last executing test programs: 42.120754855s ago: executing program 4 (id=342): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() mmap(&(0x7f000045f000/0x3000)=nil, 0x3000, 0xa, 0x810, r0, 0xb35ef000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 41.070782055s ago: executing program 4 (id=346): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom(r0, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 40.947061368s ago: executing program 4 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) 40.715767268s ago: executing program 4 (id=352): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x703580) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000000000000700000095000000000100000000000000fbffdc33eee93a926189f654d060ab33e0d0f700000049861c431d574c833f6a3e2e0e71", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28]) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x44}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000200c040000420000fa3f000000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000100), 0x4001) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, 0x0, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 40.563918277s ago: executing program 3 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x80) statx(0xffffffffffffffff, 0x0, 0x4000, 0x200, &(0x7f0000000300)) dup(0xffffffffffffffff) getresuid(0x0, &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x10007, 0x1, 0x1000, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x7, 0x0, 0xe}) syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0xab4c, 0x800, 0x1}, 0x0, &(0x7f0000001040)) syz_80211_inject_frame(0x0, 0x0, 0xb5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0xf2f0540c6a304b27, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @dev, @private0, @local, @loopback, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast2, @ipv4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$pppl2tp(0x18, 0x1, 0x1) 38.564546635s ago: executing program 3 (id=356): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffb, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="000000000002", &(0x7f0000000600)=""/4103, 0xffffffff, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x64, r2, 0x1, 0x7bffffff, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe6b}]}]}, 0x64}}, 0x0) 38.324205558s ago: executing program 4 (id=357): r0 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "5037df2fa50af0e061ac19e6d52e916b3f3a8f13255c399ac01a8240428f79dd18fd08dc87eb36e63303d6b00417c269c72f3f637d9feb465baee80877f199e7", 0x3f}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES32=0x1, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r6 = gettid() pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000003c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r9, 0xc03064b7, &(0x7f0000000200)={r10, r11, r12, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) r13 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r13, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd80, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r6}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) 38.124825797s ago: executing program 3 (id=359): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x8085) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r3, 0x29, 0x5, 0x0, &(0x7f00000017c0)) 36.26129089s ago: executing program 3 (id=364): syz_io_uring_setup(0x8007c49, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x14, 0x1e, 0x201}, 0x14}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x40, &(0x7f0000002180)=0x0) io_submit(r2, 0x0, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000480)={r5, 0x0, r6, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c051}, 0x840) 35.908854853s ago: executing program 2 (id=366): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x801}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x37000000, @remote, 0x2}}}, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x4, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000013c0)=0xe00) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x65) 35.060075883s ago: executing program 3 (id=368): modify_ldt$write(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f00000016c0)={0xa5291200, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munmap(&(0x7f000060b000/0x3000)=nil, 0x3000) setsockopt$inet6_buf(r1, 0x29, 0xfdef24e54d523f5, 0x0, 0x0) r2 = io_uring_setup(0x2d58, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, 0x0, 0x0) listen(r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 35.001132656s ago: executing program 4 (id=370): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3a0000050000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r4, 0x7}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) 34.832087849s ago: executing program 3 (id=371): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) write$cgroup_int(r0, &(0x7f0000000040)=0x902, 0x12) write$selinux_access(r0, &(0x7f00000002c0)={'system_u:object_r:dri_device_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4d67}, 0x46) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x40400d4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="e4") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @local, 0xb3}}, 0x10000, 0x4, 0x0, 0xf9a, 0x42, 0x2, 0x4}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={r3, 0x3, 0x8, 0xfffff001, 0x80000000}, 0x14) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffff1b, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0x9, 0x0, 0x7fff, 0x2, 0x9, 0x9}}, {0x4}}]}]}, 0x58}}, 0x2000400c) creat(&(0x7f0000000000)='./file0\x00', 0x54) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x9, 'pim6reg0\x00', {0x10080}, 0xe}) 34.545547274s ago: executing program 2 (id=372): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0xc9, 0x5, 0x2, 0x8, 0x410}, @generic={0xe3, 0x9, 0x8, 0x1, 0x7f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaeac}]}, &(0x7f00000002c0)='syzkaller\x00', 0xfffffffd, 0x35, &(0x7f00000004c0)=""/53, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x3, 0x8}, 0x10, 0x2d6d6, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0), 0x10, 0xe209, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@map=0x1, 0x7, 0x1, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000780), &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYRES64=r0], &(0x7f0000000900)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x5, 0xc, 0x5}, {0x2, 0x5, 0xe, 0x7}, {0x4, 0x3, 0xa, 0x1}, {0x0, 0x1, 0x2, 0xe}, {0x0, 0x3, 0x9, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@fallback=r3, r1, 0x0, 0x2001, 0xffffffffffffffff, @value=r0, @void, @void, @void, r2}, 0x20) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x84800) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3cc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x60840, 0x8) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB="05"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r5, 0xefca115) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) 30.71198273s ago: executing program 2 (id=380): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYBLOB="b65c35baf6e0fc711ae57ff1ba41adc45a81ec1400b54c23fef8813404c0647bdd9ff232132f54bd2ba4bef550166e9f82bc97c8d29a098fe2e4868427dcc1f4941a37b776a80cd2f1080a087df9b1be78a4f1bbcddcbb08242a447cc805feeb453b62d563329dca0330ea2ef861", @ANYRESHEX=r4, @ANYRES64=r7, @ANYRES64=r2], 0xfffffdef}}, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 28.411436634s ago: executing program 2 (id=387): r0 = io_uring_setup(0x14f9, &(0x7f00000003c0)={0x0, 0xf31, 0x100, 0x7, 0x1d2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x200, 0x10000, 0x9, 0x0, [{0xff, 0x3, 0x8, '\x00', 0x1}, {0x9, 0x4, 0x0, '\x00', 0x4}, {0x3, 0xb4, 0x4, '\x00', 0x5}, {0x5, 0x6, 0x9, '\x00', 0x9}, {0x3, 0xd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xd}, {0xf, 0x6, 0xf, '\x00', 0x9}, {0x6, 0x8, 0xb, '\x00', 0xff}, {0x2a, 0x8, 0x1a, '\x00', 0xfb}, {0x2, 0x5, 0x40, '\x00', 0x4}, {0x9, 0x0, 0x6, '\x00', 0x4}, {0xe4, 0x4, 0x7, '\x00', 0x3}, {0x4, 0xb, 0x0, '\x00', 0x7}, {0x8, 0x8, 0x8, '\x00', 0x10}, {0xc, 0x9, 0x62, '\x00', 0x61}, {0x6, 0x3, 0x0, '\x00', 0xfa}, {0x8, 0x9, 0x5, '\x00', 0xb}, {0xfc, 0xd0, 0x2, '\x00', 0x4}, {0x3b, 0x5, 0x3, '\x00', 0x58}, {0x40, 0x7, 0x1}, {0x4, 0xb, 0xa, '\x00', 0x5}, {0x40, 0x7, 0x0, '\x00', 0x8}, {0x46, 0x3, 0x6, '\x00', 0xfd}, {0x5, 0x0, 0x2, '\x00', 0x6}]}}) close_range(r0, 0xffffffffffffffff, 0x200000) 27.918843683s ago: executing program 2 (id=390): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0xc9, 0x5, 0x2, 0x8, 0x410}, @generic={0xe3, 0x9, 0x8, 0x1, 0x7f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaeac}]}, &(0x7f00000002c0)='syzkaller\x00', 0xfffffffd, 0x35, &(0x7f00000004c0)=""/53, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x3, 0x8}, 0x10, 0x2d6d6, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0), 0x10, 0xe209, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@map=0x1, 0x7, 0x1, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000780), &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYRES64=r0], &(0x7f0000000900)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x5, 0xc, 0x5}, {0x2, 0x5, 0xe, 0x7}, {0x4, 0x3, 0xa, 0x1}, {0x0, 0x1, 0x2, 0xe}, {0x0, 0x3, 0x9, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@fallback=r3, r1, 0x0, 0x2001, 0xffffffffffffffff, @value=r0, @void, @void, @void, r2}, 0x20) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x84800) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3cc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x60840, 0x8) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB="05"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r5, 0xefca115) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) 23.127562915s ago: executing program 2 (id=399): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3a0000050000000bf91000000000000b7020000000000008500000085000000b70000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r4, 0x7}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) 21.363338588s ago: executing program 0 (id=402): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000180)={0x9, 0x80000001, 0x9, 0x4, 0x64, 0xa44}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4dd11876d04ce31a}, 0x20040800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfff7f038}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040005}, 0x8440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c000a000000000904000001020d00"], 0x0) 19.521562591s ago: executing program 32 (id=371): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) write$cgroup_int(r0, &(0x7f0000000040)=0x902, 0x12) write$selinux_access(r0, &(0x7f00000002c0)={'system_u:object_r:dri_device_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4d67}, 0x46) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x40400d4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="e4") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @local, 0xb3}}, 0x10000, 0x4, 0x0, 0xf9a, 0x42, 0x2, 0x4}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={r3, 0x3, 0x8, 0xfffff001, 0x80000000}, 0x14) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffff1b, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0x9, 0x0, 0x7fff, 0x2, 0x9, 0x9}}, {0x4}}]}]}, 0x58}}, 0x2000400c) creat(&(0x7f0000000000)='./file0\x00', 0x54) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x9, 'pim6reg0\x00', {0x10080}, 0xe}) 19.426294086s ago: executing program 33 (id=370): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3a0000050000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r4, 0x7}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) 19.057610113s ago: executing program 1 (id=406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x1000, 0x3fd, 0x3be}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000001200)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 18.84055376s ago: executing program 1 (id=407): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x449b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1d, 0x4, 0x2, 0x18, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x504}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) 18.485535742s ago: executing program 1 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=pref']) 18.434606379s ago: executing program 1 (id=409): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x80) listen(r0, 0xfffffff9) 18.388179681s ago: executing program 1 (id=410): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0xc9, 0x5, 0x2, 0x8, 0x410}, @generic={0xe3, 0x9, 0x8, 0x1, 0x7f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaeac}]}, &(0x7f00000002c0)='syzkaller\x00', 0xfffffffd, 0x35, &(0x7f00000004c0)=""/53, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x3, 0x8}, 0x10, 0x2d6d6, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0), 0x10, 0xe209, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@map=0x1, 0x7, 0x1, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000780), &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYRES64=r0], &(0x7f0000000900)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x5, 0xc, 0x5}, {0x2, 0x5, 0xe, 0x7}, {0x4, 0x3, 0xa, 0x1}, {0x0, 0x1, 0x2, 0xe}, {0x0, 0x3, 0x9, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@fallback=r3, r1, 0x0, 0x2001, 0xffffffffffffffff, @value=r0, @void, @void, @void, r2}, 0x20) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x84800) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3cc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x60840, 0x8) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB="05"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r5, 0xefca115) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) 18.330595275s ago: executing program 0 (id=411): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000019c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6220000}, 0xc, 0x0}, 0x40010) getresgid(&(0x7f0000000740)=0x0, &(0x7f0000001880), &(0x7f00000018c0)) setxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000001900)={{}, {0x1, 0x8}, [{0x2, 0x4}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x4, r6}, {0x2, 0x7}, {0x2, 0x2}], {}, [{0x8, 0x5}, {0x8, 0x2, r7}, {}], {0x10, 0x6}}, 0x7c, 0x3) r8 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000300)="6bf81a62556467291923d66fb632cbdd01d9067bbcd640a61650684c8f877a0cfc7fbc1f9304071e39650210becae69a499b56a7a9e411e39887846e95dc8ce2b5a99081c08e8d49b00e87f247d5", 0x4e, 0xfffffffffffffff8) keyctl$read(0xb, r8, &(0x7f0000001ac0)=""/4096, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff95"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 17.367549275s ago: executing program 0 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_io_uring_setup(0x7a9a, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd=r3, 0x2, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x54, 0xfffe0000, 0x1, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000004c0)=""/102400, 0x19000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) open_tree(r6, &(0x7f0000000000)='./file0\x00', 0x81000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) prctl$PR_SET_THP_DISABLE(0x19, 0x10000000000001) mount(0x0, 0x0, &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x2000, 0x9000}) 16.882677084s ago: executing program 0 (id=413): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 16.854638104s ago: executing program 0 (id=414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (fail_nth: 1) 16.607907872s ago: executing program 0 (id=415): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x449b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x504}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000100000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) 15.362651508s ago: executing program 1 (id=416): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xd, 0x0}, 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000cd00000085000000820000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffff13}, {}, {}, [@snprintf, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, @generic={0x8, 0x2, 0xc, 0x4, 0xc387}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xf5, &(0x7f0000000480)=""/245, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x1, 0xc000000}, 0x10, r1, r2, 0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, r5, r6, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x5, 0xa, 0xc}, {0x4, 0x5, 0x1}, {0x1, 0x2, 0x7, 0xc}], 0x10, 0x10, @void, @value}, 0x94) r7 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') 8.008304692s ago: executing program 34 (id=399): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3a0000050000000bf91000000000000b7020000000000008500000085000000b70000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r4, 0x7}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) 1.501875218s ago: executing program 35 (id=415): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x449b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x504}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000100000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) 0s ago: executing program 36 (id=416): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xd, 0x0}, 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000cd00000085000000820000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffff13}, {}, {}, [@snprintf, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, @generic={0x8, 0x2, 0xc, 0x4, 0xc387}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xf5, &(0x7f0000000480)=""/245, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x1, 0xc000000}, 0x10, r1, r2, 0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, r5, r6, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x5, 0xa, 0xc}, {0x4, 0x5, 0x1}, {0x1, 0x2, 0x7, 0xc}], 0x10, 0x10, @void, @value}, 0x94) r7 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') kernel console output (not intermixed with test