last executing test programs: 2m29.501762089s ago: executing program 3 (id=358): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x8000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000140)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0xc810, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x2, 0x400, 'syz1\x00', &(0x7f00000004c0)=[':#,\x00', '$\x00'], 0x6}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sync() r7 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8000000, 0x0, 0x0, 0x40031f, 0x0, r6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 2m28.47850874s ago: executing program 3 (id=360): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100), 0x6) getsockname(r1, 0x0, &(0x7f0000000280)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@mmap={0xa, 0x0, 0x4, 0x1, 0x3000000, {0x0, 0x2710}, {0x2, 0x2, 0x8, 0x5, 0xe, 0x2, "af602a47"}, 0x2, 0x1, {}, 0x8d, 0x0, r2}) 2m28.206467596s ago: executing program 3 (id=362): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r4 = getpgrp(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000006000000000001006140000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000c00000000000000de0000000061976ef15d72093ea3f9162e4e0000000000130000000000000000"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1b}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r6, 0xffffffffffffffff}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095", @ANYRES8=r7], &(0x7f00000000c0)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r11 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x134, 0x10}, 0x0, 0x0, 0x1, 0x1ff, 0x5, 0x4, 0x4, 0x1ff, 0x7ff, 0x1000, r11}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f000000b500)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000340)="96bda2117864d42f9518d61995bb5f5335cf2e8e145d1a075d9a35f080f8776a4d89cd9417be165ae7ac0368c87b648239d886f5ec16d809312f9510899d476aae7a8ea1bae15bd6b30861d3424e3fc2f52f12ef062d51700aa5126ce49152a44fae29741a"}, {&(0x7f0000000580)="48650f2b9b81864012545e436806d9354307cbb38547352cf6672c36eb74af93900abe800937a4cbfa77aeb1b960373b86b68cdd2c955fc5c2513835f0a25b74c4c27fd6d8bacfb1d1c8436b5553498d94159b3d2afe30c836bc48568a366625290becd73b008d1d63e9e81b522de13a0f53bbdae6183c76b4eb4f71f13040df871a0957e2ad0c5f2364cd742a965db6f57a08e22fe1d227abe2"}, {&(0x7f00000002c0)="2e9e412da93e6e4f1db528f9d345335909577a58876997b4820e1f6ab3992a17cd193c22b4c57aaf17397ae330d6df06f1108c8c"}, {&(0x7f0000000700)="5481fe41f40eef820d8f7835c415bbbc04ba151aa175785bcc169c2e15602636333f8b4ddcb563da563527046e84e6d46e5036b1b25f8761f051009faeac96b3ab72cb44addbebcdd15cff117df776b1d1b12c69f2341008df4fb762b15da0efc247"}, {&(0x7f0000002800)="ee3ab81a8baf05c91418275e5022181378541577ed9b882b1b1c0695311e7d49750170bb01a369f68b147342058be98b97753c5822a00c6f3f8683b99b4940cb25cddb009468bfc016aff6dd40878458d0a875a8362bf394a87eeb32c2eb787812ce49b48490fc203e58c1154547fd31b76f077f13ea944ff2ad01c41d458094a0d31586df50c2444be3a5dc93ade34240ec"}], 0x0, &(0x7f00000029c0)=[@cred={{0x0, 0x1, 0x2, {r11}}}], 0x0, 0x20000080}}, {{&(0x7f0000002a00)=@abs={0x0, 0x0, 0x4e22}, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002a80)="bb843a7ff39f2006abe84bb1145e2f0ff5041c33d0d8e3aa6631411307ff4e181cdae380d6cae93a266a6a1330e33e020a8ea4a4de41e56cfcbaaadc80fcb9b0f571c63ced6e8e0d88e4ee3b47b7871c7130d2a8b86a779537e670c23f9aba78328250b7ce61b108b630162dbf8fbb5d6744b77ad7863c37d0ee764df3dc8b3c054ad69106981704abefb6137f57a60174bd41bb7d249cfd112511bc7b83c0450d7db9790dfa3ee63813a03cc9e802523ba9697cbc2643681a60160025c9bd180962ce91b2de1d88158ddd2765b4ff794471d6f914c15fc274fbe12b90cc4738162fe8e51e"}, {&(0x7f0000002b80)="44cad532a20d3f83f2197e1d77e0fa171a9eb8b0832f3f00b2fd74b5345c4551ad5f39631e247e065f9eb5115ff990319238b4cc1468e02e51e9130cb6dd685cdf2b46fccf0cba6333bd4f5bdca2e186693bcb91496423ca50e643077f35760d706b3f91b0ef4df062a7d14e9eddc08fac369184eff22a53601f0cbe758ac777a7b5dee774104ce7e124b661bfaeb1686a688eb71d82d654d2f932f232f212ec3c9a028e75522cae5419c22aa67d86b38cd70bd21a1488c47fbd33432b3826406708b0262fbd884c2f99152fb6661ddef2a85326c083844c9206cf3758bcbaab28db76c6f60309459d613377075a"}], 0x0, &(0x7f0000003080)=[@cred, @cred={{0x0, 0x1, 0x2, {r4}}}, @rights={{0x0, 0x1, 0x1, [r10, r9]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r12, r5, r8, r7, r13]}}, @rights={{0x0, 0x1, 0x1, [r9, r10, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r7, r12, 0xffffffffffffffff, 0xffffffffffffffff, r9, r12, 0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {r4}}}, @rights={{0x0, 0x1, 0x1, [r13, 0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {r11}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r8, r9, r12, r8, r9]}}], 0x0, 0x40000}}, {{&(0x7f0000002f40)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000003040)=[{&(0x7f0000002fc0)="3232218eb520b656126f58162d822a8d4b550880510e4d076a36a1f808c2f2c91c532a44c1ccb4cd1b3108e8b77b743e81b5c47ab88be13b693be3244eaddf5c7777928fbdaf0cb50c367a209df361c5a1750f1d207fd728bae044fc"}], 0x0, &(0x7f0000003280)=[@rights={{0x0, 0x1, 0x1, [r8, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, r10, r7]}}, @rights={{0x0, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r10]}}, @rights={{0x0, 0x1, 0x1, [r9, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {r4}}}, @cred={{0x0, 0x1, 0x2, {r11}}}, @cred={{0x0, 0x1, 0x2, {r11}}}], 0x0, 0x400080c}}, {{&(0x7f0000003380)=@abs={0x0, 0x0, 0x4e20}, 0x0, &(0x7f0000003640)=[{&(0x7f0000003400)="b1dfcb93843753bb1a6a4ffe61e86ba132e340167bd75560f698a0f0e764bc8e3296058c1edc4731b347b8ac49241f8219a3d2bb63b2c1857d76fa1f83a3d94d97b498cb371557bfee074626421d853ddd475a29a031cba507566bfed9dab99fde5e709ed05ffbd5a10f1cc4b5da1e"}, {&(0x7f0000008280)="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"}, {&(0x7f0000003480)="c7e99e8cabddfd9d2d0a9d82b7c68b334f7e42adc4e988ee33b5796e43455f8af8eb9c1cfea9b13c160b2a3b147de36b03a09e35a4da017db28fb30ea409e53940b8a809b196113d41dfdaac9fc05209e955f90dd1bf60f3ccedc4d35b7d3a8ed1eda66304389ab09496cc9f198ec717cb2256ed9a7cbd"}, {&(0x7f0000003500)="f839fcec95027ee5491baec194b16dbef32a838bfeac34992af9b3de56f3e71d2b7ca8d14166d003ed9a65aa996ab8a7d85e01b8cf8c067f20ab22e73711081457cdc7dd0ae4c075cb9a721154e1b3d847c5a4b8e76e8f54b4999a4be5334ee7b30a3a9abd0b51e2a5ab7a246e56b022d411fd00bc848cc614fcde917af8ce3eb5fbe3ff4e8101c7452b169d0d13941cbed3b655614e28ae60e7802ef81b6da72c5612247f46a40349e4ba3a23a8506cebb517c95907c8d56268aa775e34036208fe36001a0eb7a5c396150fc0536814bba1e09d4242"}, {&(0x7f0000003600)="fb931e47199d4d706f76e571cb8873619691e05fc40a201f8136efce3972468be2bcaf699e6d02e36e3378bd6c"}], 0x0, &(0x7f00000036c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000003700)=@file={0x1, './file0\x00'}, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003780)="9c9b25c71fa76d93d6215445e90479"}], 0x0, &(0x7f0000003980)=[@cred={{0x0, 0x1, 0x2, {r11}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000003a40)=@abs={0x0, 0x0, 0x4e23}, 0x0, &(0x7f0000004040)=[{&(0x7f0000003ac0)="04e57676a4ef5245b023c57d24151d54b2eb0bfb6f48055a4087d45c88cba9fd144c589b630e57a8bb8e5d504d8aa7001d91d5070b527197e563b7b4ac8634c2b17c33b3013adfacc4d1916e60aa032579d5491aa6f810ee547bdc65688af77256e9739367b34e85ef820e2272d4954e1f5f4cc061aa6ddd5a5a6510"}, {&(0x7f0000003b40)="7af7460021a1ed38eab3ddf5a9b2c18c888d2a7dfec1a6b00f5fb9910a3eec42c93ca5e3b770a9626c2397e105958db3aed69bbb3f15d1f34af3cf3cd78757fa4cccc05da92582be6c40349bb2d7362310ddf5e3b4539d2b130c8b947d12afb1d6985b404080b4447a1683d3bf23f9620def596ae44a4938b3d595a0a68ce607655ba1bdbedc902a1373fcb6b4f060f67dacc1fefc1ea246faebe54a4d547313f1e7e4e9923af64fab"}, {&(0x7f0000003c00)="08bc3901eb159e6b3c6336d82fc803da2242c913871face1365930b37a9a0ca4dcee4ca3631a7409ed4b80b4ed8742fa473008c777278ce8789557f66cb2e2de350c72d4620b009f735ea6d314bc43e18e6af1045d9f50268ae01f03ac843a2a1005ddcdf93483ecd540f44d429c89a3f42bc81762b1ee454c9db8cbe4bd0f71e9e9674e2535bd3f9148203f3e77915aa6a61e4d674522a2dc977f4008020ab11106517cf325800be2918957b1786d0ea49cfc0c68408edda1c71db8254ce32a3856aef20e2b204d"}, {&(0x7f0000003d00)="29d1502ce1804e72ceb3e41f84a0f6654f084487d447b8ab31e64bd148d4a028b0d3c72d4faa50e568669294f4062bc4f80ee4db1690af09b3bc4e4bc8e2a3669c57404abf56be49577c705c68819b4d6bb0a01403995c660299cd2aaca30e0f044be4b6799b3f85c8a84890eaaddc9ec565104cc01e5d4d5c7963328757c09ab137f4873e6700b56fe9ae639c0281b54f8ea21a932f1812f122ee755831dd51b7e90f3befd79639a07f756736ee0f1fa111132ef8049e2eee9137fa09eb45ada620609a75da74e1d9a50fa851a74596a52fc185b3cd7a3b6d6cc692e30386045d9a62671b3942b0cc743a25a2acd0c9730a8e6e16c16528849992be8d9f48"}, {&(0x7f0000003e00)="dfdded682599782fb40fd7be98696b4c693231770d0221a5"}, {&(0x7f0000003e40)="9a72e9b042d7815f5c9fb2f8fea6a87a6e575f94f00862e026e074f5465b754848a457d8049a7959293f60e04b188e8c4997e8e1b2db140ae34f205747d6da40b2cad300414641ba908064cc5d3b8ae98834382378479b6a6afc3603746a47"}, {&(0x7f0000003ec0)="2398b14a5b991592703f445e4cc5c24e0f45db12bd90faa101a185871aa0ff395ae417927c3cd5f82c9911ced0acb16290cb52f6b418dd233a9dbaf47f54826ec40d29540e76280c66a6151d20729e43"}, {&(0x7f0000009280)="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"}, {&(0x7f0000003f40)="2bfba4a5c2a4ec6ff4d0f915240e8a7c33faa23b1ea1a329c9845694d5b7da8139235a91b38fe50a9d066e047f4650829a559e495f06fbd8b7c08fd6ce2fec9bfe392620f85c60b67917730046f35c139f2fc637003c00339c80aabbaad070d8795bf5cb7ae0815393813e7bdbfba4a486e0f26c0de9ef84cb9ac6d5df774490d066d9edd01f6f2df7006e4ff484b9c917b77dc8552418cbe6261527149c93f7e222c1317df0cde74b90e3ad6a865e44bf4be94bf37107812f2b3a6a8222df9d82d0fd42d6e3dcb6ab337f2c60656efc75bbe6dd7d3005aeb3584fdfed62654f350d731d6c"}], 0x0, &(0x7f000000a280)=[@rights={{0x0, 0x1, 0x1, [r13, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {r4}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x40000}}, {{&(0x7f0000004140)=@abs={0x1, 0x0, 0x4e21}, 0x0, &(0x7f000000b340)=[{&(0x7f0000006200)="2ba29b1de0c917468ad5fb925370960df68516ca1fcb9cf8acd8f16c4262ada840976833950aca0fd2d2bc83548992a2"}, {&(0x7f0000006240)="dde0ee04d56d79d37815d826055401e91247646274398e911ed7602d11519f527f7ea1e8e9"}, {&(0x7f000000a340)="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"}], 0x0, &(0x7f000000b4c0)=[@cred, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}], 0x0, 0x4800}}], 0x400000000000194, 0x20000000) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r14, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r16, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r3, @ANYBLOB="54002d8005000100000000000500040000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 2m26.690707416s ago: executing program 3 (id=371): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x40850}, 0xc814) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x4050) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe0000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff8145}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4008001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000045cbed164dc3769cf91bd6325ad275727592a505827d", @ANYRES16=r5, @ANYBLOB="0b0628bd70000000000030000000050036000000000008000200", @ANYRES32=r6, @ANYBLOB="050035000000000005003300030000000500340000000000"], 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) 2m25.67836829s ago: executing program 3 (id=373): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="3a2fed5d5259268441ebcb3d22e21b802a0621815869f4f1c15900b4f47ee5ed7e643cb6c45d2a84bd44d867209af36b984ffa60ff8ce87f6ab9d0dd5c61f12d3a80e37d37e9dd2bd93cadcf83b1d2d689e8110fff3b17dc72fe55ddfe79f7", 0x5f}], 0x1) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0xff, @remote, 0x6}, 0x1c, 0x0}}], 0x1, 0x4000844) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f00000003c0)="3c00000058001f000307f4f9002304d65f0800010700010002170003800500000099db973b91aa057972513500b0406700912deb5b05932234f1aa95", 0x3c) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x0, 0xa5, 0x6, 0x605e, 0x9, 0x0, 0xe, 0x800}, &(0x7f00000002c0)={0x7, 0xb, 0x4, 0x2d2, 0x9, 0x2, 0x1, 0x65}, &(0x7f0000000340)={0x4, 0x1, 0x3, 0xb22, 0x1000, 0x8, 0x3, 0x4}, &(0x7f00000004c0)={r12, r13+10000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x8]}, 0x8}) r14 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r14}, &(0x7f0000000000)) 2m24.73330193s ago: executing program 3 (id=378): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') read$eventfd(r2, &(0x7f0000000080), 0x51) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x403, 0x70bd2d, 0x300, {0x0, 0x0, 0x4, 0x0, 0x3ff, 0xc8df8ae552dcbaf7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x11559, 0x14009}}}}}}]}, 0x48}}, 0x0) 2m9.52599856s ago: executing program 32 (id=378): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') read$eventfd(r2, &(0x7f0000000080), 0x51) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x403, 0x70bd2d, 0x300, {0x0, 0x0, 0x4, 0x0, 0x3ff, 0xc8df8ae552dcbaf7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x11559, 0x14009}}}}}}]}, 0x48}}, 0x0) 9.042517886s ago: executing program 2 (id=914): syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 6.951274849s ago: executing program 4 (id=921): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xfe98, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x2, 0x4) 5.811253172s ago: executing program 4 (id=925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000072c0)=[{{&(0x7f0000000280)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000007540)=""/154, 0x9a}], 0x6}, 0x2}, {{&(0x7f0000000700)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000780)=""/163, 0xa3}, {&(0x7f00000008c0)=""/132, 0x84}], 0x3, &(0x7f0000000980)}, 0x10}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/156, 0x9c}, {&(0x7f0000000b00)=""/65, 0x41}, {&(0x7f0000000b80)=""/107, 0x6b}], 0x3, &(0x7f0000000c40)=""/194, 0xc2}, 0x6}, {{&(0x7f0000000d40)=@ax25={{0x3, @default}, [@default, @default, @bcast, @rose, @bcast, @default, @default]}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000dc0)=""/40, 0x28}, {&(0x7f0000000e00)=""/23, 0x17}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/30, 0x1e}, {&(0x7f0000000e80)=""/159, 0x9f}, {&(0x7f0000000f40)=""/227, 0xe3}, {&(0x7f0000001040)=""/51, 0x33}, {&(0x7f0000001080)=""/94, 0x5e}], 0x9, &(0x7f00000011c0)=""/73, 0x49}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000001240)=""/55, 0x37}, {&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000004400)=""/51, 0x33}], 0x3, &(0x7f0000004480)=""/92, 0x5c}, 0xf}, {{&(0x7f0000004500)=@hci, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004580)=""/189, 0xbd}, {&(0x7f0000004640)=""/95, 0x5f}], 0x2, &(0x7f0000004700)=""/38, 0x26}, 0x2}, {{&(0x7f0000004740)=@generic, 0x80, &(0x7f0000004a40)=[{&(0x7f00000047c0)=""/24, 0x18}, {&(0x7f0000004800)=""/94, 0x5e}, {&(0x7f0000004880)=""/211, 0xd3}, {&(0x7f0000004980)=""/186, 0xba}], 0x4}, 0xe8}, {{&(0x7f0000004a80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000007080)=[{&(0x7f0000004b00)=""/155, 0x9b}, {&(0x7f0000004bc0)=""/73, 0x49}, {&(0x7f0000004c40)=""/4, 0x4}, {&(0x7f0000007600)=""/216, 0xd8}, {&(0x7f0000004d80)=""/233, 0xe9}, {&(0x7f0000004e80)=""/143, 0x8f}, {&(0x7f0000004f40)=""/110, 0x6e}, {&(0x7f0000004fc0)=""/4090, 0xffa}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/177, 0xb1}], 0xa, &(0x7f0000007140)=""/24, 0x18}, 0x6}, {{0x0, 0x0, &(0x7f0000007180), 0x0, &(0x7f00000071c0)=""/205, 0xcd}, 0x92a6}], 0x9, 0x40000040, &(0x7f0000007500)={0x77359400}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x5, 0x4, 0x8001}}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.684490802s ago: executing program 1 (id=927): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000700)=0xe3) 4.629419846s ago: executing program 1 (id=929): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setns(r2, 0x80) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd60010700000c1100fc010000000000000000000000000000ff020000000001"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000006800010043000000000000800000000000000000240002"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x100440c0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x101fc, 0x5, 0xdddd0000, 0x2000, &(0x7f0000183000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000200)=0x10) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.626554568s ago: executing program 2 (id=930): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 4.587297975s ago: executing program 4 (id=931): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) ustat(0xb3c, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$vim2m(0x0, 0x8004, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) iopl(0x3) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r5, 0xfffffffd) accept(r5, 0x0, 0x0) 4.586944009s ago: executing program 5 (id=932): syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) symlink(&(0x7f0000000480)='.