last executing test programs: 15.770997031s ago: executing program 0 (id=506): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e0001006970366772657461700000003800028014000600fc00000000000000000000000000000014000700", @ANYRES32=r2], 0x6c}}, 0x0) 15.597919029s ago: executing program 4 (id=509): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, r3, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 14.433119123s ago: executing program 0 (id=511): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00250e00000000ffdbdf250c0000800800144c9c9b5f064a860280be3d603f63c71e3cf8f182a0f664b1899d781b0243dc0e0177e9c305cd0cd7583304fb1d6b43b44dfcac7a1d67488b71d72db8bd6209431bc807eb92699fbf9bd7562789b5c762fc660ac25668af150ac23429ffd33736f0fa"], 0x20}], 0x1, 0x0, 0x0, 0x24008010}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) ftruncate(r3, 0x800) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x24000, 0xa2) sendfile(r3, r6, 0x0, 0xf800) unshare(0x280) 13.608938739s ago: executing program 0 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000001000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = signalfd(r8, &(0x7f0000000040)={[0xb81]}, 0x8) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0286405, &(0x7f0000000380)={0x0, 0x3, {r7}, {0xee01}, 0x3, 0x7}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x89, 0x228042) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0286405, &(0x7f0000000440)={0x40, 0x7, {r7}, {0x0}, 0xf28, 0xfff}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240), 0xa020, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_mmap}, {@version_L}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x6}}, {@msize={'msize', 0x3d, 0x50}}, {@noxattr}, {@uname={'uname', 0x3d, '/$N'}}, {@cache_none}], [{@subj_type={'subj_type', 0x3d, 'ocfs2_dlmfs\x00'}}, {@fowner_lt={'fowner<', r11}}, {@appraise}, {@context={'context', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '&}]'}}, {@audit}, {@euid_gt={'euid>', r12}}, {@fowner_lt={'fowner<', r13}}, {@audit}, {@smackfsfloor}]}}) 13.405214254s ago: executing program 4 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) preadv2(r6, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r5, 0x0, 0x20000080) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) fstat(r1, &(0x7f0000000180)) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a004204ffffffffff0100000000000000000000000000017ad50000000000000000000000000000000000000000000000000000000000a400000000000000000000000000000000000000000000000000000000000000000000000000affd562b1ab3b40022a42eec7c3f00000000000000000000000000000000000000000001000000000000000000000000000000000000000000e222afbce4638f912b30124d95b2534553c62a6ac3f7685defa288e65336"], 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') 12.547305846s ago: executing program 0 (id=519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000000640)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 12.321595303s ago: executing program 0 (id=520): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$vcsa(&(0x7f0000000180), 0x60, 0x8c100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_open_procfs$pagemap(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x40000000], [0xffffffffffffffff, 0x0, 0x6]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) readv(r8, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/54, 0xfffffffffffffde8}, {&(0x7f0000000500)=""/6, 0x6}], 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x9, 0x0, [], [0xff, 0x0, 0x39a], [], [0x100000001]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) 10.169488611s ago: executing program 0 (id=525): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x10, &(0x7f0000000000)={0x8, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000380)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000545a37aef101b31a98677de253f8887579c72a7cfe46141df0e6dad8258fd9af7376fbf6fb2f44d5e926d42a31af3f4bb7db54ff03d072ff230fdf42b70fc1b91baafcd7cfa11c4ea2a8c8da897608d11523764114e45bcec36e241a39f8013bd1cf90db07070d55216fa2ec81c2e041edfb9e4a5a838c5f0a5779dd872ae7151e7aef7c2ba93c53e07c4543ba8c36fd3a7b0349ed8918056f62e730a934ee866421dbc073fa6a182b60aeed88f5262d8cc8c7f7bdea23b6561ef54e0c90aedccc432db269f1b8b704fb03ac3868903b0586408bded71bfc865643ad77a8441796", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/28], 0x50) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x50dc99b855743987, 0x5002) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@any, 0xffffffff}, @local, 0x0, 0x6, 0x7ffe, 0x800000000000001, 0x6, 0x9, 0x7f}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20049809) socket$inet6_tcp(0xa, 0x1, 0x0) 7.741383737s ago: executing program 3 (id=531): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) creat(0x0, 0xd931d3864d39dc0c) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="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", 0x11a) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x80, 0x20, 0x6, 0x5, {{0x5, 0x4, 0x0, 0x3b, 0xffffffffffffff9c, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) unlink(&(0x7f0000000400)='./file0\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') 7.233561323s ago: executing program 3 (id=532): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usbip_server_init(0x5) dup(0xffffffffffffffff) write$usbip_server(r1, &(0x7f0000000480)=@ret_unlink={{0x4, 0x3ff, 0x0, 0x1, 0x8}, {0x6ce3e69c}}, 0x30) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x313306, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') read$hiddev(r7, &(0x7f0000000100)=""/100, 0x64) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x8000}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000004adf0e0001000000e300050000000a000700", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x20, 0x1, 0x3, 0xfe, 0x2}}, 0x1c}}, 0x0) 7.181165017s ago: executing program 4 (id=533): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @broadcast}, &(0x7f00000002c0)=0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x5, '\x00', r6, r4, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000018", 0x39}], 0x1) 5.898652434s ago: executing program 2 (id=537): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000007c0), &(0x7f0000000800)=0xc) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000007c0), &(0x7f0000000800)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1fffffff, 0x900, 0x7fff}}) r8 = syz_io_uring_setup(0x4b27, &(0x7f000000a9c0)={0x0, 0x3468, 0x0, 0x0, 0x10000000}, &(0x7f000000aa40), &(0x7f000000aa80)) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @host, 0x0, 0x2925, 0x6a, 0x20000005, 0x4}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @host, 0x0, 0x2925, 0x6a, 0x20000005, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f0000000040)={{@my=0x1}, 0x800000000, 0x0, 0xd9f}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f0000000040)={{@my=0x1}, 0x800000000, 0x0, 0xd9f}) io_uring_register$IORING_REGISTER_FILES2(r8, 0x6, &(0x7f0000001480)={0x0, 0x1000000, 0x20000000, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES2(r8, 0x6, &(0x7f0000001480)={0x0, 0x1000000, 0x20000000, 0x0, 0x0}, 0x20) sendmsg$nl_xfrm(r6, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.617032472s ago: executing program 3 (id=539): mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x80}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x1b, 0x20000048, r5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xd555, 0x1, 0x4, 0xb9}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000080)=""/176, 0xb0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x40, 0x0, @fd_index=0x2, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x408102, 0x2) sendfile(r7, r7, 0x0, 0x5) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="f2a7f8b0e96d988b5a7ba20d9358fccb595018496cf7502d96de34a03c953c85c61e9b658d98c79d5b974d1356377f800ffa69e0c3d50cb59594cccdb3864e154970f594b4d95fcdac9c32afbfe9f67a24d194fb6fa46eee03da78dafd954e8418af15283791e1449121994ddefe0e18dc01cd2f40decde0c3a10981969dccf081e186cc5ca35f434dcd9f9864b02a7879165d550956b974b613590d993e0dc5eee678ae544024610a57902015028e69beff5fc45f9cf5c4a2ccb6bcf52c66f2cda26a0defde6cb50ca5bf57dc59b77598dda52815fc25b2effa74a9b549d11d4c6948c705c5a9beb430679769c9960dee067407b215"], 0x18}, 0x1, 0x0, 0x0, 0x88001}, 0x4000) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/152, 0x98}, {&(0x7f0000001c40)=""/4083, 0xff3}, {&(0x7f0000002d40)=""/157, 0x9d}], 0x3}, 0x6}], 0x3, 0x20, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) chdir(&(0x7f0000000000)='./file0\x00') r9 = syz_io_uring_setup(0x400010d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r9, 0x3516, 0x4, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5.489267297s ago: executing program 2 (id=540): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x7, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x3, 0x1, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x30, 0xb, {0xb, 0x1, "a7ea3163fd3bc51819"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc71e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0xd5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0xea6a, 0x4, 0x1, {0x22, 0x6a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x2, 0x6c, 0x4, 0x40, 0x9}, 0x7b, &(0x7f00000001c0)={0x5, 0xf, 0x7b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xa6, "d6e145c651e4584e14973bdf3cf2a198"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x8, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x30, 0x6, 0x9, 0xf000, 0xf, [0xff00cf, 0xffc000, 0xffc000, 0x7f8000, 0xff3f, 0xf]}, @ssp_cap={0x20, 0x10, 0xa, 0xfd, 0x5, 0x400, 0xf000, 0x8, [0xc000, 0x1bfc0, 0xc000, 0xffc030, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "669db1ad8710031109ca728c2c31ff78"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, &(0x7f0000000280)={0x40, 0xc, 0xf7, {0xf7, 0x22, "f5c582384b0c677afe05591710e8a0cb5a6ac9d6997bd0007bfdea7da144fe18ac1f285109d62640038dfc03223de251e36809e963745401bafb5cf5db56dd19680be9b4dfb916ad3fb54d98e495d7c1b5d291c92937527c8ad5b643f36f1d6782fcae3661768cb1f1520f69e52d71852ef0a86114bba8565d8707393ad02c4ec1ad1e6554ff859e6a242ee1aba38c4d929ab46569e344e270de226caa6d0804e8ccfa1f47562c7740d88213d6b26225ad7ffe72320c0054f3ec790cbf071a4108afa8efcf0103e20d8fd5c3a46ca9a67821923e71732e3616b906ab0def38a2ca428ef8fccbac39d7f356e31b66f2265664b6cf16"}}, &(0x7f0000000480)={0x0, 0x3, 0xec, @string={0xec, 0x3, "3ef7606cf952d6d6cdc276aad2e41cb72695cd432be3216ca023628b6bf5c62f4ac79e6ab3430b3b4b96755e4c5bf0442ca62bc7d391f56af4577406c3ae1e2ac8fe5cb01c9e5c865e396779b62e69bdcb6aec8bbf894a23251853638c1b8320fb13e9c9ed26d64c0d70051bd9ea798bbb5d97b8b58987d716b4bc0f403e0bb13bbdd2336572136eebd08d97711257ec7481b4ee4f90eecd374b14bef98a43f8148b9d4f820ec9f93af7c399502d1b5749b9dcf1efc0dd8a04d4e343cb223724d868ca9e8b0ef7dbd4c373f6ceac0f9a5e04f71693a5c11f442ef864b5a39e27bfb9063358bec6af2ab0"}}, &(0x7f0000000380)={0x0, 0x22, 0x17, {[@local=@item_4={0x3, 0x2, 0x2, "b01824af"}, @local=@item_4={0x3, 0x2, 0x2, "6bd35fdd"}, @main=@item_4={0x3, 0x0, 0x9, "fa7ed337"}, @main=@item_4={0x3, 0x0, 0xa, "f5a14263"}, @global=@item_012={0x2, 0x1, 0x2, "0986"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x54f}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0x87, "1e28d8ff0709e8c2a37c86edaf9795a87dce03edea0a3d70b54ecc5b7125bbde8a21dd370cfb8a944890a022a7ecd61c55e863095ca296d062a9b029208be35043cc07b45dfbb58548db1c574e44e2982c0db4e24fd89207b89bd78117042a6b38409090f920741137e05bc2632f1616db03d19b3d28f95872bc8bc0654b6ff5bd74478dbd953b"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x89}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x29}, &(0x7f00000006c0)={0x20, 0x1, 0xb2, "e085982e7e0320c7cc086b5c9281eb587a1594945e76fafe9890df1cdd291d7c1243f6636aa5bde8854369dbcef80d5cf4d6508cb98da219b3063edb52aa6a0f14f36549bcc9033017263ff31fec95873ceb317cb55d7b2250b1b0723a8cf2314112260e6cea60a74e850d1ba9562f4113360d60e1cd052966cf6074023b987a4948635a6979c535f599ba2e35209221efefbdfd91b0a5ba6ba4d676aecda084db37980538310c99150934247528c6cd9e07"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x17}}) 3.571178051s ago: executing program 3 (id=544): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, r3, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.512574429s ago: executing program 4 (id=545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000003780)={0x23, 0x0, 0x1}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f00000000c0)={0x23, 0x0, 0x2}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000003780)={0x23, 0x0, 0x1}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 3.217112422s ago: executing program 1 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r1, 0x57c85000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x4, 0x4002) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) epoll_create(0x8000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000180)=[{{0x4, 0x1}, {0x3}}, {{0x4, 0x1}, {0x2, 0x0, 0x1}}], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa1000000393d0007010000f8ffffffbf02000008000000b7000600000018010000696c6c2500000000002020207b1af8ff00000000bfa102000008000000b703fd0300000000000000000400"/144], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000000c0)={0xc, r7}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 3.145253104s ago: executing program 4 (id=547): syz_open_dev$evdev(0x0, 0x80000003, 0x100) r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a70000002000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="0000570000005700a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93fd85d8dee45edd40c9f33b79914dc57125cb7852d0236ea1f6ee6836dfdd5c95241e2e836abbde143bb1ce745a44bf90ff1b33e0ca883345ebb8f8efc358ac5e7e0a5d866f5031801612f7dd8764dc12f7a3c5ed0d87fbb17ddb44f54000adbe3853360"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x4, 0x14d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x29, 0x79, 0xcd, 0x40, 0x572, 0xcb06, 0xd00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13b, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0xc7, 0x3d, 0xa2, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x8001, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x2, 0x1, "cb1a49fd4d"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0xff, "af11"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, 0x3, [0x8, 0x9, 0x4], 0x2}]}], [{{0x9, 0x5, 0xe, 0xf, 0x40, 0x0, 0x2e, 0x0, [@generic={0xf7, 0xc, "0afc7708c8476c86ad2e5b6917e7756687a0553a3287a5050cd66e95ec3153cf54103688bb10de02c0b7c21181e3c7eaddcd8c3f71183163b39cf4f0a119d5c0501ef4f555fbacbdabdaf1021960d4381b75cefefd19e25162ab22ac4e6a9b9e23386a0f08dfb29e4f5f82f3ecc308e768a04a7b4f2b2f1dab822bae0e330d270660f132823b00e804dc6b08a3dd778e3c7e38dd4a6a15f2428c33eb36d7ea44997d91d503573c5d93ac654cc1aaff3e26705f197da21ee1e90171f20d1d5e12d3f06eba3159d262185fa04bce325c73dd6de087afa511bd8002cac815aa6a3db50ddb69bad4bace184a4cd7394f7aa2c8797bbdb1"}]}}]}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x200) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000001580), 0x7, 0xd44c1) 2.289210636s ago: executing program 3 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=0x64010101, 0x16, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000040009500000000e03486"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.261049682s ago: executing program 2 (id=549): add_key$fscrypt_provisioning(&(0x7f0000005600), &(0x7f0000005640)={'syz', 0x2}, &(0x7f0000005680)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000840), 0x800) connect$unix(r0, &(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200440c1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 897.810617ms ago: executing program 1 (id=550): socket$nl_rdma(0x10, 0x3, 0x14) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) io_setup(0x8, 0x0) (async) io_submit(0x0, 0x0, 0x0) (async) read$msr(r0, &(0x7f0000000400)=""/102400, 0x19000) (async) ioprio_get$uid(0x3, 0xee01) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x0, 0x0) 841.1299ms ago: executing program 3 (id=551): add_key$fscrypt_provisioning(&(0x7f0000005600), &(0x7f0000005640)={'syz', 0x2}, &(0x7f0000005680)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000840), 0x800) connect$unix(r0, &(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 745.696594ms ago: executing program 2 (id=552): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0xeeef0000, 0x1000}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffcbf) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000080000000c0099"], 0x20}}, 0x94) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) setsockopt$inet_int(r10, 0x0, 0x16, 0x0, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000000080)=0x3, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "adaf3ff225364f93c66ec088dde52afd95ca60ee2c9483198bc9182f69b3dbb5146139f500e3d0a535e97031fd94a717a040393a11f58300ec154d84ca9ddc49174619c51a4d6aae528f26deb8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x408080, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x40810) 