last executing test programs: 25.608355329s ago: executing program 4 (id=546): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4000000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83f, 0x4, 0x0, 0x1fc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x38a9, &(0x7f0000000380)={0x0, 0x6518, 0x8, 0x1, 0xb5, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000300)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x102, 0x0, {0x2, r6}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0xfff) chdir(0x0) signalfd(r0, &(0x7f0000000240)={[0x7fffffff]}, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x40, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 25.490714805s ago: executing program 4 (id=548): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x4004) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="0374cf4c", @ANYRES16=r2, @ANYBLOB="080026bd7000fedbdf250600000008002c000d00000005003500100000000800320003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x48804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) statfs(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)=""/92) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@private, 0x4e24}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6, 0x4}, {}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x4}}, @mark={0xc, 0x15, {0x350759, 0xacc}}]}, 0x160}}, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 24.550234872s ago: executing program 4 (id=554): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x10001}}, 0x2, 0x0}}) 24.44689079s ago: executing program 4 (id=555): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300), &(0x7f0000000180)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) 23.162555881s ago: executing program 2 (id=556): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) readv(r3, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000039254d484e01b5803cbd4bf639bb967c4081683c875c2aff62adb3db79c0c47c0fa5e522c3eabfa5a16756d57798986b1a4ea9267b556e4dd7ac858dba045705eb0fb13e06e2d801a83eb08f487edb4d740f2ebfc955134b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000080004"], 0x44}}, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r8) 23.161710484s ago: executing program 4 (id=557): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=@canfd={{0x1, 0x1}, 0x28, 0x3, 0x0, 0x0, "a88d8132bbdef90fb16e64c4aec7b06eb531fa63ff5da2defa6c5fd9592fdd0f22d1891ab0ffe815cb6347bc8a1cfa3a91f06df8f985c6eebd8b65349f8b1de0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x8801) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) epoll_create1(0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, r6, {0x18, 0xc099, 0x0, {0x3, 0x100, 0x91d, 0x7f, 0x8, 0x9, 0xd, 0x4, 0x0, 0x8000, 0x3, r7, r8, 0x5, 0x2}}}, 0x78) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="311f"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 22.242216956s ago: executing program 2 (id=560): openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004100090000000000", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) 21.737839349s ago: executing program 2 (id=563): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd5400fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002d80080003"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2bab", 0x32) write$qrtrtun(r0, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c", 0x2b) write$qrtrtun(r0, &(0x7f0000000c80)="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", 0x382) write$qrtrtun(r0, &(0x7f00000003c0)="b9f7e454d6ce3c38320af2cda788e32c79a152b0dc36b2bdac6494a7d1f3e718f268a55c29480f0c36d8de3d666657e1c58c0671d27052696b64bf2cf998704531acab8307b461abd2114803c92b859af1cdb90146a0a7f9fda2caaafd343e27d9ba0b64116c2e14d29cb7724e586d10e855df2a9454146707f0344bc54b", 0x7e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) bind$vsock_stream(r6, &(0x7f00000000c0), 0x10) 21.704644156s ago: executing program 0 (id=565): socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000300000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYBLOB="080001"], 0x90}}, 0x0) 20.898151572s ago: executing program 2 (id=566): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ac054182000904000001030000000921000000012205000905810300"/54], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x10b940) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000140)={0x8, 0x3, 0x7fff, 0x7230875}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000024c0)={0x6, {{0xa, 0x4e24, 0xa68a, @mcast2, 0x6}}}, 0x88) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='io_uring_task_add\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() 20.897955524s ago: executing program 0 (id=567): r0 = socket$key(0xf, 0x3, 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a0000000000000000000000000000000000ffff0000000000000000000000000200010000000000000000000000000005000500000000000a000100000000000100000000000000000000000000000100000000000000000200130003"], 0x80}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a0000000000000000000000000000000000ffff0000000000000000000000000200010000000000000000000000000005000500000000000a000100000000000100000000000000000000000000000100000000000000000200130003"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000a00000000000000000000000300060000000e0002000000e00000090000000000000000782f02000100000000000000000400000000030005000000000002000000ac1414170000000000000000"], 0x50}}, 0x0) 20.89536356s ago: executing program 4 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = socket(0xa, 0x3, 0x3a) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002fc0)=""/102400, 0x19000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x1f00, 0x12) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f00000f3000/0x4000)=nil, &(0x7f000022f000/0x3000)=nil, &(0x7f0000628000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00005bb000/0x4000)=nil, &(0x7f00002b1000/0x3000)=nil, &(0x7f00001df000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00007c4000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200)="36fb9f7fba0d194e4bab2ee2791ff00999e79a3240bca8d12a0e8e6365ae63d8bf62e701eef53d912a1763d302d04b39094c199b372d3fea250331a19e5fc739f4010de270f44241e9436116afb4a0d0a91d96e657bd5be4b632270ba22dc97315720bd242a43849ce670e03ebe5668a90ab969a3762a9ab8a62f5de83e4ab240f8608da5a", 0x85, r2}, 0x68) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x0) getpid() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x401, 0x2) sendmsg$rds(0xffffffffffffffff, 0x0, 0x20000000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 20.800119626s ago: executing program 0 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x0, 0x8800) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000002438a798566d2cb0b8030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000feffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r4}, @generic={0x8b, 0x3, 0x7, 0x4000, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}], &(0x7f0000000380)='GPL\x00', 0x7722, 0xc9, &(0x7f0000000500)=""/201, 0x41100, 0x50, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0x7, 0x5, 0xffff4fa3}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x80000001, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3940, 0x20, 0xffffffff, 0x11b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1201000000000040d804dd000000000000010902240001000080000904000001030000000001220300090581030000000000"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000740)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00020500000005022e07db"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x8, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x13) socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r1, 0x9, 0x7, 0x2}) syz_genetlink_get_family_id$batadv(0x0, r10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000280)={0x4, 0x18, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 19.110218422s ago: executing program 1 (id=575): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 19.062520257s ago: executing program 1 (id=576): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000022c0)=""/138) 18.878366511s ago: executing program 1 (id=578): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x800000, 0x27, 0x0, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) 18.878096426s ago: executing program 3 (id=579): socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x92, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x13, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xc2, 0x0, 0x0, 0xfffd, {[@generic={0x3, 0x7, "1deaea8026"}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @fastopen={0x22, 0x10, "9f25e12065c2c16a8306f8854b9e"}, @md5sig={0x13, 0x12, "001e0000000000001f5b0506600016b2"}, @exp_fastopen={0xfe, 0x12, 0xf989, "490ac4c3a10e3d1fec974d72d1b6"}]}}}}}}}}, 0x0) 18.826730681s ago: executing program 1 (id=580): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0xfeff, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0x1b}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0) 18.8009007s ago: executing program 3 (id=581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0xc8, 0xc8, 0x8, 0x0, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1d8, 0x200, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@recent1={{0x108}, {0x56, 0x716d8375, 0x8, 0x0, 'syz0\x00', 0x6e, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x4}, {0x4, 0x5, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async, rerun: 64) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) (async, rerun: 64) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) (async) syz_open_dev$cec(0x0, 0x0, 0x200000) (async) r1 = syz_open_dev$amidi(&(0x7f0000000480), 0x200002, 0x583543) r2 = dup(r1) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000240)={0x3, 0xa, 0x800, 0xe0000000, 0x8, "b7f36c630a0457671bd446cea1b8f8c26beb7a", 0x7, 0x7fff}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140), 0xffffffffffffffbe) (async, rerun: 64) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) timer_create(0x2, 0x0, 0x0) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4) (async, rerun: 64) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r4, 0x0}]) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d48670ef79099370f11b2b7a702b8c8ce0d1c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 18.702316362s ago: executing program 3 (id=582): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpgrp(0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) socket(0x1e, 0x80000, 0xd) socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x40004}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}, 0x3}], 0x1, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8e}, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x3ff, 0x101000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="30808d0000000000"], 0x8) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 18.348869266s ago: executing program 1 (id=583): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x700, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) 17.96805933s ago: executing program 3 (id=584): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000040000000e3ffffff003b93b11b67b934aec63b2ed7250d70291c55b8cdc041ae500907cf125471a219fbcf2ab0553b24b70d74fd9001fe5e65b4f0d0e0f2e336c3bfb3a3d961b327d631350a4ad4d3e3056c084f8e4f6c382b154736f4201aa36c5238e5ecdc5614b6"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/11, 0xb}}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000180)=0x4000004, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x1, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 17.72218111s ago: executing program 2 (id=585): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0xfffffffffffffcd6, &(0x7f00000002c0)=0x6) socket(0x2b, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000000307010200000000000000000500000208000516000000020c00034000000000000000080800054000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x20) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0xc0085666, &(0x7f0000000640)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000400)}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 17.030108383s ago: executing program 0 (id=586): openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000041000900000000000002", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) 16.995904785s ago: executing program 3 (id=587): r0 = syz_io_uring_setup(0xf3b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x346f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x57, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x8aa, 0x0, 0xc, 0x0, 0x0) 16.954108081s ago: executing program 0 (id=588): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x6d0c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f0000000680), &(0x7f0000000300), 0x0) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xa622, 0x0, 0x0, 0x3e}, &(0x7f0000000000)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_dev$dri(0x0, 0x1ff, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x2, r7, r8, 0x0, 0x0, 0x2, 0x2b7f}, 0xffffff81, 0xa84, 0x7fff, 0x7ff, r9, 0x0, 0x4009}) 16.878183596s ago: executing program 2 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x490, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3c0, 0x325, 0x378, 0x3c0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x260, 0x2a8, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x14, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@rateest={{0x68}, {'veth1_to_batadv\x00', 'lo\x00', 0x2a, 0x0, 0x4, 0x9, 0x9, 0xfffffffd, {0xcc}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0xb8, 0x2, 'syz0\x00', {0x7fffffff}}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) shutdown(0xffffffffffffffff, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) write(r6, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['\xbb\xf6x\x06\x00\x17\xcd\x14f\x00\x00\x00\x00\x11\x00\x00\x00'], 0x11}) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.115720033s ago: executing program 3 (id=590): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x6}}}}, 0xf) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0xc, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/138, 0x27, 0x8a, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="7307a3baab8b27e20ff54af24816c1d78957b8a4650f6b5a47abdf53b748d42422e99626cf8f4428446c658eba6ef72af794a75301564c6e5c3e3bf55b403b6e13a7bc155582ffaceca9daae859cb968db7c42713ab15b"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffc2, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000040)={0xc, {0x9, "bfada8b88ed75292ed"}}, 0xf) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) 16.095227854s ago: executing program 0 (id=591): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47f0"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x5, 0x9, 0x8, 0x41800, 0xffffffffffffffff, 0x1d7496c7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0xc, @void, @value, @void, @value}, 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) r2 = dup2(r1, r1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x28048040) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x4, '\x00', 0x0, r2, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 15.333300858s ago: executing program 1 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, 0xfffffffffffffffd) (fail_nth: 1) 513.946012ms ago: executing program 32 (id=591): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47f0"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x5, 0x9, 0x8, 0x41800, 0xffffffffffffffff, 0x1d7496c7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0xc, @void, @value, @void, @value}, 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) r2 = dup2(r1, r1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x28048040) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x4, '\x00', 0x0, r2, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 478.725337ms ago: executing program 33 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x490, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3c0, 0x325, 0x378, 0x3c0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x260, 0x2a8, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x14, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@rateest={{0x68}, {'veth1_to_batadv\x00', 'lo\x00', 0x2a, 0x0, 0x4, 0x9, 0x9, 0xfffffffd, {0xcc}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0xb8, 0x2, 'syz0\x00', {0x7fffffff}}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) shutdown(0xffffffffffffffff, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) write(r6, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['\xbb\xf6x\x06\x00\x17\xcd\x14f\x00\x00\x00\x00\x11\x00\x00\x00'], 0x11}) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 431.701455ms ago: executing program 34 (id=590): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x6}}}}, 0xf) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0xc, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/138, 0x27, 0x8a, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="7307a3baab8b27e20ff54af24816c1d78957b8a4650f6b5a47abdf53b748d42422e99626cf8f4428446c658eba6ef72af794a75301564c6e5c3e3bf55b403b6e13a7bc155582ffaceca9daae859cb968db7c42713ab15b"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffc2, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000040)={0xc, {0x9, "bfada8b88ed75292ed"}}, 0xf) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) 386.582783ms ago: executing program 35 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = socket(0xa, 0x3, 0x3a) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002fc0)=""/102400, 0x19000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x1f00, 0x12) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f00000f3000/0x4000)=nil, &(0x7f000022f000/0x3000)=nil, &(0x7f0000628000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00005bb000/0x4000)=nil, &(0x7f00002b1000/0x3000)=nil, &(0x7f00001df000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00007c4000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200)="36fb9f7fba0d194e4bab2ee2791ff00999e79a3240bca8d12a0e8e6365ae63d8bf62e701eef53d912a1763d302d04b39094c199b372d3fea250331a19e5fc739f4010de270f44241e9436116afb4a0d0a91d96e657bd5be4b632270ba22dc97315720bd242a43849ce670e03ebe5668a90ab969a3762a9ab8a62f5de83e4ab240f8608da5a", 0x85, r2}, 0x68) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x0) getpid() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x401, 0x2) sendmsg$rds(0xffffffffffffffff, 0x0, 0x20000000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 0s ago: executing program 36 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, 0xfffffffffffffffd) (fail_nth: 1) kernel console output (not intermixed with test programs): 2-1: new full-speed USB device number 7 using dummy_hcd [ 288.950270][ T29] audit: type=1400 audit(1732578779.380:502): avc: denied { read } for pid=6789 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 288.976708][ T5895] usb 2-1: device descriptor read/8, error -71 [ 288.981376][ T6761] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 289.142155][ T5891] usb 1-1: USB disconnect, device number 5 [ 289.189056][ T8] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 289.208152][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 289.219980][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41384, setting to 1024 [ 289.237298][ T8] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 289.247534][ T8] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 289.255658][ T8] usb 3-1: Manufacturer: syz [ 289.262298][ T8] usb 3-1: config 0 descriptor?? [ 289.270211][ T8] igorplugusb 3-1:0.0: endpoint incorrect [ 289.272935][ T5895] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 289.304114][ T5895] usb 2-1: device descriptor read/8, error -71 [ 289.329901][ T29] audit: type=1400 audit(1732578779.930:503): avc: denied { ioctl } for pid=6798 comm="syz.3.217" path="socket:[11840]" dev="sockfs" ino=11840 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 289.356266][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.217'. [ 289.423349][ T5895] usb usb2-port1: unable to enumerate USB device [ 289.662974][ T5922] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 289.756481][ T6761] syz.0.206 (6761) used greatest stack depth: 21296 bytes left [ 289.943064][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 289.950422][ T5922] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 289.959279][ T5922] usb 4-1: config 179 has no interface number 0 [ 289.965658][ T5922] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 289.979070][ T5922] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 290.034300][ T5922] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.353992][ T5922] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 290.365225][ T5922] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 290.380676][ T5922] usb 4-1: config 179 interface 65 has no altsetting 0 [ 290.388955][ T5922] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 290.399306][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.495307][ T6802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.551282][ T5922] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 290.572560][ T5860] usb 5-1: USB disconnect, device number 6 [ 290.586006][ T29] audit: type=1400 audit(1732578781.190:504): avc: denied { read } for pid=5195 comm="acpid" name="js0" dev="devtmpfs" ino=2806 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.277762][ T6815] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.221'. [ 291.287607][ T6815] netlink: zone id is out of range [ 291.293169][ T6815] netlink: zone id is out of range [ 291.294147][ T29] audit: type=1400 audit(1732578781.190:505): avc: denied { open } for pid=5195 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2806 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.321979][ T29] audit: type=1400 audit(1732578781.340:506): avc: denied { setopt } for pid=6812 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 291.341706][ T6815] netlink: zone id is out of range [ 291.341765][ T29] audit: type=1400 audit(1732578781.340:507): avc: denied { read write } for pid=6812 comm="syz.0.222" name="radio3" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 291.367893][ T6815] netlink: get zone limit has 8 unknown bytes [ 291.376954][ T29] audit: type=1400 audit(1732578781.340:508): avc: denied { open } for pid=6812 comm="syz.0.222" path="/dev/radio3" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 291.400179][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.465416][ T29] audit: type=1400 audit(1732578781.340:509): avc: denied { ioctl } for pid=6812 comm="syz.0.222" path="/dev/radio3" dev="devtmpfs" ino=969 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 291.490370][ T29] audit: type=1400 audit(1732578781.370:510): avc: denied { write } for pid=6801 comm="syz.3.218" name="tcp" dev="proc" ino=4026532836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 291.578074][ T5860] usb 3-1: USB disconnect, device number 4 [ 291.628489][ T9] usb 4-1: USB disconnect, device number 4 [ 291.628577][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 291.642990][ T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 291.972698][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 292.016496][ T6825] No source specified [ 292.039152][ T1131] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.048383][ T1131] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.055129][ T1131] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.061784][ T1131] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.292938][ T5860] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 292.476271][ T6827] dvmrp8: entered allmulticast mode [ 292.592923][ T5860] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 292.602212][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.652944][ T5860] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 292.661997][ T5860] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 292.672939][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 292.682912][ T5860] usb 3-1: Manufacturer: syz [ 292.715517][ T5860] usb 3-1: config 0 descriptor?? [ 292.802930][ T5860] rc_core: IR keymap rc-hauppauge not found [ 292.808860][ T5860] Registered IR keymap rc-empty [ 292.815434][ T5860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 292.831840][ T5860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 292.833512][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 292.856528][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.868050][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.892100][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 293.106903][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.125601][ T9] usb 4-1: config 0 descriptor?? [ 293.126788][ T5860] usb 3-1: USB disconnect, device number 5 [ 294.111296][ T5161] Bluetooth: hci2: command 0x0406 tx timeout [ 294.118234][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 294.123911][ T5858] Bluetooth: hci5: command 0x1003 tx timeout [ 294.264046][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 294.264062][ T29] audit: type=1400 audit(1732578784.870:531): avc: denied { create } for pid=6849 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 294.313029][ T29] audit: type=1800 audit(1732578784.900:532): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.230" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 294.359348][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'. [ 294.861197][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 294.867755][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 294.891835][ T9] usb 4-1: USB disconnect, device number 5 [ 294.902955][ T29] audit: type=1400 audit(1732578785.480:533): avc: denied { connect } for pid=6849 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 294.953057][ T29] audit: type=1400 audit(1732578785.480:534): avc: denied { write } for pid=6849 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 295.262971][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 295.273045][ T5860] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 295.284172][ T6868] nbd4: detected capacity change from 0 to 12 [ 295.297887][ T6868] block nbd4: NBD_DISCONNECT [ 295.321059][ T6868] block nbd4: Send disconnect failed -89 [ 295.384741][ T6868] block nbd4: Send control failed (result -89) [ 295.421419][ T6868] block nbd4: Request send failed, requeueing [ 295.478893][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 295.529030][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.646903][ T6868] block nbd4: Disconnected due to user request. [ 295.662016][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.791578][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.860259][ T98] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.869758][ T98] Buffer I/O error on dev nbd4, logical block 0, async page read [ 295.878532][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 295.883049][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.892371][ T5860] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 295.910372][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.920787][ T5860] usb 3-1: config 0 descriptor?? [ 295.932291][ T6864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64000 sclass=netlink_route_socket pid=6864 comm=syz.4.236 [ 295.935452][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 295.953907][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.963850][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 295.963895][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.971779][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.991667][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 295.999983][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.003418][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.018734][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 296.018908][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.018933][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 296.039000][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 296.049832][ T29] audit: type=1400 audit(1732578786.610:535): avc: denied { create } for pid=6873 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 296.054136][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 296.086655][ T9] usb 1-1: Manufacturer: syz [ 296.093846][ T9] usb 1-1: config 0 descriptor?? [ 296.101701][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.108263][ T29] audit: type=1400 audit(1732578786.690:536): avc: denied { write } for pid=6873 comm="syz.3.238" path="socket:[12045]" dev="sockfs" ino=12045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 296.142959][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 296.158922][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.163934][ T6872] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 296.170892][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 296.183581][ T6868] ldm_validate_partition_table(): Disk read failed. [ 296.190672][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.200371][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 296.208923][ T6868] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.218174][ T6868] Buffer I/O error on dev nbd4, logical block 0, async page read [ 296.226292][ T6868] Dev nbd4: unable to read RDB block 0 [ 296.232165][ T6868] nbd4: unable to read partition table [ 296.237907][ T6868] nbd4: partition table beyond EOD, truncated [ 296.333176][ T6795] ldm_validate_partition_table(): Disk read failed. [ 296.340084][ T6795] Dev nbd4: unable to read RDB block 0 [ 296.343612][ T5860] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 296.347512][ T6795] nbd4: unable to read partition table [ 296.352380][ T5860] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 296.361576][ T6795] nbd4: partition table beyond EOD, [ 296.365260][ T5860] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 296.367505][ T6795] truncated [ 296.370551][ T5860] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 296.370575][ T5860] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 296.374625][ T5860] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 296.565371][ T6795] ldm_validate_partition_table(): Disk read failed. [ 296.620500][ T6795] Dev nbd4: unable to read RDB block 0 [ 296.669183][ T6795] nbd4: unable to read partition table [ 297.119772][ T6795] nbd4: partition table beyond EOD, truncated [ 297.142926][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 297.150338][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.252150][ T9] usb 1-1: USB disconnect, device number 6 [ 297.279028][ T29] audit: type=1400 audit(1732578787.880:537): avc: denied { create } for pid=6886 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 297.297456][ T6889] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 297.306759][ T6889] netlink: 114264 bytes leftover after parsing attributes in process `syz.1.243'. [ 297.511471][ T29] audit: type=1400 audit(1732578787.920:538): avc: denied { setopt } for pid=6888 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.532552][ T29] audit: type=1400 audit(1732578788.130:539): avc: denied { bind } for pid=6888 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.917938][ T29] audit: type=1400 audit(1732578788.520:540): avc: denied { name_bind } for pid=6896 comm="syz.0.244" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 298.004449][ T6897] dvmrp8: entered allmulticast mode [ 298.294238][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 298.532934][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 298.541890][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.587865][ T5895] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 298.600218][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.145326][ T5895] usb 1-1: Product: syz [ 299.153761][ T5895] usb 1-1: Manufacturer: syz [ 299.163651][ T5895] usb 1-1: SerialNumber: syz [ 299.178234][ T5895] usb 1-1: config 0 descriptor?? [ 299.381158][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 299.381174][ T29] audit: type=1400 audit(1732578789.970:544): avc: denied { bind } for pid=6918 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 299.406556][ T29] audit: type=1400 audit(1732578789.970:545): avc: denied { setopt } for pid=6918 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 299.407981][ T5895] usb 1-1: Cannot retrieve CPort count: -71 [ 299.426117][ T29] audit: type=1400 audit(1732578789.990:546): avc: denied { create } for pid=6896 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 299.470442][ T5895] usb 1-1: Cannot retrieve CPort count: -71 [ 299.483990][ T5895] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 299.546905][ T5895] usb 1-1: USB disconnect, device number 7 [ 299.625362][ T5860] usb 3-1: USB disconnect, device number 6 [ 299.646857][ T29] audit: type=1400 audit(1732578790.240:547): avc: denied { create } for pid=6920 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 299.852937][ T5893] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 299.873398][ T6940] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 299.880127][ T6940] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 299.906249][ T6940] vhci_hcd vhci_hcd.0: Device attached [ 300.030003][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 300.045696][ T5893] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 300.055470][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.066091][ T5893] usb 4-1: config 0 descriptor?? [ 300.074316][ T5893] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 300.082998][ T5860] vhci_hcd: vhci_device speed not set [ 300.594973][ T29] audit: type=1400 audit(1732578791.040:548): avc: denied { execute } for pid=6932 comm="syz.4.256" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 300.693918][ T5893] usb 4-1: Detected FT232B [ 300.700317][ T5895] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 300.722543][ T5860] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 301.404096][ T5893] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 301.410948][ T29] audit: type=1400 audit(1732578792.010:549): avc: denied { write } for pid=6918 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.432715][ T5895] usb 2-1: config 0 has no interfaces? [ 301.438222][ T5895] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 301.452508][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.460665][ T5893] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 301.481778][ T5895] usb 2-1: config 0 descriptor?? [ 301.502109][ T5893] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 301.519156][ T5893] usb 4-1: USB disconnect, device number 6 [ 301.565720][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'. [ 301.586105][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 301.598409][ T5893] ftdi_sio 4-1:0.0: device disconnected [ 301.619659][ T29] audit: type=1400 audit(1732578792.160:550): avc: denied { ioctl } for pid=6954 comm="syz.4.261" path="socket:[12148]" dev="sockfs" ino=12148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.673263][ T29] audit: type=1400 audit(1732578792.160:551): avc: denied { write } for pid=6954 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.711162][ T6941] usb 35-1: recv xbuf, -104 [ 301.711737][ T8] usb 2-1: USB disconnect, device number 9 [ 301.751871][ T3716] vhci_hcd: stop threads [ 301.768162][ T3716] vhci_hcd: release socket [ 301.776455][ T3716] vhci_hcd: disconnect device [ 301.812962][ T5860] vhci_hcd: vhci_device speed not set [ 301.863122][ T5951] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 301.917278][ T5895] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 302.037485][ T5951] usb 5-1: string descriptor 0 read error: -22 [ 302.045005][ T5951] usb 5-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 302.067522][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.073070][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 302.084336][ T5951] usb 5-1: config 0 descriptor?? [ 302.091735][ T5895] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 302.102305][ T5951] r8712u: register rtl8712_netdev_ops to netdev_ops [ 302.110934][ T5951] usb 5-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 302.130243][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.141347][ T5895] usb 1-1: Product: syz [ 302.148122][ T5895] usb 1-1: Manufacturer: syz [ 302.156090][ T5895] usb 1-1: SerialNumber: syz [ 302.176008][ T5895] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 302.283043][ T5922] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 302.323935][ T29] audit: type=1400 audit(1732578792.930:552): avc: denied { create } for pid=6954 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.359624][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'. [ 302.387544][ T29] audit: type=1400 audit(1732578792.990:553): avc: denied { write } for pid=6954 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.421335][ T5951] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 302.433150][ T5951] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 302.451550][ T5951] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 302.461821][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 302.471941][ T5951] usb 5-1: USB disconnect, device number 7 [ 302.501998][ T5922] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 302.527330][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.558295][ T5922] usb 4-1: Product: syz [ 302.591760][ T5922] usb 4-1: Manufacturer: syz [ 302.596883][ T5922] usb 4-1: SerialNumber: syz [ 302.611206][ T5922] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 303.159685][ T6970] cgroup: none used incorrectly [ 303.745598][ T5922] gspca_stk1135: reg_w 0x3 err -110 [ 303.751921][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 303.758315][ T5922] gspca_stk1135: Sensor write failed [ 303.764003][ T5895] gspca_stk1135: reg_w 0x3 err -110 [ 303.905637][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 303.906664][ T6972] netlink: 182316 bytes leftover after parsing attributes in process `syz.4.266'. [ 303.912029][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 303.912041][ T5922] gspca_stk1135: Sensor write failed [ 303.912067][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 303.921559][ T6972] netlink: zone id is out of range [ 303.927872][ T5895] gspca_stk1135: Sensor write failed [ 303.949991][ T5922] gspca_stk1135: Sensor read failed [ 303.955587][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 303.962132][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 303.968606][ T5922] gspca_stk1135: Sensor read failed [ 303.973902][ T5895] gspca_stk1135: Sensor write failed [ 303.979253][ T5922] gspca_stk1135: Detected sensor type unknown (0x0) [ 303.986059][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 303.992780][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 303.999451][ T5895] gspca_stk1135: Sensor read failed [ 304.010256][ T6974] cgroup: none used incorrectly [ 304.018590][ T5922] gspca_stk1135: Sensor read failed [ 304.024101][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 304.030627][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 304.037080][ T5895] gspca_stk1135: Sensor read failed [ 304.042365][ T5922] gspca_stk1135: Sensor read failed [ 304.047733][ T5895] gspca_stk1135: Detected sensor type unknown (0x0) [ 304.054555][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 304.061079][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 304.067548][ T5922] gspca_stk1135: Sensor write failed [ 304.072950][ T5895] gspca_stk1135: Sensor read failed [ 304.078335][ T5922] gspca_stk1135: serial bus timeout: status=0x00 [ 304.084987][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 304.091628][ T5922] gspca_stk1135: Sensor write failed [ 304.097284][ T5895] gspca_stk1135: Sensor read failed [ 304.102739][ T5922] stk1135 4-1:64.0: probe with driver stk1135 failed with error -110 [ 304.111123][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 304.125434][ T5895] gspca_stk1135: Sensor write failed [ 304.131315][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 304.137870][ T5895] gspca_stk1135: Sensor