\x00', &(0x7f0000000040)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x89901) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2c000000000000000011000007000000441c9301ffffffff00000000000000007833271a148c162d69f22cc41e0000001c000000000000000000000008000000", @ANYRES64=r0], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c", 0x4}], 0x1}}], 0x2, 0xc080) 4.335041758s ago: executing program 2 (id=933): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0x472d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffff8003, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xffffffbffffffffb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x4000000004, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000, 0x767e, 0x3e00000000, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_stats={0x2e, 0x2, [0x0, 0xf]}}) ioperm(0x0, 0x7, 0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0x3ff, 0x3f14e3f5e7c0dae) 4.292100995s ago: executing program 5 (id=934): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) 3.856603346s ago: executing program 1 (id=935): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private0, @local, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1, 0xb, 0x0, 0x100, 0x4, 0x84020084, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x180107, r3}) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000340)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x7a, "20f39245ac27077b2709f0dc93633d6a20e357dc9658d61fdf9d463e0ef6e9149950de4b672eb7a66893fe7c7812f114f9f0ff4aaf55213aec771170b978d457446ad4490dc94f09f6763468c7e334d88dc8599b9f9afeff16e6f891476889b6d36e6e58ba2dfccaf7dafa77b53523f889c29240f4ad46d68ccb"}, &(0x7f0000000000)=0x82) r5 = epoll_create(0x10000e9) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140)={0x80000001}) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, 0x0}, 0x0) connect$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r9, &(0x7f0000004400), 0x400000000000203, 0x0) 3.366339968s ago: executing program 5 (id=936): r0 = syz_init_net_socket$bt_sco(0x9, 0x5, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000080001, 0xffffffffffffffff, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076844268cb89e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) 3.263465796s ago: executing program 4 (id=937): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x20004) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x3, 0x12) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000d50a0000000000000101000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000065090100000000005e000000ffffff80180100002020702500000000002020207b9a20fe000000005e0800000000000000010000f8ffffffb702000008000000b70300000000000056000000060000002c933973bfca75d8000000000000b5030000000000048500000076000000b7000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.254008805s ago: executing program 2 (id=938): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001180)='!', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xc}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) 3.160732363s ago: executing program 0 (id=939): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 3.076051013s ago: executing program 2 (id=940): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) syz_usb_connect(0x2, 0x458, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xd7, 0xb3, 0x74, 0x20, 0x1410, 0xa013, 0xc31f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x446, 0x3, 0xc, 0x9, 0x70, 0x8, [{{0x9, 0x4, 0x3a, 0x0, 0x5, 0x59, 0x3c, 0x1a, 0x5, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x40, 0xe, "c595e34b7bec"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x58, 0x3, "", 'n'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x8, "", "ea923b"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb3, 0x3, 0x9a, 0x1}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0x8, "84dc"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x7fce, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x1, 0x3d}, [@acm={0x4, 0x24, 0x2, 0x4}]}], [{{0x9, 0x5, 0xf, 0x13, 0x10, 0x1, 0xc1, 0x88, [@generic={0x6, 0x21, "d80c01c0"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x6, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0xc, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd5, 0x3}, @generic={0xfa, 0x31, "c3e7d275e5d9cdceabaa7518e39cee9d5b68dcaaf67b4bcb2e7a7fa7a21c562bd930b02232da8108fd7c5107d69cd0ef5919765308c31a0c2c44275aa41358cbe5ec0978f647f412091f5c41ddf59088ef8b644c25d64a9198bbc70b3abd2983f2d0216538d09e6f64043fb24fb9224c997dd308f9d461aac21077de637b45e949446555ba5b9b6c98219851e85dbabe5587240b6707dc2557117288d27b2a454976832f636426eb4313b648b4d59a992787a13c449ebe4cdb1f93871ca41771471daac6812505ec259f4fdc3a711bd61858b5dafaa0b02015a7f3396da37f21a1b8fecfd8eb70e594649b5e0cd5aa2f2a4de7939904a150"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x7, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x210, 0xf3, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0xe}]}}]}}, {{0x9, 0x4, 0x62, 0x3, 0x1, 0xff, 0xff, 0xff, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x4, 0x1e, 0x400, 0xd2, 0x40}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0xe}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x6, "a0af5018"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0xa8, "7bee492c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x65, 0x8, 0x8, [@generic={0x6c, 0x7, "02713cc2d77eb2abb759597241cbc7f97de1a79ff29f60c099c52ab352d99bb7da43ceb58f8281a5f0e84f31c7c46d3eeb8d0c14aa7d8b71c415113de2edb2b0a7b4fc097da512ef096fe47ed4fefd2d9346ddb7cd9b6a09ef456b76b589fdce6f145259462ed849cfcf"}]}}]}}, {{0x9, 0x4, 0x79, 0x7, 0x5, 0x7d, 0x29, 0xf4, 0x10, [], [{{0x9, 0x5, 0x80, 0x2, 0x40, 0xa0, 0x9, 0x6, [@generic={0x4b, 0x21, "59e88504fd966acdc734098623aa0da3fe02756d9eeaa683a28af516928034c1d84a7084aaf942d097e2f0ff53fe0a3b5be1d2ac5c2baa184e8b71cef5542f1c1fd6bf539fe618882f"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x6, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x8}, @generic={0x84, 0x3, "409a8b6e2117a54ce5391506eec3f472d032f9a9b02f33a2bb98db899e6a448edfa38bdbed96ed700628b1704ab897e2dbf59c90a381466269da939eb586102859683a2d3773e6f17341d9efd1375706af9f2c09faa42c424ea4a7a02870349186323604da9e4d65890c4a854c3706e6216bda85fe0c5c9ebe9c96c5653f3f102a1e"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x3, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x5}]}}, {{0x9, 0x5, 0x803e8fa464c9a07, 0x0, 0x20, 0x7, 0x0, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x1, 0x7, 0x0, [@generic={0xd3, 0x24, "579dc8a0b7c4725e278ac6485ae44a89b8d256093eac4570be7de55e22ab847493590c1f529b852879d63497ab867d55bb58e0cb9071a29a5417b7730f562cfebcc24cd46a7d7f8d0a01072ccc983380b79df52bc96def31497d55bc8c7c4a1d2a9ed56e6595ae1f1e9246e182650f117a9b492d73ffe8ad9b1e75572a11fc660da31a6ac4636cd35708d573888d9f874e4eeb0a13652ef71f2b252b87e15a5ec1e922ac0e79d96dbac6460825ac0344079599823849acc01ef1f7c232be1cdb01a512412942332de39510760bc89cbdaa"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x10, 0x3, 0x8, 0x0, 0x8}, 0x20, &(0x7f0000000540)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x11, 0x7, 0x6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x95, 0x200}]}}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000005c0)={'veth0_virt_wifi\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040cd}, 0x4044) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newnexthop={0x38, 0x68, 0x4, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xffffffe8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x200}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040041) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) setuid(r2) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/80, 0x50) sendmsg$kcm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000940)="0d8ffb9deb0fd5e390342e9e3d48a149b17035b260c1267a0f5ed29d64f74119baf5c5906e1af79c0488a436db5aabbe6f066f2f288d75ac4e706296c743bd02a51aee37b1be53062a319cb65bec08c29d1bd24f48d7d7eee0cb6228f1e6d24d86b6858c2899808ee6a2eccbeca251a207caf56a7d920230dbec3caa6622fd0ac1ab2a20cc1c0913a641f383400b4b004461cef6eab910eaa1c927aa347b1ea3f4478805c0c073d950c55df5f468c64905b58ed44ed9c23344ff7a55a879f74c8f62efb2bd26833167", 0xc9}, {&(0x7f0000000a40)="1efe73d4e4aa1cce4c96de015551255ca10def539dfa128dc22579dfbd6457dbaae7aeea7bf6c4599494266d959c0b3b13dcc9e40965f1fad2e4ba182f8476cb59749b3fac21a58a58fb6c3013ba51a2cc74486bc17ea0fca9e01404bfec495384602048bcc69e974e6166b2e7363ec99d6c1a940bc4ba45d8cc6930fb04318a2b366c02748a33a80355a243c40bf1fff982f2f482bb218855704cb098045925d35f194abe5bcdbfb8342c6598c8658f049cbb2a147b30360bbf63f30567b2783b9b2f", 0xc3}, {&(0x7f0000000b40)="bef3480ad94b7e121e89cf762c1cb5690bd15f74042d2dac29c69b009cc41605d4d858dca72d1880938aef6c5e95d86190066cba51429c975dc6df2bac03f061e1", 0x41}, {&(0x7f0000000bc0)="66962dcc5001e397617a441aabb33228becfbb44bf5a721e5533979b25397e632c927c9367c8dfc12e489d4d9f8ada9e95f2ba06ae74bc54a28f1611ae40ca90f2b91ab9831b494b14e3e3ff8e6aeb305c43ef1e6997de399c7495c9ba015d7b1e04fb976eddef4bb3643d411614945e082ca5410258abee2d86bcf5710be22027095da8e37b7809ff7a9170271fb7d9393278f2a92e489acca465b76e814a7cea5b0f6ba1bd1d1478d43f83ec3bd9b0d031ee3dff41eaaf5b2a3183ab", 0xbd}, {&(0x7f0000000c80)="6cb16467fd79bcf99dd4fe67786fb29c11047d1ac97a76d738c93787b853a93663e4f890d51aac6e4e227b9b92fd71d86a8dcf054c802c400f6560cecb0d986fea2c2fd841c3e9dc356eae1b81ae3ebbd00cd8214f910d2f98a6dc1311956c42126098e2eef4d690c24a7b1fa1e6faf13c7d58da895b31a50b33fd2b21ed639c", 0x80}, {&(0x7f0000000d00)="355b57edb4a132f205c46c664ec159f5357ca219bd1ff98effcedb00ca31b195157b0aa5cd8c3a6fa7577c27d65adb68527319c59e362e5b019baaa8bacc9dc9b07c153474d237ebadf044ef9d39578dd3733cef1348ac9b37fa801a230a4cedc99475a291068d2205b417625e80aa4858bf251d3d5d359ade1b3a9d3f63b8672c069cad054466efebc883242db167b695f129b029fb115e31107cc554dfd5106e1ac3fc68ccba85590f0ec4f5e7fce851b5a87ac6b80c7e485a4a319e3e03553595501de76b23e09005d6cdfc63ef94e2517d5f18c0aeaf6c0ecab918074e1ff7ab1f073a4b4d0fe7e4710a7170400cc2", 0xf1}, {&(0x7f0000000e00)="7355d84f4ff8f9c2a11f55fdec6478c88f3ae4958e318ea7b4df6d714ffc3a8299b79193d3267629cde5ef25463760397b37641439b20003bf99ecf6546fed29fb0124d595e1d5e05469d76fd01b52dbf4e6d37cfa8b75483ead87a47724396ad704e8489aeebad4e157531011efbd8804f62cab2aa1e6b07667f96a566173af3f069b57dc06129281637c42b635ae71d0a19b77b1f2af99a56c08f96a85b28bdb8b005c61f6aba44c360e0f99116933b0a38c828651c755fe8757c8b99c635dc90d3172f3db598aaf50f667890ed2bdf39bf8906a8434fb02cf2c405476800078129ca68be8c95739aec757925c0d76fcecbe16", 0xf4}], 0x7, &(0x7f0000000f80)=[{0xe8, 0x10f, 0x3ce, "c83b8da86d5568d0e2dc55f84395d074e14d6ad12d2eef5b4a6d90b9d7f59ab3619ccafd92e10f46b312e517b80866ac14826532f9d9be1175d7458fd121147725cf1f43161f32cee449467deb457c44777bdbc71cd1c1b1f92c4df8e728e4ff9ee7ef121a189ebc00cf12ed0b09f6ee0d065509963b4c898db3087aa8fd852b7a05a2b1e228fd0ee56106413c797543af592ee8ed5dcbcfb6d0fb4ca7fefc9c125b9b69664335b97680ba275e1277ae4ca5e649dda3c4e283d6007d7c5c3fc37c066ceb5f4a74215d2f3ff564563036270a3db8"}], 0xe8}, 0x10004080) move_mount(r0, &(0x7f00000010c0)='./file0\x00', r0, &(0x7f0000001100)='./file0\x00', 0x5) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000001280)=0x1, 0x4) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000012c0)="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") bind(r0, &(0x7f00000013c0)=@rc={0x1f, @any, 0x3}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001440)=0x4) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000001480)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x34, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0xc80c0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x1, 0x100, 0x30, @remote, @empty, 0x700, 0x7800, 0x7fff, 0x2}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r7, r0, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000001780)) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000017c0)=@x86={0x5, 0x2, 0x8, 0x0, 0x7203aa87, 0x4, 0x6, 0xb, 0x75, 0xe, 0x6, 0x1, 0x0, 0xc, 0x3, 0x10, 0xa4, 0x1, 0x8, '\x00', 0x0, 0x5f016c79}) 3.075731678s ago: executing program 0 (id=941): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2091b080410aa61b4d2010203010902120001e900100009040000000206"], 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000007, 0x4010, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x6, 0x1, 0x0, 0x1, 0x5}) write$selinux_user(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a68616c645f6c6f675f74657230dbd16ffd7400"], 0x25) 2.871569699s ago: executing program 5 (id=942): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x30288000, 0x0, 0xf400, 0x0, 0x0, 0x0) 2.824462844s ago: executing program 5 (id=943): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x802) munmap(&(0x7f0000a83000/0x1000)=nil, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x141400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {}, {0xff, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000a4d000/0x1000)=nil, 0x20a4d000}}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000100)=0xfffffff8, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000001400)=""/4076, 0xfffffeea) 2.749136873s ago: executing program 1 (id=944): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) io_uring_enter(r0, 0x4866, 0x0, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0xe1, 0x47, 0x20, 0xc8f, 0xe086, 0x7490, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf6, 0x82, 0x2, 0x58, 0x42, 0x0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@enum={0xa, 0x6, 0x0, 0x6, 0x4, [{0xd, 0x8000}, {0x0, 0x9}, {0xe, 0x7}, {0xc, 0xaa6}, {0x4005}, {0xe, 0xffffff06}]}, @const={0xd, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x2e, 0x30, 0x61, 0x2e]}}, &(0x7f0000000000)=""/52, 0x67, 0x34, 0x0, 0xd74, 0x0, @void, @value}, 0x28) 2.295201053s ago: executing program 5 (id=945): sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044045}, 0x20004800) syz_emit_ethernet(0x14a, 0x0, 0x0) eventfd(0xffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x2, 0x2, r3}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1005}) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) openat$tcp_mem(0xffffff9c, 0x0, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902290001000000000904290000020201"], 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x64000000) 2.215179418s ago: executing program 4 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r3, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) r6 = socket(0x11, 0x3, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000001c0)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000400)={0x2, 0xbc}, 0x2) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$sock(r6, &(0x7f000000fd40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="be97f7b9a3d1b79efe444f7fb0f0e33b278bb12afa3c988e1eae71d24de3ad", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41}}], 0x54}}], 0x2, 0x0) 1.630828765s ago: executing program 0 (id=947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000000000000, 0x0, 0x0, 0x2) 1.515009476s ago: executing program 0 (id=948): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000004b680)=""/102391, 0x18ff7, 0x40, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0xfffffff5, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100037040000", @ANYBLOB], 0x3c}}, 0x0) 612.567078ms ago: executing program 1 (id=949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000010000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 606.310574ms ago: executing program 0 (id=950): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001180)='!', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xc}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003d80), 0x0, 0x100, 0x0) 451.08947ms ago: executing program 1 (id=951): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff0200000007070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32], 0x48) close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x2000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x700, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\a\x00\x00'], 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000001600), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x80, 0x1405, 0x300, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x10000002}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40008000}, 0x4004) 448.212969ms ago: executing program 0 (id=952): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x22e3c1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x19, 0x7, 0xe, 0x18, 0x2, 0x5961, 0x5, 0x152}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYRESDEC, @ANYRESOCT=r4], 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000540)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRESDEC=r5, @ANYBLOB="5b41ebf0555bffe241ded0d16dccf2a31c6538ae980a0d684d2bb161d26c3f04772cc38c93145c6165c9eeebbaca55b1dd6de7cbe49b0b3d317bfe0c5e6962b48b2af93808f807a6879a739f0626fbbf02c9667d568292599fe61a", @ANYRESOCT=r7, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000a40)={0x81, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r5, 0x81, 0x11, &(0x7f0000000300)="0036220000005162d4ddc75abe646793b6") ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x1, 0x3f, 0x9f, 0x40, 0x1546, 0x1342, 0x18a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x10, 0x5, [{{0x9, 0x4, 0x4, 0x3, 0x0, 0x3d, 0x1c, 0xd7, 0x7}}]}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r8], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004044) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000040)) 83.019524ms ago: executing program 2 (id=953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000080), 0x801, 0x8942) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x80, 0x3}}}}}}, 0x0) 0s ago: executing program 4 (id=954): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010004003f0000000000010000000c00060001000000000000000c00020000000000000000005400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="35000100", @ANYRES32=r2, @ANYBLOB="08010100", @ANYBLOB="080001"], 0x80}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) kernel console output (not intermixed with test programs): 99321][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.407663][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.436028][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.439717][ T7816] veth0_macvtap: entered promiscuous mode [ 183.468883][ T7816] veth1_macvtap: entered promiscuous mode [ 183.498416][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.509250][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.519582][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.540996][ T7946] usblp0:failed reading printer status (-32) [ 183.548614][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.560502][ T52] usb 3-1: USB disconnect, device number 13 [ 183.567481][ T7922] usblp0:failed reading printer status (-71) [ 183.608424][ T7816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.636482][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.656585][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.667977][ T5826] Bluetooth: hci5: command tx timeout [ 183.673876][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.684776][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.695628][ T7816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.816513][ T7921] usblp0: removed [ 183.952363][ T7816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.051663][ T7816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.070319][ T7816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.199572][ T7816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.295294][ T5893] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 184.535986][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.552792][ T5893] usb 2-1: not running at top speed; connect to a high speed hub [ 184.559927][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.574870][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.607342][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 184.643273][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.40 [ 184.657313][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.657396][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.733718][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.491'. [ 184.823328][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.826790][ T5893] usb 2-1: Product: Р [ 185.020714][ T5893] usb 2-1: Manufacturer:  [ 185.026812][ T5893] usb 2-1: SerialNumber: syz [ 185.061394][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 185.061410][ T30] audit: type=1400 audit(1742656827.219:660): avc: denied { mounton } for pid=7816 comm="syz-executor" path="/root/syzkaller.LGsJOc/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 185.150001][ T30] audit: type=1400 audit(1742656827.229:661): avc: denied { mount } for pid=7816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.153958][ T7957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.172227][ T30] audit: type=1400 audit(1742656827.229:662): avc: denied { mount } for pid=7816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 185.587695][ T30] audit: type=1400 audit(1742656827.289:663): avc: denied { mounton } for pid=7816 comm="syz-executor" path="/root/syzkaller.LGsJOc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 