709.442886ms ago: executing program 1 (id=553): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300)={0x7, 0x248}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r2 = inotify_init1(0x800) inotify_rm_watch(r2, 0x0) 312.227964ms ago: executing program 1 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400"], 0xfc}, 0x1, 0x0, 0x1000000000000000}, 0x0) 192.983462ms ago: executing program 1 (id=555): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x114) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) 148.118301ms ago: executing program 4 (id=556): getegid() mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0xffff7006}) lseek(r1, 0x5490, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r1, 0x1e, 0x0, 0x5, &(0x7f0000000580)=[0x0], 0x1, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0}, 0x40) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x10}, 0x32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r9, r0, 0x37, 0x0, r1, @void, @value=r7, @void, @void, r8}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000700)={0xe1a2, 0x25}) r10 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc2604110, &(0x7f0000000280)={0x0, [[0x803, 0x0, 0x0, 0x5], [0x0, 0xfffffffe], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {0x0, 0x7}, {}, {0x0, 0xfffffffd}, {0x0, 0x5e62}, {}, {}, {0x1}]}) socket$inet6_sctp(0xa, 0x1, 0x84) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c, 0x81800) openat$cgroup_ro(r0, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x10, 0x0, 0x9, 0xe}, {0x947, 0x8, 0xa, 0x3}, {0xe, 0xff, 0x3d, 0xffff7fff}, {0x2432, 0xb, 0x45, 0x8}, {0x0, 0x7c, 0xff, 0x7ff}, {0x6, 0x8, 0x8, 0x1}]}, 0x10) 137.166541ms ago: executing program 2 (id=557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000017230000", @ANYRES32=r0, @ANYBLOB="000000000000ff00b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 81.232348ms ago: executing program 1 (id=558): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, r3, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=559): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="21f533ff43dedc9c784ab5819fff", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000011401002cbd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) r4 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/183, 0xb7, 0x22, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0xb97d05d975354a1c, &(0x7f0000000400)=""/206, &(0x7f0000000180)=0xce) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r5], 0x50}, 0x1, 0xba01}, 0x20) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): ] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.267493][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.278573][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.287888][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.300125][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.309295][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.340153][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.355099][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.365299][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.377575][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.388373][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.399152][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.409290][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.420430][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.431959][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.483592][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.495041][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.506968][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.520378][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.530217][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.549078][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.560435][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.573406][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.592207][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.010794][ T5824] Bluetooth: hci0: command tx timeout [ 64.028068][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.040481][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.103392][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.113089][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.122147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.142349][ T5896] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.148852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.160036][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.169114][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.212577][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.240167][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.252480][ T5824] Bluetooth: hci2: command tx timeout [ 64.257928][ T5824] Bluetooth: hci3: command tx timeout [ 64.263682][ T5821] Bluetooth: hci1: command tx timeout [ 64.330717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.354138][ T5824] Bluetooth: hci4: command tx timeout [ 64.434841][ T5903] Cannot find add_set index 0 as target [ 64.558215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.671274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.671683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.918594][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.931204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.939999][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.965976][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.029547][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.037676][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.285566][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.302927][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.380422][ T5914] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 65.843323][ T5915] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 65.958694][ T5915] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 65.968219][ T5915] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 65.976180][ T5915] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 65.984076][ T5915] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 65.993024][ T5915] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 66.000877][ T5915] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 66.170888][ T5824] Bluetooth: hci0: command tx timeout [ 66.348728][ T5824] Bluetooth: hci3: command tx timeout [ 66.356090][ T5824] Bluetooth: hci1: command tx timeout [ 66.361637][ T5824] Bluetooth: hci2: command tx timeout [ 66.423393][ T5821] Bluetooth: hci4: command tx timeout [ 67.104605][ T5915] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.073614][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 68.073630][ T29] audit: type=1400 audit(1736849575.039:154): avc: denied { create } for pid=5907 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.630469][ T29] audit: type=1400 audit(1736849575.039:155): avc: denied { create } for pid=5907 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.658734][ T29] audit: type=1400 audit(1736849575.039:156): avc: denied { setopt } for pid=5907 comm="syz.2.8" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.840697][ T5922] netlink: 'syz.3.9': attribute type 29 has an invalid length. [ 69.850152][ T5925] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.771423][ T5932] netlink: 'syz.2.10': attribute type 29 has an invalid length. [ 70.780897][ T5932] netlink: 'syz.2.10': attribute type 29 has an invalid length. [ 70.994346][ T5932] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.489515][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.500656][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.538346][ T29] audit: type=1400 audit(1736849578.499:157): avc: denied { read write } for pid=5935 comm="syz.0.1" name="vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.290473][ T29] audit: type=1400 audit(1736849578.529:158): avc: denied { open } for pid=5935 comm="syz.0.1" path="/dev/vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.328860][ T29] audit: type=1400 audit(1736849578.789:159): avc: denied { ioctl } for pid=5935 comm="syz.0.1" path="/dev/vbi0" dev="devtmpfs" ino=952 ioctlcmd=0x5630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.376182][ T5940] validate_nla: 5 callbacks suppressed [ 72.376200][ T5940] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.391876][ T5940] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.401379][ T5940] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.409199][ T5940] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.417143][ T5940] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.425054][ T5940] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.432924][ T5940] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 72.534407][ T29] audit: type=1400 audit(1736849579.459:160): avc: denied { create } for pid=5935 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.979993][ T29] audit: type=1400 audit(1736849579.849:161): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.108154][ T29] audit: type=1400 audit(1736849579.879:162): avc: denied { ioctl } for pid=5935 comm="syz.0.1" path="socket:[8576]" dev="sockfs" ino=8576 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.355915][ T5860] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.371185][ T29] audit: type=1400 audit(1736849579.879:163): avc: denied { read write } for pid=5935 comm="syz.0.1" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.400402][ T29] audit: type=1400 audit(1736849579.879:164): avc: denied { open } for pid=5935 comm="syz.0.1" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.964349][ T5947] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.250599][ T29] audit: type=1400 audit(1736849579.879:165): avc: denied { ioctl } for pid=5935 comm="syz.0.1" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.362884][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 74.446843][ T5950] netlink: 'syz.4.14': attribute type 29 has an invalid length. [ 74.467444][ T5950] netlink: 'syz.4.14': attribute type 29 has an invalid length. [ 74.488644][ T5950] netlink: 'syz.4.14': attribute type 29 has an invalid length. [ 75.271603][ T29] audit: type=1400 audit(1736849580.049:166): avc: denied { write } for pid=5941 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.983899][ T5956] overlayfs: failed to resolve './file0': -2 [ 76.024221][ T29] audit: type=1400 audit(1736849580.109:167): avc: denied { create } for pid=5941 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.064251][ T29] audit: type=1400 audit(1736849582.229:168): avc: denied { create } for pid=5951 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.067134][ T5860] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.086546][ T29] audit: type=1400 audit(1736849583.029:169): avc: denied { write } for pid=5951 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.332941][ T29] audit: type=1400 audit(1736849583.029:170): avc: denied { nlmsg_write } for pid=5951 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.500548][ T5860] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 76.508337][ T5860] usb 1-1: can't read configurations, error -71 [ 76.918321][ T5967] xt_l2tp: v2 tid > 0xffff: 262144 [ 77.826910][ T967] cfg80211: failed to load regulatory.db [ 78.025257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.040626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.169511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.178446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.290739][ T5977] validate_nla: 4 callbacks suppressed [ 78.290777][ T5977] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 78.317886][ T5977] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 78.337611][ T5977] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 78.346976][ T5977] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 78.355983][ T5977] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 78.365256][ T5977] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 78.374489][ T5977] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 78.487966][ T29] audit: type=1400 audit(1736849585.199:171): avc: denied { write } for pid=5973 comm="syz.2.21" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.169950][ T5957] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.189590][ T5979] mmap: syz.2.21 (5979) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.539015][ T5981] netlink: 'syz.0.17': attribute type 29 has an invalid length. [ 79.548740][ T5981] netlink: 'syz.0.17': attribute type 29 has an invalid length. [ 79.558421][ T5981] netlink: 'syz.0.17': attribute type 29 has an invalid length. [ 79.576482][ T5981] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.706332][ T29] audit: type=1400 audit(1736849586.669:172): avc: denied { create } for pid=5973 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.731079][ T5902] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.797901][ T29] audit: type=1400 audit(1736849586.669:173): avc: denied { write } for pid=5973 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.487899][ T5990] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 83.362278][ T29] audit: type=1400 audit(1736849590.199:174): avc: denied { create } for pid=6001 comm="syz.0.26" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.517867][ T29] audit: type=1400 audit(1736849590.429:175): avc: denied { ioctl } for pid=6001 comm="syz.0.26" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8760 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.136716][ T29] audit: type=1400 audit(1736849590.539:176): avc: denied { write } for pid=6004 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.015275][ T6013] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.32'. [ 85.059567][ T6017] loop9: detected capacity change from 0 to 7 [ 85.086832][ T6017] Dev loop9: unable to read RDB block 7 [ 85.098197][ T6017] loop9: unable to read partition table [ 85.105312][ T6017] loop9: partition table beyond EOD, truncated [ 85.118100][ T6017] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.208217][ T6022] block device autoloading is deprecated and will be removed. [ 85.320386][ T5860] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.500437][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.508362][ T5860] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 85.550454][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 85.565212][ T5860] usb 3-1: Product: syz [ 85.569398][ T5860] usb 3-1: Manufacturer: syz [ 85.574184][ T5860] usb 3-1: SerialNumber: syz [ 85.590188][ T5860] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 85.641166][ T5902] usb 1-1: device descriptor read/64, error -71 [ 85.653290][ T6032] FAULT_INJECTION: forcing a failure. [ 85.653290][ T6032] name failslab, interval 1, probability 0, space 0, times 1 [ 85.666000][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz.1.35 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 85.676526][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.686608][ T6032] Call Trace: [ 85.689899][ T6032] [ 85.692839][ T6032] dump_stack_lvl+0x16c/0x1f0 [ 85.697554][ T6032] should_fail_ex+0x497/0x5b0 [ 85.702251][ T6032] ? fs_reclaim_acquire+0xae/0x150 [ 85.707381][ T6032] should_failslab+0xc2/0x120 [ 85.712075][ T6032] __kmalloc_noprof+0xcb/0x510 [ 85.716853][ T6032] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 85.722504][ T6032] tomoyo_realpath_from_path+0xb9/0x720 [ 85.728075][ T6032] ? tomoyo_path_number_perm+0x235/0x590 [ 85.733728][ T6032] ? tomoyo_path_number_perm+0x235/0x590 [ 85.739382][ T6032] tomoyo_path_number_perm+0x248/0x590 [ 85.744854][ T6032] ? tomoyo_path_number_perm+0x235/0x590 [ 85.750506][ T6032] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.756531][ T6032] ? __pfx_lock_release+0x10/0x10 [ 85.761569][ T6032] ? trace_lock_acquire+0x14e/0x1f0 [ 85.766790][ T6032] ? lock_acquire+0x2f/0xb0 [ 85.771300][ T6032] ? __fget_files+0x40/0x3a0 [ 85.775915][ T6032] ? __fget_files+0x206/0x3a0 [ 85.780608][ T6032] security_file_ioctl+0x9b/0x240 [ 85.785644][ T6032] __x64_sys_ioctl+0xb7/0x200 [ 85.790342][ T6032] do_syscall_64+0xcd/0x250 [ 85.794861][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.800753][ T6032] RIP: 0033:0x7f4101185d29 [ 85.805174][ T6032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.824775][ T6032] RSP: 002b:00007f40fefb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.833203][ T6032] RAX: ffffffffffffffda RBX: 