last executing test programs: 8.341330734s ago: executing program 1 (id=857): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000940d000000000000000000000000000000009f1dcf"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000004000000007468f74996836d8c05e05864b00a3cd43889f03bff95194aa5696c99d06e4dad66fcbfa8cf", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="524144494f0a434420274d6963204374707475726520537769746368272030303030303030303030303030303030303030300a494741494e0a545245424c45202743442043617074757265205377697463682720303030b0303030103030303030303030303030300a524144494f0a53504541"], 0xd3) r6 = syz_io_uring_setup(0x58f, &(0x7f0000000880)={0x0, 0xea52, 0x800, 0x3, 0x380}, &(0x7f0000000900), &(0x7f0000000940)) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) 7.690052835s ago: executing program 3 (id=860): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 7.683205001s ago: executing program 3 (id=861): socket$inet(0x2b, 0x801, 0x0) semtimedop(0x0, &(0x7f00000001c0)=[{0x3, 0xfff8, 0x1000}, {0x6, 0xd, 0x800}, {0x4, 0x6, 0x800}, {0x3}], 0x4f, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getpid() prlimit64(r0, 0xe, &(0x7f0000000180)={0xa, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080)=0xf, 0x4) r7 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r10, 0x545c, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x10, 0x3, 0x1}, 0x18, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x44880, 0x0) 7.642557656s ago: executing program 1 (id=862): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x2d, 0x4e, 0x3a]}}}, 0x4e}]}) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[], 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) futimesat(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r6, 0x10, 0x1, 0x8001, 0x5, {{0x7, 0x4, 0x1, 0x2a, 0x1c, 0x64, 0x0, 0xeb, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x6, "5334123c"}]}}}}}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x3) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) rmdir(&(0x7f00000001c0)='./file0\x00') connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 5.854030534s ago: executing program 2 (id=870): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000000c0)={0x2b, 0x11, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x59c, [0xfffffffffffffffc, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @ra={0x5, 0x2, 0x200}, @generic={0x2, 0x57, "9f0f37bb525565872238b7878f0af2e6da1ed2052ba4c64865a2f3878078cb1a64d4557fde74bf1d2df05694b9b57a5df93b91b11b8457282355c387dac1b66a8a26c3b814c9e3e58a38140fd72b140d2ff0ee95b62ce3"}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x46}]}, 0x98) 5.773396996s ago: executing program 2 (id=873): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000940d000000000000000000000000000000009f1dcf"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000004000000007468f74996836d8c05e05864b00a3cd43889f03bff95194aa5696c99d06e4dad66fcbfa8cf", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') write$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="524144494f0a434420274d6963204374707475726520537769746368272030303030303030303030303030303030303030300a494741494e0a545245424c45202743442043617074757265205377697463682720303030b0303030103030303030303030303030300a524144494f0a53504541"], 0xd3) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) 5.250028751s ago: executing program 3 (id=877): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x700, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=']) 5.195022669s ago: executing program 3 (id=879): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x408902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000440)='net/icmp6\x00') sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 4.528933773s ago: executing program 1 (id=881): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400), &(0x7f0000000040)=0x0) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x4b3d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000000000c02e8ff00000000000100000d0000000000000000000000000000005f00f72ebda5a109e7abe8fa14a232d0aa65da945c3dbf614e1641937ab253c92ced748efec061a4dc052cadb93ff7f41a74c8f74ce8259a"], &(0x7f0000000340)=""/220, 0x3d, 0xdc, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5ed7, 0x10100, 0x2, 0x0, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) io_uring_setup(0x3ea4, &(0x7f00000000c0)={0x0, 0x86f7, 0x10, 0x2, 0x376}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x19, 0x4004, @fd_index=0x2, 0x8, &(0x7f0000000440), 0x0, 0x2}) 4.527660948s ago: executing program 2 (id=882): r0 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000700)={0xfffffffffffffffc, 0x1226000, 0x800, 0x9}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01180200031100004000128008000100767469003400028008000200080000000800060007000000080003007f07000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ea0a000008000300e5f94f111124a90000"], 0x60}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="00000005000000000000000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000001c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x11) shutdown(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r8 = accept(r6, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x3, 0x6, 0x385}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7f, 0x6, 0x4b, 0x39cc1916, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0x49e, 0x3, 0x7, 0xffffffff, 0x71, 0x7, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x5], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0xfff, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0x80000000, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x0, 0x20000005, 0x0, 0x1ef, 0x9184, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xff, 0x2, 0x11, 0x7ff, 0x4, 0x0, 0x1, 0xffff, 0x2b98, 0xa, 0x7, 0x120000, 0x8000be, 0x0, 0xa2ed, 0x2, 0x24], [0x9, 0x4, 0x7, 0xb, 0x5, 0x939, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x4, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0x10, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x92, 0x30b1d693, 0xa1f, 0xf, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x5, 0x2bf, 0x1, 0x200, 0xffff3441, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000002c0)='S\a\x00\x00\b\x00\x00\x00\x00{', 0x6, 0x404c810, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[], 0x0) 3.242811949s ago: executing program 4 (id=890): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x100) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x6, "14df8f52677a4b98075728013317a246"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="270502", 0x3}], 0x1}, 0x0) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0xe4, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x783c2fcc}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16ec7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2632ea8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbde7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d1632b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd42b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3389a5cc}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x287b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b914da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27fcd8b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf76215f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc27c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbae}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2324ba9c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1080090c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26d6ad31}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x11}, 0x0) 3.090635343s ago: executing program 4 (id=891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x9, 0x4c831, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.933940736s ago: executing program 4 (id=893): socket(0x21, 0x80000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x8) syz_open_dev$vim2m(&(0x7f0000000080), 0xffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000ad849d1adf1b0c6e0c1f5356aa385fcd0104000000000000b2a4fbf8553661c4f565a6f27f16f0f623d8601c80123b2ff3c707b7f7945bdbf5507665db5b73ef098dd985e37163cb167ab70971dfd4859977d2983a5f222c2aedd3537b879fc01a544396d4775ed2395f954ca72487d13b1942a2d981a3d0f259eb14f52e075b4eb092362dc4977e2c01128c4aca5864e6fc87e92b593830f771531d9c63167c89afe75510e65089215a2c300c07ed769ac318d6a3eb050ac9b2c8edcd3be5cfb3958cad1de4bd3e5f47483f1e567e7293917f48a210154b55bf1b0b96f098acc4f89c7cffabb85894", @ANYRES16=r1, @ANYBLOB="010003000000ffdbdf250100000009000a007766646e6f0000001c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00020004000000000000000c0002000300000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) 2.234174124s ago: executing program 1 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) memfd_create(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe}, {0x6, 0x1}, {0x6, 0x5}]}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x2d, 0x0, 0x44, 0x1}]}, {0x0, [0x5f, 0x61, 0x30, 0x2e, 0x61, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000b00)=""/4096, 0x63, 0x1000, 0x0, 0x1, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f000001050013000000000008", @ANYBLOB], 0x6c}, 0x1, 0xba01}, 0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r5, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0xff}]}) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@empty, 0x0, r8}) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0xc9}]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @mcast2}}}}}}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x305, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 1.862086701s ago: executing program 0 (id=896): syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x700, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) 1.790486277s ago: executing program 4 (id=897): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x44, r0, 0x801, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "88d43ab161e9013bb562ad5ecd"}]}]}, 0x44}}, 0x0) 1.765582538s ago: executing program 0 (id=898): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) socket$inet(0x2, 0x2000000080005, 0xffffffd2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x80002, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) (fail_nth: 2) 1.731276258s ago: executing program 4 (id=899): r0 = fanotify_init(0x200, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x1000}) ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000740)={0x1fa, 0x8, 0x340, 0x0}) io_uring_enter(r1, 0x48e6, 0x0, 0x2, 0x0, 0x59) r13 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r14 = dup(r13) fanotify_mark(r0, 0x1, 0x48001059, r14, 0x0) execveat(r14, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 922.131764ms ago: executing program 2 (id=900): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) 921.832498ms ago: executing program 0 (id=901): r0 = syz_io_uring_setup(0x7167, &(0x7f0000000040)={0x0, 0x5c51, 0x800, 0x3, 0x28f}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00c004", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\f\x00d\x00\x00\x00\b\x00\r\x00ey\x00\x00'], 0x2c}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000040)={0x0, 0x2, 0x10100, 0x0, 0x29d}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x3e, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r5, 0xd81, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, &(0x7f00000006c0)="9d0923f0792b563330005f93e51f7f83cfddc2e30bc70051f50aa86ea6f71ed9996f019c2d90994356ad36ca14b77d7e8d308cd504abeef8d7782ffa24570ac639", 0x41}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x200) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000"], 0x8) ioctl$KVM_GET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r13, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r13, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r13, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) dup(r0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x6}) r14 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r14, &(0x7f0000000340)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x9e, @loopback, 0xff}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x4000) r15 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030309021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r15, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r15, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 838.83462ms ago: executing program 3 (id=902): mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) r0 = socket(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="0800030008", @ANYRES32], 0x60}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000080)={0x8, 0x6, 0x9, 0xc, 0x2, 0x8}) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff00", 0x5}]) 809.069507ms ago: executing program 2 (id=903): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xf00) 702.89167ms ago: executing program 4 (id=904): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0022190000002bb1e9083ea3aea1aaa1b6a5c115eeb3817e030e27dd57a3c9"], 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r2 = syz_io_uring_setup(0x4417, &(0x7f0000000000)={0x0, 0x45af, 0x1, 0x2, 0xf4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000140)=[0xfd58, 0xc037], 0x2) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x2c}], 0x1}}], 0x1, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000304000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="020000000000000014001280090001007665746800000000040002800a0001002aaaaaaaaa000000080004"], 0x48}}, 0x0) 666.416527ms ago: executing program 1 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00'}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) set_mempolicy(0x1, 0x0, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0108000300", @ANYRES32=r4, @ANYBLOB="11000700e3eebcbcf2ed36dcc1105dc2e8000000"], 0x30}, 0x1, 0x0, 0x0, 0x4091}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000128bd7000fcdbdf251f00000008009a00a0ce5131050092000e00000008ffffff7f0000000400cc00"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x40086603, &(0x7f0000000040)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="31d221cc", @ANYRES16=r8, @ANYBLOB="000428bd7000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x48044}, 0x800) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c03509000000440f22c0410f01c8450f01c566baf80cb827099d8aef66bafc0cec66baf80cb838229a8eef66bafc0cb808000000ef673eec2642d30248b84d9af29b560a9d140f23c00f21f83501000b000f23f80f300f01c5", 0x5c}], 0x1, 0x5a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 613.938335ms ago: executing program 3 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x1}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) lseek(r1, 0x1, 0x4) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 594.398896ms ago: executing program 2 (id=907): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10003, 0x2000000}, 0x0, 0x0) epoll_create(0x2) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'gretap0\x00', @ifru_flags=0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000080)={0x7, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 519.07458ms ago: executing program 0 (id=908): pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140084001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c000240"], 0x140}}, 0x0) 449.779763ms ago: executing program 0 (id=909): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x62d, 