ T8607] RDX: 00007ffc6583e980 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.792668][ T8607] RBP: 00007ff1bd9a7ba0 R08: 000000000000e598 R09: 00007ff1be691000 [ 309.792683][ T8607] R10: 0000000000000000 R11: 002b1cac439de5b3 R12: 000000000004c241 [ 309.792693][ T8607] R13: 00007ff1bd9a6320 R14: ffffffffffffffff R15: 00007ffc6583eac0 [ 309.792718][ T8607] [ 309.792724][ T8607] memory: usage 307200kB, limit 307200kB, failcnt 3790 [ 310.168591][ T8607] memory+swap: usage 192220kB, limit 9007199254740988kB, failcnt 0 [ 310.176566][ T8607] kmem: usage 183868kB, limit 9007199254740988kB, failcnt 0 [ 310.183900][ T8607] Memory cgroup stats for /syz3: [ 310.184025][ T8607] cache 8192 [ 310.192256][ T8607] rss 0 [ 310.195016][ T8607] rss_huge 0 [ 310.198204][ T8607] shmem 0 [ 310.201176][ T8607] mapped_file 8192 [ 310.204887][ T8607] dirty 8192 [ 310.208072][ T8607] writeback 0 [ 310.211386][ T8607] workingset_refault_anon 112 [ 310.216056][ T8607] workingset_refault_file 174 [ 310.220809][ T8607] swap 4464640 [ 310.224178][ T8607] swapcached 0 [ 310.227539][ T8607] pgpgin 177727 [ 310.231041][ T8607] pgpgout 177725 [ 310.234580][ T8607] pgfault 193624 [ 310.238116][ T8607] pgmajfault 94 [ 310.241620][ T8607] inactive_anon 0 [ 310.245244][ T8607] active_anon 0 [ 310.248694][ T8607] inactive_file 8192 [ 310.252642][ T8607] active_file 0 [ 310.256093][ T8607] unevictable 0 [ 310.259635][ T8607] hierarchical_memory_limit 314572800 [ 310.264997][ T8607] hierarchical_memsw_limit 9223372036854771712 [ 310.271184][ T8607] total_cache 8192 [ 310.274894][ T8607] total_rss 0 [ 310.278164][ T8607] total_rss_huge 0 [ 310.281900][ T8607] total_shmem 0 [ 310.285349][ T8607] total_mapped_file 8192 [ 310.289615][ T8607] total_dirty 8192 [ 310.293324][ T8607] total_writeback 0 [ 310.297120][ T8607] total_workingset_refault_anon 112 [ 310.302333][ T8607] total_workingset_refault_file 174 [ 310.307519][ T8607] total_swap 4464640 [ 310.311462][ T8607] total_swapcached 0 [ 310.315345][ T8607] total_pgpgin 177727 [ 310.319341][ T8607] total_pgpgout 177725 [ 310.323398][ T8607] total_pgfault 193624 [ 310.327456][ T8607] total_pgmajfault 94 [ 310.331481][ T8607] total_inactive_anon 0 [ 310.335622][ T8607] total_active_anon 0 [ 310.339630][ T8607] total_inactive_file 8192 [ 310.344031][ T8607] total_active_file 0 [ 310.348002][ T8607] total_unevictable 0 [ 310.352028][ T8607] anon_cost 0 [ 310.355304][ T8607] file_cost 0 [ 310.358579][ T8607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.706,pid=8607,uid=0 [ 310.373480][ T8607] Memory cgroup out of memory: Killed process 8607 (syz.3.706) total-vm:112560kB, anon-rss:928kB, file-rss:31324kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 310.926810][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 310.956514][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 310.987500][ T30] audit: type=1400 audit(1741846068.245:920): avc: denied { connect } for pid=8625 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 311.098797][ T30] audit: type=1400 audit(1741846068.245:921): avc: denied { name_connect } for pid=8625 comm="syz.0.710" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 311.122150][ T8622] 9pnet_fd: Insufficient options for proto=fd [ 311.173110][ T30] audit: type=1400 audit(1741846068.295:922): avc: denied { map } for pid=8625 comm="syz.0.710" path="socket:[20522]" dev="sockfs" ino=20522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 311.238610][ T30] audit: type=1400 audit(1741846068.305:923): avc: denied { map } for pid=8625 comm="syz.0.710" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 311.325096][ T30] audit: type=1400 audit(1741846068.595:924): avc: denied { read } for pid=8635 comm="syz.1.714" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 311.389268][ T30] audit: type=1400 audit(1741846068.595:925): avc: denied { open } for pid=8635 comm="syz.1.714" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 311.437956][ T30] audit: type=1400 audit(1741846068.595:926): avc: denied { ioctl } for pid=8635 comm="syz.1.714" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 311.553518][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 311.622374][ T30] audit: type=1400 audit(1741846068.875:927): avc: denied { name_connect } for pid=8637 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 311.750862][ T30] audit: type=1400 audit(1741846068.895:928): avc: denied { listen } for pid=8637 comm="syz.3.715" lport=35763 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.011509][ T5903] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 312.179308][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 312.247884][ T5903] usb 5-1: no configurations [ 312.834628][ T5903] usb 5-1: can't read configurations, error -22 [ 313.035319][ T5903] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 313.199480][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 313.219262][ T5870] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 313.325271][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 313.325305][ T30] audit: type=1400 audit(1741846070.565:935): avc: denied { ioctl } for pid=8654 comm="syz.2.720" path="socket:[20633]" dev="sockfs" ino=20633 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 313.681172][ T5903] usb 5-1: no configurations [ 313.685812][ T5903] usb 5-1: can't read configurations, error -22 [ 313.704776][ T5903] usb usb5-port1: attempt power cycle [ 313.856499][ T5870] usb 2-1: config 255 has an invalid interface number: 20 but max is 0 [ 313.873371][ T5870] usb 2-1: config 255 has no interface number 0 [ 313.886098][ T5870] usb 2-1: config 255 interface 20 has no altsetting 0 [ 313.959328][ T5870] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 313.973847][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.995083][ T5870] usb 2-1: Product: syz [ 314.022684][ T5870] usb 2-1: Manufacturer: syz [ 314.027541][ T5870] usb 2-1: SerialNumber: syz [ 314.053286][ T5903] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 314.174310][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 314.188837][ T5903] usb 5-1: no configurations [ 314.201127][ T5903] usb 5-1: can't read configurations, error -22 [ 314.917527][ T5903] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 315.125005][ T8668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8668 comm=syz.2.723 [ 315.162249][ T5903] usb 5-1: device not accepting address 27, error -71 [ 315.173048][ T5903] usb usb5-port1: unable to enumerate USB device [ 315.471504][ T5903] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 315.629921][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 315.636584][ T5903] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 315.645180][ T5903] usb 5-1: config 179 has no interface number 0 [ 315.660838][ T5903] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 315.672309][ T5903] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 315.698089][ T5903] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.718904][ T5903] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 315.738696][ T5903] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.757731][ T5903] usb 5-1: config 179 interface 65 has no altsetting 0 [ 315.764820][ T5903] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 315.774023][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.835045][ T5903] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 316.006366][ T5903] usb 5-1: USB disconnect, device number 28 [ 316.006416][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 316.027302][ T8666] netlink: 'syz.2.723': attribute type 25 has an invalid length. [ 316.035225][ T8666] netlink: 184 bytes leftover after parsing attributes in process `syz.2.723'. [ 316.046743][ T5903] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 316.119927][ T5870] usb 2-1: USB disconnect, device number 24 [ 316.222249][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 316.514907][ T30] audit: type=1400 audit(1741846073.525:936): avc: denied { read } for pid=8671 