00007f4101376160 RCX: 00007f4101185d29 [ 85.841194][ T6032] RDX: 00000000200002c0 RSI: 0000000000004b49 RDI: 0000000000000005 [ 85.849175][ T6032] RBP: 00007f40fefb4090 R08: 0000000000000000 R09: 0000000000000000 [ 85.857153][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.865141][ T6032] R13: 0000000000000000 R14: 00007f4101376160 R15: 00007fff7d58f138 [ 85.873125][ T6032] [ 85.877636][ T6032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.997907][ T29] audit: type=1400 audit(1736849592.959:177): avc: denied { bind } for pid=6035 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.027650][ T6036] Bluetooth: MGMT ver 1.23 [ 86.032964][ T5902] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.040707][ T29] audit: type=1400 audit(1736849592.989:178): avc: denied { write } for pid=6035 comm="syz.4.36" path="socket:[7813]" dev="sockfs" ino=7813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.075844][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 86.210993][ T5902] usb 1-1: device descriptor read/64, error -71 [ 86.340060][ T5902] usb usb1-port1: attempt power cycle [ 86.355951][ T5860] vp7045: USB control message 'in' went wrong. [ 86.362455][ T5860] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 86.374727][ T5860] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 86.394169][ T5860] usb 3-1: USB disconnect, device number 2 [ 86.460928][ T5804] udevd[5804]: setting mode of /dev/bus/usb/003/002 to 020664 failed: No such file or directory [ 86.490511][ T5804] udevd[5804]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 86.770513][ T5902] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.806481][ T5902] usb 1-1: device descriptor read/8, error -71 [ 86.918436][ T29] audit: type=1400 audit(1736849593.879:179): avc: denied { create } for pid=6040 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.170741][ T5902] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.200482][ T29] audit: type=1400 audit(1736849593.909:180): avc: denied { getopt } for pid=6040 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.229594][ T5902] usb 1-1: device descriptor read/8, error -71 [ 87.340752][ T5902] usb usb1-port1: unable to enumerate USB device [ 89.492368][ T6051] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 89.504460][ T6051] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.839113][ T6056] openvswitch: netlink: Message has 2 unknown bytes. [ 89.846313][ T6056] openvswitch: netlink: Actions may not be safe on all matching packets [ 89.858162][ T6056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41'. [ 89.880359][ T29] audit: type=1400 audit(1736849596.799:181): avc: denied { connect } for pid=6040 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.900600][ T29] audit: type=1400 audit(1736849596.799:182): avc: denied { create } for pid=6054 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.993275][ T6041] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=6041 comm=syz.3.37 [ 90.030451][ T29] audit: type=1400 audit(1736849596.799:183): avc: denied { ioctl } for pid=6054 comm="syz.4.41" path="socket:[7857]" dev="sockfs" ino=7857 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.648086][ T29] audit: type=1400 audit(1736849596.799:184): avc: denied { ioctl } for pid=6054 comm="syz.4.41" path="socket:[7858]" dev="sockfs" ino=7858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.766599][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.44'. [ 91.074197][ T29] audit: type=1400 audit(1736849598.029:185): avc: denied { write } for pid=6064 comm="syz.1.43" name="ptype" dev="proc" ino=4026532983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.615498][ T29] audit: type=1400 audit(1736849598.579:186): avc: denied { read } for pid=6075 comm="syz.2.49" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.689243][ T29] audit: type=1400 audit(1736849598.629:187): avc: denied { open } for pid=6075 comm="syz.2.49" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.913209][ T5860] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.222992][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 94.194378][ T5860] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 94.202657][ T5860] usb 1-1: config 8 has no interface number 0 [ 94.208769][ T5860] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 94.234418][ T5860] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.310310][ T5860] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 94.326685][ T5860] usb 1-1: config 8 interface 39 has no altsetting 0 [ 94.357611][ T5860] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 94.377116][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.397096][ T5860] usb 1-1: Product: syz [ 94.407499][ T5860] usb 1-1: Manufacturer: syz [ 94.416742][ T5860] usb 1-1: SerialNumber: syz [ 94.447385][ T29] audit: type=1400 audit(1736849601.409:188): avc: denied { mount } for pid=6094 comm="syz.2.55" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.848590][ T6103] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 94.973428][ T29] audit: type=1400 audit(1736849601.689:189): avc: denied { search } for pid=6094 comm="syz.2.55" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.998371][ T5860] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 95.022521][ T6078] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 95.057065][ T5860] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 95.074514][ T29] audit: type=1400 audit(1736849601.819:190): avc: denied { map } for pid=6094 comm="syz.2.55" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.101454][ T5860] usb 1-1: USB disconnect, device number 8 [ 95.500518][ T29] audit: type=1400 audit(1736849601.839:191): avc: denied { read write } for pid=6094 comm="syz.2.55" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.874180][ T29] audit: type=1400 audit(1736849602.109:192): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.914641][ T6119] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure [ 96.339765][ T29] audit: type=1400 audit(1736849603.299:193): avc: denied { read } for pid=6133 comm="syz.3.64" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.502572][ T29] audit: type=1400 audit(1736849603.299:194): avc: denied { open } for pid=6133 comm="syz.3.64" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.779422][ T6140] validate_nla: 13 callbacks suppressed [ 96.779460][ T6140] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 96.808953][ T6140] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 96.828834][ T6140] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 96.838212][ T6140] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 96.847530][ T6140] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 96.856774][ T6140] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 96.865962][ T6140] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 98.244140][ T6131] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.253224][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.402429][ T29] audit: type=1400 audit(1736849605.369:195): avc: denied { create } for pid=6144 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.420404][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 98.426786][ T29] audit: type=1400 audit(1736849605.379:196): avc: denied { ioctl } for pid=6144 comm="syz.2.68" path="socket:[9114]" dev="sockfs" ino=9114 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.426821][ T29] audit: type=1400 audit(1736849605.379:197): avc: denied { create } for pid=6144 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.456936][ T46] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 98.480021][ T46] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.488716][ T46] usb 4-1: Product: syz [ 98.493265][ T46] usb 4-1: Manufacturer: syz [ 98.497873][ T46] usb 4-1: SerialNumber: syz [ 98.505232][ T46] usb 4-1: config 0 descriptor?? [ 98.677341][ T29] audit: type=1400 audit(1736849605.609:198): avc: denied { create } for pid=6151 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.840228][ T6155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.851360][ T6155] xt_l2tp: v2 tid > 0xffff: 262144 [ 99.468819][ T46] usb 4-1: USB disconnect, device number 3 [ 99.852403][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.118773][ T6165] tty tty4: ldisc open failed (-12), clearing slot 3 [ 101.359222][ T6178] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=6178 comm=syz.1.73 [ 101.386403][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 101.386446][ T29] audit: type=1400 audit(1736849608.349:206): avc: denied { accept } for pid=6166 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.964114][ T6186] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 102.440366][ T5902] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 102.653475][ T6196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.700077][ T6196] xt_l2tp: v2 tid > 0xffff: 262144 [ 103.519772][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.540512][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 103.596905][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 6783, setting to 64 [ 103.628818][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.682426][ T5902] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 103.696108][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.707965][ T5902] usb 4-1: Product: syz [ 103.718144][ T5902] usb 4-1: Manufacturer: syz [ 103.743175][ T5902] usb 4-1: SerialNumber: syz [ 103.749922][ T29] audit: type=1400 audit(1736849610.709:207): avc: denied { create } for pid=6199 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.774644][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 103.785082][ T5902] usb 4-1: config 0 descriptor?? [ 103.804139][ T6181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.816037][ T5902] option 4-1:0.0: GSM modem (1-port) converter detected [ 103.851031][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 103.875259][ T6200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.83'. [ 103.879269][ T6202] xt_hashlimit: size too large, truncated to 1048576 [ 103.902649][ T6202] xt_hashlimit: max too large, truncated to 1048576 [ 103.935943][ T5821] block nbd0: Receive control failed (result -107) [ 103.991223][ T6200] nbd0: detected capacity change from 0 to 256 [ 104.007284][ T5958] block nbd0: Dead connection, failed to find a fallback [ 104.033661][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.063807][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.144871][ T29] audit: type=1400 audit(1736849611.109:208): avc: denied { read write } for pid=6180 comm="syz.3.77" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.286294][ T29] audit: type=1400 audit(1736849611.109:209): avc: denied { open } for pid=6180 comm="syz.3.77" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.357362][ T29] audit: type=1400 audit(1736849611.209:210): avc: denied { unlink } for pid=6180 comm="syz.3.77" name="#1" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.385655][ T29] audit: type=1400 audit(1736849611.219:211): avc: denied { mount } for pid=6180 comm="syz.3.77" name="/" dev="overlay" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.498593][ T29] audit: type=1400 audit(1736849611.459:212): avc: denied { watch watch_reads } for pid=6210 comm="syz.0.86" path="/11/file0" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.953856][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.190416][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 105.213163][ T5902] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 105.222604][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 105.230900][ T5902] usb 5-1: Product: syz [ 105.235340][ T5902] usb 5-1: Manufacturer: syz [ 105.240040][ T5902] usb 5-1: SerialNumber: syz [ 105.256545][ T5902] usb 5-1: config 0 descriptor?? [ 105.269083][ T29] audit: type=1400 audit(1736849612.229:213): avc: denied { sys_module } for pid=6218 comm="syz.0.88" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 105.337646][ T5861] usb 4-1: USB disconnect, device number 4 [ 105.527290][ T5860] usb 5-1: USB disconnect, device number 2 [ 105.565700][ T5861] option 4-1:0.0: device disconnected [ 105.844114][ T29] audit: type=1400 audit(1736849612.769:214): avc: denied { read write } for pid=6231 comm="syz.3.89" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.460838][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 106.472287][ T29] audit: type=1400 audit(1736849612.779:215): avc: denied { open } for pid=6231 comm="syz.3.89" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.107387][ T6243] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.394042][ T29] audit: type=1400 audit(1736849612.779:216): avc: denied { ioctl } for pid=6231 comm="syz.3.89" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.541172][ T29] audit: type=1400 audit(1736849612.779:217): avc: denied { set_context_mgr } for pid=6231 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 107.560886][ T29] audit: type=1400 audit(1736849613.419:218): avc: denied { read write } for pid=6228 comm="syz.1.91" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 107.585512][ T29] audit: type=1400 audit(1736849613.419:219): avc: denied { open } for pid=6228 comm="syz.1.91" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 107.609506][ T29] audit: type=1400 audit(1736849614.509:220): avc: denied { create } for pid=6249 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.635792][ T29] audit: type=1400 audit(1736849614.509:221): avc: denied { create } for pid=6249 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 107.685805][ T6252] capability: warning: `syz.0.97' uses 32-bit capabilities (legacy support in use) [ 107.740344][ T5861] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.056248][ T29] audit: type=1400 audit(1736849615.019:222): avc: denied { create } for pid=6249 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.061678][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.157552][ T6263] input: syz1 as /devices/virtual/input/input5 [ 108.320633][ T29] audit: type=1400 audit(1736849615.099:223): avc: denied { read write } for pid=6256 comm="syz.0.98" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.630323][ T29] audit: type=1400 audit(1736849615.099:224): avc: denied { open } for pid=6256 comm="syz.0.98" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.667548][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.678264][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.702152][ T5861] usb 2-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 108.711351][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.720703][ T5861] usb 2-1: Product: syz [ 108.725364][ T5861] usb 2-1: Manufacturer: syz [ 108.756351][ T5861] usb 2-1: SerialNumber: syz [ 108.764196][ T5861] usb 2-1: config 0 descriptor?? [ 108.773252][ T5861] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2304:021a, interface 0, class 0) [ 108.790324][ T5861] em28xx 2-1:0.0: Device initialization failed. [ 108.797018][ T5861] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 109.388273][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 110.050064][ T6282] FAULT_INJECTION: forcing a failure. [ 110.050064][ T6282] name failslab, interval 1, probability 0, space 0, times 0 [ 110.062788][ T6282] CPU: 1 UID: 0 PID: 6282 Comm: syz.3.102 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 110.073389][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.083457][ T6282] Call Trace: [ 110.086739][ T6282] [ 110.089676][ T6282] dump_stack_lvl+0x16c/0x1f0 [ 110.094371][ T6282] should_fail_ex+0x497/0x5b0 [ 110.099082][ T6282] ? fs_reclaim_acquire+0xae/0x150 [ 110.104195][ T6282] should_failslab+0xc2/0x120 [ 110.108876][ T6282] __kmalloc_noprof+0xcb/0x510 [ 110.113634][ T6282] ? d_absolute_path+0x137/0x1b0 [ 110.118570][ T6282] ? rcu_is_watching+0x12/0xc0 [ 110.123336][ T6282] tomoyo_encode2+0x100/0x3e0 [ 110.128010][ T6282] tomoyo_encode+0x29/0x50 [ 110.132423][ T6282] tomoyo_realpath_from_path+0x19d/0x720 [ 110.138060][ T6282] tomoyo_path_number_perm+0x248/0x590 [ 110.143508][ T6282] ? tomoyo_path_number_perm+0x235/0x590 [ 110.149132][ T6282] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 110.155118][ T6282] ? __pfx_lock_release+0x10/0x10 [ 110.160133][ T6282] ? trace_lock_acquire+0x14e/0x1f0 [ 110.165343][ T6282] ? lock_acquire+0x2f/0xb0 [ 110.169832][ T6282] ? __fget_files+0x40/0x3a0 [ 110.174414][ T6282] ? __fget_files+0x206/0x3a0 [ 110.179089][ T6282] security_file_ioctl+0x9b/0x240 [ 110.184107][ T6282] __x64_sys_ioctl+0xb7/0x200 [ 110.188781][ T6282] do_syscall_64+0xcd/0x250 [ 110.193283][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.199169][ T6282] RIP: 0033:0x7fe0b1d85d29 [ 