last executing test programs: 1m22.819211049s ago: executing program 3 (id=277): fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000600), &(0x7f0000000000)=0x8) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0xe5) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0x0, &(0x7f0000000000)={0x1, 0x55c}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x0, 0x8) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113900000000008510000002000000850000000500000008d408d4000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x10500, 0xc) 1m20.472390492s ago: executing program 3 (id=285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)='\n', 0x1}], 0x1}}], 0x2, 0x40000) shutdown(r0, 0x1) iopl(0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000}) finit_module(0xffffffffffffffff, 0x0, 0x0) 1m20.332110038s ago: executing program 3 (id=287): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffef7, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000340)='cpu.stat\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) socket$inet6(0xa, 0x3, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) (async) sendmsg$nl_generic(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$fou(0x0, r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) gettid() (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @void, @value}, 0x28) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) (async) accept$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f, @void, @value}, 0x94) (async) getpid() sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) 1m19.510875613s ago: executing program 3 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0xbc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 1m18.356859655s ago: executing program 3 (id=293): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x20006, 0x0, 0x101, 0x0, 0xfff, 0x4007}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) io_submit(r2, 0x0, &(0x7f0000004540)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r5, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="b9d20800000f32c7442400934c0000c744240200100000c7442406000000000f011c2467470f01cab8ae7c30ddba000000000f30660f38814f7c66b829008ee866ba420066b8d40066ef0fc77200c423355e9a5a68000009410f01c9", 0x5c}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000b18bffff0000000000000000000000000000000010000000"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000000)=0xffff0011, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1m14.280303941s ago: executing program 3 (id=305): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='fsi_master_gpio_cmd_abs_addr\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_pgetevents(r3, 0x1, 0x1, &(0x7f0000000380)=[{}], 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x6}]) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102400, &(0x7f0000000000)=0x19000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) setresuid(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={0x0, 0x2, r0, 0x200, 0x80000}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000007ad553f6403d2944322ae22c8a0d0c000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000002b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f00000001c0)={0xa, {0x4, 0x3, 0xe124, 0xfffffffd}}) 59.164334081s ago: executing program 32 (id=305): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='fsi_master_gpio_cmd_abs_addr\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_pgetevents(r3, 0x1, 0x1, &(0x7f0000000380)=[{}], 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x6}]) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102400, &(0x7f0000000000)=0x19000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) setresuid(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={0x0, 0x2, r0, 0x200, 0x80000}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000007ad553f6403d2944322ae22c8a0d0c000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000002b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f00000001c0)={0xa, {0x4, 0x3, 0xe124, 0xfffffffd}}) 20.227954124s ago: executing program 2 (id=387): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000f30000000000000000000000000000000000cf06c97ce9eaccda4551a45f24ae0af3c99dcd7b91260e0684f8a7306facd3f151c169b3a3b8f1f7e69e"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40007fffffff) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r4, 0x4b000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fstat(r2, &(0x7f0000000380)) ioperm(0x0, 0x20, 0x10001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) 19.975847948s ago: executing program 4 (id=389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x1, 0xfffffffc}, 0x14}, 0x1, 0xa00}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/schedstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/231, 0xe7}], 0x1, 0x2000000, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8080) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002b4000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030105d0000904000000010100000a240100000002010207240600fe00000c24020204020608000010000c24020000000302feff00000c240204ff011005080007020924030303030308000904010000010200000904010101010200000905010900004000000725010000800009040200000102000009040205820940000000000725010002000000000000000000"], 0x0) syz_usb_connect(0x6, 0x86d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xa, 0xd, 0x2f, 0x10, 0xe8d, 0x7103, 0xfbc1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85b, 0x3, 0x2c, 0xf, 0x0, 0xe0, [{{0x9, 0x4, 0xbf, 0x10, 0xe, 0xff, 0x0, 0x0, 0x80, [@generic={0xef, 0x30, "e9715f8c9f40d56a38bff84846741d0b81a1c575f4f8d34977537fe5ec236dea8f6166da41ed22e84e3bc88e761cbebaef80dd104fa5a2b2cff45efcf9f5e61b840e86036d9f01142344eab7e5757e9aa72987dde4fa36ed9de5cc854b6bde4706e69e32d7755d0743c8673c24888b639312144750bb8737bf7292a0472c7213ab2e0165a8ea1f598183456ea4865c7d1001a058c952d5b2baba1826842ced99e3edd3d2a822c566956b82040fbfe36152433e5bf233c3bffd644ae22e280722d3d80984f20b8e78881dbb862512447989cc3e14e2d1a2936450d0083f72e330d7aa3ebd266ea7050732c46b27"}, @generic={0xb4, 0x10, "245bc707a77a46f7973e82a1a428d753efd38a8054cd5ee3805fa1f9675fc2c8b5a01cf5eef192d2331ea0e1306025dba2df9ceefbbdf8b502a4907d83aae5d91925e12f33bdd3e5f2a27343529fa855bee526e79ddeac2a16982a9ad19baf368878209c431e643b1e2f48430996f20be14eb290d1b4f109ac2d1faab7a4b5b353e246104e4747a9bbbc4665595bdeeab950c26ddcb139af50affbc01b1e1c359627d4cbd7ea292c075fdd88064619c22d3b"}], [{{0x9, 0x5, 0x4, 0x4, 0x1e7, 0x8, 0x0, 0x5, [@generic={0x13, 0x5, "c78dae4043d91b4828f5fadad129f13278"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x10, 0x74, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x5, 0x6, 0xd}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x8, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x60, 0x8}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x2, 0x2, 0x80}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xe, 0x6, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x140, 0x1, 0xf324}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x54, 0x1, 0xff}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xfb, 0x1, 0xa}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x2, 0x3, 0x9}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x8, 0x7, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x4, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xffff}, @generic={0xc9, 0x4, "91b520731a3746ff7039d1d3559b9a4d4a6c7f27180c1803a7fb85179e50c06972bec78b353ae01962363dcc11186361fc7d08d0c769b987d8a06a19304eb6c157f79f4cafbbf3fe81774eba931890db7975912b282e5b37bd721cba83a397867a62a76ada91929a33f65eb3893be923b14409e7f2c2377ff114a58de07d3e79197c5cff5b1d8be4561483d6a40d5d71d87f87624fc76e2950d340c306d531d2ad262d11173f8d2504dae0e710c6d9b293c30abd026de4485c0063dfe56307e637dd1b9af52417"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x8, 0x8, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x4, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2}]}}]}}, {{0x9, 0x4, 0xf, 0x5, 0x7, 0xff, 0x0, 0xff, 0x0, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "db24be686f"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0xfc, 0x0, 0xe}, [@dmm={0x7, 0x24, 0x14, 0xe, 0x1}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0x2, 0x7}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0xe3, 0x0, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}]}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x3, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x2}, @generic={0x69, 0x2a, "fd47c305587a1b3955530926709659ca7a052e209f8c102fbe23c23616b9d1146567ced8c7ad7d3682694bd1035faa0bea50ac29d2aa7fdc27379dba0ccc2439e1c34179974f7dc14bb08363a5bb4b4b9772182886e5d0660e66772327a933ed5cf1182ccd98a3"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x30, 0x3}]}}, {{0x9, 0x5, 0xf8970524b5eb0925, 0x4, 0x10, 0x24, 0x5, 0x5, [@generic={0xe9, 0x4, "9e6b6915d6e49d070eefa56de2086297bdd17435e300c2f7b32922cf71d81396ece508e1c61b4b1da1aa25f5884ff0c7c8d66d41b4be4c2c249834a837d0bdc4d978e85470250b5f2d63998398f376cb82d895e382f2e024d325f97e66337ccb329a815803e0a7192d71035ae62a359edb939412dcf836bea5d4e4102cfa1749838a0a7b7714a7b568d9721206503442eb0a658c219d68c0523ce2ce5d6d1d248b2696acd34970d528ce455f12807a4b1a0945389518bfd547ba318b7224477568b854ba9bfa844c01603075d1e3a9f7c42589eb71878f7d426ae09d4dda2d7827be4574c37aa9"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x7, 0x5, 0x0, [@generic={0xb5, 0x3, "863da8d4a2144c661130d084bd48741b21e61a7384059e65f8669dbd240d2d431b76c8b008d4bfc313c9155684efe8743a7337a93ddaa93f11faf582ec1ee9a289122664e9a438be016c48996e220f6e4234b239834020d89d4c507f91fdcc41336e66e60741676b4e42431c5f8a01f7cb83ef47d5d69850a1743924180e56cb93aebb8df8dffd2f7f773a650715413b4979a67278954c06432d13ebdb57eee5eb22b0386fdd405bf2662d243d1592f839ef5b"}, @generic={0xa5, 0xb, "6f9dad8a031f51c0d02f62e096b895c1714183e378edca9b7828aa22ea2f0fc541064a442ae2939c2842eaea62e654600f1403b3cc27dffc8292ea606220fc39b113c1950ef314fa4bc272de99af8bad7dae31eaf2a84e523d452fe2161380943021fd5250409b89b90b3091737b93abb6b5a5db58cb1bf4d40c7cd606cd701a55848efd419cbe72d514a7f08024af010471918cccaaecaae4365eda1cbec463fbc290"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x1, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}, @generic={0x1e, 0x6, "bf0a793e658dc280225f9b0d8b0094a86fc644d90df9ed4fe7ea4641"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x0, 0x9, 0x4}}]}}, {{0x9, 0x4, 0x1b, 0xf8, 0x4, 0xcd, 0x93, 0x82, 0x3c, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x3}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x2, 0xa8, 0x0, 0xf9, 0x1d}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xd, 0x7}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x3, 0xff, 0xb, "b6963c", "4fe0d8"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd3e7, 0x1, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0xab, "61c84fa4bcf11a4d91"}]}], [{{0x9, 0x5, 0x80, 0x1d, 0x3ff, 0x7, 0x6, 0xfb, [@generic={0xf1, 0xe, "3aad856a89e8a0f6d341b73ae66152848f383e0c7ac389e31b311a4d2b8e1f4ac7ab7e3ed25cf6a72e9aaa4c5d48cf115416373af55e6ec50dedc8f191edaf7c14a9739b430d65bbe8993888dab5430aea22f931ed0810291570c94cb19e5286cb8c2513aebdce1e7e1db64cf1b6ab0ef11b16be375f327327d29127d58c9120812a957fa90d2e18ac0d4626ee9a19ede7159c638e840f67f2ffa503b79dad1ca6bdfe7f251794a881179ec85e97a753bd841cdf7874b464244652c8f9c22785a8089ad172a9f246358218f4f865da445761581a952be989424a0cdcbba74174e734d9cbc1579920fce1dfac0f4fc2"}, @generic={0x35, 0x0, "1b2fe667134650c71fabaccd9475f160c680b83334d7e5ef42c811c1db18b7c002b394c1c2eecf8491d7bea2d55e14b25be17c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x4, 0x7, 0x8f}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x57, 0x7f}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0xb, 0x3, [@generic={0x1d, 0x31, "ba9e1df45530cae1d504c141ee5bda2e28748fc2ea4b086e996cdb"}]}}]}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r9, &(0x7f0000000180)='./mnt\x00', r9, &(0x7f0000000100)='./mnt\x00', 0x63) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x8, 0x126, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 19.24452511s ago: executing program 2 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110feff0000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001640)=ANY=[@ANYBLOB="4800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000036004002000128009000100766c526e000000001000028004000480060001000200000008000500", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) chroot(0x0) socket(0xb, 0x3, 0x0) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000500)='rxrpc_s\x00', &(0x7f0000000540)=@chain={'key_or_keyring:', r5}) keyctl$search(0xa, r5, &(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, r8) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/102, 0x66}, {&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000140)=""/73, 0x49}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000300)=""/148, 0x94}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000440)=""/23, 0x17}], 0x8) 17.255215109s ago: executing program 2 (id=393): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x5, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0xc0, 0x3a, 0x4d, 0x20, 0x1604, 0x8005, 0xb21d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x8c, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x98, 0x0, 0xa7, 0xa6, 0xae, 0x4}}, {{0x9, 0x4, 0x9f, 0x6, 0x0, 0xff, 0xff, 0xff, 0x5}}, {{0x9, 0x4, 0x9c, 0x3, 0x0, 0xff, 0xff, 0xff, 0xfb}}]}}]}}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, &(0x7f0000000000)) clock_getres(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYRES64], 0x0) 16.991503104s ago: executing program 0 (id=398): socket$inet_dccp(0x2, 0x6, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040)=0xfffffffd, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) creat(&(0x7f0000000000)='./file0\x00', 0xc2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x8000000, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 16.404134362s ago: executing program 5 (id=400): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}], [{@fowner_lt={'fowner<', r0}}]}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 16.248865237s ago: executing program 5 (id=401): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20003, 0x23) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x10000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000001040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000480)=@keyring) r5 = syz_open_procfs(0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) fstat(r5, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) 5.428955753s ago: executing program 4 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS}}, 0x7) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x4}, 0x1c) listen(r3, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r4, 0x10d, 0x8c, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) syz_open_dev$usbfs(&(0x7f0000000180), 0x3, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303, 0x39}, "5e31ace241a730cb", "27a06f8e96f45af1f5dd00000046380f", "5d6937cd", "7cf66a4d5a20ed4d"}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/148, 0xfffffffffffffc01}) 5.428459174s ago: executing program 0 (id=404): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x18\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt\v\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\bD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\x1c\x94\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddWW\x12r\x81W\"\xd3\x9e&c\nx\xb3\x14.\xaa\x0f\xd1\x89\xd4\xa4\xdb\xef6\xae\xc2\xfe\v\xe3\x1e\xc5\xe0\xbfO!\xffG\xf4\xef\x85\xa7\x11=>3\x82f:u:C\xbcK\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) poll(&(0x7f0000000000)=[{r5, 0xa0}, {r5, 0x82}, {0xffffffffffffffff, 0x182}, {r4, 0x4000}], 0x4, 0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080), 0x8) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) 5.367054534s ago: executing program 5 (id=407): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000"], 0x58}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x68060200) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18f081b32f78df9f3d40638e0000000000000000950000000000000000000010000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x18002, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000005400)={'broute\x00', 0x0, 0x0, 0x0, [0x5], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 5.256805203s ago: executing program 0 (id=408): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_virt_wifi\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) syz_emit_ethernet(0x106, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e400ff00033a01fc0200000000000000000000000000fffe8000000000000000000000000000280006040301400080ff01008e967b04000000000000000001fc020000000000000000000000000001fe80000000000000000000000000001f2c0a018000000000fc010000000000000000000000000000fe880000000000000000000000000001ff0200000000000000000000000000012001000000000081ce9aa6d2cb5bf1e400000000000000000100000000000000000000000000000000010000000000000000010000000000000200907800000000608e760000002b00"/262], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 5.177157748s ago: executing program 0 (id=409): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x8, 0x4) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12, @ANYBLOB="03"], 0xe6da) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000001400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x55, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, r6, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x4, 0x1}]}, 0x3c}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x7, 0x6, {{0x13, 0x4, 0x0, 0x3b, 0x4c, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@timestamp_addr={0x44, 0x34, 0xa4, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x39}, 0xfffffff7}, {@multicast2, 0x2}, {@remote, 0x4}, {@remote, 0x2}, {@multicast2, 0x10}, {@broadcast}]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xa0, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x8000, 0x1, 0x46c, 0x8, {{0x20, 0x4, 0x0, 0x2f, 0x80, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x5f, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x9c, 0x1, 0x0, [{@multicast1, 0x5}, {@remote, 0x6}]}, @cipso={0x86, 0x3c, 0x3, [{0x6, 0x2}, {0x1, 0x9, "bd28ec16b2416e"}, {0x5, 0x3, "f1"}, {0x7, 0x3, "0f"}, {0x0, 0x12, "842eeaf17ecf21d0efcec7a2f173f1a8"}, {0x0, 0x10, "0cfcb637ed98f66a4e36ff72369d"}, {0x2, 0x3, "b7"}]}, @generic={0x82, 0x10, "8d19635415d2e29f72a9b3ff3851"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r2, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x7, 0x8, 0xed, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8000, 0x7800, 0x10, 0x401}}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r13 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r13, 0xc0184800, &(0x7f0000000100)={0x4004, r12}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r14, 0x2000) r15 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r15, &(0x7f0000002280)=""/4150, 0x1036) openat$vnet(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) r16 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114102000000008510000002000000b7000000000000009500c200000000ff9500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r18, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xe}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000cc0)={0x174, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4010}, 0xc811) 4.348102217s ago: executing program 0 (id=410): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x20006, 0x0, 0x101, 0x0, 0xfff, 0x4007}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) io_submit(r2, 0x0, &(0x7f0000004540)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r5, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="b9d20800000f32c7442400934c0000c744240200100000c7442406000000000f011c2467470f01cab8ae7c30ddba000000000f30660f38814f7c66b829008ee866ba420066b8d40066ef0fc77200c423355e9a5a68000009410f01c9", 