programs): [ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.637096][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.654092][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.668897][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.678948][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.691176][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.701551][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.713192][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.724578][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.734640][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.745718][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.755966][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.766677][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.786470][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.824568][ T5829] veth0_macvtap: entered promiscuous mode [ 64.831561][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.842327][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.852240][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.863926][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.873913][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.889601][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.026291][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.056815][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.066041][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.077481][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.087219][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.153919][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.168894][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.178003][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.188362][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.213460][ T5829] veth1_macvtap: entered promiscuous mode [ 65.233243][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.238270][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.251773][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.265230][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.275435][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.286260][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.296086][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.306499][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.316636][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.327349][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.338545][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.359274][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.369926][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.381752][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.392244][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.402218][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.412719][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.423252][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.433776][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.444910][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.482693][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.492773][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.501982][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.512131][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.555264][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.586819][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.701290][ T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.713862][ T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.818865][ T5838] Bluetooth: hci0: command tx timeout [ 65.820646][ T55] Bluetooth: hci4: command tx timeout [ 65.824424][ T5838] Bluetooth: hci3: command tx timeout [ 65.830234][ T55] Bluetooth: hci2: command tx timeout [ 65.835488][ T5831] Bluetooth: hci1: command tx timeout [ 66.130932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.235139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.338895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.342313][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.359358][ T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.367627][ T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.375487][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.440696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 66.706354][ T5921] tmpfs: Bad value for 'mpol' [ 67.093643][ T740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.102240][ T740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.329274][ T740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.344023][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.344461][ T740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.429253][ T5926] tmpfs: Bad value for 'mpol' [ 67.793726][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.867472][ T5930] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.910132][ T5831] Bluetooth: hci2: command tx timeout [ 67.915554][ T5831] Bluetooth: hci4: command tx timeout [ 67.923176][ T5842] Bluetooth: hci1: command tx timeout [ 67.928578][ T5842] Bluetooth: hci0: command tx timeout [ 67.934091][ T5838] Bluetooth: hci3: command tx timeout [ 68.331758][ T5942] tmpfs: Bad value for 'mpol' [ 69.139356][ T5941] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.158518][ T47] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 69.313646][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 69.313660][ T30] audit: type=1400 audit(1745329822.409:154): avc: denied { read } for pid=5935 comm="syz.4.5" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.359854][ T5940] loop9: detected capacity change from 0 to 8 [ 69.370469][ T30] audit: type=1400 audit(1745329822.439:155): avc: denied { open } for pid=5935 comm="syz.4.5" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.394344][ T30] audit: type=1400 audit(1745329822.439:156): avc: denied { create } for pid=5935 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.433025][ T5940] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 69.444895][ T47] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 69.457626][ T5940] loop9: partition table partially beyond EOD, truncated [ 69.470872][ T30] audit: type=1400 audit(1745329822.519:157): avc: denied { allowed } for pid=5936 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.492064][ T5940] loop9: p1 size 81768186 extends beyond EOD, truncated [ 69.499245][ T47] usb 3-1: config 0 has no interface number 0 [ 69.504527][ T30] audit: type=1400 audit(1745329822.519:158): avc: denied { create } for pid=5936 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.556969][ T47] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 69.614781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.630002][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.660273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.740713][ T30] audit: type=1400 audit(1745329822.519:159): avc: denied { map } for pid=5936 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.768698][ T30] audit: type=1400 audit(1745329822.519:160): avc: denied { read write } for pid=5936 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.821101][ T47] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.840337][ T47] usb 3-1: config 0 interface 113 has no altsetting 0 [ 69.956237][ T47] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 70.125321][ T5875] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 70.145867][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.154270][ T47] usb 3-1: Product: syz [ 70.155822][ T5875] usb 4-1: can't read configurations, error -22 [ 70.158417][ T47] usb 3-1: Manufacturer: syz [ 70.268507][ T5959] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10'. [ 70.560234][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.591704][ T47] usb 3-1: SerialNumber: syz [ 70.634081][ T47] usb 3-1: config 0 descriptor?? [ 70.657976][ T5823] udevd[5823]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 70.681509][ C1] usb 3-1: NFC: Urb failure (status -71) [ 70.690837][ T47] usb 3-1: NFC: Unable to get FW version [ 70.746030][ T5875] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.786316][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 70.807868][ T47] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 70.843916][ T10] usb 1-1: can't read configurations, error -22 [ 70.865363][ T47] usb 3-1: USB disconnect, device number 2 [ 70.958547][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.969982][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.423454][ T5875] usb 4-1: device descriptor read/all, error -71 [ 71.447085][ T5966] netlink: 'syz.2.12': attribute type 5 has an invalid length. [ 71.544326][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.553098][ T5875] usb usb4-port1: attempt power cycle [ 71.763047][ T30] audit: type=1400 audit(1745329824.789:161): avc: denied { create } for pid=5965 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.042091][ T30] audit: type=1400 audit(1745329824.789:162): avc: denied { write } for pid=5965 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.184600][ T30] audit: type=1400 audit(1745329825.179:163): avc: denied { map } for pid=5969 comm="syz.1.13" path="socket:[7933]" dev="sockfs" ino=7933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.210720][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 72.218971][ T10] usb 1-1: can't read configurations, error -22 [ 72.227083][ T10] usb usb1-port1: attempt power cycle [ 72.891284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.994039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.080286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.089027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.452315][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.495860][ T5984] process 'syz.1.17' launched './file0' with NULL argv: empty string added [ 73.680061][ T10] usb 1-1: device not accepting address 4, error -71 [ 73.883753][ T5875] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.917783][ T5875] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 73.930107][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.380485][ T47] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 74.396046][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 74.396062][ T30] audit: type=1400 audit(1745329827.489:171): avc: denied { read write } for pid=5981 comm="syz.2.16" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.440183][ T5875] usb 4-1: Product: syz [ 74.444384][ T5875] usb 4-1: Manufacturer: syz [ 74.448990][ T5875] usb 4-1: SerialNumber: syz [ 74.466617][ T5875] r8152-cfgselector 4-1: Unknown version 0x0000 [ 74.471664][ T30] audit: type=1400 audit(1745329827.489:172): avc: denied { open } for pid=5981 comm="syz.2.16" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.477728][ T5875] r8152-cfgselector 4-1: config 0 descriptor?? [ 74.512710][ T30] audit: type=1400 audit(1745329827.529:173): avc: denied { ioctl } for pid=5981 comm="syz.2.16" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.551421][ T47] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 74.559873][ T47] usb 2-1: config 0 has no interface number 0 [ 74.580085][ T47] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 74.612191][ T47] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.626271][ T30] audit: type=1400 audit(1745329827.669:174): avc: denied { read append } for pid=5992 comm="syz.4.20" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.652502][ T47] usb 2-1: config 0 interface 113 has no altsetting 0 [ 74.659632][ T30] audit: type=1400 audit(1745329827.669:175): avc: denied { open } for pid=5992 comm="syz.4.20" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.685456][ T30] audit: type=1400 audit(1745329827.669:176): avc: denied { ioctl } for pid=5992 comm="syz.4.20" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.696915][ T47] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 74.710153][ T30] audit: type=1400 audit(1745329827.669:177): avc: denied { append } for pid=5992 comm="syz.4.20" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.733126][ T30] audit: type=1400 audit(1745329827.809:178): avc: denied { map_read map_write } for pid=5998 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.772622][ T5999] loop9: detected capacity change from 0 to 8 [ 74.785344][ T5999] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 74.791080][ T5999] loop9: partition table partially beyond EOD, truncated [ 74.810282][ T5999] loop9: p1 size 81768186 extends beyond EOD, truncated [ 74.812528][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.099149][ T47] usb 2-1: Product: syz [ 75.140592][ T47] usb 2-1: Manufacturer: syz [ 75.146943][ T47] usb 2-1: SerialNumber: syz [ 75.181014][ T47] usb 2-1: config 0 descriptor?? [ 75.211874][ C1] usb 2-1: NFC: Urb failure (status -71) [ 75.218199][ T47] usb 2-1: NFC: Unable to get FW version [ 75.224245][ T47] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 75.287516][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.471024][ T30] audit: type=1400 audit(1745329828.569:179): avc: denied { read write } for pid=6003 comm="syz.4.22" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.645813][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.672552][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 75.685641][ T6009] netlink: 388 bytes leftover after parsing attributes in process `syz.0.23'. [ 75.711518][ T30] audit: type=1400 audit(1745329828.809:180): avc: denied { read write } for pid=6007 comm="syz.0.23" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 75.715890][ T24] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 75.815835][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.864667][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.983996][ T5874] usb 2-1: USB disconnect, device number 2 [ 76.095337][ T6013] tmpfs: Unknown parameter '' [ 76.470597][ T9] cfg80211: failed to load regulatory.db [ 76.932372][ T6018] tmpfs: Unknown parameter '' [ 78.148038][ T6031] loop9: detected capacity change from 0 to 8 [ 78.162213][ T6032] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 78.167515][ T6032] loop9: partition table partially beyond EOD, truncated [ 78.175511][ T6032] loop9: p1 size 81768186 extends beyond EOD, truncated [ 79.671121][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.687009][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 79.687021][ T30] audit: type=1400 audit(1745329832.779:208): avc: denied { setopt } for pid=6048 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.711195][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 80.017108][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 80.780155][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 81.091436][ T9] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 81.111283][ T30] audit: type=1400 audit(1745329834.209:209): avc: denied { read } for pid=6048 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.121873][ T9] usb 2-1: config 0 has no interface number 0 [ 81.138524][ T9] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 81.151351][ T9] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.161845][ T9] usb 2-1: config 0 interface 113 has no altsetting 0 [ 81.639561][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 81.653527][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.663325][ T9] usb 2-1: Product: syz [ 81.671167][ T9] usb 2-1: Manufacturer: syz [ 81.676574][ T9] usb 2-1: SerialNumber: syz [ 81.690128][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.704251][ T9] usb 2-1: config 0 descriptor?? [ 81.733296][ C0] usb 2-1: NFC: Urb failure (status -71) [ 81.739222][ T9] usb 2-1: NFC: Unable to get FW version [ 81.745390][ T9] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 81.882172][ T5875] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 81.900112][ T5875] usb 3-1: can't read configurations, error -22 [ 81.992085][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.040053][ T5875] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.069747][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.092395][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.230158][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 82.273628][ T47] usb 5-1: no configurations [ 82.320779][ T47] usb 5-1: can't read configurations, error -22 [ 82.339445][ T5911] usb 2-1: USB disconnect, device number 3 [ 82.461299][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.469247][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.572128][ T5875] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 82.581909][ T5875] usb 3-1: can't read configurations, error -22 [ 82.588516][ T5875] usb usb3-port1: attempt power cycle [ 82.660250][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 82.666401][ T47] usb 5-1: no configurations [ 82.671233][ T47] usb 5-1: can't read configurations, error -22 [ 82.689702][ T47] usb usb5-port1: attempt power cycle [ 82.695916][ T24] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 82.704801][ T24] usb 1-1: can't read configurations, error -22 [ 82.952586][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 82.980420][ T5875] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.127359][ T6081] tmpfs: Bad value for 'mpol' [ 83.443946][ T5875] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 83.453268][ T5875] usb 3-1: can't read configurations, error -22 [ 83.467497][ T24] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 83.475638][ T24] usb 1-1: can't read configurations, error -22 [ 83.483015][ T24] usb usb1-port1: attempt power cycle [ 84.045208][ T5875] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 84.153810][ T5875] usb 3-1: device descriptor read/8, error -71 [ 84.390826][ T5875] usb usb3-port1: unable to enumerate USB device [ 84.440289][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 84.473919][ T30] audit: type=1400 audit(1745329837.549:210): avc: denied { write } for pid=6087 comm="syz.4.41" name="dev" dev="proc" ino=4026533021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 