last executing test programs: 14.438162801s ago: executing program 3 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) r2 = socket$inet6(0xa, 0x3, 0x82) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 13.545769935s ago: executing program 3 (id=413): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8b28225ea772f0daee8c7c98100e05104d9", 0x12}], 0x1, 0x0, 0x0, 0x40000000}, 0x0) 13.130958249s ago: executing program 3 (id=415): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x11, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80001, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0x4000000}}, {{0xa, 0x20, 0x0, @private2}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r6, &(0x7f0000000fc0)={0x2020}, 0x2020) 12.008153593s ago: executing program 3 (id=419): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @sliced={0x7, [0x38, 0x1bf, 0xc6e, 0x909, 0x0, 0x8000, 0x7, 0x4, 0x0, 0xff, 0x0, 0x100, 0x0, 0x401, 0x8001, 0x0, 0x1, 0x5, 0x7, 0x9, 0x2, 0x2, 0x7, 0x5, 0x3, 0x7, 0x2, 0x4, 0x86c9, 0x24, 0x1ff, 0x9, 0x1, 0x2c7b, 0x6, 0x9, 0xd5, 0xf128, 0x2, 0x1, 0xa, 0x3ff, 0xa, 0xffff, 0x2, 0x7, 0x5], 0x7fffffff}}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\x00\x00\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGf]\x1b\x8a_\x80\x15\xad9\x85\f\xeb\x94\xe6\xc1\x1f\xc4\xdd\x06\x9b\x81v\xc5\xc5', 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0xc4c20000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100), 0x4000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 11.352581099s ago: executing program 3 (id=421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x3}, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32=r1, @ANYBLOB="000e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvmmsg(r0, &(0x7f0000002640)=[{{&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x1, &(0x7f0000000300)=""/139, 0x8b}, 0x9}, {{0x0, 0xfffffffffffffd6d, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/178, 0xb2}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/51, 0x33}, {&(0x7f0000000740)=""/99, 0x63}, {&(0x7f00000007c0)=""/50, 0x32}, {&(0x7f0000000800)=""/33, 0x21}], 0x8, &(0x7f00000008c0)=""/123, 0x7b}, 0xc}, {{&(0x7f0000000940)=@tipc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/215, 0xd7}, {&(0x7f0000000ec0)=""/153, 0x99}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x4, &(0x7f0000001f80)=""/60, 0x3c}, 0x1}], 0x3, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000000)={0x28, 0x0, r6, 0xfffffffffffffe18, &(0x7f0000000040)=""/29}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000400)={0x8, r5}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0x78) fcntl$addseals(r8, 0x409, 0x7) fallocate(r8, 0x0, 0x0, 0x3) r9 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)}) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r11 = semget$private(0x0, 0x207, 0x0) semtimedop(r11, &(0x7f0000000040)=[{0x3, 0x20, 0x1000}, {0x2, 0xff78, 0x1000}, {0x2, 0x1ff, 0x400}], 0x3, 0x0) 7.990038907s ago: executing program 1 (id=432): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) iopl(0x3) sysfs$1(0x1, 0x0) 7.951841888s ago: executing program 1 (id=433): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000ac0)={0x0, 0x20, &(0x7f0000000a80)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xb7a, 0x2) r2 = memfd_secret(0x0) pselect6(0x40, &(0x7f00000007c0)={0xffffffffffffffff, 0x80000000, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000800)={0x7e, 0xfffffffffffffffc, 0x100000, 0x1, 0x203, 0x92}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'bridge_slave_1\x00', {0x1}}) statx(r2, &(0x7f0000000240)='./file0\x00', 0x400, 0x1, &(0x7f00000002c0)) ptrace$getregs(0xc, 0x0, 0xf30, 0xfffffffffffffffc) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e14061400956f000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000c00)={0xb0000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)) shutdown(r4, 0x1) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) epoll_wait(r3, &(0x7f0000000540)=[{}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) 6.728441786s ago: executing program 1 (id=439): r0 = syz_io_uring_setup(0x3676, 0x0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4180, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x4, 0x600, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000040), 0x0}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000500)="f1ec57ba61f5f5996cc6230b4c74909535a6072612a062aa817429ef96c7732916d0ed5449a1d0987f95676e8f15629fa82d3d62dadf166227462cfdb983134bd541cc7971535056adef2a08311fc225084ec0c542189a61db3bd72e796ad46fa10f3d2c7a488740fb3f3eb05eb85c385dac6d6952beab23c907377e0563bbd1096c325600159f60f5120f37d0bcb01a29ecf81e6f9978abac466bdcb68d25a82ea7571db4eb39f905d6789d0ef18c8a666bee295c2f017bcf08bb1840a89d102f00fc74f414624abdd5b0a0a44b9c43a2e2ab", 0xd3) r3 = socket(0x848000000015, 0x805, 0x0) mkdir(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x76, 0x59, 0x8, 0x1de1, 0xc102, 0x1fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa4, 0xb, 0x5d}}]}}]}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYRESHEX=r3, @ANYRES8=r3, @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="b502e6eee50e259cff7efd0e0a8a7aef1761033d9d1500000000000000be8b062aa9a4b827293acc604eee3d050000003dba819502d3029487fb096236b62d0b1d7ddd79001c3378db35da8f0eb909000000411abdcf57ec9ff1f3c1134afe2ee32b977e70d8", @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c01d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000632000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000500)='inet_sock_set_state\x00', r10}, 0x10) close(r9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000240)={0x4}) 6.481805794s ago: executing program 4 (id=443): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) iopl(0x3) sysfs$1(0x1, 0x0) 6.425688037s ago: executing program 4 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffffff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x26}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 6.308463347s ago: executing program 4 (id=445): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x8, 0xfffff00e}, {0x6, 0x0, 0x0, 0xc}]}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$alg(0x26, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000000007"], 0x18}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0x31, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) 5.370992533s ago: executing program 4 (id=447): r0 = syz_open_dev$swradio(&(0x7f0000001000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}}, 0x0, 0x0, 0x39, 0x0, "a09368aa323944f80e6b1458e67f744d556133ef0160b1f004fe99a5ce227ef7cbe11d0277ccc0470e9a03d11ed6c7c3e8c2e4bb356dac2480241ed05bfe1b5f66f2d61b31b71e8371c4dfbe6d259272"}, 0xd8) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22000400) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a000100000000000000000002802000000000000008000100ac1414aa000000"], 0x24}}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000001040)={0x3, 0x1, 0x1}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r6}, './file0\x00'}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="00e6fecec8969a7efb1b927cd82ecbf4ead4c32a21aad84614d45a62ee658fe0e769ea9fb276a434ce4909d732032e6989c27de1b5548b7d94ce559666382c1ce863892ffc28a65cd6fb58dc24ccfa276eb2457031d781aae3babd9bc042eb14e374edb16ab2a3f324daea7d29a4324062fab044ad99af9e89b8ec45500a395e163d8d02b34f7d3c276370bd88c8e768d493e001505b7967a7f567c913f259505a9c6100b0902dea94ce3ade99f5c3b9da6d8730017c10280ff86e6e1f9e54006c5de741682d0c69785096704f3ded701fce5cc19df69b46c861ff345bb7a357e097dc966f", 0xe5) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000854be720f0031d58def0010203010902551ce98a0534c418049f0f02ff01070009050718400009060509050b031000048125"], 0x0) 4.584616842s ago: executing program 1 (id=448): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, 0x2}, 0x6) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{&(0x7f0000000540)=@ethernet, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/2, 0x2}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/110, 0x6e}], 