110.203659][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.223256][ T6282] RSP: 002b:00007fe0b2c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.231663][ T6282] RAX: ffffffffffffffda RBX: 00007fe0b1f76160 RCX: 00007fe0b1d85d29 [ 110.239626][ T6282] RDX: 00000000200002c0 RSI: 0000000000004b49 RDI: 0000000000000005 [ 110.247585][ T6282] RBP: 00007fe0b2c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 110.255545][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.263505][ T6282] R13: 0000000000000000 R14: 00007fe0b1f76160 R15: 00007ffebd48c1b8 [ 110.271483][ T6282] [ 110.281346][ T6282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.290184][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.566863][ T5862] usb 2-1: USB disconnect, device number 2 [ 110.600967][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 110.608955][ T5902] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 110.621416][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 110.636437][ T5902] usb 5-1: Product: syz [ 110.648377][ T5902] usb 5-1: Manufacturer: syz [ 110.663328][ T5902] usb 5-1: SerialNumber: syz [ 110.681576][ T5902] usb 5-1: config 0 descriptor?? [ 111.249734][ T5862] usb 5-1: USB disconnect, device number 3 [ 111.369277][ T6294] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 111.881004][ T6297] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 111.890138][ T6297] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 111.911556][ T6297] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 111.919619][ T6297] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 111.927637][ T6297] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 111.935655][ T6297] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 111.943693][ T6297] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 112.132660][ T6310] netlink: 'syz.0.109': attribute type 29 has an invalid length. [ 112.145821][ T6310] netlink: 'syz.0.109': attribute type 29 has an invalid length. [ 112.159158][ T6310] netlink: 'syz.0.109': attribute type 29 has an invalid length. [ 113.683556][ T6313] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=6313 comm=syz.2.111 [ 113.823505][ T6314] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.928105][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.115'. [ 113.934682][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 113.934698][ T29] audit: type=1400 audit(1736849620.889:235): avc: denied { ioctl } for pid=6312 comm="syz.0.113" path="socket:[10338]" dev="sockfs" ino=10338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.073291][ T6321] syz.4.114 uses obsolete (PF_INET,SOCK_PACKET) [ 114.232360][ T6305] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=6305 comm=syz.3.112 [ 115.820623][ T5861] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.119782][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.327061][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.458944][ T5861] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 116.468258][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.311785][ T5861] usb 2-1: config 0 descriptor?? [ 118.380360][ T6342] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.610430][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.832039][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 120.080407][ T6359] xt_l2tp: v2 tid > 0xffff: 262144 [ 120.660861][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 120.666915][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 120.694301][ T5861] usb 2-1: USB disconnect, device number 3 [ 120.758351][ T5863] usb 3-1: string descriptor 0 read error: -71 [ 120.765412][ T5863] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 120.802920][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 120.809994][ T29] audit: type=1400 audit(1736849627.769:236): avc: denied { mount } for pid=6364 comm="syz.3.129" name="/" dev="rpc_pipefs" ino=9658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 120.855749][ T5863] usb 3-1: config 0 descriptor?? [ 120.918068][ T5863] usb 3-1: can't set config #0, error -71 [ 120.944643][ T6372] ip6t_srh: unknown srh match flags 4000 [ 120.954345][ T5863] usb 3-1: USB disconnect, device number 3 [ 121.019538][ T29] audit: type=1400 audit(1736849627.799:237): avc: denied { open } for pid=6365 comm="syz.4.132" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 121.913862][ T29] audit: type=1400 audit(1736849628.859:238): avc: denied { execute } for pid=6377 comm="syz.0.134" path="/23/cpu.stat" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.970065][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.137'. [ 121.997304][ T29] audit: type=1400 audit(1736849628.889:239): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 122.440297][ T6399] validate_nla: 11 callbacks suppressed [ 122.440352][ T6399] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 122.467207][ T6399] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 122.480772][ T6399] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 122.493245][ T6399] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 122.505429][ T6399] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 122.516627][ T6399] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 122.529575][ T6399] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 122.609393][ T6399] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.018452][ T29] audit: type=1400 audit(1736849628.929:240): avc: denied { name_bind } for pid=6385 comm="syz.1.137" src=4096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 123.047146][ T29] audit: type=1400 audit(1736849628.949:241): avc: denied { mounton } for pid=6385 comm="syz.1.137" path="/26/file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.059547][ T29] audit: type=1400 audit(1736849630.219:242): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 124.671757][ T6404] netlink: 'syz.3.139': attribute type 29 has an invalid length. [ 124.694508][ T6404] netlink: 'syz.3.139': attribute type 29 has an invalid length. [ 126.140710][ T6409] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 128.031050][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.902676][ T29] audit: type=1326 audit(1736849636.869:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4101185d29 code=0x7ffc0000 [ 129.956501][ T6430] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 129.966067][ T46] usb 3-1: device not accepting address 4, error -71 [ 129.968423][ T29] audit: type=1326 audit(1736849636.879:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4101185d29 code=0x7ffc0000 [ 130.014363][ T6430] SELinux: failed to load policy [ 130.017471][ T29] audit: type=1326 audit(1736849636.879:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4101185d29 code=0x7ffc0000 [ 130.044344][ T29] audit: type=1326 audit(1736849636.919:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4101185d29 code=0x7ffc0000 [ 130.099837][ T29] audit: type=1400 audit(1736849636.919:247): avc: denied { create } for pid=6429 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.139698][ T29] audit: type=1326 audit(1736849636.919:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4101185d29 code=0x7ffc0000 [ 130.184419][ T6438] syz.4.154 (6438): /proc/6438/oom_adj is deprecated, please use /proc/6438/oom_score_adj instead. [ 130.364019][ T6437] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 130.390568][ T29] audit: type=1326 audit(1736849636.919:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4101185d29 code=0x7ffc0000 [ 130.445290][ T29] audit: type=1400 audit(1736849636.919:250): avc: denied { create } for pid=6429 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.464918][ T29] audit: type=1326 audit(1736849636.919:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4101185d29 code=0x7ffc0000 [ 130.525749][ T29] audit: type=1326 audit(1736849636.919:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4101185d29 code=0x7ffc0000 [ 130.790412][ T5862] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.920349][ T5862] usb 4-1: device descriptor read/64, error -71 [ 130.985104][ T6456] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 131.288843][ T5861] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.350936][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.459253][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.475810][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.485951][ T5861] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 131.629637][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.720573][ T5862] usb 4-1: device descriptor read/64, error -71 [ 131.826574][ T5861] usb 2-1: config 0 descriptor?? [ 131.832549][ T5862] usb usb4-port1: attempt power cycle [ 132.181766][ T5862] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.327615][ T5862] usb 4-1: device descriptor read/8, error -71 [ 132.833515][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839894][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.211198][ T5862] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.253295][ T5862] usb 4-1: device descriptor read/8, error -71 [ 133.287212][ T6482] veth0_vlan: entered allmulticast mode [ 133.317515][ T6482] ªªªªªª: renamed from vlan0 [ 133.361715][ T5862] usb usb4-port1: unable to enumerate USB device [ 135.099784][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 135.099886][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 135.133143][ T5861] usb 2-1: USB disconnect, device number 4 [ 135.278749][ T6500] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.568400][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 135.568444][ T29] audit: type=1400 audit(1736849642.409:291): avc: denied { connect } for pid=6495 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.994694][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.999197][ T6500] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.034605][ T29] audit: type=1400 audit(1736849642.999:292): avc: denied { getopt } for pid=6502 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.103033][ T29] audit: type=1400 audit(1736849642.999:293): avc: denied { connect } for pid=6502 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.122782][ T29] audit: type=1400 audit(1736849642.999:294): avc: denied { name_connect } for pid=6502 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 136.142745][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.205625][ T29] audit: type=1400 audit(1736849643.129:295): avc: denied { ioctl } for pid=6499 comm="syz.4.174" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.417557][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 136.502666][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50320, setting to 1024 [ 136.678606][ T6518] validate_nla: 8 callbacks suppressed [ 136.678672][ T6518] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 136.679999][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.787439][ T5863] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.797800][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.809393][ T5863] usb 3-1: config 0 descriptor?? [ 136.816457][ T6501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.907725][ T6523] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 136.920016][ T6523] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 136.943547][ T6523] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 136.983806][ T6523] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 137.284082][ T6522] Zero length message leads to an empty skb [ 137.329212][ T29] audit: type=1400 audit(1736849644.239:296): avc: denied { ioctl } for pid=6521 comm="syz.0.179" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 137.363437][ T29] audit: type=1400 audit(1736849644.249:297): avc: denied { mounton } for pid=6521 comm="syz.0.179" path="/proc/136" dev="proc" ino=9967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.368631][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 137.559681][ T29] audit: type=1400 audit(1736849644.519:298): avc: denied { write } for pid=6527 comm="syz.1.181" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.580752][ T6531] netlink: 84 bytes leftover after parsing attributes in process `syz.4.182'. [ 137.996089][ T5863] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 138.463793][ T5861] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.471571][ T5863] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 138.472042][ T2142] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.522298][ T29] audit: type=1400 audit(1736849645.489:299): avc: denied { write } for pid=6543 comm="syz.4.187" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.659931][ T5861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.693735][ T5861] usb 2-1: config 245 has too many interfaces: 77, using maximum allowed: 32 [ 138.852133][ T2142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.903522][ T5861] usb 2-1: config 245 has an invalid descriptor of length 154, skipping remainder of the config [ 138.937404][ T2142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.099099][ T8] usb 3-1: USB disconnect, device number 6 [ 139.104651][ T5861] usb 2-1: config 245 has 0 interfaces, different from the descriptor's value: 77 [ 139.115719][ T2142] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 139.227648][ T2142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.238151][ T5861] usb 2-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=c7.7a [ 139.247414][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.255859][ T5861] usb 2-1: Product: syz [ 139.260035][ T5861] usb 2-1: Manufacturer: syz [ 139.297517][ T2142] usb 4-1: config 0 descriptor?? [ 139.342562][ T5861] usb 2-1: SerialNumber: syz [ 140.332761][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.512745][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.587421][ T5861] usb 2-1: USB disconnect, device number 5 [ 141.288377][ T6566] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.140463][ T29] audit: type=1400 audit(1736849648.409:300): avc: denied { read } for pid=6556 comm="syz.4.193" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.167483][ T5862] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.815797][ T29] audit: type=1400 audit(1736849648.419:301): avc: denied { open } for pid=6556 comm="syz.4.193" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.912391][ T2142] usbhid 4-1:0.0: can't add hid device: -71 [ 142.913659][ T29] audit: type=1400 audit(1736849648.429:302): avc: denied { append } for pid=6556 comm="syz.4.193" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.918413][ T2142] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 142.949802][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 142.972634][ T2142] usb 4-1: USB disconnect, device number 9 [ 143.016904][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 143.027165][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.036692][ T5862] usb 3-1: config 0 descriptor?? [ 143.043653][ T5862] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 143.062644][ T5862] pwc: Warning: more than 1 configuration available. [ 143.137043][ T29] audit: type=1400 audit(1736849650.089:303): avc: denied { map } for pid=6582 comm="syz.3.198" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.270312][ T29] audit: type=1400 audit(1736849650.089:304): avc: denied { execute } for pid=6582 comm="syz.3.198" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.315633][ T6595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.200'. [ 143.448671][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.464851][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.495772][ T6598] FAULT_INJECTION: forcing a failure. [ 143.495772][ T6598] name failslab, interval 1, probability 0, space 0, times 0 [ 143.504045][ T29] audit: type=1400 audit(1736849650.099:305): avc: denied { setopt } for pid=6582 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.530567][ T29] audit: type=1400 audit(1736849650.099:306): avc: denied { accept } for pid=6582 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.550296][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.556503][ T29] audit: type=1400 audit(1736849650.459:307): avc: denied { connect } for pid=6558 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 143.578856][ T29] audit: type=1400 audit(1736849650.539:308): avc: denied { write } for pid=6558 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 143.598022][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.714495][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 143.839855][ T6598] CPU: 0 UID: 0 PID: 6598 Comm: syz.4.197 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 143.850502][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.860562][ T6598] Call Trace: [ 143.863848][ T6598] [ 143.866781][ T6598] dump_stack_lvl+0x16c/0x1f0 [ 143.871481][ T6598] should_fail_ex+0x497/0x5b0 [ 143.876169][ T6598] ? fs_reclaim_acquire+0xae/0x150 [ 143.881297][ T6598] should_failslab+0xc2/0x120 [ 143.885986][ T6598] __kmalloc_noprof+0xcb/0x510 [ 143.890780][ T6598] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 143.896428][ T6598] tomoyo_realpath_from_path+0xb9/0x720 [ 143.901983][ T6598] ? tomoyo_path_number_perm+0x235/0x590 [ 143.907622][ T6598] ? tomoyo_path_number_perm+0x235/0x590 [ 143.913265][ T6598] tomoyo_path_number_perm+0x248/0x590 [ 143.918735][ T6598] ? tomoyo_path_number_perm+0x235/0x590 [ 143.924378][ T6598] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 143.930390][ T6598] ? __pfx_lock_release+0x10/0x10 [ 143.935420][ T6598] ? trace_lock_acquire+0x14e/0x1f0 [ 143.940632][ T6598] ? lock_acquire+0x2f/0xb0 [ 143.945143][ T6598] ? __fget_files+0x40/0x3a0 [ 143.949750][ T6598] ? __fget_files+0x206/0x3a0 [ 143.954436][ T6598] security_file_ioctl+0x9b/0x240 [ 143.959471][ T6598] __x64_sys_ioctl+0xb7/0x200 [ 143.964161][ T6598] do_syscall_64+0xcd/0x250 [ 143.968678][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.974584][ T6598] RIP: 0033:0x7f592a985d29 [ 143.979001][ T6598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.998628][ T6598] RSP: 002b:00007f592b6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.007057][ T6598] RAX: ffffffffffffffda RBX: 00007f592ab75fa0 RCX: 00007f592a985d29 [ 144.015054][ T6598] RDX: 0000000020000180 RSI: 00000000c0445624 RDI: 0000000000000003 [ 144.023044][ T6598] RBP: 00007f592b6d6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.031034][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.039015][ T6598] R13: 0000000000000000 R14: 00007f592ab75fa0 R15: 00007fffa15f61b8 [ 144.045163][ T2142] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.046990][ T6598] [ 144.057596][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.087826][ T6598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.205099][ T2142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.223709][ T2142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.271064][ T2142] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 144.308506][ T2142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.337559][ T2142] usb 1-1: config 0 descriptor?? [ 144.368087][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 144.410411][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 144.419377][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.206'. [ 144.492672][ T5821] block nbd1: Receive control failed (result -107) [ 144.766941][ T6616] nbd1: detected capacity change from 0 to 256 [ 144.975888][ T5806] block nbd1: Dead connection, failed to find a fallback [ 145.380909][ T5860] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.495204][ T2142] usbhid 1-1:0.0: can't add hid device: -71 [ 145.870132][ T2142] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.896930][ T6633] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 145.974333][ T2142] usb 1-1: USB disconnect, device number 9 [ 146.036242][ T5862] pwc: send_video_command error -71 [ 146.042387][ T5862] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 146.057520][ T5862] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 146.102986][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.140671][ T5862] usb 3-1: USB disconnect, device number 7 [ 146.197507][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.313198][ T5860] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 146.354722][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.450599][ T5860] usb 4-1: config 0 descriptor?? [ 146.699281][ T6643] netlink: 'syz.2.212': attribute type 4 has an invalid length. [ 146.709270][ T6630] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 146.730860][ T5862] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.790967][ T2142] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.980363][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 146.988734][ T5862] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 146.998293][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.021970][ T5862] usb 2-1: Product: syz [ 147.040352][ T2142] usb 1-1: Using ep0 maxpacket: 16 [ 147.669590][ T5862] usb 2-1: Manufacturer: syz [ 147.680286][ T5862] usb 2-1: SerialNumber: syz [ 147.782100][ T5862] usb 2-1: config 0 descriptor?? [ 147.953995][ T2142] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 147.980031][ T2142] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 148.054033][ T2142] usb 1-1: Product: syz [ 148.058415][ T2142] usb 1-1: Manufacturer: syz [ 148.083075][ T2142] usb 1-1: SerialNumber: syz [ 148.135342][ T2142] usb 1-1: config 0 descriptor?? [ 148.259180][ T5862] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 148.268255][ T5862] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 148.298872][ T5862] usb 2-1: USB disconnect, device number 6 [ 148.592389][ T2142] usb 1-1: USB disconnect, device number 10 [ 148.682104][ T3510] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.921026][ T29] audit: type=1400 audit(1736849655.849:309): avc: denied { read } for pid=6653 comm="syz.4.218" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.369575][ T29] audit: type=1400 audit(1736849655.849:310): avc: denied { open } for pid=6653 comm="syz.4.218" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.398006][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.443838][ T29] audit: type=1400 audit(1736849656.399:311): avc: denied { validate_trans } for pid=6660 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.868721][ T6665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.019553][ T6667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.221'. [ 150.057486][ T29] audit: type=1400 audit(1736849657.019:312): avc: denied { append } for pid=6668 comm="syz.0.222" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.102168][ T8] usb 3-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 150.112137][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.120370][ T8] usb 3-1: Product: syz [ 150.124550][ T8] usb 3-1: Manufacturer: syz [ 150.129148][ T8] usb 3-1: SerialNumber: syz [ 150.239265][ T6672] xt_CT: No such helper "pptp" [ 150.311187][ T6675] loop9: detected capacity change from 0 to 7 [ 150.343496][ T6652] Bluetooth: hci5: Frame reassembly failed (-84) [ 150.354972][ T6652] Bluetooth: hci5: Frame reassembly failed (-84) [ 150.368701][ T29] audit: type=1400 audit(1736849657.329:313): avc: denied { bind } for pid=6651 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.397969][ T8] pwc: Visionite VCS-UC300 USB webcam detected. [ 150.411046][ T8] pwc: Failed to set LED on/off time (-71) [ 150.419923][ T6675] Dev loop9: unable to read RDB block 7 [ 150.436175][ T6675] loop9: unable to read partition table [ 150.444169][ T8] pwc: send_video_command error -71 [ 150.451318][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 150.459048][ T6675] loop9: partition table beyond EOD, truncated [ 150.468482][ T8] Philips webcam 3-1:5.0: probe with driver Philips webcam failed with error -71 [ 150.560379][ T29] audit: type=1400 audit(1736849657.329:314): avc: denied { node_bind } for pid=6651 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 150.594697][ T6675] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.660561][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 151.181065][ T8] usb 3-1: USB disconnect, device number 8 [ 151.304038][ T5860] usbhid 4-1:0.0: can't add hid device: -71 [ 151.310072][ T5860] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 151.320347][ T5860] usb 4-1: USB disconnect, device number 10 [ 151.580061][ T6692] FAULT_INJECTION: forcing a failure. [ 151.580061][ T6692] name failslab, interval 1, probability 0, space 0, times 0 [ 151.593966][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'. [ 151.613465][ T6692] CPU: 0 UID: 0 PID: 6692 Comm: syz.0.231 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 151.624092][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.634159][ T6692] Call Trace: [ 151.637445][ T6692] [ 151.640379][ T6692] dump_stack_lvl+0x16c/0x1f0 [ 151.645075][ T6692] should_fail_ex+0x497/0x5b0 [ 151.649762][ T6692] ? fs_reclaim_acquire+0xae/0x150 [ 151.654887][ T6692] should_failslab+0xc2/0x120 [ 151.659582][ T6692] __kmalloc_noprof+0xcb/0x510 [ 151.664367][ T6692] ? d_absolute_path+0x137/0x1b0 [ 151.669310][ T6692] ? rcu_is_watching+0x12/0xc0 [ 151.674079][ T6692] tomoyo_encode2+0x100/0x3e0 [ 151.678775][ T6692] tomoyo_encode+0x29/0x50 [ 151.683183][ T6692] tomoyo_realpath_from_path+0x19d/0x720 [ 151.688817][ T6692] tomoyo_path_number_perm+0x248/0x590 [ 151.694270][ T6692] ? tomoyo_path_number_perm+0x235/0x590 [ 151.699896][ T6692] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.705884][ T6692] ? __pfx_lock_release+0x10/0x10 [ 151.710898][ T6692] ? trace_lock_acquire+0x14e/0x1f0 [ 151.716093][ T6692] ? lock_acquire+0x2f/0xb0 [ 151.720585][ T6692] ? __fget_files+0x40/0x3a0 [ 151.725174][ T6692] ? __fget_files+0x206/0x3a0 [ 151.729844][ T6692] security_file_ioctl+0x9b/0x240 [ 151.734862][ T6692] __x64_sys_ioctl+0xb7/0x200 [ 151.739535][ T6692] do_syscall_64+0xcd/0x250 [ 151.744032][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.749918][ T6692] RIP: 0033:0x7fbe26f85d29 [ 151.754319][ T6692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.773914][ T6692] RSP: 002b:00007fbe27e99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.782316][ T6692] RAX: ffffffffffffffda RBX: 00007fbe27175fa0 RCX: 00007fbe26f85d29 [ 151.790451][ T6692] RDX: 0000000020000180 RSI: 00000000c0445624 RDI: 0000000000000003 [ 151.798512][ T6692] RBP: 00007fbe27e99090 R08: 0000000000000000 R09: 0000000000000000 [ 151.806473][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.814432][ T6692] R13: 0000000000000000 R14: 00007fbe27175fa0 R15: 00007ffdffcb15d8 [ 151.822413][ T6692] [ 151.832095][ T6692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.390637][ T29] audit: type=1400 audit(1736849662.349:315): avc: denied { ioctl } for pid=6721 comm="syz.0.240" path="socket:[10935]" dev="sockfs" ino=10935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.456708][ T6727] netlink: 96 bytes leftover after parsing attributes in process `syz.1.241'. [ 155.471475][ T5860] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 155.691135][ T5861] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.752571][ T6733] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 155.830515][ T5861] usb 3-1: device descriptor read/64, error -71 [ 155.884299][ T5860] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 155.980143][ T5860] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 156.090132][ T5860] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.100963][ T5861] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.223829][ T5860] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.236709][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.251266][ T5860] usb 4-1: Product: syz [ 156.264146][ T5860] usb 4-1: Manufacturer: syz [ 156.272177][ T5860] usb 4-1: SerialNumber: syz [ 156.369816][ T5861] usb 3-1: device descriptor read/64, error -71 [ 156.414895][ T6738] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 156.494030][ T5861] usb usb3-port1: attempt power cycle [ 156.581796][ T29] audit: type=1400 audit(1736849663.539:316): avc: denied { append } for pid=6736 comm="syz.0.244" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 156.840769][ T5861] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.011128][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.024903][ T5861] usb 3-1: device descriptor read/8, error -71 [ 157.036005][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.053168][ T29] audit: type=1400 audit(1736849663.539:317): avc: denied { open } for pid=6736 comm="syz.0.244" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 157.077895][ T5860] usb 4-1: 0:2 : does not exist [ 157.130611][ T29] audit: type=1400 audit(1736849663.679:318): avc: denied { read } for pid=6711 comm="syz.3.239" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.164423][ T6746] netlink: 68 bytes leftover after parsing attributes in process `syz.2.246'. [ 157.208608][ T29] audit: type=1400 audit(1736849663.699:319): avc: denied { open } for pid=6711 comm="syz.3.239" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.264532][ T29] audit: type=1400 audit(1736849663.699:320): avc: denied { ioctl } for pid=6711 comm="syz.3.239" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.289057][ T29] audit: type=1400 audit(1736849663.949:321): avc: denied { write } for pid=6711 comm="syz.3.239" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.405911][ T5860] usb 4-1: USB disconnect, device number 11 [ 158.524875][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.716671][ T6758] ======================================================= [ 158.716671][ T6758] WARNING: The mand mount option has been deprecated and [ 158.716671][ T6758] and is ignored by this kernel. Remove the mand [ 158.716671][ T6758] option from the mount to silence this warning. [ 158.716671][ T6758] ======================================================= [ 158.850399][ T6765] xt_l2tp: v2 tid > 0xffff: 262144 [ 159.056253][ T6762] xt_l2tp: v2 tid > 0xffff: 262144 [ 159.305913][ T6767] FAULT_INJECTION: forcing a failure. [ 159.305913][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.360555][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.3.253 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 159.371199][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.381271][ T6767] Call Trace: [ 159.384550][ T6767] [ 159.387470][ T6767] dump_stack_lvl+0x16c/0x1f0 [ 159.392150][ T6767] should_fail_ex+0x497/0x5b0 [ 159.397000][ T6767] _copy_from_user+0x2e/0xd0 [ 159.401577][ T6767] video_usercopy+0xedb/0x1620 [ 159.406338][ T6767] ? __pfx___video_do_ioctl+0x10/0x10 [ 159.411707][ T6767] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 159.418553][ T6767] ? __pfx_video_usercopy+0x10/0x10 [ 159.423763][ T6767] v4l2_ioctl+0x1ba/0x250 [ 159.428090][ T6767] ? __pfx_v4l2_ioctl+0x10/0x10 [ 159.432935][ T6767] __x64_sys_ioctl+0x190/0x200 [ 159.437697][ T6767] do_syscall_64+0xcd/0x250 [ 159.442204][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.448088][ T6767] RIP: 0033:0x7fe0b1d85d29 [ 159.452491][ T6767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.472087][ T6767] RSP: 002b:00007fe0b2ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.480489][ T6767] RAX: ffffffffffffffda RBX: 00007fe0b1f75fa0 RCX: 00007fe0b1d85d29 [ 159.488456][ T6767] RDX: 0000000020000180 RSI: 00000000c0445624 RDI: 0000000000000003 [ 159.496419][ T6767] RBP: 00007fe0b2ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 159.504466][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.512426][ T6767] R13: 0000000000000000 R14: 00007fe0b1f75fa0 R15: 00007ffebd48c1b8 [ 159.520396][ T6767] [ 159.533643][ T29] audit: type=1400 audit(1736849666.499:322): avc: denied { accept } for pid=6757 comm="syz.2.250" path=2F34322FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 161.063815][ T29] audit: type=1400 audit(1736849667.929:323): avc: denied { mount } for pid=6780 comm="syz.2.259" name="/" dev="ramfs" ino=11468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 161.201330][ T29] audit: type=1400 audit(1736849667.969:324): avc: denied { create } for pid=6780 comm="syz.2.259" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 161.481117][ T6789] netlink: 'syz.3.258': attribute type 29 has an invalid length. [ 161.490797][ T6789] netlink: 'syz.3.258': attribute type 29 has an invalid length. [ 161.500297][ T6789] netlink: 'syz.3.258': attribute type 29 has an invalid length. [ 161.508305][ T6789] netlink: 'syz.3.258': attribute type 29 has an invalid length. [ 161.516336][ T6789] netlink: 'syz.3.258': attribute type 29 has an invalid length. [ 161.524369][ T6789] netlink: 'syz.3.258': attribute type 29 has an invalid length. [ 161.533489][ T6789] netlink: 'syz.3.258': attribute type 29 has an invalid length. [ 161.550961][ T6789] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 161.675975][ T29] audit: type=1400 audit(1736849668.639:325): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 162.344149][ T6795] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 162.393110][ T6791] pim6reg1: entered promiscuous mode [ 162.431019][ T6791] pim6reg1: entered allmulticast mode [ 164.229448][ T6808] xt_l2tp: v2 tid > 0xffff: 262144 [ 165.037406][ T6818] netlink: 68 bytes leftover after parsing attributes in process `syz.3.270'. [ 166.140937][ T29] audit: type=1400 audit(1736849672.039:326): avc: denied { read } for pid=6819 comm="syz.2.269" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.171304][ T6827] program syz.2.