0x5c}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000b18bffff0000000000000000000000000000000010000000"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x4004) 4.34084838s ago: executing program 2 (id=411): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x20006, 0x0, 0x101, 0x0, 0xfff, 0x4007}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) io_submit(r2, 0x0, &(0x7f0000004540)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r5, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="b9d20800000f32c7442400934c0000c744240200100000c7442406000000000f011c2467470f01cab8ae7c30ddba000000000f30660f38814f7c66b829008ee866ba420066b8d40066ef0fc77200c423355e9a5a68000009410f01c9", 0x5c}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000b18bffff0000000000000000000000000000000010000000"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x4004) 4.310091243s ago: executing program 1 (id=412): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000030000001974000000000095fffffff6000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0xc02, 0x0) r2 = dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r3 = io_uring_setup(0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x0, 0x7, 0x7}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000100)={0x2}) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="3edce672338688a10100010000000080", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000003ac0)=0x8000000, 0x4) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000180)={0x0, @broadcast, 0x4e20, 0x0, 'dh\x00', 0x20, 0x0, 0x59}, 0x2c) (async) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000406030000bed88b29000000000029c1d1b762f9c4864afc3ab0264722a27b16a59d30a85a2ebca11a9a9e"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.203735056s ago: executing program 1 (id=413): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) setxattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=@random={'security.', '\x00'}, 0x0, 0x0, 0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f0000000240)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, r2, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x3, 0x1ff, {0x0}, {0xffffffffffffffff}, 0x8, 0x8000}) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x4, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x3c}}, 0x4000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) preadv(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/88, 0x58}], 0x1, 0x7, 0x7ff) 3.680659903s ago: executing program 5 (id=414): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0xb000000) 3.262757555s ago: executing program 5 (id=415): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040300f1101000000000001090224000100000000090400000103c59a0009210000000122070009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x200000000000031a, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x19) write$binfmt_script(r9, 0x0, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.210279048s ago: executing program 1 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x5000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0xa4}}, 0x0) 3.076153618s ago: executing program 1 (id=417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x1, 0x8dffffffffffffff, 0x0, 0x48d5}, 0x4c800) 3.070722425s ago: executing program 1 (id=418): socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000280)={0x6, 0xfffffff8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001000000000904000000241fff2803da67bc36ef47704189e2e4d500"], 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x18040814}, 0x20040040) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000040)={0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="220033001d"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 2.626962432s ago: executing program 4 (id=419): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_virt_wifi\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) syz_emit_ethernet(0x106, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e400ff00033a01fc0200000000000000000000000000fffe8000000000000000000000000000280006040301400080ff01008e967b04000000000000000001fc020000000000000000000000000001fe80000000000000000000000000001f2c0a018000000000fc010000000000000000000000000000fe880000000000000000000000000001ff0200000000000000000000000000012001000000000081ce9aa6d2cb5bf1e400000000000000000100000000000000000000000000000000010000000000000000010000000000000200907800000000608e760000002b00"/262], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 2.594946608s ago: executing program 4 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="01000100000000000037f0ec0d0318d4cb24e4745f950e43000c00000018000180140000000000001400038008000200000000030000000004000400"], 0x40}}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000300), 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/249, 0xf9}], 0x5}, 0x2}, {{}, 0x4}], 0x2, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000000000a01030000000000000000010000000900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000f50054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018007000100637400001c00028005000300000000000800014000000017080002400000000c140000001100010000000000000000000000000af49141c22b032c9afe811fc6697be9453ac87b71d3c02375618c1f2135554fbf49597b8af4e90773031dc85ed3a706322b4150294cccfe5de75bef1edca764731234de813abd7042f10371bf9d6e303f04347d76837e2d741a047848ba7a319ec4a7b9396c12857511e94701540fb17c94c05b7d150ccec01106da66b91fa3"], 0xc8}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c454cd494679e800", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) (async) recvmmsg(r5, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x0, 0x0) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) (async) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x97745a4c453bf437) (async) socket$alg(0x26, 0x5, 0x0) 2.341309899s ago: executing program 0 (id=421): socket$netlink(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$random(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) fallocate(r8, 0x10, 0x0, 0x3) 1.619810575s ago: executing program 4 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.568570607s ago: executing program 4 (id=423): r0 = socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f0000000ac0)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000006340)="d9", 0x1}], 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008501000000000000b70000000000000095000000000008000000000000000000800f85f39b91a3fd40258d00002e925f9b33f0494483b836a5f945d758"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) connect$inet(r0, 0x0, 0x0) 629.855857ms ago: executing program 1 (id=424): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000"], 0x58}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x68060200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18f081b32f78df9f3d40638e0000000000000000950000000000000000000010000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x18002, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000005400)={'broute\x00', 0x0, 0x0, 0x0, [0x5], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 617.177609ms ago: executing program 2 (id=425): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) io_uring_setup(0x291c, &(0x7f0000000140)={0x0, 0x0, 0x2}) 0s ago: executing program 5 (id=426): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0x33, 0x7, '\x00', &(0x7f0000000140)=0x4}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf03, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x8d010000}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff48"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0xda, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x2, 0x1, 0xab, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "0ece2f10"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xb79e, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x3252, 0x9}, [@mdlm_detail={0x17, 0x24, 0x13, 0xf, "f723e877dfaac18c10b689fac2b62f2823425c"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm_detail={0x3c, 0x24, 0x13, 0xa, "922484fd098c6fcb3bedd0c4bb2a806ce35d9565e870261804b270437bdf4815a32682db83b003d84a4a15b6eb3063b919a31caa567a82ab"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x49, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0xb, 0xff, 0x1, 0x10, 0x7}, 0x23, &(0x7f0000000180)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "fc0262c460276556338c78ad8b2fd0dc"}]}, 0x7, [{0x7, &(0x7f0000000280)=@string={0x7, 0x3, "f008fe22e6"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x8c9f}}, {0x5b, &(0x7f0000000300)=@string={0x5b, 0x3, "abf3f8532e303ae271211ccd4cd3b24e21331279e57f94670eb7cd05631bff6e93ef80069f5f4578d5d229581b0cf6fa3d4e3e839129c45d6fabb99af44a28faf6d13fd8353ff8c018ad8088327ed62f4a567663eebf0048ba"}}, {0x38, &(0x7f0000000380)=ANY=[@ANYBLOB="3803ebb8f6541674d623ca9939c480bcb3648324d2016770098c5c3e80c33dd2783b9c678c5fc4ff11161af27f800cde91e4faee051252d4"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x410}}]}) kernel console output (not intermixed with test programs): Manufacturer: syz [ 69.375343][ T5842] usb 4-1: SerialNumber: syz [ 69.394956][ T5842] usb 4-1: config 0 descriptor?? [ 69.425847][ T5842] s2255 4-1:0.142: Could not find bulk-in endpoint [ 69.444291][ T5842] Sensoray 2255 driver load failed: 0xfffffff4 [ 69.469195][ T5842] s2255 4-1:0.142: probe with driver s2255 failed with error -12 [ 69.493481][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'. [ 69.522613][ T6058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=6058 comm=syz.4.31 [ 70.065505][ T968] usb 4-1: USB disconnect, device number 2 [ 70.265078][ T965] usbhid 3-1:0.0: can't add hid device: -71 [ 70.272562][ T965] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 70.389083][ T965] usb 3-1: USB disconnect, device number 2 [ 70.644785][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 70.644798][ T29] audit: type=1400 audit(1732364897.393:219): avc: denied { connect } for pid=6072 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.674526][ T29] audit: type=1400 audit(1732364897.423:220): avc: denied { write } for pid=6072 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.760090][ T29] audit: type=1400 audit(1732364897.503:221): avc: denied { read } for pid=6078 comm="syz.2.38" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.909727][ T5136] usbhid 2-1:0.0: can't add hid device: -71 [ 70.915706][ T5136] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 70.942071][ T29] audit: type=1400 audit(1732364897.503:222): avc: denied { open } for pid=6078 comm="syz.2.38" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.547333][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.783479][ T5136] usb 2-1: USB disconnect, device number 2 [ 71.823050][ T6089] Bluetooth: MGMT ver 1.23 [ 71.828769][ T29] audit: type=1400 audit(1732364898.543:223): avc: denied { ioctl } for pid=6078 comm="syz.2.38" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.868397][ T29] audit: type=1400 audit(1732364898.613:224): avc: denied { write } for pid=6090 comm="syz.1.40" name="event3" dev="devtmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.909424][ T29] audit: type=1400 audit(1732364898.613:225): avc: denied { open } for pid=6090 comm="syz.1.40" path="/dev/input/event3" dev="devtmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.941274][ T29] audit: type=1400 audit(1732364898.613:226): avc: denied { read } for pid=6090 comm="syz.1.40" name="mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.964655][ T29] audit: type=1400 audit(1732364898.613:227): avc: denied { open } for pid=6090 comm="syz.1.40" path="/dev/input/mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.989148][ T6091] wireguard0: entered promiscuous mode [ 71.996690][ T6091] wireguard0: entered allmulticast mode [ 72.313195][ T29] audit: type=1400 audit(1732364899.063:228): avc: denied { mounton } for pid=6097 comm="syz.1.41" path="/proc/43/task" dev="proc" ino=8139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 74.031730][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.493426][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 74.526609][ T9] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 74.606621][ T9] usb 4-1: config 0 has no interface number 0 [ 74.630060][ T9] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.689432][ T9] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 74.708282][ T9] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 74.719805][ T9] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 74.730480][ T9] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 74.741065][ T9] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.839918][ T9] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 74.849064][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.864930][ T9] usb 4-1: Product: syz [ 74.869268][ T9] usb 4-1: Manufacturer: syz [ 74.874400][ T6127] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 74.900567][ T9] usb 4-1: SerialNumber: syz [ 74.926585][ T9] usb 4-1: config 0 descriptor?? [ 74.941658][ T6118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.948963][ T6118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.164855][ T9] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 75.180103][ T6054] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.340128][ T6054] usb 3-1: Using ep0 maxpacket: 16 [ 75.382924][ T6054] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 75.401480][ T6054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.417049][ T6054] usb 3-1: Product: syz [ 75.697320][ T965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.698488][ T6054] usb 3-1: Manufacturer: syz [ 75.709838][ T9] etas_es58x 4-1:0.219: could not retrieve the product info string [ 75.723395][ T6054] usb 3-1: SerialNumber: syz [ 75.750433][ T9] usb 4-1: USB disconnect, device number 3 [ 75.757327][ T9] etas_es58x 4-1:0.219: Disconnecting syz syz [ 75.766355][ T6054] r8152-cfgselector 3-1: Unknown version 0x0000 [ 75.773821][ T6054] r8152-cfgselector 3-1: config 0 descriptor?? [ 75.930138][ T965] usb 2-1: Using ep0 maxpacket: 8 [ 75.939902][ T965] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 75.949132][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.958373][ T965] usb 2-1: Product: syz [ 75.962706][ T965] usb 2-1: Manufacturer: syz [ 75.972802][ T965] usb 2-1: SerialNumber: syz [ 75.985734][ T965] usb 2-1: config 0 descriptor?? [ 76.633503][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 76.633518][ T29] audit: type=1400 audit(1732364902.843:237): avc: denied { read } for pid=6145 comm="syz.0.54" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.678692][ T29] audit: type=1400 audit(1732364902.843:238): avc: denied { open } for pid=6145 comm="syz.0.54" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.732858][ T29] audit: type=1400 audit(1732364902.903:239): avc: denied { ioctl } for pid=6145 comm="syz.0.54" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.763131][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.839645][ T46] cfg80211: failed to load regulatory.db [ 76.865070][ T29] audit: type=1400 audit(1732364902.943:240): avc: denied { write } for pid=6128 comm="syz.2.51" path="socket:[8163]" dev="sockfs" ino=8163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.877385][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.908589][ T5136] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 76.924483][ T6159] usb usb8: usbfs: process 6159 (syz.3.55) did not claim interface 0 before use [ 77.128825][ T965] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 77.173154][ T965] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 77.249136][ T965] usb 2-1: USB disconnect, device number 3 [ 77.271297][ T6165] Zero length message leads to an empty skb [ 77.280514][ T6165] x_tables: duplicate underflow at hook 2 [ 77.909492][ T29] audit: type=1400 audit(1732364904.653:241): avc: denied { read write } for pid=6168 comm="syz.3.58" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.954554][ T29] audit: type=1400 audit(1732364904.703:242): avc: denied { open } for pid=6168 comm="syz.3.58" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.600102][ T29] audit: type=1400 audit(1732364905.333:243): avc: denied { write } for pid=6170 comm="syz.0.60" path="socket:[9227]" dev="sockfs" ino=9227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.324523][ T29] audit: type=1400 audit(1732364905.593:244): avc: denied { create } for pid=6179 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.360071][ T29] audit: type=1400 audit(1732364905.593:245): avc: denied { bind } for pid=6179 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.385823][ T29] audit: type=1400 audit(1732364905.593:246): avc: denied { setopt } for pid=6179 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.563359][ T6185] bridge0: port 3(vlan0) entered blocking state [ 79.625595][ T6192] netlink: 168 bytes leftover after parsing attributes in process `syz.0.64'. [ 79.740674][ T6185] bridge0: port 3(vlan0) entered disabled state [ 79.773794][ T6185] vlan0: entered allmulticast mode [ 79.799538][ T6185] veth0_vlan: entered allmulticast mode [ 79.899516][ T6185] vlan0: entered promiscuous mode [ 79.989541][ T6185] bridge0: port 3(vlan0) entered blocking state [ 79.996079][ T6185] bridge0: port 3(vlan0) entered forwarding state [ 80.324493][ T6202] netlink: 76 bytes leftover after parsing attributes in process `syz.3.66'. [ 82.331358][ T6225] process 'syz.4.72' launched '/dev/fd/5' with NULL argv: empty string added [ 82.362391][ T6225] warning: `syz.4.