write failed [ 304.143500][ T5895] stk1135 1-1:64.0: probe with driver stk1135 failed with error -110 [ 304.315560][ T6972] netlink: zone id is out of range [ 304.323169][ T6972] netlink: zone id is out of range [ 304.328506][ T6972] netlink: zone id is out of range [ 304.333880][ T6972] netlink: zone id is out of range [ 304.340161][ T6972] netlink: get zone limit has 8 unknown bytes [ 304.782943][ T5895] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 304.797029][ T5951] usb 1-1: USB disconnect, device number 8 [ 305.461823][ T5895] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 306.020817][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 306.062421][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41384, setting to 1024 [ 306.086353][ T5895] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 306.095645][ T5895] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 306.103715][ T5895] usb 2-1: Manufacturer: syz [ 306.109234][ T5891] usb 4-1: USB disconnect, device number 7 [ 306.116769][ T5895] usb 2-1: config 0 descriptor?? [ 306.127029][ T5895] igorplugusb 2-1:0.0: endpoint incorrect [ 306.129277][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 306.129294][ T29] audit: type=1400 audit(1732578796.730:561): avc: denied { read write } for pid=6989 comm="syz.2.271" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.229187][ T6990] loop6: detected capacity change from 0 to 524287999 [ 306.244562][ C0] blk_print_req_error: 40 callbacks suppressed [ 306.244575][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.259833][ C0] buffer_io_error: 40 callbacks suppressed [ 306.259840][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.297379][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.297788][ T29] audit: type=1400 audit(1732578796.790:562): avc: denied { open } for pid=6989 comm="syz.2.271" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.306559][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.329454][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.346390][ T29] audit: type=1400 audit(1732578796.830:563): avc: denied { append } for pid=6989 comm="syz.2.271" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.423128][ T6991] loop6: detected capacity change from 524287999 to 524287952 [ 306.448017][ T6990] loop6: unable to read partition table [ 306.454425][ T29] audit: type=1400 audit(1732578797.040:564): avc: denied { create } for pid=6992 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 306.480520][ T6990] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´8ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 306.499554][ T29] audit: type=1400 audit(1732578797.040:565): avc: denied { ioctl } for pid=6992 comm="syz.0.272" path="socket:[12232]" dev="sockfs" ino=12232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 307.373688][ T5895] usb 2-1: USB disconnect, device number 10 [ 307.762287][ T29] audit: type=1400 audit(1732578798.140:566): avc: denied { bind } for pid=7007 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 307.923092][ T29] audit: type=1400 audit(1732578798.140:567): avc: denied { name_bind } for pid=7007 comm="syz.3.275" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 307.943656][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.986246][ T29] audit: type=1400 audit(1732578798.140:568): avc: denied { node_bind } for pid=7007 comm="syz.3.275" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 308.056324][ T29] audit: type=1400 audit(1732578798.210:569): avc: denied { setopt } for pid=7007 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 308.075619][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.093853][ T29] audit: type=1400 audit(1732578798.240:570): avc: denied { connect } for pid=7007 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 308.127703][ T7014] netlink: 182316 bytes leftover after parsing attributes in process `syz.1.277'. [ 308.163147][ T7014] netlink: zone id is out of range [ 308.168342][ T7014] netlink: zone id is out of range [ 308.176221][ T7014] netlink: zone id is out of range [ 308.181660][ T7014] netlink: zone id is out of range [ 308.414329][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 308.436847][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 308.544865][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 308.671692][ T7022] block device autoloading is deprecated and will be removed. [ 308.680562][ T7022] syz.3.279: attempt to access beyond end of device [ 308.680562][ T7022] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 308.873713][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 308.882722][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 308.892989][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 309.338539][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 309.351072][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 309.412636][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 309.463736][ T5922] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 309.624234][ T5922] usb 5-1: no configurations [ 309.671148][ T5922] usb 5-1: can't read configurations, error -22 [ 309.677823][ T7047] net_ratelimit: 2 callbacks suppressed [ 309.677832][ T7047] netlink: zone id is out of range [ 309.688626][ T7047] netlink: zone id is out of range [ 309.693742][ T7047] netlink: zone id is out of range [ 309.698825][ T7047] netlink: get zone limit has 8 unknown bytes [ 309.774882][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 309.854171][ T5922] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 309.943970][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 309.956016][ T8] usb 4-1: config 11 has an invalid interface number: 111 but max is 0 [ 309.967352][ T8] usb 4-1: config 11 has no interface number 0 [ 309.975492][ T8] usb 4-1: config 11 interface 111 has no altsetting 0 [ 310.011113][ T8] usb 4-1: language id specifier not provided by device, defaulting to English [ 310.044871][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=44.29 [ 310.095649][ T5922] usb 5-1: no configurations [ 310.100328][ T5922] usb 5-1: can't read configurations, error -22 [ 310.142219][ T5922] usb usb5-port1: attempt power cycle [ 310.522243][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.530334][ T8] usb 4-1: Product: syz [ 310.534528][ T8] usb 4-1: Manufacturer: syz [ 310.539122][ T8] usb 4-1: SerialNumber: syz [ 310.787135][ T8] cdc_subset 4-1:11.111: probe with driver cdc_subset failed with error -22 [ 310.805078][ T8] usb 4-1: USB disconnect, device number 8 [ 310.893005][ T5922] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 311.005809][ T5922] usb 5-1: no configurations [ 311.011650][ T5922] usb 5-1: can't read configurations, error -22 [ 311.078627][ T7058] netlink: zone id is out of range [ 311.179322][ T5922] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 311.196253][ T7058] netlink: zone id is out of range [ 311.207270][ T7058] netlink: zone id is out of range [ 311.222904][ T7058] netlink: zone id is out of range [ 311.234395][ T7058] netlink: zone id is out of range [ 311.234682][ T5922] usb 5-1: device descriptor read/8, error -71 [ 311.245766][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 311.245779][ T29] audit: type=1400 audit(1732578801.840:590): avc: denied { read write } for pid=7063 comm="syz.1.290" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 311.252487][ T7058] netlink: get zone limit has 8 unknown bytes [ 311.274950][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.279416][ T29] audit: type=1400 audit(1732578801.840:591): avc: denied { open } for pid=7063 comm="syz.1.290" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 311.310626][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.318663][ T29] audit: type=1400 audit(1732578801.840:592): avc: denied { ioctl } for pid=7063 comm="syz.1.290" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 311.344225][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.373743][ T5891] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 311.398332][ T5922] usb usb5-port1: unable to enumerate USB device [ 311.526178][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 311.541427][ T5891] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 311.758226][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.769954][ T5891] usb 1-1: Product: syz [ 311.784202][ T5891] usb 1-1: Manufacturer: syz [ 311.789732][ T5891] usb 1-1: SerialNumber: syz [ 311.800949][ T5891] usb 1-1: config 0 descriptor?? [ 311.809765][ T5891] gspca_main: se401-2.14.0 probing 047d:5003 [ 311.964593][ T7074] team0: Port device bridge1 added [ 312.363008][ T29] audit: type=1400 audit(1732578802.890:593): avc: denied { setopt } for pid=7059 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.385227][ T7075] overlay: ./file0 is not a directory [ 312.500786][ T5891] gspca_se401: Bayer format not supported! [ 312.553080][ T29] audit: type=1400 audit(1732578802.890:594): avc: denied { read } for pid=7059 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.577285][ T29] audit: type=1400 audit(1732578802.950:595): avc: denied { create } for pid=7059 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.615052][ T29] audit: type=1400 audit(1732578803.150:596): avc: denied { listen } for pid=7059 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.635072][ T29] audit: type=1400 audit(1732578803.150:597): avc: denied { connect } for pid=7059 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.712950][ T29] audit: type=1400 audit(1732578803.270:598): avc: denied { accept } for pid=7066 comm="syz.4.291" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 313.271969][ T29] audit: type=1400 audit(1732578803.860:599): avc: denied { read } for pid=7087 comm="syz.3.297" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 313.296064][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.432966][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 313.563146][ T25] usb 5-1: device descriptor read/64, error -71 [ 313.813111][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 313.993061][ T25] usb 5-1: device descriptor read/64, error -71 [ 314.024991][ T5893] usb 1-1: USB disconnect, device number 9 [ 314.103296][ T25] usb usb5-port1: attempt power cycle [ 314.237066][ T7104] syz.1.302: attempt to access beyond end of device [ 314.237066][ T7104] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 314.290693][ T7104] qnx4: unable to read the superblock [ 314.454472][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 314.523049][ T5893] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 314.535708][ T25] usb 5-1: device descriptor read/8, error -71 [ 314.694241][ T5893] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.702971][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.730538][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.755575][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.802920][ T5951] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 314.852724][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 314.873777][ T25] usb 5-1: device descriptor read/8, error -71 [ 314.878333][ T5893] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.899953][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.914114][ T5893] usb 1-1: Product: syz [ 314.918330][ T5893] usb 1-1: Manufacturer: syz [ 315.516885][ T25] usb usb5-port1: unable to enumerate USB device [ 315.526065][ T5951] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 315.561628][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.572544][ T5893] cdc_wdm 1-1:1.0: skipping garbage [ 315.579508][ T5893] cdc_wdm 1-1:1.0: skipping garbage [ 315.591324][ T5893] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 315.598478][ T5893] cdc_wdm 1-1:1.0: Unknown control protocol [ 315.604995][ T5951] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 315.615205][ T5951] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 315.641772][ T5951] usb 2-1: Manufacturer: syz [ 315.653769][ T5951] usb 2-1: config 0 descriptor?? [ 315.723432][ T5951] rc_core: IR keymap rc-hauppauge not found [ 315.729362][ T5951] Registered IR keymap rc-empty [ 315.790169][ T5951] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 315.803979][ T5951] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 315.908976][ T7124] FAULT_INJECTION: forcing a failure. [ 315.908976][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 315.921862][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.3.306 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 315.932100][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.942137][ T7124] Call Trace: [ 315.945398][ T7124] [ 315.948311][ T7124] dump_stack_lvl+0x16c/0x1f0 [ 315.952977][ T7124] should_fail_ex+0x497/0x5b0 [ 315.957641][ T7124] ? fs_reclaim_acquire+0xae/0x150 [ 315.962738][ T7124] should_failslab+0xc2/0x120 [ 315.967403][ T7124] __kmalloc_noprof+0xcb/0x400 [ 315.972164][ T7124] iter_file_splice_write+0x1cd/0x10b0 [ 315.977619][ T7124] ? __pfx___lock_acquire+0x10/0x10 [ 315.982803][ T7124] ? __pfx_iter_file_splice_write+0x10/0x10 [ 315.988684][ T7124] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 315.994304][ T7124] ? splice_direct_to_actor+0x346/0xa40 [ 315.999840][ T7124] ? __pfx_iter_file_splice_write+0x10/0x10 [ 316.005717][ T7124] direct_splice_actor+0x18f/0x6c0 [ 316.010816][ T7124] splice_direct_to_actor+0x346/0xa40 [ 316.016177][ T7124] ? __pfx_direct_splice_actor+0x10/0x10 [ 316.021794][ T7124] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 316.027678][ T7124] ? __pfx___might_resched+0x10/0x10 [ 316.032951][ T7124] do_splice_direct+0x178/0x250 [ 316.037793][ T7124] ? __pfx_do_splice_direct+0x10/0x10 [ 316.043154][ T7124] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 316.049040][ T7124] do_sendfile+0xaed/0xe30 [ 316.053440][ T7124] ? __pfx_do_sendfile+0x10/0x10 [ 316.058361][ T7124] ? __might_fault+0x13b/0x190 [ 316.063111][ T7124] ? __pfx_lock_release+0x10/0x10 [ 316.068116][ T7124] ? trace_lock_acquire+0x146/0x1e0 [ 316.073304][ T7124] __x64_sys_sendfile64+0x1da/0x220 [ 316.078486][ T7124] ? __might_fault+0xe3/0x190 [ 316.083152][ T7124] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 316.088857][ T7124] ? __might_fault+0xe3/0x190 [ 316.093521][ T7124] ? rcu_is_watching+0x12/0xc0 [ 316.098279][ T7124] do_syscall_64+0xcd/0x250 [ 316.102771][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.108656][ T7124] RIP: 0033:0x7f887df7e819 [ 316.113052][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.132640][ T7124] RSP: 002b:00007f887ecd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 316.141051][ T7124] RAX: ffffffffffffffda RBX: 00007f887e136160 RCX: 00007f887df7e819 [ 316.149291][ T7124] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 316.157255][ T7124] RBP: 00007f887ecd1090 R08: 0000000000000000 R09: 0000000000000000 [ 316.165212][ T7124] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000002 [ 316.173176][ T7124] R13: 0000000000000000 R14: 00007f887e136160 R15: 00007ffcd5084698 [ 316.181140][ T7124] [ 316.184193][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.711469][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.718284][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.725389][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.731996][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.738243][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.744858][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.751121][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.757719][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.764751][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.771348][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.777864][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.784550][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.787983][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.790992][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.797057][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.803413][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.803986][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.822330][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.828736][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.834958][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.841550][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 316.847815][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 316.854403][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 317.229485][ T7128] No source specified [ 317.250487][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 317.326725][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 317.326741][ T29] audit: type=1400 audit(1732578807.930:604): avc: denied { ioctl } for pid=7108 comm="syz.1.304" path="/dev/input/event4" dev="devtmpfs" ino=2857 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.358356][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.399466][ T5951] usb 1-1: USB disconnect, device number 10 [ 317.399594][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 317.472583][ T8] usb 2-1: USB disconnect, device number 11 [ 317.966609][ T29] audit: type=1400 audit(1732578808.570:605): avc: denied { read } for pid=7098 comm="syz.0.300" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 317.995005][ T29] audit: type=1400 audit(1732578808.570:606): avc: denied { open } for pid=7098 comm="syz.0.300" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 317.995045][ T29] audit: type=1400 audit(1732578808.600:607): avc: denied { ioctl } for pid=7098 comm="syz.0.300" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.003013][ T967] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 318.130836][ T5895] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 318.162973][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 318.170224][ T967] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 318.179568][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.192325][ T967] usb 4-1: config 0 descriptor?? [ 318.218153][ T967] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 318.283309][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 318.294787][ T5895] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 318.306481][ T5895] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 318.315929][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 318.327269][ T5895] usb 3-1: config 1 has no interface number 0 [ 318.336120][ T5895] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.348431][ T5895] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 318.361691][ T5895] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 318.372576][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.395187][ T5895] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 318.646551][ T967] usb 4-1: Detected FT232B [ 318.839617][ T967] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 318.847083][ T967] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 318.856437][ T967] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 318.868834][ T967] usb 4-1: USB disconnect, device number 9 [ 318.882049][ T967] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 318.891695][ T967] ftdi_sio 4-1:0.0: device disconnected [ 319.377627][ T5161] Bluetooth: hci2: command 0x0406 tx timeout [ 319.385140][ T5161] Bluetooth: hci5: command 0x1003 tx timeout [ 319.395967][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 319.676491][ T5895] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 319.679948][ T7152] __nla_validate_parse: 2 callbacks suppressed [ 319.679963][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 319.778743][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 319.810872][ T29] audit: type=1400 audit(1732578810.410:608): avc: denied { bind } for pid=7151 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 319.878431][ T29] audit: type=1400 audit(1732578810.440:609): avc: denied { ioctl } for pid=7151 comm="syz.0.314" path="socket:[12791]" dev="sockfs" ino=12791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.968582][ T29] audit: type=1400 