185.841238][ T30] audit: type=1400 audit(1742656827.289:664): avc: denied { mounton } for pid=7816 comm="syz-executor" path="/root/syzkaller.LGsJOc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 185.899231][ T30] audit: type=1400 audit(1742656827.289:665): avc: denied { unmount } for pid=7816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 185.925336][ T30] audit: type=1400 audit(1742656827.369:666): avc: denied { mounton } for pid=7816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 185.964643][ T30] audit: type=1400 audit(1742656827.369:667): avc: denied { mount } for pid=7816 comm="syz-executor" name="/" dev="gadgetfs" ino=7346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 185.988857][ T30] audit: type=1400 audit(1742656827.739:668): avc: denied { mounton } for pid=7816 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 186.082612][ T30] audit: type=1400 audit(1742656827.739:669): avc: denied { mount } for pid=7816 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 186.186581][ T7979] trusted_key: syz.5.455 sent an empty control message without MSG_MORE. [ 186.580092][ T52] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 186.827880][ T52] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 186.907768][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.017662][ T52] usb 3-1: config 0 descriptor?? [ 187.090334][ T5893] usbhid 2-1:1.0: can't add hid device: -71 [ 187.096413][ T5893] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 187.109968][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 187.118447][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 187.119129][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 187.191102][ T5866] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 187.212699][ T5893] usb 2-1: USB disconnect, device number 14 [ 187.249986][ T5865] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 187.370861][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 187.402548][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.442816][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.475744][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.821018][ T5866] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 187.955221][ T52] usb 3-1: Cannot read MAC address [ 188.033635][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.054436][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.056399][ T52] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 188.064578][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.098242][ T5866] usb 6-1: config 0 descriptor?? [ 188.157873][ T52] usb 3-1: USB disconnect, device number 14 [ 188.222319][ T7998] FAULT_INJECTION: forcing a failure. [ 188.222319][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.235892][ T7998] CPU: 0 UID: 0 PID: 7998 Comm: syz.1.503 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 188.235928][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.235939][ T7998] Call Trace: [ 188.235947][ T7998] [ 188.235957][ T7998] dump_stack_lvl+0x16c/0x1f0 [ 188.235993][ T7998] should_fail_ex+0x50a/0x650 [ 188.236025][ T7998] _copy_from_user+0x2e/0xd0 [ 188.236043][ T7998] usbdev_ioctl+0x3121/0x4010 [ 188.236066][ T7998] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.236089][ T7998] ? __pfx_usbdev_ioctl+0x10/0x10 [ 188.236111][ T7998] ? __pfx___schedule+0x10/0x10 [ 188.236129][ T7998] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.236164][ T7998] ? irqentry_exit+0x3b/0x90 [ 188.236183][ T7998] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.236209][ T7998] ? __x64_sys_ioctl+0x12c/0x200 [ 188.236234][ T7998] ? __pfx_usbdev_ioctl+0x10/0x10 [ 188.236250][ T7998] __x64_sys_ioctl+0x190/0x200 [ 188.236274][ T7998] do_syscall_64+0xcd/0x250 [ 188.236298][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.236322][ T7998] RIP: 0033:0x7f658d98d169 [ 188.236336][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.236350][ T7998] RSP: 002b:00007f658e826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.236367][ T7998] RAX: ffffffffffffffda RBX: 00007f658dba6080 RCX: 00007f658d98d169 [ 188.236378][ T7998] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000005 [ 188.236387][ T7998] RBP: 00007f658e826090 R08: 0000000000000000 R09: 0000000000000000 [ 188.236395][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.236404][ T7998] R13: 0000000000000000 R14: 00007f658dba6080 R15: 00007ffe901fcb88 [ 188.236425][ T7998] [ 188.660455][ T5865] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.669992][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.720894][ T5865] usb 5-1: config 0 descriptor?? [ 189.181303][ T5866] playstation 0003:054C:05C4.000A: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 189.373207][ T5865] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 189.384627][ T5865] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 189.411321][ T5865] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 189.481701][ T5866] playstation 0003:054C:05C4.000A: Failed to retrieve feature with reportID 163: -32 [ 189.607489][ T5866] playstation 0003:054C:05C4.000A: Failed to retrieve DualShock4 firmware info: -32 [ 189.678544][ T5866] playstation 0003:054C:05C4.000A: Failed to get firmware info from DualShock4 [ 189.688765][ T5866] playstation 0003:054C:05C4.000A: HW/FW version data in sysfs will be invalid. [ 189.703918][ T5866] input: HID 054c:05c4 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.000A/input/input26 [ 189.722554][ T5866] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.000A/input/input27 [ 189.842682][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.499'. [ 189.864811][ T5866] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.000A/input/input28 [ 189.865957][ T8022] netlink: 'syz.5.499': attribute type 7 has an invalid length. [ 189.897601][ T8022] netlink: 'syz.5.499': attribute type 8 has an invalid length. [ 189.907181][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.499'. [ 189.980029][ T5818] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.989329][ T5866] playstation 0003:054C:05C4.000A: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 190.021536][ T5866] usb 6-1: USB disconnect, device number 2 [ 190.142483][ T5818] usb 1-1: no configurations [ 190.161940][ T5818] usb 1-1: can't read configurations, error -22 [ 190.320689][ T5818] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 190.359410][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 190.359427][ T30] audit: type=1400 audit(1742656832.519:683): avc: denied { bind } for pid=8027 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.463715][ T30] audit: type=1400 audit(1742656832.619:684): avc: denied { setopt } for pid=8027 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.850758][ T5818] usb 1-1: no configurations [ 190.861230][ T5818] usb 1-1: can't read configurations, error -22 [ 190.872532][ T5818] usb usb1-port1: attempt power cycle [ 190.936898][ T30] audit: type=1400 audit(1742656833.099:685): avc: denied { getopt } for pid=8032 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.637004][ T8033] sctp: [Deprecated]: syz.2.512 (pid 8033) Use of int in max_burst socket option. [ 191.637004][ T8033] Use struct sctp_assoc_value instead [ 191.660024][ T5818] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 191.711618][ T5818] usb 1-1: no configurations [ 191.757123][ T5818] usb 1-1: can't read configurations, error -22 [ 191.901981][ T5818] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 191.972988][ T5818] usb 1-1: no configurations [ 191.978267][ T5818] usb 1-1: can't read configurations, error -22 [ 192.026419][ T5818] usb usb1-port1: unable to enumerate USB device [ 192.126191][ T5818] usb 5-1: USB disconnect, device number 14 [ 192.169683][ T30] audit: type=1400 audit(1742656834.329:686): avc: denied { create } for pid=8039 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.210125][ T30] audit: type=1400 audit(1742656834.329:687): avc: denied { write } for pid=8039 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.260510][ T30] audit: type=1400 audit(1742656834.399:688): avc: denied { create } for pid=8037 comm="syz.5.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.260786][ T8045] FAULT_INJECTION: forcing a failure. [ 192.260786][ T8045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.283493][ T30] audit: type=1400 audit(1742656834.399:689): avc: denied { connect } for pid=8037 comm="syz.5.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.347381][ T8045] CPU: 0 UID: 0 PID: 8045 Comm: syz.4.517 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 192.347420][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.347434][ T8045] Call Trace: [ 192.347440][ T8045] [ 192.347446][ T8045] dump_stack_lvl+0x16c/0x1f0 [ 192.347482][ T8045] should_fail_ex+0x50a/0x650 [ 192.347516][ T8045] strncpy_from_user+0x3b/0x2d0 [ 192.347541][ T8045] getname_flags.part.0+0x8f/0x550 [ 192.347566][ T8045] getname_flags+0x93/0xf0 [ 192.347589][ T8045] user_path_at+0x24/0x60 [ 192.347604][ T8045] do_utimes+0x103/0x2a0 [ 192.347624][ T8045] ? __pfx_do_utimes+0x10/0x10 [ 192.347642][ T8045] ? __fget_files+0x206/0x3a0 [ 192.347662][ T8045] __x64_sys_utimensat+0x1c7/0x290 [ 192.347678][ T8045] ? fput+0x67/0x440 [ 192.347697][ T8045] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 192.347712][ T8045] ? ksys_write+0x1ba/0x250 [ 192.347734][ T8045] do_syscall_64+0xcd/0x250 [ 192.347758][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.347781][ T8045] RIP: 0033:0x7f74c518d169 [ 192.347794][ T8045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.347809][ T8045] RSP: 002b:00007f74c5f1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 192.347824][ T8045] RAX: ffffffffffffffda RBX: 00007f74c53a5fa0 RCX: 00007f74c518d169 [ 192.347834][ T8045] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 192.347844][ T8045] RBP: 00007f74c5f1d090 R08: 0000000000000000 R09: 0000000000000000 [ 192.347853][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.347862][ T8045] R13: 0000000000000000 R14: 00007f74c53a5fa0 R15: 00007ffdb0961fb8 [ 192.347881][ T8045] [ 192.612316][ T30] audit: type=1400 audit(1742656834.779:690): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 192.778455][ T30] audit: type=1400 audit(1742656834.939:691): avc: denied { read write } for pid=8054 comm="syz.0.519" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 192.784916][ T5818] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 193.103883][ T5818] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.212774][ T30] audit: type=1400 audit(1742656834.939:692): avc: denied { open } for pid=8054 comm="syz.0.519" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 194.155322][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.524'. [ 194.490553][ T933] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 194.654291][ T8079] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[8079] [ 194.654679][ T8081] syz.1.526 (8081): /proc/8081/oom_adj is deprecated, please use /proc/8081/oom_score_adj instead. [ 194.841524][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 194.876385][ T933] usb 1-1: config 65 has an invalid interface number: 95 but max is 0 [ 194.945442][ T933] usb 1-1: config 65 has no interface number 0 [ 195.002894][ T933] usb 1-1: string descriptor 0 read error: -22 [ 195.025165][ T933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 195.053580][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.072896][ T933] usbtest 1-1:65.95: Linux gadget zero [ 195.078602][ T933] usbtest 1-1:65.95: low-speed {control in/out} tests (+alt) [ 195.184754][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.524900][ T933] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 195.543378][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 195.543402][ T30] audit: type=1400 audit(1742656837.629:703): avc: denied { create } for pid=8092 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 195.720117][ T933] usb 2-1: Using ep0 maxpacket: 32 [ 195.726889][ T933] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 195.738391][ T933] usb 2-1: config 1 interface 0 has no altsetting 0 [ 195.765813][ T933] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.40 [ 195.776589][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.787533][ T933] usb 2-1: Product: syz [ 195.800318][ T933] usb 2-1: Manufacturer: syz [ 195.804932][ T933] usb 2-1: SerialNumber: syz [ 195.848245][ T30] audit: type=1400 audit(1742656838.009:704): avc: denied { ioctl } for pid=8097 comm="syz.5.530" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 195.968117][ T8099] hsr0: entered promiscuous mode [ 196.228469][ T933] usbhid 2-1:1.0: can't add hid device: -71 [ 196.236837][ T933] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 196.259406][ T8097] hsr0: left promiscuous mode [ 196.276612][ T933] usb 2-1: USB disconnect, device number 15 [ 196.350765][ T5893] usb 1-1: USB disconnect, device number 17 [ 196.390008][ T30] audit: type=1400 audit(1742656838.549:705): avc: denied { write } for pid=8100 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 196.425706][ T30] audit: type=1400 audit(1742656838.549:706): avc: denied { nlmsg_read } for pid=8100 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 197.442591][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 197.696648][ T30] audit: type=1400 audit(1742657292.865:707): avc: denied { read } for pid=8108 comm="syz.1.535" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 197.798823][ T30] audit: type=1400 audit(1742657292.895:708): avc: denied { open } for pid=8108 comm="syz.1.535" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 198.279225][ T30] audit: type=1400 audit(1742657292.915:709): avc: denied { ioctl } for pid=8108 comm="syz.1.535" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 198.833144][ T30] audit: type=1400 audit(1742657293.975:710): avc: denied { read } for pid=8124 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.891236][ T30] audit: type=1400 audit(1742657293.985:711): avc: denied { ioctl } for pid=8124 comm="syz.1.542" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 199.329599][ T30] audit: type=1400 audit(1742657294.495:712): avc: denied { wake_alarm } for pid=8136 comm="syz.5.544" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.696776][ T933] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 199.861274][ T933] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.875609][ T933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.893888][ T933] usb 6-1: config 0 descriptor?? [ 199.907048][ T933] cp210x 6-1:0.0: cp210x converter detected [ 200.318919][ T8137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.327840][ T8137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.939653][ T933] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 200.954882][ T30] audit: type=1400 audit(1742657296.125:713): avc: denied { read } for pid=8136 comm="syz.5.544" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 200.995545][ T933] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 201.067880][ T933] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 201.077433][ T933] usb 6-1: cp210x converter now attached to ttyUSB0 [ 201.086715][ T30] audit: type=1400 audit(1742657296.125:714): avc: denied { open } for pid=8136 comm="syz.5.544" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 201.145729][ T30] audit: type=1400 audit(1742657296.125:715): avc: denied { ioctl } for pid=8136 comm="syz.5.544" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 201.214557][ T5865] usb 6-1: USB disconnect, device number 3 [ 201.250740][ T30] audit: type=1400 audit(1742657296.415:716): avc: denied { read write } for pid=8155 comm="syz.0.550" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.259328][ T5865] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.410016][ T30] audit: type=1400 audit(1742657296.415:717): avc: denied { open } for pid=8155 comm="syz.0.550" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.433636][ T30] audit: type=1400 audit(1742657296.445:718): avc: denied { ioctl } for pid=8155 comm="syz.0.550" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.743063][ T5865] cp210x 6-1:0.0: device disconnected [ 201.955560][ T8166] netlink: 260 bytes leftover after parsing attributes in process `syz.4.554'. [ 202.061395][ T8171] FAULT_INJECTION: forcing a failure. [ 202.061395][ T8171] name failslab, interval 1, probability 0, space 0, times 0 [ 202.074444][ T8171] CPU: 0 UID: 0 PID: 8171 Comm: syz.5.555 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 202.074463][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.074472][ T8171] Call Trace: [ 202.074490][ T8171] [ 202.074496][ T8171] dump_stack_lvl+0x16c/0x1f0 [ 202.074530][ T8171] should_fail_ex+0x50a/0x650 [ 202.074559][ T8171] ? fs_reclaim_acquire+0xae/0x150 [ 202.074588][ T8171] should_failslab+0xc2/0x120 [ 202.074609][ T8171] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 202.074631][ T8171] ? kstrdup_const+0x63/0x80 [ 202.074657][ T8171] kstrdup+0x53/0x100 [ 202.074679][ T8171] kstrdup_const+0x63/0x80 [ 202.074700][ T8171] kvasprintf_const+0x10f/0x1a0 [ 202.074722][ T8171] kobject_set_name_vargs+0x5a/0x140 [ 202.074750][ T8171] dev_set_name+0xc8/0x100 [ 202.074781][ T8171] ? __pfx_dev_set_name+0x10/0x10 [ 202.074817][ T8171] tty_register_device_attr+0x302/0x7c0 [ 202.074846][ T8171] ? __pfx_tty_register_device_attr+0x10/0x10 [ 202.074869][ T8171] ? tty_port_register_device+0x62/0xf0 [ 202.074895][ T8171] ? tty_port_register_device+0xa7/0xf0 [ 202.074922][ T8171] rfcomm_dev_ioctl+0x16b0/0x1ca0 [ 202.074955][ T8171] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 202.074981][ T8171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.075016][ T8171] rfcomm_sock_ioctl+0xaa/0xd0 [ 202.075044][ T8171] sock_do_ioctl+0x116/0x280 [ 202.075066][ T8171] ? __pfx_sock_do_ioctl+0x10/0x10 [ 202.075082][ T8171] ? disable_freq_invariance_workfn+0x150/0x190 [ 202.075116][ T8171] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 202.075145][ T8171] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 202.075171][ T8171] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 202.075201][ T8171] sock_ioctl+0x228/0x6c0 [ 202.075220][ T8171] ? __pfx_sock_ioctl+0x10/0x10 [ 202.075244][ T8171] ? selinux_file_ioctl+0x180/0x270 [ 202.075267][ T8171] ? selinux_file_ioctl+0xb4/0x270 [ 202.075291][ T8171] ? __pfx_sock_ioctl+0x10/0x10 [ 202.075309][ T8171] __x64_sys_ioctl+0x190/0x200 [ 202.075343][ T8171] do_syscall_64+0xcd/0x250 [ 202.075368][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.075391][ T8171] RIP: 0033:0x7fc4e238d169 [ 202.075404][ T8171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.075420][ T8171] RSP: 002b:00007fc4e31fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.075438][ T8171] RAX: ffffffffffffffda RBX: 00007fc4e25a6080 RCX: 00007fc4e238d169 [ 202.075448][ T8171] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 202.075458][ T8171] RBP: 00007fc4e31fc090 