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.386997][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 82.387029][ T29] audit: type=1400 audit(1732364909.073:251): avc: denied { read write } for pid=6221 comm="syz.4.72" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.716396][ T29] audit: type=1400 audit(1732364909.073:252): avc: denied { ioctl open } for pid=6221 comm="syz.4.72" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.520081][ T29] audit: type=1400 audit(1732364909.093:253): avc: denied { execute_no_trans } for pid=6221 comm="syz.4.72" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.880043][ T968] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.993749][ T5156] Bluetooth: hci5: sending frame failed (-49) [ 84.000046][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 84.100142][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.116354][ T6237] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 84.320160][ T29] audit: type=1400 audit(1732364911.073:254): avc: denied { accept } for pid=6244 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.363201][ T46] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.374582][ T968] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 84.383002][ T968] usb 3-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 84.386627][ T29] audit: type=1400 audit(1732364911.103:255): avc: denied { ioctl } for pid=6244 comm="syz.1.78" path="socket:[9386]" dev="sockfs" ino=9386 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.419165][ T968] usb 3-1: config 0 has no interface number 0 [ 84.437490][ T968] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 84.449733][ T46] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.450080][ T968] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 84.475255][ T46] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.484462][ T968] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 84.493642][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.503336][ T968] usb 3-1: config 0 descriptor?? [ 84.515988][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.522888][ T968] ttusbir 3-1:0.83: cannot find expected altsetting [ 84.587730][ T6235] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 84.598386][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.604524][ T29] audit: type=1400 audit(1732364912.343:256): avc: denied { create } for pid=6253 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 85.654853][ T6260] FAULT_INJECTION: forcing a failure. [ 85.654853][ T6260] name failslab, interval 1, probability 0, space 0, times 0 [ 85.668210][ T6248] syz.3.75 (6248) used greatest stack depth: 21264 bytes left [ 85.692364][ T46] usb 5-1: USB disconnect, device number 6 [ 85.710403][ T29] audit: type=1400 audit(1732364912.343:257): avc: denied { bind } for pid=6253 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 85.725922][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz.1.81 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 85.739558][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.749592][ T6260] Call Trace: [ 85.752857][ T6260] [ 85.755778][ T6260] dump_stack_lvl+0x16c/0x1f0 [ 85.760435][ T6260] should_fail_ex+0x497/0x5b0 [ 85.765092][ T6260] ? fs_reclaim_acquire+0xae/0x150 [ 85.770183][ T6260] should_failslab+0xc2/0x120 [ 85.774844][ T6260] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 85.780218][ T6260] ? vm_area_dup+0x53/0x2f0 [ 85.784717][ T6260] vm_area_dup+0x53/0x2f0 [ 85.789042][ T6260] copy_process+0x77ef/0x8cc0 [ 85.793721][ T6260] ? __pfx_copy_process+0x10/0x10 [ 85.798735][ T6260] ? get_pid_task+0xfc/0x250 [ 85.803307][ T6260] ? trace_lock_acquire+0x146/0x1e0 [ 85.808502][ T6260] ? find_held_lock+0x2d/0x110 [ 85.813251][ T6260] kernel_clone+0xfd/0x960 [ 85.817648][ T6260] ? __pfx_kernel_clone+0x10/0x10 [ 85.822655][ T6260] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.828615][ T6260] __do_sys_clone+0xba/0x100 [ 85.833200][ T6260] ? __pfx___do_sys_clone+0x10/0x10 [ 85.838384][ T6260] do_syscall_64+0xcd/0x250 [ 85.842865][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.848732][ T6260] RIP: 0033:0x7f277497e819 [ 85.853122][ T6260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.872706][ T6260] RSP: 002b:00007f2775734fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 85.881103][ T6260] RAX: ffffffffffffffda RBX: 00007f2774b35fa0 RCX: 00007f277497e819 [ 85.889065][ T6260] RDX: 0000000000000000 RSI: fffffffffffffe60 RDI: 000000000004a000 [ 85.897031][ T6260] RBP: 00007f2775735090 R08: 0000000000000000 R09: 0000000000000000 [ 85.904979][ T6260] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 85.912929][ T6260] R13: 0000000000000000 R14: 00007f2774b35fa0 R15: 00007ffed8690b18 [ 85.920883][ T6260] [ 85.966828][ T29] audit: type=1400 audit(1732364912.343:258): avc: denied { listen } for pid=6253 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 86.022550][ T968] usb 3-1: USB disconnect, device number 4 [ 86.082288][ T29] audit: type=1400 audit(1732364912.343:259): avc: denied { read } for pid=6253 comm="syz.0.79" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.550129][ T29] audit: type=1400 audit(1732364912.343:260): avc: denied { open } for pid=6253 comm="syz.0.79" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.778003][ T6296] trusted_key: syz.4.87 sent an empty control message without MSG_MORE. [ 88.442024][ T6308] FAULT_INJECTION: forcing a failure. [ 88.442024][ T6308] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.632351][ T6308] CPU: 0 UID: 0 PID: 6308 Comm: syz.3.93 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 88.642544][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.652604][ T6308] Call Trace: [ 88.655880][ T6308] [ 88.658806][ T6308] dump_stack_lvl+0x16c/0x1f0 [ 88.663489][ T6308] should_fail_ex+0x497/0x5b0 [ 88.668181][ T6308] _copy_from_user+0x2e/0xd0 [ 88.672773][ T6308] snd_pcm_oss_write2+0x1c6/0x3f0 [ 88.677801][ T6308] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 88.683348][ T6308] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 88.688727][ T6308] ? snd_pcm_oss_prepare+0x11e/0x220 [ 88.694019][ T6308] snd_pcm_oss_write+0x727/0xa00 [ 88.698980][ T6308] ? rw_verify_area+0xd0/0x700 [ 88.700555][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 88.700566][ T29] audit: type=1400 audit(1732364915.443:270): avc: denied { mount } for pid=6312 comm="syz.4.95" name="/" dev="autofs" ino=9559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 88.703764][ T6308] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 88.737193][ T6308] vfs_write+0x24c/0x1150 [ 88.741536][ T6308] ? __fget_files+0x1fc/0x3a0 [ 88.746218][ T6308] ? __pfx_lock_release+0x10/0x10 [ 88.751246][ T6308] ? __pfx_vfs_write+0x10/0x10 [ 88.756024][ T6308] ? lock_acquire+0x2f/0xb0 [ 88.760533][ T6308] ? __fget_files+0x40/0x3a0 [ 88.765162][ T6308] ? __fget_files+0x206/0x3a0 [ 88.769850][ T6308] ksys_write+0x12b/0x250 [ 88.774187][ T6308] ? __pfx_ksys_write+0x10/0x10 [ 88.779051][ T6308] do_syscall_64+0xcd/0x250 [ 88.783574][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.789486][ T6308] RIP: 0033:0x7f2181b7e819 [ 88.793908][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.811265][ T29] audit: type=1400 audit(1732364915.543:271): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.813502][ T6308] RSP: 002b:00007f217f9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.841691][ T6308] RAX: ffffffffffffffda RBX: 00007f2181d35fa0 RCX: 00007f2181b7e819 [ 88.849642][ T6308] RDX: 0000000000004000 RSI: 00000000200012c0 RDI: 0000000000000003 [ 88.857592][ T6308] RBP: 00007f217f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.865539][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.873484][ T6308] R13: 0000000000000000 R14: 00007f2181d35fa0 R15: 00007ffff5899ef8 [ 88.881437][ T6308] [ 89.753623][ T29] audit: type=1400 audit(1732364915.833:272): avc: denied { create } for pid=6306 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 89.812305][ T29] audit: type=1400 audit(1732364915.833:273): avc: denied { mounton } for pid=6309 comm="syz.0.94" path="/26/file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 89.863358][ T29] audit: type=1400 audit(1732364915.833:274): avc: denied { ioctl } for pid=6306 comm="syz.1.92" path="socket:[9568]" dev="sockfs" ino=9568 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 89.896270][ T29] audit: type=1400 audit(1732364916.643:275): avc: denied { read } for pid=6329 comm="syz.1.97" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.918979][ T29] audit: type=1400 audit(1732364916.643:276): avc: denied { open } for pid=6329 comm="syz.1.97" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.966938][ T29] audit: type=1400 audit(1732364916.713:277): avc: denied { mount } for pid=6329 comm="syz.1.97" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 90.264107][ T29] audit: type=1326 audit(1732364917.013:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c8d7e819 code=0x7fc00000 [ 90.320178][ T5136] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.329331][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.490908][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 90.608582][ T46] usb 5-1: no configurations [ 90.613416][ T46] usb 5-1: can't read configurations, error -22 [ 90.621499][ T5136] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.631649][ T5136] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.636654][ T6348] fuse: Bad value for 'group_id' [ 90.647156][ T5136] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.650415][ T6348] fuse: Bad value for 'group_id' [ 90.656242][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.669369][ T5136] usb 4-1: SerialNumber: syz [ 90.675430][ T29] audit: type=1400 audit(1732364917.423:279): avc: denied { read } for pid=6347 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.770616][ T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 90.960151][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 90.967398][ T46] usb 5-1: no configurations [ 90.981256][ T46] usb 5-1: can't read configurations, error -22 [ 91.015665][ T46] usb usb5-port1: attempt power cycle [ 91.434964][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 91.516371][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 91.524752][ T46] usb 5-1: no configurations [ 91.529466][ T46] usb 5-1: can't read configurations, error -22 [ 91.603448][ T6373] dvmrp8: entered allmulticast mode [ 91.636053][ T6373] dvmrp8: left allmulticast mode [ 91.670133][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 91.795047][ T6328] tipc: Trying to set illegal importance in message [ 91.854507][ T5136] usb 4-1: 0:2 : does not exist [ 91.869049][ T5136] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 91.890168][ T46] usb 5-1: device not accepting address 10, error -71 [ 91.897264][ T46] usb usb5-port1: unable to enumerate USB device [ 91.945151][ T5136] usb 4-1: USB disconnect, device number 4 [ 92.152330][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.339645][ T6375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6375 comm=syz.0.110 [ 92.540123][ T968] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.712655][ T968] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.417229][ T968] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 93.427507][ T968] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.436543][ T968] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 93.448595][ T968] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 93.590464][ T968] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.599716][ T968] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.607777][ T968] usb 3-1: Product: syz [ 93.611992][ T968] usb 3-1: Manufacturer: syz [ 93.706541][ T968] cdc_wdm 3-1:1.0: skipping garbage [ 93.712252][ T968] cdc_wdm 3-1:1.0: skipping garbage [ 93.746686][ T968] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 93.768098][ T968] cdc_wdm 3-1:1.0: Unknown control protocol [ 94.582796][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.596078][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.720894][ T46] usb 3-1: USB disconnect, device number 5 [ 96.260890][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 96.260906][ T29] audit: type=1400 audit(1732364922.583:289): avc: denied { mount } for pid=6420 comm="syz.4.121" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.090041][ T29] audit: type=1400 audit(1732364923.833:290): avc: denied { ioctl } for pid=6411 comm="syz.1.119" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.253813][ T29] audit: type=1400 audit(1732364923.933:291): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.351562][ T29] audit: type=1400 audit(1732364924.083:292): avc: denied { mounton } for pid=6437 comm="syz.4.124" path="/13/file0" dev="ramfs" ino=10568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.519675][ T29] audit: type=1400 audit(1732364924.223:293): avc: denied { ioctl } for pid=6440 comm="syz.0.125" path="/dev/input/event3" dev="devtmpfs" ino=1028 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.727422][ T29] audit: type=1400 audit(1732364924.433:294): avc: denied { getopt } for pid=6449 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.774248][ T6416] hsr0: entered promiscuous mode [ 97.811269][ T5846] Bluetooth: hci1: unknown advertising packet type: 0xae [ 97.811314][ T5846] Bluetooth: hci1: Malformed LE Event: 0x02 [ 97.899832][ T29] audit: type=1400 audit(1732364924.553:295): avc: denied { read write } for pid=6452 comm="syz.4.129" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.196232][ T29] audit: type=1400 audit(1732364924.553:296): avc: denied { open } for pid=6452 comm="syz.4.129" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.234360][ T29] audit: type=1400 audit(1732364924.553:297): avc: denied { ioctl } for pid=6452 comm="syz.4.129" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.374069][ T29] audit: type=1400 audit(1732364926.123:298): avc: denied { getopt } for pid=6448 comm="syz.2.128" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.395095][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 99.404085][ T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.525622][ T6471] overlayfs: failed to resolve './file0': -2 [ 100.098446][ T6473] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 100.106550][ T6473] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 100.117272][ T6473] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 100.125430][ T6473] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 100.150145][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 100.166044][ T46] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 100.194898][ T46] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 100.240396][ T46] usb 1-1: config 8 has no interface number 0 [ 100.282351][ T46] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 100.470059][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.490355][ T46] usb 1-1: Product: syz [ 100.494503][ T46] usb 1-1: Manufacturer: syz [ 100.499082][ T46] usb 1-1: SerialNumber: syz [ 100.744729][ T6486] capability: warning: `syz.4.138' uses deprecated v2 capabilities in a way that may be insecure [ 100.894842][ T6491] Bluetooth: MGMT ver 1.23 [ 100.932896][ T46] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 100.960809][ T46] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 100.968529][ T46] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 101.040131][ T968] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 101.271758][ T968] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 101.287890][ T968] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 101.306783][ T968] usb 3-1: can't read configurations, error -61 [ 101.474306][ T46] usb 1-1: USB disconnect, device number 3 [ 101.480686][ T46] garmin_gps 1-1:8.206: device disconnected [ 101.538172][ T968] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 101.686219][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 101.686234][ T29] audit: type=1400 audit(1732364928.433:305): avc: denied { bind } for pid=6493 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.714509][ T29] audit: type=1400 audit(1732364928.463:306): avc: denied { setopt } for pid=6493 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.909062][ T968] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 101.917974][ T968] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 101.927472][ T968] usb 3-1: can't read configurations, error -61 [ 101.935979][ T968] usb usb3-port1: attempt power cycle [ 101.959842][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.415229][ T6507] sp0: Synchronizing with TNC [ 102.918469][ T29] audit: type=1400 audit(1732364929.183:307): avc: denied { create } for pid=6501 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 102.945133][ T29] audit: type=1400 audit(1732364929.273:308): avc: denied { sys_admin } for pid=6501 comm="syz.1.142" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 103.060095][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 103.066618][ T46] usb 1-1: config index 0 descriptor too short (expected 31381, got 149) [ 103.135825][ T46] usb 1-1: config 3 has too many interfaces: 248, using maximum allowed: 32 [ 103.146736][ T46] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 103.157657][ T46] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 248 [ 103.168826][ T46] usb 1-1: New USB device found, idVendor=12d1, idProduct=8b73, bcdDevice=75.f0 [ 103.177990][ T6350] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.239318][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.286988][ T29] audit: type=1400 audit(1732364930.033:309): avc: denied { mount } for pid=6513 comm="syz.4.145" name="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.310069][ T968] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 103.310586][ T29] audit: type=1400 audit(1732364930.033:310): avc: denied { read } for pid=6513 comm="syz.4.145" name="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.340724][ T29] audit: type=1400 audit(1732364930.033:311): avc: denied { open } for pid=6513 comm="syz.4.145" path="/20/file0" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.342560][ T968] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 103.363222][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.366974][ T29] audit: type=1400 audit(1732364930.033:312): avc: denied { append } for pid=6513 comm="syz.4.145" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.400576][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.407686][ T968] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 103.418556][ T29] audit: type=1400 audit(1732364930.123:313): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.425758][ T968] usb 3-1: can't read configurations, error -61 [ 103.445645][ T6350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.453534][ T29] audit: type=1326 audit(1732364930.153:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277497e819 code=0x7fc00000 [ 103.463303][ T6350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.494488][ T6350] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 103.504860][ T6350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.523893][ T6350] usb 4-1: config 0 descriptor?? [ 103.969498][ T968] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 104.389586][ T968] usb 3-1: device not accepting address 9, error -71 [ 104.457475][ T968] usb usb3-port1: unable to enumerate USB device [ 104.786230][ T46] usb 1-1: string descriptor 0 read error: -71 [ 104.808627][ T46] usb 1-1: USB disconnect, device number 4 [ 105.934867][ T6350] usbhid 4-1:0.0: can't add hid device: -71 [ 105.947812][ T6350] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 105.962077][ T6350] usb 4-1: USB disconnect, device number 5 [ 106.300971][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.467376][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 106.477217][ T46] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 106.709689][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 106.753291][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 106.799928][ T46] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 106.829664][ T46] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=24 [ 106.915279][ T46] usb 1-1: Product: syz [ 106.919489][ T46] usb 1-1: SerialNumber: syz [ 106.926594][ T46] usb 1-1: config 0 descriptor?? [ 106.933574][ T46] redrat3 1-1:0.0: Couldn't find all endpoints [ 106.967286][ T6569] usb usb8: usbfs: process 6569 (syz.3.160) did not claim interface 0 before use [ 107.139356][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.192225][ T5911] usb 1-1: USB disconnect, device number 5 [ 108.182935][ T5846] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 108.191530][ T5846] Bluetooth: hci3: Injecting HCI hardware error event [ 108.199627][ T5846] Bluetooth: hci3: hardware error 0x00 [ 108.376914][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 108.376929][ T29] audit: type=1400 audit(1732364935.103:339): avc: denied { write } for pid=6580 comm="syz.3.162" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.465380][ T29] audit: type=1400 audit(1732364935.113:340): avc: denied { connect } for pid=6580 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.550173][ T29] audit: type=1400 audit(1732364935.113:341): avc: denied { setopt } for pid=6580 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.650130][ T6575] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 109.060113][ T29] audit: type=1400 audit(1732364935.793:342): avc: denied { write } for pid=6600 comm="syz.3.169" path="socket:[11265]" dev="sockfs" ino=11265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.202949][ T29] audit: type=1400 audit(1732364935.803:343): avc: denied { nlmsg_write } for pid=6600 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.231099][ T6575] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 109.239695][ T6575] usb 3-1: can't read configurations, error -61 [ 109.340173][ T5911] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 109.390109][ T6575] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 109.602206][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.696473][ T6575] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 109.728989][ T5911] usb 5-1: not running at top speed; connect to a high speed hub [ 109.763690][ T6575] usb 3-1: can't read configurations, error -61 [ 109.790103][ T6575] usb usb3-port1: attempt power cycle [ 109.820314][ T5911] usb 5-1: config 2 