84.569885][ T24] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 84.634364][ T24] usb 1-1: can't read configurations, error -22 [ 84.703526][ T6092] netlink: 388 bytes leftover after parsing attributes in process `syz.1.42'. [ 84.810065][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 84.852142][ T24] usb 1-1: device descriptor read/8, error -71 [ 84.981722][ T24] usb usb1-port1: unable to enumerate USB device [ 86.274901][ T30] audit: type=1400 audit(1745329839.369:211): avc: denied { sqpoll } for pid=6108 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.582499][ T6102] netlink: 256 bytes leftover after parsing attributes in process `syz.1.44'. [ 86.725875][ T30] audit: type=1400 audit(1745329839.819:212): avc: denied { bind } for pid=6112 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.725901][ T6113] Bluetooth: MGMT ver 1.23 [ 86.827725][ T30] audit: type=1400 audit(1745329839.819:213): avc: denied { write } for pid=6112 comm="syz.3.48" path="socket:[8152]" dev="sockfs" ino=8152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.867944][ T30] audit: type=1400 audit(1745329839.879:214): avc: denied { create } for pid=6108 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.907479][ T30] audit: type=1400 audit(1745329839.879:215): avc: denied { listen } for pid=6108 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.927457][ T5875] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.001324][ T30] audit: type=1400 audit(1745329839.959:216): avc: denied { accept } for pid=6108 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.028829][ T30] audit: type=1400 audit(1745329839.999:217): avc: denied { create } for pid=6108 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.063442][ T30] audit: type=1400 audit(1745329840.039:218): avc: denied { getopt } for pid=6108 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.112079][ T5875] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 87.929383][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.117107][ T5875] usb 2-1: can't read configurations, error -22 [ 88.302997][ T30] audit: type=1400 audit(1745329840.149:219): avc: denied { map } for pid=6119 comm="syz.3.49" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.326256][ T30] audit: type=1400 audit(1745329840.149:220): avc: denied { execute } for pid=6119 comm="syz.3.49" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.389789][ T6128] loop9: detected capacity change from 0 to 8 [ 88.416289][ T5875] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.437553][ T5963] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 88.442976][ T5963] loop9: partition table partially beyond EOD, truncated [ 88.453049][ T5963] loop9: p1 size 81768186 extends beyond EOD, truncated [ 90.477087][ T6140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.537989][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 93.095636][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 93.121714][ T30] audit: type=1400 audit(1745329845.799:224): avc: denied { mount } for pid=6146 comm="syz.3.55" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.392111][ T30] audit: type=1400 audit(1745329846.489:225): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.590092][ T5874] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 93.751420][ T5874] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 93.760034][ T5874] usb 5-1: config 0 has no interface number 0 [ 93.766137][ T5874] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 93.798614][ T5920] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 93.799364][ T5874] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.873153][ T5874] usb 5-1: config 0 interface 113 has no altsetting 0 [ 93.893192][ T5874] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 93.978995][ T6167] netlink: 256 bytes leftover after parsing attributes in process `syz.0.61'. [ 94.671454][ T5920] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 94.860907][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.868924][ T5874] usb 5-1: Product: syz [ 94.873166][ T5874] usb 5-1: Manufacturer: syz [ 94.877854][ T5874] usb 5-1: SerialNumber: syz [ 94.944916][ T5874] usb 5-1: config 0 descriptor?? [ 94.991260][ C0] usb 5-1: NFC: Urb failure (status -71) [ 95.007489][ T5874] usb 5-1: NFC: Unable to get FW version [ 95.025155][ T5874] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 95.137110][ T5920] usb 3-1: config 0 has no interface number 0 [ 95.150882][ T5920] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 95.162618][ T5920] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.172884][ T5920] usb 3-1: config 0 interface 113 has no altsetting 0 [ 95.191271][ T5920] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 95.200506][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.208712][ T5920] usb 3-1: Product: syz [ 95.216882][ T5920] usb 3-1: Manufacturer: syz [ 95.221620][ T5920] usb 3-1: SerialNumber: syz [ 95.318114][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 95.561696][ T30] audit: type=1400 audit(1745329848.549:226): avc: denied { create } for pid=6171 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.597754][ T5920] usb 3-1: config 0 descriptor?? [ 95.618743][ C1] usb 3-1: NFC: Urb failure (status -71) [ 95.625480][ T5920] usb 3-1: NFC: Unable to get FW version [ 95.631539][ T5920] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 95.662106][ T24] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 95.675880][ T24] usb 1-1: can't read configurations, error -22 [ 95.678677][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.708584][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.733830][ T5920] usb 5-1: USB disconnect, device number 5 [ 95.810096][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 95.830017][ T5875] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 95.834089][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.852346][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.867033][ T6071] usb 3-1: USB disconnect, device number 7 [ 95.962368][ T24] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 95.972880][ T24] usb 1-1: can't read configurations, error -22 [ 95.980418][ T24] usb usb1-port1: attempt power cycle [ 96.071362][ T5875] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 96.079588][ T5875] usb 4-1: config 0 has no interface number 0 [ 96.087587][ T5875] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 96.096655][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.104674][ T5875] usb 4-1: Product: syz [ 96.108832][ T5875] usb 4-1: Manufacturer: syz [ 96.115180][ T5875] usb 4-1: SerialNumber: syz [ 96.130163][ T5875] usb 4-1: config 0 descriptor?? [ 96.219168][ T30] audit: type=1400 audit(1745329849.309:227): avc: denied { create } for pid=6178 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.491010][ T30] audit: type=1400 audit(1745329849.309:228): avc: denied { setopt } for pid=6178 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.520070][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 96.543841][ T24] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 96.557616][ T24] usb 1-1: can't read configurations, error -22 [ 96.593707][ T30] audit: type=1400 audit(1745329849.689:229): avc: denied { create } for pid=6184 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.678726][ T6189] Zero length message leads to an empty skb [ 96.730285][ T30] audit: type=1400 audit(1745329849.769:230): avc: denied { write } for pid=6188 comm="syz.4.67" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.765440][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 96.819061][ T30] audit: type=1400 audit(1745329849.909:231): avc: denied { ioctl } for pid=6192 comm="syz.0.68" path="socket:[8277]" dev="sockfs" ino=8277 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.845263][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 96.923318][ T6195] loop9: detected capacity change from 0 to 8 [ 96.954582][ T5823] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 96.963226][ T5875] usb 4-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 96.992352][ T5823] loop9: partition table partially beyond EOD, truncated [ 97.020932][ T24] usb 1-1: device not accepting address 13, error -71 [ 97.028827][ T24] usb usb1-port1: unable to enumerate USB device [ 97.029277][ T5823] loop9: p1 size 81768186 extends beyond EOD, truncated [ 97.169644][ T5875] usb 4-1: Read permanent extended address b2:c5:05:8b:fa:8b:7f:4f from device [ 97.254043][ T5875] usb 4-1: atusb_probe: initialization failed, error = -524 [ 97.838323][ T5875] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 97.944086][ T5875] usb 4-1: USB disconnect, device number 5 [ 97.967201][ T30] audit: type=1400 audit(1745329851.039:232): avc: denied { ioctl } for pid=6171 comm="syz.3.62" path="socket:[8251]" dev="sockfs" ino=8251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.284273][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 99.450167][ T30] audit: type=1400 audit(1745329852.519:233): avc: denied { watch watch_reads } for pid=6208 comm="syz.0.73" path="/15" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.660674][ T5920] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 99.835973][ T5920] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 100.158287][ T5920] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 100.215443][ T5920] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 100.252958][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.265091][ T6230] evm: overlay not supported [ 100.558924][ T6243] netlink: 'syz.1.82': attribute type 5 has an invalid length. [ 100.988160][ T6250] netlink: 256 bytes leftover after parsing attributes in process `syz.0.80'. [ 101.022166][ T30] audit: type=1400 audit(1745329854.099:234): avc: denied { ioctl } for pid=6220 comm="syz.4.75" path="pid:[4026532796]" dev="nsfs" ino=4026532796 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.046651][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.443187][ T5920] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 101.455105][ T5920] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5 [ 101.466603][ T30] audit: type=1400 audit(1745329854.539:235): avc: denied { setopt } for pid=6245 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.489849][ T5920] input: failed to attach handler kbd to device input5, error: -5 [ 101.507283][ T30] audit: type=1400 audit(1745329854.599:236): avc: denied { read } for pid=5183 comm="acpid" name="mouse1" dev="devtmpfs" ino=2751 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.529757][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.540661][ T5920] usb 5-1: USB disconnect, device number 6 [ 101.547315][ T30] audit: type=1400 audit(1745329854.599:237): avc: denied { open } for pid=5183 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2751 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.572972][ T30] audit: type=1400 audit(1745329854.599:238): avc: denied { accept } for pid=6245 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.590040][ T5874] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 102.862277][ T5874] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 102.893513][ T5874] usb 1-1: can't read configurations, error -22 [ 103.410042][ T5874] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 104.284513][ T6264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.085300][ T30] audit: type=1400 audit(1745329858.169:239): avc: denied { read write } for pid=6282 comm="syz.1.92" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.218152][ T30] audit: type=1400 audit(1745329858.169:240): avc: denied { open } for pid=6282 comm="syz.1.92" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.391047][ T30] audit: type=1400 audit(1745329858.169:241): avc: denied { ioctl } for pid=6282 comm="syz.1.92" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.543251][ T30] audit: type=1400 audit(1745329858.639:242): avc: denied { read write } for pid=6272 comm="syz.2.89" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.545583][ T6281] input: syz1 as /devices/virtual/input/input6 [ 105.575887][ T6287] trusted_key: encrypted_key: insufficient parameters specified [ 105.652941][ T30] audit: type=1400 audit(1745329858.639:243): avc: denied { open } for pid=6272 comm="syz.2.89" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.693539][ T30] audit: type=1400 audit(1745329858.639:244): avc: denied { ioctl } for pid=6272 comm="syz.2.89" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.734496][ T30] audit: type=1400 audit(1745329858.679:245): avc: denied { ioctl } for pid=5183 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2753 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.763139][ T30] audit: type=1400 audit(1745329858.699:246): avc: denied { write } for pid=6289 comm="syz.1.93" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.787934][ T30] audit: type=1400 audit(1745329858.709:247): avc: denied { open } for pid=6289 comm="syz.1.93" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.820559][ T30] audit: type=1400 audit(1745329858.709:248): avc: denied { read } for pid=6289 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.050065][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.825528][ T47] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.849102][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.868647][ T47] usb 2-1: Product: syz [ 106.878743][ T47] usb 2-1: Manufacturer: syz [ 106.886046][ T47] usb 2-1: SerialNumber: syz [ 106.897689][ T6305] netlink: 'syz.2.97': attribute type 5 has an invalid length. [ 106.999885][ T47] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 107.031320][ T5920] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 107.394398][ T6290] random: crng reseeded on system resumption [ 107.510936][ T6309] netlink: 388 bytes leftover after parsing attributes in process `syz.4.98'. [ 107.588565][ T6311] tmpfs: Bad value for 'mpol' [ 107.930641][ T47] usb 2-1: USB disconnect, device number 6 [ 109.051373][ T5920] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 109.058657][ T5920] ath9k_htc: Failed to initialize the device [ 109.074343][ T47] usb 2-1: ath9k_htc: USB layer deinitialized [ 109.926659][ T6326] netlink: 'syz.0.103': attribute type 5 has an invalid length. [ 110.200200][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.630734][ T5874] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.800058][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 110.810335][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 110.911890][ T5874] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.922345][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.019548][ T5874] usb 3-1: config 0 has no interface number 0 [ 111.918112][ T5874] usb 3-1: config 0 interface 2 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.960374][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.990104][ T5874] usb 3-1: config 0 interface 2 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.137828][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.158252][ T5874] usb 3-1: config 0 interface 2 has no altsetting 0 [ 112.164937][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.180011][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.08 [ 112.308192][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.318256][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 112.318264][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.318271][ T30] audit: type=1326 audit(1745329865.339:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf18b8e169 code=0x7ffc0000 [ 112.318309][ T30] audit: type=1326 audit(1745329865.339:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf18b8e169 code=0x7ffc0000 [ 112.325746][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.378661][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.393181][ T5874] usb 3-1: config 0 descriptor?? [ 112.411306][ T30] audit: type=1326 audit(1745329865.499:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faf18b8e169 code=0x7ffc0000 [ 112.467816][ T30] audit: type=1326 audit(1745329865.509:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf18b8e169 code=0x7ffc0000 [ 112.545979][ T30] audit: type=1326 audit(1745329865.509:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7faf18b8e169 code=0x7ffc0000 [ 112.688774][ T30] audit: type=1326 audit(1745329865.509:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf18b8e169 code=0x7ffc0000 [ 112.689005][ T30] audit: type=1326 audit(1745329865.509:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf18b8e169 code=0x7ffc0000 [ 112.689233][ T30] audit: type=1326 audit(1745329865.509:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf18b8e169 code=0x7ffc0000 [ 112.689566][ T30] audit: type=1326 audit(1745329865.509:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf18b90087 code=0x7ffc0000 [ 112.689846][ T30] audit: type=1326 audit(1745329865.509:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7faf18b8fffc code=0x7ffc0000 [ 112.900899][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 112.900934][ T10] usbtmc 5-1:16.0: can't read capabilities [ 112.947648][ T5874] logitech-djreceiver 0003:046D:C517.0001: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.2-1/input2 [ 112.979502][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.120487][ T5911] usb 5-1: USB disconnect, device number 7 [ 113.586756][ T24] usb 3-1: USB disconnect, device number 8 [ 113.677341][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.025932][ T6355] tty tty21: ldisc open failed (-12), clearing slot 20 [ 115.973492][ T5874] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 115.991618][ T6400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.231533][ T5874] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 116.674501][ T5874] usb 3-1: config 0 has no interface number 0 [ 116.687973][ T5874] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 117.043878][ T5874] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.079816][ T5874] usb 3-1: config 0 interface 113 has no altsetting 0 [ 117.192725][ T5874] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 117.215076][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.227090][ T5874] usb 3-1: Product: syz [ 117.232649][ T6410] team0: No ports can be present during mode change [ 117.240660][ T6410] tipc: Started in network mode [ 117.247369][ T6410] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 117.254634][ T5874] usb 3-1: Manufacturer: syz [ 117.260373][ T6410] tipc: Enabled bearer , priority 0 [ 117.266664][ T5874] usb 3-1: SerialNumber: syz [ 117.274262][ T5874] usb 3-1: config 0 descriptor?? [ 117.288416][ C0] usb 3-1: NFC: Urb failure (status -71) [ 117.295389][ T5874] usb 3-1: NFC: Unable to get FW version [ 117.304381][ T5874] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 117.358337][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'. [ 117.515116][ T6388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.534724][ T6388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.609153][ T24] usb 3-1: USB disconnect, device number 9 [ 117.616179][ T6416] loop9: detected capacity change from 0 to 8 [ 117.668522][ T6416] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 117.691593][ T6416] loop9: partition table partially beyond EOD, truncated [ 117.700506][ T6416] loop9: p1 size 81768186 extends beyond EOD, truncated [ 118.390837][ T5875] tipc: Node number set to 11578026 [ 118.540791][ T6431] netlink: 'syz.1.131': attribute type 5 has an invalid length. [ 118.553324][ T6425] sp0: Synchronizing with TNC [ 118.603013][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 118.633687][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 118.633705][ T30] audit: type=1400 audit(1745329871.679:309): avc: denied { search } for pid=5492 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.743186][ T30] audit: type=1400 audit(1745329871.679:310): avc: denied { read } for pid=5492 comm="dhcpcd" name="n100" dev="tmpfs" ino=2379 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.780209][ T30] audit: type=1400 audit(1745329871.679:311): avc: denied { open } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2379 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.969899][ T6425] netlink: 5 bytes leftover after parsing attributes in process `syz.0.130'. [ 119.979620][ T6425] netlink: 5 bytes leftover after parsing attributes in process `syz.0.130'. [ 120.035156][ T30] audit: type=1400 audit(1745329871.679:312): avc: denied { getattr } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2379 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.060966][ T30] audit: type=1400 audit(1745329872.859:313): avc: denied { create } for pid=6424 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 120.160583][ T30] audit: type=1400 audit(1745329873.109:314): avc: denied { rename } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.183304][ T30] audit: type=1400 audit(1745329873.109:315): avc: denied { unlink } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.497454][ T30] audit: type=1400 audit(1745329873.109:316): avc: denied { create } for pid=5180 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.559532][ T6446] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 120.559555][ T6446] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 120.994838][ T6442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.575012][ T30] audit: type=1400 audit(1745329873.879:317): avc: denied { kexec_image_load } for pid=6442 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 121.594731][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.455998][ T30] audit: type=1400 audit(1745329875.549:318): avc: denied { read } for pid=6460 comm="syz.2.138" name="sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.575907][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.673453][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.855113][ T6475] warning: `syz.4.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.873883][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 122.916690][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 123.448522][ T6468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.515662][ T55] block nbd0: Receive control failed (result -107) [ 123.609480][ T6477] nbd0: detected capacity change from 0 to 32 [ 123.653151][ T5823] block nbd0: Dead connection, failed to find a fallback [ 123.677437][ T5823] block nbd0: shutting down sockets [ 123.685115][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.785680][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 123.795365][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.810178][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 123.819239][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.829031][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 123.847104][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.856899][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.472865][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 124.472900][ T30] audit: type=1400 audit(1745329877.569:323): avc: denied { mounton } for pid=6485 comm="syz.2.143" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 124.472959][ T6491] tmpfs: Unknown parameter 'muð·&ŸËœuà%pol9Rntec' [ 124.480726][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.837008][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.845284][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.858188][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.867720][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.877528][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.885975][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.895354][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.903621][ T5823] ldm_validate_partition_table(): Disk read failed. [ 125.190277][ T30] audit: type=1400 audit(1745329878.219:324): avc: denied { block_suspend } for pid=6494 comm="syz.2.146" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.297221][ T6499] trusted_key: encrypted_key: key user:syz not found [ 125.466629][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.552897][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.982044][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.014283][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.023173][ T5823] Dev nbd0: unable to read RDB block 0 [ 126.061588][ T5823] nbd0: unable to read partition table [ 126.145810][ T5823] ldm_validate_partition_table(): Disk read failed. [ 126.341858][ T30] audit: type=1326 audit(1745329879.339:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 126.368149][ T6514] trusted_key: encrypted_key: insufficient parameters specified [ 126.509989][ T30] audit: type=1326 audit(1745329879.339:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 126.606257][ T6518] FAULT_INJECTION: forcing a failure. [ 126.606257][ T6518] name failslab, interval 1, probability 0, space 0, times 1 [ 126.618987][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.2.151 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 126.619010][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.619020][ T6518] Call Trace: [ 126.619025][ T6518] [ 126.619032][ T6518] dump_stack_lvl+0x16c/0x1f0 [ 126.619058][ T6518] should_fail_ex+0x512/0x640 [ 126.619080][ T6518] ? sk_prot_alloc+0x1a8/0x2a0 [ 126.619102][ T6518] should_failslab+0xc2/0x120 [ 126.619121][ T6518] __kmalloc_noprof+0xd2/0x510 [ 126.619143][ T6518] sk_prot_alloc+0x1a8/0x2a0 [ 126.619168][ T6518] sk_alloc+0x36/0xc20 [ 126.619188][ T6518] bpf_prog_test_run_skb+0x330/0x2280 [ 126.619219][ T6518] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 126.619241][ T6518] ? kasan_check_range+0x5a/0x1a0 [ 126.619263][ T6518] ? fput+0x70/0xf0 [ 126.619284][ T6518] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 126.619305][ T6518] __sys_bpf+0x1485/0x4d80 [ 126.619327][ T6518] ? rcu_is_watching+0x12/0xc0 [ 126.619350][ T6518] ? __pfx___sys_bpf+0x10/0x10 [ 126.619369][ T6518] ? __schedule+0x1186/0x5de0 [ 126.619389][ T6518] ? ksys_write+0x190/0x240 [ 126.619423][ T6518] ? fput+0x70/0xf0 [ 126.619441][ T6518] ? ksys_write+0x1b9/0x240 [ 126.619462][ T6518] __x64_sys_bpf+0x78/0xc0 [ 126.619488][ T6518] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.619509][ T6518] do_syscall_64+0xcd/0x260 [ 126.619534][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.619551][ T6518] RIP: 0033:0x7fed1ef8e169 [ 126.619564][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.619579][ T6518] RSP: 002b:00007fed1fde2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.619595][ T6518] RAX: ffffffffffffffda RBX: 00007fed1f1b6160 RCX: 00007fed1ef8e169 [ 126.619606][ T6518] RDX: 000000000000004c RSI: 00002000000002c0 RDI: 000000000000000a [ 126.619616][ T6518] RBP: 00007fed1fde2090 R08: 0000000000000000 R09: 0000000000000000 [ 126.619625][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.619634][ T6518] R13: 0000000000000000 R14: 00007fed1f1b6160 R15: 00007fffccb1c998 [ 126.619657][ T6518] [ 126.831780][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.856829][ T5823] Dev nbd0: unable to read RDB block 0 [ 126.881448][ T5823] nbd0: unable to read partition table [ 126.892235][ T30] audit: type=1326 audit(1745329879.339:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 127.629656][ T30] audit: type=1326 audit(1745329879.339:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 127.652911][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.660264][ T30] audit: type=1326 audit(1745329879.339:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 127.960074][ T30] audit: type=1326 audit(1745329879.349:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 127.985209][ T30] audit: type=1326 audit(1745329879.349:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 129.517801][ T30] audit: type=1326 audit(1745329879.349:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 129.541004][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.640614][ T30] audit: type=1326 audit(1745329879.349:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed1ef90087 code=0x7ffc0000 [ 129.757775][ T30] audit: type=1326 audit(1745329879.349:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fed1ef8fffc code=0x7ffc0000 [ 129.839536][ T30] audit: type=1326 audit(1745329879.349:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fed1ef8ff34 code=0x7ffc0000 [ 129.925980][ T30] audit: type=1326 audit(1745329879.349:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fed1ef8ff34 code=0x7ffc0000 [ 130.012380][ T30] audit: type=1326 audit(1745329879.349:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fed1ef8cdca code=0x7ffc0000 [ 130.060031][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.794022][ T6542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.989806][ T30] audit: type=1326 audit(1745329879.349:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 131.150425][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 131.154610][ T30] audit: type=1326 audit(1745329879.349:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 131.157664][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 131.667028][ T30] audit: type=1326 audit(1745329879.349:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 131.692008][ T30] audit: type=1326 audit(1745329879.349:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1ef8e169 code=0x7ffc0000 [ 131.723336][ T5911] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=46.8b [ 131.732948][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.741703][ T5911] usb 4-1: Product: syz [ 131.746116][ T5911] usb 4-1: Manufacturer: syz [ 131.751135][ T5911] usb 4-1: SerialNumber: syz [ 131.777117][ T5911] usb 4-1: config 0 descriptor?? [ 131.956485][ T6556] loop9: detected capacity change from 0 to 8 [ 131.974895][ T5963] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 131.983784][ T5963] loop9: partition table partially beyond EOD, truncated [ 131.992162][ T5963] loop9: p1 size 81768186 extends beyond EOD, truncated [ 132.385029][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.393528][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.452334][ T6556] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 132.462903][ T6556] loop9: partition table partially beyond EOD, truncated [ 132.479846][ T6556] loop9: p1 size 81768186 extends beyond EOD, truncated [ 132.634265][ T5875] usb 4-1: USB disconnect, device number 6 [ 132.662839][ T5875] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -19 [ 132.672801][ T5875] f81534a_ctrl 4-1:0.0: failed to enable ports: -19 [ 133.374460][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 133.652900][ T6579] overlayfs: failed to resolve './file1': -2 [ 134.134545][ T5911] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.870032][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 134.878784][ T5911] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 134.949136][ T5911] usb 2-1: can't read configurations, error -22 [ 135.111501][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 135.111518][ T30] audit: type=1400 audit(1745329888.209:375): avc: denied { create } for pid=6601 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.185912][ T30] audit: type=1400 audit(1745329888.249:376): avc: denied { getopt } for pid=6601 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.205981][ T5911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.479999][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 136.105115][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.161523][ T5911] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 136.308514][ T5911] usb 2-1: can't read configurations, error -22 [ 136.314981][ T30] audit: type=1400 audit(1745329888.259:377): avc: denied { ioctl } for pid=6601 comm="syz.0.175" path="socket:[10441]" dev="sockfs" ino=10441 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.340509][ T5911] usb usb2-port1: attempt power cycle [ 136.382760][ T6071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 136.410291][ T6071] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.423104][ T30] audit: type=1400 audit(1745329889.469:378): avc: denied { read write } for pid=6608 comm="syz.0.178" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.499077][ T30] audit: type=1400 audit(1745329889.469:379): avc: denied { open } for pid=6608 comm="syz.0.178" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.564545][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 136.573949][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 136.650020][ T5920] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 136.690043][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.856211][ T5911] usb 2-1: device descriptor read/8, error -71 [ 136.916787][ T6622] loop9: detected capacity change from 0 to 8 [ 136.926978][ T6622] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 136.932410][ T6622] loop9: partition table partially beyond EOD, truncated [ 136.942730][ T6622] loop9: p1 size 81768186 extends beyond EOD, truncated [ 137.396574][ T5920] usb 1-1: config 0 has no interfaces? [ 137.432568][ T5920] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 137.522871][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.770395][ T6629] netlink: 256 bytes leftover after parsing attributes in process `syz.4.183'. [ 138.030059][ T5875] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.110030][ T5920] usb 1-1: Product: syz [ 138.118821][ T5920] usb 1-1: Manufacturer: syz [ 138.207487][ T5920] usb 1-1: SerialNumber: syz [ 138.208150][ T5875] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 138.245213][ T5875] usb 5-1: can't read configurations, error -22 [ 138.317267][ T30] audit: type=1400 audit(1745329891.409:380): avc: denied { write } for pid=6631 comm="syz.3.184" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.379704][ T30] audit: type=1400 audit(1745329891.409:381): avc: denied { connect } for pid=6631 comm="syz.3.184" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.530703][ T5875] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.576589][ T30] audit: type=1400 audit(1745329891.409:382): avc: denied { name_connect } for pid=6631 comm="syz.3.184" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 138.662225][ T5920] usb 1-1: config 0 descriptor?? [ 138.762785][ T5875] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 138.820491][ T5875] usb 5-1: can't read configurations, error -22 [ 138.827239][ T5875] usb usb5-port1: attempt power cycle [ 139.184168][ T6642] netlink: 256 bytes leftover after parsing attributes in process `syz.2.186'. [ 139.528828][ T5920] usb 1-1: can't set config #0, error -71 [ 139.540205][ T5875] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.575579][ T5920] usb 1-1: USB disconnect, device number 16 [ 139.581617][ T5875] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 139.581652][ T5875] usb 5-1: can't read configurations, error -22 [ 139.677070][ T6644] loop9: detected capacity change from 0 to 8 [ 139.684551][ T6644] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 139.694133][ T6644] loop9: partition table partially beyond EOD, truncated [ 139.703233][ T6644] loop9: p1 size 81768186 extends beyond EOD, truncated [ 139.721429][ T5875] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.750146][ T1211] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 139.762124][ T30] audit: type=1400 audit(1745329892.839:383): avc: denied { create } for pid=6645 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.762859][ T5875] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 140.061974][ T30] audit: type=1400 audit(1745329892.889:384): avc: denied { create } for pid=6645 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.088679][ T5875] usb 5-1: can't read configurations, error -22 [ 140.181670][ T1211] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 140.869311][ T5875] usb usb5-port1: unable to enumerate USB device [ 140.903139][ T1211] usb 