comm="syz.0.725" path="socket:[19737]" dev="sockfs" ino=19737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 316.782287][ T30] audit: type=1400 audit(1741846074.045:937): avc: denied { create } for pid=8674 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 316.814293][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.820620][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.803212][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 317.812349][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 318.077615][ T30] audit: type=1400 audit(1741846075.335:938): avc: denied { setopt } for pid=8674 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 318.529576][ T8700] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 319.016988][ T8679] 9pnet_fd: Insufficient options for proto=fd [ 319.229787][ T30] audit: type=1400 audit(1741846076.505:939): avc: denied { read write } for pid=8707 comm="syz.1.734" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 319.232398][ T30] audit: type=1400 audit(1741846076.505:940): avc: denied { open } for pid=8707 comm="syz.1.734" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 319.725496][ T30] audit: type=1400 audit(1741846076.995:941): avc: denied { ioctl } for pid=8707 comm="syz.1.734" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20727 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 320.049348][ T5866] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 320.219370][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 320.273535][ T5866] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 320.277244][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.277466][ T5866] usb 5-1: Product: syz [ 320.277521][ T5866] usb 5-1: Manufacturer: syz [ 320.277575][ T5866] usb 5-1: SerialNumber: syz [ 320.392287][ T5866] usb 5-1: config 0 descriptor?? [ 320.435205][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.669268][ T30] audit: type=1400 audit(1741846077.935:942): avc: denied { execute } for pid=8717 comm="syz.1.738" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 320.674723][ T8721] netlink: 'syz.1.738': attribute type 9 has an invalid length. [ 320.679721][ T5866] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 320.679740][ T5866] c5 61 91 3a d8 64 a9 34 [ 320.679808][ T5866] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 321.727832][ T8737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.742'. [ 323.246613][ T5868] usb 5-1: USB disconnect, device number 29 [ 323.314602][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.325671][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.335025][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.344438][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.354092][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.363789][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.373484][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.382899][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.392530][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 323.402197][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 324.020377][ T30] audit: type=1400 audit(1741846081.295:943): avc: denied { shutdown } for pid=8747 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 324.650894][ T30] audit: type=1400 audit(1741846081.925:944): avc: denied { bind } for pid=8765 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.708118][ T30] audit: type=1400 audit(1741846081.975:945): avc: denied { setopt } for pid=8747 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.761579][ T30] audit: type=1400 audit(1741846082.035:946): avc: denied { create } for pid=8747 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 325.063025][ T8772] SET target dimension over the limit! [ 325.573572][ T30] audit: type=1400 audit(1741846082.835:947): avc: denied { setopt } for pid=8747 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 325.949314][ T30] audit: type=1400 audit(1741846082.875:948): avc: denied { write } for pid=8747 