audit(1732578810.550:610): avc: denied { sys_module } for pid=7151 comm="syz.0.314" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 320.067409][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 320.322517][ T967] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 320.923237][ T5922] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 321.085905][ T8] usb 3-1: USB disconnect, device number 7 [ 321.093126][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 321.172929][ T967] usb 2-1: device descriptor read/64, error -71 [ 321.732931][ T967] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 321.798847][ T7189] dvmrp8: entered allmulticast mode [ 321.881072][ T967] usb 2-1: device descriptor read/64, error -71 [ 321.994148][ T967] usb usb2-port1: attempt power cycle [ 322.055036][ T5951] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 322.702942][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 322.763176][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.801197][ T5951] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 322.812647][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.833272][ T5951] usb 3-1: Product: syz [ 322.837460][ T5951] usb 3-1: Manufacturer: syz [ 322.853100][ T967] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 322.865038][ T5951] usb 3-1: SerialNumber: syz [ 322.883632][ T5951] usb 3-1: config 0 descriptor?? [ 322.908156][ T967] usb 2-1: device descriptor read/8, error -71 [ 323.139903][ T7187] hsr0: entered promiscuous mode [ 323.188582][ T7187] hsr_slave_0: left promiscuous mode [ 323.221286][ T7187] hsr_slave_1: left promiscuous mode [ 323.295810][ T7205] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 323.318609][ T7187] hsr0 (unregistering): left promiscuous mode [ 323.395581][ T5951] usb 3-1: Cannot retrieve CPort count: -71 [ 323.401529][ T5951] usb 3-1: Cannot retrieve CPort count: -71 [ 323.433162][ T5951] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 323.469787][ T5951] usb 3-1: USB disconnect, device number 8 [ 324.313755][ T967] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 324.480444][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 324.498408][ T967] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 324.507572][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.515687][ T967] usb 2-1: Product: syz [ 324.519858][ T967] usb 2-1: Manufacturer: syz [ 324.524494][ T967] usb 2-1: SerialNumber: syz [ 324.797846][ T967] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 325.165086][ T5951] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 325.286471][ T7233] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (14) [ 325.349537][ T5951] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 325.368875][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 325.474648][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41384, setting to 1024 [ 325.863837][ T967] gspca_stk1135: reg_w 0x3 err -110 [ 325.870107][ T967] gspca_stk1135: serial bus timeout: status=0x00 [ 325.876541][ T967] gspca_stk1135: Sensor write failed [ 325.936207][ T7235] cgroup: none used incorrectly [ 326.408546][ T967] gspca_stk1135: serial bus timeout: status=0x00 [ 326.416304][ T5951] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 326.425849][ T967] gspca_stk1135: Sensor write failed [ 326.431163][ T967] gspca_stk1135: serial bus timeout: status=0x00 [ 326.442931][ T5951] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 326.452891][ T5951] usb 3-1: Manufacturer: syz [ 326.459287][ T967] gspca_stk1135: Sensor read failed [ 326.465029][ T5951] usb 3-1: config 0 descriptor?? [ 326.472527][ T967] gspca_stk1135: serial bus timeout: status=0x00 [ 326.484523][ T5951] igorplugusb 3-1:0.0: endpoint incorrect [ 326.493727][ T967] gspca_stk1135: Sensor read failed [ 326.498933][ T967] gspca_stk1135: Detected sensor type unknown (0x0) [ 326.499090][ T29] audit: type=1400 audit(1732578817.070:611): avc: denied { ioctl } for pid=7236 comm="syz.0.338" path="socket:[13117]" dev="sockfs" ino=13117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 326.508221][ T967] gspca_stk1135: serial bus timeout: status=0x00 [ 326.532544][ T29] audit: type=1326 audit(1732578817.090:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.0.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e317e819 code=0x0 [ 326.537640][ T967] gspca_stk1135: Sensor read failed [ 326.571092][ T967] gspca_stk1135: serial bus timeout: status=0x00 [ 326.577508][ T967] gspca_stk1135: Sensor read failed [ 326.582718][ T967] gspca_stk1135: serial bus timeout: status=0x00 [ 326.589243][ T967] gspca_stk1135: Sensor write failed [ 326.595060][ T967] gspca_stk1135: serial bus timeout: status=0x00 [ 326.601647][ T967] gspca_stk1135: Sensor write failed [ 326.607032][ T967] stk1135 2-1:64.0: probe with driver stk1135 failed with error -110 [ 326.807256][ T29] audit: type=1400 audit(1732578817.410:613): avc: denied { write } for pid=7241 comm="syz.4.340" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 326.843013][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 327.005593][ T9] usb 4-1: device descriptor read/64, error -71 [ 327.350262][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 327.658663][ T5922] usb 2-1: USB disconnect, device number 15 [ 327.775004][ T967] usb 3-1: USB disconnect, device number 9 [ 327.788980][ T7246] netlink: 56 bytes leftover after parsing attributes in process `syz.0.341'. [ 327.835900][ T9] usb 4-1: device descriptor read/64, error -71 [ 327.867940][ T29] audit: type=1400 audit(1732578818.450:614): avc: denied { append } for pid=7245 comm="syz.0.341" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 327.928783][ T29] audit: type=1400 audit(1732578818.450:615): avc: denied { open } for pid=7245 comm="syz.0.341" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 328.087465][ T7258] overlayfs: missing 'workdir' [ 328.547845][ T29] audit: type=1400 audit(1732578818.610:616): avc: denied { write } for pid=7247 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.586710][ T9] usb usb4-port1: attempt power cycle [ 328.592461][ T29] audit: type=1400 audit(1732578818.680:617): avc: denied { mount } for pid=7247 comm="syz.1.342" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 328.638558][ T29] audit: type=1400 audit(1732578819.220:618): avc: denied { mount } for pid=7257 comm="syz.0.346" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 328.702950][ T29] audit: type=1400 audit(1732578819.240:619): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 328.728311][ T29] audit: type=1400 audit(1732578819.330:620): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 329.102955][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 329.314246][ T9] usb 4-1: device descriptor read/8, error -71 [ 329.560114][ T7265] overlayfs: missing 'lowerdir' [ 329.872959][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 329.945449][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 329.954455][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.965599][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 329.975619][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 329.983726][ T9] usb 4-1: Manufacturer: syz [ 329.990231][ T9] usb 4-1: config 0 descriptor?? [ 330.044349][ T9] rc_core: IR keymap rc-hauppauge not found [ 330.052651][ T9] Registered IR keymap rc-empty [ 330.060773][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 330.076569][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 330.203136][ T5922] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 330.373094][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 330.596144][ T5922] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 330.654049][ T25] usb 4-1: USB disconnect, device number 14 [ 330.665221][ T5922] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=6e.11 [ 330.675224][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.683280][ T5922] usb 3-1: Product: syz [ 330.689143][ T5922] usb 3-1: Manufacturer: syz [ 330.693929][ T5922] usb 3-1: SerialNumber: syz [ 331.602983][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.0.355'. [ 331.810852][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 331.810866][ T29] audit: type=1400 audit(1732578822.410:623): avc: denied { create } for pid=7305 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 332.880985][ T29] audit: type=1400 audit(1732578823.480:624): avc: denied { create } for pid=7309 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 333.014787][ T29] audit: type=1400 audit(1732578823.480:625): avc: denied { write } for pid=7309 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 333.079734][ T5922] redrat3 3-1:32.0: Couldn't find all endpoints [ 333.125659][ T5922] usb 3-1: USB disconnect, device number 10 [ 334.543132][ T5951] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 334.592004][ T29] audit: type=1400 audit(1732578825.190:626): avc: denied { create } for pid=7348 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.619746][ T29] audit: type=1400 audit(1732578825.220:627): avc: denied { ioctl } for pid=7348 comm="syz.2.371" path="socket:[13292]" dev="sockfs" ino=13292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.667322][ T29] audit: type=1400 audit(1732578825.250:628): avc: denied { mount } for pid=7348 comm="syz.2.371" name="/" dev="autofs" ino=13294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 334.691922][ T5895] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 334.717391][ T29] audit: type=1400 audit(1732578825.320:629): avc: denied { create } for pid=7348 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.738796][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 334.756120][ T29] audit: type=1400 audit(1732578825.340:630): avc: denied { connect } for pid=7348 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.776789][ T5951] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 334.786928][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.797741][ T5951] usb 2-1: config 0 descriptor?? [ 334.809702][ T29] audit: type=1400 audit(1732578825.390:631): avc: denied { read } for pid=7348 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.836106][ T5951] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 334.884243][ T5895] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 334.892614][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.931676][ T5895] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 334.941652][ T5895] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 334.952245][ T5895] usb 1-1: Manufacturer: syz [ 334.958994][ T29] audit: type=1400 audit(1732578825.530:632): avc: denied { write } for pid=7348 comm="syz.2.371" path="socket:[13755]" dev="sockfs" ino=13755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.972743][ T5895] usb 1-1: config 0 descriptor?? [ 335.006334][ T7357] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.372'. [ 335.022965][ T5951] usb 2-1: Detected FT232B [ 335.038254][ T7357] netlink: zone id is out of range [ 335.063225][ T7357] netlink: zone id is out of range [ 335.073530][ T5895] rc_core: IR keymap rc-hauppauge not found [ 335.082211][ T5895] Registered IR keymap rc-empty [ 335.089009][ T7357] netlink: zone id is out of range [ 335.099302][ T7357] netlink: get zone limit has 8 unknown bytes [ 335.106334][ T5895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 335.112940][ T967] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 335.134309][ T5895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 335.224045][ T5951] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 335.238885][ T5951] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 335.283060][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 335.601387][ T967] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 335.623232][ T5951] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 335.640615][ T967] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 335.682537][ T5951] usb 2-1: USB disconnect, device number 16 [ 335.696976][ T967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 335.719926][ T9] usb 1-1: USB disconnect, device number 11 [ 335.731373][ T5951] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 335.751665][ T967] usb 4-1: config 1 has no interface number 0 [ 335.762951][ T967] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.774821][ T5951] ftdi_sio 2-1:0.0: device disconnected [ 335.796832][ T967] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 335.846864][ T967] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 335.871818][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.902639][ T967] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 336.245130][ T7371] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 337.283071][ T80] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 337.312993][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 337.442990][ T80] usb 1-1: Using ep0 maxpacket: 32 [ 337.473258][ T80] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 337.474375][ T9] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 337.524864][ T80] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.608489][ T80] usb 1-1: Product: syz [ 337.654182][ T80] usb 1-1: Manufacturer: syz [ 337.698289][ T9] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.708347][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 337.711428][ T80] usb 1-1: SerialNumber: syz [ 337.715227][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 337.728896][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.740841][ T9] usb 3-1: config 0 descriptor?? [ 337.753891][ T80] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 338.163262][ T9] wacom 0003:056A:0015.0004: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 338.187595][ T9] wacom 0003:056A:0015.0004: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.2-1/input0 [ 338.225853][ T9] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0015.0004/input/input14 [ 338.416011][ T7380] warning: `syz.2.379' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 338.464409][ T5922] usb 3-1: USB disconnect, device number 11 [ 338.646624][ T7407] cgroup: none used incorrectly [ 338.664693][ T80] gspca_stk1135: reg_w 0x3 err -110 [ 338.721859][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 338.847374][ T80] gspca_stk1135: Sensor write failed [ 338.882993][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 338.970152][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 339.146241][ T80] gspca_stk1135: Sensor write failed [ 339.161790][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 339.178647][ T80] gspca_stk1135: Sensor read failed [ 339.184143][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 339.192624][ T25] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 339.226737][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 339.246777][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.268511][ T80] gspca_stk1135: Sensor read failed [ 339.286875][ T25] usb 5-1: config 0 descriptor?? [ 339.292962][ T80] gspca_stk1135: Detected sensor type unknown (0x0) [ 339.320118][ T25] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 339.331146][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 339.344940][ T80] gspca_stk1135: Sensor read failed [ 339.356490][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 339.531597][ T80] gspca_stk1135: Sensor read failed [ 339.946870][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 340.014193][ T80] gspca_stk1135: Sensor write failed [ 340.073944][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 340.083263][ T80] gspca_stk1135: Sensor write failed [ 340.095828][ T80] stk1135 1-1:64.0: probe with driver stk1135 failed with error -110 [ 340.293097][ T80] usb 1-1: USB disconnect, device number 12 [ 340.294516][ T967] snd_usb_pod 4-1:1.1: set_interface failed [ 340.305096][ T967] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 340.312294][ T967] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 340.348269][ T25] usb 5-1: Detected FT232B [ 340.354758][ T967] usb 4-1: USB disconnect, device number 15 [ 340.998026][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 341.007458][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 341.061121][ T25] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 341.084176][ T25] usb 5-1: USB disconnect, device number 16 [ 341.096535][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 341.136523][ T25] ftdi_sio 5-1:0.0: device disconnected [ 341.262931][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 341.306457][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 341.376343][ T7438] No source specified [ 341.936407][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 342.003122][ T9] usb 2-1: device descriptor read/64, error -71 [ 342.314532][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 342.808296][ T9] usb 2-1: device descriptor read/64, error -71 [ 342.993416][ T9] usb usb2-port1: attempt power cycle [ 343.383252][ T967] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 343.503064][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 343.698118][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 343.924584][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 343.946466][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 343.946481][ T29] audit: type=1400 audit(1732578834.480:640): avc: denied { create } for pid=7453 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 344.032064][ T9] usb 2-1: device descriptor read/8, error -71 [ 344.040118][ T29] audit: type=1400 audit(1732578834.490:641): avc: denied { bind } for pid=7453 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 344.064177][ T29] audit: type=1400 audit(1732578834.490:642): avc: denied { listen } for pid=7453 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 344.083663][ T29] audit: type=1400 audit(1732578834.490:643): avc: denied { write } for pid=7453 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 344.769537][ T29] audit: type=1400 audit(1732578834.780:644): avc: denied { write } for pid=7453 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 344.816976][ T29] audit: type=1400 audit(1732578834.780:645): avc: denied { nlmsg_write } for pid=7453 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 344.990646][ T967] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 344.999091][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.034790][ T29] audit: type=1400 audit(1732578834.860:646): avc: denied { write } for pid=7453 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.071095][ T967] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 345.080175][ T967] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 345.091929][ T967] usb 3-1: Manufacturer: syz [ 345.142101][ T5895] IPVS: starting estimator thread 0... [ 345.152553][ T7482] tipc: Started in network mode [ 345.166879][ T967] usb 3-1: config 0 descriptor?? [ 345.170318][ T7482] tipc: Node identity ac1414aa, cluster identity 4711 [ 345.234202][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 345.254675][ T7483] IPVS: using max 57 ests per chain, 136800 per kthread [ 345.304064][ T7482] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.374169][ T967] rc_core: IR keymap rc-hauppauge not found [ 345.399635][ T7486] netlink: 182316 bytes leftover after parsing attributes in process `syz.1.410'. [ 345.403128][ T7481] netlink: 182316 bytes leftover after parsing attributes in process `syz.0.405'. [ 345.409002][ T7486] netlink: zone id is out of range [ 345.418374][ T7481] netlink: zone id is out of range [ 345.423334][ T7486] netlink: zone id is out of range [ 345.428471][ T7481] netlink: zone id is out of range [ 345.433526][ T7486] netlink: zone id is out of range [ 345.433541][ T7486] netlink: zone id is out of range [ 345.433547][ T7486] netlink: zone id is out of range [ 345.433553][ T7486] netlink: get zone limit has 8 unknown bytes [ 345.444440][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.462483][ T7482] tipc: Enabled bearer , priority 10 [ 345.467718][ T967] Registered IR keymap rc-empty [ 345.473719][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 345.478699][ T967] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 345.496262][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 345.538395][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.632675][ T25] usb 4-1: Product: syz [ 345.642971][ T25] usb 4-1: Manufacturer: syz [ 345.652958][ T25] usb 4-1: SerialNumber: syz [ 345.708143][ T25] usb 4-1: config 0 descriptor?? [ 345.983402][ T967] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 346.005711][ T25] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.424921][ T967] tipc: Node number set to 2886997162 [ 346.435724][ T25] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 346.513610][ T7501] i2c i2c-0: Invalid block write size 252 [ 347.451586][ T5922] usb 4-1: USB disconnect, device number 16 [ 347.544700][ T967] usb 3-1: USB disconnect, device number 12 [ 347.703039][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 347.876288][ T7516] netlink: 'syz.4.416': attribute type 12 has an invalid length. [ 347.884280][ T7516] netlink: 'syz.4.416': attribute type 3 has an invalid length. [ 347.893275][ T7516] netlink: 'syz.4.416': attribute type 40 has an invalid length. [ 347.912976][ T9] usb 2-1: device descriptor read/64, error -71 [ 348.642950][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 348.731784][ T7531] team_slave_0: entered promiscuous mode [ 348.737771][ T7531] team_slave_1: entered promiscuous mode [ 348.749496][ T7531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.782994][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 348.791607][ T9] usb 2-1: device descriptor read/64, error -71 [ 348.903117][ T9] usb usb2-port1: attempt power cycle [ 348.942938][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 348.949296][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.959535][ T967] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 348.967887][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.979748][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 348.989908][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 348.999841][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.013161][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.022261][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.051816][ T8] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 349.144224][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.157228][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.167082][ T967] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 349.176219][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.896853][ T5922] usb 3-1: USB disconnect, device number 13 [ 349.914816][ T967] usb 5-1: config 0 descriptor?? [ 349.972993][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 350.074944][ T9] usb 2-1: device descriptor read/8, error -71 [ 350.483981][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 350.513535][ C0] net_ratelimit: 15 callbacks suppressed [ 350.513561][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 350.526946][ T9] usb 2-1: device descriptor read/8, error -71 [ 350.564495][ T29] audit: type=1400 audit(1732578842.170:647): avc: denied { bind } for pid=7547 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 350.643772][ T9] usb usb2-port1: unable to enumerate USB device [ 350.653506][ T7552] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 350.660036][ T7552] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 350.669423][ T967] cougar 0003:060B:700A.0005: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.4-1/input0 [ 350.712654][ T7557] netlink: 182316 bytes leftover after parsing attributes in process `syz.2.427'. [ 350.727097][ T7557] netlink: zone id is out of range [ 350.732211][ T7557] netlink: zone id is out of range [ 350.739350][ T7552] vhci_hcd vhci_hcd.0: Device attached [ 350.755140][ T7557] netlink: zone id is out of range [ 350.761582][ T7557] netlink: zone id is out of range [ 350.769035][ T7557] netlink: zone id is out of range [ 350.777926][ T7557] netlink: get zone limit has 8 unknown bytes [ 350.897247][ T5895] vhci_hcd: vhci_device speed not set [ 351.003458][ T5895] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 351.076096][ T29] audit: type=1400 audit(1732578842.680:648): avc: denied { sqpoll } for pid=7532 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 351.096843][ T5922] usb 5-1: USB disconnect, device number 17 [ 351.319086][ T9] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 351.484511][ T9] usb 2-1: config 0 has no interfaces? [ 351.490094][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.504493][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.544429][ T9] usb 2-1: config 0 descriptor?? [ 351.552965][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 351.944909][ T7554] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 351.980153][ T25] usb 2-1: USB disconnect, device number 25 [ 352.047718][ T11] vhci_hcd: stop threads [ 352.053505][ T11] vhci_hcd: release socket [ 352.057959][ T11] vhci_hcd: disconnect device [ 352.594326][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 352.925734][ T7593] netlink: 182316 bytes leftover after parsing attributes in process `syz.0.438'. [ 352.936770][ T7593] netlink: zone id is out of range [ 353.086679][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 353.252898][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 353.341974][ T9] usb 2-1: no configurations [ 353.349716][ T9] usb 2-1: can't read configurations, error -22 [ 353.737491][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 353.924586][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 354.807583][ T9] usb 2-1: no configurations [ 354.812208][ T9] usb 2-1: can't read configurations, error -22 [ 354.819934][ T9] usb usb2-port1: attempt power cycle [ 355.712932][ C0] net_ratelimit: 7 callbacks suppressed [ 355.712949][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 356.654233][ T5895] vhci_hcd: vhci_device speed not set [ 356.752907][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 356.923190][ T80] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 357.096552][ T80] usb 5-1: Using ep0 maxpacket: 32 [ 357.100425][ T7630] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 357.108167][ T7630] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 357.118670][ T80] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 357.128609][ T80] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.138595][ T80] usb 5-1: Product: syz [ 357.150004][ T80] usb 5-1: Manufacturer: syz [ 357.162343][ T7630] vhci_hcd vhci_hcd.0: Device attached [ 357.162862][ T80] usb 5-1: SerialNumber: syz [ 357.199103][ T80] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 357.280272][ T9] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 357.342985][ T5951] vhci_hcd: vhci_device speed not set [ 357.402935][ T5951] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 357.412902][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 357.443363][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 357.453181][ T5922] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 357.465727][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 357.493241][ T9] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 357.512916][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.546170][ T9] usb 2-1: Product: syz [ 357.550338][ T9] usb 2-1: Manufacturer: syz [ 357.573219][ T9] usb 2-1: SerialNumber: syz [ 357.583734][ T9] usb 2-1: config 0 descriptor?? [ 357.594269][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 357.600192][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 357.610572][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 357.700939][ T5922] usb 1-1: config 0 has no interfaces? [ 357.706943][ T5922] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 357.729255][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.773791][ T5922] usb 1-1: config 0 descriptor?? [ 357.792932][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 358.018697][ T7641] cgroup: none used incorrectly [ 358.623421][ T80] gspca_stk1135: reg_w 0x3 err -110 [ 358.631225][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 358.637666][ T80] gspca_stk1135: Sensor write failed [ 358.643194][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 358.649615][ T80] gspca_stk1135: Sensor write failed [ 358.655165][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 358.661554][ T80] gspca_stk1135: Sensor read failed [ 358.667042][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 358.673855][ T80] gspca_stk1135: Sensor read failed [ 358.677165][ T7627] fuse: Bad value for 'fd' [ 358.683604][ T80] gspca_stk1135: Detected sensor type unknown (0x0) [ 358.690440][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 358.696894][ T80] gspca_stk1135: Sensor read failed [ 358.698569][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.710627][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 358.710958][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.717035][ T80] gspca_stk1135: Sensor read failed [ 358.730155][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 358.732217][ T9] usb 1-1: USB disconnect, device number 13 [ 358.742572][ T80] gspca_stk1135: Sensor write failed [ 358.752894][ T80] gspca_stk1135: serial bus timeout: status=0x00 [ 358.759255][ T80] gspca_stk1135: Sensor write failed [ 358.764877][ T80] stk1135 5-1:64.0: probe with driver stk1135 failed with error -110 [ 358.832974][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 359.009982][ T7633] usb 33-1: recv xbuf, -104 [ 359.016078][ T67] vhci_hcd: stop threads [ 359.033452][ T67] vhci_hcd: release socket [ 359.040543][ T67] vhci_hcd: disconnect device [ 359.054245][ T7643] netlink: 288 bytes leftover after parsing attributes in process `syz.2.453'. [ 359.069951][ T29] audit: type=1400 audit(1732578850.670:649): avc: denied { ioctl } for pid=7642 comm="syz.2.453" path="socket:[14294]" dev="sockfs" ino=14294 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 359.082902][ T5951] vhci_hcd: vhci_device speed not set [ 359.094462][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.164412][ T5891] usb 2-1: USB disconnect, device number 29 [ 359.282142][ T29] audit: type=1400 audit(1732578850.880:650): avc: denied { create } for pid=7647 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 359.466809][ T7652] SELinux: policydb string length -1636638456 does not match expected length 8 [ 359.476540][ T7652] SELinux: failed to load policy [ 359.558815][ T29] audit: type=1400 audit(1732578851.070:651): avc: denied { connect } for pid=7645 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.578632][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.872899][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 359.946357][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 359.972215][ T9] usb 5-1: USB disconnect, device number 18 [ 359.994192][ T29] audit: type=1400 audit(1732578851.070:652): avc: denied { load_policy } for pid=7645 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 360.039016][ T29] audit: type=1400 audit(1732578851.250:653): avc: denied { append } for pid=7645 comm="syz.2.454" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.113364][ T29] audit: type=1400 audit(1732578851.710:654): avc: denied { setcheckreqprot } for pid=7653 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 360.209774][ T29] audit: type=1400 audit(1732578851.810:655): avc: denied { create } for pid=7659 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 360.423236][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 360.554038][ T29] audit: type=1400 audit(1732578851.810:656): avc: denied { write } for pid=7659 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 360.727075][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 360.732943][ T9] usb 5-1: no configurations [ 360.740735][ T9] usb 5-1: can't read configurations, error -22 [ 360.912894][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 361.670349][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 361.952978][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.398993][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 362.473874][ T9] usb 5-1: no configurations [ 362.478511][ T9] usb 5-1: can't read configurations, error -22 [ 362.493075][ T9] usb usb5-port1: attempt power cycle [ 362.512900][ T29] audit: type=1400 audit(1732578854.110:657): avc: denied { write } for pid=7686 comm="syz.1.466" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 362.992893][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.380377][ T80] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 363.701438][ T80] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.714459][ T80] usb 4-1: New USB device found, idVendor=0525, idProduct=a4e1, bcdDevice= 0.40 [ 363.823966][ T7704] Bluetooth: MGMT ver 1.23 [ 363.956484][ T7705] ======================================================= [ 363.956484][ T7705] WARNING: The mand mount option has been deprecated and [ 363.956484][ T7705] and is ignored by this kernel. Remove the mand [ 363.956484][ T7705] option from the mount to silence this warning. [ 363.956484][ T7705] ======================================================= [ 364.032897][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 364.284100][ T29] audit: type=1400 audit(1732578855.540:658): avc: denied { mount } for pid=7698 comm="syz.4.468" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 364.368614][ T80] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.444901][ T29] audit: type=1400 audit(1732578855.560:659): avc: denied { remount } for pid=7698 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 364.472375][ T80] usb 4-1: Product: syz [ 364.498222][ T80] usb 4-1: Manufacturer: syz [ 364.513299][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 364.517487][ T80] usb 4-1: SerialNumber: syz [ 364.527525][ T29] audit: type=1400 audit(1732578855.970:660): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 364.701488][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 364.734522][ T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 364.743422][ T8] usb 2-1: config 179 has no interface number 0 [ 364.755993][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 364.779353][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 364.803022][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.815093][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 364.825704][ T80] cdc_ncm 4-1:1.0: bind() failure [ 364.838175][ T8] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 364.852409][ T8] usb 2-1: config 179 interface 65 has no altsetting 0 [ 364.857176][ T80] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 364.874260][ T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 365.072613][ T80] cdc_ncm 4-1:1.1: bind() failure [ 365.072888][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 365.842009][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.891191][ T7700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.911870][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input19 [ 366.004831][ T80] usb 4-1: USB disconnect, device number 17 [ 366.112885][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 366.239109][ T7723] random: crng reseeded on system resumption [ 366.455680][ T29] audit: type=1400 audit(1732578857.840:661): avc: denied { append } for pid=7721 comm="syz.2.476" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 366.470512][ T5895] usb 2-1: USB disconnect, device number 30 [ 366.478758][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 366.492981][ T5895] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 366.546146][ T7727] netlink: 182316 bytes leftover after parsing attributes in process `syz.0.474'. [ 366.572327][ T7727] netlink: zone id is out of range [ 366.580487][ T7727] netlink: zone id is out of range [ 366.586655][ T7727] netlink: zone id is out of range [ 366.592370][ T7727] netlink: zone id is out of range [ 366.609551][ T7727] netlink: zone id is out of range [ 366.614880][ T29] audit: type=1400 audit(1732578857.840:662): avc: denied { open } for pid=7721 comm="syz.2.476" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 366.656676][ T7727] netlink: get zone limit has 8 unknown bytes [ 366.728640][ T7719] netlink: 182316 bytes leftover after parsing attributes in process `syz.3.475'. [ 366.750442][ T7719] netlink: zone id is out of range [ 366.758638][ T7719] netlink: zone id is out of range [ 366.765521][ T7719] netlink: zone id is out of range [ 367.553288][ T5922] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 367.752936][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 367.759766][ T5922] usb 5-1: no configurations [ 367.796042][ T5922] usb 5-1: can't read configurations, error -22 [ 368.612922][ T5922] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 368.772965][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 368.779597][ T5922] usb 5-1: no configurations [ 368.784460][ T5922] usb 5-1: can't read configurations, error -22 [ 368.885692][ T5922] usb usb5-port1: attempt power cycle [ 369.086641][ T7748] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 369.098281][ T7748] qnx6: wrong signature (magic) in superblock #1. [ 369.104793][ T7748] qnx6: unable to read the first superblock [ 369.813029][ T5895] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 370.403180][ T5922] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 370.428301][ T5895] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 370.441583][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.472974][ T5895] usb 2-1: config 0 descriptor?? [ 370.632951][ T5922] usb 5-1: device not accepting address 24, error -71 [ 370.763260][ T29] audit: type=1400 audit(1732578862.370:663): avc: denied { bind } for pid=7742 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.833326][ T7762] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 370.839850][ T7762] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 370.851844][ T5895] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e [ 370.886463][ T5895] hackrf 2-1:0.0: Could not detect board [ 370.894946][ T7762] vhci_hcd vhci_hcd.0: Device attached [ 370.895448][ T5895] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 370.933785][ T5895] usb 2-1: USB disconnect, device number 31 [ 371.312886][ C0] net_ratelimit: 7 callbacks suppressed [ 371.312904][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 371.687178][ T967] vhci_hcd: vhci_device speed not set [ 371.742914][ T5922] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 371.764895][ T5922] usb 5-1: config 0 has no interfaces? [ 371.770530][ T5922] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 371.772915][ T29] audit: type=1400 audit(1732578863.370:664): avc: denied { setopt } for pid=7774 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.816024][ T967] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 371.816874][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.853317][ T5922] usb 5-1: config 0 descriptor?? [ 371.912322][ T29] audit: type=1400 audit(1732578863.440:665): avc: denied { read write } for pid=7774 comm="syz.3.489" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 372.129354][ T7782] overlay: ./file0 is not a directory [ 372.272702][ T29] audit: type=1400 audit(1732578863.440:666): avc: denied { open } for pid=7774 comm="syz.3.489" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 372.273213][ T5894] usb 5-1: USB disconnect, device number 25 [ 372.297455][ T7785] SELinux: security_context_str_to_sid (staff) failed with errno=-22 [ 372.328167][ T7763] usb 41-1: recv xbuf, -104 [ 372.352953][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 372.423095][ T35] vhci_hcd: stop threads [ 372.424734][ T29] audit: type=1400 audit(1732578863.440:667): avc: denied { watch } for pid=7774 comm="syz.3.489" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 372.427345][ T35] vhci_hcd: release socket [ 372.454986][ T967] vhci_hcd: vhci_device speed not set [ 372.552575][ T29] audit: type=1400 audit(1732578863.440:668): avc: denied { watch_sb } for pid=7774 comm="syz.3.489" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 