last executing test programs: 2m51.791079813s ago: executing program 4 (id=586): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) umount2(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x18, &(0x7f0000000000)=@req3={0xa, 0x5, 0xffff, 0x10001, 0x9, 0x3, 0x8}, 0x1c) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f00000002c0)={0xa, 0x0, [{0x80000007, 0x10000, 0x0, 0x7, 0xffff6dc7, 0x101, 0x9}, {0x80000000, 0x1ff, 0x0, 0x2, 0x80000000, 0x6, 0xb}, {0x80000001, 0x78d, 0x7, 0x41b, 0x6, 0x800, 0xb7e1}, {0x80000019, 0xb, 0x1, 0x9, 0x8, 0x2}, {0x1, 0xa, 0x9, 0x6, 0x7, 0x6, 0xb33}, {0x40000001, 0xae, 0x0, 0x2, 0x2974c2b7, 0xafc, 0x80000000}, {0x2, 0xa85, 0x4, 0x8000, 0x4, 0x2, 0x2}, {0x1, 0x1, 0x1, 0x9, 0x7ff, 0xfcd, 0x10}, {0x1, 0x901, 0x5, 0x4, 0x2, 0x100, 0x80000001}, {0x80000008, 0x1, 0x2, 0x6ae09a83, 0x7, 0x6, 0xff}]}) 2m50.500016672s ago: executing program 4 (id=589): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) r2 = socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) kcmp(0x0, 0x0, 0x5, r0, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000000000000000000000000200"}}}]}, 0x48}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) 2m49.612732591s ago: executing program 4 (id=594): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TCSETSW2(r0, 0x5425, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0)={0xf7, 0x7}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r5 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e22, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855f, @empty, 0x1ff}}}, 0x108) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20000881}, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x8) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r6, &(0x7f0000048040)=""/102392, 0x18ff8) tkill(r3, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x567}}, 0xdb5) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TCFLSH(r2, 0x400455c8, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x27, 0x0, 0x0) 2m47.650709095s ago: executing program 4 (id=602): openat$userio(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0xa401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800, 0x8, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x4, 0xa950ef34a6f038f4, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(0xffffffffffffffff, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000a40)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m46.142113146s ago: executing program 4 (id=606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, 0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0xf4) 2m44.508310736s ago: executing program 2 (id=614): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="00000100000012d7b3fb86df8b7abc3f46480c68ad6095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x50f}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x4550, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x9], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xfffff]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000028c0)={0x2020}, 0x2020) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_usb_control_io(r2, 0x0, 0x0) 2m44.376158918s ago: executing program 4 (id=615): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040b404b1070000000000010902240001000040b109040000020300010009210101000122050009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x800) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x8004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x0, 0x0, 0x0, 0x459b, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) write$nci(r1, 0x0, 0x7) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m44.357569867s ago: executing program 0 (id=616): openat$userio(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0xa401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800, 0x8, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x4, 0xa950ef34a6f038f4, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m43.254451803s ago: executing program 0 (id=618): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) r2 = socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) kcmp(0x0, 0x0, 0x5, r0, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000000000000000000000000200"}}}]}, 0x48}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) 2m42.213220155s ago: executing program 0 (id=620): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000028c0), 0x1, 0x0) lseek(r0, 0x5, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xb, 0xffff}, {0x2, 0x10015}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x800}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x37}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xbffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20008805}, 0x80) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) ptrace$setopts(0x4200, r10, 0x4, 0x3b) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r9, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r6, 0xffffffffffffffff, 0x0) 2m39.835270758s ago: executing program 2 (id=626): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$sock_ifreq(r0, 0x50009404, &(0x7f0000000cc0)={'vlan1\x00', @ifru_hwaddr=@local}) 2m39.464174891s ago: executing program 2 (id=629): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0x325081) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000003c0)='io.pressure\x00', 0x2, 0x0) poll(&(0x7f0000000400)=[{r2, 0x2000}], 0x1, 0x71) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@loopback}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000440), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x20000000, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000810) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="4000000026c959470000000000000041244f0875829c892835b32db9b477003813c2bb4115dcf634c869211d1ba2bf34add1ef1a2cc010da2dbe62e20c186c580ada57718ee2161a6d3c2b045c4adf79e0ec0fb9b936cdb28c2d7e2bb277aed49c1fcfe5f16f18c4d9002fad037f8a6f00a13919ad00a073016b"], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 2m39.463762728s ago: executing program 0 (id=630): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) r2 = socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) kcmp(0x0, 0x0, 0x5, r0, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000000000000000000000000200"}}}]}, 0x48}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) 2m38.173060414s ago: executing program 0 (id=631): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1, 0x62, 0xfd4c) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r0, &(0x7f0000006e80)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x4003, {0x7, 0x2b, 0x9, 0x10002140, 0xe, 0x6, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002280)={0x10, 0x0, r2}, 0x10) 2m37.84731256s ago: executing program 2 (id=633): openat$userio(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0xa401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800, 0x8, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x4, 0xa950ef34a6f038f4, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m37.70407188s ago: executing program 0 (id=634): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000004200)=ANY=[@ANYBLOB="5c00000001060102000000000000000002000003050001000700000005002200070000006b8cc27307a2d45c22d3050001000700000005000100070000070000000500010007001b8c26ca0100070000000500010007000000b340c11922b81e0332565df922a3792c3f108d430383f497c2a2d8e957b772953784bb53204e17ec0c20e91d3da161ecc40ea02da27d93274cbba604b117"], 0x5c}}, 0x40890) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)=ANY=[@ANYBLOB="500000000506010100000000000000000d0000040900020073797a31000000000900030073797a32000000000900020073797a31000000000900030073797a31000000001000030073797a3000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40050) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000004980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r5, @ANYBLOB="24f076724400ab6d3a531f6a6bad79254efa26b72b883076bca06662bd52713b2b3b1006e5bcd0b453e4ee90578df0c8e2b892ee41e70e7ed9f1c27d0b9caaf29f1ac79bcd2d3490406951bf2d0e28ff9ee94941d788d9b193439804b5e243610b53cfdd3adc26b08afe14394131f0c748c452cfaea03e03854e801c2fb80d04630230b95fe6c712962bf09a46351784c4e870257a7dc186c7994b21ebc04735ef69ab26a7cd8bde0235eb84fe3f0067ec63590d29a29ae15b6a8b92149cee42645e32888e6b60696105d170adbbb8e23442137834564bb3b7b11985d20d19c8877584a3d693ca274142637447ba9c2106f9023b"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000004380), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000004300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000042c0)={&(0x7f0000000080)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001940)={'gre0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x10, 0x7, 0xd7, 0x1, {{0x20, 0x4, 0x0, 0x21, 0x80, 0x64, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0x20, 0x95, 0x0, 0xc, [0x8, 0xdb2, 0x4, 0x40, 0xffff, 0xfff, 0x1]}, @ssrr={0x89, 0x1f, 0x42, [@broadcast, @remote, @loopback, @local, @loopback, @private=0xa010100, @loopback]}, @ssrr={0x89, 0xb, 0x2a, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1]}, @ssrr={0x89, 0xb, 0x8e, [@loopback, @loopback]}, @timestamp={0x44, 0x8, 0x8b, 0x0, 0xd, [0x8]}, @generic={0x94, 0x9, "f62e7a5860b0b2"}, @ra={0x94, 0x4, 0x1}]}}}}}) 2m35.422807419s ago: executing program 2 (id=638): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x48, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi0\x00', 0x300c2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 2m35.416399011s ago: executing program 3 (id=639): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "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"}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e7"], 0x250}}, 0x0) 2m35.171207429s ago: executing program 3 (id=640): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x282000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xf434a59b5f531f7f}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "881c7c75"}, @local=@item_4={0x3, 0x2, 0x2}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e24, 0x5, @loopback, 0x800}, 0x1c) r3 = socket(0x1d, 0x800, 0x80) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}, {&(0x7f0000000580)="1b6b9894b3e74e9c11fd48ce3cc3f37e127cf9b1e52689509fed33b315f161d3212d826f8f6e1b716eaf65d71633ef08177055c302f18c09933594438209dcab4daaf2c6c82d5e52eaf0243036b67e52b58ec5269934d2dd1614967c", 0x5c}, {&(0x7f0000000600)="1ef90bf98e4b664058dbd0fe6ae25508affad0a7a3c67615edbb38b44355b1a2a1183f81b5579865251232b0fa4f09d5a34a733ba6a90a9a7da0927bc2749ed5d4be245eaf39d07f9ba79f8ac2c8b945e75a3224e6ff3f262db0725f22521882613d61b2a65b97af3586525ecdb235e43c5723de62639cb38b61d823a6", 0x7d}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000400)=0xc) ptrace$setregs(0xd, r4, 0x1, &(0x7f0000000440)="46189cf2bafe724366c3961fa1a00b994009f566d7f84ee003b7f9c66144d4ecc129ce7cb86dbbb7cea3ba5856fbf23e48c81a96a40dae82d96543513e66845d4f8165fa6add73052199139e3c556bdcf6c87c1be0c49828ebbe100891e6a7ec2de19a1c0a5545a0fe48d47d989e24e521136f817a799d5facad4bf17c44e74a671d1c5790b47318462b8250f47984b17ab4d7ecb8ea08af845eb68593aff5e93838a60cca39d3ee87dc0caefa2bb5aaf45a0f9ed7fd08d0cffa6617e7d7899c09528f5f8209519f014681a0437a659e0d6d39") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382cff2001b600000000000000000200000001ff0200000000000000000000000000013a00000000000000020090780005000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bb"], 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fanotify_init(0x1, 0x40000) fanotify_mark(r8, 0x400, 0x3, r0, &(0x7f00000001c0)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) 2m34.436526031s ago: executing program 2 (id=642): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x800c, 0x4, 0x4, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x13, [0x2, 0x25, 0x9, 0xa, 0x5, 0x6, 0x4, 0x17, 0xf, 0x6, 0x7, 0x6, 0x10, 0x6, 0xfe, 0x4], 0x2, [0x8b, 0x101, 0x200, 0x2002, 0xf, 0x4, 0x2, 0x6, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x1, 0xd, 0x100], [0xfff5, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x3, 0xfffc, 0x5, 0x1, 0xfffc]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2m31.935615464s ago: executing program 3 (id=645): unshare(0x20060400) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) 2m31.854958949s ago: executing program 3 (id=646): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6, 0x4, 0x9, '\x00', 0x14}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x5, 0x50, 0x4, '\x00', 0x49}, {0x80, 0x0, 0x2, '\x00', 0x7}, {0x9, 0xf4, 0x1, '\x00', 0xff}, {0x1, 0x47, 0xb, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x5}, {0x38, 0x11, 0xfe}, {0x4, 0x6, 0x8}, {0x1, 0x86, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0xff, '\x00', 0x9}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0xa, 0x7, 0xd1, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x42, 0xb}, {0x8, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf7}, {0x93, 0x1, 0x4, '\x00', 0xe2}, {0x3, 0x4, 0xa, '\x00', 0x54}]}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 000000000000000037'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) listen(r1, 0x8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) ioctl$TCFLSH(r0, 0x8910, 0x0) 2m30.33571798s ago: executing program 3 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x501000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0x8004510b, &(0x7f0000000480)) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0fbe3c4", @ANYRES16=r1, @ANYBLOB="00082cbd7000fddbdf251100000006001201050000000500e4000000000008001180040006000a000600080211000001000006001a01010000000500c20000000000130013000618004806c803831b8100ec89123600"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1}, 0x1}}]}, {0xf}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffe7}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="9981", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) setsockopt(r4, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e20, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, &(0x7f0000000280)=0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000546b244ac73f5ada000000000000030000000504010007000000080009400000086d100008800c0007800800094000000001090002466acf689ccb73e0c9"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040000) 2m30.200065984s ago: executing program 3 (id=651): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="00000100000012d7b3fb86df8b7abc3f46480c68ad6095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x50f}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x4550, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x9], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xfffff]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000028c0)={0x2020}, 0x2020) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 2m29.24765322s ago: executing program 32 (id=615): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040b404b1070000000000010902240001000040b109040000020300010009210101000122050009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x800) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x8004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x0, 0x0, 0x0, 0x459b, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) write$nci(r1, 0x0, 0x7) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m22.561274277s ago: executing program 33 (id=634): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000004200)=ANY=[@ANYBLOB="5c00000001060102000000000000000002000003050001000700000005002200070000006b8cc27307a2d45c22d3050001000700000005000100070000070000000500010007001b8c26ca0100070000000500010007000000b340c11922b81e0332565df922a3792c3f108d430383f497c2a2d8e957b772953784bb53204e17ec0c20e91d3da161ecc40ea02da27d93274cbba604b117"], 0x5c}}, 0x40890) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)=ANY=[@ANYBLOB="500000000506010100000000000000000d0000040900020073797a31000000000900030073797a32000000000900020073797a31000000000900030073797a31000000001000030073797a3000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x40050) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000004980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r5, @ANYBLOB="24f076724400ab6d3a531f6a6bad79254efa26b72b883076bca06662bd52713b2b3b1006e5bcd0b453e4ee90578df0c8e2b892ee41e70e7ed9f1c27d0b9caaf29f1ac79bcd2d3490406951bf2d0e28ff9ee94941d788d9b193439804b5e243610b53cfdd3adc26b08afe14394131f0c748c452cfaea03e03854e801c2fb80d04630230b95fe6c712962bf09a46351784c4e870257a7dc186c7994b21ebc04735ef69ab26a7cd8bde0235eb84fe3f0067ec63590d29a29ae15b6a8b92149cee42645e32888e6b60696105d170adbbb8e23442137834564bb3b7b11985d20d19c8877584a3d693ca274142637447ba9c2106f9023b"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000004380), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000004300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000042c0)={&(0x7f0000000080)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001940)={'gre0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x10, 0x7, 0xd7, 0x1, {{0x20, 0x4, 0x0, 0x21, 0x80, 0x64, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0x20, 0x95, 0x0, 0xc, [0x8, 0xdb2, 0x4, 0x40, 0xffff, 0xfff, 0x1]}, @ssrr={0x89, 0x1f, 0x42, [@broadcast, @remote, @loopback, @local, @loopback, @private=0xa010100, @loopback]}, @ssrr={0x89, 0xb, 0x2a, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1]}, @ssrr={0x89, 0xb, 0x8e, [@loopback, @loopback]}, @timestamp={0x44, 0x8, 0x8b, 0x0, 0xd, [0x8]}, @generic={0x94, 0x9, "f62e7a5860b0b2"}, @ra={0x94, 0x4, 0x1}]}}}}}) 2m19.409332529s ago: executing program 34 (id=642): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x800c, 0x4, 0x4, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x13, [0x2, 0x25, 0x9, 0xa, 0x5, 0x6, 0x4, 0x17, 0xf, 0x6, 0x7, 0x6, 0x10, 0x6, 0xfe, 0x4], 0x2, [0x8b, 0x101, 0x200, 0x2002, 0xf, 0x4, 0x2, 0x6, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x1, 0xd, 0x100], [0xfff5, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x3, 0xfffc, 0x5, 0x1, 0xfffc]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2m14.906324007s ago: executing program 35 (id=651): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="00000100000012d7b3fb86df8b7abc3f46480c68ad6095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x50f}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x4550, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x9], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xfffff]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000028c0)={0x2020}, 0x2020) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 231.023288ms ago: executing program 1 (id=1071): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r2, &(0x7f0000000000)=[{0x7, 0x77, 0x0, 0x0, @tick=0xb6e, {}, {0x0, 0x9}, @raw32={[0xffffffff]}}], 0x1c) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), 0x10) 112.180289ms ago: executing program 1 (id=1072): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) r2 = syz_open_dev$amidi(0x0, 0x2, 0x80042) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c00488624950ebed356ec67bc8d0ae4e6192799c25a265724929ac1db5d0b517c4691591a255eb755cd2f15e18e9a500038e32fba334893a488698b66f0b94bc3e713aa2b9d2bddb8a90b795d591ab379be8f8a7574c67c0540be91a7aabcb4101e3cc7de4d9bd8db00e746683eafa5"]) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) syz_io_uring_setup(0xc88, &(0x7f0000000300)={0x0, 0xe792, 0x2, 0x0, 0x62, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000580)) r5 = io_uring_setup(0x5f26, &(0x7f00000005c0)={0x0, 0x5f01, 0x400, 0x3, 0x2ff, 0x0, r1}) r6 = syz_io_uring_setup(0x80081f, &(0x7f0000000500)={0x0, 0xfebb, 0x4000, 0x3, 0xcd, 0x0, r5}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, 0x0) accept$alg(r3, 0x0, 0x0) io_uring_enter(r6, 0x47bc, 0x9673, 0x6b, 0x0, 0x0) gettid() r9 = timerfd_create(0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r9, 0x318a}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000000000100, 0xfff, 0xfffffffffffffffd}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) shutdown(r11, 0x0) recvmmsg(r11, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0x9, 0x14, "2cf5c7052a754501b9aa74810b4a71ffcb375325c86829381495265ceecf444a28178e7f00000000000000ffffffff5e4bbbc8fbda000000000000000300", "190b4de479e73750618816dabedbff4a0a2e75b44e2cc115632179aca631a6a9d774adda677624b790b5d6617f89540b338290e27d4be7cb387cb05ce62f5f77", "57d8695804cc86297563ad6985c5b2634cccb18b6be822230000000000000100", [0xb, 0x5]}) 111.889889ms ago: executing program 1 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x737, 0x739, &(0x7f0000000000)="ff", 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7}, 0x48) 88.999678ms ago: executing program 1 (id=1074): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a182"], 0x50}}, 0x0) 66.85795ms ago: executing program 1 (id=1075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x4000000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1076): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = fcntl$dupfd(r2, 0x406, r2) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) ioctl$sock_proto_private(r2, 0x89ef, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r4) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x464, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = dup(r0) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) kernel console output (not intermixed with test programs): frame+0x77/0x7f [ 140.269622][ T6897] RIP: 0033:0x7fa9d918e15c [ 140.269631][ T6897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.269640][ T6897] RSP: 002b:00007fa9d9f54030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.269650][ T6897] RAX: ffffffffffffffda RBX: 00007fa9d93e6090 RCX: 00007fa9d918e15c [ 140.269656][ T6897] RDX: 000000000000000f RSI: 00007fa9d9f540a0 RDI: 000000000000000c [ 140.269662][ T6897] RBP: 00007fa9d9f54090 R08: 0000000000000000 R09: 0000000000000000 [ 140.269668][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.269673][ T6897] R13: 00007fa9d93e6128 R14: 00007fa9d93e6090 R15: 00007fffbd0ac148 [ 140.269686][ T6897] [ 140.273908][ T6103] usb 4-1: Using ep0 maxpacket: 16 [ 140.748645][ T6103] usb 4-1: config 8 has an invalid interface number: 57 but max is 0 [ 140.777316][ T30] audit: type=1400 audit(1763786515.614:311): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 140.807937][ T6103] usb 4-1: config 8 has no interface number 0 [ 140.844217][ T6103] usb 4-1: config 8 interface 57 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 140.877569][ T6103] usb 4-1: config 8 interface 57 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 141.174413][ T30] audit: type=1400 audit(1763786515.794:312): avc: denied { create } for pid=6900 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.218617][ T6103] usb 4-1: config 8 interface 57 has no altsetting 0 [ 141.231788][ T30] audit: type=1400 audit(1763786515.804:313): avc: denied { bind } for pid=6900 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.264445][ T6103] usb 4-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44 [ 141.294153][ T6103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.304123][ T30] audit: type=1400 audit(1763786515.814:314): avc: denied { write } for pid=6900 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.352932][ T6103] usb 4-1: Product: syz [ 141.357311][ T6103] usb 4-1: Manufacturer: syz [ 141.362236][ T6103] usb 4-1: SerialNumber: syz [ 141.375602][ T30] audit: type=1400 audit(1763786515.934:315): avc: denied { setopt } for pid=6900 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.425007][ T30] audit: type=1400 audit(1763786515.954:316): avc: denied { read } for pid=6900 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.381093][ T6921] nvme_fabrics: missing parameter 'transport=%s' [ 143.387519][ T6921] nvme_fabrics: missing parameter 'nqn=%s' [ 143.398872][ T6103] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.525951][ T6103] usb 4-1: MIDIStreaming interface descriptor not found [ 143.549004][ T30] audit: type=1326 audit(1763786518.394:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.3.268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9ef58f749 code=0x0 [ 143.603857][ T30] audit: type=1400 audit(1763786518.444:318): avc: denied { write } for pid=6926 comm="syz.4.269" path="socket:[12015]" dev="sockfs" ino=12015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.626968][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.822848][ T6103] usb 4-1: USB disconnect, device number 7 [ 144.174856][ T5923] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.463254][ T6941] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 144.797924][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.275'. [ 144.813820][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 144.820268][ T5923] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 144.853174][ T5923] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.939617][ T6948] overlayfs: failed to resolve './file1': -2 [ 144.947488][ T5923] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.972030][ T5923] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.981073][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 145.095651][ T5923] usb 3-1: config 0 has no interface number 0 [ 145.220219][ T5923] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 145.263052][ T5923] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 145.415656][ T5923] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.452441][ T5923] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.480599][ T5923] usb 3-1: config 0 interface 125 has no altsetting 0 [ 145.495243][ T5923] usb 3-1: config 0 interface 125 has no altsetting 2 [ 145.519425][ T5923] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 145.557446][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.565756][ T5923] usb 3-1: Product: syz [ 145.569986][ T5923] usb 3-1: Manufacturer: syz [ 145.574925][ T5923] usb 3-1: SerialNumber: syz [ 145.589424][ T5923] usb 3-1: config 0 descriptor?? [ 145.612937][ T5923] usb 3-1: selecting invalid altsetting 2 [ 145.638310][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 145.638325][ T30] audit: type=1400 audit(1763786520.484:332): avc: denied { create } for pid=6953 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.958462][ T30] audit: type=1400 audit(1763786520.804:333): avc: denied { create } for pid=6956 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.415278][ C0] usb 3-1: async_complete: urb error -32 [ 146.680002][ T5923] get_1284_register: usb error -32 [ 147.532536][ T5923] uss720 3-1:0.125: probe with driver uss720 failed with error -32 [ 148.315430][ T30] audit: type=1400 audit(1763786520.804:334): avc: denied { ioctl } for pid=6956 comm="syz.0.279" path="socket:[12066]" dev="sockfs" ino=12066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.341190][ T30] audit: type=1400 audit(1763786520.804:335): avc: denied { read write } for pid=6956 comm="syz.0.279" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 148.365533][ T30] audit: type=1400 audit(1763786520.804:336): avc: denied { open } for pid=6956 comm="syz.0.279" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 148.392052][ T30] audit: type=1400 audit(1763786520.804:337): avc: denied { mounton } for pid=6956 comm="syz.0.279" path="/44/file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.423616][ T30] audit: type=1400 audit(1763786520.844:338): avc: denied { mount } for pid=6956 comm="syz.0.279" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 148.451330][ T30] audit: type=1400 audit(1763786520.864:339): avc: denied { block_suspend } for pid=6956 comm="syz.0.279" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.485816][ T30] audit: type=1400 audit(1763786520.934:340): avc: denied { prog_load } for pid=6957 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 148.967607][ T5923] usb 3-1: USB disconnect, device number 7 [ 148.975213][ T30] audit: type=1400 audit(1763786520.934:341): avc: denied { bpf } for pid=6957 comm="syz.3.278" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.275464][ T6980] nvme_fabrics: missing parameter 'transport=%s' [ 150.281863][ T6980] nvme_fabrics: missing parameter 'nqn=%s' [ 150.773972][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 150.773990][ T30] audit: type=1400 audit(1763786525.594:369): avc: denied { bind } for pid=6984 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.774030][ T30] audit: type=1400 audit(1763786525.594:370): avc: denied { connect } for pid=6984 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.774063][ T30] audit: type=1400 audit(1763786525.594:371): avc: denied { write } for pid=6984 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.195029][ T30] audit: type=1400 audit(1763786526.044:372): avc: denied { write } for pid=6995 comm="syz.4.288" name="fib_trie" dev="proc" ino=4026533106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 152.304197][ T30] audit: type=1400 audit(1763786527.144:373): avc: denied { ioctl } for pid=6999 comm="syz.3.289" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.525170][ T30] audit: type=1400 audit(1763786527.374:374): avc: denied { create } for pid=7004 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 152.749334][ T30] audit: type=1400 audit(1763786527.374:375): avc: denied { ioctl } for pid=7004 comm="syz.1.290" path="socket:[12978]" dev="sockfs" ino=12978 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 153.567661][ T30] audit: type=1400 audit(1763786528.134:376): avc: denied { create } for pid=7004 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.589984][ T30] audit: type=1400 audit(1763786528.134:377): avc: denied { write } for pid=7004 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.610607][ T30] audit: type=1400 audit(1763786528.134:378): avc: denied { nlmsg_write } for pid=7004 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.837331][ T7022] xt_NFQUEUE: number of total queues is 0 [ 154.075207][ T976] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.453834][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 154.484314][ T42] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.545224][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.556635][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.585982][ T976] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.745238][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.765456][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 154.775226][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.823837][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.826437][ T976] usb 1-1: config 0 descriptor?? [ 154.870180][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.870672][ T976] hub 1-1:0.0: USB hub found [ 154.913660][ T42] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 154.938541][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.967495][ T42] usb 4-1: config 0 descriptor?? [ 155.239542][ T976] hub 1-1:0.0: 1 port detected [ 155.481459][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 155.502330][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.609765][ T42] usb 4-1: USB disconnect, device number 8 [ 155.726813][ T7021] wg1 speed is unknown, defaulting to 1000 [ 155.846659][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 155.846675][ T30] audit: type=1400 audit(1763786530.694:402): avc: denied { setopt } for pid=7043 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.872297][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.422776][ T7042] nvme_fabrics: missing parameter 'transport=%s' [ 156.429181][ T7042] nvme_fabrics: missing parameter 'nqn=%s' [ 156.732840][ T30] audit: type=1400 audit(1763786530.774:403): avc: denied { create } for pid=7043 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.743880][ T6103] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.842903][ T976] hub 1-1:0.0: activate --> -90 [ 156.976567][ T30] audit: type=1400 audit(1763786531.824:404): avc: denied { create } for pid=7052 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 157.169174][ T30] audit: type=1400 audit(1763786532.014:405): avc: denied { create } for pid=7054 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.224165][ T30] audit: type=1400 audit(1763786532.054:406): avc: denied { setopt } for pid=7054 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.253891][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.331116][ T7058] bridge_slave_0: left allmulticast mode [ 157.337398][ T7058] bridge_slave_0: left promiscuous mode [ 157.344306][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.361396][ T7058] bridge_slave_1: left allmulticast mode [ 157.367678][ T7058] bridge_slave_1: left promiscuous mode [ 157.375990][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.387606][ T7058] bond0: (slave bond_slave_0): Releasing backup interface [ 157.422666][ T7058] bond0: (slave bond_slave_1): Releasing backup interface [ 157.460786][ T7058] team0: Port device team_slave_0 removed [ 157.488851][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.505059][ T5923] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.520856][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.542411][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.545143][ T7058] team0: Port device team_slave_1 removed [ 157.585356][ T7053] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 157.596468][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.629720][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.635097][ T5923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.670127][ T30] audit: type=1400 audit(1763786532.504:407): avc: denied { write } for pid=7012 comm="syz.0.292" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.675651][ T42] usb 1-1: USB disconnect, device number 14 [ 157.704278][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.713419][ T976] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 157.743638][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.744105][ T976] usb 1-1-port1: attempt power cycle [ 157.769335][ T7058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.790920][ T30] audit: type=1400 audit(1763786532.524:408): avc: denied { write } for pid=7012 comm="syz.0.292" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.939910][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.952802][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.012298][ T30] audit: type=1400 audit(1763786532.854:409): avc: denied { read write } for pid=7052 comm="syz.2.303" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 158.052752][ T5907] usb 3-1: USB disconnect, device number 8 [ 158.104185][ T30] audit: type=1400 audit(1763786532.854:410): avc: denied { open } for pid=7052 comm="syz.2.303" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 158.559284][ T30] audit: type=1400 audit(1763786533.394:411): avc: denied { audit_write } for pid=7064 comm="syz.4.306" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.166030][ T7077] siw: device registration error -23 [ 159.171542][ T7074] wireguard1: entered promiscuous mode [ 159.244692][ T7074] wireguard1: entered allmulticast mode [ 160.904284][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 161.179688][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 161.179704][ T30] audit: type=1400 audit(1763786535.614:424): avc: denied { allowed } for pid=7090 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 161.209066][ T30] audit: type=1400 audit(1763786535.614:425): avc: denied { map } for pid=7090 comm="syz.0.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.232332][ T7093] nvme_fabrics: missing parameter 'transport=%s' [ 161.235677][ T30] audit: type=1400 audit(1763786535.614:426): avc: denied { read write } for pid=7090 comm="syz.0.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.239553][ T7093] nvme_fabrics: missing parameter 'nqn=%s' [ 161.352732][ T7097] netlink: 64 bytes leftover after parsing attributes in process `syz.0.315'. [ 161.727799][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.801065][ T30] audit: type=1400 audit(1763786536.644:427): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.803550][ T7101] fuse: Bad value for 'group_id' [ 161.839334][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.859616][ T7101] fuse: Bad value for 'group_id' [ 161.893813][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 162.000300][ T42] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 162.016380][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.049054][ T42] usb 5-1: config 0 descriptor?? [ 162.873248][ T42] pantherlord 0003:0810:0002.0001: unknown main item tag 0x3 [ 162.924480][ T42] pantherlord 0003:0810:0002.0001: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 163.031752][ T42] pantherlord 0003:0810:0002.0001: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 163.121963][ T42] usb 5-1: USB disconnect, device number 5 [ 163.315410][ T5907] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.364629][ T7119] fido_id[7119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 163.474591][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 163.482170][ T5907] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 163.491261][ T5907] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 163.500197][ T5907] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 163.509350][ T5907] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 163.522266][ T7126] kvm: emulating exchange as write [ 163.539090][ T5907] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.557914][ T5907] usb 4-1: config 0 has no interface number 0 [ 163.564396][ T5907] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 163.577953][ T5907] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 163.588224][ T5907] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.598521][ T5907] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.611838][ T5907] usb 4-1: config 0 interface 125 has no altsetting 0 [ 163.618996][ T5907] usb 4-1: config 0 interface 125 has no altsetting 2 [ 163.628233][ T5907] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 163.637576][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.646646][ T5907] usb 4-1: Product: syz [ 163.650890][ T5907] usb 4-1: Manufacturer: syz [ 163.657731][ T5907] usb 4-1: SerialNumber: syz [ 163.664862][ T5907] usb 4-1: config 0 descriptor?? [ 163.671804][ T5907] usb 4-1: selecting invalid altsetting 2 [ 163.783840][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.043916][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 164.104732][ T976] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 164.158543][ T42] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.179083][ T42] usb 5-1: config 0 has no interface number 0 [ 164.203724][ T42] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 