0x5, &(0x7f0000000900)=""/124, 0x7c}, 0x55}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000a80)=""/84, 0x54}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/149, 0x95}], 0x4, &(0x7f0000000c80)=""/171, 0xab}, 0x1ff}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000003c0)=0xd3ea) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x0, 0x4, &(0x7f0000000a00)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='kyber_throttled\x00', r6}, 0xfffffffffffffdcd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) bind$alg(r1, &(0x7f0000000980)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4$alg(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000280)="237dd16e7ffc9821c4ee624ca8206ec3361210564abaafafdc743011a5fc9f31308a1253d91a1ff3c598f76e65a7", 0x2e}, {0x0}], 0x2}], 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001000)=ANY=[@ANYBLOB="a0aaaac5aaaaaa00451414aa0b019078001900004510000400b2444502091b0081ac1414bb6401010100"/71, @ANYRESHEX=r2], 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/mdstat\x00', 0x0, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/66, 0x42}], 0x1, 0x1000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00'}) 3.680530316s ago: executing program 1 (id=450): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.936482958s ago: executing program 1 (id=453): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r8, r9, 0x1800, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x2, 0xffff0000, 0x25, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 2.20274312s ago: executing program 4 (id=457): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000000001000002"], 0x10}}], 0x1, 0x0) 2.144809706s ago: executing program 4 (id=458): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904330001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x7536, 0x201, 0xffffffff, 0xffdffffe}, 0x0, &(0x7f0000000080)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x50000, 0x0) fstatfs(r3, &(0x7f0000000100)=""/112) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000095}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) unshare(0x8000000) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1) write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) 1.970280539s ago: executing program 2 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$isdn(0x22, 0x3, 0x22) bind$isdn(r1, &(0x7f0000000400)={0x22, 0xff, 0x30, 0x7}, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefe1, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x20040000) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x2c}}, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r6, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0x9, &(0x7f0000000100)={0x0, 0xffffffff}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x4d5}}, 0x1006) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x2, &(0x7f00000000c0), 0x20) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x884}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.949105795s ago: executing program 2 (id=461): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x19) socket$inet6(0xa, 0x80002, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) r2 = socket(0x1e, 0x801, 0x0) timerfd_create(0x0, 0x80000) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x1e, 0x3, 0x0, @hyper}, 0x10) 1.535558755s ago: executing program 2 (id=462): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[&(0x7f0000000000)="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", &(0x7f0000000100)="72d95fc6b4fbe56dfdd50352db338f41115bd9c7"]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) (async) pipe(&(0x7f0000000180)) (async) fcntl$setpipe(r1, 0x407, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[&(0x7f0000000000)="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", &(0x7f0000000100)="72d95fc6b4fbe56dfdd50352db338f41115bd9c7"]}) (async) 1.424651011s ago: executing program 2 (id=463): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@const={0x0, 0xf9ff, 0x0, 0x2, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @func_proto]}, {0x0, [0x0, 0x5f, 0x61]}}, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.412250517s ago: executing program 0 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000100)='./file0\x00', r2) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) io_setup(0x689, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x20, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x2}, [{0x2, 0x5, 0xee01}, {0x2, 0x3, 0xee01}, {0x2, 0x7}, {0x2, 0x2}], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4, 0xee01}, {0x8, 0x3}, {0x8, 0x101e476f03965e99}], {0x10, 0x9}, {0x20, 0x4}}, 0x6c, 0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = gettid() r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x8000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) read$FUSE(r7, &(0x7f0000005740)={0x2020}, 0x2020) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x70, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'netpci0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'sit0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000082}, 0xc044004) 1.334538059s ago: executing program 2 (id=465): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) iopl(0x3) sysfs$1(0x1, 0x0) 962.21708ms ago: executing program 2 (id=466): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) close(r0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x26, 0x0, 0x4ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, r0, 0x36, 0x28, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r2}, 0x20) close(r1) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) (async) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_disconnect(r5) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) (async) read$char_usb(r6, &(0x7f0000000040)=""/33, 0x21) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bind$tipc(r3, 0x0, 0x0) (async) recvmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x40000000) 816.604999ms ago: executing program 3 (id=467): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000027180)={0xf, {"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", 0x1000}}, 0x1006) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb186dd84d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 167.296303ms ago: executing program 0 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000004000018007000600666f000008000800000000000600010002000000080005"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 105.49823ms ago: executing program 0 (id=469): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000002680)=""/4104) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000070000004000018007000600666f000008000800000000000600010002000000080005"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 0s ago: executing program 0 (id=470): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x240448a0) r1 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) readv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x5, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x7, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603, 0x20}) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x80, 0x8, 0xffffffff}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x230, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x138, 0x180, 0x12, {0x959f1400}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast1}}, @common=@unspec=@limit={{0x48}, {0x0, 0x412}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) kernel console output (not intermixed with test programs): 75][ T5813] veth0_vlan: entered promiscuous mode [ 55.443366][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.463424][ T5813] veth1_vlan: entered promiscuous mode [ 55.479865][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.491719][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.515212][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.522349][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.557410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.564574][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.583983][ T5813] veth0_macvtap: entered promiscuous mode [ 55.594333][ T5813] veth1_macvtap: entered promiscuous mode [ 55.639686][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.680196][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.689601][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.719602][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.729127][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.739864][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.749487][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.766943][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.838824][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.866847][ T5821] veth0_vlan: entered promiscuous mode [ 55.908200][ T5821] veth1_vlan: entered promiscuous mode [ 55.939606][ T5820] veth0_vlan: entered promiscuous mode [ 55.948533][ T5817] veth0_vlan: entered promiscuous mode [ 55.959881][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.971854][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.006652][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.007133][ T5817] veth1_vlan: entered promiscuous mode [ 56.020130][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.022986][ T5821] veth0_macvtap: entered promiscuous mode [ 56.036229][ T5821] veth1_macvtap: entered promiscuous mode [ 56.048216][ T29] audit: type=1400 audit(1734662375.216:112): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.0TxVQd/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 56.079626][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.098450][ T5817] veth0_macvtap: entered promiscuous mode [ 56.105683][ T5820] veth1_vlan: entered promiscuous mode [ 56.115059][ T29] audit: type=1400 audit(1734662375.246:113): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.144732][ T29] audit: type=1400 audit(1734662375.246:114): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.0TxVQd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.176670][ T29] audit: type=1400 audit(1734662375.246:115): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.199382][ T29] audit: type=1400 audit(1734662375.246:116): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.0TxVQd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.213813][ T5820] veth0_macvtap: entered promiscuous mode [ 56.232644][ T29] audit: type=1400 audit(1734662375.246:117): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.0TxVQd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.272232][ T5817] veth1_macvtap: entered promiscuous mode [ 56.278248][ T29] audit: type=1400 audit(1734662375.246:118): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.287193][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.300035][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.325940][ T5815] Bluetooth: hci0: command tx timeout [ 56.326901][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.341035][ T29] audit: type=1400 audit(1734662375.246:119): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.346553][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.371315][ T29] audit: type=1400 audit(1734662375.246:120): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.376352][ T5820] veth1_macvtap: entered promiscuous mode [ 56.408164][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.418763][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.428824][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.439431][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.449858][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.462179][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.474359][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.486095][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.505536][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.531651][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.549788][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.561043][ T5815] Bluetooth: hci1: command tx timeout [ 56.569846][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.582303][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.591400][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.602522][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.612919][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.627099][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.639566][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.641281][ T5815] Bluetooth: hci3: command tx timeout [ 56.650447][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.672388][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.689987][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.699384][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.708321][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.717695][ T5815] Bluetooth: hci4: command tx timeout [ 56.721610][ T5142] Bluetooth: hci2: command tx timeout [ 56.741034][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.758387][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.770140][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.781319][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.792085][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.802172][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.812838][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.823744][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.831671][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.840373][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.849458][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.858207][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.886266][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.895578][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.905642][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.920260][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.045280][ T5824] veth0_vlan: entered promiscuous mode [ 57.067716][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.082072][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.117499][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.128081][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.140451][ T5824] veth1_vlan: entered promiscuous mode [ 57.228079][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.240092][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.248648][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.257349][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.281074][ T5824] veth0_macvtap: entered promiscuous mode [ 57.295698][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.316687][ T5824] veth1_macvtap: entered promiscuous mode [ 57.329510][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.366852][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.383397][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.393302][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.403801][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.413653][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.424302][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.435024][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.445496][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.456187][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.457148][ T5905] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.518908][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.519675][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.540539][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.552199][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.562184][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.572689][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.582805][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.593602][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.603462][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.613953][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.624615][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.636331][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.645158][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.653943][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.662691][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.810702][ T5913] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 58.394126][ T5142] Bluetooth: hci0: command tx timeout [ 58.551848][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.568509][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.580748][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.580762][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.580968][ T5921] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 58.651184][ T5142] Bluetooth: hci1: command tx timeout [ 58.686484][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.708615][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.722409][ T5142] Bluetooth: hci3: command tx timeout [ 58.791330][ T5142] Bluetooth: hci4: command tx timeout [ 58.797223][ T5815] Bluetooth: hci2: command tx timeout [ 58.861233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.870973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 59.045695][ T5932] trusted_key: syz.0.11 sent an empty control message without MSG_MORE. [ 59.251359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.322162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.622009][ T5928] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 59.971228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.069875][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 60.069890][ T29] audit: type=1400 audit(1734662379.226:173): avc: denied { read } for pid=5942 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.203414][ T29] audit: type=1400 audit(1734662379.226:174): avc: denied { open } for pid=5942 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.228359][ C1] vkms_vblank_simulate: vblank timer overrun [ 60.343935][ T29] audit: type=1400 audit(1734662379.226:175): avc: denied { getattr } for pid=5942 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.489829][ T5815] Bluetooth: hci0: command tx timeout [ 61.351980][ T29] audit: type=1400 audit(1734662379.406:176): avc: denied { create } for pid=5949 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.376286][ T29] audit: type=1400 audit(1734662379.406:177): avc: denied { getopt } for pid=5949 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.472171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.592467][ T29] audit: type=1400 audit(1734662379.406:178): avc: denied { connect } for pid=5949 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.801100][ T29] audit: type=1400 audit(1734662379.406:179): avc: denied { name_connect } for pid=5949 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 62.071560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.079771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.088445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.135950][ T5815] Bluetooth: hci1: command tx timeout [ 62.141531][ T5815] Bluetooth: hci3: command tx timeout [ 62.146942][ T5815] Bluetooth: hci2: command tx timeout [ 62.154145][ T5815] Bluetooth: hci4: command tx timeout [ 62.173690][ T29] audit: type=1400 audit(1734662379.776:180): avc: denied { create } for pid=5949 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.192901][ C1] vkms_vblank_simulate: vblank timer overrun [ 62.339591][ T29] audit: type=1400 audit(1734662379.786:181): avc: denied { name_connect } for pid=5949 comm="syz.3.15" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.363756][ T29] audit: type=1400 audit(1734662379.866:182): avc: denied { map_create } for pid=5957 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.700981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.384723][ T6035] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 64.511751][ T117] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.110061][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 65.110077][ T29] audit: type=1400 audit(1734662384.266:204): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 65.228486][ T117] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 65.517197][ T29] audit: type=1400 audit(1734662384.456:205): avc: denied { create } for pid=6036 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.757433][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.769982][ T117] usb 2-1: config 0 descriptor?? [ 65.780712][ T117] cp210x 2-1:0.0: cp210x converter detected [ 65.810841][ T29] audit: type=1400 audit(1734662384.466:206): avc: denied { append } for pid=6036 comm="syz.4.30" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.076799][ T6051] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 66.433496][ T117] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 66.472119][ T29] audit: type=1400 audit(1734662385.616:207): avc: denied { read } for pid=6057 comm="syz.3.37" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.751048][ T29] audit: type=1400 audit(1734662385.616:208): avc: denied { open } for pid=6057 comm="syz.3.37" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.775178][ T117] usb 2-1: cp210x converter now attached to ttyUSB0 [ 66.841066][ T29] audit: type=1400 audit(1734662385.946:209): avc: denied { read write } for pid=6056 comm="syz.0.36" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.947256][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.135076][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.151120][ T29] audit: type=1400 audit(1734662385.946:210): avc: denied { open } for pid=6056 comm="syz.0.36" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.248618][ T29] audit: type=1400 audit(1734662386.406:211): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.356282][ T25] usb 2-1: USB disconnect, device number 2 [ 67.403024][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 67.461274][ T25] cp210x 2-1:0.0: device disconnected [ 67.632892][ T29] audit: type=1400 audit(1734662386.776:212): avc: denied { write } for pid=6075 comm="syz.0.40" name="event2" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.659039][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.005861][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.006327][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.021564][ T29] audit: type=1400 audit(1734662386.776:213): avc: denied { open } for pid=6075 comm="syz.0.40" path="/dev/input/event2" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.045351][ C1] vkms_vblank_simulate: vblank timer overrun [ 68.466603][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.341295][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 69.370823][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.473681][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.486702][ T5863] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 69.525427][ T5863] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 69.564864][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.617414][ T5863] usb 3-1: Product: syz [ 69.637604][ T5863] usb 3-1: Manufacturer: syz [ 69.670698][ T5863] usb 3-1: SerialNumber: syz [ 69.952548][ T5863] vmk80xx 3-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 70.524092][ T6107] infiniband syz2: set active [ 70.528981][ T6107] infiniband syz2: added team_slave_1 [ 70.544576][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 70.544588][ T29] audit: type=1400 audit(1734662389.166:236): avc: denied { read write } for pid=6103 comm="syz.0.49" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 70.618378][ T5863] usb 3-1: USB disconnect, device number 2 [ 70.640628][ T29] audit: type=1400 audit(1734662389.166:237): avc: denied { open } for pid=6103 comm="syz.0.49" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 70.692060][ T6107] RDS/IB: syz2: added [ 70.696353][ T6107] smc: adding ib device syz2 with port count 1 [ 70.702709][ T6107] smc: ib device syz2 port 1 has pnetid [ 70.987330][ T29] audit: type=1400 audit(1734662389.206:238): avc: denied { write } for pid=6103 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.144065][ T29] audit: type=1400 audit(1734662389.766:239): avc: denied { create } for pid=6102 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.173237][ T29] audit: type=1400 audit(1734662389.766:240): avc: denied { setopt } for pid=6102 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.202118][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202218][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.212785][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.50'. [ 71.227361][ T29] audit: type=1400 audit(1734662389.766:241): avc: denied { write } for pid=6102 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.536639][ T29] audit: type=1400 audit(1734662390.096:242): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 71.564405][ T29] audit: type=1400 audit(1734662390.326:243): avc: denied { mounton } for pid=6115 comm="syz.0.50" path="/11/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.939225][ T6128] SELinux: Context unconfined is not valid (left unmapped). [ 71.948005][ T29] audit: type=1400 audit(1734662391.106:244): avc: denied { relabelto } for pid=6125 comm="syz.0.53" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 72.258128][ T29] audit: type=1400 audit(1734662391.136:245): avc: denied { associate } for pid=6125 comm="syz.0.53" name="msr" dev="devtmpfs" ino=87 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="unconfined" [ 72.565878][ T6141] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.256672][ T6144] syz.2.60 uses obsolete (PF_INET,SOCK_PACKET) [ 73.268832][ T6145] warning: `syz.4.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.502170][ T6152] Zero length message leads to an empty skb [ 74.329923][ T5142] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 74.768966][ T6162] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 75.256761][ T6169] ======================================================= [ 75.256761][ T6169] WARNING: The mand mount option has been deprecated and [ 75.256761][ T6169] and is ignored by this kernel. Remove the mand [ 75.256761][ T6169] option from the mount to silence this warning. [ 75.256761][ T6169] ======================================================= [ 75.656599][ T6172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.70'. [ 75.747558][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 75.747569][ T29] audit: type=1400 audit(1734662394.906:268): avc: denied { mount } for pid=6175 comm="syz.4.72" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 75.792745][ T29] audit: type=1400 audit(1734662394.946:269): avc: denied { getopt } for pid=6175 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.967721][ T6182] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.004892][ T29] audit: type=1400 audit(1734662395.056:270): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 76.512273][ T5815] Bluetooth: hci2: command tx timeout [ 76.526307][ T8] cfg80211: failed to load regulatory.db [ 76.622004][ T6189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.869907][ T5142] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 76.880183][ T5142] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 77.341030][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.515486][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 77.587373][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.797751][ T46] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 77.865806][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.898622][ T29] audit: type=1400 audit(1734662397.056:271): avc: denied { ioctl } for pid=6192 comm="syz.1.78" path="socket:[9078]" dev="sockfs" ino=9078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.026446][ T46] usb 5-1: config 0 descriptor?? [ 78.117153][ T29] audit: type=1400 audit(1734662397.266:272): avc: denied { read write } for pid=6192 comm="syz.1.78" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.317806][ T29] audit: type=1400 audit(1734662397.266:273): avc: denied { open } for pid=6192 comm="syz.1.78" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.416146][ T29] audit: type=1400 audit(1734662397.266:274): avc: denied { ioctl } for pid=6192 comm="syz.1.78" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.551103][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 78.669997][ T46] waltop 0003:172F:0037.0001: item fetching failed at offset 2/5 [ 78.683944][ T29] audit: type=1400 audit(1734662397.826:275): avc: denied { ioctl } for pid=6184 comm="syz.4.75" path="socket:[9244]" dev="sockfs" ino=9244 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.714884][ T46] waltop 0003:172F:0037.0001: probe with driver waltop failed with error -22 [ 78.878671][ T46] usb 5-1: USB disconnect, device number 2 [ 79.462391][ T29] audit: type=1400 audit(1734662398.586:276): avc: denied { create } for pid=6218 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.486107][ T29] audit: type=1400 audit(1734662398.586:277): avc: denied { write } for pid=6218 comm="syz.1.86" path="socket:[9130]" dev="sockfs" ino=9130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.784037][ T6238] x_tables: duplicate underflow at hook 3 [ 79.903063][ T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 80.313158][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 80.330074][ T8] usb 2-1: config 5 has an invalid interface number: 148 but max is 0 [ 80.339753][ T8] usb 2-1: config 5 has no interface number 0 [ 80.503472][ T8] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xC has an invalid bInterval 250, changing to 4 [ 80.517444][ T8] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xD has invalid maxpacket 155, setting to 64 [ 80.552682][ T8] usb 2-1: config 5 interface 148 has no altsetting 0 [ 80.796512][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 80.796556][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.796576][ T8] usb 2-1: Product: syz [ 80.796590][ T8] usb 2-1: Manufacturer: syz [ 80.796603][ T8] usb 2-1: SerialNumber: syz [ 80.984887][ T6251] Bluetooth: MGMT ver 1.23 [ 81.540663][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 81.540698][ T29] audit: type=1400 audit(1734662400.126:282): avc: denied { bind } for pid=6249 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.540871][ T29] audit: type=1400 audit(1734662400.146:283): avc: denied { write } for pid=6249 comm="syz.4.94" path="socket:[9295]" dev="sockfs" ino=9295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.541155][ T29] audit: type=1400 audit(1734662400.316:284): avc: denied { connect } for pid=6253 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.557658][ T6232] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.992316][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.056847][ T29] audit: type=1400 audit(1734662401.216:285): avc: denied { bind } for pid=6230 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.122283][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.253627][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 82.266430][ T6264] bridge_slave_1: left allmulticast mode [ 82.287656][ T6264] bridge_slave_1: left promiscuous mode [ 82.296020][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.326502][ T29] audit: type=1400 audit(1734662401.486:286): avc: denied { sys_module } for pid=6262 comm="syz.3.98" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.332425][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 82.369765][ T8] ipheth 2-1:5.148: Unable to find endpoints [ 82.403034][ T8] usb 2-1: USB disconnect, device number 3 [ 82.590105][ T29] audit: type=1400 audit(1734662401.746:287): avc: denied { read write } for pid=6275 comm="syz.3.101" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.824830][ T29] audit: type=1400 audit(1734662401.746:288): avc: denied { open } for pid=6275 comm="syz.3.101" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.936164][ T29] audit: type=1400 audit(1734662401.906:289): avc: denied { connect } for pid=6275 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.969099][ T29] audit: type=1400 audit(1734662402.056:290): avc: denied { map } for pid=6278 