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 326.058702][ T30] audit: type=1400 audit(1741846082.875:949): avc: denied { nlmsg_read } for pid=8747 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 326.197339][ T8783] overlayfs: failed to resolve './file1': -2 [ 326.229230][ T5903] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 326.419434][ T5903] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 326.431851][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.476557][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 326.518106][ T5903] usb 4-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 326.529822][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.591598][ T5903] usb 4-1: config 0 descriptor?? [ 326.822359][ T30] audit: type=1400 audit(1741846083.975:950): avc: denied { setopt } for pid=8791 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.993414][ T8801] ./file0: Can't lookup blockdev [ 327.387856][ T30] audit: type=1400 audit(1741846084.345:951): avc: denied { create } for pid=8795 comm="syz.4.761" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 327.433720][ T30] audit: type=1400 audit(1741846084.355:952): avc: denied { write } for pid=8795 comm="syz.4.761" name="file0" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 327.456343][ T30] audit: type=1400 audit(1741846084.355:953): avc: denied { open } for pid=8795 comm="syz.4.761" path="/146/file0" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 327.684680][ T5903] usbhid 4-1:0.0: can't add hid device: -71 [ 327.691669][ T5903] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 327.720836][ T5903] usb 4-1: USB disconnect, device number 16 [ 327.933121][ T8816] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 328.268976][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 328.273334][ T8819] sp0: Synchronizing with TNC [ 329.499699][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 330.378425][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 330.387567][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 330.519470][ T8811] 9pnet_fd: Insufficient options for proto=fd [ 330.545758][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 330.545835][ T30] audit: type=1400 audit(1741846087.815:956): avc: denied { append } for pid=8830 comm="syz.3.770" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 330.607689][ T8831] netlink: 92 bytes leftover after parsing attributes in process `syz.3.770'. [ 330.630105][ T8831] netlink: 200 bytes leftover after parsing attributes in process `syz.3.770'. [ 330.662364][ T30] audit: type=1400 audit(1741846087.925:957): avc: denied { append } for pid=8830 comm="syz.3.770" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 330.685064][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.720448][ T5870] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 330.765190][ T30] audit: type=1400 audit(1741846087.925:958): avc: denied { ioctl } for pid=8830 comm="syz.3.770" path="socket:[20009]" dev="sockfs" ino=20009 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 330.789622][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.805674][ T8839] mkiss: ax0: crc mode is auto. [ 330.929370][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 330.946228][ T5870] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 330.962866][ T5870] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 330.973422][ T5870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.084604][ T5870] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.134739][ T8846] ./file0: Can't lookup blockdev [ 331.513283][ T6891] net_ratelimit: 250 callbacks suppressed [ 331.513301][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.516954][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.519725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.535657][ T5870] usb 3-1: Product: ㆠ苩틬龆层뺩鐀ᩐ艘ᱍ띴쒵朾ꔈ踓긎옹쒥⌺죭㲋뚾䚺폱ꁤ㯢鬟ຌ䈗彷㨤왠퓚嬽ꟻ왝貐棱춓᪁⒃騦已穧ᴡS薪ퟹ䏕໿陿䲤ڂ畚ₚꠄ稗䤭훓戥䧏濪ᇡ皅똔☇馬퀵캒饾셦촇䳩䰒 [ 331.888699][ T5870] usb 3-1: Manufacturer: ᠁ [ 331.898202][ T5870] usb 3-1: SerialNumber: ꭑ [ 332.248372][ T8854] ./file0: Can't lookup blockdev [ 332.297401][ T5905] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 332.845464][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 332.866282][ T5905] usb 4-1: no configurations [ 332.897264][ T5905] usb 4-1: can't read configurations, error -22 [ 332.953848][ T5870] usb 3-1: 0:2 : does not exist [ 333.098844][ T5905] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 333.126399][ T5870] usb 3-1: USB disconnect, device number 19 [ 334.138294][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.188697][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.223015][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.235068][ T30] audit: type=1400 audit(1741846091.485:959): avc: denied { listen } for pid=8876 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 334.283731][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 334.319718][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 334.325730][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.369046][ T8881] bridge0: port 3(vlan2) entered blocking state [ 334.375455][ T5905] usb 4-1: device not accepting address 18, error -71 [ 334.402700][ T5905] usb usb4-port1: attempt power cycle [ 334.474539][ T8890] overlayfs: failed to resolve './file1': -2 [ 334.480970][ T8881] bridge0: port 3(vlan2) entered disabled state [ 334.497642][ T8889] binder: 8885:8889 ioctl 8982 0 returned -22 [ 334.579467][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.591936][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.601666][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.611491][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.619974][ T8881] vlan2: entered allmulticast mode [ 334.659009][ T8881] vlan2: left allmulticast mode [ 334.662287][ T8877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.049236][ T5905] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 335.059403][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 335.068171][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 335.110424][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 335.130402][ T5905] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 335.158836][ T5905] usb 4-1: config 0 has no interface number 0 [ 335.178233][ T8894] 9pnet_fd: Insufficient options for proto=fd [ 335.194429][ T5905] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 335.213751][ T5905] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 335.226490][ T5905] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 335.240236][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 335.248399][ T5905] usb 4-1: Product: syz [ 335.307898][ T5905] usb 4-1: SerialNumber: syz [ 335.321789][ T5905] usb 4-1: config 0 descriptor?? [ 335.332108][ T5905] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 335.356587][ T5905] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 336.488018][ T5905] ------------[ cut here ]------------ [ 336.494114][ T5905] URB ffff8880327df100 submitted while active [ 337.280737][ C0] net_ratelimit: 51 callbacks suppressed [ 337.280756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.619281][ T5905] WARNING: CPU: 0 PID: 5905 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 [ 337.629011][ T5905] Modules linked in: [ 337.632992][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: kworker/0:8 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 337.643796][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.653884][ T5905] Workqueue: usb_hub_wq hub_event [ 337.658927][ T5905] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 337.664687][ T5905] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 3e 6b a6 fa c6 05 15 7c 37 09 01 90 48 c7 c7 00 a1 2f 8c 48 89 de e8 17 9b 66 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 337.684372][ T5905] RSP: 0018:ffffc9000499eea8 EFLAGS: 00010282 [ 337.690499][ T5905] RAX: 0000000000000000 RBX: ffff8880327df100 RCX: ffffc90019360000 [ 337.698474][ T5905] RDX: 0000000000100000 