0x8, 0x1}, {0xaf2, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x403, 0x9, 0xfffffff8, 0x3}, {0x0, 0x4, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x8002}, {0x8001, 0xfff, 0x9, 0xffff, 0x1, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0xffffca06}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0xb, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x8, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0x5, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x4d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x8001, 0x40}, {0x7, 0x81, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x81, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x810000, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0xffffffff, 0x4, 0x22ff}, {0x2, 0x10001, 0x3, 0x0, 0x10001, 0x7}, {0x1ff, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x8, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0xe5a7}, {0xda1, 0x893, 0x7, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0x12, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x9, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x7fff, 0xbb, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x5}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x5, 0xff}, {0x6, 0xfffffff1, 0x2f2b, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x1605}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0x4, 0x3ee, 0x4}, {0xbfffffe, 0xfff, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x2, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x2}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0x4000b7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0x8, 0x100, 0x1, 0x7, 0x8, 0x200}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x0, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x1}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x200, 0xd, 0xc, 0x4, 0x7, 0x2}, {0x4, 0x4000005, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x2}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0x7fffffff}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0x4, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x9, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x96, 0x1000, 0xfffffffe, 0xfffffffc}, {0x3, 0x8, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x9, 0xc, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x0, 0x2, 0x7}, {0x6, 0x9, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0x4}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0xd, 0x7d4, 0xd, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x80000000, 0x4, 0x6}, {0x1, 0x7fff, 0xfffffffe, 0x8001, 0x8, 0x5}, {0x7e, 0x3, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xad}, {0x7, 0x9, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {}, {0x3}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x65c21a4e149340c8}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) 0s ago: executing program 0 (id=910): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)="50f973509d353c", 0x7) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x29, &(0x7f0000000680), &(0x7f00000006c0)=0xc) kernel console output (not intermixed with test programs): 000001 [ 162.413491][ T7516] R13: 0000000000000000 R14: 00007f04833a6080 R15: 00007ffc754f4458 [ 162.413501][ T7516] [ 162.869629][ T5872] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 162.964874][ T5831] Bluetooth: hci1: ACL packet for unknown connection handle 347 [ 163.095763][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 163.103816][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.119396][ T5872] usb 1-1: config 86 has an invalid interface number: 196 but max is 0 [ 163.127991][ T5872] usb 1-1: config 86 has no interface number 0 [ 163.134830][ T5872] usb 1-1: config 86 interface 196 has no altsetting 0 [ 163.148828][ T5872] usb 1-1: string descriptor 0 read error: -22 [ 163.155235][ T5872] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 163.222867][ T7531] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 163.232179][ T7531] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 163.564047][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.627840][ T5872] msi2500 1-1:86.196: Registered as swradio24 [ 163.635329][ T5872] msi2500 1-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 164.365215][ T7544] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 164.464693][ T7120] Bluetooth: hci5: Frame reassembly failed (-84) [ 165.559592][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.731451][ T9] usb 5-1: config 0 has an invalid interface number: 173 but max is 0 [ 165.759465][ T9] usb 5-1: config 0 has no interface number 0 [ 165.776071][ T9] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=ff.4d [ 165.787136][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.820872][ T2160] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 165.856661][ T9] usb 5-1: Product: syz [ 165.861806][ T9] usb 5-1: Manufacturer: syz [ 165.868911][ T9] usb 5-1: SerialNumber: syz [ 166.029609][ T2160] usb 3-1: Using ep0 maxpacket: 32 [ 166.042060][ T2160] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.058879][ T2160] usb 3-1: config 0 interface 0 has no altsetting 1 [ 166.068729][ T2160] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 166.086808][ T2160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.189814][ T2160] usb 3-1: SerialNumber: syz [ 166.190404][ T9] usb 5-1: config 0 descriptor?? [ 166.196313][ T2160] usb 3-1: config 0 descriptor?? [ 166.208091][ T2160] usb-storage 3-1:0.0: USB Mass Storage device detected [ 166.217635][ T2160] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 166.345731][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 166.345746][ T30] audit: type=1400 audit(1743195961.784:770): avc: denied { execute } for pid=7570 comm="syz.1.419" name="file1" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.345988][ T7571] process 'syz.1.419' launched './file1' with NULL argv: empty string added [ 166.384538][ T30] audit: type=1400 audit(1743195961.834:771): avc: denied { execute_no_trans } for pid=7570 comm="syz.1.419" path="/76/file1" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.409998][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 166.557630][ T9] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 166.581911][ T9] gspca_sunplus: reg_r err -71 [ 166.587586][ T9] sunplus 5-1:0.173: probe with driver sunplus failed with error -71 [ 166.598960][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 166.614879][ T9] usb 5-1: USB disconnect, device number 9 [ 166.780563][ T2160] usb 1-1: USB disconnect, device number 15 [ 167.940634][ T7579] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 167.945531][ T7588] FAULT_INJECTION: forcing a failure. [ 167.945531][ T7588] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 168.026288][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.3.422 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 168.026316][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.026326][ T7588] Call Trace: [ 168.026331][ T7588] [ 168.026337][ T7588] dump_stack_lvl+0x16c/0x1f0 [ 168.026363][ T7588] should_fail_ex+0x512/0x640 [ 168.026390][ T7588] should_fail_alloc_page+0xe7/0x130 [ 168.026412][ T7588] prepare_alloc_pages.constprop.0+0x172/0x570 [ 168.026441][ T7588] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 168.026462][ T7588] ? do_raw_spin_lock+0x12c/0x2b0 [ 168.026484][ T7588] ? find_held_lock+0x2b/0x80 [ 168.026504][ T7588] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.026523][ T7588] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 168.026540][ T7588] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.026559][ T7588] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 168.026576][ T7588] ? stack_depot_save_flags+0x38a/0x9c0 [ 168.026602][ T7588] ? kasan_save_stack+0x42/0x60 [ 168.026618][ T7588] ? kasan_save_stack+0x33/0x60 [ 168.026635][ T7588] ? kasan_save_track+0x14/0x30 [ 168.026651][ T7588] ? __kasan_slab_alloc+0x89/0x90 [ 168.026669][ T7588] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 168.026687][ T7588] ? alloc_vmap_area+0x613/0x2970 [ 168.026710][ T7588] ? __get_vm_area_node+0x1a7/0x300 [ 168.026733][ T7588] ? __vmalloc_node_range_noprof+0x277/0x1540 [ 168.026748][ T7588] ? __bpf_map_area_alloc+0xeb/0x190 [ 168.026767][ T7588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.026795][ T7588] ? policy_nodemask+0xea/0x4e0 [ 168.026816][ T7588] alloc_pages_mpol+0x1fb/0x540 [ 168.026836][ T7588] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 168.026860][ T7588] alloc_pages_noprof+0x131/0x390 [ 168.026880][ T7588] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 168.026896][ T7588] get_free_pages_noprof+0xc/0x40 [ 168.026917][ T7588] kasan_populate_vmalloc_pte+0x2d/0x160 [ 168.026934][ T7588] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 168.026950][ T7588] __apply_to_page_range+0x5f9/0xd30 [ 168.026967][ T7588] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 168.026986][ T7588] ? __pfx___apply_to_page_range+0x10/0x10 [ 168.027008][ T7588] ? alloc_vmap_area+0x872/0x2970 [ 168.027034][ T7588] alloc_vmap_area+0x919/0x2970 [ 168.027064][ T7588] ? __pfx_alloc_vmap_area+0x10/0x10 [ 168.027092][ T7588] __get_vm_area_node+0x1a7/0x300 [ 168.027119][ T7588] __vmalloc_node_range_noprof+0x277/0x1540 [ 168.027136][ T7588] ? array_map_alloc+0x397/0x730 [ 168.027161][ T7588] ? cred_has_capability.isra.0+0x193/0x2f0 [ 168.027182][ T7588] ? array_map_alloc+0x397/0x730 [ 168.027208][ T7588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.027226][ T7588] ? cap_capable+0xb3/0x250 [ 168.027243][ T7588] ? array_map_alloc+0x397/0x730 [ 168.027264][ T7588] __bpf_map_area_alloc+0xeb/0x190 [ 168.027283][ T7588] ? array_map_alloc+0x397/0x730 [ 168.027305][ T7588] array_map_alloc+0x397/0x730 [ 168.027330][ T7588] map_create+0x588/0x1d80 [ 168.027348][ T7588] ? avc_has_perm+0x11a/0x1c0 [ 168.027372][ T7588] ? __pfx_avc_has_perm+0x10/0x10 [ 168.027396][ T7588] ? __pfx_map_create+0x10/0x10 [ 168.027412][ T7588] ? __might_fault+0xe3/0x190 [ 168.027432][ T7588] ? __might_fault+0xe3/0x190 [ 168.027451][ T7588] ? __might_fault+0x13b/0x190 [ 168.027473][ T7588] ? selinux_bpf+0xde/0x130 [ 168.027498][ T7588] __sys_bpf+0x44fa/0x4c80 [ 168.027518][ T7588] ? __pfx___sys_bpf+0x10/0x10 [ 168.027536][ T7588] ? ksys_write+0x190/0x240 [ 168.027556][ T7588] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 168.027585][ T7588] ? fput+0x70/0xf0 [ 168.027605][ T7588] ? ksys_write+0x1b9/0x240 [ 168.027620][ T7588] ? __pfx_ksys_write+0x10/0x10 [ 168.027639][ T7588] __x64_sys_bpf+0x78/0xc0 [ 168.027658][ T7588] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.027676][ T7588] do_syscall_64+0xcd/0x260 [ 168.027697][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.027714][ T7588] RIP: 0033:0x7f0ec178d169 [ 168.027728][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.027744][ T7588] RSP: 002b:00007f0ec266c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.027761][ T7588] RAX: ffffffffffffffda RBX: 00007f0ec19a5fa0 RCX: 00007f0ec178d169 [ 168.027773][ T7588] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 0000000000000000 [ 168.027783][ T7588] RBP: 00007f0ec266c090 R08: 0000000000000000 R09: 0000000000000000 [ 168.027793][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.027802][ T7588] R13: 0000000000000001 R14: 00007f0ec19a5fa0 R15: 00007ffe4d12fb68 [ 168.027820][ T7588] [ 168.824458][ T9] usb 3-1: USB disconnect, device number 15 [ 168.911220][ T30] audit: type=1400 audit(1743195964.354:772): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.040427][ T30] audit: type=1400 audit(1743195964.384:773): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.61 dest=57220 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 169.219653][ T30] audit: type=1400 audit(1743195964.384:774): avc: denied { read } for pid=7598 comm="syz.0.427" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 169.539411][ T7600] sp0: Synchronizing with TNC [ 169.551775][ T30] audit: type=1400 audit(1743195964.384:775): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.601800][ T30] audit: type=1400 audit(1743195964.384:776): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.627381][ T30] audit: type=1400 audit(1743195964.444:777): avc: denied { create } for pid=7598 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.646765][ T30] audit: type=1400 audit(1743195964.454:778): avc: denied { bind } for pid=7598 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.666004][ T30] audit: type=1400 audit(1743195964.454:779): avc: denied { accept } for pid=7598 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.875181][ T7618] bridge0: port 3(netdevsim0) entered blocking state [ 169.882137][ T7618] bridge0: port 3(netdevsim0) entered disabled state [ 169.890155][ T7618] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 169.901192][ T7618] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 169.918772][ T7618] bridge0: port 3(netdevsim0) entered blocking state [ 169.925533][ T7618] bridge0: port 3(netdevsim0) entered forwarding state [ 170.110073][ T2160] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 170.329621][ T5871] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.939047][ T7611] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 171.007884][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 171.021481][ T2160] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 171.032572][ T2160] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.044441][ T2160] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 171.058111][ T2160] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 171.121235][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.140398][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.152612][ T2160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.196297][ T5871] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 171.246542][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.303043][ T2160] usb 1-1: Product: syz [ 171.307237][ T2160] usb 1-1: Manufacturer: syz [ 171.349720][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 171.349737][ T30] audit: type=1326 audit(1743195966.794:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048318d169 code=0x7ffc0000 [ 171.380039][ T5871] usb 4-1: Product: syz [ 171.384211][ T5871] usb 4-1: Manufacturer: syz [ 171.413511][ T2160] usb 1-1: SerialNumber: syz [ 171.425782][ T2160] usb 1-1: config 0 descriptor?? [ 171.534932][ T5871] usb 4-1: SerialNumber: syz [ 171.540974][ T5871] usb 4-1: config 0 descriptor?? [ 171.547083][ T5871] hub 4-1:0.0: bad descriptor, ignoring hub [ 171.553077][ T5871] hub 4-1:0.0: probe with driver hub failed with error -5 [ 171.587415][ T30] audit: type=1326 audit(1743195966.834:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 171.612415][ T5871] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 171.624447][ T7122] usb 4-1: Failed to submit usb control message: -71 [ 171.624664][ T30] audit: type=1326 audit(1743195966.834:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 171.649554][ T7122] usb 4-1: unable to send the bmi data to the device: -71 [ 171.666855][ T7615] netlink: 148 bytes leftover after parsing attributes in process `syz.0.430'. [ 171.688152][ T7122] usb 4-1: unable to get target info from device [ 171.701881][ T7122] usb 4-1: could not get target info (-71) [ 171.720234][ T7122] usb 4-1: could not probe fw (-71) [ 171.807172][ T30] audit: type=1326 