3-1: can't read configurations, error -22 [ 141.090884][ T1211] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.453073][ T1211] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 141.480186][ T1211] usb 3-1: can't read configurations, error -22 [ 141.499749][ T1211] usb usb3-port1: attempt power cycle [ 141.851722][ T1211] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.240096][ T1211] usb 3-1: device not accepting address 13, error -71 [ 142.804064][ T6678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'. [ 142.813480][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 142.824700][ T6678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'. [ 142.834871][ T6678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'. [ 143.640359][ T6690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.647750][ T6690] IPv6: NLM_F_CREATE should be set when creating new route [ 143.655038][ T6690] IPv6: NLM_F_CREATE should be set when creating new route [ 143.662261][ T6690] IPv6: NLM_F_CREATE should be set when creating new route [ 143.674196][ T6690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.137468][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 145.143761][ T30] audit: type=1400 audit(1745329898.089:386): avc: denied { create } for pid=6702 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 146.008460][ T6717] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 146.320999][ T30] audit: type=1400 audit(1745329899.169:387): avc: denied { name_bind } for pid=6704 comm="syz.1.204" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 146.343176][ T6724] ipt_ECN: cannot use operation on non-tcp rule [ 147.048675][ T6735] overlayfs: failed to resolve './file1': -2 [ 147.090595][ T30] audit: type=1400 audit(1745329900.179:388): avc: denied { read } for pid=6734 comm="syz.1.208" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 147.141407][ T30] audit: type=1400 audit(1745329900.189:389): avc: denied { open } for pid=6734 comm="syz.1.208" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.186950][ T6739] xt_ecn: cannot match TCP bits for non-tcp packets [ 150.360021][ T5875] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 150.936224][ T6765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.537643][ T5875] usb 3-1: config 0 has no interfaces? [ 151.600227][ T5875] usb 3-1: New USB device found, idVendor=ac09, idProduct=0a0f, bcdDevice= c.3e [ 151.748762][ T5875] usb 3-1: New USB device strings: Mfr=199, Product=92, SerialNumber=3 [ 151.869089][ T5875] usb 3-1: Product: syz [ 151.902692][ T5875] usb 3-1: Manufacturer: syz [ 152.228038][ T6781] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 152.406876][ T5875] usb 3-1: SerialNumber: syz [ 152.413325][ T5875] usb 3-1: config 0 descriptor?? [ 153.306696][ T6767] mkiss: ax0: crc mode is auto. [ 154.063119][ T30] audit: type=1400 audit(1745329907.149:390): avc: denied { create } for pid=6794 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 154.097640][ T6797] syz.2.216 uses obsolete (PF_INET,SOCK_PACKET) [ 154.135244][ T30] audit: type=1400 audit(1745329907.179:391): avc: denied { create } for pid=6794 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.174855][ T6767] random: crng reseeded on system resumption [ 154.248909][ T30] audit: type=1400 audit(1745329907.179:392): avc: denied { bind } for pid=6794 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.390050][ T5875] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 154.410045][ T30] audit: type=1400 audit(1745329907.429:393): avc: denied { sys_module } for pid=6761 comm="syz.2.216" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 154.602564][ T5875] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.065692][ T5875] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.082136][ T5875] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.105395][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.211048][ T6796] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.236343][ T5875] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.537411][ T5832] usb 3-1: USB disconnect, device number 15 [ 156.132309][ T1211] usb 2-1: USB disconnect, device number 11 [ 157.419475][ T6820] netlink: 256 bytes leftover after parsing attributes in process `syz.2.232'. [ 157.953402][ T5874] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 158.171806][ T5874] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 158.179773][ T5874] usb 3-1: can't read configurations, error -22 [ 158.749077][ T5874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 159.516368][ T5874] usb 3-1: device descriptor read/all, error -71 [ 159.527636][ T6855] openvswitch: netlink: Message has 8 unknown bytes. [ 159.643318][ T5874] usb usb3-port1: attempt power cycle [ 159.855899][ T6860] loop9: detected capacity change from 0 to 8 [ 159.898521][ T6860] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 159.939644][ T6860] loop9: partition table partially beyond EOD, truncated [ 159.985841][ T6860] loop9: p1 size 81768186 extends beyond EOD, truncated [ 160.552546][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 161.072560][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.240028][ T24] usb 4-1: device descriptor read/64, error -71 [ 161.548804][ T30] audit: type=1400 audit(1745329914.639:394): avc: denied { mounton } for pid=6881 comm="syz.2.247" path="/53/bus" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 161.555130][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 162.583295][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.658087][ T30] audit: type=1400 audit(1745329915.699:395): avc: denied { ioctl } for pid=6873 comm="syz.3.244" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.170079][ T24] usb 4-1: device descriptor read/64, error -71 [ 164.300351][ T24] usb usb4-port1: attempt power cycle [ 165.568608][ T30] audit: type=1400 audit(1745329918.659:396): avc: denied { connect } for pid=6881 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.724217][ T30] audit: type=1400 audit(1745329918.819:397): avc: denied { bind } for pid=6895 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.802809][ T30] audit: type=1400 audit(1745329918.819:398): avc: denied { node_bind } for pid=6895 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 165.855494][ T30] audit: type=1400 audit(1745329918.819:399): avc: denied { write } for pid=6895 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.927704][ T30] audit: type=1400 audit(1745329918.919:400): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 166.030150][ T30] audit: type=1400 audit(1745329918.979:401): avc: denied { read } for pid=6895 comm="syz.4.251" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.053366][ T30] audit: type=1400 audit(1745329918.979:402): avc: denied { open } for pid=6895 comm="syz.4.251" path="/dev/v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.300418][ T30] audit: type=1400 audit(1745329919.049:403): avc: denied { mount } for pid=6907 comm="syz.2.254" name="/" dev="ramfs" ino=11036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 167.243215][ T30] audit: type=1400 audit(1745329920.339:404): avc: denied { write } for pid=6922 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.270404][ T30] audit: type=1400 audit(1745329920.359:405): avc: denied { ioctl } for pid=6922 comm="syz.4.256" path="socket:[11662]" dev="sockfs" ino=11662 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.602187][ T30] audit: type=1400 audit(1745329920.589:406): avc: denied { name_connect } for pid=6931 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 167.626889][ T30] audit: type=1400 audit(1745329920.599:407): avc: denied { write } for pid=6931 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.668876][ T30] audit: type=1400 audit(1745329920.599:408): avc: denied { setopt } for pid=6931 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.090858][ T30] audit: type=1400 audit(1745329920.609:409): avc: denied { read } for pid=6931 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.120856][ T30] audit: type=1400 audit(1745329920.609:410): avc: denied { write } for pid=6931 comm="syz.2.261" lport=48794 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 168.150955][ T6939] tipc: Started in network mode [ 168.156110][ T6939] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 168.179900][ T6939] tipc: Enabled bearer , priority 10 [ 168.185957][ T30] audit: type=1400 audit(1745329920.609:411): avc: denied { setopt } for pid=6931 comm="syz.2.261" lport=48794 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 168.209829][ T30] audit: type=1400 audit(1745329920.909:412): avc: denied { wake_alarm } for pid=6933 comm="syz.1.262" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.285050][ T30] audit: type=1400 audit(1745329921.349:413): avc: denied { getopt } for pid=6940 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.067816][ T6962] loop2: detected capacity change from 0 to 7 [ 169.290021][ T24] tipc: Node number set to 4269801488 [ 169.393376][ T6951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.423341][ T6962] Dev loop2: unable to read RDB block 7 [ 170.428945][ T6962] loop2: AHDI p1 p2 p3 [ 170.433174][ T6962] loop2: partition table partially beyond EOD, truncated [ 170.441461][ T6962] loop2: p1 start 1601398130 is beyond EOD, truncated [ 170.448247][ T6962] loop2: p2 start 1702059890 is beyond EOD, truncated [ 172.748272][ T6987] lo speed is unknown, defaulting to 1000 [ 172.754499][ T6987] lo speed is unknown, defaulting to 1000 [ 172.765178][ T6987] lo speed is unknown, defaulting to 1000 [ 172.786430][ T6987] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.823815][ T6987] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 172.921510][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 172.921541][ T30] audit: type=1400 audit(1745329925.829:420): avc: denied { create } for pid=6977 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.993656][ T6987] lo speed is unknown, defaulting to 1000 [ 173.001627][ T6987] lo speed is unknown, defaulting to 1000 [ 173.008008][ T6987] lo speed is unknown, defaulting to 1000 [ 173.015078][ T6987] lo speed is unknown, defaulting to 1000 [ 173.021605][ T30] audit: type=1400 audit(1745329925.839:421): avc: denied { write } for pid=6977 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.021647][ T6987] lo speed is unknown, defaulting to 1000 [ 173.049855][ T6987] lo speed is unknown, defaulting to 1000 [ 173.341764][ T30] audit: type=1400 audit(1745329926.419:422): avc: denied { shutdown } for pid=6980 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.932681][ T7027] netlink: 'syz.3.286': attribute type 5 has an invalid length. [ 177.307117][ T7039] input: syz0 as /devices/virtual/input/input7 [ 177.310324][ T30] audit: type=1400 audit(1745329930.199:423): avc: denied { create } for pid=7034 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.447948][ T30] audit: type=1400 audit(1745329930.199:424): avc: denied { bind } for pid=7034 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.467166][ T7043] netlink: 'syz.4.289': attribute type 5 has an invalid length. [ 178.391470][ T30] audit: type=1400 audit(1745329930.209:425): avc: denied { write } for pid=7034 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 178.583811][ T30] audit: type=1400 audit(1745329931.669:426): avc: denied { mount } for pid=7048 comm="syz.3.293" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 179.275832][ T7066] syz.3.296: attempt to access beyond end of device [ 179.275832][ T7066] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 179.302005][ T30] audit: type=1400 audit(1745329932.399:427): avc: denied { ioctl } for pid=7047 comm="syz.2.292" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12000 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.400482][ T7066] gfs2: error -5 reading superblock [ 179.779014][ T30] audit: type=1400 audit(1745329932.869:428): avc: denied { ioctl } for pid=7071 comm="syz.3.301" path="socket:[12029]" dev="sockfs" ino=12029 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.021003][ T6071] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 180.181528][ T6071] usb 1-1: Using ep0 maxpacket: 16 [ 180.192928][ T6071] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.310056][ T5911] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.654447][ T7069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.431781][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.447176][ T6071] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.461151][ T6071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.557343][ T6071] usb 1-1: Product: syz [ 182.562997][ T6071] usb 1-1: Manufacturer: syz [ 182.568703][ T6071] usb 1-1: SerialNumber: syz [ 182.582899][ T6071] usb 1-1: config 0 descriptor?? [ 182.592371][ T6071] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.602370][ T6071] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 183.090872][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 183.098956][ T5911] usb 5-1: device descriptor read/all, error -71 [ 183.110785][ T5874] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 183.242618][ T6071] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 183.254789][ T7091] netlink: 'syz.4.305': attribute type 5 has an invalid length. [ 183.255880][ T6071] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 183.920426][ T6071] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 183.937381][ T6071] em28xx 1-1:0.0: No AC97 audio processor [ 184.073623][ T6071] usb 1-1: USB disconnect, device number 17 [ 184.079690][ T5874] usb 2-1: unable to read config index 0 descriptor/all [ 184.080472][ T6071] em28xx 1-1:0.0: Disconnecting em28xx [ 184.099842][ T6071] em28xx 1-1:0.0: Freeing device [ 184.113333][ T5874] usb 2-1: can't read configurations, error -71 [ 184.223974][ T30] audit: type=1400 audit(1745329937.309:429): avc: denied { mount } for pid=7097 comm="syz.2.307" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 184.335679][ T30] audit: type=1400 audit(1745329937.309:430): avc: denied { remount } for pid=7097 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 184.966526][ T7108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.064914][ T30] audit: type=1400 audit(1745329938.159:431): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 185.108946][ T7093] loop9: detected capacity change from 0 to 8 [ 185.146625][ T7093] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 185.194134][ T7093] loop9: partition table partially beyond EOD, truncated [ 185.220841][ T5832] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.427111][ T7093] loop9: p1 size 81768186 extends beyond EOD, truncated [ 185.581383][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.030655][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 186.033675][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 186.036693][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 186.044541][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 186.055360][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 186.474630][ T7121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.958755][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.260021][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.269818][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.282885][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.292213][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.699689][ T30] audit: type=1400 audit(1745329941.789:432): avc: denied { getopt } for pid=7126 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.755622][ T5832] usb 4-1: config 0 descriptor?? [ 188.768171][ T5832] usb 4-1: can't set config #0, error -71 [ 188.908502][ T5832] usb 4-1: USB disconnect, device number 10 [ 189.459771][ T7145] netlink: 'syz.3.320': attribute type 5 has an invalid length. [ 189.559642][ T30] audit: type=1400 audit(1745329942.649:433): avc: denied { create } for pid=7148 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 190.606552][ T7166] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 190.619678][ T30] audit: type=1400 audit(1745329943.699:434): avc: denied { getopt } for pid=7164 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.623972][ T7166] netlink: 236 bytes leftover after parsing attributes in process `syz.0.326'. [ 190.654109][ T30] audit: type=1400 audit(1745329943.699:435): avc: denied { ioctl } for pid=7169 comm="syz.4.328" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.686486][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 190.990795][ T7178] /dev/nullb0: Can't open blockdev [ 191.344524][ T30] audit: type=1400 audit(1745329943.969:436): avc: denied { bind } for pid=7168 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.415858][ T30] audit: type=1400 audit(1745329943.969:437): avc: denied { write } for pid=7168 comm="syz.1.327" name="sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.116169][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.173552][ T30] audit: type=1400 audit(1745329943.969:438): avc: denied { connect } for pid=7168 comm="syz.1.327" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.671350][ T7186] mmap: syz.4.332 (7186) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.683346][ T30] audit: type=1400 audit(1745329945.769:439): avc: denied { getopt } for pid=7183 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.772900][ T7189] /dev/nullb0: Can't open blockdev [ 192.912090][ T7194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.333'. [ 193.827019][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.851401][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.884529][ T30] audit: type=1400 audit(1745329946.939:440): avc: denied { create } for pid=7204 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.118065][ T7210] loop9: detected capacity change from 0 to 8 [ 194.125168][ T7210] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 194.130508][ T7210] loop9: partition table partially beyond EOD, truncated [ 194.141092][ T7210] loop9: p1 size 81768186 extends beyond EOD, truncated [ 194.410293][ T30] audit: type=1400 audit(1745329946.979:441): avc: denied { bind } for pid=7204 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.486461][ T30] audit: type=1400 audit(1745329946.979:442): avc: denied { name_bind } for pid=7204 comm="syz.0.338" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 194.559759][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 194.574190][ T30] audit: type=1400 audit(1745329946.979:443): avc: denied { node_bind } for pid=7204 comm="syz.0.338" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 194.610946][ T30] audit: type=1400 audit(1745329946.979:444): avc: denied { getopt } for pid=7204 comm="syz.0.338" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.782595][ T5832] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 195.427139][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.670475][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.700320][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.725391][ T5832] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.737650][ T7229] netlink: 22 bytes leftover after parsing attributes in process `syz.0.344'. [ 195.749988][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.784936][ T5832] usb 3-1: config 0 descriptor?? [ 195.790820][ T7228] netlink: 'syz.1.345': attribute type 5 has an invalid length. [ 195.859977][ T30] audit: type=1400 audit(1745329948.949:445): avc: denied { write } for pid=7230 comm="syz.3.347" path="socket:[12642]" dev="sockfs" ino=12642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 195.862316][ T7231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7231 comm=syz.3.347 [ 195.921814][ T30] audit: type=1400 audit(1745329948.949:446): avc: denied { nlmsg_read } for pid=7230 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 195.985067][ C0] Illegal XDP return value 16128 on prog (id 92) dev veth1, expect packet loss! [ 196.014666][ T7234] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 196.440393][ T5832] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 197.011776][ T5832] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 197.025730][ T5832] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 197.220018][ T6071] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 197.333790][ T7255] lo speed is unknown, defaulting to 1000 [ 197.342003][ T7255] lo speed is unknown, defaulting to 1000 [ 197.351945][ T7255] lo speed is unknown, defaulting to 1000 [ 197.371400][ T6071] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 197.374780][ T7255] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 197.379738][ T6071] usb 1-1: config 0 has no interface number 0 [ 197.403979][ T6071] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 197.440493][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.940358][ T7255] lo speed is unknown, defaulting to 1000 [ 197.952755][ T7255] lo speed is unknown, defaulting to 1000 [ 197.959888][ T7255] lo speed is unknown, defaulting to 1000 [ 197.967092][ T7255] lo speed is unknown, defaulting to 1000 [ 197.974150][ T7255] lo speed is unknown, defaulting to 1000 [ 198.145816][ T24] usb 3-1: USB disconnect, device number 19 [ 198.426504][ T6071] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.451904][ T6071] usb 1-1: config 0 interface 113 has no altsetting 0 [ 198.462324][ T6071] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 198.484899][ T6071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.502766][ T6071] usb 1-1: Product: syz [ 198.507116][ T6071] usb 1-1: Manufacturer: syz [ 198.511853][ T6071] usb 1-1: SerialNumber: syz [ 198.518750][ T6071] usb 1-1: config 0 descriptor?? [ 198.528420][ C1] usb 1-1: NFC: Urb failure (status -71) [ 198.562934][ T6071] usb 1-1: NFC: Unable to get FW version [ 198.585579][ T6071] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 198.687851][ T7266] capability: warning: `syz.4.357' uses 32-bit capabilities (legacy support in use) [ 198.725013][ T30] audit: type=1400 audit(1745329951.819:447): avc: denied { read } for pid=7260 comm="syz.4.357" name="usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.767917][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.782067][ T30] audit: type=1400 audit(1745329951.849:448): avc: denied { open } for pid=7260 comm="syz.4.357" path="/dev/usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.782115][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.855187][ T30] audit: type=1400 audit(1745329951.859:449): avc: denied { ioctl } for pid=7260 comm="syz.4.357" path="/dev/usbmon7" dev="devtmpfs" ino=741 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.880223][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.968214][ T30] audit: type=1400 audit(1745329951.859:450): avc: denied { append } for pid=7260 comm="syz.4.357" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 198.990961][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.030590][ T6071] usb 1-1: USB disconnect, device number 18 [ 199.090192][ T5832] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 199.243719][ T5832] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 199.255316][ T5832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.268588][ T5832] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.277928][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.289358][ T5832] usb 5-1: SerialNumber: syz [ 201.297557][ T30] audit: type=1400 audit(1745329954.389:451): avc: denied { connect } for pid=7290 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.706905][ T5832] usb 5-1: 0:2 : does not exist [ 201.739457][ T5832] usb 5-1: USB disconnect, device number 14 [ 201.783272][ T7302] loop9: detected capacity change from 0 to 8 [ 201.789762][ T30] audit: type=1400 audit(1745329954.879:452): avc: denied { create } for pid=7297 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.813848][ T7302] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 201.830400][ T7302] loop9: partition table partially beyond EOD, truncated [ 201.843853][ T7302] loop9: p1 size 81768186 extends beyond EOD, truncated [ 202.084748][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 202.102302][ T30] audit: type=1400 audit(1745329954.879:453): avc: denied { bind } for pid=7297 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.140639][ T30] audit: type=1400 audit(1745329954.909:454): avc: denied { listen } for pid=7297 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.288706][ T7311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.371'. [ 202.308333][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 202.329114][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.338168][ T10] usb 1-1: Product: syz [ 202.344580][ T10] usb 1-1: Manufacturer: syz [ 202.349527][ T10] usb 1-1: SerialNumber: syz [ 202.460155][ T5832] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 202.608615][ T7313] tmpfs: Bad value for 'mpol' [ 202.624055][ T5832] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 202.640757][ T5832] usb 3-1: config 0 has no interface number 0 [ 202.646889][ T5832] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 202.660871][ T5832] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.672146][ T5832] usb 3-1: config 0 interface 113 has no altsetting 0 [ 202.682624][ T5832] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 202.692454][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.702760][ T5832] usb 3-1: Product: syz [ 202.706936][ T5832] usb 3-1: Manufacturer: syz [ 202.712174][ T5832] usb 3-1: SerialNumber: syz [ 203.087005][ T30] audit: type=1400 audit(1745329956.179:455): avc: denied { setopt } for pid=7322 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.785823][ T30] audit: type=1400 audit(1745329956.439:456): avc: denied { watch } for pid=7322 comm="syz.1.377" path="/78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.830083][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.837169][ T30] audit: type=1400 audit(1745329956.439:457): avc: denied { watch_sb watch_reads } for pid=7322 comm="syz.1.377" path="/78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 203.882286][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.277675][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.086522][ T30] audit: type=1400 audit(1745329959.179:458): avc: denied { getopt } for pid=7330 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.484348][ T30] audit: type=1400 audit(1745329959.579:459): avc: denied { relabelfrom } for pid=7339 comm="syz.1.382" name="" dev="pipefs" ino=13542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 206.594166][ T30] audit: type=1326 audit(1745329959.619:460): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4171d8e169 code=0x7ffc0000 [ 206.700338][ T5911] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 206.708145][ T30] audit: type=1326 audit(1745329959.619:461): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4171d8e169 code=0x7ffc0000 [ 207.420924][ T7337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.207295][ T7353] tmpfs: Bad value for 'mpol' [ 209.524094][ T7377] Cannot find del_set index 0 as target [ 209.639306][ T30] audit: type=1400 audit(1745329962.719:462): avc: denied { read } for pid=7370 comm="syz.1.391" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.300069][ T30] audit: type=1400 audit(1745329962.719:463): avc: denied { open } for pid=7370 comm="syz.1.391" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.324814][ T30] audit: type=1400 audit(1745329962.729:464): avc: denied { ioctl } for pid=7370 comm="syz.1.391" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.393924][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.403529][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.423521][ T30] audit: type=1400 audit(1745329963.669:465): avc: denied { create } for pid=7372 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 212.473978][ T30] audit: type=1400 audit(1745329963.669:466): avc: denied { getopt } for pid=7372 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 213.401426][ T7397] loop2: detected capacity change from 0 to 7 [ 213.509540][ T7397] Dev loop2: unable to read RDB block 7 [ 213.515233][ T7397] loop2: AHDI p1 p2 p3 [ 213.519409][ T7397] loop2: partition table partially beyond EOD, truncated [ 213.526587][ T7397] loop2: p1 start 1601398130 is beyond EOD, truncated [ 213.533416][ T7397] loop2: p2 start 1702059890 is beyond EOD, truncated [ 213.999066][ T7410] netlink: 256 bytes leftover after parsing attributes in process `syz.1.400'. [ 214.480025][ T1211] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 214.743708][ T1211] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 214.763676][ T1211] usb 2-1: can't read configurations, error -22 [ 214.920649][ T1211] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 215.133668][ T1211] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 215.154931][ T1211] usb 2-1: can't read configurations, error -22 [ 215.179245][ T1211] usb usb2-port1: attempt power cycle [ 215.530098][ T1211] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 215.553086][ T1211] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 215.561188][ T1211] usb 2-1: can't read configurations, error -22 [ 215.689999][ T1211] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 215.713254][ T1211] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 215.721248][ T1211] usb 2-1: can't read configurations, error -22 [ 215.727750][ T1211] usb usb2-port1: unable to enumerate USB device [ 217.467964][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.479120][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.492358][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.502074][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.509655][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.518708][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.527689][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.527701][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.547360][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.560113][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.563845][ T30] audit: type=1400 audit(1745329970.659:467): avc: denied { mounton } for pid=7426 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 217.641142][ T7426] lo speed is unknown, defaulting to 1000 [ 217.661540][ T7428] lo speed is unknown, defaulting to 1000 [ 217.697048][ T30] audit: type=1400 audit(1745329970.789:468): avc: denied { write } for pid=7430 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.835665][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 217.960557][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 218.155361][ T7445] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 218.268209][ T7448] tmpfs: Bad value for 'mpol' [ 218.295089][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.303857][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.311411][ T7428] bridge_slave_0: entered allmulticast mode [ 218.317336][ T30] audit: type=1400 audit(1745329971.409:469): avc: denied { listen } for pid=7450 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 218.338678][ T7428] bridge_slave_0: entered promiscuous mode [ 218.351951][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.359056][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.369172][ T7428] bridge_slave_1: entered allmulticast mode [ 218.376622][ T7428] bridge_slave_1: entered promiscuous mode [ 218.463719][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.481136][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.529796][ T7428] team0: Port device team_slave_0 added [ 218.549794][ T7428] team0: Port device team_slave_1 added [ 218.582885][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.590257][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.590369][ T5920] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 218.597419][ T7426] bridge_slave_0: entered allmulticast mode [ 218.660760][ T7426] bridge_slave_0: entered promiscuous mode [ 218.966797][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.007527][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.040666][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.061747][ T7459] veth1_macvtap: left promiscuous mode [ 219.067247][ T7459] macsec0: entered promiscuous mode [ 219.075301][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.082504][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.089689][ T7426] bridge_slave_1: entered allmulticast mode [ 219.097448][ T7426] bridge_slave_1: entered promiscuous mode [ 219.107511][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.114500][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.143011][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.165034][ T5920] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 219.174288][ T5920] usb 2-1: config 0 has no interface number 0 [ 219.181542][ T5920] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 219.195030][ T5920] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.207400][ T5920] usb 2-1: config 0 interface 113 has no altsetting 0 [ 219.217090][ T5920] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 219.227490][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.235738][ T5920] usb 2-1: Product: syz [ 219.240306][ T5920] usb 2-1: Manufacturer: syz [ 219.242807][ T7428] hsr_slave_0: entered promiscuous mode [ 219.244940][ T5920] usb 2-1: SerialNumber: syz [ 219.251340][ T7428] hsr_slave_1: entered promiscuous mode [ 219.263241][ T7428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.271022][ T7428] Cannot create hsr debugfs directory [ 219.309365][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.329192][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.395832][ T7426] team0: Port device team_slave_0 added [ 219.404194][ T7426] team0: Port device team_slave_1 added [ 219.443956][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.459186][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.486385][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.574957][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.583048][ T5831] Bluetooth: hci5: command tx timeout [ 219.591352][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.622931][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.660794][ T5831] Bluetooth: hci6: command tx timeout [ 219.875374][ T7468] FAULT_INJECTION: forcing a failure. [ 219.875374][ T7468] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 219.889741][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.0.414 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 219.889756][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.889763][ T7468] Call Trace: [ 219.889766][ T7468] [ 219.889770][ T7468] dump_stack_lvl+0x16c/0x1f0 [ 219.889789][ T7468] should_fail_ex+0x512/0x640 [ 219.889807][ T7468] _copy_from_user+0x2e/0xd0 [ 219.889820][ T7468] do_sock_getsockopt+0x5f4/0x800 [ 219.889838][ T7468] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 219.889852][ T7468] ? __fget_files+0x204/0x3c0 [ 219.889869][ T7468] __sys_getsockopt+0x12f/0x260 [ 219.889884][ T7468] __x64_sys_getsockopt+0xbd/0x160 [ 219.889895][ T7468] ? do_syscall_64+0x91/0x260 [ 219.889915][ T7468] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.889935][ T7468] do_syscall_64+0xcd/0x260 [ 219.889957][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.889974][ T7468] RIP: 0033:0x7fd75c58e169 [ 219.889988][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.890003][ T7468] RSP: 002b:00007fd75d495038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 219.890019][ T7468] RAX: ffffffffffffffda RBX: 00007fd75c7b5fa0 RCX: 00007fd75c58e169 [ 219.890030][ T7468] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 219.890039][ T7468] RBP: 00007fd75d495090 R08: 0000200000000100 R09: 0000000000000000 [ 219.890049][ T7468] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 219.890059][ T7468] R13: 0000000000000000 R14: 00007fd75c7b5fa0 R15: 00007ffe8da56748 [ 219.890081][ T7468] [ 221.423034][ T30] audit: type=1400 audit(1745329974.519:470): avc: denied { read } for pid=7472 comm="syz.1.416" dev="sockfs" ino=13267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 221.743711][ T5831] Bluetooth: hci5: command tx timeout [ 221.749245][ T5831] Bluetooth: hci6: command tx timeout [ 223.820689][ T5831] Bluetooth: hci6: command tx timeout [ 223.820778][ T5840] Bluetooth: hci5: command tx timeout [ 225.900267][ T5840] Bluetooth: hci5: command tx timeout [ 225.910064][ T5840] Bluetooth: hci6: command tx timeout [ 228.832004][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.840986][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.850774][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.858534][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.866428][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 230.940185][ T5840] Bluetooth: hci7: command tx timeout [ 233.020016][ T5840] Bluetooth: hci7: command tx timeout [ 235.101083][ T5840] Bluetooth: hci7: command tx timeout [ 235.341216][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 235.349180][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 235.358311][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 235.366226][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 235.374813][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 236.851888][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 236.859794][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 236.869624][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 236.877428][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 236.885237][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 237.180123][ T5831] Bluetooth: hci7: command tx timeout [ 237.420095][ T5831] Bluetooth: hci8: command tx timeout [ 238.940234][ T5831] Bluetooth: hci9: command tx timeout [ 239.500016][ T5831] Bluetooth: hci8: command tx timeout [ 241.020994][ T5831] Bluetooth: hci9: command tx timeout [ 241.580165][ T5831] Bluetooth: hci8: command tx timeout [ 243.100113][ T5831] Bluetooth: hci9: command tx timeout [ 243.661038][ T5831] Bluetooth: hci8: command tx timeout [ 245.180296][ T5831] Bluetooth: hci9: command tx timeout [ 255.262911][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.269871][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.707794][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 277.716377][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 277.725200][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 277.736868][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 277.748361][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 277.759248][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 277.764938][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 277.767098][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 277.773921][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 277.782196][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 279.820202][ T5842] Bluetooth: hci11: command tx timeout [ 279.820207][ T5841] Bluetooth: hci10: command tx timeout [ 281.900072][ T5842] Bluetooth: hci10: command tx timeout [ 281.910094][ T5842] Bluetooth: hci11: command tx timeout [ 283.980088][ T5842] Bluetooth: hci11: command tx timeout [ 283.980097][ T5841] Bluetooth: hci10: command tx timeout [ 286.060100][ T5842] Bluetooth: hci11: command tx timeout [ 286.070128][ T5842] Bluetooth: hci10: command tx timeout [ 289.124876][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 289.134391][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 289.142177][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 289.152822][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 289.162878][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 291.180186][ T5841] Bluetooth: hci12: command tx timeout [ 293.260072][ T5841] Bluetooth: hci12: command tx timeout [ 295.340052][ T5841] Bluetooth: hci12: command tx timeout [ 296.138541][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 296.147511][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 296.155613][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 296.163487][ T5842] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 296.173948][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 297.138556][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 297.149708][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 297.158315][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 297.166193][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 297.176092][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 297.420145][ T5842] Bluetooth: hci12: command tx timeout [ 298.220165][ T5842] Bluetooth: hci13: command tx timeout [ 299.260139][ T5842] Bluetooth: hci14: command tx timeout [ 300.310164][ T5842] Bluetooth: hci13: command tx timeout [ 301.341152][ T5842] Bluetooth: hci14: command tx timeout [ 302.390242][ T5842] Bluetooth: hci13: command tx timeout [ 303.430172][ T5842] Bluetooth: hci14: command tx timeout [ 304.460026][ T5842] Bluetooth: hci13: command tx timeout [ 305.510221][ T5842] Bluetooth: hci14: command tx timeout [ 316.706002][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.712401][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.769951][ T5841] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 337.778663][ T5841] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 337.787104][ T5841] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 337.803180][ T5841] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 337.816116][ T5841] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 337.843058][ T5841] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 337.852557][ T5841] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 337.860653][ T5841] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 337.869493][ T5841] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 337.877119][ T5841] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 339.910519][ T5842] Bluetooth: hci16: command tx timeout [ 339.910593][ T5841] Bluetooth: hci15: command tx timeout [ 341.980063][ T5841] Bluetooth: hci15: command tx timeout [ 341.980315][ T5842] Bluetooth: hci16: command tx timeout [ 344.060098][ T5831] Bluetooth: hci15: command tx timeout [ 344.070286][ T5831] Bluetooth: hci16: command tx timeout [ 344.380352][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 344.382596][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 346.140138][ T5841] Bluetooth: hci15: command tx timeout [ 346.145646][ T5841] Bluetooth: hci16: command tx timeout [ 349.215241][ T5842] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 349.224138][ T5842] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 349.234165][ T5842] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 349.242242][ T5842] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 349.252532][ T5842] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 351.350081][ T5842] Bluetooth: hci17: command tx timeout [ 353.420112][ T5842] Bluetooth: hci17: command tx timeout [ 354.620150][ T5842] Bluetooth: hci7: command 0x0406 tx timeout [ 355.500101][ T5841] Bluetooth: hci17: command tx timeout [ 356.721802][ T5842] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 356.729746][ T5842] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 356.737841][ T5842] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 356.747683][ T5842] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 356.755374][ T5842] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 357.226337][ T5841] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 357.234441][ T5841] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 357.243980][ T5841] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 357.252382][ T5841] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 357.266023][ T5841] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 357.580044][ T5842] Bluetooth: hci17: command tx timeout [ 358.780141][ T5831] Bluetooth: hci18: command tx timeout [ 359.340147][ T5831] Bluetooth: hci19: command tx timeout [ 359.740229][ T5831] Bluetooth: hci8: command 0x0406 tx timeout [ 359.743700][ T5840] Bluetooth: hci9: command 0x0406 tx timeout [ 360.860132][ T5842] Bluetooth: hci18: command tx timeout [ 360.861831][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 360.873587][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 360.881303][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.890261][ T31] task:kworker/0:1 state:D stack:24824 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 360.902381][ T31] Workqueue: usb_hub_wq hub_event SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 360.907418][ T31] Call Trace: [ 360.910803][ T31] [ 360.913879][ T31] __schedule+0x116f/0x5de0 [ 360.918390][ T31] ? number+0x9aa/0xc70 [ 360.922836][ T31] ? __pfx___schedule+0x10/0x10 [ 360.927702][ T31] ? find_held_lock+0x2b/0x80 [ 360.939492][ T30] audit: type=1400 audit(1745330114.029:471): avc: denied { search } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.940002][ T31] ? schedule+0x2d7/0x3a0 [ 361.001667][ T31] schedule+0xe7/0x3a0 [ 361.005781][ T31] schedule_timeout+0x257/0x290 [ 361.010720][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 361.016460][ T31] ? mark_held_locks+0x49/0x80 [ 361.021318][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.026541][ T31] __wait_for_common+0x2fc/0x4e0 [ 361.031528][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 361.036909][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 361.042406][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 361.048215][ T31] devtmpfs_submit_req+0xa8/0x100 [ 361.053359][ T31] devtmpfs_create_node+0x18a/0x230 [ 361.058542][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 361.064278][ T31] ? up_write+0x1b2/0x520 [ 361.068590][ T31] ? kernfs_create_link+0x1bd/0x240 [ 361.073796][ T31] ? kernfs_put+0x35/0x60 [ 361.078101][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 361.083672][ T31] device_add+0x10bd/0x1a70 [ 361.088241][ T31] ? __pfx_device_add+0x10/0x10 [ 361.093103][ T31] ? add_device_randomness+0xb7/0xf0 [ 361.098364][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 361.104294][ T31] usb_new_device+0xd07/0x1a20 [ 361.109059][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 361.114093][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 361.119273][ T31] ? mark_held_locks+0x49/0x80 [ 361.124052][ T31] hub_event+0x2eb7/0x4fa0 [ 361.128458][ T31] ? __pfx_hub_event+0x10/0x10 [ 361.133213][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 361.138834][ T31] ? rcu_is_watching+0x12/0xc0 [ 361.143620][ T31] process_one_work+0x9cc/0x1b70 [ 361.149174][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 361.154522][ T31] ? __pfx_process_one_work+0x10/0x10 [ 361.160130][ T31] ? assign_work+0x1a0/0x250 [ 361.164740][ T31] worker_thread+0x6c8/0xf10 [ 361.169337][ T31] ? __kthread_parkme+0x19e/0x250 [ 361.174401][ T31] ? __pfx_worker_thread+0x10/0x10 [ 361.179500][ T31] kthread+0x3c2/0x780 [ 361.183685][ T31] ? __pfx_kthread+0x10/0x10 [ 361.188272][ T31] ? __pfx_kthread+0x10/0x10 [ 361.192884][ T31] ? __pfx_kthread+0x10/0x10 [ 361.197492][ T31] ? __pfx_kthread+0x10/0x10 [ 361.202144][ T31] ? rcu_is_watching+0x12/0xc0 [ 361.206905][ T31] ? __pfx_kthread+0x10/0x10 [ 361.211609][ T31] ret_from_fork+0x45/0x80 [ 361.216023][ T31] ? __pfx_kthread+0x10/0x10 [ 361.220641][ T31] ret_from_fork_asm+0x1a/0x30 [ 361.225483][ T31] [ 361.228612][ T31] INFO: task kworker/0:3:5832 blocked for more than 143 seconds. [ 361.236370][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 361.244018][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.253441][ T31] task:kworker/0:3 state:D stack:22024 pid:5832 tgid:5832 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 361.265571][ T31] Workqueue: usb_hub_wq hub_event [ 361.270751][ T31] Call Trace: [ 361.274016][ T31] [ 361.276925][ T31] __schedule+0x116f/0x5de0 [ 361.281476][ T31] ? number+0x9aa/0xc70 [ 361.285623][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 361.290577][ T31] ? __pfx___schedule+0x10/0x10 [ 361.295434][ T31] ? find_held_lock+0x2b/0x80 [ 361.300145][ T31] ? schedule+0x2d7/0x3a0 [ 361.304497][ T31] schedule+0xe7/0x3a0 [ 361.308554][ T31] schedule_timeout+0x257/0x290 [ 361.313416][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 361.318766][ T31] ? mark_held_locks+0x49/0x80 [ 361.323550][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.328738][ T31] __wait_for_common+0x2fc/0x4e0 [ 361.333696][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 361.339046][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 361.344792][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 361.350066][ T31] devtmpfs_submit_req+0xa8/0x100 [ 361.355809][ T31] devtmpfs_create_node+0x18a/0x230 [ 361.361053][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 361.366752][ T31] ? up_write+0x1b2/0x520 [ 361.371078][ T31] ? kernfs_create_link+0x1bd/0x240 [ 361.376255][ T31] ? kernfs_put+0x35/0x60 [ 361.380725][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 361.386261][ T31] device_add+0x10bd/0x1a70 [ 361.390767][ T31] ? __pfx_device_add+0x10/0x10 [ 361.395590][ T31] ? add_device_randomness+0xb7/0xf0 [ 361.400875][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 361.406751][ T31] usb_new_device+0xd07/0x1a20 [ 361.411545][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 361.416559][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 361.421813][ T31] ? mark_held_locks+0x49/0x80 [ 361.426553][ T31] hub_event+0x2eb7/0x4fa0 [ 361.430997][ T31] ? __pfx_hub_event+0x10/0x10 [ 361.431606][ T5842] Bluetooth: hci19: command tx timeout [ 361.435741][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 361.446825][ T31] ? rcu_is_watching+0x12/0xc0 [ 361.451634][ T31] process_one_work+0x9cc/0x1b70 [ 361.457188][ T31] ? __pfx_process_one_work+0x10/0x10 [ 361.463823][ T31] ? assign_work+0x1a0/0x250 [ 361.468413][ T31] worker_thread+0x6c8/0xf10 [ 361.473012][ T31] ? __pfx_worker_thread+0x10/0x10 [ 361.478108][ T31] kthread+0x3c2/0x780 [ 361.482284][ T31] ? __pfx_kthread+0x10/0x10 [ 361.486869][ T31] ? __pfx_kthread+0x10/0x10 [ 361.491636][ T31] ? __pfx_kthread+0x10/0x10 [ 361.496212][ T31] ? __pfx_kthread+0x10/0x10 [ 361.502714][ T31] ? rcu_is_watching+0x12/0xc0 [ 361.507484][ T31] ? __pfx_kthread+0x10/0x10 [ 361.512210][ T31] ret_from_fork+0x45/0x80 [ 361.516621][ T31] ? __pfx_kthread+0x10/0x10 [ 361.523049][ T31] ret_from_fork_asm+0x1a/0x30 [ 361.527807][ T31] [ 361.530847][ T31] INFO: task syz.4.370:7301 blocked for more than 144 seconds. [ 361.538369][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 361.548897][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.558845][ T31] task:syz.4.370 state:D stack:26488 pid:7301 tgid:7301 ppid:5825 task_flags:0x480040 flags:0x00004004 [ 361.570840][ T31] Call Trace: [ 361.574113][ T31] [ 361.577045][ T31] __schedule+0x116f/0x5de0 [ 361.581965][ T31] ? __pfx___schedule+0x10/0x10 [ 361.586907][ T31] ? find_held_lock+0x2b/0x80 [ 361.591666][ T31] ? schedule+0x2d7/0x3a0 [ 361.595979][ T31] schedule+0xe7/0x3a0 [ 361.600048][ T31] schedule_timeout+0x257/0x290 [ 361.604890][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 361.610423][ T31] ? mark_held_locks+0x49/0x80 [ 361.615168][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.620367][ T31] __wait_for_common+0x2fc/0x4e0 [ 361.625304][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 361.630700][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 361.636168][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 361.641665][ T31] devtmpfs_submit_req+0xa8/0x100 [ 361.646692][ T31] devtmpfs_delete_node+0xf6/0x160 [ 361.651797][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 361.657501][ T31] ? kobject_put+0xab/0x5a0 [ 361.663176][ T31] ? __pfx_klist_children_put+0x10/0x10 [ 361.668727][ T31] ? klist_children_put+0x44/0x60 [ 361.673911][ T31] ? klist_put+0xf9/0x1b0 [ 361.678235][ T31] device_del+0x734/0x9f0 [ 361.682573][ T31] ? kobj_kset_leave+0x16/0x200 [ 361.687428][ T31] ? __pfx_device_del+0x10/0x10 [ 361.692313][ T31] drop_partition+0x109/0x1c0 [ 361.696986][ T31] bdev_disk_changed+0x24f/0x1520 [ 361.702322][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 361.708300][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 361.713772][ T31] ? filemap_write_and_wait_range+0x7d/0x130 [ 361.719733][ T31] __loop_clr_fd+0x5c7/0x740 [ 361.724404][ T31] ? __pfx___loop_clr_fd+0x10/0x10 [ 361.729503][ T31] ? lo_release+0x18e/0x1e0 [ 361.734175][ T31] lo_release+0x139/0x1e0 [ 361.738479][ T31] ? __pfx_lo_release+0x10/0x10 [ 361.743357][ T31] blkdev_put_whole+0xad/0xf0 [ 361.748038][ T31] bdev_release+0x47e/0x6d0 [ 361.752547][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 361.757724][ T31] blkdev_release+0x15/0x20 [ 361.763649][ T31] __fput+0x3ff/0xb70 [ 361.767641][ T31] task_work_run+0x14d/0x240 [ 361.772251][ T31] ? __pfx_task_work_run+0x10/0x10 [ 361.777339][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 361.783068][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 361.788680][ T31] do_syscall_64+0xda/0x260 [ 361.793371][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.799261][ T31] RIP: 0033:0x7f9b8b38e169 [ 361.803713][ T31] RSP: 002b:00007ffda0b05888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 361.812141][ T31] RAX: 0000000000000000 RBX: 0000000000031415 RCX: 00007f9b8b38e169 [ 361.820394][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 361.828364][ T31] RBP: 00007f9b8b5b7ba0 R08: 0000000000000001 R09: 00000019a0b05b7f [ 361.836361][ T31] R10: 00007f9b8b200000 R11: 0000000000000246 R12: 00007f9b8b5b616c [ 361.844378][ T31] R13: 00007f9b8b5b6160 R14: ffffffffffffffff R15: 00007ffda0b059a0 [ 361.852673][ T31] [ 361.855691][ T31] INFO: task syz.3.371:7307 blocked for more than 144 seconds. [ 361.863276][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 361.872018][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.880867][ T31] task:syz.3.371 state:D stack:27032 