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.206460][ T29] audit: type=1400 audit(1736849672.039:327): avc: denied { open } for pid=6819 comm="syz.2.269" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 167.123082][ T6850] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 167.861247][ T6822] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.730337][ T8] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 169.931413][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.010661][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.026337][ T6874] ntfs3(nullb0): Primary boot signature is not NTFS. [ 170.035675][ T6874] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 170.111786][ T8] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 170.124154][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.304961][ T8] usb 4-1: config 0 descriptor?? [ 170.415339][ T6882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.365497][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 173.255769][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 173.265412][ T8] usb 4-1: USB disconnect, device number 12 [ 173.335155][ T6892] netlink: 96 bytes leftover after parsing attributes in process `syz.3.288'. [ 174.481617][ T6895] process 'syz.1.290' launched '/dev/fd/9' with NULL argv: empty string added [ 174.590348][ T29] audit: type=1400 audit(1736849681.459:328): avc: denied { execute_no_trans } for pid=6894 comm="syz.1.290" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.665470][ T6906] netlink: 100 bytes leftover after parsing attributes in process `syz.1.290'. [ 175.494769][ T6917] input: syz1 as /devices/virtual/input/input6 [ 175.509380][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 175.608155][ T6915] erspan0: entered promiscuous mode [ 175.618545][ T6915] macvtap1: entered promiscuous mode [ 175.731760][ T6915] macvtap1: entered allmulticast mode [ 175.747579][ T6915] erspan0: entered allmulticast mode [ 175.839644][ T6928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.862126][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'. [ 175.880320][ T6928] xt_l2tp: v2 tid > 0xffff: 262144 [ 175.887482][ T5863] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.050478][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 176.321871][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.371905][ T5863] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.393045][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.430661][ T5863] usb 1-1: config 0 descriptor?? [ 176.451998][ T5863] hub 1-1:0.0: bad descriptor, ignoring hub [ 176.506893][ T5863] hub 1-1:0.0: probe with driver hub failed with error -5 [ 176.516369][ T5863] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 176.612035][ T6934] loop9: detected capacity change from 0 to 7 [ 176.634628][ T6934] Dev loop9: unable to read RDB block 7 [ 176.640662][ T6934] loop9: unable to read partition table [ 176.647497][ T6934] loop9: partition table beyond EOD, truncated [ 176.661272][ T6934] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.732333][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 176.800564][ T5863] usb 1-1: USB disconnect, device number 11 [ 176.860818][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 176.920328][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 176.929538][ T6939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.304'. [ 176.972325][ T5821] block nbd2: Receive control failed (result -107) [ 177.061338][ T6939] nbd2: detected capacity change from 0 to 256 [ 177.512420][ T29] audit: type=1400 audit(1736849684.479:329): avc: denied { ioctl } for pid=6944 comm="syz.1.306" path="socket:[11851]" dev="sockfs" ino=11851 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 177.643943][ T29] audit: type=1400 audit(1736849684.609:330): avc: denied { connect } for pid=6953 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.800530][ T29] audit: type=1326 audit(1736849684.729:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1d85d29 code=0x7fc00000 [ 178.070401][ T29] audit: type=1326 audit(1736849684.739:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b1d85d29 code=0x7fc00000 [ 178.193832][ T29] audit: type=1326 audit(1736849684.739:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1d85d29 code=0x7fc00000 [ 178.220480][ T29] audit: type=1326 audit(1736849684.749:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1d85d29 code=0x7fc00000 [ 178.440456][ T5860] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 178.603146][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.640337][ T5860] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 178.657076][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.666989][ T5860] usb 3-1: config 0 descriptor?? [ 178.990271][ T6973] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 179.427616][ T5860] usbhid 3-1:0.0: can't add hid device: -71 [ 179.427678][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 179.428912][ T5860] usb 3-1: USB disconnect, device number 13 [ 179.816250][ T6980] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 181.261092][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 181.261155][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 181.261189][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 181.261209][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 181.261230][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 182.629228][ T7010] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=7010 comm=syz.4.326 [ 183.491021][ T2142] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 183.733189][ T7024] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 183.742528][ T7024] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 184.048619][ T7027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.331'. [ 184.071674][ T29] audit: type=1400 audit(1736849690.669:335): avc: denied { read } for pid=7013 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.119341][ T29] audit: type=1400 audit(1736849690.679:336): avc: denied { shutdown } for pid=7013 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.220820][ T2142] usb 1-1: Using ep0 maxpacket: 16 [ 184.261472][ T2142] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 184.261504][ T2142] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 184.261524][ T2142] usb 1-1: Product: syz [ 184.261538][ T2142] usb 1-1: Manufacturer: syz [ 184.261553][ T2142] usb 1-1: SerialNumber: syz [ 184.263207][ T2142] usb 1-1: config 0 descriptor?? [ 184.297055][ T29] audit: type=1400 audit(1736849690.679:337): avc: denied { ioctl } for pid=7013 comm="syz.3.328" path="socket:[12103]" dev="sockfs" ino=12103 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.297102][ T29] audit: type=1400 audit(1736849691.139:338): avc: denied { ioctl } for pid=7017 comm="syz.1.329" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 184.518075][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 184.575033][ T5902] usb 1-1: USB disconnect, device number 12 [ 185.250447][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 185.280420][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 185.308636][ T5898] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.318014][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.338188][ T5898] usb 4-1: Product: syz [ 185.349441][ T5898] usb 4-1: Manufacturer: syz [ 185.361178][ T5898] usb 4-1: SerialNumber: syz [ 185.367782][ T5898] usb 4-1: config 0 descriptor?? [ 185.420107][ T29] audit: type=1400 audit(1736849692.379:339): avc: denied { setcheckreqprot } for pid=7041 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.630739][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.638604][ T5898] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.660424][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 185.670621][ T8] usb 3-1: can't read configurations, error -71 [ 187.558115][ T5898] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 188.241323][ T5898] usb 4-1: USB disconnect, device number 13 [ 188.466863][ T29] audit: type=1400 audit(1736849695.309:340): avc: denied { read } for pid=7075 comm="syz.4.347" laddr=fe80::a8aa:aaff:feaa:aa10 lport=255 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.705509][ T7084] SELinux: policydb version 0 does not match my version range 15-33 [ 188.749905][ T7084] SELinux: failed to load policy [ 188.847306][ T7091] netlink: 96 bytes leftover after parsing attributes in process `syz.0.351'. [ 189.100828][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.154948][ T7097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.213902][ T7097] xt_l2tp: v2 tid > 0xffff: 262144 [ 189.300448][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 189.318259][ T5902] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 189.429815][ T5902] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.614932][ T5902] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.635360][ T5902] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.663290][ T5902] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.775934][ T5902] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.785082][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.883244][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 190.003929][ T5902] usb 2-1: usb_control_msg returned -32 [ 190.009641][ T5902] usbtmc 2-1:16.0: can't read capabilities [ 191.180496][ T29] audit: type=1400 audit(1736849698.059:341): avc: denied { map } for pid=7124 comm="syz.4.362" path="socket:[12760]" dev="sockfs" ino=12760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.206522][ T29] audit: type=1400 audit(1736849698.059:342): avc: denied { read } for pid=7124 comm="syz.4.362" path="socket:[12760]" dev="sockfs" ino=12760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.756248][ T7131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.768652][ T7131] xt_l2tp: v2 tid > 0xffff: 262144 [ 193.173755][ T7143] netlink: 80 bytes leftover after parsing attributes in process `syz.0.365'. [ 193.451249][ T2142] usb 2-1: USB disconnect, device number 7 [ 194.343767][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.350119][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.360362][ T29] audit: type=1400 audit(1736849701.199:343): avc: denied { name_bind } for pid=7135 comm="syz.0.365" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 194.990302][ T5898] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 195.162048][ T5898] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 195.170385][ T5898] usb 4-1: config 0 has no interface number 0 [ 195.176990][ T5898] usb 4-1: config 0 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.220344][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.313885][ T5898] usb 4-1: config 0 interface 67 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 195.917760][ T5898] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 195.928951][ T5898] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 195.939165][ T5898] usb 4-1: config 0 interface 67 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.964238][ T5898] usb 4-1: string descriptor 0 read error: -71 [ 195.970528][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 195.975975][ T5898] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=24.1f [ 195.985175][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.001315][ T5898] usb 4-1: config 0 descriptor?? [ 196.006881][ T5898] usb 4-1: can't set config #0, error -71 [ 196.013773][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.024065][ T5838] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 196.033197][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.043543][ T5898] usb 4-1: USB disconnect, device number 14 [ 196.110786][ T5838] usb 2-1: config 0 descriptor?? [ 196.136505][ T5838] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 197.001216][ T7167] netlink: 96 bytes leftover after parsing attributes in process `syz.2.374'. [ 197.087105][ T5838] gspca_vc032x: reg_w err -110 [ 197.092051][ T5838] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 198.015255][ T29] audit: type=1400 audit(1736849704.979:344): avc: denied { setopt } for pid=7172 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.024640][ T7173] netlink: 'syz.2.377': attribute type 4 has an invalid length. [ 198.353227][ T29] audit: type=1400 audit(1736849705.239:345): avc: denied { create } for pid=7181 comm="syz.4.380" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.830500][ T5898] usb 2-1: USB disconnect, device number 8 [ 198.872140][ T29] audit: type=1400 audit(1736849705.249:346): avc: denied { write } for pid=7181 comm="syz.4.380" name="file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.900480][ T29] audit: type=1400 audit(1736849705.249:347): avc: denied { open } for pid=7181 comm="syz.4.380" path="/81/file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.110583][ T7183] program syz.4.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.123591][ T29] audit: type=1400 audit(1736849705.249:348): avc: denied { ioctl } for pid=7181 comm="syz.4.380" path="/81/file0" dev="tmpfs" ino=449 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.782700][ T29] audit: type=1400 audit(1736849706.749:349): avc: denied { unlink } for pid=5819 comm="syz-executor" name="file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.830126][ T7177] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 199.843284][ T7192] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=7192 comm=syz.2.381 [ 199.980414][ T5862] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.097063][ T7207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.386'. [ 200.210920][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 200.218238][ T5862] usb 4-1: config 3 has an invalid interface number: 3 but max is 2 [ 200.235314][ T5862] usb 4-1: config 3 has an invalid interface number: 215 but max is 2 [ 200.246082][ T7214] netlink: 68 bytes leftover after parsing attributes in process `syz.0.390'. [ 200.266158][ T5862] usb 4-1: config 3 has an invalid interface number: 11 but max is 2 [ 200.448129][ T5862] usb 4-1: config 3 has no interface number 0 [ 200.454945][ T5862] usb 4-1: config 3 has no interface number 1 [ 200.461609][ T5862] usb 4-1: config 3 has no interface number 2 [ 200.467894][ T5862] usb 4-1: config 3 interface 3 has no altsetting 0 [ 200.474622][ T5862] usb 4-1: config 3 interface 215 has no altsetting 0 [ 200.482026][ T5862] usb 4-1: config 3 interface 11 has no altsetting 0 [ 200.495502][ T5862] usb 4-1: New USB device found, idVendor=1410, idProduct=a004, bcdDevice=a7.d8 [ 200.504691][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.513481][ T5862] usb 4-1: Product: syz [ 201.231536][ T5862] usb 4-1: Manufacturer: syz [ 201.405351][ T29] audit: type=1326 audit(1736849708.359:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592a985d29 code=0x7ffc0000 [ 201.410526][ T2142] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.440383][ T5862] usb 4-1: SerialNumber: syz [ 201.459145][ T29] audit: type=1326 audit(1736849708.369:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f592a985d29 code=0x7ffc0000 [ 201.519657][ T29] audit: type=1326 audit(1736849708.399:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592a985d29 code=0x7ffc0000 [ 201.543303][ T29] audit: type=1326 audit(1736849708.399:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f592a985d29 code=0x7ffc0000 [ 201.691402][ T7231] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 201.710567][ T7231] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 201.730285][ T7231] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 201.739558][ T7231] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 201.749770][ T7231] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 201.759019][ T7231] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 201.768281][ T7231] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 201.846882][ T7231] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 202.230341][ T2142] usb 2-1: Using ep0 maxpacket: 32 [ 202.268297][ T2142] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.283685][ T5862] usb 4-1: USB disconnect, device number 15 [ 202.290096][ T2142] usb 2-1: config 0 has no interface number 0 [ 202.296936][ T2142] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.332986][ T2142] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.342884][ T2142] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 202.359353][ T2142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.370647][ T2142] usb 2-1: config 0 descriptor?? [ 202.600432][ T5861] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 202.764426][ T5861] usb 1-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 202.804826][ T7244] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.812179][ T5861] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.935753][ T5861] usb 1-1: New USB device found, idVendor=0e4c, idProduct=02e1, bcdDevice=e2.c8 [ 203.009512][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.050368][ T5861] usb 1-1: Product: syz [ 203.058707][ T5861] usb 1-1: Manufacturer: syz [ 203.064523][ T2142] usbhid 2-1:0.1: can't add hid device: -71 [ 203.079793][ T2142] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 203.089529][ T5861] usb 1-1: SerialNumber: syz [ 203.134106][ T5861] usb 1-1: config 0 descriptor?? [ 203.141315][ T2142] usb 2-1: USB disconnect, device number 9 [ 203.267314][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 203.268196][ T29] audit: type=1400 audit(1736849710.229:368): avc: denied { read } for pid=7246 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.765782][ T29] audit: type=1400 audit(1736849710.731:369): avc: denied { listen } for pid=7247 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.796127][ T29] audit: type=1400 audit(1736849710.761:370): avc: denied { mounton } for pid=7247 comm="syz.1.398" path="/75/file0" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 203.876425][ T7259] block device autoloading is deprecated and will be removed. [ 205.790460][ T5861] usb 1-1: USB disconnect, device number 13 [ 207.549914][ T7282] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 208.148252][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 208.731875][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 208.781863][ T7277] xt_CT: No such helper "pptp" [ 208.866801][ T7290] netlink: 'syz.0.408': attribute type 29 has an invalid length. [ 208.878684][ T7290] netlink: 'syz.0.408': attribute type 29 has an invalid length. [ 208.913714][ T7290] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 210.462521][ T7295] netlink: 'syz.4.409': attribute type 29 has an invalid length. [ 210.472477][ T7295] netlink: 'syz.4.409': attribute type 29 has an invalid length. [ 210.486975][ T7295] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 212.708366][ T7313] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 213.530468][ T5898] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 213.645522][ T7318] netlink: 'syz.3.411': attribute type 4 has an invalid length. [ 214.065164][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.093221][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.110386][ T5898] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 214.119555][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.131501][ T5898] usb 3-1: config 0 descriptor?? [ 215.697748][ T29] audit: type=1400 audit(1736849722.631:371): avc: denied { write } for pid=7311 comm="syz.2.414" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.130964][ T29] audit: type=1400 audit(1736849723.091:372): avc: denied { ioctl } for pid=7311 comm="syz.2.414" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.999916][ T5898] usbhid 3-1:0.0: can't add hid device: -71 [ 217.001570][ T7343] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=7343 comm=syz.3.422 [ 217.006053][ T5898] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 217.051325][ T5898] usb 3-1: USB disconnect, device number 16 [ 217.075815][ T7349] netlink: 96 bytes leftover after parsing attributes in process `syz.1.423'. [ 218.039481][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 218.085965][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.123412][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.135500][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.148977][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.190669][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.219298][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.237145][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.256830][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.269407][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.426'. [ 218.278553][ T29] audit: type=1400 audit(1736849725.221:373): avc: denied { write } for pid=7356 comm="syz.4.426" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 218.370401][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 218.650292][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 218.677721][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 218.735300][ T8] usb 4-1: config 179 has no interface number 0 [ 218.895965][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 219.116520][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 219.127892][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.139125][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 219.150622][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.164075][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.173324][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.363177][ T7363] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.434425][ T7391] netlink: 68 bytes leftover after parsing attributes in process `syz.1.435'. [ 219.884525][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.910894][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.960349][ T29] audit: type=1400 audit(1736849726.901:374): avc: denied { append } for pid=7362 comm="syz.3.429" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.999255][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.027637][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.321080][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.331702][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.411536][ T5862] usb 4-1: USB disconnect, device number 16 [ 220.411536][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.427332][ T29] audit: type=1400 audit(1736849727.401:375): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.849021][ T29] audit: type=1400 audit(1736849727.621:376): avc: denied { mounton } for pid=7408 comm="syz.4.442" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 222.688674][ T7432] loop9: detected capacity change from 0 to 7 [ 222.696205][ T7432] Dev loop9: unable to read RDB block 7 [ 222.702062][ T7432] loop9: unable to read partition table [ 222.708351][ T7432] loop9: partition table beyond EOD, truncated [ 222.714639][ T7432] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 222.780810][ T7435] netlink: 112 bytes leftover after parsing attributes in process `syz.4.447'. [ 223.283068][ T7448] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=7448 comm=syz.0.451 [ 226.723130][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 226.778237][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 226.902255][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.913496][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.933307][ T8] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 226.962791][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.004578][ T8] usb 3-1: config 0 descriptor?? [ 227.368801][ T7512] netlink: 'syz.0.466': attribute type 29 has an invalid length. [ 227.385768][ T7512] netlink: 'syz.0.466': attribute type 29 has an invalid length. [ 227.394833][ T7512] netlink: 'syz.0.466': attribute type 29 has an invalid length. [ 227.403286][ T7512] netlink: 'syz.0.466': attribute type 29 has an invalid length. [ 227.411686][ T7512] netlink: 'syz.0.466': attribute type 29 has an invalid length. [ 227.421093][ T7512] netlink: 'syz.0.466': attribute type 29 has an invalid length. [ 227.486100][ T7512] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.180992][ T7516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.396544][ T7516] xt_l2tp: v2 tid > 0xffff: 262144 [ 229.780655][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 229.788223][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.797792][ T8] usb 3-1: USB disconnect, device number 17 [ 230.934606][ T7536] xt_CT: No such helper "pptp" [ 234.501557][ T7562] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 236.473470][ T7565] netlink: 'syz.3.478': attribute type 29 has an invalid length. [ 236.764191][ T7565] netlink: 'syz.3.478': attribute type 29 has an invalid length. [ 236.776281][ T7565] netlink: 'syz.3.478': attribute type 29 has an invalid length. [ 236.787806][ T7565] netlink: 'syz.3.478': attribute type 29 has an invalid length. [ 236.799098][ T7565] netlink: 'syz.3.478': attribute type 29 has an invalid length. [ 236.810235][ T7565] netlink: 'syz.3.478': attribute type 29 has an invalid length. [ 236.900031][ T7565] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 238.423827][ T29] audit: type=1400 audit(1736849745.281:377): avc: denied { block_suspend } for pid=7573 comm="syz.2.484" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.115885][ T7583] loop9: detected capacity change from 0 to 7 [ 239.140915][ T7583] Dev loop9: unable to read RDB block 7 [ 239.147149][ T7583] loop9: unable to read partition table [ 239.168731][ T7583] loop9: partition table beyond EOD, truncated [ 239.171725][ T7586] binfmt_misc: register: failed to install interpreter file ./file0 [ 239.175703][ T7583] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.238059][ T29] audit: type=1400 audit(1736849746.201:378): avc: denied { bind } for pid=7584 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.283589][ T7589] netlink: 'syz.4.488': attribute type 10 has an invalid length. [ 239.321194][ T29] audit: type=1400 audit(1736849746.291:379): avc: denied { shutdown } for pid=7584 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.335063][ T7589] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 239.509708][ T7589] netlink: 164 bytes leftover after parsing attributes in process `syz.4.488'. [ 239.569810][ T29] audit: type=1400 audit(1736849746.531:380): avc: denied { bind } for pid=7595 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.662479][ T7601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.684084][ T7601] xt_l2tp: v2 tid > 0xffff: 262144 [ 239.773453][ T29] audit: type=1400 audit(1736849746.561:381): avc: denied { connect } for pid=7595 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.168540][ T29] audit: type=1400 audit(1736849746.561:382): avc: denied { write } for pid=7595 comm="syz.3.492" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 240.209376][ T29] audit: type=1400 audit(1736849746.561:383): avc: denied { open } for pid=7595 comm="syz.3.492" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 240.310855][ T29] audit: type=1400 audit(1736849746.571:384): avc: denied { ioctl } for pid=7595 comm="syz.3.492" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 241.816154][ T29] audit: type=1400 audit(1736849748.771:385): avc: denied { setopt } for pid=7616 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.484811][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 242.520572][ T29] audit: type=1400 audit(1736849749.451:386): avc: denied { bind } for pid=7616 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.269291][ T7635] loop9: detected capacity change from 0 to 7 [ 243.320021][ T7635] Dev loop9: unable to read RDB block 7 [ 243.338512][ T7635] loop9: unable to read partition table [ 243.338788][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 243.367857][ T7635] loop9: partition table beyond EOD, truncated [ 243.399583][ T7635] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.785056][ T7656] netlink: 'syz.3.508': attribute type 29 has an invalid length. [ 243.803927][ T7656] netlink: 'syz.3.508': attribute type 29 has an invalid length. [ 243.824120][ T7656] netlink: 'syz.3.508': attribute type 29 has an invalid length. [ 243.836684][ T7656] netlink: 'syz.3.508': attribute type 29 has an invalid length. [ 243.849584][ T7656] netlink: 'syz.3.508': attribute type 29 has an invalid length. [ 243.860886][ T7656] netlink: 'syz.3.508': attribute type 29 has an invalid length. [ 243.874124][ T7656] netlink: 'syz.3.508': attribute type 29 has an invalid length. [ 243.993277][ T7656] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 245.236432][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 245.236451][ T29] audit: type=1400 audit(1736849752.201:389): avc: denied { setopt } for pid=7660 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.269188][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 245.305651][ T7667] syz_tun: entered allmulticast mode [ 245.408525][ T7667] syz_tun: left allmulticast mode [ 246.545927][ T29] audit: type=1400 audit(1736849752.991:390): avc: denied { remount } for pid=7675 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 246.705173][ T7690] xt_bpf: check failed: parse error [ 247.189277][ T29] audit: type=1400 audit(1736849754.151:391): avc: denied { create } for pid=7693 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 249.134919][ T7711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.238524][ T7712] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 249.250169][ T7712] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 249.262517][ T7712] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 249.271960][ T7712] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 249.281264][ T7712] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 249.291744][ T7712] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 249.301035][ T7712] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 249.339618][ T7712] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 251.180633][ T29] audit: type=1400 audit(1736849758.151:392): avc: denied { ioctl } for pid=7717 comm="syz.2.524" path="socket:[15543]" dev="sockfs" ino=15543 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 251.749137][ T7732] overlayfs: missing 'lowerdir' [ 251.951804][ T7737] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 251.958726][ T7737] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 252.019621][ T7737] vhci_hcd vhci_hcd.0: Device attached [ 252.046030][ T7741] xt_bpf: check failed: parse error [ 252.047878][ T7738] vhci_hcd: cannot find the pending unlink 1023 [ 252.148080][ T7744] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 252.205023][ T5861] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.611117][ T2142] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.655467][ T7748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57162 sclass=netlink_route_socket pid=7748 comm=syz.3.532 [ 253.149179][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 253.156448][ T7738] vhci_hcd: connection closed [ 253.160988][ T976] vhci_hcd: stop threads [ 253.170803][ T976] vhci_hcd: release socket [ 253.177281][ T976] vhci_hcd: disconnect device [ 253.714600][ T7753] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 254.354735][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.539'. [ 254.370398][ T5898] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 254.530313][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 254.538791][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.551914][ T5898] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 254.562515][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.572489][ T5898] usb 3-1: config 0 descriptor?? [ 255.524765][ T5898] elecom 0003:056E:00FB.0002: hidraw0: USB HID v1.01 Device [HID 056e:00fb] on usb-dummy_hcd.2-1/input0 [ 255.586247][ T29] audit: type=1400 audit(1736849762.541:393): avc: denied { bind } for pid=7776 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.635666][ T7778] syz.4.545: attempt to access beyond end of device [ 255.635666][ T7778] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 255.704497][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.714135][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.720562][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.721302][ T7778] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 255.767288][ T7772] overlayfs: missing 'lowerdir' [ 255.777654][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.789585][ T5898] usb 3-1: USB disconnect, device number 18 [ 255.887233][ T29] audit: type=1400 audit(1736849762.851:394): avc: denied { map } for pid=7782 comm="syz.1.546" path="socket:[14895]" dev="sockfs" ino=14895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 255.924439][ T29] audit: type=1400 audit(1736849762.851:395): avc: denied { read } for pid=7782 comm="syz.1.546" path="socket:[14895]" dev="sockfs" ino=14895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 256.276560][ T29] audit: type=1400 audit(1736849763.141:396): avc: denied { bind } for pid=7782 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.712066][ T29] audit: type=1400 audit(1736849763.141:397): avc: denied { setopt } for