has an invalid interface number: 212 but max is 1 [ 109.828547][ T5911] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 109.836820][ T5911] usb 5-1: config 2 has no interface number 0 [ 109.843006][ T5911] usb 5-1: config 2 has no interface number 1 [ 109.864110][ T5911] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 109.875147][ T5911] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 109.886037][ T5911] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 109.897309][ T5911] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 109.907214][ T5911] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.920390][ T5911] usb 5-1: config 2 interface 212 has no altsetting 0 [ 110.243532][ T5911] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 110.254778][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.271602][ T29] audit: type=1400 audit(1732364936.603:344): avc: denied { create } for pid=6603 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.278422][ T5911] usb 5-1: Product: syz [ 110.300212][ T6575] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 110.328617][ T5911] usb 5-1: Manufacturer: syz [ 110.335531][ T6575] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 110.343326][ T6575] usb 3-1: can't read configurations, error -61 [ 110.356910][ T5911] usb 5-1: SerialNumber: syz [ 110.480147][ T6575] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 110.500082][ T5846] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 110.513617][ T6575] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 110.522728][ T6575] usb 3-1: can't read configurations, error -61 [ 110.529344][ T6575] usb usb3-port1: unable to enumerate USB device [ 110.604791][ T5883] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 110.658025][ T29] audit: type=1400 audit(1732364937.403:345): avc: denied { create } for pid=6594 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.701915][ T29] audit: type=1400 audit(1732364937.413:346): avc: denied { getopt } for pid=6594 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.725892][ T29] audit: type=1400 audit(1732364937.473:347): avc: denied { connect } for pid=6594 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.750848][ T5883] usb 4-1: device descriptor read/64, error -71 [ 110.755703][ T6618] netlink: 666 bytes leftover after parsing attributes in process `syz.1.174'. [ 110.775575][ T29] audit: type=1400 audit(1732364937.523:348): avc: denied { write } for pid=6617 comm="syz.1.174" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 110.805207][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 110.907346][ T6625] ebt_among: dst integrity fail: 100 [ 110.990188][ T5883] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 111.120678][ T6575] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.140094][ T5883] usb 4-1: device descriptor read/64, error -71 [ 111.251429][ T5883] usb usb4-port1: attempt power cycle [ 111.270167][ T6575] usb 2-1: device descriptor read/64, error -71 [ 111.711673][ T5883] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 111.719656][ T6575] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.740476][ T5883] usb 4-1: device descriptor read/8, error -71 [ 111.870127][ T6575] usb 2-1: device descriptor read/64, error -71 [ 111.956034][ T6644] input: syz1 as /devices/virtual/input/input6 [ 111.963087][ T6644] input: failed to attach handler leds to device input6, error: -6 [ 111.999091][ T5883] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 112.006641][ T6575] usb usb2-port1: attempt power cycle [ 112.032559][ T5883] usb 4-1: device descriptor read/8, error -71 [ 112.102646][ T5911] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input7 [ 112.131574][ T5911] usb 5-1: USB disconnect, device number 11 [ 112.140995][ T5883] usb usb4-port1: unable to enumerate USB device [ 112.220068][ T46] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 112.371348][ T46] usb 1-1: config index 0 descriptor too short (expected 103, got 27) [ 112.379577][ T46] usb 1-1: too many endpoints for config 1 interface 0 altsetting 255: 128, using maximum allowed: 30 [ 112.380027][ T6575] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.390693][ T46] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 112.411527][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 112.419762][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.429311][ T6575] usb 2-1: device descriptor read/8, error -71 [ 112.429806][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.443603][ T46] usb 1-1: Product: syz [ 112.447752][ T46] usb 1-1: Manufacturer: syz [ 112.452430][ T46] usb 1-1: SerialNumber: syz [ 112.538416][ T6649] usb usb8: usbfs: process 6649 (syz.2.185) did not claim interface 0 before use [ 112.740145][ T6575] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.771722][ T6575] usb 2-1: device descriptor read/8, error -71 [ 112.968895][ T6575] usb usb2-port1: unable to enumerate USB device [ 113.829013][ T6664] FAULT_INJECTION: forcing a failure. [ 113.829013][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 113.841971][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.4.187 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 113.852213][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.862261][ T6664] Call Trace: [ 113.865533][ T6664] [ 113.868459][ T6664] dump_stack_lvl+0x16c/0x1f0 [ 113.873147][ T6664] should_fail_ex+0x497/0x5b0 [ 113.877836][ T6664] ? fs_reclaim_acquire+0xae/0x150 [ 113.882957][ T6664] should_failslab+0xc2/0x120 [ 113.887635][ T6664] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 113.893003][ T6664] ? getname_kernel+0x52/0x370 [ 113.897767][ T6664] getname_kernel+0x52/0x370 [ 113.902359][ T6664] kern_path+0x1d/0x50 [ 113.906431][ T6664] ubi_get_num_by_path+0xc2/0x260 [ 113.911457][ T6664] ? __pfx_ubi_get_num_by_path+0x10/0x10 [ 113.917087][ T6664] ? find_held_lock+0x2d/0x110 [ 113.921868][ T6664] ? finish_task_switch.isra.0+0x217/0xcc0 [ 113.927674][ T6664] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.932870][ T6664] ? finish_task_switch.isra.0+0x217/0xcc0 [ 113.938673][ T6664] ? __switch_to+0x749/0x1190 [ 113.943357][ T6664] ubi_open_volume_path+0x193/0x1f0 [ 113.948561][ T6664] ? __pfx_ubi_open_volume_path+0x10/0x10 [ 113.954294][ T6664] ? trace_lock_acquire+0x146/0x1e0 [ 113.959503][ T6664] ubifs_get_tree+0x11c/0x7dc0 [ 113.964271][ T6664] ? __pfx___schedule+0x10/0x10 [ 113.969128][ T6664] ? cred_has_capability.isra.0+0x192/0x2f0 [ 113.975030][ T6664] ? irqentry_exit+0x3b/0x90 [ 113.979619][ T6664] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.984819][ T6664] ? __pfx_ubifs_get_tree+0x10/0x10 [ 113.990019][ T6664] ? path_mount+0x14d0/0x1f20 [ 113.994703][ T6664] ? vfs_get_tree+0x49/0x380 [ 113.999307][ T6664] vfs_get_tree+0x8f/0x380 [ 114.003740][ T6664] path_mount+0x14e6/0x1f20 [ 114.008253][ T6664] ? kmem_cache_free+0x152/0x4b0 [ 114.013180][ T6664] ? __pfx_path_mount+0x10/0x10 [ 114.018029][ T6664] ? putname+0x13c/0x180 [ 114.022266][ T6664] __x64_sys_mount+0x294/0x320 [ 114.027021][ T6664] ? __pfx___x64_sys_mount+0x10/0x10 [ 114.032303][ T6664] do_syscall_64+0xcd/0x250 [ 114.036793][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.042671][ T6664] RIP: 0033:0x7efcf0b7e819 [ 114.047071][ T6664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.066670][ T6664] RSP: 002b:00007efcf18c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.075071][ T6664] RAX: ffffffffffffffda RBX: 00007efcf0d36160 RCX: 00007efcf0b7e819 [ 114.083026][ T6664] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000140 [ 114.090979][ T6664] RBP: 00007efcf18c5090 R08: 0000000000000000 R09: 0000000000000000 [ 114.098932][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.106886][ T6664] R13: 0000000000000000 R14: 00007efcf0d36160 R15: 00007ffedb888308 [ 114.114862][ T6664] [ 114.121130][ T6664] Invalid source name [ 114.125313][ T6664] UBIFS error (pid: 6664): cannot open "/dev/sg0", error -22 [ 114.173563][ T6662] xt_nat: multiple ranges no longer supported [ 114.188134][ T5136] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 114.202229][ T46] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 114.219779][ T46] usb 1-1: USB disconnect, device number 6 [ 114.229549][ T46] usblp0: removed [ 114.416906][ T5136] usb 3-1: device descriptor read/64, error -71 [ 115.388245][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 115.388260][ T29] audit: type=1400 audit(1732364942.133:360): avc: denied { write } for pid=6686 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.410081][ T5136] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 115.763255][ T5136] usb 3-1: device descriptor read/64, error -71 [ 115.816359][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 115.828537][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.200'. [ 115.956041][ T5136] usb usb3-port1: attempt power cycle [ 116.428154][ T29] audit: type=1400 audit(1732364943.173:361): avc: denied { append } for pid=6702 comm="syz.1.202" name="pfkey" dev="proc" ino=4026533392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.485258][ T29] audit: type=1400 audit(1732364943.223:362): avc: denied { watch } for pid=6707 comm="syz.0.203" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 116.530086][ T6575] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 116.850615][ T6717] netlink: 116 bytes leftover after parsing attributes in process `syz.1.202'. [ 117.236506][ T5911] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.346336][ T6575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.357468][ T6575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.367391][ T6575] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.380391][ T6575] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 117.389422][ T6575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.406524][ T6575] usb 4-1: config 0 descriptor?? [ 117.513471][ T5911] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.051338][ T5911] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 118.062419][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.100065][ T5911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.139989][ T5911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.291256][ T5911] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.306294][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.314531][ T5911] usb 1-1: Product: syz [ 118.319000][ T5911] usb 1-1: Manufacturer: syz [ 118.345379][ T6724] xt_nat: multiple ranges no longer supported [ 118.470798][ T5911] cdc_wdm 1-1:1.0: skipping garbage [ 118.476057][ T5911] cdc_wdm 1-1:1.0: skipping garbage [ 118.498978][ T6695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.517882][ T5911] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 118.524216][ T5911] cdc_wdm 1-1:1.0: Unknown control protocol [ 118.550972][ T6695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.591665][ T6695] syz.3.199 uses obsolete (PF_INET,SOCK_PACKET) [ 118.610912][ T29] audit: type=1400 audit(1732364945.363:363): avc: denied { read } for pid=6694 comm="syz.3.199" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 118.785208][ T29] audit: type=1400 audit(1732364945.383:364): avc: denied { open } for pid=6694 comm="syz.3.199" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 118.819392][ T6575] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 118.841675][ T6575] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0001/input/input8 [ 118.865796][ T6575] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0001/input/input9 [ 118.882611][ T6575] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0001/input/input10 [ 118.913508][ T6575] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0001/input/input11 [ 118.950582][ T6575] hid-udraw 0003:20D6:CB17.0001: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0 [ 118.957815][ T5136] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 119.135016][ T6742] fuse: Bad value for 'user_id' [ 119.139873][ T6742] fuse: Bad value for 'user_id' [ 119.200084][ T5136] usb 3-1: Using ep0 maxpacket: 16 [ 119.206566][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.217709][ T5136] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.230796][ T5136] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 119.239904][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.259394][ T5136] usb 3-1: config 0 descriptor?? [ 119.319375][ T29] audit: type=1400 audit(1732364946.063:365): avc: denied { write } for pid=6740 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.490961][ T5136] usbhid 3-1:0.0: can't add hid device: -71 [ 119.499033][ T5136] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.509384][ T5136] usb 3-1: USB disconnect, device number 17 [ 120.190318][ T6753] fuse: Bad value for 'fd' [ 120.698712][ T5846] Bluetooth: hci4: command tx timeout [ 120.711304][ T6695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.717485][ T6695] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.738979][ T6695] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.747289][ T29] audit: type=1400 audit(1732364947.483:366): avc: denied { execute } for pid=6748 comm="syz.2.213" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 120.773018][ T6695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.779772][ T6695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.789081][ T6695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.796569][ T6695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.803239][ T6695] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.811070][ T6695] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.817417][ T6695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.823564][ T6695] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 120.835829][ T6695] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 120.842097][ T6575] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 120.933394][ T5136] usb 1-1: USB disconnect, device number 7 [ 121.024201][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 121.060175][ T5156] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.125465][ T29] audit: type=1400 audit(1732364947.873:367): avc: denied { setopt } for pid=6765 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.313352][ T29] audit: type=1400 audit(1732364947.873:368): avc: denied { write } for pid=6765 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.820101][ T5156] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.826421][ T5156] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.832481][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.897693][ T29] audit: type=1400 audit(1732364949.643:369): avc: denied { bind } for pid=6780 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.976813][ T29] audit: type=1400 audit(1732364949.663:370): avc: denied { getopt } for pid=6780 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.003829][ T5911] usb 4-1: USB disconnect, device number 10 [ 123.481575][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.729417][ T29] audit: type=1400 audit(1732364950.453:371): avc: denied { setattr } for pid=6780 comm="syz.3.221" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 123.752843][ T29] audit: type=1400 audit(1732364950.453:372): avc: denied { create } for pid=6780 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.774807][ T29] audit: type=1400 audit(1732364950.453:373): avc: denied { bind } for pid=6780 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.825864][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 124.495893][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 124.535935][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 124.766230][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 125.408291][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.415743][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.417908][ T5156] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.610025][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.617256][ T6350] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 125.801154][ T6350] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.820209][ T6350] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 125.830747][ T6350] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.839705][ T6350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 125.957851][ T6350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 125.972924][ T6350] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.982191][ T6350] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.005415][ T29] audit: type=1400 audit(1732364952.753:374): avc: denied { getopt } for pid=6814 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.027173][ T6350] usb 5-1: Product: syz [ 126.045708][ T6350] usb 5-1: Manufacturer: syz [ 126.201876][ T6350] cdc_wdm 5-1:1.0: skipping garbage [ 126.207110][ T6350] cdc_wdm 5-1:1.0: skipping garbage [ 126.214717][ T6350] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 126.220863][ T6350] cdc_wdm 5-1:1.0: Unknown control protocol [ 126.477719][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.507115][ T29] audit: type=1400 audit(1732364953.253:375): avc: denied { append } for pid=6829 comm="syz.0.234" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.535911][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.111153][ T968] usb 5-1: USB disconnect, device number 12 [ 127.631183][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.637381][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.643759][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.330233][ T6847] ======================================================= [ 128.330233][ T6847] WARNING: The mand mount option has been deprecated and [ 128.330233][ T6847] and is ignored by this kernel. Remove the mand [ 128.330233][ T6847] option from the mount to silence this warning. [ 128.330233][ T6847] ======================================================= [ 128.368482][ T6847] VFS: unable to find oldfs superblock on device nullb0 [ 128.378200][ T29] audit: type=1400 audit(1732364955.123:376): avc: denied { create } for pid=6846 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 128.530244][ T29] audit: type=1400 audit(1732364955.273:377): avc: denied { sqpoll } for pid=6850 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.549278][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.569222][ T6851] bond1: entered promiscuous mode [ 128.578758][ T6851] bond1: entered allmulticast mode [ 128.584830][ T6851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.867032][ T6851] bond1 (unregistering): Released all slaves [ 128.985673][ T5842] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 129.159883][ T968] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.194124][ T6864] 9pnet_fd: Insufficient options for proto=fd [ 129.787095][ T968] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.802157][ T968] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.817981][ T968] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.830227][ T968] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.842127][ T968] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.860620][ T968] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.869845][ T968] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.880673][ T968] usb 2-1: Product: syz [ 130.050064][ T968] usb 2-1: Manufacturer: syz [ 130.062187][ T968] cdc_wdm 2-1:1.0: skipping garbage [ 130.067408][ T968] cdc_wdm 2-1:1.0: skipping garbage [ 130.126642][ T968] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 130.156869][ T968] cdc_wdm 2-1:1.0: Unknown control protocol [ 130.209497][ T5842] usb 3-1: device not accepting address 18, error -71 [ 130.243830][ T6877] usb usb8: usbfs: process 6877 (syz.0.246) did not claim interface 0 before use [ 130.453649][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.189410][ T29] audit: type=1400 audit(1732364957.263:378): avc: denied { mount } for pid=6876 comm="syz.2.247" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 