comm="syz.0.102" path="socket:[9330]" dev="sockfs" ino=9330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 83.005794][ T29] audit: type=1400 audit(1734662402.156:291): avc: denied { bind } for pid=6278 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.591315][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 85.710791][ T6328] delete_channel: no stack [ 86.578192][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 86.578203][ T29] audit: type=1400 audit(1734662405.736:310): avc: denied { create } for pid=6351 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.659730][ T29] audit: type=1400 audit(1734662405.736:311): avc: denied { write } for pid=6351 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=2312 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.685829][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.827278][ T5815] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 86.952209][ T29] audit: type=1400 audit(1734662405.736:312): avc: denied { append } for pid=6351 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2312 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.983286][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.310997][ T29] audit: type=1400 audit(1734662405.776:313): avc: denied { read } for pid=6377 comm="syz.0.127" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.341401][ T29] audit: type=1400 audit(1734662405.776:314): avc: denied { open } for pid=6377 comm="syz.0.127" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.364322][ T29] audit: type=1400 audit(1734662405.776:315): avc: denied { ioctl } for pid=6377 comm="syz.0.127" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.389688][ T29] audit: type=1400 audit(1734662405.876:316): avc: denied { unlink } for pid=6381 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2312 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.414476][ T29] audit: type=1400 audit(1734662406.506:317): avc: denied { search } for pid=5485 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=9446 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 87.495922][ T29] audit: type=1400 audit(1734662406.606:318): avc: denied { write } for pid=6385 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.205723][ T6404] cgroup: Name too long [ 88.480372][ T6412] openvswitch: netlink: Tunnel attr 49 out of range max 16 [ 88.893317][ T29] audit: type=1400 audit(1734662407.626:319): avc: denied { write } for pid=6397 comm="syz.0.132" name="media0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.898484][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 88.970062][ T6404] process 'syz.1.131' launched './file2' with NULL argv: empty string added [ 89.197693][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 89.262560][ T6420] nbd: socks must be embedded in a SOCK_ITEM attr [ 89.459049][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.839041][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 89.875335][ T5869] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 90.450382][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.461443][ T5869] usb 2-1: config 0 has no interface number 0 [ 90.504955][ T5869] usb 2-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 90.514400][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.577594][ T5869] usb 2-1: Product: syz [ 90.590869][ T5869] usb 2-1: Manufacturer: syz [ 90.603690][ T5869] usb 2-1: SerialNumber: syz [ 90.626347][ T5869] usb 2-1: config 0 descriptor?? [ 90.709790][ T5869] rndis_host 2-1:0.195: More than one union descriptor, skipping ... [ 90.726663][ T5869] usb 2-1: bad CDC descriptors [ 90.829880][ T5869] cdc_acm 2-1:0.195: More than one union descriptor, skipping ... [ 91.408195][ T5815] Bluetooth: hci4: command 0x0405 tx timeout [ 91.418968][ T46] usb 2-1: USB disconnect, device number 4 [ 93.274750][ T6489] vivid-004: disconnect [ 93.295260][ T6488] vivid-004: reconnect [ 93.393540][ T6491] openvswitch: netlink: Tunnel attr 49 out of range max 16 [ 93.835136][ T6493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.006992][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 94.007008][ T29] audit: type=1400 audit(1734662413.166:322): avc: denied { bind } for pid=6496 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.461159][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.853893][ T46] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=7b.a3 [ 94.868692][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.907711][ T46] usb 2-1: Product: syz [ 94.922796][ T46] usb 2-1: Manufacturer: syz [ 94.931338][ T46] usb 2-1: SerialNumber: syz [ 95.223210][ T29] audit: type=1400 audit(1734662414.386:323): avc: denied { append } for pid=6496 comm="syz.4.155" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.255410][ T46] usb 2-1: config 0 descriptor?? [ 95.314389][ T46] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench found [ 95.357556][ T46] usb 2-1: selecting invalid altsetting 1 [ 95.394066][ T46] snd_usb_variax 2-1:0.0: set_interface failed [ 95.400632][ T46] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench now disconnected [ 95.436133][ T46] snd_usb_variax 2-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 95.452257][ T6536] netlink: 'syz.0.161': attribute type 11 has an invalid length. [ 95.473185][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 95.568962][ T46] usb 2-1: USB disconnect, device number 5 [ 95.737780][ T29] audit: type=1400 audit(1734662414.896:324): avc: denied { read } for pid=6547 comm="syz.4.164" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.071400][ T29] audit: type=1400 audit(1734662414.896:325): avc: denied { open } for pid=6547 comm="syz.4.164" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.165239][ T6550] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 96.551032][ T29] audit: type=1400 audit(1734662415.336:326): avc: denied { nlmsg_write } for pid=6548 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.574560][ T29] audit: type=1400 audit(1734662415.416:327): avc: denied { read } for pid=6548 comm="syz.3.165" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.598076][ T29] audit: type=1400 audit(1734662415.416:328): avc: denied { open } for pid=6548 comm="syz.3.165" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.870640][ T29] audit: type=1400 audit(1734662416.996:329): avc: denied { bind } for pid=6576 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 97.889924][ T29] audit: type=1400 audit(1734662417.006:330): avc: denied { name_bind } for pid=6576 comm="syz.3.173" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 97.910534][ T29] audit: type=1400 audit(1734662417.006:331): avc: denied { node_bind } for pid=6576 comm="syz.3.173" saddr=::ffff:127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 97.989934][ T6582] FAULT_INJECTION: forcing a failure. [ 97.989934][ T6582] name failslab, interval 1, probability 0, space 0, times 1 [ 98.092129][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: syz.3.175 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 98.102767][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 98.112829][ T6582] Call Trace: [ 98.116120][ T6582] [ 98.119061][ T6582] dump_stack_lvl+0x16c/0x1f0 [ 98.123762][ T6582] should_fail_ex+0x497/0x5b0 [ 98.128459][ T6582] ? fs_reclaim_acquire+0xae/0x150 [ 98.133601][ T6582] should_failslab+0xc2/0x120 [ 98.138285][ T6582] __kmalloc_cache_noprof+0x68/0x410 [ 98.143585][ T6582] ? kasan_save_track+0x14/0x30 [ 98.148457][ T6582] x509_cert_parse+0x9a/0x900 [ 98.153147][ T6582] ? down_read+0xc9/0x330 [ 98.157508][ T6582] x509_key_preparse+0x65/0x9b0 [ 98.162385][ T6582] asymmetric_key_preparse+0xc7/0x190 [ 98.167783][ T6582] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 98.173789][ T6582] __key_create_or_update+0x457/0xe10 [ 98.179171][ T6582] ? __pfx___key_create_or_update+0x10/0x10 [ 98.185078][ T6582] ? lookup_user_key+0x2ca/0x12f0 [ 98.190137][ T6582] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 98.196310][ T6582] ? __pfx_keyring_search_iterator+0x10/0x10 [ 98.202314][ T6582] key_create_or_update+0x42/0x60 [ 98.207352][ T6582] __do_sys_add_key+0x29c/0x460 [ 98.212191][ T6582] ? __pfx___do_sys_add_key+0x10/0x10 [ 98.217550][ T6582] ? ksys_write+0x1ba/0x250 [ 98.222043][ T6582] do_syscall_64+0xcd/0x250 [ 98.226536][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.232415][ T6582] RIP: 0033:0x7fe2abf85d29 [ 98.236816][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.256408][ T6582] RSP: 002b:00007fe2ace7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 98.264804][ T6582] RAX: ffffffffffffffda RBX: 00007fe2ac175fa0 RCX: 00007fe2abf85d29 [ 98.272757][ T6582] RDX: 00000000200008c0 RSI: 0000000000000000 RDI: 0000000020000440 [ 98.280711][ T6582] RBP: 00007fe2ace7c090 R08: 00000000287bbbe6 R09: 0000000000000000 [ 98.288663][ T6582] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 98.296618][ T6582] R13: 0000000000000000 R14: 00007fe2ac175fa0 R15: 00007ffc90d35f98 [ 98.304582][ T6582] [ 98.939178][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.941470][ T5142] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 99.913852][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 99.988048][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 99.988065][ T29] audit: type=1400 audit(1734662419.146:335): avc: denied { mount } for pid=6604 comm="syz.4.182" name="/" dev="autofs" ino=10005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 100.061978][ T29] audit: type=1400 audit(1734662419.216:336): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 100.079683][ T8] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 100.094458][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 100.115799][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.147288][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.157329][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.166339][ T6613] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 100.170431][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.177074][ T6613] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 100.186256][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.343122][ T6618] FAULT_INJECTION: forcing a failure. [ 100.343122][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.357779][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.4.187 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 100.368373][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 100.378405][ T6618] Call Trace: [ 100.381663][ T6618] [ 100.384582][ T6618] dump_stack_lvl+0x16c/0x1f0 [ 100.389259][ T6618] should_fail_ex+0x497/0x5b0 [ 100.393915][ T6618] _copy_to_user+0x32/0xd0 [ 100.398303][ T6618] simple_read_from_buffer+0xd0/0x160 [ 100.403657][ T6618] proc_fail_nth_read+0x198/0x270 [ 100.408657][ T6618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.414178][ T6618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.419698][ T6618] vfs_read+0x1df/0xbe0 [ 100.423828][ T6618] ? __fget_files+0x1fc/0x3a0 [ 100.428479][ T6618] ? __pfx___mutex_lock+0x10/0x10 [ 100.433481][ T6618] ? __pfx_vfs_read+0x10/0x10 [ 100.438134][ T6618] ? __fget_files+0x206/0x3a0 [ 100.442789][ T6618] ksys_read+0x12b/0x250 [ 100.447003][ T6618] ? __pfx_ksys_read+0x10/0x10 [ 100.451745][ T6618] do_syscall_64+0xcd/0x250 [ 100.456229][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.462099][ T6618] RIP: 0033:0x7fee9a98473c [ 100.466488][ T6618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.486086][ T6618] RSP: 002b:00007fee9b727030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.494478][ T6618] RAX: ffffffffffffffda RBX: 00007fee9ab75fa0 RCX: 00007fee9a98473c [ 100.502426][ T6618] RDX: 000000000000000f RSI: 00007fee9b7270a0 RDI: 0000000000000004 [ 100.510384][ T6618] RBP: 00007fee9b727090 R08: 0000000000000000 R09: 0000000000000000 [ 100.518347][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.526296][ T6618] R13: 0000000000000000 R14: 00007fee9ab75fa0 R15: 00007ffff47a6708 [ 100.534247][ T6618] [ 100.537293][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.578793][ T8] usb 1-1: usb_control_msg returned -32 [ 100.584436][ T8] usbtmc 1-1:16.0: can't read capabilities [ 100.722398][ T6619] ip6erspan0: entered promiscuous mode [ 100.806552][ T5142] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 101.009685][ T29] audit: type=1400 audit(1734662420.166:337): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.283093][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 101.297588][ T6590] usbtmc 1-1:16.0: Unable to send data, error -71 [ 101.377260][ T6627] FAULT_INJECTION: forcing a failure. [ 101.377260][ T6627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.402440][ T6627] CPU: 0 UID: 0 PID: 6627 Comm: syz.2.189 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 101.413059][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 101.423092][ T6627] Call Trace: [ 101.426344][ T6627] [ 101.429251][ T6627] dump_stack_lvl+0x16c/0x1f0 [ 101.433909][ T6627] should_fail_ex+0x497/0x5b0 [ 101.438565][ T6627] _copy_from_iter+0x2a1/0x1560 [ 101.443392][ T6627] ? trace_lock_acquire+0x14e/0x1f0 [ 101.448566][ T6627] ? __alloc_skb+0x1fe/0x380 [ 101.453133][ T6627] ? __pfx__copy_from_iter+0x10/0x10 [ 101.458413][ T6627] ? __virt_addr_valid+0x1a4/0x590 [ 101.463547][ T6627] ? __virt_addr_valid+0x5e/0x590 [ 101.468562][ T6627] ? __phys_addr_symbol+0x30/0x80 [ 101.473565][ T6627] ? __check_object_size+0x488/0x710 [ 101.478831][ T6627] netlink_sendmsg+0x813/0xd70 [ 101.483576][ T6627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.488843][ T6627] ____sys_sendmsg+0xaaf/0xc90 [ 101.493585][ T6627] ? copy_msghdr_from_user+0x10b/0x160 [ 101.499019][ T6627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.504286][ T6627] ___sys_sendmsg+0x135/0x1e0 [ 101.508949][ T6627] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.514151][ T6627] ? __pfx_lock_release+0x10/0x10 [ 101.519168][ T6627] ? trace_lock_acquire+0x14e/0x1f0 [ 101.524348][ T6627] ? __fget_files+0x206/0x3a0 [ 101.529004][ T6627] __sys_sendmsg+0x16e/0x220 [ 101.533569][ T6627] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.538665][ T6627] do_syscall_64+0xcd/0x250 [ 101.543148][ T6627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.549019][ T6627] RIP: 0033:0x7f8097385d29 [ 101.553411][ T6627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.573100][ T6627] RSP: 002b:00007f8098296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.581490][ T6627] RAX: ffffffffffffffda RBX: 00007f8097575fa0 RCX: 00007f8097385d29 [ 101.589445][ T6627] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000004 [ 101.597412][ T6627] RBP: 00007f8098296090 R08: 0000000000000000 R09: 0000000000000000 [ 101.605360][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.613324][ T6627] R13: 0000000000000000 R14: 00007f8097575fa0 R15: 00007ffff841bad8 [ 101.621308][ T6627] [ 101.624416][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.634134][ T29] audit: type=1400 audit(1734662420.616:338): avc: denied { setopt } for pid=6584 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.670097][ T29] audit: type=1400 audit(1734662420.616:339): avc: denied { write } for pid=6584 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.703670][ T29] audit: type=1400 audit(1734662420.796:340): avc: denied { connect } for pid=6584 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.767466][ T6631] netlink: 'syz.2.190': attribute type 10 has an invalid length. [ 101.778114][ T6631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.190'. [ 101.803091][ T6631] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.815413][ T6631] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.825216][ T6631] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.834363][ T6631] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.952179][ T6635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.474718][ T29] audit: type=1400 audit(1734662421.636:341): avc: denied { bind } for pid=6637 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.550674][ T6640] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.561933][ T5142] Bluetooth: hci0: link tx