pid=7782 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.528131][ T7806] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=7806 comm=syz.2.552 [ 258.987242][ T29] audit: type=1400 audit(1736849765.951:398): avc: denied { mount } for pid=7812 comm="syz.4.556" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 259.063843][ T29] audit: type=1400 audit(1736849766.001:399): avc: denied { search } for pid=7812 comm="syz.4.556" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.184427][ T29] audit: type=1400 audit(1736849766.001:400): avc: denied { read } for pid=7812 comm="syz.4.556" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.293460][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 259.311571][ T29] audit: type=1400 audit(1736849766.001:401): avc: denied { open } for pid=7812 comm="syz.4.556" path="/112/file0" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.340485][ T7827] bridge_slave_1: left allmulticast mode [ 259.354024][ T7827] bridge_slave_1: left promiscuous mode [ 259.378111][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.400486][ T29] audit: type=1400 audit(1736849766.031:402): avc: denied { write } for pid=7812 comm="syz.4.556" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.446116][ T7827] bridge_slave_0: left allmulticast mode [ 259.454086][ T7827] bridge_slave_0: left promiscuous mode [ 259.470785][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.496690][ T29] audit: type=1400 audit(1736849766.031:403): avc: denied { add_name } for pid=7812 comm="syz.4.556" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.532556][ T30] INFO: task udevd:5958 blocked for more than 143 seconds. [ 259.924235][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 259.942253][ T29] audit: type=1400 audit(1736849766.031:404): avc: denied { create } for pid=7812 comm="syz.4.556" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 260.011396][ T29] audit: type=1400 audit(1736849766.121:405): avc: denied { ioctl } for pid=7812 comm="syz.4.556" path="/112/file0" dev="configfs" ino=1164 ioctlcmd=0xae73 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.020263][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.045009][ T30] task:udevd state:D stack:24736 pid:5958 tgid:5958 ppid:1 flags:0x00004002 [ 260.055554][ T30] Call Trace: [ 260.058913][ T30] [ 260.061963][ T30] __schedule+0xe58/0x5ad0 [ 260.066650][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 260.072482][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 260.078007][ T30] ? __pfx___schedule+0x10/0x10 [ 260.083002][ T30] ? schedule+0x298/0x350 [ 260.087429][ T30] ? __pfx_lock_release+0x10/0x10 [ 260.092689][ T30] ? lock_acquire+0x2f/0xb0 [ 260.097290][ T30] ? schedule+0x1fd/0x350 [ 260.102276][ T30] schedule+0xe7/0x350 [ 260.106440][ T30] schedule_timeout+0x124/0x280 [ 260.113987][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 260.119463][ T30] ? __pfx_process_timeout+0x10/0x10 [ 260.124893][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 260.131306][ T30] ? prepare_to_wait_event+0xce/0x6a0 [ 260.136780][ T30] nbd_queue_rq+0xcbc/0x1220 [ 260.141612][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 260.146932][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 260.153086][ T30] ? __pfx_mark_lock+0x10/0x10 [ 260.157976][ T30] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 260.164599][ T30] ? sbitmap_get+0x1e5/0x360 [ 260.169298][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 260.177087][ T30] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 260.183058][ T30] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 260.189527][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 260.197351][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 260.203222][ T30] ? rcu_is_watching+0x12/0xc0 [ 260.208094][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 260.213411][ T30] ? blk_mq_run_hw_queue+0x22b/0x670 [ 260.218824][ T30] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 260.225442][ T30] blk_mq_run_hw_queue+0x239/0x670 [ 260.230682][ T30] ? blk_mq_run_hw_queue+0x22b/0x670 [ 260.236076][ T30] blk_mq_flush_plug_list+0x673/0x1c60 [ 260.241798][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 260.248002][ T30] ? blk_mq_submit_bio+0x13a9/0x24c0 [ 260.253937][ T30] __blk_flush_plug+0x2c5/0x4b0 [ 260.258908][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 260.264480][ T30] __submit_bio+0x439/0x540 [ 260.269082][ T30] ? __pfx___submit_bio+0x10/0x10 [ 260.274300][ T30] ? ktime_get+0x206/0x300 [ 260.278802][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.284643][ T30] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 260.290559][ T30] submit_bio_noacct_nocheck+0x698/0xd70 [ 260.296307][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 260.302599][ T30] ? __pfx___might_resched+0x10/0x10 [ 260.307998][ T30] submit_bio_noacct+0x93a/0x1e20 [ 260.313466][ T30] block_read_full_folio+0x812/0xa50 [ 260.318845][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 260.324487][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 260.330434][ T30] ? __folio_batch_add_and_move+0x612/0xc60 [ 260.336404][ T30] ? __pfx_lru_add+0x10/0x10 [ 260.341648][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 260.347344][ T30] filemap_read_folio+0xc6/0x2a0 [ 260.352472][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 260.358098][ T30] ? __filemap_get_folio+0x2a5/0xaf0 [ 260.363539][ T30] do_read_cache_folio+0x263/0x5c0 [ 260.368743][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 260.374850][ T30] read_part_sector+0xd4/0x310 [ 260.379686][ T30] adfspart_check_ICS+0x94/0x940 [ 260.384705][ T30] ? snprintf+0xc8/0x100 [ 260.389002][ T30] ? __pfx_snprintf+0x10/0x10 [ 260.393780][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 260.399399][ T30] ? bdev_disk_changed+0x48c/0x1520 [ 260.404944][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 260.410636][ T30] bdev_disk_changed+0x71f/0x1520 [ 260.415765][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 260.421475][ T30] ? __pfx_ilookup+0x10/0x10 [ 260.426144][ T30] blkdev_get_whole+0x187/0x290 [ 260.431584][ T30] bdev_open+0x2c7/0xe20 [ 260.435933][ T30] blkdev_open+0x329/0x400 [ 260.440482][ T30] do_dentry_open+0xf59/0x1ea0 [ 260.445407][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 260.451512][ T30] vfs_open+0x82/0x3f0 [ 260.455652][ T30] ? may_open+0x1f2/0x400 [ 260.460043][ T30] path_openat+0x1e6a/0x2d60 [ 260.464987][ T30] ? __pfx_path_openat+0x10/0x10 [ 260.469979][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 260.475297][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 260.480699][ T30] ? find_held_lock+0x2d/0x110 [ 260.485591][ T30] do_filp_open+0x20c/0x470 [ 260.490240][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 260.495313][ T30] ? find_held_lock+0x2d/0x110 [ 260.500752][ T30] ? alloc_fd+0x41f/0x760 [ 260.505166][ T30] do_sys_openat2+0x17a/0x1e0 [ 260.509842][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.515105][ T30] ? __sys_recvmsg+0x197/0x220 [ 260.520064][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 260.525345][ T30] __x64_sys_openat+0x175/0x210 [ 260.530905][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 260.536436][ T30] do_syscall_64+0xcd/0x250 [ 260.541081][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.547060][ T30] RIP: 0033:0x7f5d4c9169a4 [ 260.551797][ T30] RSP: 002b:00007ffd796ee8d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.561372][ T30] RAX: ffffffffffffffda RBX: 000055dc7d29ef60 RCX: 00007f5d4c9169a4 [ 260.569416][ T30] RDX: 00000000000a0800 RSI: 000055dc7d291c30 RDI: 00000000ffffff9c [ 260.577519][ T30] RBP: 000055dc7d291c30 R08: 0000000000000001 R09: 00007f5d4ce17000 [ 260.585591][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 260.594168][ T30] R13: 000055dc7d280f50 R14: 0000000000000001 R15: 000055dc7d2572c0 [ 260.602387][ T30] [ 260.605571][ T30] [ 260.605571][ T30] Showing all locks held in the system: [ 260.613389][ T30] 1 lock held by khungtaskd/30: [ 260.618303][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 260.628968][ T30] 3 locks held by kworker/u8:8/3510: [ 260.634338][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 260.645914][ T30] #1: ffffc9000d3dfd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 260.657049][ T30] #2: ffffffff8fedd408 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 260.666530][ T30] 1 lock held by dhcpcd/5484: [ 260.671308][ T30] #0: ffffffff8fedd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x15e/0x7c0 [ 260.681481][ T30] 2 locks held by getty/5575: [ 260.686213][ T30] #0: ffff88814dab60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 260.696255][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 260.706644][ T30] 3 locks held by udevd/5806: [ 260.711636][ T30] #0: ffff888025de34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 260.721255][ T30] #1: ffff888023732490 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 260.731101][ T30] #2: ffff888025e60178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbe/0x1220 [ 260.740987][ T30] 3 locks held by kworker/0:4/5863: [ 260.746243][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 260.757280][ T30] #1: ffffc900043afd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 260.767984][ T30] #2: ffffffff8fedd408 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 260.779204][ T30] 3 locks held by kworker/0:5/5898: [ 260.784509][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 260.795277][ T30] #1: ffffc900037a7d80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 260.808697][ T30] #2: ffffffff9036d008 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 260.820547][ T30] 3 locks held by udevd/5958: [ 260.825296][ T30] #0: ffff888143b0e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 260.835444][ T30] #1: ffff888025b60c10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 260.845284][ T30] #2: ffff888025e451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbe/0x1220 [ 260.854619][ T30] 3 locks held by kworker/u8:9/5968: [ 260.860216][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 260.870967][ T30] #1: ffffc90003617d80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 260.883879][ T30] #2: ffff8880b862a898 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 260.893498][ T30] 1 lock held by syz.4.556/7812: [ 260.898582][ T30] #0: ffffffff8e1c7100 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 260.909390][ T30] 2 locks held by syz.4.556/7815: [ 260.914525][ T30] #0: ffffffff9036d008 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x168/0x570 [ 260.924984][ T30] #1: ffff88802f128d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_rfkill_set_block+0x1a7/0x360 [ 260.935929][ T30] 2 locks held by syz.2.559/7827: [ 260.941093][ T30] #0: ffffffff8fedd408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x281/0xaa0 [ 260.950434][ T30] #1: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 260.961483][ T30] 1 lock held by syz.3.551/7833: [ 260.966498][ T30] #0: ffffffff8fedd408 (rtnl_mutex){+.+.}-{4:4}, at: wext_handle_ioctl+0x214/0x2b0 [ 260.976393][ T30] [ 260.978808][ T30] ============================================= [ 260.978808][ T30] [ 260.987463][ T30] NMI backtrace for cpu 1 [ 260.991797][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 261.002303][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.012367][ T30] Call Trace: [ 261.015651][ T30] [ 261.018582][ T30] dump_stack_lvl+0x116/0x1f0 [ 261.023279][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 261.028228][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 261.034218][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 261.040210][ T30] watchdog+0xf14/0x1240 [ 261.044459][ T30] ? __pfx_watchdog+0x10/0x10 [ 261.049127][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.054318][ T30] ? __kthread_parkme+0x148/0x220 [ 261.059337][ T30] ? __pfx_watchdog+0x10/0x10 [ 261.064006][ T30] kthread+0x2c1/0x3a0 [ 261.068067][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.073261][ T30] ? __pfx_kthread+0x10/0x10 [ 261.077844][ T30] ret_from_fork+0x45/0x80 [ 261.082428][ T30] ? __pfx_kthread+0x10/0x10 [ 261.087009][ T30] ret_from_fork_asm+0x1a/0x30 [ 261.091778][ T30] [ 261.095681][ T30] Sending NMI from CPU 1 to CPUs 0: [ 261.101286][ C0] NMI backtrace for cpu 0 [ 261.101297][ C0] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 261.101320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.101333][ C0] Workqueue: events_unbound kfree_rcu_work [ 261.101359][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 261.101386][ C0] Code: 82 f8 15 00 00 83 f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.101405][ C0] RSP: 0018:ffffc9000214faa8 EFLAGS: 00000293 [ 261.101420][ C0] RAX: 0000000000000000 RBX: ffff888051ad0800 RCX: 0000000000000000 [ 261.101433][ C0] RDX: ffff88801cfca440 RSI: ffffffff814aeac8 RDI: ffff888051ad0800 [ 261.101446][ C0] RBP: 0000000080000000 R08: 0000000000000007 R09: 0000000000000000 [ 261.101459][ C0] R10: 0000000000000000 R11: 0000000000000035 R12: 0000000000000000 [ 261.101470][ C0] R13: ffff8880202d8028 R14: ffffea000146b400 R15: 0000000000000030 [ 261.101484][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 261.101503][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.101517][ C0] CR2: 00007ffd4a4f8f40 CR3: 0000000050518000 CR4: 00000000003526f0 [ 261.101530][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.101542][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.101557][ C0] Call Trace: [ 261.101562][ C0] [ 261.101569][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 261.101592][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 261.101612][ C0] ? nmi_handle+0x1ac/0x5d0 [ 261.101633][ C0] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 261.101658][ C0] ? default_do_nmi+0x6a/0x160 [ 261.101678][ C0] ? exc_nmi+0x170/0x1e0 [ 261.101697][ C0] ? end_repeat_nmi+0xf/0x53 [ 261.101728][ C0] ? __phys_addr+0x18/0x150 [ 261.101753][ C0] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 261.101777][ C0] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 261.101802][ C0] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 261.101826][ C0] [ 261.101832][ C0] [ 261.101838][ C0] __phys_addr+0x18/0x150 [ 261.101862][ C0] kmem_cache_free_bulk.part.0+0x14f/0x7f0 [ 261.101887][ C0] ? kvfree_rcu_bulk+0x454/0x550 [ 261.101914][ C0] kvfree_rcu_bulk+0x454/0x550 [ 261.101937][ C0] kfree_rcu_work+0x2f2/0x5a0 [ 261.101961][ C0] ? __pfx_kfree_rcu_work+0x10/0x10 [ 261.101985][ C0] ? process_one_work+0x921/0x1ba0 [ 261.102007][ C0] ? lock_acquire+0x2f/0xb0 [ 261.102028][ C0] ? process_one_work+0x921/0x1ba0 [ 261.102050][ C0] process_one_work+0x9c5/0x1ba0 [ 261.102075][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 261.102099][ C0] ? __pfx_process_one_work+0x10/0x10 [ 261.102120][ C0] ? rcu_is_watching+0x12/0xc0 [ 261.102150][ C0] ? assign_work+0x1a0/0x250 [ 261.102169][ C0] worker_thread+0x6c8/0xf00 [ 261.102200][ C0] ? __pfx_worker_thread+0x10/0x10 [ 261.102221][ C0] kthread+0x2c1/0x3a0 [ 261.102245][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.102267][ C0] ? __pfx_kthread+0x10/0x10 [ 261.102293][ C0] ret_from_fork+0x45/0x80 [ 261.102312][ C0] ? __pfx_kthread+0x10/0x10 [ 261.102337][ C0] ret_from_fork_asm+0x1a/0x30 [ 261.102370][ C0] [ 261.432152][ T7815] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 261.438620][ T7815] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 261.451165][ T5129] Bluetooth: hci0: command 0x0406 tx timeout [ 261.455462][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 261.455484][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 261.455508][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.455519][ T30] Call Trace: [ 261.455526][ T30] [ 261.455535][ T30] dump_stack_lvl+0x3d/0x1f0 [ 261.455565][ T30] panic+0x71d/0x800 [ 261.455583][ T30] ? __pfx_panic+0x10/0x10 [ 261.455610][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 261.455634][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 261.455654][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 261.455674][ T30] ? watchdog+0xd7e/0x1240 [ 261.455697][ T30] ? watchdog+0xd71/0x1240 [ 261.455722][ T30] watchdog+0xd8f/0x1240 [ 261.455748][ T30] ? __pfx_watchdog+0x10/0x10 [ 261.455769][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.455795][ T30] ? __kthread_parkme+0x148/0x220 [ 261.455821][ T30] ? __pfx_watchdog+0x10/0x10 [ 261.455843][ T30] kthread+0x2c1/0x3a0 [ 261.455866][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.455887][ T30] ? __pfx_kthread+0x10/0x10 [ 261.455912][ T30] ret_from_fork+0x45/0x80 [ 261.455930][ T30] ? __pfx_kthread+0x10/0x10 [ 261.455954][ T30] ret_from_fork_asm+0x1a/0x30 [ 261.455990][ T30] [ 261.457353][ T30] Kernel Offset: disabled