audit(1743195966.834:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 171.830144][ T7597] [U] è [ 171.834721][ T30] audit: type=1326 audit(1743195966.834:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 172.253442][ T30] audit: type=1326 audit(1743195966.834:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 172.276936][ T30] audit: type=1326 audit(1743195966.834:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 172.290031][ T24] usb 4-1: USB disconnect, device number 9 [ 172.300860][ T30] audit: type=1326 audit(1743195966.834:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 172.335394][ T2160] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 172.353679][ T30] audit: type=1326 audit(1743195966.834:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 172.508469][ T30] audit: type=1326 audit(1743195966.834:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 172.652058][ T7672] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 172.662998][ T7672] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 173.363560][ T5871] usb 1-1: USB disconnect, device number 16 [ 173.489841][ T2160] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 173.779562][ T2160] usb 5-1: Using ep0 maxpacket: 32 [ 173.790678][ T2160] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 173.803320][ T2160] usb 5-1: config 0 interface 0 has no altsetting 1 [ 173.822240][ T2160] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 173.848365][ T2160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.874546][ T2160] usb 5-1: SerialNumber: syz [ 173.918534][ T2160] usb 5-1: config 0 descriptor?? [ 174.053229][ T2160] usb-storage 5-1:0.0: USB Mass Storage device detected [ 174.201133][ T2160] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 175.613560][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.664961][ T7719] fuse: Unknown parameter '1' [ 175.892716][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 175.957823][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.969563][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 176.044637][ T7724] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 176.053845][ T7724] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 176.382901][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 176.441226][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.470294][ T24] usb 2-1: Product: syz [ 176.478925][ T24] usb 2-1: Manufacturer: syz [ 176.495642][ T24] usb 2-1: SerialNumber: syz [ 176.512743][ T24] usb 2-1: config 0 descriptor?? [ 176.762079][ T7713] netlink: 148 bytes leftover after parsing attributes in process `syz.1.448'. [ 176.853649][ T7733] hub 6-0:1.0: USB hub found [ 176.861740][ T7733] hub 6-0:1.0: 1 port detected [ 176.987659][ T7736] 9pnet_fd: Insufficient options for proto=fd [ 177.014160][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 177.014189][ T30] audit: type=1400 audit(1743195972.414:920): avc: denied { create } for pid=7729 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.454272][ T30] audit: type=1400 audit(1743195972.424:921): avc: denied { mounton } for pid=7729 comm="syz.3.453" path="/88/file0" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.476641][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.632285][ T24] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 178.041057][ T30] audit: type=1400 audit(1743195973.374:922): avc: denied { read } for pid=7731 comm="syz.2.452" dev="nsfs" ino=4026533039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 178.143563][ T30] audit: type=1400 audit(1743195973.374:923): avc: denied { open } for pid=7731 comm="syz.2.452" path="net:[4026533039]" dev="nsfs" ino=4026533039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 178.268898][ T5871] usb 5-1: USB disconnect, device number 10 [ 178.306645][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 178.384985][ T30] audit: type=1400 audit(1743195973.824:924): avc: denied { create } for pid=7752 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.425491][ T30] audit: type=1400 audit(1743195973.854:925): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 178.459436][ T30] audit: type=1400 audit(1743195973.854:926): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 178.509346][ T30] audit: type=1400 audit(1743195973.944:927): avc: denied { lock } for pid=7752 comm="syz.2.457" path="socket:[14650]" dev="sockfs" ino=14650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.752988][ T30] audit: type=1400 audit(1743195974.194:928): avc: denied { execute } for pid=7756 comm="syz.2.459" path="/94/cpu.stat" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 179.232182][ T5871] usb 2-1: USB disconnect, device number 13 [ 179.239675][ T30] audit: type=1400 audit(1743195974.674:929): avc: denied { create } for pid=7762 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.640778][ T7771] fuse: Bad value for 'fd' [ 179.949648][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 180.127801][ T24] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 180.149898][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.174334][ T24] usb 1-1: config 0 descriptor?? [ 180.184786][ T24] usb 1-1: selecting invalid altsetting 1 [ 180.194950][ T24] flexcop_usb: set interface failed. [ 180.218492][ T24] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 180.550241][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.558754][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.578282][ T24] usb 1-1: USB disconnect, device number 17 [ 180.788030][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 180.794453][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 180.828022][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 180.836188][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 180.843189][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 181.951323][ T7823] tmpfs: Unknown parameter '' [ 182.288917][ T7834] fuse: Bad value for 'fd' [ 182.306021][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 182.306037][ T30] audit: type=1400 audit(1743195977.744:947): avc: denied { create } for pid=7831 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.376709][ T30] audit: type=1400 audit(1743195977.744:948): avc: denied { write } for pid=7831 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.400989][ T30] audit: type=1400 audit(1743195977.744:949): avc: denied { nlmsg_write } for pid=7831 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.049595][ T5869] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.471448][ T5869] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.555503][ T5869] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 183.667963][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.679204][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.688291][ T5869] usb 4-1: Product: syz [ 183.692556][ T5869] usb 4-1: Manufacturer: syz [ 183.698261][ T5869] usb 4-1: SerialNumber: syz [ 184.091746][ T7836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.756942][ T30] audit: type=1326 audit(1743195980.194:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 184.850355][ T30] audit: type=1326 audit(1743195980.194:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 185.089413][ T7836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 185.113442][ T30] audit: type=1326 audit(1743195980.194:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 185.164749][ T30] audit: type=1326 audit(1743195980.194:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 185.194302][ T30] audit: type=1326 audit(1743195980.194:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 185.222094][ T30] audit: type=1326 audit(1743195980.194:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 185.268413][ T30] audit: type=1326 audit(1743195980.194:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 185.310642][ T5869] cdc_mbim 4-1:1.0: failed to get mac address [ 185.432043][ T5869] cdc_mbim 4-1:1.0: bind() failure [ 185.455328][ T5869] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 185.915509][ T5869] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 185.930239][ T5869] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 185.981553][ T5869] usb 4-1: USB disconnect, device number 10 [ 186.157150][ T5828] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 186.210678][ T7906] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 186.227371][ T7908] tipc: Started in network mode [ 186.249261][ T7908] tipc: Node identity 4, cluster identity 4711 [ 186.272907][ T7908] tipc: Node number set to 4 [ 187.396578][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 187.396593][ T30] audit: type=1400 audit(1743195982.834:1022): avc: denied { mount } for pid=7929 comm="syz.3.501" name="/" dev="autofs" ino=15673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 187.830921][ T5873] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 187.857421][ T30] audit: type=1400 audit(1743195983.294:1023): avc: denied { mount } for pid=7941 comm="syz.2.504" name="/" dev="ramfs" ino=15697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 187.938241][ T30] audit: type=1400 audit(1743195983.324:1024): avc: denied { create } for pid=7941 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.978248][ T30] audit: type=1400 audit(1743195983.324:1025): avc: denied { getopt } for pid=7941 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.019639][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 188.026367][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.045678][ T5873] usb 1-1: config 0 interface 0 has no altsetting 1 [ 188.092126][ T5873] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 188.109682][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.118387][ T5873] usb 1-1: SerialNumber: syz [ 188.133525][ T5873] usb 1-1: config 0 descriptor?? [ 188.154081][ T5873] usb-storage 1-1:0.0: USB Mass Storage device detected [ 188.188424][ T5873] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 188.274410][ T30] audit: type=1400 audit(1743195983.714:1026): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 188.438003][ T5871] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 188.559620][ T5869] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 188.600937][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.622963][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.657173][ T7971] fuse: Bad value for 'fd' [ 188.664502][ T5871] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.768776][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 188.779748][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.788274][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.798808][ T5871] usb 2-1: config 0 descriptor?? [ 188.803803][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 189.001654][ T5869] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 189.010991][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.022326][ T5869] usb 4-1: Product: syz [ 189.029638][ T5869] usb 4-1: Manufacturer: syz [ 189.034632][ T5869] usb 4-1: SerialNumber: syz [ 189.041563][ T5869] usb 4-1: config 0 descriptor?? [ 189.095463][ T5871] usbhid 2-1:0.0: can't add hid device: -71 [ 189.103764][ T5871] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 189.127338][ T5871] usb 2-1: USB disconnect, device number 14 [ 189.496998][ T5869] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 190.099596][ T5871] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.538844][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 190.563345][ T5871] usb 2-1: config index 0 descriptor too short (expected 36, got 27) [ 190.577947][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.596979][ T5869] usb 1-1: USB disconnect, device number 18 [ 190.608421][ T5871] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 190.618064][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.628308][ T5871] usb 2-1: config 0 descriptor?? [ 190.634692][ T5871] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 190.688221][ T5871] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 190.867991][ T30] audit: type=1400 audit(1743195986.304:1027): avc: denied { write } for pid=7947 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.891420][ T5869] usb 2-1: USB disconnect, device number 15 [ 190.971295][ T8018] gfs2: gfs2 mount does not exist [ 191.408097][ T5871] usb 4-1: USB disconnect, device number 11 [ 191.549724][ T30] audit: type=1400 audit(1743195986.984:1028): avc: denied { create } for pid=8033 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 191.577824][ T30] audit: type=1400 audit(1743195987.014:1029): avc: denied { ioctl } for pid=8033 comm="syz.1.514" path="socket:[15097]" dev="sockfs" ino=15097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.078260][ T30] audit: type=1400 audit(1743195987.514:1030): avc: denied { setopt } for pid=8037 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.100631][ T30] audit: type=1400 audit(1743195987.514:1031): avc: denied { connect } for pid=8033 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 192.155102][ T8034] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 192.375465][ T8050] xt_hashlimit: size too large, truncated to 1048576 [ 192.508060][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 192.508085][ T30] audit: type=1400 audit(1743195987.934:1038): avc: denied { getopt } for pid=8049 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.669642][ T5871] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 192.760463][ T70] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.881472][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 192.890222][ T5871] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 192.934837][ T5871] usb 1-1: config 0 has no interface number 0 [ 192.964926][ T5871] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.976742][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.996822][ T5871] usb 1-1: Product: syz [ 193.002059][ T5871] usb 1-1: Manufacturer: syz [ 193.008335][ T5871] usb 1-1: SerialNumber: syz [ 193.022772][ T5871] usb 1-1: config 0 descriptor?? [ 193.036226][ T5871] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 193.156559][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 193.277908][ T5871] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 193.291954][ T5871] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 193.926820][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.933848][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.205891][ T30] audit: type=1400 audit(1743195989.644:1039): avc: denied { create } for pid=8046 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.229924][ T8114] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.524'. [ 194.238999][ T8114] net_ratelimit: 9 callbacks suppressed [ 194.239013][ T8114] openvswitch: netlink: Missing key (keys=40, expected=80) [ 194.464486][ T30] audit: type=1400 audit(1743195989.644:1040): avc: denied { accept } for pid=8046 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.501329][ T5872] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.599198][ T30] audit: type=1400 audit(1743195989.774:1041): avc: denied { create } for pid=8046 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 194.654534][ T30] audit: type=1400 audit(1743195989.904:1042): avc: denied { execute_no_trans } for pid=8111 comm="syz.2.524" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.715502][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 194.726919][ T5828] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 194.865022][ T8126] gfs2: gfs2 mount does not exist [ 194.887244][ T8126] bridge0: port 1(netdevsim0) entered blocking state [ 194.894122][ T8126] bridge0: port 1(netdevsim0) entered disabled state [ 194.901337][ T8126] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 194.912039][ T8126] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 194.921342][ T8126] bridge0: port 1(netdevsim0) entered blocking state [ 194.928060][ T8126] bridge0: port 1(netdevsim0) entered forwarding state [ 195.376722][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.578807][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 195.596352][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 195.600933][ T2160] usb 1-1: USB disconnect, device number 19 [ 195.632806][ T2160] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 195.652101][ T30] audit: type=1400 audit(1743195991.064:1043): avc: denied { create } for pid=8129 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.712934][ T2160] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 195.733645][ T5872] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 195.759590][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.767665][ T5872] usb 2-1: Product: syz [ 195.771894][ T5872] usb 2-1: Manufacturer: syz [ 195.772611][ T30] audit: type=1400 audit(1743195991.134:1044): avc: denied { ioctl } for pid=8138 comm="syz.0.529" path="socket:[15870]" dev="sockfs" ino=15870 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.776501][ T5872] usb 2-1: SerialNumber: syz [ 195.854894][ T2160] quatech2 1-1:0.51: device disconnected [ 196.232164][ T5872] usb 2-1: config 0 descriptor?? [ 196.237999][ T30] audit: type=1400 audit(1743195991.674:1045): avc: denied { read } for pid=8138 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.459603][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.829786][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 197.113526][ T5872] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 197.145708][ T5873] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.159678][ T5873] usb 4-1: config 0 has no interface number 0 [ 197.165830][ T5873] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.176852][ T5873] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.187089][ T8167] overlayfs: missing 'lowerdir' [ 197.192169][ T5873] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 197.202390][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.345185][ T30] audit: type=1400 audit(1743195992.674:1046): avc: denied { setopt } for pid=8164 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.365512][ T5873] usb 4-1: config 0 descriptor?? [ 197.909813][ T8139] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 198.197854][ T24] usb 2-1: USB disconnect, device number 16 [ 198.333543][ T5873] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0004/input/input9 [ 198.345412][ T2160] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 198.355658][ T30] audit: type=1400 audit(1743195993.794:1047): avc: denied { read } for pid=5179 comm="acpid" name="mouse1" dev="devtmpfs" ino=2866 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.378158][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.388935][ T30] audit: type=1400 audit(1743195993.794:1048): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2866 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.412372][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.423374][ T30] audit: type=1400 audit(1743195993.854:1049): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2866 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.493043][ T5873] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0004/input/input10 [ 198.516364][ T5873] uclogic 0003:28BD:0071.0004: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 198.532830][ T8157] cgroup: No subsys list or none specified [ 198.547816][ T8157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.559620][ T5869] usb 4-1: USB disconnect, device number 12 [ 198.622250][ T2160] usb 3-1: Using ep0 maxpacket: 16 [ 198.634274][ T2160] usb 3-1: config 0 has no interfaces? [ 198.742259][ T2160] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.751551][ T2160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.760406][ T2160] usb 3-1: Product: syz [ 198.764648][ T2160] usb 3-1: Manufacturer: syz [ 198.769246][ T2160] usb 3-1: SerialNumber: syz [ 199.230228][ T2160] usb 3-1: config 0 descriptor?? [ 199.691985][ T30] audit: type=1400 audit(1743195995.134:1050): avc: denied { connect } for pid=8246 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.732175][ T30] audit: type=1400 audit(1743195995.154:1051): avc: denied { write } for pid=8246 comm="syz.4.540" path="socket:[15937]" dev="sockfs" ino=15937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.758363][ T30] audit: type=1400 audit(1743195995.164:1052): avc: denied { read write } for pid=8246 comm="syz.4.540" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 199.914671][ T30] audit: type=1400 audit(1743195995.164:1053): avc: denied { open } for pid=8246 comm="syz.4.540" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 199.939301][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.952652][ T30] audit: type=1400 audit(1743195995.164:1054): avc: denied { ioctl } for pid=8246 comm="syz.4.540" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 199.977940][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.982925][ T30] audit: type=1400 audit(1743195996.414:1055): avc: denied { create } for pid=8258 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 200.988878][ T8262] lo speed is unknown, defaulting to 1000 [ 201.032017][ T30] audit: type=1400 audit(1743195996.414:1056): avc: denied { ioctl } for pid=8258 comm="syz.1.544" path="socket:[16470]" dev="sockfs" ino=16470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.130314][ T5872] usb 3-1: USB disconnect, device number 16 [ 202.963758][ T8342] Cannot find del_set index 1 as target [ 203.408446][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 203.408461][ T30] audit: type=1400 audit(1743195998.844:1066): avc: denied { name_connect } for pid=8337 comm="syz.3.550" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 203.437565][ T8352] sg_read: process 360 (syz.3.550) changed security contexts after opening file descriptor, this is not allowed. [ 203.814097][ T30] audit: type=1400 audit(1743195998.884:1067): avc: denied { append } for pid=8337 comm="syz.3.550" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 204.035428][ T5873] IPVS: starting estimator thread 0... [ 204.211163][ T8365] IPVS: using max 56 ests per chain, 134400 per kthread [ 204.335888][ T8372] gfs2: gfs2 mount does not exist [ 205.782526][ T8395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.568'. [ 206.576152][ T30] audit: type=1400 audit(1743196001.994:1068): avc: denied { ioctl } for pid=8404 comm="syz.4.571" path="socket:[16742]" dev="sockfs" ino=16742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.170066][ T8416] gfs2: gfs2 mount does not exist [ 207.446304][ T8406] Illegal XDP return value 4294967274 on prog (id 111) dev N/A, expect packet loss! [ 207.573520][ T8427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.579'. [ 207.695414][ T8434] lo speed is unknown, defaulting to 1000 [ 209.473225][ T8480] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 209.482152][ T8480] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 209.800178][ T30] audit: type=1400 audit(1743196005.224:1069): avc: denied { ioctl } for pid=8487 comm="syz.4.587" path="socket:[16229]" dev="sockfs" ino=16229 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.152555][ T8501] gfs2: gfs2 mount does not exist [ 210.167651][ T8501] bridge0: port 3(netdevsim0) entered blocking state [ 210.174510][ T8501] bridge0: port 3(netdevsim0) entered disabled state [ 210.181885][ T8501] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 210.193047][ T8501] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 210.201390][ T8501] bridge0: port 3(netdevsim0) entered blocking state [ 210.208092][ T8501] bridge0: port 3(netdevsim0) entered forwarding state [ 210.223660][ T2160] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 210.660620][ T2160] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 210.671601][ T2160] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 211.072814][ T2160] usb 5-1: can't read configurations, error -61 [ 211.099178][ T8508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.590'. [ 211.186744][ T8510] netlink: 'syz.3.591': attribute type 7 has an invalid length. [ 211.197068][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 211.229841][ T2160] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.432779][ T30] audit: type=1400 audit(1743196006.874:1070): avc: denied { kexec_image_load } for pid=8509 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 212.169101][ T2160] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 212.187636][ T2160] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 212.199377][ T2160] usb 5-1: can't read configurations, error -61 [ 212.208278][ T2160] usb usb5-port1: attempt power cycle [ 212.228591][ T30] audit: type=1400 audit(1743196007.664:1071): avc: denied { create } for pid=8525 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 212.249716][ T5872] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 212.395502][ T30] audit: type=1400 audit(1743196007.834:1072): avc: denied { connect } for pid=8525 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.416408][ T5872] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 212.425524][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.434530][ T5872] usb 3-1: config 0 descriptor?? [ 212.446218][ T30] audit: type=1400 audit(1743196007.884:1073): avc: denied { setopt } for pid=8525 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.500804][ T30] audit: type=1400 audit(1743196007.944:1074): avc: denied { write } for pid=8525 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.589642][ T2160] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 212.610395][ T2160] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 212.619435][ T2160] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 212.627043][ T2160] usb 5-1: can't read configurations, error -61 [ 212.644659][ T8516] netlink: 256 bytes leftover after parsing attributes in process `syz.2.592'. [ 212.759627][ T2160] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.790937][ T2160] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 212.800369][ T2160] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 212.810548][ T2160] usb 5-1: can't read configurations, error -61 [ 212.817296][ T2160] usb usb5-port1: unable to enumerate USB device [ 212.923225][ T30] audit: type=1400 audit(1743196008.364:1075): avc: denied { create } for pid=8537 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.942648][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 213.401328][ T30] audit: type=1400 audit(1743196008.364:1076): avc: denied { create } for pid=8537 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.421239][ T30] audit: type=1400 audit(1743196008.364:1077): avc: denied { write } for pid=8537 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.442838][ T30] audit: type=1400 audit(1743196008.364:1078): avc: denied { bind } for pid=8537 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.724774][ T8552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 214.780901][ T5872] usb 3-1: string descriptor 0 read error: -71 [ 214.787110][ T5872] ldusb 3-1:0.0: Interrupt in endpoint not found [ 214.794966][ T5872] usb 3-1: USB disconnect, device number 17 [ 214.822896][ T8569] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 214.831910][ T8569] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 215.385453][ T8579] lo speed is unknown, defaulting to 1000 [ 215.519012][ T8614] nfs: Bad value for 'source' [ 215.564804][ T8611] overlayfs: missing 'lowerdir' [ 215.599985][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 215.600000][ T30] audit: type=1400 audit(1743196011.024:1081): avc: denied { ioctl } for pid=8613 comm="syz.1.607" path="socket:[17157]" dev="sockfs" ino=17157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.734399][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 215.755784][ T30] audit: type=1400 audit(1743196011.044:1082): avc: denied { getopt } for pid=8571 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.793448][ T30] audit: type=1400 audit(1743196011.104:1083): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 215.936909][ T30] audit: type=1400 audit(1743196011.104:1084): avc: denied { search } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.469029][ T30] audit: type=1400 audit(1743196011.104:1085): avc: denied { append } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.642385][ T30] audit: type=1400 audit(1743196011.104:1086): avc: denied { open } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.667148][ T30] audit: type=1400 audit(1743196011.104:1087): avc: denied { getattr } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.539152][ T5869] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 217.570525][ T8655] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 217.579414][ T8655] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 217.710757][ T5869] usb 2-1: device descriptor read/64, error -71 [ 218.139624][ T5869] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 218.269299][ T8680] gfs2: gfs2 mount does not exist [ 218.291757][ T8681] overlayfs: missing 'lowerdir' [ 220.623805][ T30] audit: type=1400 audit(1743196016.064:1088): avc: denied { create } for pid=8687 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.743024][ T30] audit: type=1400 audit(1743196016.184:1089): avc: denied { bind } for pid=8694 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.842506][ T30] audit: type=1400 audit(1743196016.284:1090): avc: denied { read } for pid=8700 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.288551][ T30] audit: type=1400 audit(1743196017.724:1091): avc: denied { ioctl } for pid=8700 comm="syz.4.627" path="socket:[17682]" dev="sockfs" ino=17682 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.282874][ T8735] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 223.291938][ T8735] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 223.757732][ T8749] gfs2: gfs2 mount does not exist [ 223.836828][ T8752] gfs2: gfs2 mount does not exist [ 224.251779][ T30] audit: type=1400 audit(1743196019.674:1092): avc: denied { getopt } for pid=8750 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.293371][ T30] audit: type=1400 audit(1743196019.674:1093): avc: denied { setopt } for pid=8750 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.452108][ T30] audit: type=1400 audit(1743196019.894:1094): avc: denied { create } for pid=8754 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 224.540042][ T30] audit: type=1400 audit(1743196019.954:1095): avc: denied { create } for pid=8750 comm="syz.2.636" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.629742][ T30] audit: type=1400 audit(1743196019.954:1096): avc: denied { mounton } for pid=8750 comm="syz.2.636" path="/126/file0" dev="tmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.699556][ T5869] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 224.739220][ T30] audit: type=1400 audit(1743196019.954:1097): avc: denied { mount } for pid=8750 comm="syz.2.636" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 225.349537][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 225.484418][ T5869] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 225.498162][ T5869] usb 5-1: config 0 has no interface number 0 [ 225.509528][ T5869] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.524653][ T5869] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.536219][ T5869] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 225.551486][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 225.560278][ T5869] usb 5-1: Product: syz [ 225.564447][ T5869] usb 5-1: SerialNumber: syz [ 225.582932][ T5869] usb 5-1: config 0 descriptor?? [ 226.490238][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 226.490256][ T30] audit: type=1326 audit(1743196021.194:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 226.550874][ T5869] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 226.558204][ T5869] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input11 [ 226.736067][ T30] audit: type=1326 audit(1743196021.194:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 226.794647][ T30] audit: type=1326 audit(1743196021.204:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 226.880829][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.888325][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.892008][ T5873] usb 5-1: USB disconnect, device number 15 [ 226.895253][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 226.930711][ T30] audit: type=1326 audit(1743196021.204:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 226.954548][ T30] audit: type=1326 audit(1743196021.214:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 226.978145][ T30] audit: type=1326 audit(1743196021.224:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 227.003411][ T30] audit: type=1326 audit(1743196021.224:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 227.058813][ T5873] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 227.529522][ T30] audit: type=1326 audit(1743196021.224:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 227.554163][ T30] audit: type=1326 audit(1743196021.234:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 227.564710][ T8830] lo speed is unknown, defaulting to 1000 [ 227.633989][ T30] audit: type=1326 audit(1743196021.244:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 227.745012][ T8853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.018841][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 228.108023][ T8879] gfs2: gfs2 mount does not exist [ 229.168555][ T8889] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 230.616573][ T8912] syz.2.659: attempt to access beyond end of device [ 230.616573][ T8912] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 230.655611][ T8912] XFS (loop2): SB validate failed with error -5. [ 230.687088][ T8903] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 230.819651][ T5872] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 230.830326][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 230.991616][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 230.999898][ T5872] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 231.009443][ T5872] usb 4-1: config 0 has no interface number 0 [ 231.018311][ T5872] usb 4-1: config 0 interface 184 has no altsetting 0 [ 231.027404][ T5872] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 231.039683][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.111032][ T8938] gfs2: gfs2 mount does not exist [ 231.432746][ T5872] usb 4-1: Product: syz [ 231.444232][ T5872] usb 4-1: Manufacturer: syz [ 231.463475][ T5872] usb 4-1: SerialNumber: syz [ 231.471438][ T5872] usb 4-1: config 0 descriptor?? [ 231.481231][ T5872] smsc75xx v1.0.0 [ 231.489593][ T5869] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 231.639587][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 231.651411][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.665700][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 231.676043][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.688912][ T5869] usb 3-1: config 0 descriptor?? [ 231.701428][ T5869] hub 3-1:0.0: bad descriptor, ignoring hub [ 231.707590][ T5869] hub 3-1:0.0: probe with driver hub failed with error -5 [ 231.716037][ T5869] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 231.977937][ T8949] FAULT_INJECTION: forcing a failure. [ 231.977937][ T8949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.991380][ T8949] CPU: 0 UID: 0 PID: 8949 Comm: syz.2.664 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 231.991401][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.991410][ T8949] Call Trace: [ 231.991415][ T8949] [ 231.991420][ T8949] dump_stack_lvl+0x16c/0x1f0 [ 231.991444][ T8949] should_fail_ex+0x512/0x640 [ 231.991468][ T8949] _copy_from_user+0x2e/0xd0 [ 231.991486][ T8949] memdup_user+0x7d/0xe0 [ 231.991510][ T8949] strndup_user+0x78/0xe0 [ 231.991534][ T8949] __do_sys_fsconfig+0x2e1/0xbe0 [ 231.991558][ T8949] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 231.991580][ T8949] ? fput+0x70/0xf0 [ 231.991606][ T8949] do_syscall_64+0xcd/0x260 [ 231.991627][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.991649][ T8949] RIP: 0033:0x7fa25318d169 [ 231.991662][ T8949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.991677][ T8949] RSP: 002b:00007fa253faf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 231.991692][ T8949] RAX: ffffffffffffffda RBX: 00007fa2533a6080 RCX: 00007fa25318d169 [ 231.991703][ T8949] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 231.991713][ T8949] RBP: 00007fa253faf090 R08: 0000000000000000 R09: 0000000000000000 [ 231.991721][ T8949] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 231.991730][ T8949] R13: 0000000000000000 R14: 00007fa2533a6080 R15: 00007fff22389dd8 [ 231.991748][ T8949] [ 232.419825][ T5869] usb 3-1: USB disconnect, device number 18 [ 232.812300][ T5872] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 233.062614][ T8914] pimreg: entered allmulticast mode [ 233.073365][ T8914] pimreg: left allmulticast mode [ 233.166724][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 233.166752][ T30] audit: type=1400 audit(1743196028.604:1177): avc: denied { read write } for pid=8973 comm="syz.4.672" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 233.755712][ T8985] netlink: 596 bytes leftover after parsing attributes in process `syz.3.661'. [ 233.770126][ T30] audit: type=1400 audit(1743196028.604:1178): avc: denied { open } for pid=8973 comm="syz.4.672" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 233.857040][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 233.914822][ T30] audit: type=1400 audit(1743196029.354:1179): avc: denied { bind } for pid=8986 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 233.937273][ T30] audit: type=1400 audit(1743196029.354:1180): avc: denied { name_bind } for pid=8986 comm="syz.4.673" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 233.965146][ T5872] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 233.976229][ T30] audit: type=1400 audit(1743196029.354:1181): avc: denied { node_bind } for pid=8986 comm="syz.4.673" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 233.998609][ T5872] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 234.008302][ T5872] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 234.024561][ T30] audit: type=1400 audit(1743196029.354:1182): avc: denied { listen } for pid=8986 comm="syz.4.673" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 234.045139][ T5872] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 234.064526][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 234.065968][ T5872] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 234.082650][ T30] audit: type=1400 audit(1743196029.384:1183): avc: denied { write } for pid=8986 comm="syz.4.673" laddr=127.0.0.1 lport=48986 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 234.110330][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 234.118808][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.129050][ T5872] usb 4-1: USB disconnect, device number 13 [ 234.145273][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 234.154526][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 234.165108][ T9] usb 3-1: Manufacturer: syz [ 234.184808][ T9] usb 3-1: config 0 descriptor?? [ 234.509795][ T9] rc_core: IR keymap rc-hauppauge not found [ 234.516429][ T9] Registered IR keymap rc-empty [ 234.539978][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 234.555976][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 234.584070][ T9] usb 3-1: USB disconnect, device number 19 [ 235.825556][ T30] audit: type=1326 audit(1743196030.664:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 235.863468][ T30] audit: type=1326 audit(1743196030.674:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 235.886917][ T30] audit: type=1326 audit(1743196030.924:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 236.009431][ T9048] xt_CT: No such helper "pptp" [ 236.229623][ T5873] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 236.851852][ T9063] random: crng reseeded on system resumption [ 238.306338][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 238.306354][ T30] audit: type=1400 audit(1743196032.294:1197): avc: denied { read write } for pid=9053 comm="syz.3.683" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 238.306385][ T30] audit: type=1400 audit(1743196032.294:1198): avc: denied { ioctl open } for pid=9053 comm="syz.3.683" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 238.306413][ T30] audit: type=1400 audit(1743196032.564:1199): avc: denied { bind } for pid=9053 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.306440][ T30] audit: type=1400 audit(1743196032.574:1200): avc: denied { name_bind } for pid=9053 comm="syz.3.683" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 238.306466][ T30] audit: type=1400 audit(1743196032.574:1201): avc: denied { node_bind } for pid=9053 comm="syz.3.683" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 238.306512][ T30] audit: type=1400 audit(1743196032.574:1202): avc: denied { append } for pid=9053 comm="syz.3.683" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 238.529601][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 239.040413][ T5873] usb 3-1: device descriptor read/all, error -71 [ 239.203281][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 239.259280][ T9079] fuse: Invalid rootmode [ 239.695383][ T9089] lo speed is unknown, defaulting to 1000 [ 240.007628][ T30] audit: type=1400 audit(1743196035.444:1203): avc: denied { getopt } for pid=9131 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 240.091934][ T30] audit: type=1326 audit(1743196035.524:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 240.143147][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 240.154960][ T30] audit: type=1326 audit(1743196035.524:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 240.178242][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.237455][ T30] audit: type=1326 audit(1743196035.524:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 240.260772][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.389663][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 240.429395][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 240.539656][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 240.549178][ T9] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 240.558287][ T9] usb 3-1: config 0 has no interface number 0 [ 240.576025][ T9] usb 3-1: config 0 interface 190 has no altsetting 0 [ 240.593440][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=30.a3 [ 240.601975][ T9167] lo speed is unknown, defaulting to 1000 [ 240.607028][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.616361][ T9] usb 3-1: Product: syz [ 240.620782][ T9] usb 3-1: Manufacturer: syz [ 240.625888][ T9] usb 3-1: SerialNumber: syz [ 240.632707][ T9] usb 3-1: config 0 descriptor?? [ 240.641163][ T9] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 241.501888][ T9] usb 3-1: selecting invalid altsetting 0 [ 241.520789][ T2326] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 241.558608][ T2326] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 241.625844][ T5872] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 241.680034][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 241.775098][ T9219] netlink: 96 bytes leftover after parsing attributes in process `syz.4.710'. [ 241.804887][ T5872] usb 4-1: config 0 has an invalid interface number: 254 but max is 0 [ 241.826635][ T5872] usb 4-1: config 0 has no interface number 0 [ 241.855434][ T5872] usb 4-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=f1.99 [ 241.887309][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.919872][ T5872] usb 4-1: config 0 descriptor?? [ 241.930034][ T24] usb 3-1: USB disconnect, device number 22 [ 242.133680][ T9223] FAULT_INJECTION: forcing a failure. [ 242.133680][ T9223] name failslab, interval 1, probability 0, space 0, times 0 [ 242.150222][ T9223] CPU: 1 UID: 0 PID: 9223 Comm: syz.1.711 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 242.150246][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.150256][ T9223] Call Trace: [ 242.150261][ T9223] [ 242.150267][ T9223] dump_stack_lvl+0x16c/0x1f0 [ 242.150298][ T9223] should_fail_ex+0x512/0x640 [ 242.150322][ T9223] ? fs_reclaim_acquire+0xae/0x150 [ 242.150348][ T9223] ? tomoyo_encode2+0x100/0x3e0 [ 242.150368][ T9223] should_failslab+0xc2/0x120 [ 242.150388][ T9223] __kmalloc_noprof+0xd2/0x510 [ 242.150405][ T9223] ? d_absolute_path+0x136/0x1a0 [ 242.150431][ T9223] tomoyo_encode2+0x100/0x3e0 [ 242.150452][ T9223] tomoyo_encode+0x29/0x50 [ 242.150471][ T9223] tomoyo_realpath_from_path+0x18f/0x6e0 [ 242.150497][ T9223] tomoyo_mount_acl+0x1ae/0x850 [ 242.150514][ T9223] ? kernel_text_address+0x8d/0x100 [ 242.150532][ T9223] ? __kernel_text_address+0xd/0x40 [ 242.150548][ T9223] ? unwind_get_return_address+0x59/0xa0 [ 242.150569][ T9223] ? arch_stack_walk+0xa6/0x100 [ 242.150590][ T9223] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 242.150628][ T9223] ? tomoyo_domain+0xbb/0x150 [ 242.150649][ T9223] ? tomoyo_profile+0x47/0x60 [ 242.150673][ T9223] tomoyo_mount_permission+0x16d/0x420 [ 242.150691][ T9223] ? tomoyo_mount_permission+0x14f/0x420 [ 242.150712][ T9223] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 242.150738][ T9223] ? get_current_fs_domain+0x184/0x1f0 [ 242.150764][ T9223] security_sb_mount+0x9b/0x260 [ 242.150784][ T9223] path_mount+0x128/0x1f30 [ 242.150805][ T9223] ? kmem_cache_free+0x2d4/0x4d0 [ 242.150822][ T9223] ? __pfx_path_mount+0x10/0x10 [ 242.150844][ T9223] ? putname+0x154/0x1a0 [ 242.150867][ T9223] __x64_sys_mount+0x28d/0x310 [ 242.150888][ T9223] ? __pfx___x64_sys_mount+0x10/0x10 [ 242.150907][ T9223] ? rcu_is_watching+0x12/0xc0 [ 242.150929][ T9223] do_syscall_64+0xcd/0x260 [ 242.150950][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.150966][ T9223] RIP: 0033:0x7f391b58d169 [ 242.150979][ T9223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.150995][ T9223] RSP: 002b:00007f391c491038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.151012][ T9223] RAX: ffffffffffffffda RBX: 00007f391b7a5fa0 RCX: 00007f391b58d169 [ 242.151023][ T9223] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 242.151033][ T9223] RBP: 00007f391c491090 R08: 0000200000000280 R09: 0000000000000000 [ 242.151043][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.151052][ T9223] R13: 0000000000000000 R14: 00007f391b7a5fa0 R15: 00007fff43ec9ce8 [ 242.151069][ T9223] [ 242.151080][ T9223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.557376][ T9171] netlink: 'syz.3.708': attribute type 12 has an invalid length. [ 242.568102][ T9171] netlink: 'syz.3.708': attribute type 29 has an invalid length. [ 242.592156][ T9171] netlink: 148 bytes leftover after parsing attributes in process `syz.3.708'. [ 242.604644][ T9171] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 242.613222][ T9171] netlink: 'syz.3.708': attribute type 2 has an invalid length. [ 242.621214][ T9171] netlink: 39 bytes leftover after parsing attributes in process `syz.3.708'. [ 243.206619][ T9231] netlink: 'syz.0.713': attribute type 2 has an invalid length. [ 243.241395][ T5872] usb 4-1: string descriptor 0 read error: -71 [ 243.248673][ T5872] mct_u232 4-1:0.254: MCT U232 converter detected [ 243.303935][ T5872] mct_u232 ttyUSB0: expected endpoint missing [ 243.351742][ T5872] usb 4-1: USB disconnect, device number 14 [ 243.368848][ T5872] mct_u232 4-1:0.254: device disconnected [ 243.459545][ T5869] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 243.609529][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 243.625764][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.634535][ T5869] usb 5-1: config 86 has an invalid interface number: 196 but max is 0 [ 243.642943][ T5869] usb 5-1: config 86 has no interface number 0 [ 243.656929][ T5869] usb 5-1: config 86 interface 196 has no altsetting 0 [ 243.700100][ T5869] usb 5-1: string descriptor 0 read error: -22 [ 243.706572][ T5869] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 243.731948][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.802992][ T5869] msi2500 5-1:86.196: Registered as swradio24 [ 243.809099][ T5869] msi2500 5-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 243.909770][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 243.909787][ T30] audit: type=1326 audit(1743196039.334:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 243.940837][ T30] audit: type=1326 audit(1743196039.334:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 243.993639][ T30] audit: type=1326 audit(1743196039.334:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 244.104433][ T30] audit: type=1326 audit(1743196039.334:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 244.129612][ T30] audit: type=1326 audit(1743196039.334:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 244.158266][ T30] audit: type=1326 audit(1743196039.334:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 244.185431][ T30] audit: type=1326 audit(1743196039.334:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 244.219578][ T5825] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 244.243213][ T9279] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 244.253175][ T7653] Bluetooth: hci5: Frame reassembly failed (-84) [ 244.283234][ T30] audit: type=1326 audit(1743196039.334:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 244.442036][ T30] audit: type=1326 audit(1743196039.334:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 244.465453][ T30] audit: type=1326 audit(1743196039.334:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 244.492907][ T5825] usb 4-1: string descriptor 0 read error: -22 [ 244.499255][ T5825] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 244.508456][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.705703][ T9291] lo speed is unknown, defaulting to 1000 [ 244.963365][ T5825] usb 4-1: config 0 descriptor?? [ 244.976722][ T5825] usbtest 4-1:0.0: FX2 device [ 244.982404][ T5825] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 244.987873][ T5872] lo speed is unknown, defaulting to 1000 [ 245.250897][ T5825] usb 4-1: USB disconnect, device number 15 [ 246.154311][ T9347] gfs2: gfs2 mount does not exist [ 246.453827][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 246.460749][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 247.758215][ T9371] gfs2: gfs2 mount does not exist [ 248.121227][ T9360] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 248.415396][ T9380] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 248.424742][ T9380] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 249.041603][ T5872] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 249.479549][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 249.503633][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.519570][ T5872] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.528746][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.538481][ T5872] usb 1-1: config 0 descriptor?? [ 249.545112][ T5872] hub 1-1:0.0: bad descriptor, ignoring hub [ 249.551325][ T5872] hub 1-1:0.0: probe with driver hub failed with error -5 [ 249.559770][ T5872] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 249.645996][ T9403] lo speed is unknown, defaulting to 1000 [ 249.971126][ T5910] usb 5-1: USB disconnect, device number 16 [ 249.999789][ T5872] usb 1-1: USB disconnect, device number 20 [ 250.049218][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 250.049234][ T30] audit: type=1400 audit(1743196045.484:1316): avc: denied { ioctl } for pid=9460 comm="syz.4.739" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 250.052514][ T9461] input: syz0 as /devices/virtual/input/input13 [ 250.616537][ T5910] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 251.163694][ T30] audit: type=1326 audit(1743196046.164:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.467273][ T30] audit: type=1326 audit(1743196046.164:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.519583][ T30] audit: type=1326 audit(1743196046.164:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.543740][ T30] audit: type=1326 audit(1743196046.164:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.548040][ T9485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.745'. [ 251.569059][ T30] audit: type=1326 audit(1743196046.164:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.579621][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 251.605195][ T30] audit: type=1326 audit(1743196046.174:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.605238][ T30] audit: type=1326 audit(1743196046.174:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.605267][ T30] audit: type=1326 audit(1743196046.174:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.605294][ T30] audit: type=1326 audit(1743196046.174:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 251.864511][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.875162][ T5910] usb 5-1: config 86 has an invalid interface number: 196 but max is 0 [ 252.109686][ T5871] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 252.280778][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 252.314270][ T5871] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.320290][ T5910] usb 5-1: config 86 has no interface number 0 [ 252.334362][ T5910] usb 5-1: config 86 interface 196 has no altsetting 0 [ 252.341656][ T5871] usb 1-1: config 0 interface 0 has no altsetting 1 [ 252.343507][ T5910] usb 5-1: string descriptor 0 read error: -22 [ 252.349243][ T5871] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 252.359531][ T5910] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 252.365663][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 252.383562][ T5871] usb 1-1: SerialNumber: syz [ 252.384995][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.390237][ T5871] usb 1-1: config 0 descriptor?? [ 252.407561][ T5871] usb-storage 1-1:0.0: USB Mass Storage device detected [ 252.424627][ T5910] msi2500 5-1:86.196: Registered as swradio24 [ 252.427346][ T5871] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 252.430825][ T5910] msi2500 5-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 253.019713][ T9534] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 253.035634][ T9534] netlink: 264 bytes leftover after parsing attributes in process `syz.4.740'. [ 253.078736][ T7118] Bluetooth: hci5: Frame reassembly failed (-84) [ 253.094421][ T7118] Bluetooth: hci5: Frame reassembly failed (-84) [ 253.530671][ T5871] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 253.550173][ T5831] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 253.679754][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 253.742155][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.762128][ T5871] usb 2-1: config 2 has an invalid interface number: 224 but max is 0 [ 253.778061][ T5871] usb 2-1: config 2 has no interface number 0 [ 253.789594][ T5871] usb 2-1: config 2 interface 224 altsetting 128 endpoint 0xF has invalid wMaxPacketSize 0 [ 253.799894][ T5871] usb 2-1: config 2 interface 224 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 253.811097][ T5871] usb 2-1: config 2 interface 224 has no altsetting 0 [ 253.859885][ T5871] usb 2-1: New USB device found, idVendor=54cf, idProduct=dbbc, bcdDevice=ab.d8 [ 253.869265][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.877475][ T5871] usb 2-1: Product: syz [ 253.882466][ T5871] usb 2-1: Manufacturer: syz [ 253.887123][ T5871] usb 2-1: SerialNumber: syz [ 254.120571][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 254.174554][ T5871] usb-storage 2-1:2.224: USB Mass Storage device detected [ 254.233843][ T5871] usb 2-1: USB disconnect, device number 19 [ 255.142000][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 255.144340][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.214528][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.227031][ T5910] usb 5-1: USB disconnect, device number 17 [ 255.233750][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.361253][ T5873] usb 1-1: USB disconnect, device number 21 [ 255.873094][ T5827] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 256.766522][ T9648] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 256.825613][ T9648] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 256.853134][ T9651] FAULT_INJECTION: forcing a failure. [ 256.853134][ T9651] name failslab, interval 1, probability 0, space 0, times 0 [ 256.971445][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.0.769 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 256.971472][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.971482][ T9651] Call Trace: [ 256.971487][ T9651] [ 256.971493][ T9651] dump_stack_lvl+0x16c/0x1f0 [ 256.971517][ T9651] should_fail_ex+0x512/0x640 [ 256.971544][ T9651] should_failslab+0xc2/0x120 [ 256.971566][ T9651] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 256.971587][ T9651] ? sidtab_sid2str_get+0x17a/0x680 [ 256.971612][ T9651] kmemdup_noprof+0x29/0x60 [ 256.971636][ T9651] sidtab_sid2str_get+0x17a/0x680 [ 256.971659][ T9651] sidtab_entry_to_string+0x33/0x110 [ 256.971681][ T9651] security_sid_to_context_core+0x35c/0x640 [ 256.971703][ T9651] avc_audit_post_callback+0x1aa/0x8f0 [ 256.971727][ T9651] ? audit_log_format+0xe8/0x130 [ 256.971750][ T9651] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 256.971772][ T9651] ? skb_put+0x138/0x1b0 [ 256.971792][ T9651] ? audit_log_n_string+0x253/0x540 [ 256.971820][ T9651] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 256.971841][ T9651] common_lsm_audit+0x33e/0x22b0 [ 256.971861][ T9651] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 256.971884][ T9651] ? __pfx_common_lsm_audit+0x10/0x10 [ 256.971908][ T9651] ? find_held_lock+0x2b/0x80 [ 256.971931][ T9651] ? slow_avc_audit+0x186/0x210 [ 256.971954][ T9651] slow_avc_audit+0x186/0x210 [ 256.971977][ T9651] ? __pfx_slow_avc_audit+0x10/0x10 [ 256.972006][ T9651] ? find_held_lock+0x2b/0x80 [ 256.972025][ T9651] ? avc_has_extended_perms+0x33a/0x1090 [ 256.972051][ T9651] avc_has_extended_perms+0xa40/0x1090 [ 256.972078][ T9651] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 256.972101][ T9651] ? kasan_quarantine_put+0x10a/0x240 [ 256.972118][ T9651] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.972137][ T9651] ? find_held_lock+0x2b/0x80 [ 256.972160][ T9651] ? tomoyo_path_number_perm+0x18d/0x580 [ 256.972182][ T9651] ? __pfx___might_resched+0x10/0x10 [ 256.972209][ T9651] ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 256.972234][ T9651] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 256.972267][ T9651] ? selinux_file_ioctl+0x180/0x270 [ 256.972287][ T9651] selinux_file_ioctl+0x180/0x270 [ 256.972310][ T9651] security_file_ioctl+0xc6/0x240 [ 256.972331][ T9651] __x64_sys_ioctl+0xb7/0x200 [ 256.972356][ T9651] do_syscall_64+0xcd/0x260 [ 256.972377][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.972398][ T9651] RIP: 0033:0x7fa15c38d169 [ 256.972411][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.972426][ T9651] RSP: 002b:00007fa15d1c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.972443][ T9651] RAX: ffffffffffffffda RBX: 00007fa15c5a5fa0 RCX: 00007fa15c38d169 [ 256.972457][ T9651] RDX: 00002000000022c0 RSI: 000000005000940b RDI: 0000000000000003 [ 256.972467][ T9651] RBP: 00007fa15d1c8090 R08: 0000000000000000 R09: 0000000000000000 [ 256.972476][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.972486][ T9651] R13: 0000000000000000 R14: 00007fa15c5a5fa0 R15: 00007ffe4c1d4cd8 [ 256.972505][ T9651] [ 256.972856][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 256.972866][ T30] audit: type=1400 audit(1743196052.294:1355): avc: denied { ioctl } for pid=9649 comm="syz.0.769" path="mnt:[4026532802]" dev="nsfs" ino=4026532802 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tsid=33 tclass=file permissive=1 [ 257.311076][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.729958][ T9666] xt_HMARK: spi-set and port-set can't be combined [ 257.794731][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 257.872523][ T9679] fuse: Unknown parameter 'user_i00000000000000000000' [ 258.519542][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 258.540083][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 258.670828][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 258.700232][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.726734][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 258.752497][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 258.763749][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.774725][ T9] usb 4-1: Product: syz [ 258.778956][ T9] usb 4-1: Manufacturer: syz [ 258.798295][ T9] usb 4-1: SerialNumber: syz [ 258.809260][ T9] usb 4-1: config 0 descriptor?? [ 258.969093][ T30] audit: type=1400 audit(1743196054.404:1356): avc: denied { create } for pid=9685 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 259.031015][ T9672] netlink: 148 bytes leftover after parsing attributes in process `syz.3.773'. [ 259.351083][ T9] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 259.796173][ T9714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.781'. [ 260.109691][ T30] audit: type=1400 audit(1743196055.374:1357): avc: denied { bind } for pid=9717 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.277271][ T9733] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.312298][ T5910] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 260.427967][ T9736] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 260.779929][ T9736] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 261.017039][ T5910] usb 2-1: config 1 