164.213204][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.364032][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 164.364110][ T42] usb 5-1: Product: syz [ 164.372964][ T976] usb 1-1: config 0 has an invalid interface number: 95 but max is 2 [ 164.381519][ T42] usb 5-1: Manufacturer: syz [ 164.381540][ T42] usb 5-1: SerialNumber: syz [ 164.392912][ T42] usb 5-1: config 0 descriptor?? [ 164.402137][ T976] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 164.408889][ T42] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 164.411824][ T976] usb 1-1: config 0 has an invalid interface number: 186 but max is 2 [ 164.442191][ T976] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 164.451250][ T976] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 164.460558][ T976] usb 1-1: config 0 has an invalid interface number: 104 but max is 2 [ 164.470174][ T976] usb 1-1: config 0 has an invalid interface number: 116 but max is 2 [ 164.482168][ T976] usb 1-1: config 0 has 4 interfaces, different from the descriptor's value: 3 [ 164.630156][ T976] usb 1-1: config 0 has no interface number 0 [ 164.640921][ T976] usb 1-1: config 0 has no interface number 1 [ 164.806687][ T5907] get_1284_register timeout [ 164.811504][ C0] usb 4-1: async_complete: urb error -104 [ 164.820813][ T5907] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 164.840311][ T976] usb 1-1: config 0 has no interface number 2 [ 164.849574][ T5907] usb 4-1: USB disconnect, device number 9 [ 164.872074][ T976] usb 1-1: config 0 has no interface number 3 [ 164.880620][ T976] usb 1-1: config 0 interface 95 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 164.892141][ T976] usb 1-1: config 0 interface 95 altsetting 5 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 164.917575][ T976] usb 1-1: config 0 interface 95 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 11 [ 164.932220][ T976] usb 1-1: too many endpoints for config 0 interface 186 altsetting 83: 48, using maximum allowed: 30 [ 164.945160][ T976] usb 1-1: config 0 interface 186 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 164.956459][ T976] usb 1-1: config 0 interface 186 altsetting 83 endpoint 0x4 has an invalid bInterval 158, changing to 7 [ 164.968338][ T976] usb 1-1: config 0 interface 186 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 164.981713][ T976] usb 1-1: config 0 interface 186 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 165.059526][ T976] usb 1-1: config 0 interface 186 altsetting 83 has a duplicate endpoint with address 0xF, skipping [ 165.110510][ T976] usb 1-1: config 0 interface 186 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 165.141128][ T30] audit: type=1400 audit(1763786539.974:428): avc: denied { write } for pid=7147 comm="syz.1.328" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.175220][ T976] usb 1-1: config 0 interface 186 altsetting 83 has 9 endpoint descriptors, different from the interface descriptor's value: 48 [ 165.396107][ T976] usb 1-1: config 0 interface 104 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 165.428388][ T30] audit: type=1400 audit(1763786540.274:429): avc: denied { sys_module } for pid=7147 comm="syz.1.328" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 165.652768][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 165.661814][ T7155] openvswitch: netlink: Flow actions attr not present in new flow. [ 165.734059][ T42] gspca_spca1528: reg_w err -110 [ 165.902150][ T30] audit: type=1400 audit(1763786540.744:430): avc: denied { map } for pid=7151 comm="syz.2.329" path="socket:[13516]" dev="sockfs" ino=13516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 165.936897][ T976] usb 1-1: config 0 interface 104 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 165.961375][ T976] usb 1-1: config 0 interface 104 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 165.962479][ T42] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 166.086664][ T976] usb 1-1: config 0 interface 116 altsetting 4 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 166.111476][ T976] usb 1-1: config 0 interface 116 altsetting 4 endpoint 0x84 has an invalid bInterval 183, changing to 7 [ 167.038912][ T30] audit: type=1400 audit(1763786541.004:431): avc: denied { create } for pid=7151 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.067644][ T976] usb 1-1: config 0 interface 116 altsetting 4 endpoint 0x84 has invalid maxpacket 50790, setting to 1024 [ 167.208421][ T976] usb 1-1: config 0 interface 116 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 167.464525][ T30] audit: type=1400 audit(1763786541.124:432): avc: denied { connect } for pid=7151 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.469366][ T7164] fuse: Bad value for 'group_id' [ 167.489374][ T7164] fuse: Bad value for 'group_id' [ 167.530560][ T42] usb 5-1: USB disconnect, device number 6 [ 167.554288][ T976] usb 1-1: config 0 interface 116 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 167.634372][ T976] usb 1-1: config 0 interface 116 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 167.662829][ T30] audit: type=1400 audit(1763786542.504:433): avc: denied { create } for pid=7165 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.694352][ T976] usb 1-1: config 0 interface 116 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 168.523494][ T976] usb 1-1: config 0 interface 116 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 168.535446][ T976] usb 1-1: config 0 interface 116 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 168.546653][ T976] usb 1-1: config 0 interface 116 altsetting 4 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 168.560513][ T976] usb 1-1: config 0 interface 95 has no altsetting 0 [ 168.568075][ T976] usb 1-1: config 0 interface 186 has no altsetting 0 [ 168.575129][ T976] usb 1-1: config 0 interface 104 has no altsetting 0 [ 168.581949][ T976] usb 1-1: config 0 interface 116 has no altsetting 0 [ 168.641433][ T30] audit: type=1400 audit(1763786543.064:434): avc: denied { bind } for pid=7171 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.945775][ T976] usb 1-1: string descriptor 0 read error: -71 [ 168.951980][ T976] usb 1-1: New USB device found, idVendor=2019, idProduct=ab2b, bcdDevice=84.11 [ 169.110892][ T7186] xt_NFQUEUE: number of total queues is 0 [ 169.277186][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.287429][ T976] usb 1-1: config 0 descriptor?? [ 169.304071][ T976] usb 1-1: can't set config #0, error -71 [ 169.314397][ T976] usb 1-1: USB disconnect, device number 19 [ 169.334019][ T30] audit: type=1400 audit(1763786543.074:435): avc: denied { ioctl } for pid=7171 comm="syz.1.335" path="socket:[14526]" dev="sockfs" ino=14526 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.444580][ T30] audit: type=1400 audit(1763786543.074:436): avc: denied { bind } for pid=7171 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.464682][ T30] audit: type=1400 audit(1763786543.254:437): avc: denied { create } for pid=7171 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 169.502018][ T30] audit: type=1400 audit(1763786543.254:438): avc: denied { bind } for pid=7171 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 169.610902][ T30] audit: type=1400 audit(1763786544.214:439): avc: denied { ioctl } for pid=7165 comm="syz.0.332" path="socket:[14510]" dev="sockfs" ino=14510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.104718][ T7195] netlink: 'syz.3.338': attribute type 12 has an invalid length. [ 170.115694][ T30] audit: type=1400 audit(1763786544.964:440): avc: denied { connect } for pid=7182 comm="syz.3.338" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.272546][ T7196] nvme_fabrics: missing parameter 'transport=%s' [ 170.279939][ T7196] nvme_fabrics: missing parameter 'nqn=%s' [ 171.474534][ T42] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.682325][ T42] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 171.742041][ T42] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 171.957786][ T7214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.974209][ T42] usb 2-1: config 1 has no interface number 1 [ 171.988269][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.029924][ T7214] wg1 speed is unknown, defaulting to 1000 [ 172.102621][ T42] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 172.117262][ T42] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.127834][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.136393][ T42] usb 2-1: Product: syz [ 172.141496][ T42] usb 2-1: Manufacturer: syz [ 172.149078][ T7219] SELinux: Context * is not valid (left unmapped). [ 172.152897][ T42] usb 2-1: SerialNumber: syz [ 172.252960][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 172.252979][ T30] audit: type=1400 audit(1763786547.094:446): avc: denied { create } for pid=7218 comm="syz.3.345" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="*" [ 172.285120][ T30] audit: type=1400 audit(1763786547.094:447): avc: denied { associate } for pid=7218 comm="syz.3.345" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="*" [ 172.309402][ T30] audit: type=1400 audit(1763786547.094:448): avc: denied { read write open } for pid=7218 comm="syz.3.345" path="/76/file0" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="*" [ 172.349351][ T30] audit: type=1400 audit(1763786547.134:449): avc: denied { map } for pid=7218 comm="syz.3.345" path="socket:[14622]" dev="sockfs" ino=14622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.425259][ T42] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 172.442868][ T30] audit: type=1400 audit(1763786547.134:450): avc: denied { read accept } for pid=7218 comm="syz.3.345" path="socket:[14622]" dev="sockfs" ino=14622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.505915][ T42] usb 2-1: USB disconnect, device number 7 [ 172.602989][ T30] audit: type=1400 audit(1763786547.134:451): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="*" [ 172.733896][ T979] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 172.939008][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.525781][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.574262][ T979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.588684][ T979] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 175.598223][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.628124][ T979] usb 4-1: config 0 descriptor?? [ 175.633556][ T979] usb 4-1: can't set config #0, error -71 [ 175.642104][ T979] usb 4-1: USB disconnect, device number 10 [ 176.458699][ T976] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 176.495963][ T7243] nvme_fabrics: missing parameter 'transport=%s' [ 176.502313][ T7243] nvme_fabrics: missing parameter 'nqn=%s' [ 176.636159][ T976] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 176.663296][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.692464][ T976] usb 1-1: config 0 has no interface number 0 [ 176.698662][ T976] usb 1-1: too many endpoints for config 0 interface 219 altsetting 148: 53, using maximum allowed: 30 [ 176.710403][ T976] usb 1-1: config 0 interface 219 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 176.723927][ T976] usb 1-1: config 0 interface 219 has no altsetting 0 [ 176.730713][ T976] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 176.765434][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.786659][ T30] audit: type=1400 audit(1763786551.634:452): avc: denied { sqpoll } for pid=7246 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 176.808428][ T976] usb 1-1: config 0 descriptor?? [ 176.938952][ T30] audit: type=1326 audit(1763786551.724:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.3.354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9ef58f749 code=0x0 [ 177.473958][ T30] audit: type=1400 audit(1763786552.234:454): avc: denied { create } for pid=7257 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.627786][ T30] audit: type=1400 audit(1763786552.294:455): avc: denied { write } for pid=7257 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.723083][ T30] audit: type=1400 audit(1763786552.304:456): avc: denied { connect } for pid=7257 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.825689][ T976] usb 1-1: string descriptor 0 read error: -32 [ 177.943841][ T979] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.105431][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 178.125530][ T979] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 178.136774][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.149289][ T979] usb 2-1: Product: syz [ 178.153517][ T979] usb 2-1: Manufacturer: syz [ 178.199433][ T979] usb 2-1: SerialNumber: syz [ 178.236698][ T979] usb 2-1: config 0 descriptor?? [ 178.273984][ T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 178.309333][ T979] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 178.531526][ T30] audit: type=1400 audit(1763786553.374:457): avc: denied { accept } for pid=7257 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.533895][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 179.000481][ T979] gspca_topro: reg_w err -110 [ 179.034524][ T979] gspca_topro: Sensor soi763a [ 179.096178][ T30] audit: type=1400 audit(1763786553.944:458): avc: denied { read write } for pid=7257 comm="syz.1.355" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 179.131774][ T5923] usb 1-1: USB disconnect, device number 20 [ 179.166063][ T30] audit: type=1400 audit(1763786553.944:459): avc: denied { open } for pid=7257 comm="syz.1.355" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 179.191225][ T42] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 179.191255][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.191273][ T42] usb 5-1: Product: syz [ 179.191288][ T42] usb 5-1: Manufacturer: syz [ 179.191302][ T42] usb 5-1: SerialNumber: syz [ 179.211236][ T42] usb 5-1: config 0 descriptor?? [ 179.327746][ T42] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 180.005887][ T42] gspca_topro: reg_w err -110 [ 180.413828][ T42] gspca_topro: Sensor soi763a [ 180.418730][ T42] videodev: could not get a free minor [ 180.424242][ T42] gspca_main: video_register_device err -23 [ 180.430756][ T42] gspca_topro 5-1:0.0: probe with driver gspca_topro failed with error -23 [ 180.456606][ T5923] usb 2-1: USB disconnect, device number 8 [ 180.524165][ T976] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 180.544864][ T5137] Bluetooth: hci2: command 0x0406 tx timeout [ 180.545541][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 180.552463][ T5137] Bluetooth: hci0: command 0x0406 tx timeout [ 180.557121][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 180.717280][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.734992][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.747919][ T976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.761356][ T976] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 180.770568][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.789587][ T976] usb 3-1: config 0 descriptor?? [ 180.933973][ T5923] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.009795][ T30] audit: type=1400 audit(1763786555.854:460): avc: denied { setopt } for pid=7280 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.319909][ T976] usbhid 3-1:0.0: can't add hid device: -71 [ 181.336996][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 181.342336][ T976] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 181.351662][ T5923] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 181.373247][ T976] usb 3-1: USB disconnect, device number 9 [ 181.379400][ T5923] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 181.395377][ T5923] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 181.404055][ T5923] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 181.412725][ T5923] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 181.422278][ T5923] usb 2-1: config 0 has no interface number 0 [ 181.429500][ T5923] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 181.440822][ T5923] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 181.453006][ T5923] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.464183][ T5923] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.478209][ T5923] usb 2-1: config 0 interface 125 has no altsetting 0 [ 181.485676][ T5923] usb 2-1: config 0 interface 125 has no altsetting 2 [ 181.494490][ T5923] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 181.503603][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.598689][ T5923] usb 2-1: Product: syz [ 181.602849][ T5923] usb 2-1: Manufacturer: syz [ 181.607655][ T5923] usb 2-1: SerialNumber: syz [ 181.614275][ T5923] usb 2-1: config 0 descriptor?? [ 181.621167][ T5923] usb 2-1: selecting invalid altsetting 2 [ 181.725754][ T7310] FAULT_INJECTION: forcing a failure. [ 181.725754][ T7310] name failslab, interval 1, probability 0, space 0, times 0 [ 181.738516][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz.0.367 Not tainted syzkaller #0 PREEMPT(full) [ 181.738538][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.738548][ T7310] Call Trace: [ 181.738555][ T7310] [ 181.738562][ T7310] dump_stack_lvl+0x16c/0x1f0 [ 181.738582][ T7310] should_fail_ex+0x512/0x640 [ 181.738603][ T7310] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 181.738623][ T7310] should_failslab+0xc2/0x120 [ 181.738643][ T7310] __kvmalloc_node_noprof+0x141/0x9c0 [ 181.738662][ T7310] ? vmemdup_user+0x2a/0xe0 [ 181.738675][ T7310] ? __fget_files+0x20e/0x3c0 [ 181.738697][ T7310] ? vmemdup_user+0x2a/0xe0 [ 181.738710][ T7310] vmemdup_user+0x2a/0xe0 [ 181.738726][ T7310] map_lookup_elem+0x3c2/0x700 [ 181.738756][ T7310] __sys_bpf+0x3d7a/0x4980 [ 181.738781][ T7310] ? finish_task_switch.isra.0+0x21c/0xc10 [ 181.738804][ T7310] ? __pfx___sys_bpf+0x10/0x10 [ 181.738827][ T7310] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.738844][ T7310] ? finish_task_switch.isra.0+0x221/0xc10 [ 181.738866][ T7310] ? rcu_is_watching+0x12/0xc0 [ 181.738888][ T7310] ? trace_sched_exit_tp+0xd1/0x120 [ 181.738907][ T7310] ? __schedule+0x11a3/0x5de0 [ 181.738951][ T7310] ? fput+0x9b/0xd0 [ 181.738972][ T7310] ? ksys_write+0x1ac/0x250 [ 181.738994][ T7310] __x64_sys_bpf+0x78/0xc0 [ 181.739008][ T7310] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.739024][ T7310] do_syscall_64+0xcd/0xfa0 [ 181.739042][ T7310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.739059][ T7310] RIP: 0033:0x7fcdec98f749 [ 181.739073][ T7310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.739088][ T7310] RSP: 002b:00007fcded78d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.739105][ T7310] RAX: ffffffffffffffda RBX: 00007fcdecbe6180 RCX: 00007fcdec98f749 [ 181.739116][ T7310] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000001 [ 181.739126][ T7310] RBP: 00007fcded78d090 R08: 0000000000000000 R09: 0000000000000000 [ 181.739136][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.739146][ T7310] R13: 00007fcdecbe6218 R14: 00007fcdecbe6180 R15: 00007ffe7cdb6d38 [ 181.739176][ T7310] [ 182.714218][ T5923] get_1284_register timeout [ 182.747337][ T5923] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 182.755273][ C0] usb 2-1: async_complete: urb error -104 [ 182.881347][ T976] usb 5-1: USB disconnect, device number 7 [ 183.895311][ T30] audit: type=1400 audit(1763786558.734:461): avc: denied { module_load } for pid=7317 