R08: 0000000000000000 R09: 0000000000000000 [ 202.075468][ T8171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.075477][ T8171] R13: 0000000000000000 R14: 00007fc4e25a6080 R15: 00007ffe7617bec8 [ 202.075503][ T8171] [ 202.885864][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'. [ 202.980749][ T30] audit: type=1400 audit(1742657298.115:719): avc: denied { unlink } for pid=8172 comm="syz.0.556" name="#11" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.031093][ T30] audit: type=1400 audit(1742657298.125:720): avc: denied { mount } for pid=8172 comm="syz.0.556" name="/" dev="overlay" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 203.220152][ T30] audit: type=1400 audit(1742657298.185:721): avc: denied { read } for pid=8176 comm="syz.5.558" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.271240][ T8186] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.382688][ T30] audit: type=1400 audit(1742657298.525:722): avc: denied { bind } for pid=8183 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.983746][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.561'. [ 205.170397][ T5818] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.630045][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 205.638473][ T5818] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.665498][ T5818] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 205.695479][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.727469][ T5818] usb 3-1: config 0 descriptor?? [ 205.982625][ T8220] netlink: 260 bytes leftover after parsing attributes in process `syz.1.567'. [ 207.109798][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.569'. [ 207.130031][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.150033][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.164258][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.185548][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.341642][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 207.341660][ T30] audit: type=1400 audit(1742657302.495:725): avc: denied { write } for pid=8236 comm="syz.0.571" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.394025][ T30] audit: type=1400 audit(1742657302.505:726): avc: denied { ioctl } for pid=8236 comm="syz.0.571" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.256907][ T5864] usb 3-1: USB disconnect, device number 15 [ 208.426587][ T30] audit: type=1400 audit(1742657303.575:727): avc: denied { create } for pid=8257 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 209.022437][ T30] audit: type=1400 audit(1742657303.595:728): avc: denied { connect } for pid=8257 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 209.043538][ T30] audit: type=1400 audit(1742657303.685:729): avc: denied { bind } for pid=8250 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 209.062953][ T30] audit: type=1400 audit(1742657303.685:730): avc: denied { name_bind } for pid=8250 comm="syz.5.575" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 209.154782][ T30] audit: type=1400 audit(1742657303.685:731): avc: denied { node_bind } for pid=8250 comm="syz.5.575" saddr=::ffff:127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 209.208186][ T30] audit: type=1400 audit(1742657303.695:732): avc: denied { name_connect } for pid=8250 comm="syz.5.575" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 209.253789][ T8269] pim6reg1: entered promiscuous mode [ 209.423232][ T8269] pim6reg1: entered allmulticast mode [ 209.486574][ T8269] netlink: 88 bytes leftover after parsing attributes in process `syz.5.580'. [ 209.581556][ T30] audit: type=1400 audit(1742657304.685:733): avc: denied { bind } for pid=8272 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.138162][ T8281] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3711564628 (118770068096 ns) > initial count (46112527328 ns). Using initial count to start timer. [ 210.284515][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 210.333465][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.341862][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.473793][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 210.830034][ T5864] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 211.061460][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.080020][ T5864] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 211.106176][ T5864] usb 6-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 211.791058][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.808929][ T5864] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 211.830054][ T933] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 211.933211][ T5864] usb 6-1: no configuration chosen from 1 choice [ 212.692413][ T933] usb 1-1: Using ep0 maxpacket: 16 [ 212.809591][ T933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.821755][ T933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.922663][ T933] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.942020][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.985391][ T933] usb 1-1: Product: syz [ 212.989752][ T933] usb 1-1: Manufacturer: syz [ 213.020025][ T933] usb 1-1: SerialNumber: syz [ 213.280747][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.289263][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.321477][ T30] audit: type=1400 audit(1742657308.465:734): avc: denied { write } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.374494][ T8327] input: syz0 as /devices/virtual/input/input29 [ 213.553441][ T5866] usb 6-1: USB disconnect, device number 4 [ 213.585454][ T30] audit: type=1400 audit(1742657308.465:735): avc: denied { remove_name } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.754681][ T8330] FAULT_INJECTION: forcing a failure. [ 213.754681][ T8330] name fail_futex, interval 1, probability 0, space 0, times 1 [ 213.930050][ T30] audit: type=1400 audit(1742657308.465:736): avc: denied { rename } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.977390][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: syz.1.594 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 213.977415][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.977425][ T8330] Call Trace: [ 213.977429][ T8330] [ 213.977434][ T8330] dump_stack_lvl+0x16c/0x1f0 [ 213.977463][ T8330] should_fail_ex+0x50a/0x650 [ 213.977484][ T8330] ? __lock_acquire+0x15a9/0x3c40 [ 213.977503][ T8330] get_futex_key+0x4a3/0x1000 [ 213.977520][ T8330] ? __pfx_get_futex_key+0x10/0x10 [ 213.977536][ T8330] futex_wake+0xe8/0x4e0 [ 213.977553][ T8330] ? __pfx_futex_wake+0x10/0x10 [ 213.977570][ T8330] ? find_held_lock+0x2d/0x110 [ 213.977586][ T8330] do_futex+0x1e5/0x350 [ 213.977599][ T8330] ? __pfx_do_futex+0x10/0x10 [ 213.977612][ T8330] ? __might_fault+0xe3/0x190 [ 213.977627][ T8330] ? __might_fault+0xe3/0x190 [ 213.977641][ T8330] mm_release+0x24e/0x300 [ 213.977661][ T8330] do_exit+0x886/0x2db0 [ 213.977674][ T8330] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.977691][ T8330] ? __pfx_do_exit+0x10/0x10 [ 213.977702][ T8330] ? preempt_schedule_common+0x44/0xc0 [ 213.977720][ T8330] do_group_exit+0xd3/0x2a0 [ 213.977732][ T8330] get_signal+0x24ed/0x26c0 [ 213.977755][ T8330] ? __pfx_get_signal+0x10/0x10 [ 213.977771][ T8330] ? irqentry_exit+0x3b/0x90 [ 213.977784][ T8330] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.977800][ T8330] arch_do_signal_or_restart+0x90/0x7e0 [ 213.977816][ T8330] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 213.977832][ T8330] ? __pfx_do_readv+0x10/0x10 [ 213.977852][ T8330] syscall_exit_to_user_mode+0x150/0x2a0 [ 213.977880][ T8330] do_syscall_64+0xda/0x250 [ 213.977897][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.977915][ T8330] RIP: 0033:0x7f658d98d169 [ 213.977925][ T8330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.977936][ T8330] RSP: 002b:00007f658e805038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 213.977948][ T8330] RAX: fffffffffffffffc RBX: 00007f658dba6160 RCX: 00007f658d98d169 [ 213.977955][ T8330] RDX: 0000000000000001 RSI: 0000200000001900 RDI: 000000000000000b [ 213.977961][ T8330] RBP: 00007f658e805090 R08: 0000000000000000 R09: 0000000000000000 [ 213.977967][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.977973][ T8330] R13: 0000000000000001 R14: 00007f658dba6160 R15: 00007ffe901fcb88 [ 213.977985][ T8330] [ 214.012513][ T30] audit: type=1400 audit(1742657308.465:737): avc: denied { add_name } for pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.241901][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.261917][ T30] audit: type=1400 audit(1742657308.465:738): avc: denied { unlink } for pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.286963][ T30] audit: type=1400 audit(1742657308.465:739): avc: denied { create } for pid=5174 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.314390][ T30] audit: type=1400 audit(1742657308.695:740): avc: denied { name_connect } for pid=8323 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 214.339320][ T30] audit: type=1400 audit(1742657309.155:741): avc: denied { create } for pid=8332 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.366927][ T30] audit: type=1400 audit(1742657309.155:742): avc: denied { write } for pid=8332 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.394594][ T30] audit: type=1400 audit(1742657309.315:743): avc: denied { read } for pid=8332 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.417829][ T933] usb 1-1: 0:2 : does not exist [ 214.476478][ T933] usb 1-1: USB disconnect, device number 18 [ 214.563447][ T8340] netlink: 188 bytes leftover after parsing attributes in process `syz.1.598'. [ 214.573302][ T8340] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 214.672795][ T8030] udevd[8030]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.730110][ T8346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8346 comm=syz.2.600 [ 214.735004][ T8343] netlink: 112 bytes leftover after parsing attributes in process `syz.1.599'. [ 214.752698][ T52] IPVS: starting estimator thread 0... [ 214.840004][ T8347] IPVS: using max 34 ests per chain, 81600 per kthread [ 216.134627][ T8359] ALSA: mixer_oss: invalid OSS volume '' [ 217.665047][ T8369] Set syz1 is full, maxelem 65536 reached [ 217.776036][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8373 comm=syz.5.607 [ 220.048314][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 220.048335][ T30] audit: type=1400 audit(1742657315.215:765): avc: denied { connect } for pid=8370 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.074313][ T933] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 220.230067][ T933] usb 1-1: Using ep0 maxpacket: 8 [ 220.238603][ T933] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 220.258630][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.296589][ T30] audit: type=1400 audit(1742657315.465:766): avc: denied { connect } for pid=8394 comm="syz.5.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 220.319561][ T933] usb 1-1: Product: syz [ 220.391653][ T933] usb 1-1: Manufacturer: syz [ 220.396656][ T933] usb 1-1: SerialNumber: syz [ 220.406897][ T933] usb 1-1: config 0 descriptor?? [ 220.500156][ T5863] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 220.638458][ T933] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.670205][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 220.682495][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.716574][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.785231][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.880290][ T5818] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 220.966321][ T5863] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.022006][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.057909][ T5863] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.067437][ T5863] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.076147][ T5863] usb 5-1: Manufacturer: syz [ 221.108401][ T5863] usb 5-1: config 0 descriptor?? [ 221.143209][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 221.150316][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.167557][ T8404] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3711564628 (118770068096 ns) > initial count (46112527328 ns). Using initial count to start timer. [ 221.168246][ T5818] usb 3-1: config 0 has no interfaces? [ 221.196427][ T5818] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 221.210085][ T5818] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 221.220156][ T5818] usb 3-1: Product: syz [ 221.224340][ T5818] usb 3-1: Manufacturer: syz [ 221.230805][ T30] audit: type=1400 audit(1742657316.405:767): avc: denied { bind } for pid=8405 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.231915][ T5818] usb 3-1: SerialNumber: syz [ 221.259622][ T5818] usb 3-1: config 0 descriptor?? [ 221.380156][ T5863] rc_core: IR keymap rc-hauppauge not found [ 221.386292][ T5863] Registered IR keymap rc-empty [ 221.392927][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.420735][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.441590][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 221.455650][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 221.482718][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.491618][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.499659][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.520158][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.550057][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.570053][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.591756][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.619970][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.620035][ T5893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 221.640122][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.660008][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.680652][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.700017][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.730048][ T5863] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.751847][ T5863] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 221.759990][ T5863] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.780396][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 221.798556][ T5893] usb 6-1: config 0 has no interfaces? [ 221.807312][ T5893] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 221.820574][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.828683][ T5893] usb 6-1: Product: syz [ 221.833782][ T5893] usb 6-1: Manufacturer: syz [ 221.838661][ T5893] usb 6-1: SerialNumber: syz [ 221.845367][ T5893] usb 6-1: config 0 descriptor?? [ 221.851179][ T30] audit: type=1400 audit(1742657317.025:768): avc: denied { append } for pid=8392 comm="syz.4.613" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 221.861512][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.884013][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.905456][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.919247][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.098271][ T30] audit: type=1400 audit(1742657317.265:769): avc: denied { setopt } for pid=8420 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 222.137863][ T933] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 222.166334][ T5893] usb 5-1: USB disconnect, device number 15 [ 222.213844][ T30] audit: type=1400 audit(1742657317.325:770): avc: denied { append } for pid=8409 comm="syz.5.618" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 222.251939][ T933] usb 1-1: USB disconnect, device number 19 [ 222.586695][ T8425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8425 comm=syz.1.621 [ 223.493100][ T8436] FAULT_INJECTION: forcing a failure. [ 223.493100][ T8436] name failslab, interval 1, probability 0, space 0, times 0 [ 223.519602][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz.4.624 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 223.519629][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.519640][ T8436] Call Trace: [ 223.519647][ T8436] [ 223.519654][ T8436] dump_stack_lvl+0x16c/0x1f0 [ 223.519690][ T8436] should_fail_ex+0x50a/0x650 [ 223.519724][ T8436] should_failslab+0xc2/0x120 [ 223.519750][ T8436] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 223.519771][ T8436] ? skb_clone+0x190/0x3f0 [ 223.519804][ T8436] skb_clone+0x190/0x3f0 [ 223.519831][ T8436] netlink_deliver_tap+0xabd/0xd30 [ 223.519864][ T8436] netlink_unicast+0x5e1/0x7f0 [ 223.519891][ T8436] ? __pfx_netlink_unicast+0x10/0x10 [ 223.519930][ T8436] netlink_sendmsg+0x8b8/0xd70 [ 223.519959][ T8436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.519993][ T8436] ____sys_sendmsg+0xaaf/0xc90 [ 223.520014][ T8436] ? copy_msghdr_from_user+0x10b/0x160 [ 223.520040][ T8436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.520058][ T8436] ? __lock_acquire+0xcc5/0x3c40 [ 223.520093][ T8436] ? hlock_class+0x4e/0x130 [ 223.520111][ T8436] ? __lock_acquire+0x15a9/0x3c40 [ 223.520139][ T8436] ___sys_sendmsg+0x135/0x1e0 [ 223.520165][ T8436] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.520189][ T8436] ? __pfx___lock_acquire+0x10/0x10 [ 223.520237][ T8436] ? __pfx___might_resched+0x10/0x10 [ 223.520265][ T8436] ? __might_fault+0xe3/0x190 [ 223.520291][ T8436] __sys_sendmmsg+0x201/0x420 [ 223.520320][ T8436] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.520353][ T8436] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.520390][ T8436] ? fput+0x67/0x440 [ 223.520413][ T8436] ? ksys_write+0x1ba/0x250 [ 223.520428][ T8436] ? __pfx_ksys_write+0x10/0x10 [ 223.520464][ T8436] __x64_sys_sendmmsg+0x9c/0x100 [ 223.520490][ T8436] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.520513][ T8436] do_syscall_64+0xcd/0x250 [ 223.520541][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.520566][ T8436] RIP: 0033:0x7f74c518d169 [ 223.520582][ T8436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.520599][ T8436] RSP: 002b:00007f74c5f1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.520617][ T8436] RAX: ffffffffffffffda RBX: 00007f74c53a5fa0 RCX: 00007f74c518d169 [ 223.520629][ T8436] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 223.520639][ T8436] RBP: 00007f74c5f1d090 R08: 0000000000000000 R09: 0000000000000000 [ 223.520649][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.520659][ T8436] R13: 0000000000000000 R14: 00007f74c53a5fa0 R15: 00007ffdb0961fb8 [ 223.520683][ T8436] [ 224.098348][ T8441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.626'. [ 224.116486][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 224.125498][ T8441] bridge_slave_1: left allmulticast mode [ 224.131278][ T8441] bridge_slave_1: left promiscuous mode [ 224.137306][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.196522][ T30] audit: type=1400 audit(1742657319.365:771): avc: denied { bind } for pid=8439 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.216610][ T30] audit: type=1400 audit(1742657319.365:772): avc: denied { listen } for pid=8439 