131.212061][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.241110][ T6879] @: renamed from vlan0 (while UP) [ 132.040214][ T29] audit: type=1400 audit(1732364957.273:379): avc: denied { remount } for pid=6876 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.160008][ T29] audit: type=1400 audit(1732364957.993:380): avc: denied { ioctl } for pid=6876 comm="syz.2.247" path="socket:[11769]" dev="sockfs" ino=11769 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.200034][ T29] audit: type=1400 audit(1732364958.753:381): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 133.620007][ T968] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.824778][ T5136] usb 2-1: USB disconnect, device number 8 [ 133.903938][ T968] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.913199][ T968] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 133.923754][ T968] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.932827][ T968] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 133.945378][ T968] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 133.977571][ T29] audit: type=1400 audit(1732364960.713:382): avc: denied { connect } for pid=6906 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.009903][ T968] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.014069][ T29] audit: type=1400 audit(1732364960.753:383): avc: denied { write } for pid=6906 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.039732][ T968] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.049098][ T968] usb 1-1: Product: syz [ 134.053300][ T968] usb 1-1: Manufacturer: syz [ 134.061779][ T968] cdc_wdm 1-1:1.0: skipping garbage [ 134.066970][ T968] cdc_wdm 1-1:1.0: skipping garbage [ 134.072791][ T968] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 134.078671][ T968] cdc_wdm 1-1:1.0: Unknown control protocol [ 134.100065][ T5842] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 134.251405][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.270107][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.287316][ T5842] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 134.305519][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.320055][ T5136] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.329373][ T5842] usb 3-1: SerialNumber: syz [ 134.334273][ T29] audit: type=1400 audit(1732364961.073:384): avc: denied { unlink } for pid=6911 comm="syz.4.255" name="#1" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.335338][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.374393][ T29] audit: type=1400 audit(1732364961.073:385): avc: denied { mount } for pid=6911 comm="syz.4.255" name="/" dev="overlay" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.378816][ T6912] evm: overlay not supported [ 134.397053][ T29] audit: type=1804 audit(1732364961.123:386): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.255" name="/newroot/48/bus/bus" dev="overlay" ino=299 res=1 errno=0 [ 134.418241][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.586432][ T6575] usb 1-1: USB disconnect, device number 8 [ 134.628653][ T5136] usb 2-1: Using ep0 maxpacket: 32 [ 134.639047][ T5136] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 134.648313][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.656795][ T5136] usb 2-1: Product: syz [ 134.661027][ T5136] usb 2-1: SerialNumber: syz [ 134.667358][ T5136] usb 2-1: config 0 descriptor?? [ 135.840582][ T29] audit: type=1326 audit(1732364962.423:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.4.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf0b7e819 code=0x7ffc0000 [ 136.238565][ T5842] usb 3-1: 0:2 : does not exist [ 136.292549][ T5842] usb 3-1: USB disconnect, device number 19 [ 136.328064][ T6350] usb 2-1: USB disconnect, device number 9 [ 136.362133][ T968] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 136.680212][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 136.686531][ T29] audit: type=1400 audit(1732364963.423:397): avc: denied { ioctl } for pid=6945 comm="syz.0.265" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11847 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.874628][ T6951] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 137.011185][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.022218][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.037888][ T968] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 137.047009][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.063080][ T968] usb 5-1: config 0 descriptor?? [ 137.218393][ T6350] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.380143][ T6350] usb 1-1: Using ep0 maxpacket: 16 [ 138.062149][ T968] hid-led 0003:1D34:000A.0002: unbalanced collection at end of report description [ 138.062190][ T6350] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 138.071893][ T968] hid-led 0003:1D34:000A.0002: probe with driver hid-led failed with error -22 [ 138.088830][ T6350] usb 1-1: config 0 has no interface number 0 [ 138.110484][ T6350] usb 1-1: config 0 interface 167 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.124361][ T6350] usb 1-1: config 0 interface 167 has no altsetting 0 [ 138.131620][ T6350] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 138.148616][ T6350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.167665][ T6350] usb 1-1: config 0 descriptor?? [ 138.356583][ T29] audit: type=1400 audit(1732364965.103:398): avc: denied { block_suspend } for pid=6961 comm="syz.2.268" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.446410][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.503937][ T6948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.265'. [ 138.590847][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.594501][ T6948] unsupported nlmsg_type 40 [ 138.779687][ T968] usb 5-1: USB disconnect, device number 13 [ 139.706453][ T6350] usb 1-1: string descriptor 0 read error: -71 [ 139.721149][ T6350] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 139.730800][ T6980] usb usb8: usbfs: process 6980 (syz.3.272) did not claim interface 0 before use [ 139.737716][ T6350] gspca_sonixj: reg_w1 err -71 [ 139.744848][ T6350] sonixj 1-1:0.167: probe with driver sonixj failed with error -71 [ 139.793812][ T6350] usb 1-1: USB disconnect, device number 9 [ 139.799689][ T29] audit: type=1400 audit(1732364966.533:399): avc: denied { create } for pid=6981 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 139.843896][ T29] audit: type=1400 audit(1732364966.563:400): avc: denied { bind } for pid=6981 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 140.385035][ T6350] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.861395][ T6350] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 140.870544][ T6350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.047777][ T6998] syz.1.276 (6998): drop_caches: 2 [ 141.063986][ T6998] syz.1.276 (6998): drop_caches: 2 [ 141.725033][ T6350] usb 1-1: config 0 descriptor?? [ 142.335145][ T6350] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 142.342422][ T6350] hackrf 1-1:0.0: Could not detect board [ 142.348088][ T6350] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 142.365250][ T6350] usb 1-1: USB disconnect, device number 10 [ 142.788603][ T6575] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.952634][ T6575] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.968031][ T6575] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.984226][ T6575] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.997920][ T6575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.026407][ T6575] usb 5-1: SerialNumber: syz [ 145.415960][ T7053] netlink: 44 bytes leftover after parsing attributes in process `syz.2.294'. [ 145.440104][ T5842] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.452667][ T29] audit: type=1400 audit(1732364972.203:401): avc: denied { setopt } for pid=7052 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.231610][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.242164][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.256839][ T5842] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.268027][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.288720][ T5842] usb 4-1: SerialNumber: syz [ 146.776594][ T6575] usb 5-1: 0:2 : does not exist [ 146.781771][ T6575] usb 5-1: usbmixer: too many channels (61) in unit 5 [ 146.804125][ T6575] usb 5-1: USB disconnect, device number 14 [ 147.366405][ T7048] tipc: Trying to set illegal importance in message [ 147.582775][ T5842] usb 4-1: 0:2 : does not exist [ 147.587696][ T5842] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 147.609328][ T7075] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 147.628148][ T5842] usb 4-1: USB disconnect, device number 11 [ 147.629905][ T7075] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 147.642851][ T7075] gretap1: entered promiscuous mode [ 147.649265][ T7075] gretap1: entered allmulticast mode [ 147.653197][ T7079] usb usb8: usbfs: process 7079 (syz.4.299) did not claim interface 0 before use [ 148.943916][ T6575] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.087720][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 149.098009][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 149.129163][ T29] audit: type=1400 audit(1732364975.873:402): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.180004][ T6575] usb 1-1: Using ep0 maxpacket: 32 [ 149.215730][ T6575] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 149.227396][ T6575] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.242728][ T6575] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.249354][ T6575] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 149.262312][ T6575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.279642][ T6575] usb 1-1: config 0 descriptor?? [ 150.338737][ T7111] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.308'. [ 150.380625][ T7111] openvswitch: netlink: Message has 76 unknown bytes. [ 150.400482][ T7111] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 150.600227][ T29] audit: type=1400 audit(1732364977.303:403): avc: denied { bind } for pid=7115 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.746127][ T29] audit: type=1400 audit(1732364977.303:404): avc: denied { write } for pid=7115 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.813682][ T6575] usbhid 1-1:0.0: can't add hid device: -71 [ 150.821177][ T6575] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.885865][ T6575] usb 1-1: USB disconnect, device number 11 [ 150.939001][ T7124] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 151.400024][ T29] audit: type=1400 audit(1732364978.143:405): avc: denied { ioctl } for pid=7123 comm="syz.4.313" path="socket:[13231]" dev="sockfs" ino=13231 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.431532][ T6575] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.451257][ T7132] netlink: 'syz.4.313': attribute type 10 has an invalid length. [ 151.487674][ T7132] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 151.512853][ T7132] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.539239][ T7124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.555192][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 151.621732][ T6575] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.640190][ T6575] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.650430][ T6575] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.659635][ T6575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.679972][ T6575] usb 1-1: SerialNumber: syz [ 152.201250][ T29] audit: type=1400 audit(1732364978.953:406): avc: denied { search } for pid=5191 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.268385][ T7146] tipc: Trying to set illegal importance in message [ 152.534478][ T6575] usb 1-1: 0:2 : does not exist [ 152.539521][ T6575] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 152.557813][ T6575] usb 1-1: USB disconnect, device number 12 [ 154.109782][ T6350] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 154.280036][ T6350] usb 3-1: Using ep0 maxpacket: 8 [ 154.287147][ T6350] usb 3-1: config 1 interface 0 altsetting 250 bulk endpoint 0x1 has invalid maxpacket 584 [ 154.297508][ T6350] usb 3-1: config 1 interface 0 has no altsetting 0 [ 154.305661][ T6350] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.314796][ T6350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.322938][ T6350] usb 3-1: Product: Ж [ 154.327001][ T6350] usb 3-1: Manufacturer: 콧儨圃᛺â­ï£¨ç¤â‘ל츺ɛ嬮㼰尲礄措ᡒéªáµ›î¹¤ã—ªì–“阿檪⻑딇í†ç—¤á¡«å¡Ÿá°Œæ©…ã ºï¬é‡¼ì“¹éŽ€ì¡Žï–¦ï­„厊뭒擋䲀㭲댉ᢅﺇ꯫喝ɻ誛ᰶⓛ䇽쯋➳ä±ë‹çŸŠâ°›í•™î‚©í™·ä‚’æ‘° [ 154.349279][ T6350] usb 3-1: SerialNumber: о [ 154.358141][ T7152] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.388232][ T6350] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 250 proto 3 vid 0x0525 pid 0xA4A8 [ 164.149530][ T968] usb 3-1: USB disconnect, device number 20 [ 164.194678][ T968] usblp0: removed [ 165.325447][ T7183] usb usb8: usbfs: process 7183 (syz.0.330) did not claim interface 0 before use [ 165.810169][ T6054] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.150269][ T6054] usb 2-1: Using ep0 maxpacket: 16 [ 167.400916][ T6054] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.410618][ T6054] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 167.418472][ T6054] usb 2-1: can't read configurations, error -71 [ 167.586444][ T7201] usb usb8: usbfs: process 7201 (syz.1.334) did not claim interface 0 before use [ 168.457569][ T29] audit: type=1400 audit(1732364995.203:407): avc: denied { ioctl } for pid=7206 comm="syz.0.336" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.483348][ T5842] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.351461][ T5842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.360293][ T5842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 169.382408][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.392099][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 169.403726][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 169.428355][ T5842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.437551][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.445812][ T5842] usb 5-1: Product: syz [ 169.450120][ T5842] usb 5-1: Manufacturer: syz [ 169.462416][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 169.467617][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 169.474055][ T5842] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 169.480089][ T5842] cdc_wdm 5-1:1.0: Unknown control protocol [ 169.603888][ T1327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.650362][ T1327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.709513][ T1327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.777625][ T1327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.834340][ T1327] bridge_slave_1: left allmulticast mode [ 169.840205][ T1327] bridge_slave_1: left promiscuous mode [ 169.847046][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.858224][ T1327] bridge_slave_0: left allmulticast mode [ 169.865124][ T1327] bridge_slave_0: left promiscuous mode [ 169.871381][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.073662][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.085019][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.094552][ T1327] bond0 (unregistering): Released all slaves [ 170.365331][ T1327] hsr_slave_0: left promiscuous mode [ 170.371637][ T1327] hsr_slave_1: left promiscuous mode [ 170.377387][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.384826][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.392813][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.400446][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.413027][ T1327] veth1_macvtap: left promiscuous mode [ 170.418764][ T1327] veth0_macvtap: left promiscuous mode [ 170.424535][ T1327] veth1_vlan: left promiscuous mode [ 170.430122][ T1327] veth0_vlan: left promiscuous mode [ 170.644284][ T1327] team0 (unregistering): Port device team_slave_1 removed [ 170.677181][ T1327] team0 (unregistering): Port device team_slave_0 removed [ 174.352775][ T5842] usb 5-1: USB disconnect, device number 15 [ 174.478493][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.487896][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.533965][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.552379][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.560193][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.571974][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.651295][ T7227] Invalid source name [ 174.655445][ T7227] UBIFS error (pid: 7227): cannot open "/dev/sg0", error -22 [ 175.502192][ T29] audit: type=1400 audit(1732365002.023:408): avc: denied { mounton } for pid=7220 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 175.752794][ T5842] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 175.795904][ T7240] bond0: (slave macvtap0): Error: Device is in use and cannot be enslaved [ 175.860938][ T7241] xt_nat: multiple ranges no longer supported [ 175.970600][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 175.991130][ T5842] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 176.045792][ T5842] usb 5-1: config 0 has no interface number 0 [ 176.120746][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.215005][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 176.260140][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 176.353217][ T29] audit: type=1400 audit(1732365003.093:409): avc: denied { mount } for pid=7235 comm="syz.2.343" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 176.376429][ T29] audit: type=1400 audit(1732365003.103:410): avc: denied { unmount } for pid=7235 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 176.385554][ T5842] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.450459][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.466076][ T5842] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 176.475603][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.478958][ T7246] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 176.502157][ T5842] usb 5-1: config 0 descriptor?? [ 176.513715][ T5842] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 176.576388][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.612603][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.621158][ T7220] bridge_slave_0: entered allmulticast mode [ 176.634117][ T7220] bridge_slave_0: entered promiscuous mode [ 176.653959][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.667816][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.699243][ T7220] bridge_slave_1: entered allmulticast mode [ 176.709738][ T7220] bridge_slave_1: entered promiscuous mode [ 176.989431][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.013149][ T29] audit: type=1400 audit(1732365003.763:411): avc: denied { remount } for pid=7223 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 177.042317][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.077851][ T7220] team0: Port device team_slave_0 added [ 177.099544][ T7220] team0: Port device team_slave_1 added [ 178.070302][ T5156] Bluetooth: hci0: command tx timeout [ 178.131180][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.138182][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.170432][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.218229][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.254732][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.343324][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.739476][ T7220] hsr_slave_0: entered promiscuous mode [ 178.788505][ T7220] hsr_slave_1: entered promiscuous mode [ 178.853315][ T7220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.878075][ T7220] Cannot create hsr debugfs directory [ 179.890109][ T29] audit: type=1400 audit(1732365006.623:412): avc: denied { ioctl } for pid=7277 comm="syz.2.351" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 179.924670][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 179.940240][ T6575] usb 5-1: USB disconnect, device number 16 [ 179.951594][ T6575] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 179.985794][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.013642][ T7220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.021993][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.031543][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.038943][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.113216][ T7220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.120018][ T5156] Bluetooth: hci0: command tx timeout [ 180.181612][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.194772][ T7220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.200090][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.208925][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.218125][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.225716][ T6350] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 180.234179][ T7220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.820169][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.836378][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.852615][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.862799][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.869656][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.917322][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.943527][ T7220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.953909][ T7220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.968877][ T955] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.968926][ T955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.969655][ T955] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.969678][ T955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.976957][ T6350] usb 3-1: config 0 has no interfaces? [ 180.976983][ T6350] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 180.977004][ T6350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.979874][ T6350] usb 3-1: config 0 descriptor?? [ 180.981901][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.981926][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.981966][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.981986][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982006][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982025][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982044][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982063][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982082][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982126][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982146][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982165][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982184][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982203][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982222][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982262][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982281][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982300][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982319][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.982338][ T6054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.000652][ T6054] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.133858][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.188272][ T29] audit: type=1400 audit(1732365007.933:413): avc: denied { watch watch_reads } for pid=7267 comm="syz.1.349" path="/proc/288/net/udplite6" dev="proc" ino=4026533379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 181.205979][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 181.386206][ T5883] usb 3-1: USB disconnect, device number 21 [ 181.420384][ T5911] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 181.548419][ T7220] veth0_vlan: entered promiscuous mode [ 181.585645][ T7220] veth1_vlan: entered promiscuous mode [ 181.605529][ T7220] veth0_macvtap: entered promiscuous mode [ 181.615634][ T5911] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.626790][ T7220] veth1_macvtap: entered promiscuous mode [ 181.627815][ T7302] netlink: 996 bytes leftover after parsing attributes in process `syz.1.355'. [ 181.633877][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.655522][ T29] audit: type=1400 audit(1732365008.403:414): avc: denied { nlmsg_read } for pid=7293 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.659067][ T5911] usb 5-1: config 0 descriptor?? [ 181.678517][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.682667][ T5911] cp210x 5-1:0.0: cp210x converter detected [ 181.705663][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.717865][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.732538][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.742644][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.753381][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.760090][ T5156] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 181.763356][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.791958][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.817736][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.837575][ T7302] tap0: tun_chr_ioctl cmd 1074025672 [ 181.843568][ T7302] tap0: ignored: set checksum enabled [ 181.866022][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.876834][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.883878][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.886827][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.908717][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.912667][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.918641][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.953456][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.979384][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.008064][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.105994][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.158401][ T7220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.186314][ T7220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.195166][ T5156] Bluetooth: hci0: command tx timeout [ 182.201225][ T7220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.209992][ T7220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.293150][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.322493][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.383271][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.420207][ T6350] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 182.428067][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.598880][ T6350] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 182.608109][ T6350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.616341][ T6350] usb 3-1: Product: syz [ 182.620705][ T6350] usb 3-1: Manufacturer: syz [ 182.625354][ T6350] usb 3-1: SerialNumber: syz [ 182.639572][ T6350] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 182.680469][ T5911] usb 5-1: cp210x converter now attached to ttyUSB0 [ 182.884953][ T6054] usb 5-1: USB disconnect, device number 17 [ 182.893357][ T6054] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.906461][ T6054] cp210x 5-1:0.0: device disconnected [ 182.960182][ T6350] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 183.110148][ T6350] usb 1-1: Using ep0 maxpacket: 32 [ 183.116533][ T6350] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 183.128244][ T6350] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 183.137368][ T6350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.145515][ T6350] usb 1-1: Product: syz [ 183.149651][ T6350] usb 1-1: Manufacturer: syz [ 183.154312][ T6350] usb 1-1: SerialNumber: syz [ 183.159883][ T6350] usb 1-1: config 0 descriptor?? [ 183.165358][ T7319] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 183.174514][ T6350] hub 1-1:0.0: bad descriptor, ignoring hub [ 183.180751][ T6350] hub 1-1:0.0: probe with driver hub failed with error -5 [ 183.188901][ T6350] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 183.399759][ T6350] usb 1-1: USB disconnect, device number 13 [ 183.399804][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 184.261529][ T5156] Bluetooth: hci0: command tx timeout [ 184.395930][ T29] audit: type=1400 audit(1732365011.143:415): avc: denied { mount } for pid=7220 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 184.420447][ T29] audit: type=1400 audit(1732365011.143:416): avc: denied { mounton } for pid=7220 comm="syz-executor" path="/root/syzkaller.7F34HB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 184.650313][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.702348][ T29] audit: type=1400 audit(1732365011.453:417): avc: denied { setopt } for pid=7334 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.819994][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 184.946460][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.009677][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 185.062586][ T8] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 185.073293][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.128746][ T8] usb 5-1: config 0 descriptor?? [ 185.271172][ T6054] usb 3-1: USB disconnect, device number 22 [ 185.563493][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 185.569425][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 186.431590][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 186.525392][ T8] usb 5-1: USB disconnect, device number 18 [ 186.534173][ T29] audit: type=1400 audit(1732365012.443:418): avc: denied { write } for pid=7349 comm="syz.5.368" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 186.556926][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.563477][ T29] audit: type=1400 audit(1732365013.193:419): avc: denied { map } for pid=7347 comm="syz.1.369" path="socket:[15362]" dev="sockfs" ino=15362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 186.587169][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.880991][ T29] audit: type=1400 audit(1732365013.193:420): avc: denied { accept } for pid=7347 comm="syz.1.369" path="socket:[15362]" dev="sockfs" ino=15362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 186.904939][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.013563][ T7360] usb usb8: usbfs: process 7360 (syz.1.371) did not claim interface 0 before use [ 189.810124][ T5883] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 189.976243][ T5883] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 189.984752][ T5883] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 189.993071][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.003192][ T5883] usb 2-1: config 0 has no interface number 0 [ 190.009263][ T5883] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 190.019067][ T5883] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 190.030459][ T5883] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 190.043611][ T5883] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 190.052667][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.062017][ T5883] usb 2-1: config 0 descriptor?? [ 190.067413][ T7377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.094134][ T5883] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 190.286627][ T5883] usb 2-1: USB disconnect, device number 12 [ 190.288269][ T1327] usb 2-1: Failed to submit usb control message: -71 [ 190.300120][ T1327] usb 2-1: unable to send the bmi data to the device: -71 [ 190.307272][ T1327] usb 2-1: unable to get target info from device [ 190.313875][ T1327] usb 2-1: could not get target info (-71) [ 190.319801][ T1327] usb 2-1: could not probe fw (-71) [ 192.341140][ T5156] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 192.341220][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 202.777978][ T7395] netlink: zone id is out of range [ 202.783322][ T7395] netlink: zone id is out of range [ 202.788870][ T7395] netlink: zone id is out of range [ 203.047315][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 203.079809][ T29] audit: type=1400 audit(1732365029.823:421): avc: denied { bind } for pid=7396 comm="syz.5.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.170086][ T7395] netlink: zone id is out of range [ 203.175382][ T7395] netlink: zone id is out of range [ 203.181062][ T7395] netlink: zone id is out of range [ 203.186351][ T7395] netlink: zone id is out of range [ 203.191677][ T7395] netlink: zone id is out of range [ 203.196969][ T7395] netlink: zone id is out of range [ 203.208193][ T7395] netlink: zone id is out of range [ 203.712943][ T29] audit: type=1400 audit(1732365030.333:422): avc: denied { map } for pid=7410 comm="syz.2.387" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.174989][ T7431] Invalid logical block size (3328) [ 206.209992][ T29] audit: type=1400 audit(1732365032.913:423): avc: denied { connect } for pid=7433 comm="syz.5.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.263185][ T6350] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 206.329830][ T29] audit: type=1400 audit(1732365033.073:424): avc: denied { append } for pid=7443 comm="syz.5.395" name="event2" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.478847][ T7448] netlink: 'syz.5.397': attribute type 4 has an invalid length. [ 206.500701][ T7441] kvm: kvm [7440]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xab [ 206.509798][ T7448] netlink: 'syz.5.397': attribute type 4 has an invalid length. [ 206.511680][ T7441] kvm: kvm [7440]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x18 [ 206.540243][ T6350] usb 5-1: Using ep0 maxpacket: 16 [ 206.559673][ T6350] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 206.568985][ T6350] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 206.579181][ T6350] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.588317][ T6350] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 206.912060][ T6350] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.921271][ T6350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.929455][ T6350] usb 5-1: Product: syz [ 206.933922][ T6350] usb 5-1: Manufacturer: syz [ 206.938606][ T6350] usb 5-1: SerialNumber: syz [ 207.009129][ T7454] syz.0.398: attempt to access beyond end of device [ 207.009129][ T7454] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 207.032894][ T7454] syz.0.398: attempt to access beyond end of device [ 207.032894][ T7454] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 207.046486][ T7454] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 207.067640][ T7448] syz.5.397 (7448) used greatest stack depth: 21184 bytes left [ 207.087242][ T7454] syz.0.398: attempt to access beyond end of device [ 207.087242][ T7454] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 207.110208][ T7454] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 207.121395][ T7454] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 207.131464][ T7454] UDF-fs: Scanning with blocksize 512 failed [ 207.153391][ T7462] overlay: Unknown parameter 'fowner<00000000000000000000' [ 207.154655][ T7454] syz.0.398: attempt to access beyond end of device [ 207.154655][ T7454] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 207.176550][ T7454] syz.0.398: attempt to access beyond end of device [ 207.176550][ T7454] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 207.182694][ T7459] input: syz0 as /devices/virtual/input/input13 [ 207.205100][ T29] audit: type=1400 audit(1732365033.953:425): avc: denied { mounton } for pid=7421 comm="syz.4.389" path="/proc/230/ns/mnt" dev="proc" ino=15705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 207.231865][ T7454] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 207.279214][ T7454] syz.0.398: attempt to access beyond end of device [ 207.279214][ T7454] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 207.296612][ T7454] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 207.309779][ T7454] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 207.318904][ T7454] UDF-fs: Scanning with blocksize 1024 failed [ 207.330472][ T7454] syz.0.398: attempt to access beyond end of device [ 207.330472][ T7454] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 207.351542][ T6350] usb 5-1: 0:2 : does not exist [ 207.359845][ T6350] usb 5-1: USB disconnect, device number 19 [ 207.363746][ T7454] syz.0.398: attempt to access beyond end of device [ 207.363746][ T7454] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 207.378793][ T7454] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 207.543991][ T7454] syz.0.398: attempt to access beyond end of device [ 207.543991][ T7454] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 207.614598][ T7472] xt_nat: multiple ranges no longer supported [ 208.050023][ T7454] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 208.093784][ T7454] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 208.101939][ T7454] UDF-fs: Scanning with blocksize 2048 failed [ 208.108240][ T7454] syz.0.398: attempt to access beyond end of device [ 208.108240][ T7454] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 208.121308][ T7454] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 208.134260][ T7454] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 208.144737][ T7454] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 208.152555][ T7454] UDF-fs: Scanning with blocksize 4096 failed [ 208.158633][ T7454] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 218.130723][ T7480] usb usb8: usbfs: process 7480 (syz.2.405) did not claim interface 0 before use [ 218.191161][ T29] audit: type=1400 audit(1732365044.943:426): avc: denied { create } for pid=7484 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.208789][ T7481] netlink: 92 bytes leftover after parsing attributes in process `syz.0.404'. [ 218.228005][ T5156] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 218.311249][ T29] audit: type=1400 audit(1732365044.963:427): avc: denied { getopt } for pid=7484 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.363339][ T5156] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 218.380682][ T29] audit: type=1400 audit(1732365045.053:428): avc: denied { name_bind } for pid=7482 comm="syz.4.403" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 218.429290][ T29] audit: type=1400 audit(1732365045.053:429): avc: denied { node_bind } for pid=7482 comm="syz.4.403" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 218.450427][ T29] audit: type=1400 audit(1732365045.053:430): avc: denied { connect } for pid=7482 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 218.460610][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.406'. [ 218.469989][ T29] audit: type=1400 audit(1732365045.053:431): avc: denied { name_connect } for pid=7482 comm="syz.4.403" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 218.500079][ T29] audit: type=1400 audit(1732365045.103:432): avc: denied { getopt } for pid=7482 comm="syz.4.403" laddr=172.20.20.10 lport=54678 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.210182][ T6350] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 219.360382][ T6350] usb 5-1: Using ep0 maxpacket: 8 [ 219.480868][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.690239][ T6350] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 219.699327][ T6350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.707503][ T6350] usb 5-1: Product: syz [ 219.713971][ T6350] usb 5-1: Manufacturer: syz [ 219.718631][ T6350] usb 5-1: SerialNumber: syz [ 219.724277][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.734836][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.744195][ T6350] usb 5-1: config 0 descriptor?? [ 219.752130][ T46] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 219.770165][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 219.778191][ T46] usb 1-1: SerialNumber: syz [ 220.317255][ T6350] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 220.326052][ T6350] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 220.337534][ T6350] usb 5-1: USB disconnect, device number 20 [ 220.393969][ T46] usb 1-1: 0:2 : does not exist [ 220.398906][ T46] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 220.411024][ T46] usb 1-1: USB disconnect, device number 14 [ 220.550085][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 220.712880][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.723934][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.733691][ T5911] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 220.742969][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.752129][ T5911] usb 6-1: config 0 descriptor?? [ 220.810057][ T6350] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 221.088089][ T6350] usb 2-1: Using ep0 maxpacket: 32 [ 221.094618][ T6350] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 221.103898][ T6350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.132489][ T6350] usb 2-1: config 0 descriptor?? [ 221.783343][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 221.801400][ T6350] usb 2-1: string descriptor 0 read error: -71 [ 221.834825][ T6350] usb 2-1: selecting invalid altsetting 3 [ 221.845122][ T6350] comedi comedi0: could not set alternate setting 3 in high speed [ 221.854004][ T6350] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 221.868106][ T6350] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 221.882035][ T6350] usb 2-1: USB disconnect, device number 13 [ 221.907880][ T7556] Driver unsupported XDP return value 0 on prog (id 116) dev N/A, expect packet loss! [ 222.423008][ T5156] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 222.434786][ T5156] Bluetooth: hci1: Injecting HCI hardware error event [ 222.496652][ T5156] Bluetooth: hci1: hardware error 0x00 [ 222.987319][ T29] audit: type=1404 audit(1732365049.733:433): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 223.383959][ T29] audit: type=1400 audit(1732365050.133:434): avc: denied { create } for pid=7566 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 223.442528][ T5911] usbhid 6-1:0.0: can't add hid device: -71 [ 223.454069][ T5911] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 223.482515][ T29] audit: type=1400 audit(1732365050.183:435): avc: denied { create } for pid=7566 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 223.493085][ T5911] usb 6-1: USB disconnect, device number 2 [ 223.505296][ T29] audit: type=1400 audit(1732365050.223:436): avc: denied { read write } for pid=7220 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.575565][ T29] audit: type=1400 audit(1732365050.323:437): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.580121][ T5156] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 225.075452][ T29] audit: type=1400 audit(1732365051.823:438): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=0 [ 225.326096][ T955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.405328][ T955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.471218][ T955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.516408][ T955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.602486][ T955] bridge_slave_1: left allmulticast mode [ 225.608192][ T955] bridge_slave_1: left promiscuous mode [ 225.615136][ T955] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.624983][ T955] bridge_slave_0: left allmulticast mode [ 225.630881][ T955] bridge_slave_0: left promiscuous mode [ 225.636551][ T955] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.882507][ T955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.893004][ T955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.903747][ T955] bond0 (unregistering): Released all slaves [ 225.981067][ T955] IPVS: stopping backup sync thread 6951 ... [ 226.053155][ T955] hsr_slave_0: left promiscuous mode [ 226.058792][ T955] hsr_slave_1: left promiscuous mode [ 226.065425][ T955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.073144][ T955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.080851][ T955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.088229][ T955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.101504][ T955] veth1_macvtap: left promiscuous mode [ 226.107032][ T955] veth0_macvtap: left promiscuous mode [ 226.113472][ T955] veth1_vlan: left promiscuous mode [ 226.118737][ T955] veth0_vlan: left promiscuous mode [ 226.350307][ T955] team0 (unregistering): Port device team_slave_1 removed [ 226.378204][ T955] team0 (unregistering): Port device team_slave_0 removed [ 228.037184][ T5842] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 228.047231][ T6054] usb 3-1: ath9k_htc: USB layer deinitialized [ 279.741381][ T29] audit: type=1400 audit(1732365106.493:439): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Nov 23 12:31:46 syzkaller daemon[ 279.774727][ T29] audit: type=1400 audit(1732365106.523:440): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[5503]: ps_sendpsmmsg: Connection refused Nov 23 12:31:46 syzkaller daemon.err dhcpcd[5503]: ps_root_recvmsgcb: failed to send message to pid 7474: Connection refused [ 281.008236][ T29] audit: type=1400 audit(1732365107.753:441): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Nov 23 12:31:47 syzkaller daemon.err dhcpcd[5503[ 281.034958][ T29] audit: type=1400 audit(1732365107.783:442): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ]: ps_sendpsmmsg: Connection refused Nov 23 12:31:47 syzkaller daemon.err dhcpcd[5503]: ps_root_recvmsgcb: failed to send message to pid 7477: Connection refused [ 281.303499][ T29] audit: type=1400 audit(1732365108.053:443): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Nov 23 12:31:48 syzkaller daemon[ 281.328153][ T29] audit: type=1400 audit(1732365108.073:444): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[5503]: ps_sendpsmmsg: Connection refused Nov 23 12:31:48 syzkaller daemon.err dhcpcd[5503]: ps_root_recvmsgcb: failed to [ 281.364897][ T29] audit: type=1400 audit(1732365108.113:445): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 send message to pid 7476: Connection refused No[ 281.390634][ T29] audit: type=1400 audit(1732365108.143:446): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 v 23 12:31:48 syzkaller daemon.err dhcpcd[5503]: ps_sendpsmmsg: Connection refused Nov 23 12:31:48 syzkaller daemon.err dhcpcd[5503]: ps_root_recvmsgcb: failed to send message to pid 7475: Connection refused [ 283.319744][ T29] audit: type=1400 audit(1732365110.063:447): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Nov 23 12:31:50 [ 283.344273][ T29] audit: type=1400 audit(1732365110.093:448): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon.err dhcpcd[5503]: ps_sendpsmmsg: Connection refused Nov 23 12:31:50 syzkaller daemon.err dhcpcd[5503]: ps_root_recvmsgcb: failed to send message to pid 7499: Connection refused Nov 23 12:31:50 syzkaller daemon.err dhcpcd[5503]: ps_sendpsmmsg: Connection refused Nov 23 12:31:50 syzkaller daemon.err dhcpcd[5503]: ps_root_recvmsgcb: failed to send message to pid 7500: Connection refused [ 303.465256][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 344.185457][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 344.185471][ T29] audit: type=1400 audit(1732365170.933:451): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Nov 23 12:32:50 syzkaller daemon[ 344.215196][ T29] audit: type=1400 audit(1732365170.963:452): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[7576]: ps_bpf_start_bpf: bpf_open: Invalid argument Nov 23 12:32:50 syzkaller daemon.err dhcpcd[7576]: ps_root_recvmsg: Invalid argument Nov 23 12:32:51 [ 344.822067][ T29] audit: type=1400 audit(1732365171.573:453): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon[ 344.846659][ T29] audit: type=1400 audit(1732365171.593:454): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[7577[ 344.868983][ T29] audit: type=1400 audit(1732365171.593:455): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ]: ps_bpf_start_[ 344.893004][ T29] audit: type=1400 audit(1732365171.593:456): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 bpf: bpf_open: Invalid argument Nov 23 12:32:51 syzkaller daemon.err dhcpcd[7578]: ps_bpf_start_bpf: bpf_open: Invalid argument Nov 23 12:32:51 syzkaller daemon.err dhcpcd[7577]: ps_root_recvmsg: Invalid argument Nov 23 12:32:51 syzkaller daemon.err dhcpcd[7578]: ps_root_recvmsg: Invalid argument Nov 23 12:32:51 [ 345.090089][ T29] audit: type=1400 audit(1732365171.833:457): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon[ 345.113013][ T29] audit: type=1400 audit(1732365171.833:458): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[7579]: ps_bpf_start_bpf: bpf_open: Invalid argument Nov 23 12:32:51 syzkaller daemon.err dhcpcd[7579]: ps_root_recvmsg: Invalid argument Nov 23 12:32:54 [ 347.915496][ T29] audit: type=1400 audit(1732365174.663:459): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon[ 347.938970][ T29] audit: type=1400 audit(1732365174.663:460): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[7580]: ps_bpf_start_bpf: bpf_open: Invalid argument Nov 23 12:32:54 syzkaller daemon.err dhcpcd[7580]: ps_root_recvmsg: Invalid argument Nov 23 12:32:55 syzkaller daemon.err dhcpcd[7581]: ps_bpf_start_bpf: bpf_open: Invalid argument Nov 23 12:32:55 syzkaller daemon.err dhcpcd[7581]: ps_root_recvmsg: Invalid argument [ 375.620049][ T30] INFO: task kworker/u8:6:1327 blocked for more than 143 seconds. [ 375.627895][ T30] Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 375.635233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.643936][ T30] task:kworker/u8:6 state:D stack:23384 pid:1327 tgid:1327 ppid:2 flags:0x00004000 [ 375.654132][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 375.660194][ T30] Call Trace: [ 375.663463][ T30] [ 375.666379][ T30] __schedule+0xe58/0x5ad0 [ 375.670913][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 375.676105][ T30] ? __pfx___schedule+0x10/0x10 [ 375.681188][ T30] ? schedule+0x298/0x350 [ 375.685516][ T30] ? __pfx_lock_release+0x10/0x10 [ 375.690594][ T30] ? lock_acquire+0x2f/0xb0 [ 375.695103][ T30] ? schedule+0x1fd/0x350 [ 375.699435][ T30] schedule+0xe7/0x350 [ 375.703611][ T30] io_schedule+0xbf/0x130 [ 375.707920][ T30] rq_qos_wait+0x1a9/0x2e0 [ 375.712344][ T30] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 375.717517][ T30] ? __pfx_rq_qos_wait+0x10/0x10 [ 375.722550][ T30] ? dd_bio_merge+0xdf/0x150 [ 375.727154][ T30] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 375.732912][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 375.738174][ T30] ? lock_acquire+0x2f/0xb0 [ 375.742814][ T30] ? dd_bio_merge+0xc2/0x150 [ 375.747396][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 375.752614][ T30] wbt_wait+0x1b0/0x390 [ 375.756759][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 375.761519][ T30] ? __pfx_dd_bio_merge+0x10/0x10 [ 375.766556][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 375.771255][ T30] __rq_qos_throttle+0x53/0xa0 [ 375.776006][ T30] blk_mq_submit_bio+0x8ea/0x24c0 [ 375.782123][ T30] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 375.787597][ T30] ? hlock_class+0x4e/0x130 [ 375.792190][ T30] ? mark_lock+0xb5/0xc60 [ 375.796516][ T30] __submit_bio+0x384/0x540 [ 375.801583][ T30] ? __pfx___submit_bio+0x10/0x10 [ 375.806609][ T30] ? folio_memcg_unlock+0x5c/0x120 [ 375.811920][ T30] ? __pfx_lock_release+0x10/0x10 [ 375.816954][ T30] ? __pfx_lock_release+0x10/0x10 [ 375.821973][ T30] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 375.827753][ T30] submit_bio_noacct_nocheck+0x698/0xd70 [ 375.833411][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 375.840280][ T30] ? __pfx___might_resched+0x10/0x10 [ 375.845567][ T30] ? __pfx___folio_start_writeback+0x10/0x10 [ 375.851649][ T30] submit_bio_noacct+0x93a/0x1e20 [ 375.856674][ T30] ext4_bio_write_folio+0x74f/0x1da0 [ 375.862084][ T30] mpage_submit_folio+0x1c0/0x350 [ 375.867212][ T30] mpage_process_page_bufs+0x46d/0x990 [ 375.872681][ T30] ? const_folio_flags.constprop.0+0x56/0x150 [ 375.878725][ T30] mpage_prepare_extent_to_map+0x758/0x1470 [ 375.884853][ T30] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 375.891317][ T30] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 375.896666][ T30] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 375.902379][ T30] ? ext4_init_io_end+0x24/0x170 [ 375.907301][ T30] ext4_do_writepages+0x975/0x3320 [ 375.912460][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 375.917988][ T30] ? mark_lock+0xb5/0xc60 [ 375.922417][ T30] ? do_writepages+0x1b3/0x820 [ 375.927190][ T30] ? ext4_writepages+0x303/0x730 [ 375.932137][ T30] ext4_writepages+0x303/0x730 [ 375.936882][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 375.942264][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 375.947553][ T30] do_writepages+0x1b3/0x820 [ 375.952190][ T30] ? __pfx_do_writepages+0x10/0x10 [ 375.957303][ T30] ? writeback_sb_inodes+0x3a6/0xfa0 [ 375.962672][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 375.968048][ T30] ? writeback_sb_inodes+0x3a6/0xfa0 [ 375.973390][ T30] ? find_held_lock+0x2d/0x110 [ 375.978154][ T30] ? wbc_attach_and_unlock_inode+0xee/0x110 [ 375.984095][ T30] __writeback_single_inode+0x166/0xfa0 [ 375.989806][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 375.995211][ T30] ? __pfx___writeback_single_inode+0x10/0x10 [ 376.001354][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 376.006554][ T30] writeback_sb_inodes+0x603/0xfa0 [ 376.011850][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 376.017484][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 376.022780][ T30] ? _raw_spin_unlock+0x28/0x50 [ 376.027632][ T30] ? move_expired_inodes+0x5a3/0x850 [ 376.032979][ T30] __writeback_inodes_wb+0xff/0x2e0 [ 376.038173][ T30] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 376.044030][ T30] ? queue_io+0x3fe/0x530 [ 376.048349][ T30] wb_writeback+0x73e/0xb80 [ 376.052869][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 376.057874][ T30] ? get_nr_dirty_inodes+0x171/0x1e0 [ 376.063204][ T30] wb_workfn+0x8c0/0xbc0 [ 376.067431][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 376.072240][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 376.077869][ T30] ? process_one_work+0x921/0x1ba0 [ 376.083044][ T30] ? lock_acquire+0x2f/0xb0 [ 376.087720][ T30] ? process_one_work+0x921/0x1ba0 [ 376.093019][ T30] process_one_work+0x9c5/0x1ba0 [ 376.097973][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 376.103671][ T30] ? __pfx_process_one_work+0x10/0x10 [ 376.109019][ T30] ? rcu_is_watching+0x12/0xc0 [ 376.113811][ T30] ? assign_work+0x1a0/0x250 [ 376.118378][ T30] worker_thread+0x6c8/0xf00 [ 376.123097][ T30] ? __pfx_worker_thread+0x10/0x10 [ 376.128205][ T30] kthread+0x2c1/0x3a0 [ 376.132282][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.137455][ T30] ? __pfx_kthread+0x10/0x10 [ 376.142117][ T30] ret_from_fork+0x45/0x80 [ 376.146527][ T30] ? __pfx_kthread+0x10/0x10 [ 376.151127][ T30] ret_from_fork_asm+0x1a/0x30 [ 376.155873][ T30] [ 376.158894][ T30] INFO: task jbd2/sda1-8:5171 blocked for more than 143 seconds. [ 376.166654][ T30] Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 376.173963][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.182671][ T30] task:jbd2/sda1-8 state:D stack:26000 pid:5171 tgid:5171 ppid:2 flags:0x00004000 [ 376.193019][ T30] Call Trace: [ 376.196289][ T30] [ 376.199199][ T30] __schedule+0xe58/0x5ad0 [ 376.203658][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 376.208845][ T30] ? __pfx___schedule+0x10/0x10 [ 376.213744][ T30] ? schedule+0x298/0x350 [ 376.218076][ T30] ? __pfx_lock_release+0x10/0x10 [ 376.223150][ T30] ? __wait_on_bit+0xc9/0x180 [ 376.227802][ T30] ? lock_acquire+0x2f/0xb0 [ 376.232389][ T30] ? schedule+0x1fd/0x350 [ 376.236697][ T30] schedule+0xe7/0x350 [ 376.240829][ T30] io_schedule+0xbf/0x130 [ 376.245151][ T30] bit_wait_io+0x15/0xe0 [ 376.249368][ T30] __wait_on_bit+0x62/0x180 [ 376.253902][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 376.258848][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 376.264306][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 376.274586][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 376.280244][ T30] ? __pfx___might_resched+0x10/0x10 [ 376.285533][ T30] ? jbd2_journal_commit_transaction+0x333f/0x6c90 [ 376.292557][ T30] __wait_on_buffer+0x64/0x70 [ 376.297246][ T30] jbd2_journal_commit_transaction+0x3ca9/0x6c90 [ 376.303612][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 376.310310][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 376.315609][ T30] ? __try_to_del_timer_sync+0x116/0x170 [ 376.321277][ T30] ? __pfx_lock_release+0x10/0x10 [ 376.326296][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 376.332108][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.337307][ T30] kjournald2+0x1f8/0x760 [ 376.341660][ T30] ? __kthread_parkme+0xb7/0x220 [ 376.346599][ T30] ? __pfx_kjournald2+0x10/0x10 [ 376.351495][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 376.357555][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.362771][ T30] ? __kthread_parkme+0x148/0x220 [ 376.367800][ T30] ? __pfx_kjournald2+0x10/0x10 [ 376.372687][ T30] kthread+0x2c1/0x3a0 [ 376.376752][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.381975][ T30] ? __pfx_kthread+0x10/0x10 [ 376.387019][ T30] ret_from_fork+0x45/0x80 [ 376.391457][ T30] ? __pfx_kthread+0x10/0x10 [ 376.396251][ T30] ret_from_fork_asm+0x1a/0x30 [ 376.401041][ T30] [ 376.404050][ T30] INFO: task syz-executor:5821 blocked for more than 144 seconds. [ 376.411877][ T30] Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 376.419141][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.427799][ T30] task:syz-executor state:D stack:22960 pid:5821 tgid:5821 ppid:5819 flags:0x00000006 [ 376.437958][ T30] Call Trace: [ 376.441238][ T30] [ 376.444147][ T30] __schedule+0xe58/0x5ad0 [ 376.448550][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 376.453776][ T30] ? __pfx___schedule+0x10/0x10 [ 376.458626][ T30] ? schedule+0x298/0x350 [ 376.462949][ T30] ? __pfx_lock_release+0x10/0x10 [ 376.467949][ T30] ? __wait_on_bit+0xc9/0x180 [ 376.472671][ T30] ? lock_acquire+0x2f/0xb0 [ 376.477167][ T30] ? schedule+0x1fd/0x350 [ 376.481499][ T30] schedule+0xe7/0x350 [ 376.485542][ T30] io_schedule+0xbf/0x130 [ 376.489843][ T30] bit_wait_io+0x15/0xe0 [ 376.494112][ T30] __wait_on_bit+0x62/0x180 [ 376.498799][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 376.505671][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 376.511165][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 376.517142][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 376.522664][ T30] do_get_write_access+0x933/0x1270 [ 376.527849][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 376.533920][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 376.540069][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 376.545606][ T30] __ext4_mark_inode_dirty+0x1a4/0x860 [ 376.551108][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 376.556024][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 376.562203][ T30] ? rcu_is_watching+0x12/0xc0 [ 376.566978][ T30] ? trace_jbd2_handle_start+0x1b9/0x240 [ 376.572651][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 376.577856][ T30] ? __ext4_journal_start_sb+0x19f/0x660 [ 376.583518][ T30] ? __ext4_journal_start_sb+0x1a8/0x660 [ 376.589126][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 376.594085][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 376.599654][ T30] ext4_dirty_inode+0xd9/0x130 [ 376.604656][ T30] ? rcu_is_watching+0x12/0xc0 [ 376.609437][ T30] __mark_inode_dirty+0x1f7/0xe60 [ 376.614536][ T30] generic_update_time+0xcf/0xf0 [ 376.619477][ T30] file_update_time+0x17d/0x1c0 [ 376.624417][ T30] ext4_page_mkwrite+0x368/0x1760 [ 376.629452][ T30] ? find_held_lock+0x2d/0x110 [ 376.634265][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 376.639702][ T30] ? __pfx_lock_release+0x10/0x10 [ 376.644753][ T30] ? vm_normal_page+0x13c/0x2b0 [ 376.649599][ T30] do_page_mkwrite+0x177/0x380 [ 376.654369][ T30] do_wp_page+0xcbf/0x49d0 [ 376.658766][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 376.664430][ T30] ? __pfx_do_wp_page+0x10/0x10 [ 376.669259][ T30] ? rcu_is_watching+0x12/0xc0 [ 376.674096][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 376.679099][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.684499][ T30] ? lock_acquire+0x2f/0xb0 [ 376.688988][ T30] ? __handle_mm_fault+0xdcd/0x2a10 [ 376.694212][ T30] __handle_mm_fault+0x1a93/0x2a10 [ 376.699335][ T30] ? __pfx_lock_release+0x10/0x10 [ 376.704570][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 376.709787][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 376.715267][ T30] handle_mm_fault+0x3fa/0xaa0 [ 376.720099][ T30] do_user_addr_fault+0x60d/0x13f0 [ 376.725225][ T30] exc_page_fault+0x5c/0xc0 [ 376.729718][ T30] asm_exc_page_fault+0x26/0x30 [ 376.734582][ T30] RIP: 0033:0x7f67b60678fc [ 376.738972][ T30] RSP: 002b:00007ffeae2d2fe0 EFLAGS: 00010202 [ 376.745162][ T30] RAX: 00007f67b400c000 RBX: 0000555594cdb500 RCX: 0000000000000001 [ 376.753159][ T30] RDX: 1ffffffff08817b9 RSI: 0000555594cd13c0 RDI: 0000000000000002 [ 376.761251][ T30] RBP: 00007ffeae2d34e0 R08: 0000555594cd13c8 R09: 00000000000002f7 [ 376.769214][ T30] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffeae2d3330 [ 376.777194][ T30] R13: 0000000000000005 R14: 00007ffeae2d3050 R15: 00007ffeae2d3120 [ 376.785434][ T30] [ 376.788484][ T30] INFO: task syz.4.423:7557 blocked for more than 144 seconds. [ 376.796060][ T30] Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 376.803406][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.812471][ T30] task:syz.4.423 state:D stack:23904 pid:7557 tgid:7557 ppid:5832 flags:0x00004004 [ 376.823227][ T30] Call Trace: [ 376.826515][ T30] [ 376.829430][ T30] __schedule+0xe58/0x5ad0 [ 376.835167][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 376.840466][ T30] ? __pfx___schedule+0x10/0x10 [ 376.845297][ T30] ? schedule+0x298/0x350 [ 376.849599][ T30] ? __pfx_lock_release+0x10/0x10 [ 376.854667][ T30] ? __wait_on_bit+0xc9/0x180 [ 376.859352][ T30] ? lock_acquire+0x2f/0xb0 [ 376.863895][ T30] ? schedule+0x1fd/0x350 [ 376.868209][ T30] schedule+0xe7/0x350 [ 376.872397][ T30] io_schedule+0xbf/0x130 [ 376.876719][ T30] bit_wait_io+0x15/0xe0 [ 376.881007][ T30] __wait_on_bit+0x62/0x180 [ 376.885485][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 376.890574][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 376.895942][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 376.902024][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 376.907733][ T30] do_get_write_access+0x933/0x1270 [ 376.912986][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 376.918947][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 376.925074][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 376.930650][ T30] __ext4_mark_inode_dirty+0x1a4/0x860 [ 376.936111][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 376.941671][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 376.947657][ T30] ? rcu_is_watching+0x12/0xc0 [ 376.952992][ T30] ? trace_jbd2_handle_start+0x1b9/0x240 [ 376.958623][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 376.963884][ T30] ? __ext4_journal_start_sb+0x19f/0x660 [ 376.969512][ T30] ? __ext4_journal_start_sb+0x1a8/0x660 [ 376.975163][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 376.980173][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 376.985576][ T30] ext4_dirty_inode+0xd9/0x130 [ 376.990363][ T30] ? rcu_is_watching+0x12/0xc0 [ 376.995109][ T30] __mark_inode_dirty+0x1f7/0xe60 [ 377.000145][ T30] generic_update_time+0xcf/0xf0 [ 377.005078][ T30] file_update_time+0x17d/0x1c0 [ 377.010170][ T30] ext4_page_mkwrite+0x368/0x1760 [ 377.015204][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 377.020705][ T30] ? mark_held_locks+0x9f/0xe0 [ 377.025464][ T30] do_page_mkwrite+0x177/0x380 [ 377.030227][ T30] do_pte_missing+0x29e/0x3e70 [ 377.035030][ T30] ? rcu_is_watching+0x12/0xc0 [ 377.039801][ T30] __handle_mm_fault+0x100a/0x2a10 [ 377.044937][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.050411][ T30] ? rcu_is_watching+0x12/0xc0 [ 377.055185][ T30] handle_mm_fault+0x3fa/0xaa0 [ 377.060003][ T30] do_user_addr_fault+0x60d/0x13f0 [ 377.065152][ T30] exc_page_fault+0x5c/0xc0 [ 377.069673][ T30] asm_exc_page_fault+0x26/0x30 [ 377.075099][ T30] RIP: 0033:0x7efcf0b47d0c [ 377.079519][ T30] RSP: 002b:00007ffedb888368 EFLAGS: 00010202 [ 377.085596][ T30] RAX: 0000001b30fefb30 RBX: 0000000000004be0 RCX: 0000000000004bd0 [ 377.094009][ T30] RDX: 0000000000004be0 RSI: 00007efcef9fb018 RDI: 0000001b30fefb40 [ 377.101974][ T30] RBP: 00007efcf1865720 R08: 0000001b30fefb30 R09: 0000000000000001 [ 377.109992][ T30] R10: 0000000000000009 R11: 00007efcef9fb208 R12: 00007efcef9fb008 [ 377.118205][ T30] R13: fffffffffffcfb30 R14: 0000000000000000 R15: 000000000000025f [ 377.126206][ T30] [ 377.129205][ T30] INFO: task syz.2.425:7564 blocked for more than 144 seconds. [ 377.136761][ T30] Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 377.144049][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.152719][ T30] task:syz.2.425 state:D stack:24976 pid:7564 tgid:7564 ppid:5834 flags:0x00004004 [ 377.162879][ T30] Call Trace: [ 377.166134][ T30] [ 377.169045][ T30] __schedule+0xe58/0x5ad0 [ 377.173457][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 377.178641][ T30] ? __pfx___schedule+0x10/0x10 [ 377.183535][ T30] ? schedule+0x298/0x350 [ 377.187864][ T30] ? __pfx_lock_release+0x10/0x10 [ 377.192924][ T30] ? __wait_on_bit+0xc9/0x180 [ 377.197603][ T30] ? lock_acquire+0x2f/0xb0 [ 377.202140][ T30] ? schedule+0x1fd/0x350 [ 377.206449][ T30] schedule+0xe7/0x350 [ 377.210529][ T30] io_schedule+0xbf/0x130 [ 377.215054][ T30] bit_wait_io+0x15/0xe0 [ 377.219294][ T30] __wait_on_bit+0x62/0x180 [ 377.223792][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 377.228707][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 377.234072][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 377.240062][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 377.245520][ T30] do_get_write_access+0x933/0x1270 [ 377.250740][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 377.256731][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 377.262794][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 377.268318][ T30] __ext4_mark_inode_dirty+0x1a4/0x860 [ 377.273783][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 377.278697][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 377.284666][ T30] ? rcu_is_watching+0x12/0xc0 [ 377.289404][ T30] ? trace_jbd2_handle_start+0x1b9/0x240 [ 377.295032][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 377.300323][ T30] ? __ext4_journal_start_sb+0x19f/0x660 [ 377.305992][ T30] ? __ext4_journal_start_sb+0x1a8/0x660 [ 377.311676][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 377.316906][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 377.322300][ T30] ext4_dirty_inode+0xd9/0x130 [ 377.327041][ T30] __mark_inode_dirty+0x1f7/0xe60 [ 377.332089][ T30] generic_update_time+0xcf/0xf0 [ 377.337024][ T30] file_update_time+0x17d/0x1c0 [ 377.341866][ T30] ext4_page_mkwrite+0x368/0x1760 [ 377.346872][ T30] ? irqentry_exit+0x3b/0x90 [ 377.351472][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.356663][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 377.362117][ T30] do_page_mkwrite+0x177/0x380 [ 377.366858][ T30] do_pte_missing+0x29e/0x3e70 [ 377.371626][ T30] ? rcu_is_watching+0x12/0xc0 [ 377.376391][ T30] __handle_mm_fault+0x100a/0x2a10 [ 377.381524][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.386975][ T30] ? rcu_is_watching+0x12/0xc0 [ 377.391764][ T30] handle_mm_fault+0x3fa/0xaa0 [ 377.396523][ T30] do_user_addr_fault+0x60d/0x13f0 [ 377.401629][ T30] exc_page_fault+0x5c/0xc0 [ 377.406108][ T30] asm_exc_page_fault+0x26/0x30 [ 377.410962][ T30] RIP: 0033:0x7f48c8c5cd8a [ 377.415367][ T30] RSP: 002b:00007ffdf251eb90 EFLAGS: 00010202 [ 377.421779][ T30] RAX: 0000001b3041f000 RBX: 00007f48c9a65720 RCX: 0000001b3041eff8 [ 377.429745][ T30] RDX: 0000001b30020218 RSI: 0000000000000008 RDI: 00007f48c9a65720 [ 377.437719][ T30] RBP: ffffffff81323895 R08: 00007f48c8f361f8 R09: 00007f48c8f22000 [ 377.445687][ T30] R10: 00007f48c7bfb008 R11: 0000000000000014 R12: 0000000000000014 [ 377.453649][ T30] R13: 00000000000001d6 R14: ffffffff8132383a R15: 0000000000000535 [ 377.461717][ T30] ? text_poke_loc_init+0xca/0x5e0 [ 377.466830][ T30] ? text_poke_loc_init+0x125/0x5e0 [ 377.472046][ T30] [ 377.475057][ T30] INFO: task syz.5.426:7575 blocked for more than 145 seconds. [ 377.482588][ T30] Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 377.489837][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.498497][ T30] task:syz.5.426 state:D stack:27960 pid:7575 tgid:7575 ppid:7220 flags:0x00000004 [ 377.508656][ T30] Call Trace: [ 377.511946][ T30] [ 377.514870][ T30] __schedule+0xe58/0x5ad0 [ 377.519277][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 377.524700][ T30] ? __pfx___schedule+0x10/0x10 [ 377.529549][ T30] ? schedule+0x298/0x350 [ 377.533908][ T30] ? __pfx_lock_release+0x10/0x10 [ 377.538924][ T30] ? __wait_on_bit+0xc9/0x180 [ 377.546354][ T30] ? lock_acquire+0x2f/0xb0 [ 377.550866][ T30] ? schedule+0x1fd/0x350 [ 377.555193][ T30] schedule+0xe7/0x350 [ 377.559250][ T30] io_schedule+0xbf/0x130 [ 377.563572][ T30] bit_wait_io+0x15/0xe0 [ 377.567787][ T30] __wait_on_bit+0x62/0x180 [ 377.572296][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 377.577228][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 377.582588][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 377.588544][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 377.593996][ T30] do_get_write_access+0x933/0x1270 [ 377.599178][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 377.605152][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 377.611228][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 377.616770][ T30] __ext4_mark_inode_dirty+0x1a4/0x860 [ 377.622469][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 377.627592][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 377.633589][ T30] ? rcu_is_watching+0x12/0xc0 [ 377.638332][ T30] ? trace_jbd2_handle_start+0x1b9/0x240 [ 377.643968][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 377.649144][ T30] ? __ext4_journal_start_sb+0x19f/0x660 [ 377.654783][ T30] ? __ext4_journal_start_sb+0x1a8/0x660 [ 377.660442][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 377.665375][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 377.670752][ T30] ext4_dirty_inode+0xd9/0x130 [ 377.675509][ T30] ? rcu_is_watching+0x12/0xc0 [ 377.680291][ T30] __mark_inode_dirty+0x1f7/0xe60 [ 377.685321][ T30] generic_update_time+0xcf/0xf0 [ 377.690282][ T30] file_update_time+0x17d/0x1c0 [ 377.695123][ T30] ext4_page_mkwrite+0x368/0x1760 [ 377.700189][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 377.705769][ T30] ? pte_alloc_one+0x2a3/0x390 [ 377.710564][ T30] do_page_mkwrite+0x177/0x380 [ 377.715326][ T30] do_pte_missing+0x29e/0x3e70 [ 377.720082][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 377.725257][ T30] ? __pmd_alloc+0x380/0x860 [ 377.730305][ T30] __handle_mm_fault+0x100a/0x2a10 [ 377.735421][ T30] ? __pfx_lock_release+0x10/0x10 [ 377.740439][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 377.745616][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.751112][ T30] handle_mm_fault+0x3fa/0xaa0 [ 377.755873][ T30] do_user_addr_fault+0x60d/0x13f0 [ 377.760981][ T30] exc_page_fault+0x5c/0xc0 [ 377.765461][ T30] asm_exc_page_fault+0x26/0x30 [ 377.770316][ T30] RIP: 0033:0x7f8edfc51c11 [ 377.774720][ T30] RSP: 002b:00007ffdd17c5f50 EFLAGS: 00010246 [ 377.780777][ T30] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 377.788722][ T30] RDX: 0000001b2c420000 RSI: 0000000000400000 RDI: 00007f8edfe72290 [ 377.796700][ T30] RBP: 00007ffdd17c61ac R08: 0000000000000004 R09: 0000000000040000 [ 377.804740][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 000000000000003f [ 377.812747][ T30] R13: 0000000000036286 R14: 0000000000035c64 R15: 00007ffdd17c6200 [ 377.820766][ T30] [ 377.823782][ T30] [ 377.823782][ T30] Showing all locks held in the system: [ 377.831787][ T30] 2 locks held by kworker/u8:0/11: [ 377.836889][ T30] #0: ffff8880b863eb18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 377.846814][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 377.858209][ T30] 1 lock held by khungtaskd/30: [ 377.863211][ T30] #0: ffffffff8e1bbd80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 377.873110][ T30] 4 locks held by kworker/u8:6/1327: [ 377.878380][ T30] #0: ffff888020ac3948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 377.889067][ T30] #1: ffffc90004a77d80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 377.900898][ T30] #2: ffff888035a460e0 (&type->s_umount_key#51){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 377.911433][ T30] #3: ffff888035b50b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 [ 377.921747][ T30] 2 locks held by getty/5591: [ 377.926393][ T30] #0: ffff88803740a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 377.936447][ T30] #1: ffffc90002fc62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 377.946645][ T30] 3 locks held by syz-executor/5821: [ 377.951946][ T30] #0: ffff88807893c148 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 377.962243][ T30] #1: ffff888035a46518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 377.971739][ T30] #2: ffff888035b52958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 377.981347][ T30] 3 locks held by syz.4.423/7557: [ 377.986340][ T30] #0: ffff888034640c40 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 377.996614][ T30] #1: ffff888035a46518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 378.006120][ T30] #2: ffff888035b52958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 378.015694][ T30] 3 locks held by syz.2.425/7564: [ 378.020711][ T30] #0: ffff888028f53580 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 378.030990][ T30] #1: ffff888035a46518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 378.040924][ T30] #2: ffff888035b52958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 378.050556][ T30] 3 locks held by syz.5.426/7575: [ 378.055566][ T30] #0: ffff888036214a90 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 378.065827][ T30] #1: ffff888035a46518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 378.075306][ T30] #2: ffff888035b52958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 378.084884][ T30] [ 378.087193][ T30] ============================================= [ 378.087193][ T30] [ 378.095589][ T30] NMI backtrace for cpu 0 [ 378.099897][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 378.110044][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.120092][ T30] Call Trace: [ 378.123374][ T30] [ 378.126295][ T30] dump_stack_lvl+0x116/0x1f0 [ 378.130968][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 378.135912][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.141880][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 378.147856][ T30] watchdog+0xf0c/0x1240 [ 378.152087][ T30] ? __pfx_watchdog+0x10/0x10 [ 378.156765][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.161952][ T30] ? __kthread_parkme+0x148/0x220 [ 378.166966][ T30] ? __pfx_watchdog+0x10/0x10 [ 378.171631][ T30] kthread+0x2c1/0x3a0 [ 378.175687][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.180884][ T30] ? __pfx_kthread+0x10/0x10 [ 378.185459][ T30] ret_from_fork+0x45/0x80 [ 378.189871][ T30] ? __pfx_kthread+0x10/0x10 [ 378.194454][ T30] ret_from_fork_asm+0x1a/0x30 [ 378.199213][ T30] [ 378.203881][ T30] Sending NMI from CPU 0 to CPUs 1: [ 378.209096][ C1] NMI backtrace for cpu 1 [ 378.209106][ C1] CPU: 1 UID: 0 PID: 6054 Comm: kworker/1:7 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 378.209122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.209130][ C1] Workqueue: events_power_efficient gc_worker [ 378.209149][ C1] RIP: 0010:match_held_lock+0x0/0xc0 [ 378.209165][ C1] Code: a0 dc 6c 8b e8 21 3e 2a f6 90 0f 0b 90 90 e9 58 ff ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <53> 48 39 77 10 48 89 fb 74 55 66 83 7f 22 1f 76 65 48 8b 46 08 48 [ 378.209178][ C1] RSP: 0018:ffffc9000304faf8 EFLAGS: 00000002 [ 378.209188][ C1] RAX: 0000000000000000 RBX: ffff8880265c5360 RCX: 0000000000000001 [ 378.209196][ C1] RDX: 0000000000000000 RSI: ffffffff8e1bbd20 RDI: ffff8880265c5360 [ 378.209205][ C1] RBP: ffffffff8e1bbd20 R08: 0000000000000000 R09: fffffbfff20be7da [ 378.209213][ C1] R10: ffffffff905f3ed7 R11: 0000000000000003 R12: ffff8880265c4880 [ 378.209221][ C1] R13: ffff8880265c5360 R14: 00000000ffffffff R15: 0000000000000000 [ 378.209230][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 378.209244][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.209253][ C1] CR2: 0000560eb9986680 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 378.209262][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.209269][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.209278][ C1] Call Trace: [ 378.209282][ C1] [ 378.209287][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 378.209307][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 378.209327][ C1] ? nmi_handle+0x1a7/0x5c0 [ 378.209341][ C1] ? __pfx_match_held_lock+0x10/0x10 [ 378.209354][ C1] ? default_do_nmi+0x6a/0x160 [ 378.209372][ C1] ? exc_nmi+0x170/0x1e0 [ 378.209389][ C1] ? end_repeat_nmi+0xf/0x53 [ 378.209407][ C1] ? __pfx_match_held_lock+0x10/0x10 [ 378.209421][ C1] ? __pfx_match_held_lock+0x10/0x10 [ 378.209435][ C1] ? __pfx_match_held_lock+0x10/0x10 [ 378.209448][ C1] [ 378.209452][ C1] [ 378.209456][ C1] lock_is_held_type+0xb0/0x150 [ 378.209470][ C1] __might_resched+0x473/0x5e0 [ 378.209486][ C1] ? __pfx___might_resched+0x10/0x10 [ 378.209502][ C1] gc_worker+0xa36/0x1760 [ 378.209518][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 378.209534][ C1] ? __pfx_gc_worker+0x10/0x10 [ 378.209548][ C1] ? process_one_work+0x921/0x1ba0 [ 378.209562][ C1] ? lock_acquire+0x2f/0xb0 [ 378.209574][ C1] ? process_one_work+0x921/0x1ba0 [ 378.209588][ C1] process_one_work+0x9c5/0x1ba0 [ 378.209603][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 378.209616][ C1] ? __pfx_process_one_work+0x10/0x10 [ 378.209628][ C1] ? rcu_is_watching+0x12/0xc0 [ 378.209647][ C1] ? assign_work+0x1a0/0x250 [ 378.209660][ C1] worker_thread+0x6c8/0xf00 [ 378.209675][ C1] ? __kthread_parkme+0x148/0x220 [ 378.209692][ C1] ? __pfx_worker_thread+0x10/0x10 [ 378.209705][ C1] kthread+0x2c1/0x3a0 [ 378.209720][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.209733][ C1] ? __pfx_kthread+0x10/0x10 [ 378.209749][ C1] ret_from_fork+0x45/0x80 [ 378.209761][ C1] ? __pfx_kthread+0x10/0x10 [ 378.209776][ C1] ret_from_fork_asm+0x1a/0x30 [ 378.209799][ C1] [ 378.526226][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 378.533084][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 378.543229][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.553269][ T30] Call Trace: [ 378.556530][ T30] [ 378.559445][ T30] dump_stack_lvl+0x3d/0x1f0 [ 378.564024][ T30] panic+0x71d/0x800 [ 378.567906][ T30] ? __pfx_panic+0x10/0x10 [ 378.572310][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 378.577665][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.583637][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 378.588990][ T30] ? watchdog+0xd76/0x1240 [ 378.593389][ T30] ? watchdog+0xd69/0x1240 [ 378.597814][ T30] watchdog+0xd87/0x1240 [ 378.602046][ T30] ? __pfx_watchdog+0x10/0x10 [ 378.606704][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.611886][ T30] ? __kthread_parkme+0x148/0x220 [ 378.616895][ T30] ? __pfx_watchdog+0x10/0x10 [ 378.621558][ T30] kthread+0x2c1/0x3a0 [ 378.625612][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.630794][ T30] ? __pfx_kthread+0x10/0x10 [ 378.635458][ T30] ret_from_fork+0x45/0x80 [ 378.639858][ T30] ? __pfx_kthread+0x10/0x10 [ 378.644439][ T30] ret_from_fork_asm+0x1a/0x30 [ 378.649199][ T30] [ 378.652384][ T30] Kernel Offset: disabled [ 378.656684][ T30] Rebooting in 86400 seconds..