372.552918][ T967] usb 41-1: device descriptor read/64, error -71 [ 373.101665][ T35] vhci_hcd: disconnect device [ 373.131894][ T29] audit: type=1400 audit(1732578863.510:669): avc: denied { ioctl } for pid=7774 comm="syz.3.489" path="socket:[15539]" dev="sockfs" ino=15539 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 373.156576][ T29] audit: type=1400 audit(1732578863.720:670): avc: denied { mount } for pid=7779 comm="syz.1.491" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 373.293046][ T967] vhci_hcd: vhci_device speed not set [ 373.392888][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.402991][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 373.976985][ T29] audit: type=1326 audit(1732578865.580:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd97b7e819 code=0x7ffc0000 [ 374.060616][ T29] audit: type=1326 audit(1732578865.580:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd97b7e819 code=0x7ffc0000 [ 374.432885][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.465164][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 374.473546][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.484096][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 374.493148][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 374.501174][ T9] usb 3-1: Manufacturer: syz [ 374.529094][ T5894] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 374.618036][ T9] usb 3-1: config 0 descriptor?? [ 374.648253][ T7810] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.498'. [ 374.682937][ T7810] netlink: zone id is out of range [ 374.688223][ T7810] netlink: zone id is out of range [ 374.700090][ T7810] netlink: get zone limit has 8 unknown bytes [ 374.708369][ T7820] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 374.723336][ T9] rc_core: IR keymap rc-hauppauge not found [ 374.741742][ T9] Registered IR keymap rc-empty [ 374.770076][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 374.793979][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 374.804818][ T5894] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 374.818686][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.472978][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 375.560683][ T5894] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 375.758395][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 375.785837][ T5894] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 375.797344][ T5894] usb 1-1: Manufacturer: syz [ 375.805127][ T5894] usb 1-1: config 0 descriptor?? [ 375.817890][ T5922] usb 3-1: USB disconnect, device number 14 [ 375.876291][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 375.902279][ T5894] rc_core: IR keymap rc-hauppauge not found [ 375.910431][ T5894] Registered IR keymap rc-empty [ 375.943497][ T5894] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 376.002394][ T5894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input21 [ 376.007410][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 376.241151][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 376.512953][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.552991][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.572084][ T5894] usb 1-1: USB disconnect, device number 14 [ 377.802935][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 377.802970][ T29] audit: type=1326 audit(1732578869.330:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 378.252281][ T5922] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 378.264804][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.274230][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.486039][ T29] audit: type=1326 audit(1732578869.330:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 378.592890][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.598539][ T7865] overlayfs: missing 'lowerdir' [ 379.151247][ T5922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 379.248021][ T29] audit: type=1326 audit(1732578869.330:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 379.280596][ T5922] usb 2-1: config 0 has no interface number 0 [ 379.309483][ T5922] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.432664][ T5922] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 58112, setting to 1024 [ 379.520840][ T29] audit: type=1326 audit(1732578869.330:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 379.632989][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.697277][ T7864] netlink: 182316 bytes leftover after parsing attributes in process `syz.2.511'. [ 379.706615][ T7864] netlink: zone id is out of range [ 379.711702][ T7864] netlink: zone id is out of range [ 379.716823][ T7864] netlink: zone id is out of range [ 379.721902][ T7864] netlink: zone id is out of range [ 379.726993][ T7864] netlink: zone id is out of range [ 379.732069][ T7864] netlink: get zone limit has 8 unknown bytes [ 379.742975][ T29] audit: type=1326 audit(1732578869.330:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 379.776816][ T5922] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 380.054545][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.071448][ T29] audit: type=1326 audit(1732578869.330:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 380.072417][ T5922] usb 2-1: config 0 descriptor?? [ 380.117351][ T29] audit: type=1326 audit(1732578869.330:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 380.254068][ T29] audit: type=1326 audit(1732578869.330:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 380.278011][ T29] audit: type=1326 audit(1732578869.920:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 380.802638][ T29] audit: type=1326 audit(1732578869.920:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69217e819 code=0x7ffc0000 [ 380.903057][ T5922] usbhid 2-1:0.1: can't add hid device: -71 [ 380.909292][ T5922] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 380.967890][ T5922] usb 2-1: USB disconnect, device number 32 [ 381.177499][ T7893] FAULT_INJECTION: forcing a failure. [ 381.177499][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 381.231923][ T7893] CPU: 0 UID: 0 PID: 7893 Comm: syz.0.519 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 381.242187][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.252237][ T7893] Call Trace: [ 381.255510][ T7893] [ 381.258436][ T7893] dump_stack_lvl+0x16c/0x1f0 [ 381.263116][ T7893] should_fail_ex+0x497/0x5b0 [ 381.267795][ T7893] ? fs_reclaim_acquire+0xae/0x150 [ 381.272904][ T7893] should_failslab+0xc2/0x120 [ 381.277582][ T7893] kmem_cache_alloc_node_noprof+0x71/0x310 [ 381.283385][ T7893] ? __alloc_skb+0x2b1/0x380 [ 381.287980][ T7893] __alloc_skb+0x2b1/0x380 [ 381.292398][ T7893] ? __pfx___alloc_skb+0x10/0x10 [ 381.297340][ T7893] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 381.302464][ T7893] netlink_ack+0x164/0xb90 [ 381.306894][ T7893] netlink_rcv_skb+0x348/0x440 [ 381.311659][ T7893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.317122][ T7893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.322418][ T7893] ? netlink_deliver_tap+0x1ae/0xd30 [ 381.327707][ T7893] netlink_unicast+0x53c/0x7f0 [ 381.332472][ T7893] ? __pfx_netlink_unicast+0x10/0x10 [ 381.337764][ T7893] netlink_sendmsg+0x8b8/0xd70 [ 381.342534][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.347827][ T7893] ____sys_sendmsg+0xaaf/0xc90 [ 381.352590][ T7893] ? copy_msghdr_from_user+0x10b/0x160 [ 381.358065][ T7893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.363372][ T7893] ___sys_sendmsg+0x135/0x1e0 [ 381.368060][ T7893] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.373271][ T7893] ? __pfx_lock_release+0x10/0x10 [ 381.378298][ T7893] ? trace_lock_acquire+0x146/0x1e0 [ 381.383512][ T7893] ? __fget_files+0x206/0x3a0 [ 381.388199][ T7893] __sys_sendmsg+0x16e/0x220 [ 381.392786][ T7893] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.397905][ T7893] do_syscall_64+0xcd/0x250 [ 381.402415][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.408309][ T7893] RIP: 0033:0x7fa3e317e819 [ 381.412718][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.432333][ T7893] RSP: 002b:00007fa3e3f09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.440751][ T7893] RAX: ffffffffffffffda RBX: 00007fa3e3335fa0 RCX: 00007fa3e317e819 [ 381.448717][ T7893] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 381.456686][ T7893] RBP: 00007fa3e3f09090 R08: 0000000000000000 R09: 0000000000000000 [ 381.464662][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.472634][ T7893] R13: 0000000000000000 R14: 00007fa3e3335fa0 R15: 00007ffe4d052a58 [ 381.480620][ T7893] [ 381.483756][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.712883][ C0] net_ratelimit: 1 callbacks suppressed [ 381.712906][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.233059][ T5922] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 382.383200][ T5922] usb 2-1: device descriptor read/64, error -71 [ 382.656691][ T5922] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 382.752887][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.793063][ T5922] usb 2-1: device descriptor read/64, error -71 [ 383.149713][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 383.149746][ T29] audit: type=1400 audit(1732578874.620:699): avc: denied { unlink } for pid=7915 comm="syz.2.524" name="#9" dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 383.508916][ T5922] usb usb2-port1: attempt power cycle [ 383.519191][ T29] audit: type=1400 audit(1732578874.620:700): avc: denied { mount } for pid=7915 comm="syz.2.524" name="/" dev="overlay" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 383.585457][ T29] audit: type=1400 audit(1732578874.690:701): avc: denied { create } for pid=7915 comm="syz.2.524" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 383.792990][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 383.873052][ T5922] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 383.948439][ T5922] usb 2-1: device descriptor read/8, error -71 [ 383.982188][ T29] audit: type=1400 audit(1732578874.690:702): avc: denied { link } for pid=7915 comm="syz.2.524" name="#d" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 384.005566][ T5951] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 384.015399][ T29] audit: type=1400 audit(1732578874.690:703): avc: denied { rename } for pid=7915 comm="syz.2.524" name="#e" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 384.046308][ T29] audit: type=1400 audit(1732578875.190:704): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 384.068821][ T29] audit: type=1400 audit(1732578875.220:705): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 384.088338][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.101479][ T29] audit: type=1400 audit(1732578875.700:706): avc: denied { write } for pid=5192 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.122915][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.142267][ T29] audit: type=1400 audit(1732578875.700:707): avc: denied { remove_name } for pid=5192 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.165056][ T29] audit: type=1400 audit(1732578875.700:708): avc: denied { rename } for pid=5192 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.203672][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 384.223035][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 384.248525][ T5951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.259552][ T5951] usb 1-1: config 0 has no interfaces? [ 384.262946][ T5922] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 384.275046][ T5951] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 384.284374][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.292388][ T5951] usb 1-1: Product: syz [ 384.296989][ T5951] usb 1-1: Manufacturer: syz [ 384.301587][ T5951] usb 1-1: SerialNumber: syz [ 384.306938][ T5922] usb 2-1: device descriptor read/8, error -71 [ 384.321673][ T5951] usb 1-1: config 0 descriptor?? [ 384.413238][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 384.474571][ T9] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 384.492921][ T9] usb 3-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 384.525643][ T7928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.533291][ T7928] IPv6: NLM_F_CREATE should be set when creating new route [ 384.545656][ T5922] usb usb2-port1: unable to enumerate USB device [ 384.564924][ T5951] usb 1-1: USB disconnect, device number 15 [ 384.585673][ T9] usb 3-1: string descriptor 0 read error: -71 [ 384.593344][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 384.599774][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 384.610540][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.631488][ T9] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 384.656688][ T9] usb 3-1: no configuration chosen from 1 choice [ 384.683481][ T9] usb 3-1: USB disconnect, device number 15 [ 385.122961][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 385.362879][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 385.374108][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.405723][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 385.424768][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.519837][ T7964] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 385.742408][ T9] usb 2-1: Product: syz [ 385.840569][ T9] usb 2-1: Manufacturer: syz [ 385.926350][ T9] usb 2-1: SerialNumber: syz [ 385.963473][ T9] usb 2-1: config 0 descriptor?? [ 386.189619][ T7941] hsr0: entered promiscuous mode [ 387.404615][ T7941] hsr_slave_0: left promiscuous mode [ 387.408575][ T9] usb 2-1: Cannot retrieve CPort count: -110 [ 387.419902][ T9] usb 2-1: Cannot retrieve CPort count: -110 [ 387.426519][ T9] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 387.587103][ T7941] hsr_slave_1: left promiscuous mode [ 387.633309][ T7941] hsr0 (unregistering): left promiscuous mode [ 388.030890][ T7983] gretap0: entered promiscuous mode [ 388.037354][ T7983] gretap0: entered allmulticast mode [ 388.941142][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 388.941156][ T29] audit: type=1400 audit(1732578880.540:718): avc: denied { getopt } for pid=7982 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 388.997643][ T5891] usb 2-1: USB disconnect, device number 37 [ 389.265559][ T29] audit: type=1400 audit(1732578880.870:719): avc: denied { mount } for pid=8006 comm="syz.1.549" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 389.293074][ T5922] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 389.869067][ T52] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 389.912777][ T29] audit: type=1400 audit(1732578881.510:720): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 390.009699][ T29] audit: type=1400 audit(1732578881.610:721): avc: denied { bind } for pid=8019 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 390.019616][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 390.041059][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.052249][ T5922] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.063326][ T5922] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 390.072492][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.189683][ T5922] usb 4-1: Product: syz [ 390.194176][ T5922] usb 4-1: Manufacturer: syz [ 390.198781][ T5922] usb 4-1: SerialNumber: syz [ 390.204920][ T5922] usb 4-1: config 0 descriptor?? [ 391.458130][ T9] usb 4-1: USB disconnect, device number 18 [ 391.873208][ T8039] hub 6-0:1.0: USB hub found [ 391.879458][ T8039] hub 6-0:1.0: 1 port detected [ 391.929369][ T29] audit: type=1400 audit(1732578883.340:722): avc: denied { read } for pid=8032 comm="syz.2.556" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.659324][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 392.672975][ T29] audit: type=1400 audit(1732578883.340:723): avc: denied { open } for pid=8032 comm="syz.2.556" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.709827][ T29] audit: type=1400 audit(1732578883.350:724): avc: denied { ioctl } for pid=8032 comm="syz.2.556" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.736520][ T29] audit: type=1400 audit(1732578884.250:725): avc: denied { create } for pid=8041 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 392.756622][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.787084][ T29] audit: type=1400 audit(1732578884.260:726): avc: denied { write } for pid=8041 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 392.807370][ T29] audit: type=1400 audit(1732578884.310:727): avc: denied { create } for pid=8041 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 392.940899][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 393.056732][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 393.094017][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 393.229742][ T8060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'. [ 393.881609][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 393.894208][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 393.918372][ T52] Bluetooth: hci4: hardware error 0x00 [ 393.952984][ T5922] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 394.815755][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 394.828865][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 395.326776][ T5922] usb 3-1: can't read configurations, error -61 [ 395.327236][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 395.467164][ T5922] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 395.484332][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.504216][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.517812][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 395.527681][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.542271][ T9] usb 1-1: config 0 descriptor?? [ 395.549873][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 395.631460][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 395.631475][ T29] audit: type=1400 audit(1732578887.230:729): avc: denied { nlmsg_write } for pid=8096 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 395.658207][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.724005][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 395.744579][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 395.769922][ T5922] usb 3-1: can't read configurations, error -61 [ 395.791558][ T5922] usb usb3-port1: attempt power cycle [ 395.822283][ T8109] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 395.932988][ T29] audit: type=1400 audit(1732578887.530:730): avc: denied { create } for pid=8113 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 396.157088][ T5922] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 396.258304][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 396.278132][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 396.290041][ T5922] usb 3-1: can't read configurations, error -61 [ 396.354110][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 396.651425][ T8119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.673843][ T5922] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 396.731184][ T5922] usb 3-1: device descriptor read/8, error -71 [ 396.742029][ T8119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.761412][ T29] audit: type=1400 audit(1732578888.340:731): avc: denied { name_bind } for pid=8121 comm="syz.3.584" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 396.941430][ T5922] usb usb3-port1: unable to enumerate USB device [ 396.977722][ T8119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.561953][ T967] usb 1-1: USB disconnect, device number 16 [ 397.720662][ T8119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.657234][ T8119] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.678830][ T8119] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.692320][ T8119] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.870862][ T8148] No source specified [ 398.932036][ T1144] Bluetooth: hci5: Frame reassembly failed (-84) [ 399.235509][ T8119] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.376302][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 399.550714][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 