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.240076][ T30] audit: type=1400 audit(1742657319.365:773): avc: denied { accept } for pid=8439 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.311745][ T8441] bridge_slave_0: left allmulticast mode [ 224.318842][ T5864] usb 3-1: USB disconnect, device number 16 [ 224.325451][ T8441] bridge_slave_0: left promiscuous mode [ 224.384272][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.481956][ T5818] usb 6-1: USB disconnect, device number 5 [ 226.061012][ T933] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 226.114448][ T8475] netlink: 'syz.5.637': attribute type 4 has an invalid length. [ 226.344783][ T933] usb 5-1: Using ep0 maxpacket: 32 [ 226.497015][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 226.504301][ T933] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.577827][ T933] usb 5-1: config 0 has no interface number 0 [ 226.604857][ T933] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.629965][ T933] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.644893][ T933] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 226.654558][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.668601][ T933] usb 5-1: config 0 descriptor?? [ 227.927759][ T933] uclogic 0003:28BD:0094.000D: pen parameters not found [ 227.976898][ T933] uclogic 0003:28BD:0094.000D: interface is invalid, ignoring [ 228.074988][ T933] usb 5-1: USB disconnect, device number 16 [ 228.252386][ T5818] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.390119][ T5910] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 228.423046][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.434073][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.448910][ T5818] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 228.458309][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.469151][ T5818] usb 6-1: config 0 descriptor?? [ 228.558886][ T5910] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.574200][ T5910] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 228.586403][ T5910] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.599780][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.606588][ T5910] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 228.616090][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.638411][ T5910] usb 1-1: config 0 descriptor?? [ 228.657529][ T8493] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 228.677738][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.734660][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.875266][ T30] audit: type=1400 audit(1742657324.045:774): avc: denied { watch watch_reads } for pid=8492 comm="syz.0.641" path="/157" dev="tmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.887861][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.646'. [ 229.082079][ T5863] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 229.290869][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 229.362817][ T5863] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.399978][ T5863] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.407178][ T5863] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 229.416584][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.692843][ T5863] usb 5-1: config 0 descriptor?? [ 229.867618][ T5818] usbhid 6-1:0.0: can't add hid device: -71 [ 229.895287][ T5818] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 229.931003][ T5818] usb 6-1: USB disconnect, device number 6 [ 230.081877][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.650'. [ 230.446454][ T5863] usbhid 5-1:0.0: can't add hid device: -71 [ 230.480273][ T5863] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 230.521991][ T5863] usb 5-1: USB disconnect, device number 17 [ 230.863727][ T30] audit: type=1400 audit(1742657325.735:775): avc: denied { mount } for pid=8492 comm="syz.0.641" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 231.247882][ T30] audit: type=1400 audit(1742657326.415:776): avc: denied { write } for pid=8538 comm="syz.1.653" name="vlan0" dev="proc" ino=4026533832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 231.388891][ T8542] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 231.724614][ T30] audit: type=1400 audit(1742657326.585:777): avc: denied { setopt } for pid=8538 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.746317][ T5818] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.766752][ T8546] libceph: resolve '0' (ret=-3): failed [ 231.786422][ T30] audit: type=1400 audit(1742657326.955:778): avc: denied { ioctl } for pid=8545 comm="syz.5.656" path="socket:[19372]" dev="sockfs" ino=19372 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.903276][ T5818] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 231.954052][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.159931][ T5818] usb 5-1: Product: syz [ 232.164456][ T5818] usb 5-1: Manufacturer: syz [ 232.930413][ T5818] usb 5-1: SerialNumber: syz [ 232.950598][ T5818] usb 5-1: config 0 descriptor?? [ 232.968396][ T5818] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 233.002418][ T5910] usbhid 1-1:0.0: can't add hid device: -71 [ 233.018900][ T5910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 233.050065][ T30] audit: type=1400 audit(1742657328.215:779): avc: denied { create } for pid=8551 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 233.078273][ T5910] usb 1-1: USB disconnect, device number 20 [ 233.091275][ T30] audit: type=1400 audit(1742657328.225:780): avc: denied { execute_no_trans } for pid=8552 comm="syz.5.658" path="/30/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 233.100557][ T8556] Illegal XDP return value 4294967274 on prog (id 93) dev N/A, expect packet loss! [ 233.116938][ T30] audit: type=1400 audit(1742657328.255:781): avc: denied { map } for pid=8552 comm="syz.5.658" path="socket:[19535]" dev="sockfs" ino=19535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 233.153792][ T30] audit: type=1400 audit(1742657328.255:782): avc: denied { accept } for pid=8552 comm="syz.5.658" path="socket:[19535]" dev="sockfs" ino=19535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 233.194827][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.208370][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.268300][ T30] audit: type=1400 audit(1742657328.405:783): avc: denied { setopt } for pid=8551 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 233.268985][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.440372][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.499416][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.510557][ T5818] gspca_sunplus: reg_r err -110 [ 233.530194][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.513531][ T5910] usb 5-1: USB disconnect, device number 18 [ 234.711998][ T30] audit: type=1400 audit(1742657329.875:784): avc: denied { append } for pid=8572 comm="syz.1.666" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.850993][ T8578] 9pnet_fd: Insufficient options for proto=fd [ 235.450452][ T30] audit: type=1400 audit(1742657330.615:785): avc: denied { read } for pid=8586 comm="syz.4.672" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 235.491496][ T30] audit: type=1400 audit(1742657330.615:786): avc: denied { open } for pid=8586 comm="syz.4.672" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 235.529319][ T30] audit: type=1400 audit(1742657330.615:787): avc: denied { ioctl } for pid=8586 comm="syz.4.672" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 235.580237][ T5864] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 235.923300][ T5864] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 235.939968][ T5864] usb 2-1: config 1 interface 0 has no altsetting 0 [ 235.974380][ T5864] usb 2-1: string descriptor 0 read error: -22 [ 235.980887][ T5864] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.084502][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.002426][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.674'. [ 237.138671][ T8582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.204658][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.677'. [ 237.383328][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 237.393078][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.402141][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.420771][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.524384][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.595851][ T8629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8629 comm=syz.0.682 [ 239.588160][ T26] usb 2-1: USB disconnect, device number 16 [ 239.650279][ T8638] GUP no longer grows the stack in syz.5.683 (8638): 200000009000-20000000a000 (200000005000) [ 239.676100][ T8638] CPU: 1 UID: 0 PID: 8638 Comm: syz.5.683 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 239.676127][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.676139][ T8638] Call Trace: [ 239.676146][ T8638] [ 239.676153][ T8638] dump_stack_lvl+0x16c/0x1f0 [ 239.676199][ T8638] gup_vma_lookup+0x1d2/0x220 [ 239.676231][ T8638] __get_user_pages+0x236/0x36f0 [ 239.676248][ T8638] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 239.676281][ T8638] ? __gup_longterm_locked+0x124/0x1870 [ 239.676300][ T8638] ? __gup_longterm_locked+0x124/0x1870 [ 239.676321][ T8638] ? __pfx___get_user_pages+0x10/0x10 [ 239.676336][ T8638] ? down_read_killable+0xcc/0x380 [ 239.676379][ T8638] ? __pfx_down_read_killable+0x10/0x10 [ 239.676412][ T8638] ? mark_lock+0xb5/0xc60 [ 239.676436][ T8638] ? find_held_lock+0x2d/0x110 [ 239.676455][ T8638] __gup_longterm_locked+0x212/0x1870 [ 239.676473][ T8638] ? __pfx_lock_release+0x10/0x10 [ 239.676496][ T8638] ? trace_lock_acquire+0x14e/0x1f0 [ 239.676520][ T8638] ? __pfx___gup_longterm_locked+0x10/0x10 [ 239.676536][ T8638] ? gup_fast_fallback+0x84c/0x2690 [ 239.676552][ T8638] ? __pfx_lock_release+0x10/0x10 [ 239.676580][ T8638] ? mark_held_locks+0x9f/0xe0 [ 239.676606][ T8638] gup_fast_fallback+0x1802/0x2690 [ 239.676636][ T8638] ? __pfx_gup_fast_fallback+0x10/0x10 [ 239.676655][ T8638] ? __pfx___lock_acquire+0x10/0x10 [ 239.676682][ T8638] ? hlock_class+0x4e/0x130 [ 239.676704][ T8638] get_user_pages_fast+0xa8/0x100 [ 239.676722][ T8638] ? __pfx_get_user_pages_fast+0x10/0x10 [ 239.676742][ T8638] ? iov_iter_advance+0x1e3/0x6c0 [ 239.676767][ T8638] __iov_iter_get_pages_alloc+0x837/0x1f70 [ 239.676799][ T8638] ? trace_contention_end+0xee/0x140 [ 239.676831][ T8638] ? __mutex_lock+0x1cc/0xb10 [ 239.676858][ T8638] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 239.676879][ T8638] ? pipe_lock+0x64/0x80 [ 239.676900][ T8638] ? __pfx___mutex_lock+0x10/0x10 [ 239.676922][ T8638] ? iovec_from_user.part.0+0x7e/0x130 [ 239.676946][ T8638] iov_iter_get_pages2+0xa4/0x100 [ 239.676965][ T8638] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 239.676985][ T8638] ? wait_for_space+0x224/0x2d0 [ 239.677014][ T8638] ? add_to_pipe+0x1c0/0x3c0 [ 239.677040][ T8638] __do_sys_vmsplice+0xa13/0xef0 [ 239.677074][ T8638] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 239.677108][ T8638] ? __pfx_futex_wait+0x10/0x10 [ 239.677144][ T8638] ? lock_acquire.part.0+0x11b/0x380 [ 239.677170][ T8638] ? find_held_lock+0x2d/0x110 [ 239.677226][ T8638] ? rcu_is_watching+0x12/0xc0 [ 239.677259][ T8638] ? do_syscall_64+0xcd/0x250 [ 239.677284][ T8638] do_syscall_64+0xcd/0x250 [ 239.677310][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.677336][ T8638] RIP: 0033:0x7fc4e238d169 [ 239.677352][ T8638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.677368][ T8638] RSP: 002b:00007fc4e321d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 239.677391][ T8638] RAX: ffffffffffffffda RBX: 00007fc4e25a5fa0 RCX: 00007fc4e238d169 [ 239.677403][ T8638] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000007 [ 239.677414][ T8638] RBP: 00007fc4e240e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.677424][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.677434][ T8638] R13: 0000000000000000 R14: 00007fc4e25a5fa0 R15: 00007ffe7617bec8 [ 239.677458][ T8638] [ 240.161788][ T30] audit: type=1400 audit(1742657335.335:788): avc: denied { load_policy } for pid=8637 comm="syz.5.683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 240.183099][ T8641] SELinux: policydb version 652547651 does not match my version range 15-34 [ 240.192905][ T8641] SELinux: failed to load policy [ 240.334439][ T8647] vlan2: entered allmulticast mode [ 240.339603][ T8647] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 240.458528][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 240.500485][ T8647] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 240.523009][ T30] audit: type=1400 audit(1742657335.695:789): avc: denied { recv } for pid=8619 comm="syz.5.676" saddr=10.128.0.169 src=30006 daddr=10.128.1.181 dest=42222 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 240.603657][ T30] audit: type=1400 audit(1742657335.745:790): avc: denied { bind } for pid=8635 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.726795][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 241.245995][ T8665] netlink: 112 bytes leftover after parsing attributes in process `syz.4.690'. [ 241.290256][ T8668] tmpfs: Unknown parameter 'usrquota' [ 241.307855][ T30] audit: type=1400 audit(1742657336.475:791): avc: denied { listen } for pid=8669 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.352034][ T8668] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 241.368718][ T30] audit: type=1400 audit(1742657336.515:792): avc: denied { connect } for pid=8669 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.411492][ T30] audit: type=1400 audit(1742657336.535:793): avc: denied { write } for pid=8669 comm="syz.5.691" path="socket:[20817]" dev="sockfs" ino=20817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.438469][ T8671] tmpfs: Unknown parameter 'usrquotaq.io_merged_recursive' [ 241.500957][ T5864] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 241.520572][ T30] audit: type=1400 audit(1742657336.605:794): avc: denied { shutdown } for pid=8669 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.585351][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 241.624782][ T30] audit: type=1400 audit(1742657336.605:795): avc: denied { setattr } for pid=8669 comm="syz.5.691" path="socket:[20817]" dev="sockfs" ino=20817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.690410][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 241.819457][ T5864] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 241.840831][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.947983][ T5864] usb 5-1: Product: syz [ 241.995360][ T8682] netlink: 260 bytes leftover after parsing attributes in process `syz.1.696'. [ 242.001341][ T5864] usb 5-1: Manufacturer: syz [ 242.021538][ T5864] usb 5-1: SerialNumber: syz [ 242.053210][ T5864] usb 5-1: config 0 descriptor?? [ 242.152330][ T5864] gspca_main: se401-2.14.0 probing 047d:5003 [ 242.227027][ T8685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.280946][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.360258][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.596260][ T5864] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 242.716432][ T5864] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 242.744078][ T5864] usb 5-1: USB disconnect, device number 19 [ 242.853097][ T5893] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 242.990161][ T5893] usb 2-1: device descriptor read/64, error -71 [ 243.020199][ T26] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 243.073043][ T30] audit: type=1400 audit(1742657338.245:796): avc: denied { shutdown } for pid=8699 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.120891][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.701'. [ 243.188954][ T30] audit: type=1400 audit(1742657338.355:797): avc: denied { egress } for pid=17 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 243.230939][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 243.241632][ T5893] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 243.243625][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.270939][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 243.274324][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.309790][ T26] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 243.433550][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.439966][ T5893] usb 2-1: device descriptor read/64, error -71 [ 243.445934][ T26] usb 3-1: config 0 descriptor?? [ 243.634432][ T5893] usb usb2-port1: attempt power cycle [ 243.990034][ T5893] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 244.021864][ T5893] usb 2-1: device descriptor read/8, error -71 [ 244.301119][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.709'. [ 244.407420][ T5893] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 244.481180][ T5893] usb 2-1: device descriptor read/8, error -71 [ 244.590256][ T5893] usb usb2-port1: unable to enumerate USB device [ 244.750490][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 244.769989][ T26] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 244.814883][ T26] usb 3-1: USB disconnect, device number 17 [ 245.704794][ T5818] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 246.371278][ T5863] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.578404][ T5818] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 246.600249][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 246.609948][ T5818] usb 1-1: config 0 has no interface number 0 [ 246.623648][ T5863] usb 6-1: config 0 has an invalid interface number: 157 but max is 0 [ 246.637713][ T5818] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.648868][ T5863] usb 6-1: config 0 has no interface number 0 [ 246.659429][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.676482][ T5863] usb 6-1: New USB device found, idVendor=0483, idProduct=3746, bcdDevice=94.86 [ 246.689210][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.744037][ T5818] usb 1-1: config 0 descriptor?? [ 246.760789][ T5863] usb 6-1: Product: syz [ 246.779167][ T5863] usb 6-1: Manufacturer: syz [ 246.811509][ T5818] cp210x 1-1:0.32: cp210x converter detected [ 246.835646][ T5863] usb 6-1: SerialNumber: syz [ 246.899166][ T5863] usb 6-1: config 0 descriptor?? [ 247.125548][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'. [ 248.569160][ T5863] ftdi_sio 6-1:0.157: FTDI USB Serial Device converter detected [ 249.131643][ T5818] cp210x 1-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 249.140388][ T5863] ftdi_sio ttyUSB0: unknown device type: 0x9486 [ 249.149538][ T5863] usb 6-1: USB disconnect, device number 7 [ 249.175030][ T5863] ftdi_sio 6-1:0.157: device disconnected [ 249.429566][ T8782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8782 comm=syz.5.728 [ 249.456950][ T8783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8783 comm=syz.4.726 [ 249.561705][ T5818] cp210x 1-1:0.32: failed to get vendor val 0x370c size 15: -71 [ 249.569413][ T5818] cp210x 1-1:0.32: GPIO initialisation failed: -71 [ 250.365373][ T5818] usb 1-1: cp210x converter now attached to ttyUSB0 [ 250.383269][ T5818] usb 1-1: USB disconnect, device number 21 [ 250.407556][ T5818] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 250.440033][ T5818] cp210x 1-1:0.32: device disconnected [ 250.611792][ T8793] netlink: 'syz.4.730': attribute type 10 has an invalid length. [ 251.264184][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.734'. [ 251.380222][ T5818] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 251.540017][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 251.546883][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 251.592422][ T5818] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 251.608390][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.663158][ T5818] usb 1-1: Product: syz [ 251.968978][ T5818] usb 1-1: Manufacturer: syz [ 252.114274][ T5818] usb 1-1: SerialNumber: syz [ 252.759365][ T5818] usb 1-1: config 0 descriptor?? [ 252.971912][ T8819] FAULT_INJECTION: forcing a failure. [ 252.971912][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 252.984846][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.2.737 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 252.984871][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.984882][ T8819] Call Trace: [ 252.984888][ T8819] [ 252.984896][ T8819] dump_stack_lvl+0x16c/0x1f0 [ 252.984938][ T8819] should_fail_ex+0x50a/0x650 [ 252.984968][ T8819] ? fs_reclaim_acquire+0xae/0x150 [ 252.984997][ T8819] should_failslab+0xc2/0x120 [ 252.985018][ T8819] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 252.985037][ T8819] ? __d_alloc+0x31/0xaa0 [ 252.985060][ T8819] __d_alloc+0x31/0xaa0 [ 252.985079][ T8819] path_from_stashed+0x7a2/0xec0 [ 252.985098][ T8819] ? __pfx_path_from_stashed+0x10/0x10 [ 252.985110][ T8819] ? __pfx_get_sequential_mnt_ns+0x10/0x10 [ 252.985127][ T8819] ? __pfx_lock_release+0x10/0x10 [ 252.985155][ T8819] ns_ioctl+0x9c8/0xd00 [ 252.985169][ T8819] ? __pfx_ns_ioctl+0x10/0x10 [ 252.985196][ T8819] ? selinux_file_ioctl+0xb4/0x270 [ 252.985224][ T8819] ? __pfx_ns_ioctl+0x10/0x10 [ 252.985249][ T8819] __x64_sys_ioctl+0x190/0x200 [ 252.985274][ T8819] do_syscall_64+0xcd/0x250 [ 252.985301][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.985325][ T8819] RIP: 0033:0x7f0f8118d169 [ 252.985339][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.985356][ T8819] RSP: 002b:00007f0f81f54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.985373][ T8819] RAX: ffffffffffffffda RBX: 00007f0f813a5fa0 RCX: 00007f0f8118d169 [ 252.985384][ T8819] RDX: 00002000000022c0 RSI: 000000005000940b RDI: 0000000000000003 [ 252.985395][ T8819] RBP: 00007f0f81f54090 R08: 0000000000000000 R09: 0000000000000000 [ 252.985404][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.985414][ T8819] R13: 0000000000000000 R14: 00007f0f813a5fa0 R15: 00007ffd0a610bb8 [ 252.985436][ T8819] [ 252.985863][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 252.985876][ T30] audit: type=1400 audit(1742657348.155:799): avc: denied { read write } for pid=8818 comm="syz.5.736" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.207118][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.220203][ T30] audit: type=1400 audit(1742657348.155:800): avc: denied { open } for pid=8818 comm="syz.5.736" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.243139][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.249755][ T5818] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 253.280023][ T30] audit: type=1400 audit(1742657348.185:801): avc: denied { ioctl } for pid=8818 comm="syz.5.736" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.304446][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.444348][ T5818] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 253.454686][ T5818] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 253.505852][ T5818] usb 1-1: USB disconnect, device number 22 [ 253.620568][ T8833] netlink: 240 bytes leftover after parsing attributes in process `syz.4.740'. [ 253.809259][ T8824] afs: Unknown parameter 'dy' [ 253.907173][ T8840] SET target dimension over the limit! [ 254.411968][ T30] audit: type=1400 audit(1742657349.525:802): avc: denied { create } for pid=8847 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 254.583202][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 255.202179][ T30] audit: type=1400 audit(1742657349.715:803): avc: denied { open } for pid=8845 comm="syz.1.746" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 255.225594][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.298399][ T5910] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 255.422381][ T30] audit: type=1400 audit(1742657349.735:804): avc: denied { ioctl } for pid=8845 comm="syz.1.746" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 255.500197][ T5826] Bluetooth: hci1: command tx timeout [ 255.510161][ T30] audit: type=1400 audit(1742657350.445:805): avc: denied { mounton } for pid=8847 comm="syz.4.747" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 255.568673][ T30] audit: type=1400 audit(1742657350.485:806): avc: denied { create } for pid=8847 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.588175][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.601216][ T30] audit: type=1400 audit(1742657350.525:807): avc: denied { ioctl } for pid=8847 comm="syz.4.747" path="socket:[20007]" dev="sockfs" ino=20007 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.625900][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.633343][ T5910] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 255.757663][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.773699][ T5910] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 255.782811][ T5910] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 255.791872][ T5910] usb 6-1: Manufacturer: syz [ 255.805907][ T5910] usb 6-1: config 0 descriptor?? [ 256.349999][ T30] audit: type=1400 audit(1742657351.055:808): avc: denied { read } for pid=8857 comm="syz.1.748" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.419980][ T5910] rc_core: IR keymap rc-hauppauge not found [ 256.427131][ T5910] Registered IR keymap rc-empty [ 256.433662][ T5910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 256.529834][ T5910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 256.688992][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.081167][ T5864] usb 6-1: USB disconnect, device number 8 [ 257.289749][ T8878] netlink: 240 bytes leftover after parsing attributes in process `syz.0.754'. [ 257.310065][ T5866] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 257.373199][ T8882] netlink: 72 bytes leftover after parsing attributes in process `syz.4.755'. [ 257.380647][ T8883] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 257.383886][ T8882] netlink: 72 bytes leftover after parsing attributes in process `syz.4.755'. [ 257.452019][ T8886] fuse: Unknown parameter 'grou00000000000000000000' [ 257.480047][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 257.486445][ T5866] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.496443][ T5866] usb 2-1: config 0 has no interface number 0 [ 257.503092][ T5866] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.515243][ T5866] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.526109][ T5866] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 257.544555][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.561686][ T5866] usb 2-1: config 0 descriptor?? [ 257.645475][ T8891] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[8891] [ 258.039002][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 258.039023][ T30] audit: type=1400 audit(1742657353.205:819): avc: denied { execute } for pid=8892 comm="syz.5.760" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=20128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 258.072816][ T8876] [U] . [ 258.319700][ T5866] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.000E/input/input34 [ 258.561083][ T5866] uclogic 0003:28BD:0094.000E: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 258.585710][ T5866] usb 2-1: USB disconnect, device number 21 [ 258.595010][ T30] audit: type=1400 audit(1742657353.755:820): avc: denied { getopt } for pid=8894 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.507520][ T8912] netlink: 188 bytes leftover after parsing attributes in process `syz.1.767'. [ 259.532479][ T8912] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 260.133107][ T30] audit: type=1400 audit(1742657355.215:821): avc: denied { execute } for pid=8909 comm="syz.2.766" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 260.792999][ T5910] kernel write not supported for file /snd/seq (pid: 5910 comm: kworker/1:8) [ 260.813044][ T8929] FAULT_INJECTION: forcing a failure. [ 260.813044][ T8929] name failslab, interval 1, probability 0, space 0, times 0 [ 260.825743][ T8929] CPU: 0 UID: 0 PID: 8929 Comm: syz.2.772 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 260.825763][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.825774][ T8929] Call Trace: [ 260.825780][ T8929] [ 260.825787][ T8929] dump_stack_lvl+0x16c/0x1f0 [ 260.825823][ T8929] should_fail_ex+0x50a/0x650 [ 260.825860][ T8929] should_failslab+0xc2/0x120 [ 260.825883][ T8929] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 260.825904][ T8929] ? skb_clone+0x190/0x3f0 [ 260.825939][ T8929] skb_clone+0x190/0x3f0 [ 260.825962][ T8929] netlink_deliver_tap+0xabd/0xd30 [ 260.825994][ T8929] netlink_unicast+0x5e1/0x7f0 [ 260.826019][ T8929] ? __pfx_netlink_unicast+0x10/0x10 [ 260.826047][ T8929] netlink_sendmsg+0x8b8/0xd70 [ 260.826073][ T8929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.826104][ T8929] ____sys_sendmsg+0xaaf/0xc90 [ 260.826124][ T8929] ? copy_msghdr_from_user+0x10b/0x160 [ 260.826149][ T8929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.826179][ T8929] ___sys_sendmsg+0x135/0x1e0 [ 260.826206][ T8929] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.826262][ T8929] ? __pfx_lock_release+0x10/0x10 [ 260.826290][ T8929] ? trace_lock_acquire+0x14e/0x1f0 [ 260.826317][ T8929] ? __fget_files+0x206/0x3a0 [ 260.826342][ T8929] __sys_sendmsg+0x16e/0x220 [ 260.826367][ T8929] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.826404][ T8929] do_syscall_64+0xcd/0x250 [ 260.826433][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.826458][ T8929] RIP: 0033:0x7f0f8118d169 [ 260.826473][ T8929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.826489][ T8929] RSP: 002b:00007f0f81f54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.826507][ T8929] RAX: ffffffffffffffda RBX: 00007f0f813a5fa0 RCX: 00007f0f8118d169 [ 260.826517][ T8929] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 260.826527][ T8929] RBP: 00007f0f81f54090 R08: 0000000000000000 R09: 0000000000000000 [ 260.826542][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.826552][ T8929] R13: 0000000000000000 R14: 00007f0f813a5fa0 R15: 00007ffd0a610bb8 [ 260.826571][ T8929] [ 261.439721][ T30] audit: type=1400 audit(1742657356.605:822): avc: denied { append } for pid=8931 comm="syz.4.775" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 264.083103][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.780'. [ 264.389968][ T5864] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 264.551594][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 264.580321][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 264.609984][ T5864] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 264.627576][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.829025][ T5864] usb 3-1: config 0 descriptor?? [ 265.465728][ T30] audit: type=1400 audit(1742657360.635:823): avc: denied { bind } for pid=8943 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 265.498970][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.517318][ T5864] ath6kl: Failed to submit usb control message: -71 [ 265.532110][ T5864] ath6kl: unable to send the bmi data to the device: -71 [ 265.552452][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.565943][ T5864] ath6kl: Unable to send get target info: -71 [ 265.592875][ T5864] ath6kl: Failed to init ath6kl core: -71 [ 265.604509][ T5864] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 265.849949][ T5893] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 265.884619][ T5864] usb 3-1: USB disconnect, device number 18 [ 266.090614][ T8992] netlink: 42 bytes leftover after parsing attributes in process `syz.0.790'. [ 266.118773][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 266.163713][ T8995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.167360][ T8995] 9pnet_fd: Insufficient options for proto=fd [ 266.315651][ T933] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 266.677101][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 266.699459][ T933] usb 6-1: Using ep0 maxpacket: 32 [ 266.718357][ T933] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 266.741744][ T933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.749830][ T30] audit: type=1400 audit(1742657361.915:824): avc: denied { watch_sb } for pid=8997 comm="syz.0.792" path="/185" dev="tmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 266.778812][ T8995] batadv0: entered promiscuous mode [ 266.791718][ T8995] batadv0: entered allmulticast mode [ 266.797089][ T933] usb 6-1: config 0 descriptor?? [ 267.200579][ T9006] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 267.207563][ T9006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.221163][ T9006] vhci_hcd vhci_hcd.0: Device attached [ 267.323130][ T30] audit: type=1400 audit(1742657362.495:825): avc: denied { setopt } for pid=9010 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 267.412621][ T30] audit: type=1400 audit(1742657362.525:826): avc: denied { getopt } for pid=9010 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 267.648059][ T933] uclogic 0003:28BD:0071.000F: interface is invalid, ignoring [ 267.733511][ T933] usb 6-1: USB disconnect, device number 9 [ 267.760039][ T5893] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 268.032432][ T9007] vhci_hcd: connection reset by peer [ 268.218250][ T4527] vhci_hcd: stop threads [ 268.588815][ T4527] vhci_hcd: release socket [ 268.645092][ T4527] vhci_hcd: disconnect device [ 268.858844][ T9027] netlink: 42 bytes leftover after parsing attributes in process `syz.5.803'. [ 268.904952][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.803'. [ 269.038375][ T30] audit: type=1400 audit(1742657364.205:827): avc: denied { write } for pid=9033 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 269.494873][ T9041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9041 comm=syz.5.808 [ 269.538488][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 269.831230][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.810'. [ 270.575700][ T9037] Invalid source name [ 270.579707][ T9037] UBIFS error (pid: 9037): cannot open "./file0", error -22 [ 270.707429][ T9056] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 270.743840][ T30] audit: type=1400 audit(1742657365.745:828): avc: denied { create } for pid=9036 comm="syz.0.806" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 270.972830][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.813'. [ 270.982931][ T30] audit: type=1400 audit(1742657365.745:829): avc: denied { mounton } for pid=9036 comm="syz.0.806" path="/189/file0" dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 271.109988][ T30] audit: type=1400 audit(1742657365.745:830): avc: denied { mount } for pid=9036 comm="syz.0.806" name="/" dev="rpc_pipefs" ino=21760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 271.199967][ T30] audit: type=1400 audit(1742657366.225:831): avc: denied { create } for pid=9058 comm="syz.4.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 271.327328][ T9071] netlink: 42 bytes leftover after parsing attributes in process `syz.4.818'. [ 271.348963][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 271.498676][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 271.507715][ T933] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 271.530096][ T5863] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 271.689935][ T933] usb 1-1: Using ep0 maxpacket: 32 [ 271.739246][ T933] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.339312][ T933] usb 1-1: config 0 has no interface number 0 [ 272.347066][ T933] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.358263][ T933] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.368293][ T933] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 272.377590][ T933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.430289][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 272.453166][ T933] usb 1-1: config 0 descriptor?? [ 272.493932][ T5863] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 272.502310][ T5863] usb 6-1: config 8 has no interface number 0 [ 272.508713][ T5863] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 272.521977][ T5863] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 272.532062][ T5863] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 272.542135][ T5863] usb 6-1: config 8 interface 39 has no altsetting 0 [ 272.568819][ T5863] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 272.578519][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.589669][ T5863] usb 6-1: Product: syz [ 272.595332][ T5863] usb 6-1: Manufacturer: syz [ 272.609237][ T5863] usb 6-1: SerialNumber: syz [ 272.692487][ T9084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9084 comm=syz.4.822 [ 272.936653][ T5893] vhci_hcd: vhci_device speed not set [ 273.204821][ T30] audit: type=1400 audit(1742657368.375:832): avc: denied { setattr } for pid=9093 comm="syz.4.825" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.241233][ T30] audit: type=1400 audit(1742657368.385:833): avc: denied { read } for pid=9093 comm="syz.4.825" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.264044][ T30] audit: type=1400 audit(1742657368.385:834): avc: denied { open } for pid=9093 comm="syz.4.825" path="/157/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.299681][ T933] uclogic 0003:28BD:0094.0010: pen parameters not found [ 273.307832][ T933] uclogic 0003:28BD:0094.0010: interface is invalid, ignoring [ 273.320954][ T26] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 273.346879][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 273.358042][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 273.369144][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 273.375342][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 273.387107][ T30] audit: type=1400 audit(1742657368.555:835): avc: denied { read } for pid=9069 comm="syz.5.817" path="socket:[21929]" dev="sockfs" ino=21929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 273.445366][ T30] audit: type=1400 audit(1742657368.615:836): avc: denied { write } for pid=9069 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 