comm="syz.0.371" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 184.207294][ T976] usb 2-1: USB disconnect, device number 9 [ 184.349569][ T30] audit: type=1400 audit(1763786559.174:462): avc: denied { mount } for pid=7329 comm="syz.3.372" name="/" dev="autofs" ino=15038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 184.816507][ T30] audit: type=1400 audit(1763786559.184:463): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 186.157481][ T30] audit: type=1400 audit(1763786561.004:464): avc: denied { execute } for pid=7353 comm="syz.1.379" path="/68/blkio.bfq.group_wait_time" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 186.187848][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 186.209409][ T30] audit: type=1400 audit(1763786561.044:465): avc: denied { write } for pid=7344 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.238070][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 186.247944][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.346738][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.685117][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.703901][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.724615][ T30] audit: type=1400 audit(1763786561.564:466): avc: denied { write } for pid=7351 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.749699][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 186.762726][ T30] audit: type=1400 audit(1763786561.574:467): avc: denied { read } for pid=7351 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.782393][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 187.201565][ T30] audit: type=1400 audit(1763786562.044:468): avc: denied { name_bind } for pid=7364 comm="syz.1.383" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 187.243924][ T30] audit: type=1400 audit(1763786562.044:469): avc: denied { firmware_load } for pid=7362 comm="syz.0.382" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 187.331339][ T30] audit: type=1400 audit(1763786562.164:470): avc: denied { create } for pid=7364 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.569741][ T7377] fuseblk: Bad value for 'rootmode' [ 189.596207][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 189.596222][ T30] audit: type=1400 audit(1763786564.444:472): avc: denied { create } for pid=7389 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.631402][ T7397] FAULT_INJECTION: forcing a failure. [ 189.631402][ T7397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.734000][ T7397] CPU: 1 UID: 0 PID: 7397 Comm: syz.1.391 Not tainted syzkaller #0 PREEMPT(full) [ 189.734037][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.734047][ T7397] Call Trace: [ 189.734053][ T7397] [ 189.734060][ T7397] dump_stack_lvl+0x16c/0x1f0 [ 189.734083][ T7397] should_fail_ex+0x512/0x640 [ 189.734107][ T7397] _copy_to_user+0x32/0xd0 [ 189.734132][ T7397] simple_read_from_buffer+0xcb/0x170 [ 189.734162][ T7397] proc_fail_nth_read+0x197/0x240 [ 189.734183][ T7397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.734205][ T7397] ? rw_verify_area+0xcf/0x6c0 [ 189.734229][ T7397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.734248][ T7397] vfs_read+0x1e4/0xcf0 [ 189.734267][ T7397] ? __pfx___mutex_lock+0x10/0x10 [ 189.734284][ T7397] ? __pfx_vfs_read+0x10/0x10 [ 189.734305][ T7397] ? __fget_files+0x20e/0x3c0 [ 189.734330][ T7397] ksys_read+0x12a/0x250 [ 189.734345][ T7397] ? __pfx_ksys_read+0x10/0x10 [ 189.734360][ T7397] ? fput+0x9b/0xd0 [ 189.734384][ T7397] do_syscall_64+0xcd/0xfa0 [ 189.734405][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.734421][ T7397] RIP: 0033:0x7f72f098e15c [ 189.734434][ T7397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.734449][ T7397] RSP: 002b:00007f72f18f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.734465][ T7397] RAX: ffffffffffffffda RBX: 00007f72f0be5fa0 RCX: 00007f72f098e15c [ 189.734476][ T7397] RDX: 000000000000000f RSI: 00007f72f18f50a0 RDI: 0000000000000005 [ 189.734485][ T7397] RBP: 00007f72f18f5090 R08: 0000000000000000 R09: 0000000000000000 [ 189.734495][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.734505][ T7397] R13: 00007f72f0be6038 R14: 00007f72f0be5fa0 R15: 00007ffcc3a83278 [ 189.734529][ T7397] [ 190.828349][ T7411] xt_NFQUEUE: number of total queues is 0 [ 190.883936][ T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.073886][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 191.090846][ T42] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 191.110202][ T42] usb 5-1: config 150 has no interface number 0 [ 191.161479][ T42] usb 5-1: config 150 interface 204 has no altsetting 0 [ 191.172049][ T7414] ip6erspan0: entered promiscuous mode [ 191.177940][ T42] usb 5-1: config 150 interface 1 has no altsetting 0 [ 191.187981][ T42] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 191.204032][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.212183][ T42] usb 5-1: Product: syz [ 191.217071][ T42] usb 5-1: Manufacturer: syz [ 191.221679][ T42] usb 5-1: SerialNumber: syz [ 191.658292][ T42] xr_serial 5-1:150.204: xr_serial converter detected [ 191.685967][ T42] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 191.714245][ T42] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 191.830897][ T42] usb 5-1: USB disconnect, device number 8 [ 192.632939][ T42] xr_serial 5-1:150.204: device disconnected [ 192.678991][ T7403] netlink: 44 bytes leftover after parsing attributes in process `syz.2.394'. [ 192.690243][ T30] audit: type=1400 audit(1763786567.534:473): avc: denied { shutdown } for pid=7432 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.690261][ T7433] netlink: 56 bytes leftover after parsing attributes in process `syz.3.404'. [ 192.691019][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'. [ 192.740562][ T7403] netlink: 43 bytes leftover after parsing attributes in process `syz.2.394'. [ 192.750707][ T7403] netlink: 'syz.2.394': attribute type 5 has an invalid length. [ 192.759164][ T7403] netlink: 43 bytes leftover after parsing attributes in process `syz.2.394'. [ 192.771902][ T30] audit: type=1400 audit(1763786567.614:474): avc: denied { mounton } for pid=7402 comm="syz.2.394" path="/proc/301/cgroup" dev="proc" ino=15293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 193.130382][ T30] audit: type=1400 audit(1763786567.974:475): avc: denied { write } for pid=7432 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.130482][ T7436] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 193.196060][ T7403] dvmrp0: entered allmulticast mode [ 193.207221][ T7433] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.213679][ T7433] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.220480][ T30] audit: type=1400 audit(1763786568.054:476): avc: denied { write } for pid=7432 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.443991][ T976] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 193.830707][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.837081][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.219540][ T30] audit: type=1326 audit(1763786568.264:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.3.407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9ef58f749 code=0x0 [ 194.724465][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.306858][ T7471] fuse: Unknown parameter 'grou00000000000000000000' [ 196.333836][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 196.373824][ T30] audit: type=1400 audit(1763786571.174:478): avc: denied { mount } for pid=7462 comm="syz.2.412" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 196.420307][ T42] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.435877][ T42] usb 1-1: config 0 has no interface number 0 [ 196.451444][ T42] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 196.472218][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.487175][ T42] usb 1-1: Product: syz [ 196.491336][ T42] usb 1-1: Manufacturer: syz [ 196.503821][ T42] usb 1-1: SerialNumber: syz [ 196.509496][ T30] audit: type=1400 audit(1763786571.204:479): avc: denied { search } for pid=7462 comm="syz.2.412" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.536269][ T42] usb 1-1: config 0 descriptor?? [ 196.543055][ T42] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 196.555323][ T30] audit: type=1400 audit(1763786571.204:480): avc: denied { search } for pid=7462 comm="syz.2.412" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.577895][ T30] audit: type=1400 audit(1763786571.204:481): avc: denied { search } for pid=7462 comm="syz.2.412" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.804209][ T30] audit: type=1400 audit(1763786571.644:482): avc: denied { read } for pid=7472 comm="syz.4.415" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.905984][ T30] audit: type=1400 audit(1763786571.644:483): avc: denied { open } for pid=7472 comm="syz.4.415" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 197.550992][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 197.559875][ T7487] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.754439][ T42] gspca_spca1528: reg_w err -110 [ 197.784387][ T42] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 199.454300][ T5923] usb 1-1: USB disconnect, device number 21 [ 199.775355][ T30] audit: type=1400 audit(1763786574.324:484): avc: denied { append } for pid=7495 comm="syz.0.420" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.845058][ T30] audit: type=1400 audit(1763786574.334:485): avc: denied { connect } for pid=7495 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.643038][ T7508] fuse: Unknown parameter 'grou00000000000000000000' [ 202.053819][ T5923] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.463962][ T5923] usb 4-1: device descriptor read/64, error -71 [ 203.374173][ T5923] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 203.524819][ T5923] usb 4-1: device descriptor read/64, error -71 [ 203.724577][ T5907] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 203.732533][ T5923] usb usb4-port1: attempt power cycle [ 204.037998][ T5907] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 204.060544][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.074299][ T5907] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.083572][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.093152][ T5907] usb 1-1: Product: syz [ 204.098377][ T5907] usb 1-1: Manufacturer: syz [ 204.103339][ T5907] usb 1-1: SerialNumber: syz [ 204.223973][ T5923] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 204.231826][ T30] audit: type=1326 audit(1763786579.044:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4658f749 code=0x7ffc0000 [ 204.268625][ T30] audit: type=1326 audit(1763786579.044:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a4658f749 code=0x7ffc0000 [ 204.293061][ T5907] usb 1-1: config 0 descriptor?? [ 204.302004][ T5923] usb 4-1: device descriptor read/8, error -71 [ 204.315438][ T30] audit: type=1326 audit(1763786579.044:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4658f749 code=0x7ffc0000 [ 204.341147][ T30] audit: type=1326 audit(1763786579.044:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f7a4658f749 code=0x7ffc0000 [ 204.366970][ T5907] usb 1-1: selecting invalid altsetting 0 [ 204.380809][ T30] audit: type=1326 audit(1763786579.044:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4658f749 code=0x7ffc0000 [ 204.621487][ T7539] binder: 7538:7539 unknown command 0 [ 204.627225][ T7539] binder: 7538:7539 ioctl c0306201 200000000080 returned -22 [ 204.736300][ T30] audit: type=1400 audit(1763786579.464:491): avc: denied { read } for pid=7538 comm="syz.4.433" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.805391][ T5826] Bluetooth: hci2: hardware error 0x06 [ 204.824653][ T30] audit: type=1400 audit(1763786579.464:492): avc: denied { open } for pid=7538 comm="syz.4.433" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.848448][ T30] audit: type=1400 audit(1763786579.464:493): avc: denied { ioctl } for pid=7538 comm="syz.4.433" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.997205][ T30] audit: type=1400 audit(1763786579.464:494): avc: denied { set_context_mgr } for pid=7538 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 205.009445][ T979] IPVS: starting estimator thread 0... [ 205.024244][ T7542] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 205.238686][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.247454][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.293944][ T7546] IPVS: using max 47 ests per chain, 112800 per kthread [ 205.524360][ T5923] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 205.545215][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 205.573124][ T5923] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 205.584079][ T5923] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 205.609248][ T5923] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 205.637780][ T5923] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 205.666928][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 205.711937][ T5923] usb 4-1: config 0 has no interface number 0 [ 205.740938][ T5923] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 205.825439][ T5923] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 205.903906][ T5923] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.957079][ T5923] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.003074][ T5923] usb 4-1: config 0 interface 125 has no altsetting 0 [ 206.028983][ T5923] usb 4-1: config 0 interface 125 has no altsetting 2 [ 206.080574][ T5923] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 206.102069][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.145050][ T5923] usb 4-1: Product: syz [ 206.151205][ T5923] usb 4-1: Manufacturer: syz [ 206.177252][ T5923] usb 4-1: SerialNumber: syz [ 206.233475][ T5923] usb 4-1: config 0 descriptor?? [ 206.251983][ T5923] usb 4-1: selecting invalid altsetting 2 [ 206.284566][ T30] audit: type=1400 audit(1763786581.124:495): avc: denied { read write } for pid=7559 comm="syz.2.438" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 207.170722][ T5826] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 207.408297][ T5923] usb 4-1: USB disconnect, device number 14 [ 207.453600][ T24] usb 1-1: USB disconnect, device number 22 [ 207.874030][ T979] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.070430][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 208.119927][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.163834][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.232302][ T979] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 208.252248][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.301533][ T979] usb 5-1: config 0 descriptor?? [ 208.496317][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 208.864444][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 209.121757][ T7578] SET target dimension over the limit! [ 209.163954][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 209.175647][ T7578] macvtap1: entered promiscuous mode [ 209.180946][ T7578] macvtap1: entered allmulticast mode [ 209.194374][ T7578] ip6gretap0: entered promiscuous mode [ 209.207668][ T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 209.231816][ T7578] ip6gretap0: entered allmulticast mode [ 209.323346][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.338010][ T24] usb 2-1: Product: syz [ 209.346189][ T24] usb 2-1: Manufacturer: syz [ 209.351076][ T24] usb 2-1: SerialNumber: syz [ 209.362177][ T24] usb 2-1: config 0 descriptor?? [ 209.372741][ T7585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.381979][ T7585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.400226][ T7578] team0: Device macvtap1 failed to register rx_handler [ 209.439237][ T7578] ip6gretap0: left allmulticast mode [ 209.463263][ T7578] ip6gretap0: left promiscuous mode [ 209.614241][ T7585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.623497][ T979] usbhid 5-1:0.0: can't add hid device: -71 [ 209.623516][ T7585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.715474][ T979] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 209.745576][ T979] usb 5-1: USB disconnect, device number 9 [ 210.596598][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 210.596609][ T30] audit: type=1400 audit(1763786585.444:499): avc: denied { create } for pid=7584 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 210.726606][ T24] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 210.756783][ T5923] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 211.086000][ T24] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:00:00:00:02 [ 211.104881][ T24] usb 2-1: USB disconnect, device number 10 [ 211.107816][ T30] audit: type=1400 audit(1763786585.954:500): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 211.150945][ T24] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 211.184993][ T30] audit: type=1400 audit(1763786585.984:501): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.207997][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.233096][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.282624][ T5923] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 211.311406][ T30] audit: type=1400 audit(1763786585.984:502): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.355784][ T7626] netlink: 52 bytes leftover after parsing attributes in process `syz.0.459'. [ 211.364259][ T5923] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 211.448711][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.475560][ T30] audit: type=1400 audit(1763786585.984:503): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.532810][ T7610] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.553190][ T30] audit: type=1400 audit(1763786585.984:504): avc: denied { read } for pid=5481 comm="dhcpcd" name="n108" dev="tmpfs" ino=3939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.579127][ T5923] hub 5-1:1.0: bad descriptor, ignoring hub [ 211.595349][ T5923] hub 5-1:1.0: probe with driver hub failed with error -5 [ 211.622850][ T5923] cdc_wdm 5-1:1.0: skipping garbage [ 211.646884][ T5923] cdc_wdm 5-1:1.0: skipping garbage [ 211.653918][ T5881] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 211.714719][ T7643] Cannot find set identified by id 0 to match [ 211.794046][ T30] audit: type=1400 audit(1763786585.984:505): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=3939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.999843][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.006866][ T5923] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 212.010143][ T5881] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 212.021216][ T7641] sit1: entered promiscuous mode [ 212.029708][ T5881] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.156264][ T7641] sit1: entered allmulticast mode [ 212.156450][ T5923] cdc_wdm 5-1:1.0: Unknown control protocol [ 212.202328][ T5881] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.204351][ T30] audit: type=1400 audit(1763786585.984:506): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=3939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.244123][ T30] audit: type=1400 audit(1763786586.284:507): avc: denied { read open } for pid=7631 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.273602][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.283320][ T30] audit: type=1400 