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 337.706502][ T5905] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 337.714524][ T5905] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803721f010 [ 337.722654][ T5905] R13: ffff88803721f0a0 R14: ffff88803721f050 R15: 0000000000000000 [ 337.730659][ T5905] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 337.739607][ T5905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.746194][ T5905] CR2: 00007f6844a19519 CR3: 000000000df80000 CR4: 00000000003526f0 [ 337.754246][ T5905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 337.762238][ T5905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 337.770240][ T5905] Call Trace: [ 337.773515][ T5905] [ 337.776450][ T5905] ? __warn+0xea/0x3c0 [ 337.780552][ T5905] ? preempt_schedule_notrace+0x62/0xe0 [ 337.786105][ T5905] ? usb_submit_urb+0x14da/0x1730 [ 337.791170][ T5905] ? report_bug+0x3c0/0x580 [ 337.795695][ T5905] ? handle_bug+0x54/0xa0 [ 337.800082][ T5905] ? exc_invalid_op+0x17/0x50 [ 337.800522][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.804749][ T5905] ? asm_exc_invalid_op+0x1a/0x20 [ 337.813000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.817898][ T5905] ? __warn_printk+0x1a6/0x350 [ 337.830722][ T5905] ? usb_submit_urb+0x14da/0x1730 [ 337.835755][ T5905] ? usb_submit_urb+0x14d9/0x1730 [ 337.840822][ T5905] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 337.846640][ T5905] ? __pm_runtime_resume+0xc3/0x170 [ 337.851909][ T5905] cm109_input_open+0x271/0x480 [ 337.854811][ T8920] ./file0: Can't lookup blockdev [ 337.856755][ T5905] input_open_device+0x230/0x390 [ 337.866702][ T5905] ? __pfx_cm109_input_open+0x10/0x10 [ 337.872112][ T5905] kbd_connect+0x103/0x160 [ 337.876545][ T5905] input_attach_handler.isra.0+0x181/0x260 [ 337.882467][ T5905] input_register_device+0xa84/0x1130 [ 337.887858][ T5905] cm109_usb_probe+0x122f/0x17c0 [ 337.892998][ T5905] usb_probe_interface+0x300/0x9c0 [ 337.898133][ T5905] ? __pfx_usb_probe_interface+0x10/0x10 [ 337.903819][ T5905] really_probe+0x23e/0xa90 [ 337.908332][ T5905] __driver_probe_device+0x1de/0x440 [ 337.913815][ T5905] driver_probe_device+0x4c/0x1b0 [ 337.919686][ T5905] __device_attach_driver+0x1df/0x310 [ 337.919717][ T5905] ? __pfx___device_attach_driver+0x10/0x10 [ 337.919739][ T5905] bus_for_each_drv+0x157/0x1e0 [ 337.919770][ T5905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 337.919798][ T5905] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.919826][ T5905] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 337.919855][ T5905] __device_attach+0x1e8/0x4b0 [ 337.919878][ T5905] ? __pfx___device_attach+0x10/0x10 [ 337.919903][ T5905] ? do_raw_spin_unlock+0x172/0x230 [ 337.919928][ T5905] bus_probe_device+0x17f/0x1c0 [ 337.919952][ T5905] device_add+0x114b/0x1a70 [ 337.919980][ T5905] ? __pfx_device_add+0x10/0x10 [ 337.920001][ T5905] ? preempt_schedule_thunk+0x1a/0x30 [ 337.920056][ T5905] usb_set_configuration+0x10cb/0x1c50 [ 337.920099][ T5905] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 337.920120][ T5905] usb_generic_driver_probe+0xb1/0x110 [ 337.920141][ T5905] usb_probe_device+0xec/0x3e0 [ 337.920164][ T5905] ? __pfx_usb_probe_device+0x10/0x10 [ 337.920186][ T5905] really_probe+0x23e/0xa90 [ 337.920216][ T5905] __driver_probe_device+0x1de/0x440 [ 337.920238][ T5905] ? usb_driver_applicable+0x1c7/0x220 [ 337.935169][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 337.936374][ T5905] driver_probe_device+0x4c/0x1b0 [ 337.941982][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 337.946929][ T5905] __device_attach_driver+0x1df/0x310 [ 337.953551][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 337.957612][ T5905] ? __pfx___device_attach_driver+0x10/0x10 [ 337.963271][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 337.968084][ T5905] bus_for_each_drv+0x157/0x1e0 [ 337.973302][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 337.977387][ T5905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 