273.464638][ T5866] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 273.489975][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 273.496972][ T26] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 273.505580][ T26] usb 2-1: config 0 has no interface number 0 [ 273.518600][ T26] usb 2-1: config 0 interface 12 has no altsetting 0 [ 273.533534][ T26] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 273.534115][ T5864] usb 1-1: USB disconnect, device number 24 [ 273.548895][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.558050][ T26] usb 2-1: Product: syz [ 273.562318][ T26] usb 2-1: Manufacturer: syz [ 273.566938][ T26] usb 2-1: SerialNumber: syz [ 273.570080][ T933] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 273.582209][ T5863] ipheth 6-1:8.39: ipheth_enable_ncm: usb_control_msg: -110 [ 273.592104][ T26] usb 2-1: config 0 descriptor?? [ 273.605254][ T5863] ipheth 6-1:8.39: Apple iPhone USB Ethernet device attached [ 273.621612][ T5866] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 273.632487][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.643693][ T5866] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.652711][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 273.652991][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 273.659188][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.672969][ T30] audit: type=1400 audit(1742657368.835:837): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 273.678194][ T5866] usb 5-1: SerialNumber: syz [ 273.730185][ T933] usb 3-1: Using ep0 maxpacket: 16 [ 273.737700][ T933] usb 3-1: config 2 has an invalid interface number: 195 but max is 0 [ 273.747309][ T933] usb 3-1: config 2 has no interface number 0 [ 273.759921][ T933] usb 3-1: config 2 interface 195 has no altsetting 0 [ 273.782500][ T933] usb 3-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice= 3.04 [ 273.793456][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.802366][ T933] usb 3-1: Product: syz [ 273.806556][ T933] usb 3-1: Manufacturer: syz [ 273.814873][ T933] usb 3-1: SerialNumber: syz [ 273.832638][ T933] r8152-cfgselector 3-1: Unknown version 0x0000 [ 273.928014][ T5866] usb 5-1: 0:2 : does not exist [ 273.967697][ T5866] usb 5-1: USB disconnect, device number 20 [ 274.189732][ T933] r8152-cfgselector 3-1: USB disconnect, device number 19 [ 274.191023][ T5486] ipheth 6-1:8.39: ipheth_rx_submit: usb_submit_urb: -90 [ 274.210471][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 274.216566][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 274.223698][ T8026] udevd[8026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.485797][ T9072] ceph: No mds server is up or the cluster is laggy [ 274.583065][ T5863] usb 6-1: USB disconnect, device number 10 [ 274.771760][ T5863] ipheth 6-1:8.39: Apple iPhone USB Ethernet now disconnected [ 274.837276][ T9134] 9pnet_fd: Insufficient options for proto=fd [ 276.256926][ T9151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9151 comm=syz.0.835 [ 276.394995][ T26] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 276.478341][ T26] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 276.489724][ T26] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 277.512217][ T26] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 277.544811][ T26] usb 2-1: USB disconnect, device number 22 [ 277.832203][ T5866] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 278.125213][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 278.125231][ T30] audit: type=1400 audit(1742657373.295:853): avc: denied { getopt } for pid=9175 comm="syz.5.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 278.250728][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 278.257994][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.269227][ T5866] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 278.296296][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.333661][ T5866] usb 5-1: config 0 descriptor?? [ 278.484477][ T9177] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 278.532893][ T30] audit: type=1400 audit(1742657373.665:854): avc: denied { relabelto } for pid=9166 comm="syz.1.840" name="172" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 278.597237][ T30] audit: type=1400 audit(1742657373.665:855): avc: denied { associate } for pid=9166 comm="syz.1.840" name="172" dev="tmpfs" ino=929 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 278.659232][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.661796][ T9181] netlink: 42 bytes leftover after parsing attributes in process `syz.5.843'. [ 278.677710][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.710024][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.843'. [ 278.731561][ T9184] 9pnet_fd: Insufficient options for proto=fd [ 279.156662][ T5866] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 279.193998][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 279.252849][ T5866] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 279.280620][ T5866] hid-steam 0003:28DE:1102.0011: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 279.350690][ T5866] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected [ 279.510484][ T30] audit: type=1400 audit(1742657374.675:856): avc: denied { name_bind } for pid=9155 comm="syz.4.837" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 279.781554][ T5866] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0011/input/input37 [ 279.959972][ T5866] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 279.973741][ T5866] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 280.236361][ T5866] hid-steam 0003:28DE:1102.0012: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 280.350468][ T5866] usb 5-1: USB disconnect, device number 21 [ 280.442128][ T30] audit: type=1400 audit(1742657375.615:857): avc: denied { create } for pid=9195 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 280.513239][ T5866] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected [ 280.549257][ T4527] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 280.644425][ T30] audit: type=1400 audit(1742657375.815:858): avc: denied { write } for pid=5814 comm="syz-executor" name="172" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 280.685602][ T30] audit: type=1400 audit(1742657375.845:859): avc: denied { remove_name } for pid=5814 comm="syz-executor" name="binderfs" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 280.719945][ T30] audit: type=1400 audit(1742657375.845:860): avc: denied { rmdir } for pid=5814 comm="syz-executor" name="172" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 281.330833][ T30] audit: type=1400 audit(1742657376.505:861): avc: denied { getopt } for pid=9224 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 281.740039][ T5864] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 281.900821][ T5864] usb 6-1: device descriptor read/64, error -71 [ 282.140123][ T5864] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 282.711453][ T9239] netlink: 188 bytes leftover after parsing attributes in process `syz.0.863'. [ 282.734476][ T9242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9242 comm=syz.2.862 [ 282.748098][ T5864] usb 6-1: device descriptor read/64, error -71 [ 282.782506][ T9239] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 282.816494][ T9243] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 282.870307][ T5864] usb usb6-port1: attempt power cycle [ 283.158894][ T9247] netlink: 188 bytes leftover after parsing attributes in process `syz.0.864'. [ 283.174944][ T9247] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 283.339397][ T30] audit: type=1800 audit(1742657378.505:862): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.861" name="bus" dev="overlay" ino=876 res=0 errno=0 [ 283.475731][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 283.520179][ T5864] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 283.606940][ T9255] Invalid option length (1048180) for dns_resolver key [ 283.715266][ T5864] usb 6-1: device descriptor read/8, error -71 [ 285.187119][ T9262] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.195629][ T9262] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 285.244150][ T9262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.295398][ T9262] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 285.333458][ T9262] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 285.341290][ T9262] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 285.495951][ T9262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.502691][ T9262] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 285.533252][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.875'. [ 286.123204][ T9286] openvswitch: netlink: VXLAN extension message has 151 unknown bytes. [ 286.171173][ T30] audit: type=1326 audit(1742657380.775:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.226316][ T9262] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 286.238971][ T9262] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 286.290335][ T30] audit: type=1326 audit(1742657380.775:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.381895][ T30] audit: type=1326 audit(1742657380.775:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.448628][ T30] audit: type=1326 audit(1742657380.775:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.542999][ T30] audit: type=1326 audit(1742657380.775:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.569022][ T30] audit: type=1326 audit(1742657380.775:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.612020][ T30] audit: type=1326 audit(1742657380.785:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.638535][ T30] audit: type=1326 audit(1742657380.785:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.669234][ T30] audit: type=1326 audit(1742657380.785:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.1.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f658d98d169 code=0x7ffc0000 [ 286.790068][ T5864] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 286.940608][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 286.947265][ T5864] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.955929][ T5864] usb 6-1: config 0 has no interface number 0 [ 286.962713][ T5864] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.001742][ T5864] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.012630][ T5864] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 287.026838][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.047324][ T5864] usb 6-1: config 0 descriptor?? [ 287.220469][ T933] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 287.502316][ T933] usb 3-1: config 0 has an invalid interface number: 121 but max is 0 [ 287.510630][ T933] usb 3-1: config 0 has no interface number 0 [ 287.517476][ T933] usb 3-1: too many endpoints for config 0 interface 121 altsetting 208: 72, using maximum allowed: 30 [ 287.530118][ T933] usb 3-1: config 0 interface 121 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 287.549971][ T933] usb 3-1: config 0 interface 121 has no altsetting 0 [ 287.605812][ T933] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 287.621498][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.634884][ T933] usb 3-1: Product: syz [ 287.639476][ T933] usb 3-1: Manufacturer: syz [ 287.644616][ T933] usb 3-1: SerialNumber: syz [ 287.666487][ T933] usb 3-1: config 0 descriptor?? [ 287.683166][ T5864] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0094.0013/input/input38 [ 287.752233][ T5864] uclogic 0003:28BD:0094.0013: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.5-1/input1 [ 287.861838][ T9311] netlink: 260 bytes leftover after parsing attributes in process `syz.0.885'. [ 287.901534][ T5864] usb 6-1: USB disconnect, device number 15 [ 288.158853][ T933] peak_usb 3-1:0.121: probe with driver peak_usb failed with error 121 [ 288.184623][ T933] usb 3-1: USB disconnect, device number 20 [ 289.698237][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.889'. [ 289.850299][ T9322] Bluetooth: MGMT ver 1.23 [ 290.199151][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 290.199284][ T30] audit: type=1400 audit(1742657385.365:906): avc: denied { setopt } for pid=9338 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.226011][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 290.648998][ T9345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.898'. [ 290.668407][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 290.699519][ T30] audit: type=1400 audit(1742657385.865:907): avc: denied { map } for pid=9343 comm="syz.1.898" path="/dev/swradio2" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.742468][ T30] audit: type=1400 audit(1742657385.865:908): avc: denied { execute } for pid=9343 comm="syz.1.898" path="/dev/swradio2" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.669825][ T30] audit: type=1400 audit(1742657386.165:909): avc: denied { create } for pid=9346 comm="syz.5.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 291.824532][ T30] audit: type=1400 audit(1742657386.175:910): avc: denied { setopt } for pid=9346 comm="syz.5.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 292.059960][ T30] audit: type=1400 audit(1742657386.185:911): avc: denied { read } for pid=9346 comm="syz.5.896" path="socket:[23581]" dev="sockfs" ino=23581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 292.090695][ T26] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 292.270053][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 292.281038][ T26] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.289191][ T26] usb 6-1: config 0 has no interface number 0 [ 292.295518][ T26] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.329930][ T26] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.359975][ T26] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 292.369256][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.391904][ T26] usb 6-1: config 0 descriptor?? [ 292.397422][ T30] audit: type=1326 audit(1742657387.545:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.4.902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74c518d169 code=0x0 [ 293.042612][ T26] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0094.0014/input/input39 [ 293.132722][ T26] uclogic 0003:28BD:0094.0014: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.5-1/input1 [ 293.247069][ T26] usb 6-1: USB disconnect, device number 16 [ 295.330822][ T9399] netlink: 'syz.4.913': attribute type 1 has an invalid length. [ 295.541272][ T933] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 295.918192][ T9399] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 296.014539][ T52] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 296.302241][ T933] usb 6-1: Using ep0 maxpacket: 32 [ 296.318293][ T933] usb 6-1: config 1 interface 0 altsetting 122 bulk endpoint 0x82 has invalid maxpacket 16 [ 296.349959][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 296.358238][ T933] usb 6-1: config 1 interface 0 altsetting 122 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 296.361033][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 296.386405][ T933] usb 6-1: config 1 interface 0 has no altsetting 0 [ 296.414356][ T52] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 296.426364][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.431452][ T933] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.436078][ T52] usb 3-1: Product: syz [ 296.448882][ T933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.457158][ T52] usb 3-1: Manufacturer: syz [ 296.469964][ T52] usb 3-1: SerialNumber: syz [ 296.473203][ T933] usb 6-1: Product: ࡡ [ 296.482461][ T933] usb 6-1: Manufacturer: 䌦飑৛᯺㊫㖚ᒿ앑秒輷눒逮쁔芶촁얻↙ᆱ盹花뾜䛦㽠⨰釟뜰 [ 296.488384][ T52] usb 3-1: config 0 descriptor?? [ 296.536566][ T933] usb 6-1: SerialNumber: ц [ 296.538294][ T9417] netlink: 72 bytes leftover after parsing attributes in process `syz.4.921'. [ 296.550208][ T9386] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 296.550303][ T9386] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 296.564655][ T30] audit: type=1400 audit(1742657391.735:913): avc: denied { accept } for pid=9419 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.701466][ T9417] netlink: 72 bytes leftover after parsing attributes in process `syz.4.921'. [ 296.702736][ T52] hub 3-1:0.0: bad descriptor, ignoring hub [ 296.733032][ T52] hub 3-1:0.0: probe with driver hub failed with error -5 [ 297.358957][ T30] audit: type=1400 audit(1742657392.525:914): avc: denied { read write } for pid=9395 comm="syz.2.914" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 297.391460][ T30] audit: type=1400 audit(1742657392.565:915): avc: denied { open } for pid=9395 comm="syz.2.914" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 297.424860][ T52] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 297.500680][ T933] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 297.559231][ T933] usb 6-1: USB disconnect, device number 17 [ 298.905531][ T30] audit: type=1804 audit(1742657394.075:916): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.929" name="/" dev="pidfs" ino=9444 res=1 errno=0 [ 299.826361][ T9460] 9pnet_fd: Insufficient options for proto=fd [ 300.460346][ T30] audit: type=1400 audit(1742657395.625:917): avc: denied { create } for pid=9478 comm="syz.5.