audit(1763786586.284:508): avc: denied { getattr } for pid=7631 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.309207][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.382357][ T5881] usb 1-1: Product: syz [ 212.397953][ T5881] usb 1-1: Manufacturer: syz [ 212.402616][ T5881] usb 1-1: SerialNumber: syz [ 212.475112][ T5923] usb 5-1: reset full-speed USB device number 10 using dummy_hcd [ 213.282877][ T7668] Cannot find set identified by id 0 to match [ 213.311042][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.400076][ T7666] nvme_fabrics: missing parameter 'transport=%s' [ 213.406623][ T7666] nvme_fabrics: missing parameter 'nqn=%s' [ 213.423565][ T7610] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.603276][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.807928][ T7625] batman_adv: batadv0: Adding interface: gretap1 [ 213.814838][ T7625] batman_adv: batadv0: Interface activated: gretap1 [ 214.330190][ T42] usb 5-1: USB disconnect, device number 10 [ 214.619826][ T7682] nvme_fabrics: missing parameter 'transport=%s' [ 214.626265][ T7682] nvme_fabrics: missing parameter 'nqn=%s' [ 214.713940][ T5881] cdc_ncm 1-1:1.0: bind() failure [ 214.750049][ T5881] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 214.789488][ T5881] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 214.809228][ T5881] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 214.817737][ T7689] netlink: 332 bytes leftover after parsing attributes in process `syz.2.473'. [ 214.842733][ T7689] netlink: 160 bytes leftover after parsing attributes in process `syz.2.473'. [ 214.912148][ T5881] usb 1-1: USB disconnect, device number 23 [ 215.163941][ T979] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 215.293830][ T5881] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 215.314172][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 215.321814][ T979] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 215.330554][ T979] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 215.385801][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.429786][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 215.462428][ T979] usb 5-1: config 0 has no interface number 0 [ 215.471074][ T5881] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 215.499095][ T979] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 215.557947][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.710897][ T979] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 215.731894][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 215.877365][ T979] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.911010][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 215.932050][ T979] usb 5-1: config 0 interface 125 has no altsetting 0 [ 215.939700][ T5881] usb 1-1: Product: syz [ 215.951925][ T5881] usb 1-1: Manufacturer: syz [ 215.961506][ T979] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 215.981000][ T5881] usb 1-1: SerialNumber: syz [ 215.990198][ T5881] usb 1-1: config 0 descriptor?? [ 215.996754][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.035308][ T5881] usb 1-1: selecting invalid altsetting 0 [ 216.047796][ T979] usb 5-1: Product: syz [ 216.060660][ T979] usb 5-1: Manufacturer: syz [ 216.067784][ T979] usb 5-1: SerialNumber: syz [ 216.103482][ T979] usb 5-1: config 0 descriptor?? [ 216.533015][ T5907] usb 5-1: USB disconnect, device number 11 [ 217.898951][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.907941][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.211657][ T7742] netlink: 56 bytes leftover after parsing attributes in process `syz.2.485'. [ 219.228795][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 219.277913][ T7742] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 219.433285][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 219.433308][ T30] audit: type=1400 audit(1763786594.274:515): avc: denied { create } for pid=7751 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.484774][ T30] audit: type=1400 audit(1763786594.324:516): avc: denied { connect } for pid=7751 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.495466][ T7750] SELinux: Context system_u:object_r:syslogd_initrc_exec_t:s0 is not valid (left unmapped). [ 219.505286][ T30] audit: type=1400 audit(1763786594.344:517): avc: denied { relabelfrom } for pid=7749 comm="syz.4.486" name="RAW" dev="sockfs" ino=16808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.823932][ T30] audit: type=1400 audit(1763786594.464:518): avc: denied { relabelto } for pid=7749 comm="syz.4.486" name="RAW" dev="sockfs" ino=16808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:syslogd_initrc_exec_t:s0" [ 219.871934][ T5881] usb 1-1: USB disconnect, device number 24 [ 220.417386][ T30] audit: type=1400 audit(1763786595.254:519): avc: denied { mount } for pid=7768 comm="syz.4.492" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 220.474790][ T5907] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 220.505535][ T7769] netlink: 156 bytes leftover after parsing attributes in process `syz.4.492'. [ 220.516496][ T7769] netlink: 156 bytes leftover after parsing attributes in process `syz.4.492'. [ 221.045088][ T5907] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.059770][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.071091][ T5907] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.095121][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.211896][ T5907] usb 1-1: Product: syz [ 221.225414][ T5907] usb 1-1: Manufacturer: syz [ 221.239230][ T5907] usb 1-1: SerialNumber: syz [ 221.246903][ T5907] usb 1-1: config 0 descriptor?? [ 221.814491][ T5815] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 221.964869][ T5907] usb 1-1: selecting invalid altsetting 0 [ 222.253301][ T7784] Cannot find set identified by id 0 to match [ 222.506873][ T5815] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.534049][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.542798][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.551627][ T5815] usb 5-1: not running at top speed; connect to a high speed hub [ 222.589749][ T5815] usb 5-1: config 5 has an invalid interface number: 246 but max is 0 [ 222.659933][ T5815] usb 5-1: config 5 has an invalid descriptor of length 201, skipping remainder of the config [ 222.708847][ T5815] usb 5-1: config 5 has no interface number 0 [ 222.836292][ T7792] comedi comedi0: Minor 47 could not be opened [ 223.722318][ T30] audit: type=1400 audit(1763786597.634:520): avc: denied { accept } for pid=7787 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 223.773982][ T5815] usb 5-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 223.795490][ T5815] usb 5-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.813860][ T30] audit: type=1326 audit(1763786598.654:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f098f749 code=0x7ffc0000 [ 223.864391][ T5815] usb 5-1: config 5 interface 246 has no altsetting 0 [ 223.883029][ T5815] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 223.898165][ T30] audit: type=1326 audit(1763786598.654:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f098f749 code=0x7ffc0000 [ 223.925304][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.933313][ T5815] usb 5-1: Product: І [ 223.938110][ T5815] usb 5-1: Manufacturer: ▮씧免鄵℀䩙ཤᗊ㬑湉쾷æ©îœ‘缓ข롓ᗞﳫႶꑉ䲗ꋶ앂葧贇뱱﹪鞦唉ᶀ꼩æ•çŽ‘屑뀖媢崳좭䙩酀쿋絧⥌︤찚ا졗ᤸâ“嘼迂㥙彽㗂㸵溾î¾æŠƒè»¥ä¨–벴ꥅ讥龃抭駩ﯠ츙ጌ [ 223.963060][ T30] audit: type=1326 audit(1763786598.654:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f098f749 code=0x7ffc0000 [ 223.987604][ T5815] usb 5-1: SerialNumber: syz [ 223.993432][ T30] audit: type=1326 audit(1763786598.654:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f098f749 code=0x7ffc0000 [ 224.168241][ T5815] usb 5-1: can't set config #5, error -71 [ 224.646666][ T5815] usb 5-1: USB disconnect, device number 12 [ 224.694299][ T5923] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 225.100132][ T5923] usb 3-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.131322][ T5881] usb 1-1: USB disconnect, device number 25 [ 225.139130][ T5923] usb 3-1: config 1 interface 0 has no altsetting 0 [ 225.164348][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.180121][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.394026][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 225.394065][ T30] audit: type=1400 audit(1763786600.224:578): avc: denied { setopt } for pid=7808 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.518304][ T5923] usb 3-1: SerialNumber: syz [ 225.549043][ T7797] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 225.603278][ T30] audit: type=1326 audit(1763786600.244:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.603322][ T30] audit: type=1326 audit(1763786600.244:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.603358][ T30] audit: type=1326 audit(1763786600.244:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.603396][ T30] audit: type=1326 audit(1763786600.244:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.603436][ T30] audit: type=1326 audit(1763786600.244:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.603474][ T30] audit: type=1326 audit(1763786600.244:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.603510][ T30] audit: type=1326 audit(1763786600.244:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.603548][ T30] audit: type=1326 audit(1763786600.244:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.603585][ T30] audit: type=1326 audit(1763786600.244:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9ef58f749 code=0x7ffc0000 [ 225.714615][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.761491][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.831659][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.881385][ T7797] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 225.919564][ T7797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.936739][ T7797] vlan2: entered allmulticast mode [ 225.942193][ T7797] bond1: entered allmulticast mode [ 225.959286][ T5923] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 225.971001][ T5923] usb 3-1: USB disconnect, device number 11 [ 227.234530][ T7832] Cannot find set identified by id 0 to match [ 227.822961][ T7829] nvme_fabrics: missing parameter 'transport=%s' [ 227.829409][ T7829] nvme_fabrics: missing parameter 'nqn=%s' [ 229.673909][ T42] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 229.764708][ T7860] sp0: Synchronizing with TNC [ 229.811203][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.517'. [ 230.748814][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 230.748832][ T30] audit: type=1326 audit(1763786604.734:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.2.517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9d918f749 code=0x0 [ 232.283522][ T42] usb 4-1: unable to read config index 0 descriptor/all [ 232.318671][ T42] usb 4-1: can't read configurations, error -71 [ 232.597492][ T30] audit: type=1400 audit(1763786607.394:599): avc: denied { bind } for pid=7879 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.717319][ T30] audit: type=1400 audit(1763786607.394:600): avc: denied { listen } for pid=7879 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.748309][ T30] audit: type=1400 audit(1763786607.424:601): avc: denied { ioctl } for pid=7879 comm="syz.1.522" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 232.781864][ T30] audit: type=1400 audit(1763786607.584:602): avc: denied { connect } for pid=7879 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.819389][ T30] audit: type=1400 audit(1763786607.654:603): avc: denied { execute_no_trans } for pid=7879 comm="syz.1.522" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.819415][ T7882] nvme_fabrics: missing parameter 'transport=%s' [ 232.819429][ T7882] nvme_fabrics: missing parameter 'nqn=%s' [ 233.140502][ T7893] netlink: 56 bytes leftover after parsing attributes in process `syz.4.526'. [ 233.150853][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 233.226580][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 233.393795][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 233.416715][ T10] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 233.445263][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 233.488196][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 233.521822][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 233.535656][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 233.545136][ T10] usb 1-1: config 0 has no interface number 0 [ 233.551584][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 233.563234][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 233.574274][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.948711][ T10] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.003129][ T10] usb 1-1: config 0 interface 125 has no altsetting 0 [ 234.286033][ T10] usb 1-1: config 0 interface 125 has no altsetting 2 [ 234.307454][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 234.321992][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.367699][ T10] usb 1-1: Product: syz [ 234.402094][ T10] usb 1-1: Manufacturer: syz [ 234.672694][ T10] usb 1-1: SerialNumber: syz [ 234.698284][ T10] usb 1-1: config 0 descriptor?? [ 234.705615][ T10] usb 1-1: selecting invalid altsetting 2 [ 234.816765][ T30] audit: type=1400 audit(1763786609.664:604): avc: denied { create } for pid=7923 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 234.851656][ T30] audit: type=1400 audit(1763786609.684:605): avc: denied { write } for pid=7934 comm="syz.4.533" laddr=fe80::11 lport=45310 faddr=fe80::bb fport=19997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.878045][ T30] audit: type=1400 audit(1763786609.684:606): avc: denied { read } for pid=7934 comm="syz.4.533" laddr=fe80::11 lport=45310 faddr=fe80::bb fport=19997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.908337][ T30] audit: type=1400 audit(1763786609.754:607): avc: denied { bind } for pid=7923 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.988671][ T10] usb 1-1: USB disconnect, device number 26 [ 236.079516][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 236.079533][ T30] audit: type=1400 audit(1763786610.924:609): avc: denied { read write } for pid=7964 comm="syz.4.537" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 236.119551][ T30] audit: type=1400 audit(1763786610.924:610): avc: denied { open } for pid=7964 comm="syz.4.537" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 236.382488][ T30] audit: type=1400 audit(1763786610.924:611): avc: denied { ioctl } for pid=7964 comm="syz.4.537" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 237.062271][ T7985] 9pnet_fd: Insufficient options for proto=fd [ 238.656335][ T30] audit: type=1400 audit(1763786613.504:612): avc: denied { mount } for pid=8004 comm="syz.0.546" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 239.185647][ T8012] fuse: Bad value for 'fd' [ 239.300569][ T8016] new mount options do not match the existing superblock, will be ignored [ 239.327677][ T8016] FAULT_INJECTION: forcing a failure. [ 239.327677][ T8016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.340981][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.2.549 Not tainted syzkaller #0 PREEMPT(full) [ 239.341028][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.341036][ T8016] Call Trace: [ 239.341040][ T8016] [ 239.341046][ T8016] dump_stack_lvl+0x16c/0x1f0 [ 239.341063][ T8016] should_fail_ex+0x512/0x640 [ 239.341082][ T8016] strncpy_from_user+0x3b/0x2e0 [ 239.341099][ T8016] getname_flags.part.0+0x8f/0x550 [ 239.341120][ T8016] getname_flags+0x93/0xf0 [ 239.341133][ T8016] user_path_at+0x24/0x60 [ 239.341146][ T8016] __x64_sys_mount+0x1fb/0x310 [ 239.341163][ T8016] ? __pfx___x64_sys_mount+0x10/0x10 [ 239.341184][ T8016] do_syscall_64+0xcd/0xfa0 [ 239.341198][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.341212][ T8016] RIP: 0033:0x7fa9d918f749 [ 239.341223][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.341235][ T8016] RSP: 002b:00007fa9d9f67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.341249][ T8016] RAX: ffffffffffffffda RBX: 00007fa9d93e6090 RCX: 00007fa9d918f749 [ 239.341258][ T8016] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 239.341265][ T8016] RBP: 00007fa9d9f67090 R08: 0000000000000000 R09: 0000000000000000 [ 239.341273][ T8016] R10: 0000000000040078 R11: 0000000000000246 R12: 0000000000000001 [ 239.341281][ T8016] R13: 00007fa9d93e6128 R14: 00007fa9d93e6090 R15: 00007fffbd0ac148 [ 239.341299][ T8016] [ 239.745830][ T5815] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 239.915701][ T5815] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.948482][ T5815] usb 4-1: config 1 interface 0 has no altsetting 0 [ 239.971962][ T5815] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.986324][ T30] audit: type=1400 audit(1763786614.834:613): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 239.992523][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.049595][ T5815] usb 4-1: SerialNumber: syz [ 240.057888][ T30] audit: type=1400 audit(1763786614.884:614): avc: denied { setopt } for pid=8022 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.080602][ T8010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 240.175281][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 240.307474][ T8010] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 240.340299][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 240.352212][ T10] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 240.367766][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 240.386676][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 240.439112][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 240.448914][ T8010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.457302][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 240.468670][ T10] usb 1-1: config 0 has no interface number 0 [ 240.481510][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 240.501860][ T5815] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 240.532949][ T5815] usb 4-1: USB disconnect, device number 17 [ 240.548565][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 240.562209][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.575126][ T10] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.599441][ T10] usb 1-1: config 0 interface 125 has no altsetting 0 [ 240.610826][ T10] usb 1-1: config 0 interface 125 has no altsetting 2 [ 240.619261][ T30] audit: type=1400 audit(1763786615.464:615): avc: denied { append } for pid=8035 comm="syz.2.556" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.621888][ T8036] input: syz0 as /devices/virtual/input/input6 [ 240.672000][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 240.681479][ T30] audit: type=1400 audit(1763786615.464:616): avc: denied { ioctl } for pid=8035 comm="syz.2.556" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.684762][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.718158][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 240.783246][ T10] usb 1-1: Product: syz [ 240.785381][ T30] audit: type=1400 audit(1763786615.564:617): avc: denied { read } for pid=5171 comm="acpid" name="js0" dev="devtmpfs" ino=3021 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.802770][ T10] usb 1-1: Manufacturer: syz [ 240.832211][ T10] usb 1-1: SerialNumber: syz [ 240.847840][ T30] audit: type=1400 audit(1763786615.564:618): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3021 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.873510][ T10] usb 1-1: config 0 descriptor?? [ 240.887208][ T10] usb 1-1: selecting invalid altsetting 2 [ 241.011656][ T8048] fuse: Bad value for 'fd' [ 241.157493][ T8050] evm: overlay not supported [ 241.998164][ T10] get_1284_register timeout [ 242.003357][ T10] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 242.012165][ C0] usb 1-1: async_complete: urb error -104 [ 242.012281][ C0] usb 1-1: async_complete: urb error -104 [ 242.730797][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 242.730810][ T30] audit: type=1400 audit(1763786617.564:624): avc: denied { create } for pid=8066 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.889246][ T30] audit: type=1400 audit(1763786617.574:625): avc: denied { connect } for pid=8066 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.222905][ T8075] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 243.276368][ T5881] usb 1-1: USB disconnect, device number 27 [ 243.324669][ T8075] PKCS7: Only support pkcs7_signedData type [ 243.501060][ T8079] nvme_fabrics: missing parameter 'transport=%s' [ 243.508442][ T8079] nvme_fabrics: missing parameter 'nqn=%s' [ 244.308175][ T8095] fuse: Bad value for 'fd' [ 244.573670][ T30] audit: type=1400 audit(1763786619.414:626): avc: denied { shutdown } for pid=8088 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.949884][ T8113] nvme_fabrics: missing parameter 'transport=%s' [ 245.956290][ T8113] nvme_fabrics: missing parameter 'nqn=%s' [ 249.167454][ T8121] syzkaller0: entered promiscuous mode [ 249.202940][ T8121] syzkaller0: entered allmulticast mode [ 249.414676][ T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 249.583857][ T8137] nvme_fabrics: missing parameter 'transport=%s' [ 249.590216][ T8137] nvme_fabrics: missing parameter 'nqn=%s' [ 249.609716][ T8140] fuse: Bad value for 'fd' [ 249.636641][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.653802][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.697839][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 249.730977][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 249.757895][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.793721][ T8128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.808437][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 249.826323][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 249.851686][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 249.875244][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 249.942970][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 249.961775][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 250.728802][ T30] audit: type=1400 audit(1763786625.574:627): avc: denied { read write } for pid=8127 comm="syz.0.581" name="cdc-wdm0" dev="devtmpfs" ino=3029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 250.860299][ T30] audit: type=1400 audit(1763786625.574:628): avc: denied { open } for pid=8127 comm="syz.0.581" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 251.193122][ T5907] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 251.205959][ T8128] usb 1-1: reset full-speed USB device number 28 using dummy_hcd [ 251.394058][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 251.485580][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.530281][ T8148] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 251.550826][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 251.557624][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 251.558651][ T5907] usb 3-1: config 0 has no interface number 0 [ 251.564682][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 251.576395][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 251.582527][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 251.596708][ T8157] nvme_fabrics: missing parameter 'transport=%s' [ 251.603535][ T8157] nvme_fabrics: missing parameter 'nqn=%s' [ 251.606447][ T5907] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 251.623507][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.640837][ T5907] usb 3-1: Product: syz [ 251.646802][ T5907] usb 3-1: Manufacturer: syz [ 251.651954][ T5907] usb 3-1: SerialNumber: syz [ 251.661087][ T5907] usb 3-1: config 0 descriptor?? [ 251.680529][ T5907] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 251.707951][ T8161] overlayfs: failed to clone upperpath [ 251.945213][ T8171] CIFS: VFS: Malformed UNC in devname [ 251.963912][ T30] audit: type=1400 audit(1763786626.804:629): avc: denied { nlmsg_read } for pid=8170 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.038499][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 252.047542][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 252.059329][ T8174] netlink: 484 bytes leftover after parsing attributes in process `syz.1.596'. [ 252.068741][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 252.120512][ T30] audit: type=1400 audit(1763786626.964:630): avc: denied { setopt } for pid=8169 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.609572][ T8180] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.795966][ T13] Bluetooth: (null): Invalid header checksum [ 252.808808][ T13] Bluetooth: (null): Invalid header checksum [ 252.816248][ T5907] gspca_spca1528: reg_w err -110 [ 252.834691][ T5907] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 252.911844][ T50] Bluetooth: (null): Invalid header checksum [ 252.987904][ T5907] usb 1-1: USB disconnect, device number 28 [ 253.025606][ T50] Bluetooth: (null): Invalid header checksum [ 253.134286][ T13] Bluetooth: (null): Invalid header checksum [ 253.375861][ T5815] usb 3-1: USB disconnect, device number 12 [ 253.595267][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 253.746204][ T10] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.764022][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 253.785122][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.809369][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.846648][ T10] usb 4-1: SerialNumber: syz [ 253.913518][ T8187] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 254.725238][ T8202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.603'. [ 254.811401][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 254.982167][ T8187] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 255.168437][ T8187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.274486][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 255.283220][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.296114][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.305333][ T10] usb 4-1: USB disconnect, device number 18 [ 255.372146][ T8218] team0: Device gtp0 is of different type [ 256.289514][ T8230] overlayfs: failed to clone upperpath [ 256.506782][ T30] audit: type=1400 audit(1763786631.354:631): avc: denied { mount } for pid=8235 comm="syz.2.610" name="/" dev="hugetlbfs" ino=18149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 256.938199][ T8242] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 257.073884][ T5881] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 257.223830][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 257.263536][ T5881] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 257.273044][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 257.291825][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.306555][ T5881] usb 4-1: Product: syz [ 257.319173][ T5881] usb 4-1: Manufacturer: syz [ 257.333530][ T5881] usb 4-1: SerialNumber: syz [ 257.386269][ T42] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 257.403961][ T5881] usb 4-1: config 0 descriptor?? [ 257.435977][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 257.509607][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 257.552208][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.569847][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.601495][ T24] usb 3-1: Product: syz [ 257.614352][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.632407][ T24] usb 3-1: Manufacturer: syz [ 257.667100][ T24] usb 3-1: SerialNumber: syz [ 257.683085][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.738290][ T24] usb 3-1: config 0 descriptor?? [ 257.757534][ T42] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 257.810426][ T24] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 257.816715][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.883838][ T42] usb 5-1: config 0 descriptor?? [ 257.910445][ T5881] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 258.044392][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.114807][ T8243] dtv5100: wlen = 0, aborting. [ 258.121052][ T5881] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 258.158078][ T5881] usb 4-1: media controller created [ 258.193993][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.230489][ T5881] zl10353_read_register: readreg error (reg=127, ret==0) [ 258.238874][ T5881] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 258.250779][ T8260] fuse: Invalid rootmode [ 258.258633][ T5881] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 258.473698][ T5881] usb 4-1: USB disconnect, device number 19 [ 259.042952][ T5881] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 259.153143][ T8268] nvme_fabrics: missing parameter 'transport=%s' [ 259.159554][ T8268] nvme_fabrics: missing parameter 'nqn=%s' [ 259.204961][ T30] audit: type=1400 audit(1763786634.054:632): avc: denied { write } for pid=8246 comm="syz.2.614" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 259.434388][ T8278] overlayfs: failed to clone upperpath [ 259.523927][ T24] gspca_sonixj: reg_w err -110 [ 259.528991][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 259.588380][ T8247] input: syz0 as /devices/virtual/input/input7 [ 260.168056][ T8251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.883972][ T8300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8300 comm=syz.1.624 [ 261.633667][ T976] usb 3-1: USB disconnect, device number 13 [ 261.824014][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 261.830978][ T5815] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 261.848316][ T5815] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 263.195674][ T8325] nvme_fabrics: missing parameter 'transport=%s' [ 263.202107][ T8325] nvme_fabrics: missing parameter 'nqn=%s' [ 263.268269][ T42] usbhid 5-1:0.0: can't add hid device: -32 [ 263.275206][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 263.299460][ T8327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8327 comm=syz.2.629 [ 263.913794][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 264.042529][ T5815] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 264.246904][ T8335] overlayfs: failed to clone upperpath [ 264.720808][ T5815] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 264.885036][ T8344] netlink: 56 bytes leftover after parsing attributes in process `syz.0.634'. [ 265.069692][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 268.065079][ T5815] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 268.067627][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 268.543307][ T5815] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 269.542558][ T30] audit: type=1400 audit(1763786644.384:633): avc: denied { bind } for pid=8451 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.588898][ T30] audit: type=1400 audit(1763786644.414:634): avc: denied { node_bind } for pid=8451 comm="syz.3.645" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 269.639804][ T8457] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 269.678675][ T30] audit: type=1400 audit(1763786644.524:635): avc: denied { getopt } for pid=8456 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.159604][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.649'. [ 271.169502][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.649'. [ 271.182113][ T30] audit: type=1400 audit(1763786646.024:636): avc: denied { name_connect } for pid=8470 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 272.547775][ T8488] overlayfs: failed to clone upperpath [ 272.554562][ T30] audit: type=1400 audit(1763786647.404:637): avc: denied { read } for pid=8489 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 272.586363][ T30] audit: type=1400 audit(1763786647.434:638): avc: denied { open } for pid=8489 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 272.617426][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.657'. [ 272.628508][ T30] audit: type=1400 audit(1763786647.474:639): avc: denied { ioctl } for pid=8490 comm="syz.1.657" path="socket:[19710]" dev="sockfs" ino=19710 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.932471][ T8500] overlayfs: failed to clone upperpath [ 275.931003][ T8507] wg1 speed is unknown, defaulting to 1000 [ 282.938734][ T30] audit: type=1400 audit(1763786657.784:640): avc: denied { bind } for pid=8546 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 283.154907][ T8551] x_tables: duplicate underflow at hook 2 [ 286.856315][ T8559] netlink: get zone limit has 4 unknown bytes [ 287.032025][ T8564] tipc: Enabling of bearer rejected, failed to enable media [ 289.421886][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 289.431991][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 289.462401][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 289.655457][ T30] audit: type=1400 audit(1763786664.504:641): avc: denied { write } for pid=8587 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.698942][ T30] audit: type=1400 audit(1763786665.534:642): avc: denied { kexec_image_load } for pid=8610 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 290.726922][ T30] audit: type=1400 audit(1763786665.554:643): avc: denied { ioctl } for pid=8610 comm="syz.1.700" path="socket:[20533]" dev="sockfs" ino=20533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.754557][ T8611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.083405][ T8622] overlayfs: failed to clone upperpath [ 291.174695][ T8625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8625 comm=syz.1.705 [ 292.624557][ T30] audit: type=1400 audit(1763786667.254:644): avc: denied { ioctl } for pid=8632 comm="syz.1.708" path="socket:[20569]" dev="sockfs" ino=20569 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 292.651430][ T30] audit: type=1400 audit(1763786667.264:645): avc: denied { setattr } for pid=8632 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 292.671798][ T30] audit: type=1400 audit(1763786667.274:646): avc: denied { mount } for pid=8632 comm="syz.1.708" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 293.050445][ T8632] delete_channel: no stack [ 293.318483][ T8638] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 293.877000][ T8642] syz_tun: entered allmulticast mode [ 293.887814][ T8641] syz_tun: left allmulticast mode [ 293.928738][ T8644] overlayfs: failed to clone upperpath [ 294.066178][ T8648] overlayfs: failed to clone upperpath [ 294.077737][ T8648] tracefs: Unknown parameter '—[/]{^.+*)' [ 294.853487][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 294.863420][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 295.853354][ T8661] xt_l2tp: invalid flags combination: 8 [ 295.888063][ T8663] dvmrp0: entered allmulticast mode [ 299.777592][ T30] audit: type=1400 audit(1763786674.624:647): avc: denied { name_connect } for pid=8690 comm="syz.1.729" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 299.962341][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.736'. [ 299.971622][ T8705] netem: invalid attributes len -4 [ 299.977319][ T8705] netem: change failed [ 300.896631][ T30] audit: type=1400 audit(1763786675.744:648): avc: denied { name_bind } for pid=8710 comm="syz.1.739" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 301.096697][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.746'. [ 301.283869][ T30] audit: type=1107 audit(1763786676.124:649): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 301.771094][ T8769] netlink: 'syz.1.768': attribute type 13 has an invalid length. [ 301.845095][ T8771] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 301.851921][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 306.133480][ T8801] Cannot find set identified by id 0 to match [ 307.978568][ T8813] overlayfs: failed to clone upperpath [ 308.020821][ T8815] overlayfs: failed to clone upperpath [ 310.794653][ C0] hrtimer: interrupt took 47096 ns [ 313.924837][ T8862] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 313.932015][ T8862] overlayfs: failed to set xattr on upper [ 313.937819][ T8862] overlayfs: ...falling back to redirect_dir=nofollow. [ 313.944739][ T8862] overlayfs: ...falling back to index=off. [ 313.950562][ T8862] overlayfs: ...falling back to uuid=null. [ 313.996912][ T8863] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 314.018435][ T30] audit: type=1400 audit(1763786688.724:650): avc: denied { mount } for pid=8859 comm="syz.1.802" name="/" dev="ramfs" ino=20212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 314.143073][ T30] audit: type=1400 audit(1763786688.754:651): avc: denied { mounton } for pid=8859 comm="syz.1.802" path="/file0" dev="ramfs" ino=20213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 316.709140][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.715716][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.259717][ T8897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8897 comm=syz.1.813 [ 323.513165][ T8921] overlayfs: failed to clone upperpath [ 324.767623][ T8939] overlayfs: failed to clone upperpath [ 327.817641][ T30] audit: type=1400 audit(1763786702.664:652): avc: denied { read } for pid=8962 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 335.008964][ T8995] capability: warning: `syz.1.852' uses deprecated v2 capabilities in a way that may be insecure [ 335.020795][ T8995] capability: warning: `syz.1.852' uses 32-bit capabilities (legacy support in use) [ 335.606921][ T9001] Cannot find set identified by id 0 to match [ 340.536549][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 343.819796][ T9053] openvswitch: netlink: Flow actions attr not present in new flow. [ 347.702415][ T9060] syz.1.873 uses obsolete (PF_INET,SOCK_PACKET) [ 349.710365][ T9082] bond0: Caught tx_queue_len zero misconfig [ 350.413208][ T9084] lo: Caught tx_queue_len zero misconfig [ 350.651906][ T9096] netlink: 256 bytes leftover after parsing attributes in process `syz.1.886'. [ 350.666098][ T9096] dvmrp8: entered allmulticast mode [ 351.628752][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 351.637789][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 351.902776][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'. [ 351.911915][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'. [ 351.990693][ T30] audit: type=1400 audit(1763786726.834:653): avc: denied { watch } for pid=9125 comm="syz.1.900" path="/383/bus" dev="tmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 351.992244][ T9126] overlayfs: failed to resolve './file0': -2 [ 352.013397][ T30] audit: type=1400 audit(1763786726.834:654): avc: denied { watch_sb watch_reads } for pid=9125 comm="syz.1.900" path="/383/bus" dev="tmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 