337.982578][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 337.987708][ T5905] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.995087][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 337.999292][ T5905] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.008653][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.009481][ T5905] __device_attach+0x1e8/0x4b0 [ 338.014941][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.019239][ T5905] ? __pfx___device_attach+0x10/0x10 [ 338.024638][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.029919][ T5905] ? do_raw_spin_unlock+0x172/0x230 [ 338.152521][ T5905] bus_probe_device+0x17f/0x1c0 [ 338.157393][ T5905] device_add+0x114b/0x1a70 [ 338.162027][ T5905] ? __pfx_device_add+0x10/0x10 [ 338.166896][ T5905] ? add_device_randomness+0xb8/0xf0 [ 338.172255][ T5905] usb_new_device+0xd09/0x1a20 [ 338.177044][ T5905] ? __pfx_usb_new_device+0x10/0x10 [ 338.182312][ T5905] hub_event+0x2d9a/0x4e10 [ 338.186767][ T5905] ? __pfx_hub_event+0x10/0x10 [ 338.191595][ T5905] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 338.197248][ T5905] ? rcu_is_watching+0x12/0xc0 [ 338.202048][ T5905] ? trace_lock_acquire+0x14e/0x1f0 [ 338.207261][ T5905] ? process_one_work+0x921/0x1ba0 [ 338.212401][ T5905] ? lock_acquire+0x2f/0xb0 [ 338.216896][ T5905] ? process_one_work+0x921/0x1ba0 [ 338.222057][ T5905] process_one_work+0x9c5/0x1ba0 [ 338.226997][ T5905] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 338.233135][ T5905] ? __pfx_process_one_work+0x10/0x10 [ 338.238510][ T5905] ? assign_work+0x1a0/0x250 [ 338.243112][ T5905] worker_thread+0x6c8/0xf00 [ 338.247700][ T5905] ? __kthread_parkme+0x148/0x220 [ 338.252746][ T5905] ? __pfx_worker_thread+0x10/0x10 [ 338.257865][ T5905] kthread+0x3af/0x750 [ 338.261962][ T5905] ? __pfx_kthread+0x10/0x10 [ 338.266547][ T5905] ? lock_acquire+0x2f/0xb0 [ 338.271087][ T5905] ? __pfx_kthread+0x10/0x10 [ 338.275700][ T5905] ret_from_fork+0x45/0x80 [ 338.280159][ T5905] ? __pfx_kthread+0x10/0x10 [ 338.284775][ T5905] ret_from_fork_asm+0x1a/0x30 [ 338.289597][ T5905] [ 338.292626][ T5905] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.299910][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: kworker/0:8 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 338.310681][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.320745][ T5905] Workqueue: usb_hub_wq hub_event [ 338.325778][ T5905] Call Trace: [ 338.329040][ T5905] [ 338.331950][ T5905] dump_stack_lvl+0x3d/0x1f0 [ 338.336544][ T5905] panic+0x71d/0x800 [ 338.340421][ T5905] ? __pfx_panic+0x10/0x10 [ 338.344838][ T5905] ? show_trace_log_lvl+0x29d/0x3d0 [ 338.350034][ T5905] ? usb_submit_urb+0x14da/0x1730 [ 338.355034][ T5905] check_panic_on_warn+0xab/0xb0 [ 338.359961][ T5905] __warn+0xf6/0x3c0 [ 338.363837][ T5905] ? preempt_schedule_notrace+0x62/0xe0 [ 338.369372][ T5905] ? usb_submit_urb+0x14da/0x1730 [ 338.374396][ T5905] report_bug+0x3c0/0x580 [ 338.378724][ T5905] handle_bug+0x54/0xa0 [ 338.382890][ T5905] exc_invalid_op+0x17/0x50 [ 338.387377][ T5905] asm_exc_invalid_op+0x1a/0x20 [ 338.392216][ T5905] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 338.397840][ T5905] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 3e 6b a6 fa c6 05 15 7c 37 09 01 90 48 c7 c7 00 a1 2f 8c 48 89 de e8 17 9b 66 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 338.417436][ T5905] RSP: 0018:ffffc9000499eea8 EFLAGS: 00010282 [ 338.423496][ T5905] RAX: 0000000000000000 RBX: ffff8880327df100 RCX: ffffc90019360000 [ 338.431461][ T5905] RDX: 0000000000100000 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 338.439430][ T5905] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 338.447393][ T5905] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803721f010 [ 338.455354][ T5905] R13: ffff88803721f0a0 R14: ffff88803721f050 R15: 0000000000000000 [ 338.463319][ T5905] ? __warn_printk+0x1a6/0x350 [ 338.468082][ T5905] ? usb_submit_urb+0x14d9/0x1730 [ 338.473092][ T5905] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 338.478893][ T5905] ? __pm_runtime_resume+0xc3/0x170 [ 338.484079][ T5905] cm109_input_open+0x271/0x480 [ 338.488916][ T5905] input_open_device+0x230/0x390 [ 338.493835][ T5905] ? __pfx_cm109_input_open+0x10/0x10 [ 338.499205][ T5905] kbd_connect+0x103/0x160 [ 338.503609][ T5905] input_attach_handler.isra.0+0x181/0x260 [ 338.509401][ T5905] input_register_device+0xa84/0x1130 [ 338.514764][ T5905] cm109_usb_probe+0x122f/0x17c0 [ 338.519692][ T5905] usb_probe_interface+0x300/0x9c0 [ 338.524793][ T5905] ? __pfx_usb_probe_interface+0x10/0x10 [ 338.530414][ T5905] really_probe+0x23e/0xa90 [ 338.534903][ T5905] __driver_probe_device+0x1de/0x440 [ 338.540177][ T5905] driver_probe_device+0x4c/0x1b0 [ 338.545193][ T5905] __device_attach_driver+0x1df/0x310 [ 338.550549][ T5905] ? __pfx___device_attach_driver+0x10/0x10 [ 338.556433][ T5905] bus_for_each_drv+0x157/0x1e0 [ 338.561283][ T5905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 338.566646][ T5905] ? lockdep_hardirqs_on+0x7c/0x110 [ 338.571840][ T5905] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.577633][ T5905] __device_attach+0x1e8/0x4b0 [ 338.582391][ T5905] ? __pfx___device_attach+0x10/0x10 [ 338.587658][ T5905] ? do_raw_spin_unlock+0x172/0x230 [ 338.592842][ T5905] bus_probe_device+0x17f/0x1c0 [ 338.597679][ T5905] device_add+0x114b/0x1a70 [ 338.602185][ T5905] ? __pfx_device_add+0x10/0x10 [ 338.607030][ T5905] ? preempt_schedule_thunk+0x1a/0x30 [ 338.612409][ T5905] usb_set_configuration+0x10cb/0x1c50 [ 338.617877][ T5905] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 338.623926][ T5905] usb_generic_driver_probe+0xb1/0x110 [ 338.629368][ T5905] usb_probe_device+0xec/0x3e0 [ 338.634117][ T5905] ? __pfx_usb_probe_device+0x10/0x10 [ 338.639474][ T5905] really_probe+0x23e/0xa90 [ 338.643964][ T5905] __driver_probe_device+0x1de/0x440 [ 338.649232][ T5905] ? usb_driver_applicable+0x1c7/0x220 [ 338.654681][ T5905] driver_probe_device+0x4c/0x1b0 [ 338.659700][ T5905] __device_attach_driver+0x1df/0x310 [ 338.665065][ T5905] ? __pfx___device_attach_driver+0x10/0x10 [ 338.670944][ T5905] bus_for_each_drv+0x157/0x1e0 [ 338.675797][ T5905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 338.681160][ T5905] ? lockdep_hardirqs_on+0x7c/0x110 [ 338.686354][ T5905] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.692147][ T5905] __device_attach+0x1e8/0x4b0 [ 338.696898][ T5905] ? __pfx___device_attach+0x10/0x10 [ 338.702176][ T5905] ? do_raw_spin_unlock+0x172/0x230 [ 338.707363][ T5905] bus_probe_device+0x17f/0x1c0 [ 338.712199][ T5905] device_add+0x114b/0x1a70 [ 338.716693][ T5905] ? __pfx_device_add+0x10/0x10 [ 338.721530][ T5905] ? add_device_randomness+0xb8/0xf0 [ 338.726808][ T5905] usb_new_device+0xd09/0x1a20 [ 338.731566][ T5905] ? __pfx_usb_new_device+0x10/0x10 [ 338.736757][ T5905] hub_event+0x2d9a/0x4e10 [ 338.741189][ T5905] ? __pfx_hub_event+0x10/0x10 [ 338.745939][ T5905] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 338.751567][ T5905] ? rcu_is_watching+0x12/0xc0 [ 338.756316][ T5905] ? trace_lock_acquire+0x14e/0x1f0 [ 338.761500][ T5905] ? process_one_work+0x921/0x1ba0 [ 338.766605][ T5905] ? lock_acquire+0x2f/0xb0 [ 338.771098][ T5905] ? process_one_work+0x921/0x1ba0 [ 338.776207][ T5905] process_one_work+0x9c5/0x1ba0 [ 338.781145][ T5905] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 338.787211][ T5905] ? __pfx_process_one_work+0x10/0x10 [ 338.792580][ T5905] ? assign_work+0x1a0/0x250 [ 338.797162][ T5905] worker_thread+0x6c8/0xf00 [ 338.801748][ T5905] ? __kthread_parkme+0x148/0x220 [ 338.806763][ T5905] ? __pfx_worker_thread+0x10/0x10 [ 338.811869][ T5905] kthread+0x3af/0x750 [ 338.815930][ T5905] ? __pfx_kthread+0x10/0x10 [ 338.820513][ T5905] ? lock_acquire+0x2f/0xb0 [ 338.825013][ T5905] ? __pfx_kthread+0x10/0x10 [ 338.829592][ T5905] ret_from_fork+0x45/0x80 [ 338.833995][ T5905] ? __pfx_kthread+0x10/0x10 [ 338.838576][ T5905] ret_from_fork_asm+0x1a/0x30 [ 338.843336][ T5905] [ 338.846561][ T5905] Kernel Offset: disabled [ 338.850928][ T5905] Rebooting in 86400 seconds..