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 300.481434][ T30] audit: type=1400 audit(1742657395.655:918): avc: denied { sys_admin } for pid=9478 comm="syz.5.942" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 300.576295][ T52] usb 3-1: USB disconnect, device number 21 [ 300.609989][ T5864] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 300.646777][ T30] audit: type=1400 audit(1742657395.815:919): avc: denied { append } for pid=9481 comm="syz.5.943" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 300.750072][ T52] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 300.769996][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 300.786302][ T5864] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 300.805044][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.812626][ T9486] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 300.819994][ T5864] usb 1-1: Product: syz [ 300.830475][ T5864] usb 1-1: Manufacturer: syz [ 300.840380][ T5864] usb 1-1: SerialNumber: syz [ 300.860172][ T5864] usb 1-1: bad CDC descriptors [ 300.914868][ T52] usb 3-1: not running at top speed; connect to a high speed hub [ 300.925006][ T52] usb 3-1: config 12 has an invalid interface number: 58 but max is 2 [ 300.935082][ T52] usb 3-1: config 12 has an invalid interface number: 98 but max is 2 [ 300.947193][ T52] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 300.957105][ T52] usb 3-1: config 12 has an invalid descriptor of length 201, skipping remainder of the config [ 300.970507][ T5863] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 300.988471][ T52] usb 3-1: config 12 has 2 interfaces, different from the descriptor's value: 3 [ 301.008849][ T52] usb 3-1: config 12 has no interface number 0 [ 301.015892][ T52] usb 3-1: config 12 has no interface number 1 [ 301.025972][ T52] usb 3-1: config 12 interface 58 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.037896][ T52] usb 3-1: config 12 interface 58 altsetting 0 endpoint 0x8 has invalid maxpacket 528, setting to 64 [ 301.049596][ T52] usb 3-1: config 12 interface 98 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.071100][ T9477] SELinux: syz.0.941 (9477) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 301.085970][ T5864] usb 1-1: USB disconnect, device number 25 [ 301.093627][ T30] audit: type=1400 audit(1742657396.245:920): avc: denied { execute } for pid=9475 comm="syz.0.941" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 301.143903][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 301.158487][ T5863] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 301.168635][ T52] usb 3-1: config 12 interface 98 has no altsetting 0 [ 301.175690][ T5863] usb 2-1: config 0 has no interface number 0 [ 301.183910][ T5863] usb 2-1: config 0 interface 246 has no altsetting 0 [ 301.193661][ T5863] usb 2-1: New USB device found, idVendor=0c8f, idProduct=e086, bcdDevice=74.90 [ 301.203491][ T52] usb 3-1: New USB device found, idVendor=1410, idProduct=a013, bcdDevice=c3.1f [ 301.212671][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.222976][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.237037][ T5863] usb 2-1: Product: syz [ 301.256517][ T5863] usb 2-1: Manufacturer: syz [ 301.259697][ T30] audit: type=1326 audit(1742657396.425:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.5.945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4e238d169 code=0x0 [ 301.261392][ T52] usb 3-1: Product: syz [ 301.285190][ T9492] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[9492] [ 301.290297][ T5863] usb 2-1: SerialNumber: syz [ 301.341127][ T5863] usb 2-1: config 0 descriptor?? [ 301.388882][ T52] usb 3-1: Manufacturer: syz [ 301.470691][ T52] usb 3-1: SerialNumber: syz [ 301.644916][ T9476] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 301.676340][ T5893] usb 2-1: USB disconnect, device number 23 [ 301.820151][ T5864] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 301.989688][ T5864] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 302.011485][ T5864] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 302.044499][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.050993][ T52] usb 3-1: unknown number of interfaces: 2 [ 302.056069][ T5864] usb 6-1: config 0 has no interface number 0 [ 302.069833][ T5864] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 302.070042][ T52] usb 3-1: USB disconnect, device number 22 [ 302.155313][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 302.169530][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 302.630596][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.638650][ T5864] usb 6-1: Product: syz [ 302.642910][ T5864] usb 6-1: Manufacturer: syz [ 302.647517][ T5864] usb 6-1: SerialNumber: syz [ 302.656652][ T5864] usb 6-1: config 0 descriptor?? [ 302.664246][ T5864] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 302.670841][ T5864] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 302.984719][ T30] audit: type=1400 audit(1742657398.155:922): avc: denied { read write } for pid=9506 comm="syz.0.952" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.023731][ T30] audit: type=1400 audit(1742657398.185:923): avc: denied { open } for pid=9506 comm="syz.0.952" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.047752][ T30] audit: type=1400 audit(1742657398.185:924): avc: denied { ioctl } for pid=9506 comm="syz.0.952" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.250876][ T5893] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 303.290219][ T52] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 303.317258][ T30] audit: type=1400 audit(1742657398.485:925): avc: denied { read } for pid=5177 comm="acpid" name="event9" dev="devtmpfs" ino=3062 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 303.343979][ T31] INFO: task syz.3.378:7572 blocked for more than 143 seconds. [ 303.356256][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 303.364125][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.373173][ T30] audit: type=1400 audit(1742657398.485:926): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=3062 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 303.396047][ T31] task:syz.3.378 state:D stack:27912 pid:7572 tgid:7571 ppid:6277 task_flags:0x400740 flags:0x00004006 [ 303.406708][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 303.408425][ T31] Call Trace: [ 303.419041][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 303.420650][ T5893] usb 1-1: device descriptor read/64, error -71 [ 303.435744][ T30] audit: type=1400 audit(1742657398.485:927): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=3062 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 303.460598][ T31] [ 303.460667][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 303.463585][ T31] __schedule+0xf43/0x5890 [ 303.473360][ T9512] netlink: 33 bytes leftover after parsing attributes in process `syz.4.954'. [ 303.477212][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 303.491264][ T31] ? __pfx_lockdep_lock+0x10/0x10 [ 303.496371][ T31] ? __pfx___schedule+0x10/0x10 [ 303.501663][ T31] ? schedule+0x298/0x350 [ 303.506045][ T31] ? __pfx_lock_release+0x10/0x10 [ 303.509927][ T52] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.511616][ T31] ? finish_task_switch.isra.0+0x217/0xcc0 [ 303.523380][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 303.528475][ T31] ? lock_acquire+0x2f/0xb0 [ 303.534537][ T52] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 303.539275][ T31] ? schedule+0x1fd/0x350 [ 303.550480][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.552729][ T31] schedule+0xe7/0x350 [ 303.564835][ T31] schedule_timeout+0x244/0x280 [ 303.568755][ T52] usb 2-1: config 0 descriptor?? [ 303.576954][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 303.589919][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.595256][ T31] __wait_for_common+0x3e1/0x600 [ 303.604533][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 303.610067][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 303.615544][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 303.621197][ T31] wait_for_completion_state+0x1c/0x40 [ 303.626672][ T31] do_coredump+0x86f/0x4410 [ 303.631336][ T31] ? unwind_get_return_address+0x59/0xa0 [ 303.636991][ T31] ? __pfx_do_coredump+0x10/0x10 [ 303.642614][ T31] ? stack_trace_save+0x95/0xd0 [ 303.647540][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 303.653094][ T31] ? hlock_class+0x4e/0x130 [ 303.657660][ T31] ? stack_depot_save_flags+0x28/0x9c0 [ 303.663450][ T31] ? kasan_save_stack+0x42/0x60 [ 303.668532][ T31] ? kasan_save_stack+0x33/0x60 [ 303.673552][ T31] ? kasan_save_track+0x14/0x30 [ 303.678412][ T31] ? kasan_save_free_info+0x3b/0x60 [ 303.683796][ T31] ? __kasan_slab_free+0x51/0x70 [ 303.688743][ T31] ? kmem_cache_free+0x2e2/0x4d0 [ 303.693714][ T31] ? __sigqueue_free+0xba/0x2a0 [ 303.698663][ T31] ? get_signal+0xcbc/0x26c0 [ 303.703377][ T5893] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 303.711140][ T31] ? arch_do_signal_or_restart+0x90/0x7e0 [ 303.716914][ T31] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 303.723150][ T31] ? find_held_lock+0x2d/0x110 [ 303.727934][ T31] ? proc_coredump_connector+0x2d2/0x4f0 [ 303.733790][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 303.739800][ T31] get_signal+0x230b/0x26c0 [ 303.744506][ T31] ? __pfx_get_signal+0x10/0x10 [ 303.749376][ T31] ? rcu_is_watching+0x12/0xc0 [ 303.754233][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 303.759564][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 303.765167][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 303.771374][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 303.777019][ T31] do_syscall_64+0xda/0x250 [ 303.781578][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.787489][ T31] RIP: 0033:0x7f823424e750 [ 303.792415][ T31] RSP: 002b:00007f82352c4338 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 303.800900][ T31] RAX: 0000000000000000 RBX: 00007f82345a5fa0 RCX: 00007f823438d169 [ 303.808871][ T31] RDX: 00007f82352c4340 RSI: 00007f82352c4470 RDI: 000000000000000b [ 303.816884][ T31] RBP: 00007f823440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 303.825104][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.833131][ T31] R13: 0000000000000000 R14: 00007f82345a5fa0 R15: 00007ffd7fe05cf8 [ 303.841234][ T31] [ 303.844305][ T31] [ 303.844305][ T31] Showing all locks held in the system: [ 303.857862][ T5893] usb 1-1: device descriptor read/64, error -71 [ 303.887383][ T31] 5 locks held by kworker/u8:1/13: [ 303.893201][ T31] 1 lock held by khungtaskd/31: [ 303.898103][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 303.909007][ T31] 5 locks held by kworker/1:1/52: [ 303.914071][ T31] #0: ffff888144eb6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 303.924919][ T31] #1: ffffc90000bd7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 303.936233][ T31] #2: ffff888028a19190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 303.945282][ T31] #3: ffff88805dcef190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 303.954789][ T31] #4: ffff8880237f5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 303.965106][ T31] 2 locks held by getty/5576: [ 303.970135][ T31] #0: ffff8880357ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 303.980179][ T31] #1: ffffc90002fe62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 303.991354][ T5893] usb usb1-port1: attempt power cycle [ 303.993490][ T52] hid-alps 0003:044E:1215.0015: unknown main item tag 0x0 [ 303.997819][ T31] 6 locks held by kworker/0:6/5893: [ 304.005619][ T52] hid-alps 0003:044E:1215.0015: unknown main item tag 0x0 [ 304.016372][ T52] hid-alps 0003:044E:1215.0015: unknown main item tag 0x0 [ 304.016661][ T31] #0: [ 304.023600][ T52] hid-alps 0003:044E:1215.0015: unknown main item tag 0x6 [ 304.023834][ T31] ffff888144eb6d48 [ 304.026446][ T52] hid-alps 0003:044E:1215.0015: item fetching failed at offset 6/7 [ 304.034463][ T31] ( [ 304.038487][ T52] hid-alps 0003:044E:1215.0015: parse failed [ 304.046991][ T31] (wq_completion)usb_hub_wq [ 304.047878][ T52] hid-alps 0003:044E:1215.0015: probe with driver hid-alps failed with error -22 [ 304.054710][ T31] ){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 304.078739][ T31] #1: ffffc90004347d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 304.090741][ T31] #2: ffff8880289fa190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 304.099617][ T31] #3: ffff8880289fd510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x27ec/0x4e10 [ 304.110598][ T31] #4: ffff888028291768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2815/0x4e10 [ 304.120721][ T31] #5: ffffffff8f4e9d30 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1cd0 [ 304.131368][ T31] [ 304.133716][ T31] ============================================= [ 304.133716][ T31] [ 304.142447][ T31] NMI backtrace for cpu 0 [ 304.142459][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 304.142477][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.142487][ T31] Call Trace: [ 304.142492][ T31] [ 304.142498][ T31] dump_stack_lvl+0x116/0x1f0 [ 304.142535][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 304.142557][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 304.142585][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 304.142606][ T31] watchdog+0xf62/0x12b0 [ 304.142640][ T31] ? __pfx_watchdog+0x10/0x10 [ 304.142670][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.142696][ T31] ? __kthread_parkme+0x148/0x220 [ 304.142717][ T31] ? __pfx_watchdog+0x10/0x10 [ 304.142742][ T31] kthread+0x3af/0x750 [ 304.142765][ T31] ? __pfx_kthread+0x10/0x10 [ 304.142789][ T31] ? __pfx_kthread+0x10/0x10 [ 304.142810][ T31] ret_from_fork+0x45/0x80 [ 304.142836][ T31] ? __pfx_kthread+0x10/0x10 [ 304.142857][ T31] ret_from_fork_asm+0x1a/0x30 [ 304.142889][ T31] [ 304.142896][ T31] Sending NMI from CPU 0 to CPUs 1: [ 304.203010][ T52] usb 2-1: USB disconnect, device number 24 [ 304.205319][ C1] NMI backtrace for cpu 1 [ 304.205336][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/1:1 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 304.205353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.205362][ C1] Workqueue: usb_hub_wq hub_event [ 304.205385][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x62/0x70 [ 304.205412][ C1] Code: c0 74 2b 8b 82 08 16 00 00 83 f8 02 75 20 48 8b 8a 10 16 00 00 8b 92 0c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 <48> 89 34 c1 c3 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 [ 304.205426][ C1] RSP: 0018:ffffc90000bd6f80 EFLAGS: 00000283 [ 304.205438][ C1] RAX: 000000000001752a RBX: 0000000000000800 RCX: ffffc900193b8000 [ 304.205447][ C1] RDX: 0000000000100000 RSI: ffffffff8b5523a1 RDI: ffffc90000bd726d [ 304.205456][ C1] RBP: ffffc90000bd7068 R08: 0000000000000001 R09: fffff5200017ae4d [ 304.205465][ C1] R10: ffffc90000bd726d R11: 000000000002d818 R12: 0000000000000000 [ 304.205473][ C1] R13: 000000007ffffff2 R14: 0000000000000800 R15: ffffffff8b6dd34c [ 304.205483][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 304.205497][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.205506][ C1] CR2: 000000110c3ec030 CR3: 000000003970c000 CR4: 00000000003526f0 [ 304.205514][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 304.205522][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 304.205530][ C1] Call Trace: [ 304.205536][ C1] [ 304.205541][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 304.205563][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 304.205583][ C1] ? nmi_handle+0x1ac/0x5d0 [ 304.205604][ C1] ? __sanitizer_cov_trace_pc+0x62/0x70 [ 304.205623][ C1] ? default_do_nmi+0x6a/0x160 [ 304.205640][ C1] ? exc_nmi+0x170/0x1e0 [ 304.205652][ C1] ? end_repeat_nmi+0xf/0x53 [ 304.205675][ C1] ? vsnprintf+0x291/0x1180 [ 304.205692][ C1] ? __sanitizer_cov_trace_pc+0x62/0x70 [ 304.205711][ C1] ? __sanitizer_cov_trace_pc+0x62/0x70 [ 304.205730][ C1] ? __sanitizer_cov_trace_pc+0x62/0x70 [ 304.205748][ C1] [ 304.205753][ C1] [ 304.205757][ C1] vsnprintf+0x291/0x1180 [ 304.205779][ C1] ? __pfx_vsnprintf+0x10/0x10 [ 304.205795][ C1] ? __asan_memcpy+0x3c/0x60 [ 304.205817][ C1] sprintf+0xcd/0x110 [ 304.205832][ C1] ? __pfx_sprintf+0x10/0x10 [ 304.205849][ C1] ? get_data+0x39b/0x550 [ 304.205872][ C1] info_print_prefix+0x25c/0x350 [ 304.205892][ C1] ? __pfx_info_print_prefix+0x10/0x10 [ 304.205909][ C1] ? __asan_memcpy+0x3c/0x60 [ 304.205926][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 304.205946][ C1] record_print_text+0x141/0x400 [ 304.205964][ C1] ? __pfx_record_print_text+0x10/0x10 [ 304.205983][ C1] ? __pfx_prb_read_valid+0x10/0x10 [ 304.206003][ C1] printk_get_next_message+0x2be/0x690 [ 304.206019][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 304.206040][ C1] ? rcu_is_watching+0x12/0xc0 [ 304.206056][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 304.206072][ C1] ? hlock_class+0x4e/0x130 [ 304.206085][ C1] ? console_flush_all+0x159/0xc60 [ 304.206100][ C1] console_flush_all+0x6ec/0xc60 [ 304.206115][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 304.206132][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 304.206144][ C1] ? __pfx_mark_lock+0x10/0x10 [ 304.206163][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 304.206179][ C1] console_unlock+0xd9/0x210 [ 304.206195][ C1] ? __pfx_console_unlock+0x10/0x10 [ 304.206209][ C1] ? lock_acquire+0x2f/0xb0 [ 304.206225][ C1] ? vprintk_emit+0x638/0x6f0 [ 304.206239][ C1] vprintk_emit+0x424/0x6f0 [ 304.206252][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 304.206265][ C1] ? __pfx_lock_release+0x10/0x10 [ 304.206284][ C1] dev_printk_emit+0xfb/0x140 [ 304.206301][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 304.206315][ C1] ? __pfx_lock_release+0x10/0x10 [ 304.206331][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 304.206347][ C1] ? hlock_class+0x4e/0x130 [ 304.206359][ C1] ? mark_lock+0xb5/0xc60 [ 304.206374][ C1] ? __queue_work+0x431/0x10f0 [ 304.206395][ C1] __dev_printk+0xf5/0x270 [ 304.206409][ C1] _dev_info+0xe5/0x120 [ 304.206422][ C1] ? __pfx__dev_info+0x10/0x10 [ 304.206436][ C1] ? __pfx_lock_release+0x10/0x10 [ 304.206454][ C1] ? mark_held_locks+0x9f/0xe0 [ 304.206472][ C1] usb_disconnect+0xec/0x920 [ 304.206490][ C1] hub_event+0x1da5/0x4e10 [ 304.206511][ C1] ? lock_acquire+0x2f/0xb0 [ 304.206527][ C1] ? debug_object_deactivate+0x13b/0x370 [ 304.206552][ C1] ? __pfx_hub_event+0x10/0x10 [ 304.206568][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 304.206586][ C1] ? rcu_is_watching+0x12/0xc0 [ 304.206600][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 304.206615][ C1] ? process_one_work+0x921/0x1ba0 [ 304.206631][ C1] ? lock_acquire+0x2f/0xb0 [ 304.206648][ C1] ? process_one_work+0x921/0x1ba0 [ 304.206665][ C1] process_one_work+0x9c5/0x1ba0 [ 304.206685][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 304.206703][ C1] ? __pfx_process_one_work+0x10/0x10 [ 304.206723][ C1] ? assign_work+0x1a0/0x250 [ 304.206740][ C1] worker_thread+0x6c8/0xf00 [ 304.206760][ C1] ? __pfx_worker_thread+0x10/0x10 [ 304.206781][ C1] kthread+0x3af/0x750 [ 304.206800][ C1] ? __pfx_kthread+0x10/0x10 [ 304.206818][ C1] ? lock_acquire+0x2f/0xb0 [ 304.206836][ C1] ? __pfx_kthread+0x10/0x10 [ 304.206852][ C1] ret_from_fork+0x45/0x80 [ 304.206871][ C1] ? __pfx_kthread+0x10/0x10 [ 304.206886][ C1] ret_from_fork_asm+0x1a/0x30 [ 304.206907][ C1] [ 304.207720][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 304.207732][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 304.207750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.207759][ T31] Call Trace: [ 304.207765][ T31] [ 304.207772][ T31] dump_stack_lvl+0x3d/0x1f0 [ 304.207799][ T31] panic+0x71d/0x800 [ 304.207819][ T31] ? __pfx_panic+0x10/0x10 [ 304.207835][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 304.207858][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 304.207879][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 304.207900][ T31] ? watchdog+0xdcc/0x12b0 [ 304.207922][ T31] ? watchdog+0xdbf/0x12b0 [ 304.207946][ T31] watchdog+0xddd/0x12b0 [ 304.207972][ T31] ? __pfx_watchdog+0x10/0x10 [ 304.207992][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.208015][ T31] ? __kthread_parkme+0x148/0x220 [ 304.208032][ T31] ? __pfx_watchdog+0x10/0x10 [ 304.208055][ T31] kthread+0x3af/0x750 [ 304.208074][ T31] ? __pfx_kthread+0x10/0x10 [ 304.208096][ T31] ? __pfx_kthread+0x10/0x10 [ 304.208115][ T31] ret_from_fork+0x45/0x80 [ 304.208134][ T31] ? __pfx_kthread+0x10/0x10 [ 304.208152][ T31] ret_from_fork_asm+0x1a/0x30 [ 304.208177][ T31] [ 304.212344][ T31] Kernel Offset: disabled