353.009825][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 354.934576][ T30] audit: type=1400 audit(1763786729.784:655): avc: denied { ioctl } for pid=9157 comm="syz.1.912" path="socket:[21233]" dev="sockfs" ino=21233 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 355.938819][ T9171] netlink: 92 bytes leftover after parsing attributes in process `syz.1.916'. [ 355.993532][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'. [ 356.196170][ T9180] overlayfs: failed to resolve './file2': -2 [ 356.921539][ T9184] openvswitch: netlink: Flow actions attr not present in new flow. [ 361.084820][ T9199] netlink: 'syz.1.927': attribute type 10 has an invalid length. [ 361.100090][ T9199] team0: Port device dummy0 added [ 362.169914][ T9210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9210 comm=syz.1.930 [ 363.857666][ T9220] netlink: 666 bytes leftover after parsing attributes in process `syz.1.934'. [ 364.992770][ T9230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9230 comm=syz.1.937 [ 369.081471][ T9253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9253 comm=syz.1.945 [ 376.985050][ T30] audit: type=1326 audit(1763786751.834:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.1.968" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72f098f749 code=0x0 [ 378.158457][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.164921][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.248381][ T9337] overlay: ./file0 is not a directory [ 379.324281][ T9338] overlayfs: failed to clone upperpath [ 380.269658][ T9350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9350 comm=syz.1.978 [ 385.892505][ T9365] xt_NFQUEUE: number of total queues is 0 [ 386.222452][ T9373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9373 comm=syz.1.985 [ 391.329153][ T9395] overlay: ./file0 is not a directory [ 391.352891][ T9395] overlayfs: failed to clone upperpath [ 396.080418][ T9416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9416 comm=syz.1.1000 [ 398.414436][ T9434] overlayfs: failed to clone upperpath [ 398.457808][ T9436] overlayfs: failed to clone upperpath [ 399.456609][ T9448] bridge0: entered allmulticast mode [ 399.468396][ T9448] pim6reg: entered allmulticast mode [ 399.476789][ T9448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=9448 comm=syz.1.1012 [ 399.587576][ T9450] openvswitch: netlink: Flow actions attr not present in new flow. [ 403.081352][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 403.984818][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 405.481615][ T30] audit: type=1400 audit(1763786780.324:657): avc: denied { accept } for pid=9485 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 406.039828][ T9491] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1023'. [ 407.007119][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 407.016288][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 407.074836][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 407.083937][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 407.285578][ T9507] overlayfs: failed to clone upperpath [ 408.223400][ T30] audit: type=1400 audit(1763786783.064:658): avc: denied { connect } for pid=9508 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.327828][ T30] audit: type=1400 audit(1763786783.134:659): avc: denied { setopt } for pid=9508 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.473035][ T9520] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1032'. [ 411.358836][ T9534] xt_NFQUEUE: number of total queues is 0 [ 411.391155][ T9536] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 412.361723][ T30] audit: type=1400 audit(1763786787.204:660): avc: denied { write } for pid=9548 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 413.300036][ T9556] overlayfs: failed to clone upperpath [ 413.311335][ T30] audit: type=1400 audit(1763786788.154:661): avc: denied { write } for pid=9555 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 413.566837][ T9564] xt_NFQUEUE: number of total queues is 0 [ 414.417891][ T9580] xt_NFQUEUE: number of total queues is 0 [ 414.554002][ T9584] overlayfs: failed to clone upperpath [ 415.337727][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 415.349407][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 415.394241][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 415.403118][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 415.493844][ T30] audit: type=1400 audit(1763786790.334:662): avc: denied { write } for pid=9587 comm="syz.1.1056" lport=49771 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 415.518953][ T30] audit: type=1400 audit(1763786790.344:663): avc: denied { setopt } for pid=9587 comm="syz.1.1056" lport=49771 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 417.646683][ T9606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9606 comm=syz.1.1062 [ 420.497937][ T9631] overlayfs: failed to clone upperpath [ 421.328871][ T9636] 9pnet_fd: Insufficient options for proto=fd [ 421.553791][ T9647] overlayfs: failed to clone upperpath [ 421.664018][ T31] INFO: task syz-executor:5811 blocked for more than 143 seconds. [ 421.673122][ T31] Not tainted syzkaller #0 [ 421.678630][ T31] Blocked by coredump. [ 421.683196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.691914][ T31] task:syz-executor state:D stack:23144 pid:5811 tgid:5811 ppid:1 task_flags:0x40054c flags:0x00080003 [ 421.703990][ T31] Call Trace: [ 421.707274][ T31] [ 421.710191][ T31] __schedule+0x1190/0x5de0 [ 421.714793][ T31] ? check_path.constprop.0+0x24/0x50 [ 421.720471][ T31] ? __lock_acquire+0x622/0x1c90 [ 421.725461][ T31] ? __pfx___schedule+0x10/0x10 [ 421.730317][ T31] ? find_held_lock+0x2b/0x80 [ 421.735013][ T31] ? schedule+0x2d7/0x3a0 [ 421.739346][ T31] ? rfkill_unregister+0xec/0x2c0 [ 421.744622][ T31] schedule+0xe7/0x3a0 [ 421.748891][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.754449][ T31] __mutex_lock+0x818/0x1060 [ 421.759036][ T31] ? class_to_subsys+0x10f/0x160 [ 421.764205][ T31] ? rfkill_unregister+0xec/0x2c0 [ 421.769319][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.774994][ T31] ? device_del+0x6b6/0x9f0 [ 421.779501][ T31] ? __pfx_device_del+0x10/0x10 [ 421.784448][ T31] ? _raw_read_unlock+0x28/0x50 [ 421.789309][ T31] ? rfkill_unregister+0xec/0x2c0 [ 421.795463][ T31] rfkill_unregister+0xec/0x2c0 [ 421.800321][ T31] hci_unregister_dev+0x337/0x640 [ 421.805373][ T31] vhci_release+0x17d/0x230 [ 421.809884][ T31] ? __pfx_vhci_release+0x10/0x10 [ 421.814951][ T31] __fput+0x402/0xb70 [ 421.818931][ T31] task_work_run+0x150/0x240 [ 421.823500][ T31] ? __pfx_task_work_run+0x10/0x10 [ 421.828748][ T31] do_exit+0x86f/0x2bf0 [ 421.833181][ T31] ? find_held_lock+0x2b/0x80 [ 421.837979][ T31] ? __pfx_do_exit+0x10/0x10 [ 421.842574][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 421.847638][ T31] ? find_held_lock+0x2b/0x80 [ 421.852312][ T31] do_group_exit+0xd3/0x2a0 [ 421.856975][ T31] get_signal+0x2671/0x26d0 [ 421.861474][ T31] ? __pfx_get_signal+0x10/0x10 [ 421.866359][ T31] ? __do_sys_wait4+0xd1/0x170 [ 421.871114][ T31] arch_do_signal_or_restart+0x8f/0x7c0 [ 421.876681][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 421.882847][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 421.888187][ T31] ? dnotify_flush+0xa9/0x4c0 [ 421.892868][ T31] exit_to_user_mode_loop+0x85/0x130 [ 421.898173][ T31] do_syscall_64+0x426/0xfa0 [ 421.902756][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.908725][ T31] RIP: 0033:0x7f7a46585897 [ 421.913137][ T31] RSP: 002b:00007ffda49ef590 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 421.921570][ T31] RAX: fffffffffffffe00 RBX: 0000000000000199 RCX: 00007f7a46585897 [ 421.929562][ T31] RDX: 0000000040000000 RSI: 00007ffda49ef5fc RDI: 00000000ffffffff [ 421.937636][ T31] RBP: 00007ffda49ef5fc R08: 0000000000000000 R09: 0000000000000000 [ 421.945644][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000079 [ 421.953616][ T31] R13: 00005555751e3590 R14: 000000000003f17c R15: 00007ffda49ef650 [ 421.961612][ T31] [ 421.964791][ T31] INFO: task kworker/0:3:5815 blocked for more than 143 seconds. [ 421.972630][ T31] Not tainted syzkaller #0 [ 421.977802][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.986552][ T31] task:kworker/0:3 state:D stack:24776 pid:5815 tgid:5815 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 421.999074][ T31] Workqueue: events rfkill_op_handler [ 422.004554][ T31] Call Trace: [ 422.007841][ T31] [ 422.010774][ T31] __schedule+0x1190/0x5de0 [ 422.015330][ T31] ? check_path.constprop.0+0x24/0x50 [ 422.020716][ T31] ? __lock_acquire+0x622/0x1c90 [ 422.025760][ T31] ? __pfx___schedule+0x10/0x10 [ 422.030690][ T31] ? find_held_lock+0x2b/0x80 [ 422.035420][ T31] ? schedule+0x2d7/0x3a0 [ 422.039804][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 422.044464][ T31] schedule+0xe7/0x3a0 [ 422.048542][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.054059][ T31] __mutex_lock+0x818/0x1060 [ 422.058648][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 422.063223][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.068301][ T31] ? kobject_uevent_env+0x2e5/0x1870 [ 422.073596][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 422.078737][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 422.083361][ T31] nfc_dev_down+0x2d/0x2e0 [ 422.087801][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 422.092826][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 422.098561][ T31] rfkill_set_block+0x1fe/0x550 [ 422.103409][ T31] rfkill_epo+0x8e/0x1d0 [ 422.107696][ T31] rfkill_op_handler+0x262/0x280 [ 422.112632][ T31] process_one_work+0x9cf/0x1b70 [ 422.117596][ T31] ? __pfx_process_one_work+0x10/0x10 [ 422.122971][ T31] ? assign_work+0x1a0/0x250 [ 422.127587][ T31] worker_thread+0x6c8/0xf10 [ 422.132175][ T31] ? __kthread_parkme+0x19e/0x250 [ 422.137223][ T31] ? __pfx_worker_thread+0x10/0x10 [ 422.142335][ T31] kthread+0x3c5/0x780 [ 422.146493][ T31] ? __pfx_kthread+0x10/0x10 [ 422.151095][ T31] ? rcu_is_watching+0x12/0xc0 [ 422.156006][ T31] ? __pfx_kthread+0x10/0x10 [ 422.160715][ T31] ret_from_fork+0x675/0x7d0 [ 422.165366][ T31] ? __pfx_kthread+0x10/0x10 [ 422.169954][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.174780][ T31] [ 422.177866][ T31] INFO: task kworker/0:8:5923 blocked for more than 143 seconds. [ 422.185751][ T31] Not tainted syzkaller #0 [ 422.190677][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.199367][ T31] task:kworker/0:8 state:D stack:22056 pid:5923 tgid:5923 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 422.211401][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 422.218100][ T31] Call Trace: [ 422.221369][ T31] [ 422.224348][ T31] __schedule+0x1190/0x5de0 [ 422.228868][ T31] ? find_held_lock+0x2b/0x80 [ 422.233532][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.239376][ T31] ? __pfx___schedule+0x10/0x10 [ 422.244288][ T31] ? find_held_lock+0x2b/0x80 [ 422.248984][ T31] ? schedule+0x2d7/0x3a0 [ 422.253373][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 422.259759][ T31] schedule+0xe7/0x3a0 [ 422.263902][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.269389][ T31] __mutex_lock+0x818/0x1060 [ 422.274031][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 422.288272][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.293331][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.299359][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 422.305815][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 422.311982][ T31] process_one_work+0x9cf/0x1b70 [ 422.317181][ T31] ? __pfx_process_one_work+0x10/0x10 [ 422.322552][ T31] ? assign_work+0x1a0/0x250 [ 422.327301][ T31] worker_thread+0x6c8/0xf10 [ 422.331889][ T31] ? __kthread_parkme+0x19e/0x250 [ 422.336957][ T31] ? __pfx_worker_thread+0x10/0x10 [ 422.342058][ T31] kthread+0x3c5/0x780 [ 422.346163][ T31] ? __pfx_kthread+0x10/0x10 [ 422.350743][ T31] ? rcu_is_watching+0x12/0xc0 [ 422.355511][ T31] ? __pfx_kthread+0x10/0x10 [ 422.360101][ T31] ret_from_fork+0x675/0x7d0 [ 422.364730][ T31] ? __pfx_kthread+0x10/0x10 [ 422.369313][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.374115][ T31] [ 422.377149][ T31] INFO: task syz.4.615:8251 blocked for more than 144 seconds. [ 422.384912][ T31] Not tainted syzkaller #0 [ 422.389887][ T31] Blocked by coredump. [ 422.395224][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.403949][ T31] task:syz.4.615 state:D stack:26584 pid:8251 tgid:8249 ppid:5811 task_flags:0x40054c flags:0x00080003 [ 422.415882][ T31] Call Trace: [ 422.419142][ T31] [ 422.422052][ T31] __schedule+0x1190/0x5de0 [ 422.427233][ T31] ? check_path.constprop.0+0x24/0x50 [ 422.433126][ T31] ? __lock_acquire+0x622/0x1c90 [ 422.438112][ T31] ? __pfx___schedule+0x10/0x10 [ 422.442964][ T31] ? find_held_lock+0x2b/0x80 [ 422.448174][ T31] ? schedule+0x2d7/0x3a0 [ 422.452541][ T31] ? rfkill_unregister+0xec/0x2c0 [ 422.457628][ T31] schedule+0xe7/0x3a0 [ 422.461697][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.467294][ T31] __mutex_lock+0x818/0x1060 [ 422.471877][ T31] ? class_to_subsys+0x10f/0x160 [ 422.476912][ T31] ? rfkill_unregister+0xec/0x2c0 [ 422.481938][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.487003][ T31] ? device_del+0x6b6/0x9f0 [ 422.491501][ T31] ? __pfx_device_del+0x10/0x10 [ 422.496495][ T31] ? rfkill_unregister+0xec/0x2c0 [ 422.501537][ T31] rfkill_unregister+0xec/0x2c0 [ 422.506536][ T31] nfc_unregister_device+0x94/0x330 [ 422.511733][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 422.517628][ T31] virtual_ncidev_close+0x4b/0xa0 [ 422.522653][ T31] __fput+0x402/0xb70 [ 422.526679][ T31] task_work_run+0x150/0x240 [ 422.531269][ T31] ? __pfx_task_work_run+0x10/0x10 [ 422.536456][ T31] do_exit+0x86f/0x2bf0 [ 422.540615][ T31] ? __pfx___might_resched+0x10/0x10 [ 422.545949][ T31] ? __pfx_do_exit+0x10/0x10 [ 422.550538][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 422.555670][ T31] ? find_held_lock+0x2b/0x80 [ 422.560365][ T31] do_group_exit+0xd3/0x2a0 [ 422.564922][ T31] get_signal+0x2671/0x26d0 [ 422.569429][ T31] ? __pfx_get_signal+0x10/0x10 [ 422.574340][ T31] arch_do_signal_or_restart+0x8f/0x7c0 [ 422.579882][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 422.586087][ T31] exit_to_user_mode_loop+0x85/0x130 [ 422.591367][ T31] do_syscall_64+0x426/0xfa0 [ 422.596015][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.601907][ T31] RIP: 0033:0x7f7a4658f749 [ 422.606365][ T31] RSP: 002b:00007f7a447f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.614811][ T31] RAX: 000000000000001c RBX: 00007f7a467e5fa0 RCX: 00007f7a4658f749 [ 422.622771][ T31] RDX: 0000000000008004 RSI: 0000200000000140 RDI: 0000000000000006 [ 422.630865][ T31] RBP: 00007f7a46613f91 R08: 0000000000000000 R09: 0000000000000000 [ 422.638875][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.646875][ T31] R13: 00007f7a467e6038 R14: 00007f7a467e5fa0 R15: 00007ffda49ef238 [ 422.654862][ T31] [ 422.657868][ T31] INFO: task syz.0.634:8344 blocked for more than 144 seconds. [ 422.666494][ T31] Not tainted syzkaller #0 [ 422.671412][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.680130][ T31] task:syz.0.634 state:D stack:26440 pid:8344 tgid:8343 ppid:5809 task_flags:0x400140 flags:0x00080002 [ 422.692114][ T31] Call Trace: [ 422.695415][ T31] [ 422.698345][ T31] __schedule+0x1190/0x5de0 [ 422.702853][ T31] ? check_path.constprop.0+0x24/0x50 [ 422.708287][ T31] ? __lock_acquire+0x622/0x1c90 [ 422.713222][ T31] ? __pfx___schedule+0x10/0x10 [ 422.718117][ T31] ? find_held_lock+0x2b/0x80 [ 422.722788][ T31] ? schedule+0x2d7/0x3a0 [ 422.727144][ T31] ? rfkill_register+0x3a/0xb40 [ 422.731990][ T31] schedule+0xe7/0x3a0 [ 422.736099][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.741559][ T31] __mutex_lock+0x818/0x1060 [ 422.746314][ T31] ? rfkill_register+0x3a/0xb40 [ 422.751183][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.756882][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 422.762238][ T31] ? __init_waitqueue_head+0xca/0x150 [ 422.768129][ T31] ? rfkill_register+0x3a/0xb40 [ 422.772975][ T31] rfkill_register+0x3a/0xb40 [ 422.777661][ T31] nfc_register_device+0x11f/0x3c0 [ 422.782773][ T31] nci_register_device+0x7f1/0xb80 [ 422.788540][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 422.794221][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 422.799597][ T31] virtual_ncidev_open+0x141/0x220 [ 422.804822][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 422.810458][ T31] misc_open+0x26d/0x450 [ 422.815620][ T31] ? __pfx_misc_open+0x10/0x10 [ 422.820393][ T31] chrdev_open+0x234/0x6a0 [ 422.824868][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 422.829801][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 422.836237][ T31] do_dentry_open+0x982/0x1530 [ 422.840995][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 422.846512][ T31] vfs_open+0x82/0x3f0 [ 422.850580][ T31] path_openat+0x1de4/0x2cb0 [ 422.855190][ T31] ? __pfx_path_openat+0x10/0x10 [ 422.860115][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 422.865164][ T31] do_filp_open+0x20b/0x470 [ 422.869695][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 422.875359][ T31] ? alloc_fd+0x471/0x7d0 [ 422.879690][ T31] do_sys_openat2+0x11b/0x1d0 [ 422.884390][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.889579][ T31] ? find_held_lock+0x2b/0x80 [ 422.894283][ T31] __x64_sys_openat+0x174/0x210 [ 422.899133][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 422.905079][ T31] do_syscall_64+0xcd/0xfa0 [ 422.909564][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.915492][ T31] RIP: 0033:0x7fcdec98f749 [ 422.919959][ T31] RSP: 002b:00007fcded7cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.928396][ T31] RAX: ffffffffffffffda RBX: 00007fcdecbe5fa0 RCX: 00007fcdec98f749 [ 422.936951][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 422.945046][ T31] RBP: 00007fcdeca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 422.953023][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.961016][ T31] R13: 00007fcdecbe6038 R14: 00007fcdecbe5fa0 R15: 00007ffe7cdb6d38 [ 422.969765][ T31] [ 422.972811][ T31] INFO: task syz.0.634:8361 blocked for more than 144 seconds. [ 422.980468][ T31] Not tainted syzkaller #0 [ 422.985442][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.994691][ T31] task:syz.0.634 state:D stack:28392 pid:8361 tgid:8343 ppid:5809 task_flags:0x400140 flags:0x00080002 [ 423.006625][ T31] Call Trace: [ 423.009893][ T31] [ 423.012813][ T31] __schedule+0x1190/0x5de0 [ 423.017348][ T31] ? __lock_acquire+0x622/0x1c90 [ 423.022288][ T31] ? __pfx___schedule+0x10/0x10 [ 423.027914][ T31] ? find_held_lock+0x2b/0x80 [ 423.032599][ T31] ? schedule+0x2d7/0x3a0 [ 423.036964][ T31] ? misc_open+0x63/0x450 [ 423.041296][ T31] schedule+0xe7/0x3a0 [ 423.045404][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.050866][ T31] __mutex_lock+0x818/0x1060 [ 423.056083][ T31] ? misc_open+0x63/0x450 [ 423.060412][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.065465][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 423.070495][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 423.076173][ T31] ? __pfx_misc_open+0x10/0x10 [ 423.080935][ T31] ? misc_open+0x63/0x450 [ 423.085892][ T31] misc_open+0x63/0x450 [ 423.090032][ T31] ? __pfx_misc_open+0x10/0x10 [ 423.094831][ T31] chrdev_open+0x234/0x6a0 [ 423.099238][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 