pid:7307 tgid:7306 ppid:5830 task_flags:0x400040 flags:0x00004004 [ 361.892785][ T31] Call Trace: [ 361.896053][ T31] [ 361.898973][ T31] __schedule+0x116f/0x5de0 [ 361.903961][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 361.908884][ T31] ? __pfx___schedule+0x10/0x10 [ 361.913904][ T31] ? find_held_lock+0x2b/0x80 [ 361.918572][ T31] ? schedule+0x2d7/0x3a0 [ 361.922900][ T31] schedule+0xe7/0x3a0 [ 361.926944][ T31] schedule_timeout+0x257/0x290 [ 361.931795][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 361.937163][ T31] ? mark_held_locks+0x49/0x80 [ 361.942084][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.947259][ T31] __wait_for_common+0x2fc/0x4e0 [ 361.952208][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 361.957570][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 361.963051][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 361.969049][ T31] devtmpfs_submit_req+0xa8/0x100 [ 361.974295][ T31] devtmpfs_create_node+0x18a/0x230 [ 361.979652][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 361.985404][ T31] ? up_write+0x1b2/0x520 [ 361.989732][ T31] ? kernfs_create_link+0x1bd/0x240 [ 361.994943][ T31] ? kernfs_put+0x35/0x60 [ 361.999269][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 362.004986][ T31] device_add+0x10bd/0x1a70 [ 362.009467][ T31] ? __pfx_device_add+0x10/0x10 [ 362.014310][ T31] ? __pfx_sprintf+0x10/0x10 [ 362.018894][ T31] add_disk_fwnode+0x468/0x13a0 [ 362.023747][ T31] md_alloc+0x3c2/0x1080 [ 362.027980][ T31] md_probe+0x6e/0xd0 [ 362.032287][ T31] ? __pfx_md_probe+0x10/0x10 [ 362.036956][ T31] blk_probe_dev+0x116/0x1a0 [ 362.041552][ T31] blk_request_module+0x16/0xb0 [ 362.046392][ T31] blkdev_get_no_open+0x7a/0xe0 [ 362.051243][ T31] bdev_file_open_by_dev+0x6b/0x210 [ 362.056432][ T31] swsusp_check+0x74/0x420 [ 362.061012][ T31] software_resume+0x6f/0x470 [ 362.065678][ T31] resume_store+0x247/0x460 [ 362.071325][ T31] ? __pfx_resume_store+0x10/0x10 [ 362.076352][ T31] ? find_held_lock+0x2b/0x80 [ 362.081027][ T31] ? __pfx_resume_store+0x10/0x10 [ 362.086040][ T31] kobj_attr_store+0x55/0x80 [ 362.090913][ T31] ? __pfx_kobj_attr_store+0x10/0x10 [ 362.096206][ T31] sysfs_kf_write+0xef/0x150 [ 362.100803][ T31] kernfs_fop_write_iter+0x351/0x510 [ 362.106073][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 362.111276][ T31] vfs_write+0x5ba/0x1180 [ 362.115605][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 362.121575][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 362.126578][ T31] ? __pfx_vfs_write+0x10/0x10 [ 362.131360][ T31] ksys_write+0x12a/0x240 [ 362.135691][ T31] ? __pfx_ksys_write+0x10/0x10 [ 362.141077][ T31] ? rcu_is_watching+0x12/0xc0 [ 362.145857][ T31] do_syscall_64+0xcd/0x260 [ 362.150647][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.156529][ T31] RIP: 0033:0x7faf18b8e169 [ 362.160959][ T31] RSP: 002b:00007faf169f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.169365][ T31] RAX: ffffffffffffffda RBX: 00007faf18db5fa0 RCX: 00007faf18b8e169 [ 362.178163][ T31] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 362.186396][ T31] RBP: 00007faf18c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 362.194392][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.202354][ T31] R13: 0000000000000000 R14: 00007faf18db5fa0 R15: 00007ffe72941338 [ 362.210616][ T31] [ 362.213659][ T31] INFO: task syz.3.371:7310 blocked for more than 144 seconds. [ 362.221280][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 362.228893][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.237555][ T31] task:syz.3.371 state:D stack:29048 pid:7310 tgid:7306 ppid:5830 task_flags:0x400040 flags:0x00000004 [ 362.249626][ T31] Call Trace: [ 362.252898][ T31] [ 362.255809][ T31] __schedule+0x116f/0x5de0 [ 362.260337][ T31] ? __pfx___schedule+0x10/0x10 [ 362.265186][ T31] ? find_held_lock+0x2b/0x80 [ 362.269848][ T31] ? schedule+0x2d7/0x3a0 [ 362.275037][ T31] schedule+0xe7/0x3a0 [ 362.279110][ T31] schedule_preempt_disabled+0x13/0x30 [ 362.284733][ T31] __mutex_lock+0x6c7/0xb90 [ 362.289220][ T31] ? fdget_pos+0x2a2/0x370 [ 362.293658][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 362.298684][ T31] ? __fget_files+0x20e/0x3c0 [ 362.303418][ T31] ? fdget_pos+0x2a2/0x370 [ 362.307823][ T31] fdget_pos+0x2a2/0x370 [ 362.312364][ T31] ksys_write+0x71/0x240 [ 362.316596][ T31] ? __pfx_ksys_write+0x10/0x10 [ 362.321435][ T31] ? do_user_addr_fault+0x843/0x1370 [ 362.326702][ T31] do_syscall_64+0xcd/0x260 [ 362.331230][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.337113][ T31] RIP: 0033:0x7faf18b8e169 [ 362.341728][ T31] RSP: 002b:00007faf169d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.350158][ T31] RAX: ffffffffffffffda RBX: 00007faf18db6080 RCX: 00007faf18b8e169 [ 362.358131][ T31] RDX: 0000000000000046 RSI: 00002000000002c0 RDI: 0000000000000003 [ 362.366116][ T31] RBP: 00007faf18c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 362.374254][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.383638][ T31] R13: 0000000000000001 R14: 00007faf18db6080 R15: 00007ffe72941338 [ 362.391661][ T31] [ 362.394683][ T31] INFO: task syz.2.399:7403 blocked for more than 144 seconds. [ 362.402418][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 362.410040][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.418691][ T31] task:syz.2.399 state:D stack:26696 pid:7403 tgid:7402 ppid:5821 task_flags:0x400140 flags:0x00000004 [ 362.430887][ T31] Call Trace: [ 362.434160][ T31] [ 362.437083][ T31] __schedule+0x116f/0x5de0 [ 362.441589][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 362.446502][ T31] ? __pfx___schedule+0x10/0x10 [ 362.451356][ T31] ? find_held_lock+0x2b/0x80 [ 362.456034][ T31] ? schedule+0x2d7/0x3a0 [ 362.460831][ T31] schedule+0xe7/0x3a0 [ 362.465001][ T31] schedule_preempt_disabled+0x13/0x30 [ 362.470616][ T31] __mutex_lock+0x6c7/0xb90 [ 362.475124][ T31] ? bdev_open+0x41a/0xe40 [ 362.480466][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 362.485501][ T31] ? ilookup+0x1ce/0x320 [ 362.489725][ T31] ? __pfx_ilookup+0x10/0x10 [ 362.494338][ T31] ? find_held_lock+0x2b/0x80 [ 362.498995][ T31] ? bdev_open+0x41a/0xe40 [ 362.503421][ T31] bdev_open+0x41a/0xe40 [ 362.507644][ T31] blkdev_open+0x27b/0x3f0 [ 362.512116][ T31] do_dentry_open+0x741/0x1c10 [ 362.516874][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 362.521824][ T31] vfs_open+0x82/0x3f0 [ 362.525873][ T31] path_openat+0x1e5e/0x2d40 [ 362.530478][ T31] ? __pfx_path_openat+0x10/0x10 [ 362.535410][ T31] do_filp_open+0x20b/0x470 [ 362.540139][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 362.545166][ T31] ? alloc_fd+0x471/0x7d0 [ 362.549474][ T31] do_sys_openat2+0x11b/0x1d0 [ 362.554167][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.559347][ T31] __x64_sys_openat+0x174/0x210 [ 362.564206][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 362.569557][ T31] ? rcu_is_watching+0x12/0xc0 [ 362.574387][ T31] do_syscall_64+0xcd/0x260 [ 362.578903][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.585585][ T31] RIP: 0033:0x7fed1ef8cad0 [ 362.590160][ T31] RSP: 002b:00007fed1fe23b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 362.598573][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed1ef8cad0 [ 362.606580][ T31] RDX: 0000000000000000 RSI: 00007fed1fe23c10 RDI: 00000000ffffff9c [ 362.614546][ T31] RBP: 00007fed1fe23c10 R08: 0000000000000000 R09: 0023706f6f6c2f76 [ 362.626844][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 362.637459][ T31] R13: 0000000000000000 R14: 00007fed1f1b5fa0 R15: 00007fffccb1c998 [ 362.645449][ T31] [ 362.648457][ T31] [ 362.648457][ T31] Showing all locks held in the system: [ 362.656279][ T31] 3 locks held by kworker/0:1/10: [ 362.661485][ T31] #0: ffff8880222d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 362.672365][ T31] #1: ffffc900000f7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 362.684730][ T31] #2: ffff8881447f8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 362.693799][ T31] 3 locks held by kworker/1:0/24: [ 362.698795][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 362.709271][ T31] #1: ffffc900001e7d18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 362.719662][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 362.730276][ T31] 2 locks held by kdevtmpfs/26: [ 362.735098][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 362.745858][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 362.755396][ T31] 1 lock held by khungtaskd/31: [ 362.760591][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 362.770490][ T31] 3 locks held by kworker/u8:3/53: [ 362.775575][ T31] #0: ffff88814cb9f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 362.788977][ T31] #1: ffffc90000bf7d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 362.802269][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 362.811803][ T31] 3 locks held by kworker/u8:5/740: [ 362.816996][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 362.828163][ T31] #1: ffffc9000348fd18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 362.838691][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 362.847780][ T31] 2 locks held by getty/5587: [ 362.852459][ T31] #0: ffff8880329df0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 362.862538][ T31] #1: ffffc900033362f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 362.872658][ T31] 3 locks held by kworker/0:3/5832: [ 362.877825][ T31] #0: ffff8880222d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 362.889483][ T31] #1: ffffc90004077d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 362.900919][ T31] #2: ffff888144b18198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 362.909771][ T31] 3 locks held by kworker/1:5/5920: [ 362.914970][ T31] #0: ffff8880222d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 362.925752][ T31] #1: ffffc90004277d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 362.937143][ T31] #2: ffff888029808198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 362.946545][ T31] 1 lock held by syz.4.370/7301: [ 362.951514][ T31] #0: ffff8880261b6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 362.953589][ T5842] Bluetooth: hci18: command tx timeout [ 362.961345][ T31] 7 locks held by syz.3.371/7307: [ 362.971679][ T31] #0: ffff888078c6a478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 362.980731][ T31] #1: ffff88803701c420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 362.989701][ T31] #2: ffff888022b10888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 363.001569][ T31] #3: ffff8881416e5c38 (kn->active#63){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 363.011649][ T31] #4: ffffffff8e283788 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x470 [ 363.022242][ T31] #5: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 363.031784][ T31] #6: ffffffff8fc81c88 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x1080 [ 363.040517][ T31] 1 lock held by syz.3.371/7310: [ 363.045445][ T31] #0: ffff888078c6a478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 363.054663][ T31] 1 lock held by syz.2.399/7403: [ 363.059581][ T31] #0: ffff8880261b6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 363.068893][ T31] 2 locks held by syz-executor/7426: [ 363.074178][ T31] #0: ffffffff908874a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 363.083923][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 363.094043][ T31] 2 locks held by syz-executor/7428: [ 363.099332][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 363.108978][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 363.118219][ T31] 3 locks held by syz.0.415/7471: [ 363.123235][ T31] #0: ffffffff901ccf10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 363.131431][ T31] #1: ffffffff901ccfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 363.140768][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0x120/0x28b0 [ 363.150343][ T31] 1 lock held by syz.1.416/7473: [ 363.155282][ T31] #0: ffff8881447f8198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 363.164282][ T31] 1 lock held by syz-executor/7478: [ 363.169464][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.179025][ T31] 1 lock held by syz-executor/7481: [ 363.184345][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.193777][ T31] 1 lock held by syz-executor/7484: [ 363.199780][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.209488][ T31] 1 lock held by syz-executor/7488: [ 363.214684][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.224080][ T31] 1 lock held by syz-executor/7490: [ 363.229250][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.238806][ T31] 1 lock held by syz-executor/7493: [ 363.243998][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.253397][ T31] 1 lock held by syz-executor/7496: [ 363.258564][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.268294][ T31] 1 lock held by syz-executor/7499: [ 363.273505][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.282908][ T31] 1 lock held by syz-executor/7503: [ 363.288089][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.298898][ T31] 1 lock held by syz-executor/7505: [ 363.304150][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.313584][ T31] 1 lock held by syz-executor/7508: [ 363.318752][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.328307][ T31] 1 lock held by syz-executor/7511: [ 363.333507][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.342892][ T31] 1 lock held by syz-executor/7514: [ 363.348058][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 363.357631][ T31] [ 363.359961][ T31] ============================================= [ 363.359961][ T31] [ 363.368339][ T31] NMI backtrace for cpu 0 [ 363.368348][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 363.368365][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.368371][ T31] Call Trace: [ 363.368375][ T31] [ 363.368380][ T31] dump_stack_lvl+0x116/0x1f0 [ 363.368398][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 363.368411][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 363.368424][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 363.368436][ T31] watchdog+0xf70/0x12c0 [ 363.368451][ T31] ? __pfx_watchdog+0x10/0x10 [ 363.368460][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.368474][ T31] ? __kthread_parkme+0x19e/0x250 [ 363.368491][ T31] ? __pfx_watchdog+0x10/0x10 [ 363.368501][ T31] kthread+0x3c2/0x780 [ 363.368512][ T31] ? __pfx_kthread+0x10/0x10 [ 363.368521][ T31] ? __pfx_kthread+0x10/0x10 [ 363.368530][ T31] ? __pfx_kthread+0x10/0x10 [ 363.368540][ T31] ? __pfx_kthread+0x10/0x10 [ 363.368549][ T31] ? rcu_is_watching+0x12/0xc0 [ 363.368562][ T31] ? __pfx_kthread+0x10/0x10 [ 363.368572][ T31] ret_from_fork+0x45/0x80 [ 363.368583][ T31] ? __pfx_kthread+0x10/0x10 [ 363.368593][ T31] ret_from_fork_asm+0x1a/0x30 [ 363.368615][ T31] [ 363.368619][ T31] Sending NMI from CPU 0 to CPUs 1: [ 363.501418][ T5842] Bluetooth: hci19: command tx timeout [ 363.507518][ C1] NMI backtrace for cpu 1 [ 363.507531][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 363.507547][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.507554][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 363.507576][ C1] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 363.507588][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 363.507598][ C1] RAX: 0000000000f94011 RBX: 0000000000000001 RCX: ffffffff8b72a419 [ 363.507607][ C1] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 363.507615][ C1] RBP: ffffed1003b5a488 R08: 0000000000000001 R09: ffffed10170a65bd [ 363.507623][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 363.507631][ C1] R13: ffff88801dad2440 R14: ffffffff90864910 R15: 0000000000000000 [ 363.507638][ C1] FS: 0000000000000000(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 363.507651][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.507659][ C1] CR2: 00007f3ce7168f7d CR3: 000000000e180000 CR4: 00000000003526f0 [ 363.507668][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.507675][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.507683][ C1] Call Trace: [ 363.507687][ C1] [ 363.507691][ C1] default_idle+0x13/0x20 [ 363.507709][ C1] default_idle_call+0x6d/0xb0 [ 363.507726][ C1] do_idle+0x391/0x510 [ 363.507745][ C1] ? __pfx_do_idle+0x10/0x10 [ 363.507760][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 363.507781][ C1] cpu_startup_entry+0x4f/0x60 [ 363.507796][ C1] start_secondary+0x21d/0x2b0 [ 363.507810][ C1] ? __pfx_start_secondary+0x10/0x10 [ 363.507825][ C1] common_startup_64+0x13e/0x148 [ 363.507846][ C1] [ 363.509001][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 363.703532][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 363.715335][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.725380][ T31] Call Trace: [ 363.728644][ T31] [ 363.731568][ T31] dump_stack_lvl+0x3d/0x1f0 [ 363.736177][ T31] panic+0x71c/0x800 [ 363.740067][ T31] ? __pfx_panic+0x10/0x10 [ 363.744472][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 363.749836][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 363.755802][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 363.761160][ T31] ? watchdog+0xdda/0x12c0 [ 363.765558][ T31] ? watchdog+0xdcd/0x12c0 [ 363.769956][ T31] watchdog+0xdeb/0x12c0 [ 363.774203][ T31] ? __pfx_watchdog+0x10/0x10 [ 363.778884][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.784087][ T31] ? __kthread_parkme+0x19e/0x250 [ 363.789105][ T31] ? __pfx_watchdog+0x10/0x10 [ 363.793770][ T31] kthread+0x3c2/0x780 [ 363.797822][ T31] ? __pfx_kthread+0x10/0x10 [ 363.802391][ T31] ? __pfx_kthread+0x10/0x10 [ 363.806960][ T31] ? __pfx_kthread+0x10/0x10 [ 363.811531][ T31] ? __pfx_kthread+0x10/0x10 [ 363.816102][ T31] ? rcu_is_watching+0x12/0xc0 [ 363.820852][ T31] ? __pfx_kthread+0x10/0x10 [ 363.825423][ T31] ret_from_fork+0x45/0x80 [ 363.829819][ T31] ? __pfx_kthread+0x10/0x10 [ 363.834392][ T31] ret_from_fork_asm+0x1a/0x30 [ 363.839152][ T31] [ 363.842370][ T31] Kernel Offset: disabled [ 363.846673][ T31] Rebooting in 86400 seconds..