interface 0 has no altsetting 0 [ 261.039804][ T9] usb 4-1: USB disconnect, device number 16 [ 261.043220][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.40 [ 261.071294][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.258587][ T5910] usb 2-1: Product: syz [ 261.282877][ T5910] usb 2-1: Manufacturer: syz [ 261.289524][ T5910] usb 2-1: SerialNumber: syz [ 261.928749][ T9747] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 262.251294][ T9774] xt_nat: multiple ranges no longer supported [ 262.475750][ T30] audit: type=1400 audit(1743196057.704:1358): avc: denied { open } for pid=9768 comm="syz.3.791" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 262.499282][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.603419][ T9778] ubi: mtd0 is already attached to ubi31 [ 263.038149][ T30] audit: type=1400 audit(1743196058.474:1359): avc: denied { write } for pid=9781 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 263.960687][ T30] audit: type=1400 audit(1743196059.404:1360): avc: denied { read } for pid=9790 comm="syz.0.796" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.983892][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.645162][ T30] audit: type=1400 audit(1743196059.444:1361): avc: denied { open } for pid=9790 comm="syz.0.796" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 264.930259][ T5910] usbhid 2-1:1.0: can't add hid device: -71 [ 264.943279][ T5910] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 264.976731][ T5910] usb 2-1: USB disconnect, device number 20 [ 264.994016][ T30] audit: type=1400 audit(1743196060.434:1362): avc: denied { append } for pid=9814 comm="syz.1.799" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 265.043570][ T5827] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 265.932605][ T9824] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 266.127234][ T9835] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 266.455420][ T9853] lo speed is unknown, defaulting to 1000 [ 266.717420][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 267.168981][ T5910] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 267.357381][ T9896] gfs2: gfs2 mount does not exist [ 268.211587][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 268.640696][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.652683][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 268.665906][ T5910] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 268.676111][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.678049][ T30] audit: type=1400 audit(1743196064.114:1363): avc: denied { ioctl } for pid=9902 comm="syz.2.814" path="socket:[21241]" dev="sockfs" ino=21241 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 268.775970][ T5910] usb 2-1: Product: syz [ 268.780307][ T5910] usb 2-1: Manufacturer: syz [ 268.784986][ T5910] usb 2-1: SerialNumber: syz [ 268.793561][ T5910] usb 2-1: config 0 descriptor?? [ 268.818888][ T5827] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 269.002587][ T9887] netlink: 148 bytes leftover after parsing attributes in process `syz.1.810'. [ 269.802209][ T9910] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 269.813127][ T5910] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 269.827328][ T30] audit: type=1326 audit(1743196064.934:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 269.871018][ T30] audit: type=1326 audit(1743196064.934:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 269.973392][ T30] audit: type=1326 audit(1743196064.934:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 270.053258][ T30] audit: type=1326 audit(1743196064.934:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 270.143021][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 270.209135][ T30] audit: type=1326 audit(1743196064.934:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 270.515772][ T30] audit: type=1326 audit(1743196064.934:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 270.569140][ T30] audit: type=1326 audit(1743196064.934:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 270.593041][ T30] audit: type=1326 audit(1743196064.934:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 270.670245][ T9936] netlink: 52 bytes leftover after parsing attributes in process `syz.2.822'. [ 270.682638][ T30] audit: type=1326 audit(1743196064.934:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa15c38d169 code=0x7ffc0000 [ 270.780042][ T9935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9935 comm=syz.3.821 [ 270.827794][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 270.899192][ T5872] usb 2-1: USB disconnect, device number 21 [ 271.366731][ T9965] gfs2: gfs2 mount does not exist [ 272.200283][ T5825] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 272.233140][ T9934] orangefs_mount: mount request failed with -4 [ 272.379574][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 272.387251][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 272.416211][ T5825] usb 2-1: config 0 interface 0 has no altsetting 1 [ 272.436002][ T5825] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 272.574277][ T9975] netlink: 'syz.0.828': attribute type 10 has an invalid length. [ 272.586669][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.595283][ T5825] usb 2-1: SerialNumber: syz [ 272.601090][ T5825] usb 2-1: config 0 descriptor?? [ 272.607951][ T5825] usb-storage 2-1:0.0: USB Mass Storage device detected [ 272.622808][ T9975] bridge0: port 3(netdevsim0) entered disabled state [ 272.625964][ T5825] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 272.629628][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.644724][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.660030][ T9975] bridge0: port 3(netdevsim0) entered blocking state [ 272.666838][ T9975] bridge0: port 3(netdevsim0) entered forwarding state [ 272.673883][ T9975] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.680990][ T9975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.688330][ T9975] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.695441][ T9975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.653256][ T9975] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 273.742329][ T9974] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 274.075484][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 274.075499][ T30] audit: type=1400 audit(1743196069.514:1437): avc: denied { write } for pid=9989 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 275.254883][ T30] audit: type=1400 audit(1743196070.694:1438): avc: denied { write } for pid=9993 comm="syz.0.834" path="socket:[21373]" dev="sockfs" ino=21373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 275.281396][ T30] audit: type=1400 audit(1743196070.694:1439): avc: denied { connect } for pid=9993 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 275.922747][T10021] tipc: Started in network mode [ 275.927736][T10021] tipc: Node identity fe0feee5f5eb, cluster identity 4711 [ 275.942956][T10021] tipc: Enabled bearer , priority 0 [ 276.421099][ T30] audit: type=1326 audit(1743196071.434:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048318d169 code=0x7ffc0000 [ 276.469804][T10028] syzkaller0: entered promiscuous mode [ 276.515015][ T30] audit: type=1326 audit(1743196071.434:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048318d169 code=0x7ffc0000 [ 276.658283][T10028] syzkaller0: entered allmulticast mode [ 276.711700][ T9] usb 2-1: USB disconnect, device number 22 [ 276.797198][ T30] audit: type=1326 audit(1743196071.434:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f048318d169 code=0x7ffc0000 [ 276.822816][ T30] audit: type=1326 audit(1743196071.434:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048318d169 code=0x7ffc0000 [ 276.848681][ T30] audit: type=1326 audit(1743196071.434:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048318d169 code=0x7ffc0000 [ 276.873406][ T30] audit: type=1326 audit(1743196071.434:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f048318d169 code=0x7ffc0000 [ 276.942734][T10020] tipc: Resetting bearer [ 277.007412][ T30] audit: type=1326 audit(1743196071.434:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048318d169 code=0x7ffc0000 [ 277.033039][T10020] tipc: Disabling bearer [ 277.118306][T10051] gfs2: gfs2 mount does not exist [ 277.282354][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 277.426697][ T9] tipc: Node number set to 199552741 [ 278.486271][T10075] netlink: 232 bytes leftover after parsing attributes in process `syz.3.852'. [ 279.585576][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 279.585593][ T30] audit: type=1326 audit(1743196074.134:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 279.728633][ T30] audit: type=1326 audit(1743196074.134:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 279.756723][ T30] audit: type=1326 audit(1743196074.144:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 279.790906][ T30] audit: type=1326 audit(1743196074.154:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 279.875027][ T30] audit: type=1326 audit(1743196074.154:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 279.960345][ T5831] Bluetooth: hci1: unexpected event 0x10 length: 10 > 1 [ 279.961678][ T5831] Bluetooth: hci1: hardware error 0xaa [ 279.983391][ T30] audit: type=1326 audit(1743196074.174:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 280.094492][ T30] audit: type=1326 audit(1743196074.174:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 280.169578][ T30] audit: type=1326 audit(1743196074.174:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 280.199770][ T30] audit: type=1326 audit(1743196074.184:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 280.223370][ T30] audit: type=1326 audit(1743196074.194:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25318d169 code=0x7ffc0000 [ 280.298441][T10088] wg1: entered promiscuous mode [ 280.314189][T10088] wg1: entered allmulticast mode [ 280.489670][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.859'. [ 280.494671][T10089] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 280.520305][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 280.602241][T10109] tmpfs: Bad value for 'mpol' [ 280.780134][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.792302][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.967470][T10132] lo speed is unknown, defaulting to 1000 [ 281.049588][ T5910] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 281.354612][T10165] FAULT_INJECTION: forcing a failure. [ 281.354612][T10165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.369604][T10165] CPU: 0 UID: 0 PID: 10165 Comm: syz.0.867 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 281.369628][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.369639][T10165] Call Trace: [ 281.369644][T10165] [ 281.369650][T10165] dump_stack_lvl+0x16c/0x1f0 [ 281.369675][T10165] should_fail_ex+0x512/0x640 [ 281.369701][T10165] _copy_from_user+0x2e/0xd0 [ 281.369717][T10165] copy_msghdr_from_user+0x98/0x160 [ 281.369742][T10165] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 281.369775][T10165] ___sys_sendmsg+0xfe/0x1d0 [ 281.369800][T10165] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.369844][T10165] __sys_sendmsg+0x16d/0x220 [ 281.369858][T10165] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.369886][T10165] ? rcu_is_watching+0x12/0xc0 [ 281.369918][T10165] do_syscall_64+0xcd/0x260 [ 281.369938][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.369954][T10165] RIP: 0033:0x7fa15c38d169 [ 281.369967][T10165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.369983][T10165] RSP: 002b:00007fa15d1c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.369999][T10165] RAX: ffffffffffffffda RBX: 00007fa15c5a5fa0 RCX: 00007fa15c38d169 [ 281.370009][T10165] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 281.370019][T10165] RBP: 00007fa15d1c8090 R08: 0000000000000000 R09: 0000000000000000 [ 281.370029][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.370039][T10165] R13: 0000000000000000 R14: 00007fa15c5a5fa0 R15: 00007ffe4c1d4cd8 [ 281.370058][T10165] [ 281.543841][T10169] FAULT_INJECTION: forcing a failure. [ 281.543841][T10169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.557167][T10169] CPU: 0 UID: 0 PID: 10169 Comm: syz.2.868 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 281.557191][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.557201][T10169] Call Trace: [ 281.557206][T10169] [ 281.557211][T10169] dump_stack_lvl+0x16c/0x1f0 [ 281.557234][T10169] should_fail_ex+0x512/0x640 [ 281.557259][T10169] _copy_to_user+0x32/0xd0 [ 281.557274][T10169] simple_read_from_buffer+0xe0/0x170 [ 281.557289][T10169] proc_fail_nth_read+0x197/0x270 [ 281.557306][T10169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.557323][T10169] ? rw_verify_area+0xcf/0x680 [ 281.557346][T10169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.557363][T10169] vfs_read+0x1de/0xc70 [ 281.557379][T10169] ? __pfx___mutex_lock+0x10/0x10 [ 281.557395][T10169] ? __pfx_vfs_read+0x10/0x10 [ 281.557410][T10169] ? __fget_files+0x20e/0x3c0 [ 281.557428][T10169] ksys_read+0x12a/0x240 [ 281.557439][T10169] ? __pfx_ksys_read+0x10/0x10 [ 281.557455][T10169] do_syscall_64+0xcd/0x260 [ 281.557471][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.557484][T10169] RIP: 0033:0x7fa25318bb7c [ 281.557497][T10169] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 281.557509][T10169] RSP: 002b:00007fa253f8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.557522][T10169] RAX: ffffffffffffffda RBX: 00007fa2533a6160 RCX: 00007fa25318bb7c [ 281.557530][T10169] RDX: 000000000000000f RSI: 00007fa253f8e0a0 RDI: 0000000000000007 [ 281.557538][T10169] RBP: 00007fa253f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 281.557545][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.557553][T10169] R13: 0000000000000001 R14: 00007fa2533a6160 R15: 00007fff22389dd8 [ 281.557568][T10169] [ 281.812205][T10172] FAULT_INJECTION: forcing a failure. [ 281.812205][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 281.824903][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.4.869 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 281.824925][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.824934][T10172] Call Trace: [ 281.824939][T10172] [ 281.824945][T10172] dump_stack_lvl+0x16c/0x1f0 [ 281.824968][T10172] should_fail_ex+0x512/0x640 [ 281.824987][T10172] ? fs_reclaim_acquire+0xae/0x150 [ 281.825006][T10172] ? tomoyo_encode2+0x100/0x3e0 [ 281.825024][T10172] should_failslab+0xc2/0x120 [ 281.825044][T10172] __kmalloc_noprof+0xd2/0x510 [ 281.825060][T10172] ? d_absolute_path+0x136/0x1a0 [ 281.825083][T10172] tomoyo_encode2+0x100/0x3e0 [ 281.825096][T10172] tomoyo_encode+0x29/0x50 [ 281.825108][T10172] tomoyo_realpath_from_path+0x18f/0x6e0 [ 281.825123][T10172] tomoyo_path_number_perm+0x245/0x580 [ 281.825134][T10172] ? tomoyo_path_number_perm+0x237/0x580 [ 281.825147][T10172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 281.825171][T10172] ? find_held_lock+0x2b/0x80 [ 281.825202][T10172] ? find_held_lock+0x2b/0x80 [ 281.825220][T10172] ? __fget_files+0x204/0x3c0 [ 281.825234][T10172] ? __fget_files+0x20e/0x3c0 [ 281.825245][T10172] security_file_ioctl+0x9b/0x240 [ 281.825259][T10172] __x64_sys_ioctl+0xb7/0x200 [ 281.825274][T10172] do_syscall_64+0xcd/0x260 [ 281.825288][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.825304][T10172] RIP: 0033:0x7f048318d169 [ 281.825316][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.825330][T10172] RSP: 002b:00007f0480ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.825345][T10172] RAX: ffffffffffffffda RBX: 00007f04833a6080 RCX: 00007f048318d169 [ 281.825355][T10172] RDX: 0000200000000200 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 281.825364][T10172] RBP: 00007f0480ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.825372][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.825377][T10172] R13: 0000000000000000 R14: 00007f04833a6080 R15: 00007ffc754f4458 [ 281.825388][T10172] [ 281.825409][T10172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 282.169800][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 283.121418][T10196] gfs2: gfs2 mount does not exist [ 283.233745][T10207] gfs2: gfs2 mount does not exist [ 283.727899][T10219] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 283.734696][T10219] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.746820][T10219] vhci_hcd vhci_hcd.0: Device attached [ 283.808245][T10219] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 283.814860][T10219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.845988][T10219] vhci_hcd vhci_hcd.0: Device attached [ 283.920159][T10227] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.951895][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.883'. [ 283.989745][ T9] vhci_hcd: vhci_device speed not set [ 284.033492][T10238] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 284.044080][T10238] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 284.054182][T10238] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 284.105456][ T9] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 284.176597][T10227] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 284.183218][T10227] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 284.240219][T10248] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 284.246807][T10248] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.257741][T10227] vhci_hcd vhci_hcd.0: Device attached [ 284.266300][T10248] vhci_hcd vhci_hcd.0: Device attached [ 284.288064][T10248] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(23) [ 284.294686][T10248] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.314588][T10248] vhci_hcd vhci_hcd.0: Device attached [ 284.334317][T10248] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.348298][T10248] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.357221][T10248] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.562500][T10249] vhci_hcd: connection closed [ 284.600170][T10251] vhci_hcd: connection closed [ 284.606490][ T7653] vhci_hcd: stop threads [ 284.628077][ T7653] vhci_hcd: release socket [ 284.632853][T10242] vhci_hcd: connection closed [ 284.635359][T10221] vhci_hcd: connection reset by peer [ 284.666199][T10223] vhci_hcd: connection closed [ 284.854294][ T7653] vhci_hcd: disconnect device [ 284.867782][ T7653] vhci_hcd: stop threads [ 284.873944][ T7653] vhci_hcd: release socket [ 284.878806][ T7653] vhci_hcd: disconnect device [ 284.884043][ T7653] vhci_hcd: stop threads [ 284.888786][ T7653] vhci_hcd: release socket [ 284.893650][ T7653] vhci_hcd: disconnect device [ 284.902922][ T7653] vhci_hcd: stop threads [ 284.918082][ T7653] vhci_hcd: release socket [ 284.923323][ T7653] vhci_hcd: disconnect device [ 284.932345][ T7653] vhci_hcd: stop threads [ 284.936758][ T7653] vhci_hcd: release socket [ 284.944351][ T7653] vhci_hcd: disconnect device [ 285.357433][T10274] gfs2: gfs2 mount does not exist [ 286.089667][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 286.089682][ T30] audit: type=1326 audit(1743196081.524:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.123006][ T30] audit: type=1326 audit(1743196081.524:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.146383][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.237435][ T30] audit: type=1326 audit(1743196081.534:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.277526][ T30] audit: type=1326 audit(1743196081.534:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.300889][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.356071][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 286.374314][T10281] gretap1: entered allmulticast mode [ 286.387926][ T30] audit: type=1326 audit(1743196081.534:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.412038][ T30] audit: type=1326 audit(1743196081.564:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.440665][ T30] audit: type=1326 audit(1743196081.564:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.464059][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.470610][ T30] audit: type=1326 audit(1743196081.564:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.495410][ T30] audit: type=1326 audit(1743196081.564:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 286.784141][T10295] FAULT_INJECTION: forcing a failure. [ 286.784141][T10295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.797873][T10295] CPU: 1 UID: 0 PID: 10295 Comm: syz.0.898 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 286.797896][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.797905][T10295] Call Trace: [ 286.797909][T10295] [ 286.797912][T10295] dump_stack_lvl+0x16c/0x1f0 [ 286.797930][T10295] should_fail_ex+0x512/0x640 [ 286.797946][T10295] _copy_from_user+0x2e/0xd0 [ 286.797956][T10295] kstrtouint_from_user+0xe8/0x1d0 [ 286.797968][T10295] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 286.797980][T10295] ? __lock_acquire+0xaa4/0x1ba0 [ 286.798000][T10295] proc_fail_nth_write+0x83/0x250 [ 286.798010][T10295] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.798023][T10295] vfs_write+0x25c/0x1180 [ 286.798033][T10295] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.798045][T10295] ? __pfx___mutex_lock+0x10/0x10 [ 286.798057][T10295] ? __pfx_vfs_write+0x10/0x10 [ 286.798069][T10295] ? __fget_files+0x20e/0x3c0 [ 286.798080][T10295] ? __pfx_rcu_is_watching+0x10/0x10 [ 286.798094][T10295] ksys_write+0x12a/0x240 [ 286.798104][T10295] ? __pfx_ksys_write+0x10/0x10 [ 286.798121][T10295] do_syscall_64+0xcd/0x260 [ 286.798134][T10295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.798144][T10295] RIP: 0033:0x7fa15c38bc1f [ 286.798152][T10295] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 286.798162][T10295] RSP: 002b:00007fa15d1a7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 286.798171][T10295] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa15c38bc1f [ 286.798177][T10295] RDX: 0000000000000001 RSI: 00007fa15d1a70a0 RDI: 0000000000000007 [ 286.798183][T10295] RBP: 00007fa15d1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 286.798189][T10295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 286.798194][T10295] R13: 0000000000000000 R14: 00007fa15c5a6080 R15: 00007ffe4c1d4cd8 [ 286.798205][T10295] [ 287.269828][ T30] audit: type=1326 audit(1743196081.564:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391b58d169 code=0x7ffc0000 [ 287.435246][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 287.445566][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.902'. [ 288.165220][ T5871] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 288.187153][T10339] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.907'. [ 288.196825][T10339] netlink: zone id is out of range [ 288.202831][T10339] netlink: zone id is out of range [ 288.208369][T10339] netlink: zone id is out of range [ 288.213650][T10339] netlink: zone id is out of range [ 288.218928][T10339] netlink: zone id is out of range [ 288.224452][T10339] netlink: zone id is out of range [ 288.230072][T10339] netlink: zone id is out of range [ 288.235687][T10339] netlink: zone id is out of range [ 288.241353][T10339] netlink: zone id is out of range [ 288.246580][T10339] netlink: zone id is out of range [ 288.251166][T10342] [ 288.254009][T10342] ====================================================== [ 288.261008][T10342] WARNING: possible circular locking dependency detected [ 288.267996][T10342] 6.14.0-syzkaller-07422-gacb4f33713b9 #0 Not tainted [ 288.274724][T10342] ------------------------------------------------------ [ 288.281717][T10342] syz.0.910/10342 is trying to acquire lock: [ 288.287663][T10342] ffffffff90109d28 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 288.296690][T10342] [ 288.296690][T10342] but task is already holding lock: [ 288.304027][T10342] ffff88804e62a1a0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 288.314008][T10342] [ 288.314008][T10342] which lock already depends on the new lock. [ 288.314008][T10342] [ 288.324391][T10342] [ 288.324391][T10342] the existing dependency chain (in reverse order) is: [ 288.329488][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 288.333370][T10342] [ 288.333370][T10342] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 288.333400][T10342] __mutex_lock+0x199/0xb90 [ 288.352028][T10342] smc_switch_to_fallback+0x2d/0x9f0 [ 288.357810][T10342] smc_sendmsg+0x13d/0x520 [ 288.362723][T10342] __sys_sendto+0x495/0x510 [ 288.367725][T10342] __x64_sys_sendto+0xe0/0x1c0 [ 288.372987][T10342] do_syscall_64+0xcd/0x260 [ 288.377984][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.384368][T10342] [ 288.384368][T10342] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 288.391978][T10342] lock_sock_nested+0x41/0xf0 [ 288.397152][T10342] sockopt_lock_sock+0x54/0x70 [ 288.402415][T10342] do_ip_setsockopt+0xfe/0x3240 [ 288.404551][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.407756][T10342] ip_setsockopt+0x59/0xf0 [ 288.407780][T10342] raw_setsockopt+0xb7/0x2a0 [ 288.418636][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.423479][T10342] do_sock_setsockopt+0x221/0x470 [ 288.423499][T10342] __sys_setsockopt+0x1a0/0x230 [ 288.428629][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.438264][T10342] __x64_sys_setsockopt+0xbd/0x160 [ 288.438290][T10342] do_syscall_64+0xcd/0x260 [ 288.438307][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.478821][T10342] [ 288.478821][T10342] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 288.485999][T10342] __lock_acquire+0x1173/0x1ba0 [ 288.491347][T10342] lock_acquire+0x179/0x350 [ 288.496347][T10342] __mutex_lock+0x199/0xb90 [ 288.501342][T10342] do_ip_getsockopt+0x1843/0x2220 [ 288.506861][T10342] ip_getsockopt+0x9b/0x1e0 [ 288.511865][T10342] tcp_getsockopt+0x9e/0x100 [ 288.516955][T10342] smc_getsockopt+0x162/0x370 [ 288.522145][T10342] do_sock_getsockopt+0x3fc/0x800 [ 288.527671][T10342] __sys_getsockopt+0x12f/0x260 [ 288.533016][T10342] __x64_sys_getsockopt+0xbd/0x160 [ 288.538621][T10342] do_syscall_64+0xcd/0x260 [ 288.543618][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.550000][T10342] [ 288.550000][T10342] other info that might help us debug this: [ 288.550000][T10342] [ 288.560204][T10342] Chain exists of: [ 288.560204][T10342] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 288.560204][T10342] [ 288.573723][T10342] Possible unsafe locking scenario: [ 288.573723][T10342] [ 288.581151][T10342] CPU0 CPU1 [ 288.586493][T10342] ---- ---- [ 288.591826][T10342] lock(&smc->clcsock_release_lock); [ 288.597168][T10342] lock(sk_lock-AF_INET); [ 288.604073][T10342] lock(&smc->clcsock_release_lock); [ 288.611945][T10342] lock(rtnl_mutex); [ 288.615907][T10342] [ 288.615907][T10342] *** DEADLOCK *** [ 288.615907][T10342] [ 288.624018][T10342] 1 lock held by syz.0.910/10342: [ 288.629006][T10342] #0: ffff88804e62a1a0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 288.639411][T10342] [ 288.639411][T10342] stack backtrace: [ 288.645269][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.0.910 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 288.645283][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.645289][T10342] Call Trace: [ 288.645293][T10342] [ 288.645296][T10342] dump_stack_lvl+0x116/0x1f0 [ 288.645310][T10342] print_circular_bug+0x275/0x350 [ 288.645328][T10342] check_noncircular+0x14c/0x170 [ 288.645343][T10342] __lock_acquire+0x1173/0x1ba0 [ 288.645361][T10342] lock_acquire+0x179/0x350 [ 288.645375][T10342] ? do_ip_getsockopt+0x1843/0x2220 [ 288.645389][T10342] ? __pfx___might_resched+0x10/0x10 [ 288.645404][T10342] __mutex_lock+0x199/0xb90 [ 288.645416][T10342] ? do_ip_getsockopt+0x1843/0x2220 [ 288.645428][T10342] ? __might_fault+0xe3/0x190 [ 288.645441][T10342] ? __might_fault+0xe3/0x190 [ 288.645453][T10342] ? __might_fault+0x13b/0x190 [ 288.645465][T10342] ? do_ip_getsockopt+0x1843/0x2220 [ 288.645478][T10342] ? __pfx___mutex_lock+0x10/0x10 [ 288.645490][T10342] ? _copy_from_user+0x59/0xd0 [ 288.645500][T10342] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 288.645513][T10342] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.645524][T10342] ? finish_task_switch.isra.0+0x221/0xc10 [ 288.645538][T10342] ? do_ip_getsockopt+0x1843/0x2220 [ 288.645550][T10342] ? rtnl_lock+0x9/0x20 [ 288.645562][T10342] do_ip_getsockopt+0x1843/0x2220 [ 288.645575][T10342] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 288.645588][T10342] ? __lock_acquire+0x5ca/0x1ba0 [ 288.645603][T10342] ? __lock_acquire+0xaa4/0x1ba0 [ 288.645620][T10342] ? __mutex_trylock_common+0xe9/0x250 [ 288.645636][T10342] ? __pfx___mutex_trylock_common+0x10/0x10 [ 288.645652][T10342] ? __pfx___might_resched+0x10/0x10 [ 288.645665][T10342] ? rcu_is_watching+0x12/0xc0 [ 288.645676][T10342] ? trace_contention_end+0xdd/0x130 [ 288.645685][T10342] ? __mutex_lock+0x1ca/0xb90 [ 288.645697][T10342] ip_getsockopt+0x9b/0x1e0 [ 288.645709][T10342] ? __pfx___mutex_lock+0x10/0x10 [ 288.645721][T10342] ? __pfx_ip_getsockopt+0x10/0x10 [ 288.645734][T10342] tcp_getsockopt+0x9e/0x100 [ 288.645749][T10342] smc_getsockopt+0x162/0x370 [ 288.645761][T10342] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 288.645773][T10342] ? __pfx_smc_getsockopt+0x10/0x10 [ 288.645786][T10342] ? __pfx_smc_getsockopt+0x10/0x10 [ 288.645798][T10342] do_sock_getsockopt+0x3fc/0x800 [ 288.645810][T10342] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 288.645822][T10342] ? __fget_files+0x204/0x3c0 [ 288.645835][T10342] __sys_getsockopt+0x12f/0x260 [ 288.645851][T10342] __x64_sys_getsockopt+0xbd/0x160 [ 288.645865][T10342] ? do_syscall_64+0x91/0x260 [ 288.645878][T10342] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.645888][T10342] do_syscall_64+0xcd/0x260 [ 288.645900][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.645911][T10342] RIP: 0033:0x7fa15c38d169 [ 288.645919][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.645929][T10342] RSP: 002b:00007fa15d1c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 288.645939][T10342] RAX: ffffffffffffffda RBX: 00007fa15c5a5fa0 RCX: 00007fa15c38d169 [ 288.645945][T10342] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 288.645951][T10342] RBP: 00007fa15c40e2a0 R08: 00002000000006c0 R09: 0000000000000000 [ 288.645957][T10342] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000 [ 288.645963][T10342] R13: 0000000000000000 R14: 00007fa15c5a5fa0 R15: 00007ffe4c1d4cd8 [ 288.645971][T10342] [ 288.993789][ T5871] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 289.003275][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.017912][ T5871] usb 5-1: config 0 descriptor?? [ 289.269536][ T9] vhci_hcd: vhci_device speed not set [ 289.631260][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 289.637192][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 289.646697][ T5871] usb 5-1: USB disconnect, device number 18