423.104396][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 423.110722][ T31] do_dentry_open+0x982/0x1530 [ 423.116073][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 423.120999][ T31] vfs_open+0x82/0x3f0 [ 423.125083][ T31] path_openat+0x1de4/0x2cb0 [ 423.129665][ T31] ? __pfx_path_openat+0x10/0x10 [ 423.134633][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 423.139565][ T31] do_filp_open+0x20b/0x470 [ 423.144860][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 423.149900][ T31] ? alloc_fd+0x471/0x7d0 [ 423.154280][ T31] do_sys_openat2+0x11b/0x1d0 [ 423.158959][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 423.164180][ T31] ? fput+0x9b/0xd0 [ 423.167985][ T31] ? __sys_sendmsg+0x18c/0x220 [ 423.172731][ T31] __x64_sys_openat+0x174/0x210 [ 423.178185][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 423.183546][ T31] do_syscall_64+0xcd/0xfa0 [ 423.188064][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.193995][ T31] RIP: 0033:0x7fcdec98f749 [ 423.198401][ T31] RSP: 002b:00007fcded7ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 423.207465][ T31] RAX: ffffffffffffffda RBX: 00007fcdecbe6090 RCX: 00007fcdec98f749 [ 423.215465][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 423.223430][ T31] RBP: 00007fcdeca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.231415][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.239975][ T31] R13: 00007fcdecbe6128 R14: 00007fcdecbe6090 R15: 00007ffe7cdb6d38 [ 423.247981][ T31] [ 423.251004][ T31] INFO: task syz.2.642:8391 blocked for more than 144 seconds. [ 423.258586][ T31] Not tainted syzkaller #0 [ 423.263508][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.272765][ T31] task:syz.2.642 state:D stack:28856 pid:8391 tgid:8385 ppid:5810 task_flags:0x400040 flags:0x00080002 [ 423.284725][ T31] Call Trace: [ 423.288011][ T31] [ 423.290937][ T31] __schedule+0x1190/0x5de0 [ 423.296060][ T31] ? __pfx___schedule+0x10/0x10 [ 423.300903][ T31] ? find_held_lock+0x2b/0x80 [ 423.305587][ T31] ? schedule+0x2d7/0x3a0 [ 423.309916][ T31] ? misc_open+0x63/0x450 [ 423.314286][ T31] schedule+0xe7/0x3a0 [ 423.318364][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.324507][ T31] __mutex_lock+0x818/0x1060 [ 423.329099][ T31] ? misc_open+0x63/0x450 [ 423.333407][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.338448][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 423.343476][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 423.349208][ T31] ? __pfx_misc_open+0x10/0x10 [ 423.354646][ T31] ? misc_open+0x63/0x450 [ 423.358974][ T31] misc_open+0x63/0x450 [ 423.363107][ T31] ? __pfx_misc_open+0x10/0x10 [ 423.367885][ T31] chrdev_open+0x234/0x6a0 [ 423.372300][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 423.377252][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 423.383571][ T31] do_dentry_open+0x982/0x1530 [ 423.388945][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 423.393897][ T31] vfs_open+0x82/0x3f0 [ 423.397982][ T31] path_openat+0x1de4/0x2cb0 [ 423.402557][ T31] ? __pfx_path_openat+0x10/0x10 [ 423.407514][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 423.412440][ T31] do_filp_open+0x20b/0x470 [ 423.417510][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 423.422527][ T31] ? alloc_fd+0x471/0x7d0 [ 423.427183][ T31] do_sys_openat2+0x11b/0x1d0 [ 423.431891][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 423.437099][ T31] ? __pfx___sched_setscheduler+0x10/0x10 [ 423.442827][ T31] __x64_sys_openat+0x174/0x210 [ 423.448529][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 423.453936][ T31] do_syscall_64+0xcd/0xfa0 [ 423.458446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.464349][ T31] RIP: 0033:0x7fa9d918f749 [ 423.468757][ T31] RSP: 002b:00007fa9d9f46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 423.477752][ T31] RAX: ffffffffffffffda RBX: 00007fa9d93e6180 RCX: 00007fa9d918f749 [ 423.485751][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 423.493738][ T31] RBP: 00007fa9d9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.501708][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.510634][ T31] R13: 00007fa9d93e6218 R14: 00007fa9d93e6180 R15: 00007fffbd0ac148 [ 423.518655][ T31] [ 423.521683][ T31] INFO: task syz.2.642:8395 blocked for more than 145 seconds. [ 423.529364][ T31] Not tainted syzkaller #0 [ 423.535169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.543869][ T31] task:syz.2.642 state:D stack:27784 pid:8395 tgid:8385 ppid:5810 task_flags:0x400040 flags:0x00080002 [ 423.555838][ T31] Call Trace: [ 423.559116][ T31] [ 423.562051][ T31] __schedule+0x1190/0x5de0 [ 423.567302][ T31] ? __pfx___schedule+0x10/0x10 [ 423.572157][ T31] ? find_held_lock+0x2b/0x80 [ 423.576858][ T31] ? schedule+0x2d7/0x3a0 [ 423.581194][ T31] ? misc_open+0x63/0x450 [ 423.585740][ T31] schedule+0xe7/0x3a0 [ 423.589967][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.595651][ T31] __mutex_lock+0x818/0x1060 [ 423.600286][ T31] ? misc_open+0x63/0x450 [ 423.605322][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.610334][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 423.615392][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 423.621040][ T31] ? __pfx_misc_open+0x10/0x10 [ 423.625841][ T31] ? misc_open+0x63/0x450 [ 423.630160][ T31] misc_open+0x63/0x450 [ 423.634890][ T31] ? __pfx_misc_open+0x10/0x10 [ 423.639635][ T31] chrdev_open+0x234/0x6a0 [ 423.644095][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 423.649038][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 423.655393][ T31] do_dentry_open+0x982/0x1530 [ 423.660146][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 423.665682][ T31] vfs_open+0x82/0x3f0 [ 423.669737][ T31] path_openat+0x1de4/0x2cb0 [ 423.674359][ T31] ? __pfx___schedule+0x10/0x10 [ 423.679210][ T31] ? __pfx_path_openat+0x10/0x10 [ 423.684171][ T31] do_filp_open+0x20b/0x470 [ 423.688684][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 423.694528][ T31] ? irqentry_exit+0x3b/0x90 [ 423.699123][ T31] ? alloc_fd+0x471/0x7d0 [ 423.703813][ T31] do_sys_openat2+0x11b/0x1d0 [ 423.708490][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 423.713728][ T31] ? find_held_lock+0x2b/0x80 [ 423.718407][ T31] __x64_sys_openat+0x174/0x210 [ 423.723250][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 423.729216][ T31] do_syscall_64+0xcd/0xfa0 [ 423.733748][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.739634][ T31] RIP: 0033:0x7fa9d918f749 [ 423.744103][ T31] RSP: 002b:00007fa9d6ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 423.752505][ T31] RAX: ffffffffffffffda RBX: 00007fa9d93e6270 RCX: 00007fa9d918f749 [ 423.761149][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 423.769263][ T31] RBP: 00007fa9d9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.777293][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.785353][ T31] R13: 00007fa9d93e6308 R14: 00007fa9d93e6270 R15: 00007fffbd0ac148 [ 423.793321][ T31] [ 423.796440][ T31] INFO: task syz.2.642:8398 blocked for more than 145 seconds. [ 423.804282][ T31] Not tainted syzkaller #0 [ 423.809213][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.817994][ T31] task:syz.2.642 state:D stack:28520 pid:8398 tgid:8385 ppid:5810 task_flags:0x400140 flags:0x00080002 [ 423.830897][ T31] Call Trace: [ 423.834276][ T31] [ 423.837225][ T31] __schedule+0x1190/0x5de0 [ 423.841737][ T31] ? __pfx___schedule+0x10/0x10 [ 423.846780][ T31] ? find_held_lock+0x2b/0x80 [ 423.851493][ T31] ? schedule+0x2d7/0x3a0 [ 423.855894][ T31] ? misc_open+0x63/0x450 [ 423.860219][ T31] schedule+0xe7/0x3a0 [ 423.864772][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.870240][ T31] __mutex_lock+0x818/0x1060 [ 423.874883][ T31] ? misc_open+0x63/0x450 [ 423.879208][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.884305][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 423.889341][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 423.895033][ T31] ? __pfx_misc_open+0x10/0x10 [ 423.899815][ T31] ? misc_open+0x63/0x450 [ 423.904327][ T31] misc_open+0x63/0x450 [ 423.908506][ T31] ? __pfx_misc_open+0x10/0x10 [ 423.913274][ T31] chrdev_open+0x234/0x6a0 [ 423.918579][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 423.923530][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 423.929905][ T31] do_dentry_open+0x982/0x1530 [ 423.934788][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 423.939742][ T31] vfs_open+0x82/0x3f0 [ 423.944520][ T31] path_openat+0x1de4/0x2cb0 [ 423.949104][ T31] ? __pfx_path_openat+0x10/0x10 [ 423.954048][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 423.959005][ T31] do_filp_open+0x20b/0x470 [ 423.963520][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 423.968586][ T31] ? alloc_fd+0x471/0x7d0 [ 423.972913][ T31] do_sys_openat2+0x11b/0x1d0 [ 423.978244][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 423.983435][ T31] __x64_sys_openat+0x174/0x210 [ 423.988388][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 423.993821][ T31] do_syscall_64+0xcd/0xfa0 [ 423.998324][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.004842][ T31] RIP: 0033:0x7fa9d918f749 [ 424.009242][ T31] RSP: 002b:00007fa9d6bd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 424.017691][ T31] RAX: ffffffffffffffda RBX: 00007fa9d93e6360 RCX: 00007fa9d918f749 [ 424.026472][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 424.035222][ T31] RBP: 00007fa9d9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 424.043199][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.051214][ T31] R13: 00007fa9d93e63f8 R14: 00007fa9d93e6360 R15: 00007fffbd0ac148 [ 424.059248][ T31] [ 424.062272][ T31] INFO: task syz.3.651:8475 blocked for more than 145 seconds. [ 424.070521][ T31] Not tainted syzkaller #0 [ 424.075516][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.084243][ T31] task:syz.3.651 state:D stack:26680 pid:8475 tgid:8474 ppid:5813 task_flags:0x400040 flags:0x00080002 [ 424.096806][ T31] Call Trace: [ 424.100083][ T31] [ 424.103011][ T31] __schedule+0x1190/0x5de0 [ 424.107564][ T31] ? __lock_acquire+0x622/0x1c90 [ 424.112497][ T31] ? __pfx___schedule+0x10/0x10 [ 424.117369][ T31] ? find_held_lock+0x2b/0x80 [ 424.122042][ T31] ? schedule+0x2d7/0x3a0 [ 424.126950][ T31] ? misc_open+0x63/0x450 [ 424.131275][ T31] schedule+0xe7/0x3a0 [ 424.135370][ T31] schedule_preempt_disabled+0x13/0x30 [ 424.140830][ T31] __mutex_lock+0x818/0x1060 [ 424.145451][ T31] ? misc_open+0x63/0x450 [ 424.149786][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 424.155600][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 424.160631][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 424.166292][ T31] ? __pfx_misc_open+0x10/0x10 [ 424.171048][ T31] ? misc_open+0x63/0x450 [ 424.175393][ T31] misc_open+0x63/0x450 [ 424.179550][ T31] ? __pfx_misc_open+0x10/0x10 [ 424.184943][ T31] chrdev_open+0x234/0x6a0 [ 424.189346][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 424.194335][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 424.200659][ T31] do_dentry_open+0x982/0x1530 [ 424.205427][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 424.210363][ T31] vfs_open+0x82/0x3f0 [ 424.215029][ T31] path_openat+0x1de4/0x2cb0 [ 424.219612][ T31] ? __pfx_path_openat+0x10/0x10 [ 424.225146][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 424.230075][ T31] do_filp_open+0x20b/0x470 [ 424.234588][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 424.239611][ T31] ? alloc_fd+0x471/0x7d0 [ 424.244785][ T31] do_sys_openat2+0x11b/0x1d0 [ 424.249484][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 424.254686][ T31] ? find_held_lock+0x2b/0x80 [ 424.259356][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 424.264327][ T31] __x64_sys_openat+0x174/0x210 [ 424.269176][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 424.275140][ T31] ? do_user_addr_fault+0x843/0x1370 [ 424.280423][ T31] do_syscall_64+0xcd/0xfa0 [ 424.284965][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.290851][ T31] RIP: 0033:0x7fc9ef58df90 [ 424.295285][ T31] RSP: 002b:00007fc9f0478ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 424.304549][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc9ef58df90 [ 424.312524][ T31] RDX: 0000000000000002 RSI: 00007fc9ef613c6c RDI: 00000000ffffff9c [ 424.320528][ T31] RBP: 00007fc9ef613c6c R08: 0000000000000000 R09: 0000000000000000 [ 424.328500][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 424.336991][ T31] R13: 0000000000000024 R14: 0000200000000000 R15: 00007ffe5708ca58 [ 424.345009][ T31] [ 424.348017][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 424.357064][ T31] [ 424.357064][ T31] Showing all locks held in the system: [ 424.365333][ T31] 1 lock held by khungtaskd/31: [ 424.370185][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 424.380049][ T31] 2 locks held by getty/5574: [ 424.384751][ T31] #0: ffff88814cf710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 424.395057][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 424.405170][ T31] 1 lock held by syz-executor/5811: [ 424.410359][ T31] #0: ffffffff90592708 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 424.420472][ T31] 4 locks held by kworker/0:3/5815: [ 424.427094][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 424.437590][ T31] #1: ffffc900030a7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 424.447990][ T31] #2: ffffffff90592708 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 424.458110][ T31] #3: ffff88803372f100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 424.467189][ T31] 3 locks held by kworker/0:8/5923: [ 424.472376][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 424.482830][ T31] #1: ffffc900045efd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 424.496277][ T31] #2: ffffffff90592708 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 424.507726][ T31] 2 locks held by syz.4.615/8251: [ 424.512747][ T31] #0: ffff88803372f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 424.522531][ T31] #1: ffffffff90592708 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 424.533181][ T31] 3 locks held by syz.0.634/8344: [ 424.538220][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.546815][ T31] #1: ffff8880300f5100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 424.557011][ T31] #2: ffffffff90592708 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 424.566954][ T31] 1 lock held by syz.0.634/8361: [ 424.571875][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.580359][ T31] 1 lock held by syz.2.642/8391: [ 424.586150][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.594647][ T31] 1 lock held by syz.2.642/8395: [ 424.599574][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.608052][ T31] 1 lock held by syz.2.642/8398: [ 424.612972][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.622004][ T31] 1 lock held by syz.3.651/8475: [ 424.626982][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.635461][ T31] 1 lock held by syz-executor/8489: [ 424.640629][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.649789][ T31] 1 lock held by syz-executor/8515: [ 424.655061][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.663506][ T31] 1 lock held by syz-executor/8542: [ 424.668721][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.677702][ T31] 1 lock held by syz-executor/8557: [ 424.682882][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.691377][ T31] 1 lock held by syz-executor/8982: [ 424.696577][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.705625][ T31] 1 lock held by syz-executor/9025: [ 424.710800][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.719286][ T31] 1 lock held by syz-executor/9047: [ 424.724511][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.732955][ T31] 1 lock held by syz-executor/9055: [ 424.738810][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.747286][ T31] 1 lock held by syz-executor/9404: [ 424.752464][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.760915][ T31] 1 lock held by syz-executor/9443: [ 424.766631][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.775092][ T31] 1 lock held by syz-executor/9452: [ 424.780281][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.788929][ T31] 1 lock held by syz-executor/9501: [ 424.794333][ T31] #0: ffffffff8f0745e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 424.802794][ T31] [ 424.805708][ T31] ============================================= [ 424.805708][ T31] [ 424.814799][ T31] NMI backtrace for cpu 1 [ 424.814809][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 424.814822][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.814828][ T31] Call Trace: [ 424.814831][ T31] [ 424.814836][ T31] dump_stack_lvl+0x116/0x1f0 [ 424.814850][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 424.814864][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 424.814881][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 424.814895][ T31] watchdog+0xf3f/0x1170 [ 424.814911][ T31] ? rcu_is_watching+0x12/0xc0 [ 424.814925][ T31] ? __pfx_watchdog+0x10/0x10 [ 424.814936][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 424.814948][ T31] ? __kthread_parkme+0x19e/0x250 [ 424.814963][ T31] ? __pfx_watchdog+0x10/0x10 [ 424.814976][ T31] kthread+0x3c5/0x780 [ 424.814986][ T31] ? __pfx_kthread+0x10/0x10 [ 424.814997][ T31] ? rcu_is_watching+0x12/0xc0 [ 424.815009][ T31] ? __pfx_kthread+0x10/0x10 [ 424.815020][ T31] ret_from_fork+0x675/0x7d0 [ 424.815029][ T31] ? __pfx_kthread+0x10/0x10 [ 424.815040][ T31] ret_from_fork_asm+0x1a/0x30 [ 424.815060][ T31] [ 424.815064][ T31] Sending NMI from CPU 1 to CPUs 0: [ 424.935411][ C0] NMI backtrace for cpu 0 [ 424.935426][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 424.935442][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.935450][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 424.935475][ C0] Code: a7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 55 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 424.935488][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 424.935499][ C0] RAX: 000000000185f3ad RBX: 0000000000000000 RCX: ffffffff8b60d2a9 [ 424.935508][ C0] RDX: 0000000000000000 RSI: ffffffff8da2c59c RDI: ffffffff8bf073c0 [ 424.935517][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 424.935526][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 424.935534][ C0] R13: ffffffff8e097a00 R14: ffffffff908216d0 R15: 0000000000000000 [ 424.935542][ C0] FS: 0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 424.935556][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.935565][ C0] CR2: 00007f72f0bb9358 CR3: 0000000029e35000 CR4: 00000000003526f0 [ 424.935574][ C0] Call Trace: [ 424.935580][ C0] [ 424.935585][ C0] default_idle+0x13/0x20 [ 424.935603][ C0] default_idle_call+0x6c/0xb0 [ 424.935617][ C0] do_idle+0x38d/0x500 [ 424.935636][ C0] ? __pfx_do_idle+0x10/0x10 [ 424.935651][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 424.935668][ C0] cpu_startup_entry+0x4f/0x60 [ 424.935683][ C0] rest_init+0x16b/0x2b0 [ 424.935699][ C0] ? acpi_subsystem_init+0x133/0x180 [ 424.935717][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 424.935737][ C0] start_kernel+0x3f6/0x4e0 [ 424.935762][ C0] x86_64_start_reservations+0x18/0x30 [ 424.935780][ C0] x86_64_start_kernel+0x130/0x190 [ 424.935798][ C0] common_startup_64+0x13e/0x148 [ 424.935819][ C0]