399.555959][ T29] audit: type=1400 audit(1732578891.090:732): avc: denied { mount } for pid=8149 comm="syz.1.592" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 399.583425][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.598158][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 399.609938][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 399.625225][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 399.642097][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 399.657851][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.677813][ T9] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 399.687032][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.699497][ T9] usb 1-1: Product: syz [ 399.703928][ T9] usb 1-1: Manufacturer: syz [ 399.708644][ T9] usb 1-1: SerialNumber: syz [ 399.723527][ T9] usb 1-1: config 0 descriptor?? [ 399.729423][ T8144] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.992984][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 400.992996][ T5858] Bluetooth: hci5: command 0x1003 tx timeout [ 401.833926][ T9] rc_core: IR keymap rc-snapstream-firefly not found [ 401.840619][ T9] Registered IR keymap rc-empty [ 401.846353][ T9] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 401.856189][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 401.868412][ T9] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 414.402906][ T29] audit: type=1400 audit(1732578906.000:733): avc: denied { read } for pid=8160 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 414.501049][ T29] audit: type=1400 audit(1732578906.030:734): avc: denied { open } for pid=8160 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 439.636552][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.642925][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.075354][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.081677][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.233178][ T30] INFO: task syz.2.589:8140 blocked for more than 143 seconds. [ 561.240815][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 561.248170][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.260796][ T30] task:syz.2.589 state:D stack:25648 pid:8140 tgid:8138 ppid:5842 flags:0x00000004 [ 561.271355][ T30] Call Trace: [ 561.279303][ T30] [ 561.282251][ T30] __schedule+0xe58/0x5ad0 [ 561.286703][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 561.291907][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 561.301167][ T30] ? __pfx___schedule+0x10/0x10 [ 561.306058][ T30] ? schedule+0x298/0x350 [ 561.310391][ T30] ? __pfx_lock_release+0x10/0x10 [ 561.320027][ T30] ? __mutex_trylock_common+0x78/0x250 [ 561.325542][ T30] ? lock_acquire+0x2f/0xb0 [ 561.330048][ T30] ? schedule+0x1fd/0x350 [ 561.338651][ T30] schedule+0xe7/0x350 [ 561.343588][ T30] schedule_preempt_disabled+0x13/0x30 [ 561.349060][ T30] __mutex_lock+0x62b/0xa60 [ 561.357354][ T30] ? lock_system_sleep+0x87/0xa0 [ 561.362312][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 561.367387][ T30] ? misc_open+0x63/0x420 [ 561.371733][ T30] ? lock_system_sleep+0x87/0xa0 [ 561.380793][ T30] lock_system_sleep+0x87/0xa0 [ 561.386524][ T30] snapshot_open+0x3f/0x2b0 [ 561.391053][ T30] ? __pfx_snapshot_open+0x10/0x10 [ 561.398937][ T30] misc_open+0x35a/0x420 [ 561.403350][ T30] ? __pfx_misc_open+0x10/0x10 [ 561.408114][ T30] chrdev_open+0x237/0x6a0 [ 561.412514][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 561.421110][ T30] do_dentry_open+0xf59/0x1ea0 [ 561.425930][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 561.430868][ T30] ? inode_permission+0xdd/0x5f0 [ 561.435910][ T30] vfs_open+0x82/0x3f0 [ 561.439983][ T30] ? may_open+0x1f2/0x400 [ 561.444377][ T30] path_openat+0x1e6a/0x2d60 [ 561.449077][ T30] ? __pfx_path_openat+0x10/0x10 [ 561.454264][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 561.459568][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 561.464894][ T30] ? find_held_lock+0x2d/0x110 [ 561.469670][ T30] do_filp_open+0x20c/0x470 [ 561.474445][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 561.479474][ T30] ? find_held_lock+0x2d/0x110 [ 561.484540][ T30] ? alloc_fd+0x41f/0x760 [ 561.488886][ T30] do_sys_openat2+0x17a/0x1e0 [ 561.494658][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 561.499992][ T30] ? trace_lock_acquire+0x146/0x1e0 [ 561.506827][ T30] __x64_sys_openat+0x175/0x210 [ 561.511704][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 561.519006][ T30] do_syscall_64+0xcd/0x250 [ 561.524134][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.530044][ T30] RIP: 0033:0x7fd69217e819 [ 561.534710][ T30] RSP: 002b:00007fd693009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 561.544400][ T30] RAX: ffffffffffffffda RBX: 00007fd692336080 RCX: 00007fd69217e819 [ 561.552508][ T30] RDX: 0000000000000481 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 561.562978][ T30] RBP: 00007fd6921f175e R08: 0000000000000000 R09: 0000000000000000 [ 561.571012][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.579117][ T30] R13: 0000000000000000 R14: 00007fd692336080 R15: 00007ffc6d857308 [ 561.587166][ T30] [ 561.590193][ T30] INFO: task syz.2.589:8145 blocked for more than 143 seconds. [ 561.597764][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 561.605116][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.614826][ T30] task:syz.2.589 state:D stack:28432 pid:8145 tgid:8138 ppid:5842 flags:0x00000004 [ 561.625377][ T30] Call Trace: [ 561.628655][ T30] [ 561.631584][ T30] __schedule+0xe58/0x5ad0 [ 561.636279][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 561.641504][ T30] ? __pfx___schedule+0x10/0x10 [ 561.646507][ T30] ? schedule+0x298/0x350 [ 561.650899][ T30] ? __pfx_lock_release+0x10/0x10 [ 561.656094][ T30] ? __mutex_trylock_common+0x78/0x250 [ 561.661552][ T30] ? lock_acquire+0x2f/0xb0 [ 561.666299][ T30] ? schedule+0x1fd/0x350 [ 561.670639][ T30] schedule+0xe7/0x350 [ 561.674932][ T30] schedule_preempt_disabled+0x13/0x30 [ 561.680386][ T30] __mutex_lock+0x62b/0xa60 [ 561.684915][ T30] ? misc_open+0x63/0x420 [ 561.689245][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 561.694343][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 561.699636][ T30] ? chrdev_open+0x10e/0x6a0 [ 561.704273][ T30] ? __pfx_lock_release+0x10/0x10 [ 561.709302][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 561.715039][ T30] ? __pfx_misc_open+0x10/0x10 [ 561.719848][ T30] ? misc_open+0x63/0x420 [ 561.724438][ T30] misc_open+0x63/0x420 [ 561.729101][ T30] ? __pfx_misc_open+0x10/0x10 [ 561.733937][ T30] chrdev_open+0x237/0x6a0 [ 561.738361][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 561.743325][ T30] do_dentry_open+0xf59/0x1ea0 [ 561.748093][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 561.753245][ T30] ? inode_permission+0xdd/0x5f0 [ 561.758194][ T30] vfs_open+0x82/0x3f0 [ 561.762272][ T30] ? may_open+0x1f2/0x400 [ 561.766632][ T30] path_openat+0x1e6a/0x2d60 [ 561.771235][ T30] ? __pfx_path_openat+0x10/0x10 [ 561.776261][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 561.781454][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 561.786759][ T30] ? find_held_lock+0x2d/0x110 [ 561.791550][ T30] do_filp_open+0x20c/0x470 [ 561.796174][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 561.801204][ T30] ? find_held_lock+0x2d/0x110 [ 561.806029][ T30] ? alloc_fd+0x41f/0x760 [ 561.810359][ T30] do_sys_openat2+0x17a/0x1e0 [ 561.815127][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 561.820323][ T30] ? do_user_addr_fault+0xe50/0x13f0 [ 561.825636][ T30] ? __pfx_lock_release+0x10/0x10 [ 561.830982][ T30] __x64_sys_openat+0x175/0x210 [ 561.835952][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 561.841328][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 561.846651][ T30] do_syscall_64+0xcd/0x250 [ 561.851161][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.857269][ T30] RIP: 0033:0x7fd69217d1b0 [ 561.861680][ T30] RSP: 002b:00007fd692fe5ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 561.870118][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd69217d1b0 [ 561.878272][ T30] RDX: 0000000000000002 RSI: 00007fd6921f14f4 RDI: 00000000ffffff9c [ 561.886279][ T30] RBP: 00007fd6921f14f4 R08: 0000000000000000 R09: 0000000000000000 [ 561.894355][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0f63067478e218e8 [ 561.902330][ T30] R13: 0000000000000036 R14: 00000000200000c0 R15: 00007ffc6d857308 [ 561.910351][ T30] [ 561.913461][ T30] INFO: task syz.3.590:8147 blocked for more than 144 seconds. [ 561.920992][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 561.928282][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.937331][ T30] task:syz.3.590 state:D stack:26272 pid:8147 tgid:8141 ppid:5838 flags:0x00004004 [ 561.947549][ T30] Call Trace: [ 561.950826][ T30] [ 561.953800][ T30] __schedule+0xe58/0x5ad0 [ 561.958323][ T30] ? __pfx___schedule+0x10/0x10 [ 561.963227][ T30] ? schedule+0x298/0x350 [ 561.967553][ T30] ? __pfx_lock_release+0x10/0x10 [ 561.972564][ T30] ? __mutex_trylock_common+0x78/0x250 [ 561.978057][ T30] ? lock_acquire+0x2f/0xb0 [ 561.982555][ T30] ? schedule+0x1fd/0x350 [ 561.986918][ T30] schedule+0xe7/0x350 [ 561.990979][ T30] schedule_preempt_disabled+0x13/0x30 [ 561.996477][ T30] __mutex_lock+0x62b/0xa60 [ 562.000975][ T30] ? __pfx___schedule+0x10/0x10 [ 562.005829][ T30] ? misc_open+0x63/0x420 [ 562.010162][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 562.015254][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 562.020629][ T30] ? preempt_schedule_common+0x44/0xc0 [ 562.026137][ T30] ? __pfx_misc_open+0x10/0x10 [ 562.030906][ T30] ? misc_open+0x63/0x420 [ 562.035711][ T30] misc_open+0x63/0x420 [ 562.040035][ T30] ? __pfx_misc_open+0x10/0x10 [ 562.044833][ T30] chrdev_open+0x237/0x6a0 [ 562.049261][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 562.054251][ T30] do_dentry_open+0xf59/0x1ea0 [ 562.059010][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 562.064067][ T30] ? inode_permission+0xdd/0x5f0 [ 562.069011][ T30] vfs_open+0x82/0x3f0 [ 562.073127][ T30] ? may_open+0x1f2/0x400 [ 562.077464][ T30] path_openat+0x1e6a/0x2d60 [ 562.082054][ T30] ? __pfx_path_openat+0x10/0x10 [ 562.087023][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 562.092214][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 562.097522][ T30] ? find_held_lock+0x2d/0x110 [ 562.102293][ T30] do_filp_open+0x20c/0x470 [ 562.106827][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 562.111851][ T30] ? find_held_lock+0x2d/0x110 [ 562.116659][ T30] ? alloc_fd+0x41f/0x760 [ 562.120996][ T30] do_sys_openat2+0x17a/0x1e0 [ 562.125692][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.130892][ T30] __x64_sys_openat+0x175/0x210 [ 562.135761][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 562.141471][ T30] do_syscall_64+0xcd/0x250 [ 562.146049][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.151950][ T30] RIP: 0033:0x7f887df7e819 [ 562.156413][ T30] RSP: 002b:00007f887ecd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 562.164944][ T30] RAX: ffffffffffffffda RBX: 00007f887e136160 RCX: 00007f887df7e819 [ 562.173078][ T30] RDX: 0000000000000802 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 562.181046][ T30] RBP: 00007f887dff175e R08: 0000000000000000 R09: 0000000000000000 [ 562.189055][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.197048][ T30] R13: 0000000000000000 R14: 00007f887e136160 R15: 00007ffcd5084698 [ 562.205222][ T30] [ 562.208237][ T30] INFO: task syz.0.591:8144 blocked for more than 144 seconds. [ 562.215843][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 562.223140][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.231793][ T30] task:syz.0.591 state:D stack:28272 pid:8144 tgid:8143 ppid:5843 flags:0x00000004 [ 562.242395][ T30] Call Trace: [ 562.245706][ T30] [ 562.248638][ T30] __schedule+0xe58/0x5ad0 [ 562.253127][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 562.258334][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 562.263563][ T30] ? __pfx___schedule+0x10/0x10 [ 562.268512][ T30] ? schedule+0x298/0x350 [ 562.272878][ T30] ? __pfx_lock_release+0x10/0x10 [ 562.277904][ T30] ? __mutex_trylock_common+0x78/0x250 [ 562.283383][ T30] ? lock_acquire+0x2f/0xb0 [ 562.287886][ T30] ? schedule+0x1fd/0x350 [ 562.292220][ T30] schedule+0xe7/0x350 [ 562.296489][ T30] schedule_preempt_disabled+0x13/0x30 [ 562.301956][ T30] __mutex_lock+0x62b/0xa60 [ 562.306483][ T30] ? misc_open+0x63/0x420 [ 562.310809][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 562.315882][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 562.321175][ T30] ? chrdev_open+0x10e/0x6a0 [ 562.325810][ T30] ? __pfx_lock_release+0x10/0x10 [ 562.330832][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 562.336535][ T30] ? __pfx_misc_open+0x10/0x10 [ 562.341299][ T30] ? misc_open+0x63/0x420 [ 562.345988][ T30] misc_open+0x63/0x420 [ 562.350149][ T30] ? __pfx_misc_open+0x10/0x10 [ 562.354954][ T30] chrdev_open+0x237/0x6a0 [ 562.359363][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 562.364329][ T30] do_dentry_open+0xf59/0x1ea0 [ 562.369201][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 562.374206][ T30] ? inode_permission+0xdd/0x5f0 [ 562.379150][ T30] vfs_open+0x82/0x3f0 [ 562.383284][ T30] ? may_open+0x1f2/0x400 [ 562.387626][ T30] path_openat+0x1e6a/0x2d60 [ 562.392217][ T30] ? __pfx_path_openat+0x10/0x10 [ 562.397201][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 562.402392][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 562.407715][ T30] ? find_held_lock+0x2d/0x110 [ 562.412487][ T30] do_filp_open+0x20c/0x470 [ 562.417292][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 562.422320][ T30] ? find_held_lock+0x2d/0x110 [ 562.427116][ T30] ? alloc_fd+0x41f/0x760 [ 562.431454][ T30] do_sys_openat2+0x17a/0x1e0 [ 562.436306][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.441532][ T30] __x64_sys_openat+0x175/0x210 [ 562.446797][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 562.452294][ T30] do_syscall_64+0xcd/0x250 [ 562.456871][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.462792][ T30] RIP: 0033:0x7fa3e317e819 [ 562.467200][ T30] RSP: 002b:00007fa3e3f09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 562.475757][ T30] RAX: ffffffffffffffda RBX: 00007fa3e3335fa0 RCX: 00007fa3e317e819 [ 562.483743][ T30] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 562.491706][ T30] RBP: 00007fa3e31f175e R08: 0000000000000000 R09: 0000000000000000 [ 562.499702][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.507682][ T30] R13: 0000000000000000 R14: 00007fa3e3335fa0 R15: 00007ffe4d052a58 [ 562.516290][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.516367][ T30] [ 562.522568][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.525542][ T30] INFO: task syz.1.592:8152 blocked for more than 144 seconds. [ 562.539346][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 562.547052][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.555762][ T30] task:syz.1.592 state:D stack:27344 pid:8152 tgid:8149 ppid:5845 flags:0x00004006 [ 562.566016][ T30] Call Trace: [ 562.569294][ T30] [ 562.572351][ T30] __schedule+0xe58/0x5ad0 [ 562.577030][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 562.582241][ T30] ? __pfx___schedule+0x10/0x10 [ 562.588079][ T30] ? schedule+0x298/0x350 [ 562.592409][ T30] ? __pfx_lock_release+0x10/0x10 [ 562.604675][ T30] ? __mutex_trylock_common+0x78/0x250 [ 562.610144][ T30] ? lock_acquire+0x2f/0xb0 [ 562.618067][ T30] ? schedule+0x1fd/0x350 [ 562.622403][ T30] schedule+0xe7/0x350 [ 562.627555][ T30] schedule_preempt_disabled+0x13/0x30 [ 562.636398][ T30] __mutex_lock+0x62b/0xa60 [ 562.640911][ T30] ? misc_open+0x63/0x420 [ 562.646324][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 562.652154][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 562.661985][ T30] ? chrdev_open+0x10e/0x6a0 [ 562.667588][ T30] ? __pfx_lock_release+0x10/0x10 [ 562.672618][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 562.685060][ T30] ? __pfx_misc_open+0x10/0x10 [ 562.689835][ T30] ? misc_open+0x63/0x420 [ 562.697549][ T30] misc_open+0x63/0x420 [ 562.701713][ T30] ? __pfx_misc_open+0x10/0x10 [ 562.707591][ T30] chrdev_open+0x237/0x6a0 [ 562.712014][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 562.721312][ T30] do_dentry_open+0xf59/0x1ea0 [ 562.727108][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 562.732053][ T30] ? inode_permission+0xdd/0x5f0 [ 562.740382][ T30] vfs_open+0x82/0x3f0 [ 562.745464][ T30] ? may_open+0x1f2/0x400 [ 562.749800][ T30] path_openat+0x1e6a/0x2d60 [ 562.758714][ T30] ? __pfx_path_openat+0x10/0x10 [ 562.765220][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 562.770428][ T30] do_filp_open+0x20c/0x470 [ 562.778570][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 562.785094][ T30] ? find_held_lock+0x2d/0x110 [ 562.789888][ T30] ? alloc_fd+0x41f/0x760 [ 562.798106][ T30] do_sys_openat2+0x17a/0x1e0 [ 562.803803][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.809008][ T30] ? __pfx___schedule+0x10/0x10 [ 562.817273][ T30] __x64_sys_openat+0x175/0x210 [ 562.822137][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 562.829576][ T30] do_syscall_64+0xcd/0x250 [ 562.839267][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.846202][ T30] RIP: 0033:0x7fdd97b7e819 [ 562.850616][ T30] RSP: 002b:00007fdd98a0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 562.864120][ T30] RAX: ffffffffffffffda RBX: 00007fdd97d36160 RCX: 00007fdd97b7e819 [ 562.872094][ T30] RDX: 0000000000000002 RSI: 0000000020000a80 RDI: ffffffffffffff9c [ 562.883094][ T30] RBP: 00007fdd97bf175e R08: 0000000000000000 R09: 0000000000000000 [ 562.891066][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.903600][ T30] R13: 0000000000000000 R14: 00007fdd97d36160 R15: 00007ffe3a0c7df8 [ 562.911587][ T30] [ 562.918057][ T30] INFO: task syz-executor:8160 blocked for more than 145 seconds. [ 562.926850][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 562.934398][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.943200][ T30] task:syz-executor state:D stack:27648 pid:8160 tgid:8160 ppid:1 flags:0x00004000 [ 562.953560][ T30] Call Trace: [ 562.957182][ T30] [ 562.960117][ T30] __schedule+0xe58/0x5ad0 [ 562.964549][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 562.969751][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 562.974998][ T30] ? __pfx___schedule+0x10/0x10 [ 562.979842][ T30] ? schedule+0x298/0x350 [ 562.984311][ T30] ? __pfx_lock_release+0x10/0x10 [ 562.989342][ T30] ? __mutex_trylock_common+0x78/0x250 [ 562.994844][ T30] ? lock_acquire+0x2f/0xb0 [ 562.999339][ T30] ? schedule+0x1fd/0x350 [ 563.003699][ T30] schedule+0xe7/0x350 [ 563.007760][ T30] schedule_preempt_disabled+0x13/0x30 [ 563.013292][ T30] __mutex_lock+0x62b/0xa60 [ 563.017805][ T30] ? misc_open+0x63/0x420 [ 563.022135][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 563.027490][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 563.032958][ T30] ? chrdev_open+0x10e/0x6a0 [ 563.037554][ T30] ? __pfx_lock_release+0x10/0x10 [ 563.042566][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 563.048758][ T30] ? __pfx_misc_open+0x10/0x10 [ 563.053691][ T30] ? misc_open+0x63/0x420 [ 563.058087][ T30] misc_open+0x63/0x420 [ 563.062574][ T30] ? __pfx_misc_open+0x10/0x10 [ 563.067453][ T30] chrdev_open+0x237/0x6a0 [ 563.071875][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 563.077060][ T30] do_dentry_open+0xf59/0x1ea0 [ 563.081847][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 563.087092][ T30] ? inode_permission+0xdd/0x5f0 [ 563.092054][ T30] vfs_open+0x82/0x3f0 [ 563.096243][ T30] ? may_open+0x1f2/0x400 [ 563.100576][ T30] path_openat+0x1e6a/0x2d60 [ 563.105284][ T30] ? __pfx_path_openat+0x10/0x10 [ 563.110218][ T30] ? handle_mm_fault+0x497/0xaa0 [ 563.115191][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.120401][ T30] do_filp_open+0x20c/0x470 [ 563.124957][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 563.129981][ T30] ? find_held_lock+0x2d/0x110 [ 563.134780][ T30] ? alloc_fd+0x41f/0x760 [ 563.139127][ T30] do_sys_openat2+0x17a/0x1e0 [ 563.143857][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.149070][ T30] ? fd_install+0x242/0x750 [ 563.154787][ T30] __x64_sys_openat+0x175/0x210 [ 563.159650][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.165439][ T30] do_syscall_64+0xcd/0x250 [ 563.170033][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.175987][ T30] RIP: 0033:0x7fe3f037d131 [ 563.180409][ T30] RSP: 002b:00007ffd1a372150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 563.188987][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe3f037d131 [ 563.197004][ T30] RDX: 0000000000000002 RSI: 00007fe3f03f2004 RDI: 00000000ffffff9c [ 563.205110][ T30] RBP: 00007fe3f03f2004 R08: 0000000000000000 R09: 00007fe3f106d6c0 [ 563.213113][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 563.221090][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 563.229111][ T30] [ 563.232140][ T30] INFO: task syz-executor:8161 blocked for more than 145 seconds. [ 563.239988][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 563.247288][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.255985][ T30] task:syz-executor state:D stack:28432 pid:8161 tgid:8161 ppid:1 flags:0x00000000 [ 563.266607][ T30] Call Trace: [ 563.269888][ T30] [ 563.272843][ T30] __schedule+0xe58/0x5ad0 [ 563.277272][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.282475][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.287717][ T30] ? __pfx___schedule+0x10/0x10 [ 563.292669][ T30] ? schedule+0x298/0x350 [ 563.297030][ T30] ? __pfx_lock_release+0x10/0x10 [ 563.302057][ T30] ? __mutex_trylock_common+0x78/0x250 [ 563.307559][ T30] ? lock_acquire+0x2f/0xb0 [ 563.312055][ T30] ? schedule+0x1fd/0x350 [ 563.316415][ T30] schedule+0xe7/0x350 [ 563.320487][ T30] schedule_preempt_disabled+0x13/0x30 [ 563.325986][ T30] __mutex_lock+0x62b/0xa60 [ 563.330506][ T30] ? misc_open+0x63/0x420 [ 563.334877][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 563.339908][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 563.345231][ T30] ? chrdev_open+0x10e/0x6a0 [ 563.349816][ T30] ? __pfx_lock_release+0x10/0x10 [ 563.354861][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 563.360502][ T30] ? __pfx_misc_open+0x10/0x10 [ 563.365310][ T30] ? misc_open+0x63/0x420 [ 563.369989][ T30] misc_open+0x63/0x420 [ 563.374193][ T30] ? __pfx_misc_open+0x10/0x10 [ 563.378963][ T30] chrdev_open+0x237/0x6a0 [ 563.384022][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 563.388981][ T30] do_dentry_open+0xf59/0x1ea0 [ 563.393889][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 563.398823][ T30] ? inode_permission+0xdd/0x5f0 [ 563.403803][ T30] vfs_open+0x82/0x3f0 [ 563.407877][ T30] ? may_open+0x1f2/0x400 [ 563.412203][ T30] path_openat+0x1e6a/0x2d60 [ 563.416817][ T30] ? __pfx_path_openat+0x10/0x10 [ 563.421753][ T30] ? handle_mm_fault+0x497/0xaa0 [ 563.426745][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.431950][ T30] do_filp_open+0x20c/0x470 [ 563.436484][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 563.441508][ T30] ? find_held_lock+0x2d/0x110 [ 563.446323][ T30] ? alloc_fd+0x41f/0x760 [ 563.450649][ T30] do_sys_openat2+0x17a/0x1e0 [ 563.455344][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.460552][ T30] ? fd_install+0x242/0x750 [ 563.465105][ T30] __x64_sys_openat+0x175/0x210 [ 563.470290][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.475772][ T30] do_syscall_64+0xcd/0x250 [ 563.480285][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.486225][ T30] RIP: 0033:0x7f97dad7d131 [ 563.490641][ T30] RSP: 002b:00007ffe84381690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 563.499214][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f97dad7d131 [ 563.507223][ T30] RDX: 0000000000000002 RSI: 00007f97dadf2004 RDI: 00000000ffffff9c [ 563.515238][ T30] RBP: 00007f97dadf2004 R08: 0000000000000000 R09: 00007f97dba6d6c0 [ 563.523233][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 563.531203][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 563.539261][ T30] [ 563.542290][ T30] INFO: task syz-executor:8162 blocked for more than 145 seconds. [ 563.550130][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 563.557452][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.566371][ T30] task:syz-executor state:D stack:27728 pid:8162 tgid:8162 ppid:1 flags:0x00000000 [ 563.576926][ T30] Call Trace: [ 563.580210][ T30] [ 563.583386][ T30] __schedule+0xe58/0x5ad0 [ 563.587809][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.593725][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.599006][ T30] ? __pfx___schedule+0x10/0x10 [ 563.603911][ T30] ? schedule+0x298/0x350 [ 563.608242][ T30] ? __pfx_lock_release+0x10/0x10 [ 563.613312][ T30] ? __mutex_trylock_common+0x78/0x250 [ 563.618775][ T30] ? lock_acquire+0x2f/0xb0 [ 563.623490][ T30] ? schedule+0x1fd/0x350 [ 563.627815][ T30] schedule+0xe7/0x350 [ 563.631883][ T30] schedule_preempt_disabled+0x13/0x30 [ 563.637946][ T30] __mutex_lock+0x62b/0xa60 [ 563.642466][ T30] ? misc_open+0x63/0x420 [ 563.647778][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 563.652963][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 563.658267][ T30] ? chrdev_open+0x10e/0x6a0 [ 563.662969][ T30] ? __pfx_lock_release+0x10/0x10 [ 563.668113][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 563.674181][ T30] ? __pfx_misc_open+0x10/0x10 [ 563.678955][ T30] ? misc_open+0x63/0x420 [ 563.683351][ T30] misc_open+0x63/0x420 [ 563.687507][ T30] ? __pfx_misc_open+0x10/0x10 [ 563.692264][ T30] chrdev_open+0x237/0x6a0 [ 563.696706][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 563.701772][ T30] do_dentry_open+0xf59/0x1ea0 [ 563.707159][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 563.712108][ T30] ? inode_permission+0xdd/0x5f0 [ 563.717093][ T30] vfs_open+0x82/0x3f0 [ 563.721166][ T30] ? may_open+0x1f2/0x400 [ 563.725591][ T30] path_openat+0x1e6a/0x2d60 [ 563.730185][ T30] ? __pfx_path_openat+0x10/0x10 [ 563.735137][ T30] ? handle_mm_fault+0x497/0xaa0 [ 563.740069][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.745360][ T30] do_filp_open+0x20c/0x470 [ 563.749866][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 563.754942][ T30] ? find_held_lock+0x2d/0x110 [ 563.759728][ T30] ? alloc_fd+0x41f/0x760 [ 563.765175][ T30] do_sys_openat2+0x17a/0x1e0 [ 563.769881][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.775187][ T30] ? fd_install+0x242/0x750 [ 563.780189][ T30] __x64_sys_openat+0x175/0x210 [ 563.785325][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.790776][ T30] do_syscall_64+0xcd/0x250 [ 563.795318][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.801296][ T30] RIP: 0033:0x7f64d2f7d131 [ 563.805806][ T30] RSP: 002b:00007ffebbc0dd30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 563.814258][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f64d2f7d131 [ 563.822229][ T30] RDX: 0000000000000002 RSI: 00007f64d2ff2004 RDI: 00000000ffffff9c [ 563.830231][ T30] RBP: 00007f64d2ff2004 R08: 0000000000000000 R09: 00007f64d3c6d6c0 [ 563.838212][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 563.846218][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 563.854212][ T30] [ 563.857224][ T30] INFO: task syz-executor:8163 blocked for more than 145 seconds. [ 563.865054][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 563.872328][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.881763][ T30] task:syz-executor state:D stack:27464 pid:8163 tgid:8163 ppid:1 flags:0x00000000 [ 563.892170][ T30] Call Trace: [ 563.895605][ T30] [ 563.898539][ T30] __schedule+0xe58/0x5ad0 [ 563.903484][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.908689][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 563.913916][ T30] ? __pfx___schedule+0x10/0x10 [ 563.918770][ T30] ? schedule+0x298/0x350 [ 563.924124][ T30] ? __pfx_lock_release+0x10/0x10 [ 563.929158][ T30] ? __mutex_trylock_common+0x78/0x250 [ 563.934660][ T30] ? lock_acquire+0x2f/0xb0 [ 563.939151][ T30] ? schedule+0x1fd/0x350 [ 563.943546][ T30] schedule+0xe7/0x350 [ 563.947610][ T30] schedule_preempt_disabled+0x13/0x30 [ 563.953093][ T30] __mutex_lock+0x62b/0xa60 [ 563.957602][ T30] ? misc_open+0x63/0x420 [ 563.961931][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 563.967039][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 563.972326][ T30] ? chrdev_open+0x10e/0x6a0 [ 563.976939][ T30] ? __pfx_lock_release+0x10/0x10 [ 563.982282][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 563.987982][ T30] ? __pfx_misc_open+0x10/0x10 [ 563.992781][ T30] ? misc_open+0x63/0x420 [ 563.997114][ T30] misc_open+0x63/0x420 [ 564.001259][ T30] ? __pfx_misc_open+0x10/0x10 [ 564.006314][ T30] chrdev_open+0x237/0x6a0 [ 564.010745][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 564.015721][ T30] do_dentry_open+0xf59/0x1ea0 [ 564.020483][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 564.025449][ T30] ? inode_permission+0xdd/0x5f0 [ 564.030406][ T30] vfs_open+0x82/0x3f0 [ 564.034529][ T30] ? may_open+0x1f2/0x400 [ 564.038873][ T30] path_openat+0x1e6a/0x2d60 [ 564.043505][ T30] ? __pfx_path_openat+0x10/0x10 [ 564.048442][ T30] ? handle_mm_fault+0x497/0xaa0 [ 564.053402][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 564.058598][ T30] do_filp_open+0x20c/0x470 [ 564.063123][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 564.068145][ T30] ? find_held_lock+0x2d/0x110 [ 564.073001][ T30] ? alloc_fd+0x41f/0x760 [ 564.077333][ T30] do_sys_openat2+0x17a/0x1e0 [ 564.081993][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.087619][ T30] ? fd_install+0x242/0x750 [ 564.092127][ T30] __x64_sys_openat+0x175/0x210 [ 564.097084][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.102459][ T30] do_syscall_64+0xcd/0x250 [ 564.106998][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.114769][ T30] RIP: 0033:0x7fd04fb7d131 [ 564.119249][ T30] RSP: 002b:00007ffcb3f676c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 564.127692][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd04fb7d131 [ 564.135685][ T30] RDX: 0000000000000002 RSI: 00007fd04fbf2004 RDI: 00000000ffffff9c [ 564.143698][ T30] RBP: 00007fd04fbf2004 R08: 0000000000000000 R09: 00007fd05086d6c0 [ 564.151672][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 564.159701][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 564.167712][ T30] [ 564.170733][ T30] INFO: task syz-executor:8165 blocked for more than 146 seconds. [ 564.178568][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 564.186252][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.194945][ T30] task:syz-executor state:D stack:28432 pid:8165 tgid:8165 ppid:1 flags:0x00000000 [ 564.205160][ T30] Call Trace: [ 564.208433][ T30] [ 564.211463][ T30] __schedule+0xe58/0x5ad0 [ 564.215911][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 564.221123][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 564.226381][ T30] ? __pfx___schedule+0x10/0x10 [ 564.231236][ T30] ? schedule+0x298/0x350 [ 564.235591][ T30] ? __pfx_lock_release+0x10/0x10 [ 564.240621][ T30] ? __mutex_trylock_common+0x78/0x250 [ 564.246354][ T30] ? lock_acquire+0x2f/0xb0 [ 564.250923][ T30] ? schedule+0x1fd/0x350 [ 564.255308][ T30] schedule+0xe7/0x350 [ 564.259380][ T30] schedule_preempt_disabled+0x13/0x30 [ 564.264893][ T30] __mutex_lock+0x62b/0xa60 [ 564.269401][ T30] ? misc_open+0x63/0x420 [ 564.274004][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 564.279024][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 564.284570][ T30] ? chrdev_open+0x10e/0x6a0 [ 564.289483][ T30] ? __pfx_lock_release+0x10/0x10 [ 564.294541][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 564.300188][ T30] ? __pfx_misc_open+0x10/0x10 [ 564.305107][ T30] ? misc_open+0x63/0x420 [ 564.309440][ T30] misc_open+0x63/0x420 [ 564.313763][ T30] ? __pfx_misc_open+0x10/0x10 [ 564.318529][ T30] chrdev_open+0x237/0x6a0 [ 564.322978][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 564.327921][ T30] do_dentry_open+0xf59/0x1ea0 [ 564.332672][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 564.337629][ T30] ? inode_permission+0xdd/0x5f0 [ 564.342574][ T30] vfs_open+0x82/0x3f0 [ 564.346688][ T30] ? may_open+0x1f2/0x400 [ 564.351028][ T30] path_openat+0x1e6a/0x2d60 [ 564.355664][ T30] ? __pfx_path_openat+0x10/0x10 [ 564.360592][ T30] ? handle_mm_fault+0x497/0xaa0 [ 564.365568][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 564.370764][ T30] do_filp_open+0x20c/0x470 [ 564.375302][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 564.380326][ T30] ? find_held_lock+0x2d/0x110 [ 564.385142][ T30] ? alloc_fd+0x41f/0x760 [ 564.389484][ T30] do_sys_openat2+0x17a/0x1e0 [ 564.394620][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.399850][ T30] ? fd_install+0x242/0x750 [ 564.404411][ T30] __x64_sys_openat+0x175/0x210 [ 564.409264][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.414789][ T30] do_syscall_64+0xcd/0x250 [ 564.419300][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.425257][ T30] RIP: 0033:0x7ff71097d131 [ 564.429678][ T30] RSP: 002b:00007ffc2e3e6550 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 564.438361][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff71097d131 [ 564.446378][ T30] RDX: 0000000000000002 RSI: 00007ff7109f2004 RDI: 00000000ffffff9c [ 564.454384][ T30] RBP: 00007ff7109f2004 R08: 0000000000000000 R09: 00007ff71166d6c0 [ 564.462354][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 564.470347][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 564.478353][ T30] [ 564.481360][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 564.490423][ T30] [ 564.490423][ T30] Showing all locks held in the system: [ 564.498492][ T30] 1 lock held by khungtaskd/30: [ 564.503383][ T30] #0: ffffffff8e1bba80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 564.513856][ T30] 2 locks held by kworker/u8:6/1144: [ 564.519211][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 564.529284][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x203/0x8e0 [ 564.540820][ T30] 1 lock held by klogd/5199: [ 564.545443][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 564.555411][ T30] 2 locks held by getty/5590: [ 564.560083][ T30] #0: ffff8880364120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 564.569855][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 564.580009][ T30] 3 locks held by syz-executor/5828: [ 564.585325][ T30] #0: ffff888033911c40 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 564.596154][ T30] #1: ffff88814dcec518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 564.605769][ T30] #2: ffff88814dcf0958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 564.615393][ T30] 5 locks held by syz.4.568/8070: [ 564.620511][ T30] #0: ffff8880289a42b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 564.629626][ T30] #1: ffff8880365f0420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 564.638635][ T30] #2: ffff888035a4cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 564.648422][ T30] #3: ffff888140ae1788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 564.658465][ T30] #4: ffffffff8e0817a8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x63/0x400 [ 564.668789][ T30] 2 locks held by syz.2.589/8140: [ 564.673876][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.682507][ T30] #1: ffffffff8e0817a8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 564.692941][ T30] 1 lock held by syz.2.589/8145: [ 564.698204][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.706694][ T30] 1 lock held by syz.3.590/8147: [ 564.711621][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.720108][ T30] 1 lock held by syz.0.591/8144: [ 564.725197][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.733694][ T30] 1 lock held by syz.1.592/8152: [ 564.738620][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.747092][ T30] 1 lock held by syz-executor/8160: [ 564.752393][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.760993][ T30] 1 lock held by syz-executor/8161: [ 564.766204][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.774719][ T30] 1 lock held by syz-executor/8162: [ 564.779925][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.788539][ T30] 1 lock held by syz-executor/8163: [ 564.793851][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.802628][ T30] 1 lock held by syz-executor/8165: [ 564.807846][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.816338][ T30] 1 lock held by syz-executor/8177: [ 564.821517][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.830130][ T30] 1 lock held by syz-executor/8178: [ 564.835356][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.843848][ T30] 1 lock held by syz-executor/8179: [ 564.849044][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.857540][ T30] 1 lock held by syz-executor/8180: [ 564.862730][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.871215][ T30] 1 lock held by syz-executor/8181: [ 564.876438][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.884927][ T30] 1 lock held by syz-executor/8187: [ 564.890110][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.898614][ T30] 1 lock held by syz-executor/8188: [ 564.904179][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.912641][ T30] 1 lock held by syz-executor/8189: [ 564.917874][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.926470][ T30] 1 lock held by syz-executor/8190: [ 564.931661][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.940169][ T30] 1 lock held by syz-executor/8191: [ 564.945394][ T30] #0: ffffffff8eea8c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 564.953894][ T30] [ 564.956212][ T30] ============================================= [ 564.956212][ T30] [ 564.964658][ T30] NMI backtrace for cpu 1 [ 564.968968][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 564.979109][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 564.989160][ T30] Call Trace: [ 564.992419][ T30] [ 564.995341][ T30] dump_stack_lvl+0x116/0x1f0 [ 565.000009][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 565.004935][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 565.010918][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 565.016886][ T30] watchdog+0xf0c/0x1240 [ 565.021117][ T30] ? __pfx_watchdog+0x10/0x10 [ 565.025806][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.031005][ T30] ? __kthread_parkme+0x148/0x220 [ 565.036019][ T30] ? __pfx_watchdog+0x10/0x10 [ 565.040689][ T30] kthread+0x2c1/0x3a0 [ 565.044748][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.049935][ T30] ? __pfx_kthread+0x10/0x10 [ 565.054518][ T30] ret_from_fork+0x45/0x80 [ 565.058929][ T30] ? __pfx_kthread+0x10/0x10 [ 565.063512][ T30] ret_from_fork_asm+0x1a/0x30 [ 565.068289][ T30] [ 565.071641][ T30] Sending NMI from CPU 1 to CPUs 0: [ 565.077093][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 565.079797][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 565.094757][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 565.104887][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 565.114923][ T30] Call Trace: [ 565.118183][ T30] [ 565.121094][ T30] dump_stack_lvl+0x3d/0x1f0 [ 565.125671][ T30] panic+0x71d/0x800 [ 565.129557][ T30] ? __pfx_panic+0x10/0x10 [ 565.133959][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 565.139316][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 565.145277][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 565.150630][ T30] ? watchdog+0xd76/0x1240 [ 565.155032][ T30] ? watchdog+0xd69/0x1240 [ 565.159431][ T30] watchdog+0xd87/0x1240 [ 565.163673][ T30] ? __pfx_watchdog+0x10/0x10 [ 565.168345][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.173527][ T30] ? __kthread_parkme+0x148/0x220 [ 565.178543][ T30] ? __pfx_watchdog+0x10/0x10 [ 565.183211][ T30] kthread+0x2c1/0x3a0 [ 565.187268][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.192445][ T30] ? __pfx_kthread+0x10/0x10 [ 565.197022][ T30] ret_from_fork+0x45/0x80 [ 565.201419][ T30] ? __pfx_kthread+0x10/0x10 [ 565.205998][ T30] ret_from_fork_asm+0x1a/0x30 [ 565.210758][ T30] [ 565.213972][ T30] Kernel Offset: disabled [ 565.218270][ T30] Rebooting in 86400 seconds..