timeout [ 102.565334][ T6640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.567581][ T5142] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.833361][ T5865] usb 1-1: USB disconnect, device number 2 [ 102.871039][ T5815] Bluetooth: hci4: command 0x0405 tx timeout [ 102.914041][ T6649] netlink: 'syz.4.196': attribute type 11 has an invalid length. [ 102.945647][ T6649] netlink: 140 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.255920][ T6656] 9pnet: Found fid 0 not clunked [ 103.314361][ T29] audit: type=1400 audit(1734662422.476:342): avc: denied { getopt } for pid=6655 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.631141][ T29] audit: type=1400 audit(1734662422.506:343): avc: denied { bind } for pid=6654 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.699812][ T29] audit: type=1400 audit(1734662422.716:344): avc: denied { read } for pid=6661 comm="syz.4.203" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.631398][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 104.951109][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 105.506743][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 105.506769][ T29] audit: type=1400 audit(1734662424.666:351): avc: denied { map } for pid=6696 comm="syz.1.214" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.228448][ T6704] netlink: 'syz.3.215': attribute type 44 has an invalid length. [ 106.339892][ T6707] FAULT_INJECTION: forcing a failure. [ 106.339892][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.421149][ T6707] CPU: 1 UID: 0 PID: 6707 Comm: syz.1.218 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 106.431783][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 106.441849][ T6707] Call Trace: [ 106.445145][ T6707] [ 106.448067][ T6707] dump_stack_lvl+0x16c/0x1f0 [ 106.452740][ T6707] should_fail_ex+0x497/0x5b0 [ 106.457435][ T6707] _copy_from_iter+0x2a1/0x1560 [ 106.462283][ T6707] ? __pfx__copy_from_iter+0x10/0x10 [ 106.467573][ T6707] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 106.473550][ T6707] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 106.479462][ T6707] ? __pfx_lock_release+0x10/0x10 [ 106.484488][ T6707] ? trace_lock_acquire+0x14e/0x1f0 [ 106.489680][ T6707] ? __pfx_lock_release+0x10/0x10 [ 106.494692][ T6707] copy_page_from_iter+0xa5/0x120 [ 106.499711][ T6707] tun_build_skb.constprop.0+0x294/0x1120 [ 106.505426][ T6707] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 106.511576][ T6707] ? __pfx___lock_acquire+0x10/0x10 [ 106.516760][ T6707] ? register_lock_class+0xb1/0x1240 [ 106.522039][ T6707] ? __lock_acquire+0xcc5/0x3c40 [ 106.526965][ T6707] tun_get_user+0x870/0x3e40 [ 106.531551][ T6707] ? find_held_lock+0x2d/0x110 [ 106.536309][ T6707] ? __pfx_tun_get_user+0x10/0x10 [ 106.541330][ T6707] ? find_held_lock+0x2d/0x110 [ 106.546086][ T6707] ? __pfx_lock_release+0x10/0x10 [ 106.551103][ T6707] tun_chr_write_iter+0xdc/0x210 [ 106.556029][ T6707] vfs_write+0x5ae/0x1150 [ 106.560347][ T6707] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 106.565882][ T6707] ? __pfx_vfs_write+0x10/0x10 [ 106.570630][ T6707] ? __fget_files+0x40/0x3a0 [ 106.575216][ T6707] ksys_write+0x12b/0x250 [ 106.579538][ T6707] ? __pfx_ksys_write+0x10/0x10 [ 106.584380][ T6707] do_syscall_64+0xcd/0x250 [ 106.588873][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.594754][ T6707] RIP: 0033:0x7f0824f847df [ 106.599156][ T6707] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 106.618768][ T6707] RSP: 002b:00007f0825d5f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 106.627189][ T6707] RAX: ffffffffffffffda RBX: 00007f0825175fa0 RCX: 00007f0824f847df [ 106.635176][ T6707] RDX: 000000000000006e RSI: 0000000020001300 RDI: 00000000000000c8 [ 106.643147][ T6707] RBP: 00007f0825d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.651105][ T6707] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 106.659061][ T6707] R13: 0000000000000000 R14: 00007f0825175fa0 R15: 00007ffd77ae7ea8 [ 106.667025][ T6707] [ 106.673397][ T5865] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.701054][ T29] audit: type=1400 audit(1734662425.846:352): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.735911][ T29] audit: type=1400 audit(1734662425.856:353): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.781238][ T29] audit: type=1400 audit(1734662425.856:354): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.813141][ T5863] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.821039][ T29] audit: type=1400 audit(1734662425.856:355): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.821857][ T6714] netlink: 'syz.4.220': attribute type 10 has an invalid length. [ 106.843778][ T29] audit: type=1400 audit(1734662425.856:356): avc: denied { unlink } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.843818][ T29] audit: type=1400 audit(1734662425.856:357): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.917843][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 106.926772][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 106.947321][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.991293][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.999352][ T6714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.027770][ T5865] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.039853][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.050700][ T6714] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.055937][ T5865] usb 1-1: config 0 has no interface number 0 [ 107.075378][ T6716] bridge_slave_0: left allmulticast mode [ 107.076316][ T5865] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.081176][ T6716] bridge_slave_0: left promiscuous mode [ 107.100187][ T5865] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.100243][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.109700][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.127814][ T5865] usb 1-1: Product: syz [ 107.142251][ T5865] usb 1-1: Manufacturer: syz [ 107.297805][ T6719] openvswitch: netlink: Tunnel attr 49 out of range max 16 [ 107.449113][ T5865] usb 1-1: SerialNumber: syz [ 107.484072][ T6716] bond0: (slave bridge0): Releasing backup interface [ 107.589807][ T5865] usb 1-1: config 0 descriptor?? [ 107.611000][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 107.618782][ T5865] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 107.618921][ T5863] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.636622][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.647607][ T5863] usb 4-1: config 0 has no interface number 0 [ 107.654059][ T5863] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.707449][ T5863] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.724643][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.740131][ T29] audit: type=1400 audit(1734662426.906:358): avc: denied { mount } for pid=6720 comm="syz.2.222" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.761985][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.797146][ T5863] usb 4-1: Product: syz [ 107.805445][ T5863] usb 4-1: Manufacturer: syz [ 107.810428][ T5863] usb 4-1: SerialNumber: syz [ 107.829763][ T5865] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 107.837197][ T5865] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 107.848042][ T29] audit: type=1400 audit(1734662426.966:359): avc: denied { write } for pid=6720 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.890822][ T5863] usb 4-1: config 0 descriptor?? [ 107.926540][ T5863] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.099899][ T6736] FAULT_INJECTION: forcing a failure. [ 108.099899][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 108.112847][ T6736] CPU: 0 UID: 0 PID: 6736 Comm: syz.0.216 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 108.123430][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 108.133482][ T6736] Call Trace: [ 108.136741][ T6736] [ 108.139648][ T6736] dump_stack_lvl+0x16c/0x1f0 [ 108.144306][ T6736] should_fail_ex+0x497/0x5b0 [ 108.148962][ T6736] ? fs_reclaim_acquire+0xae/0x150 [ 108.154053][ T6736] should_failslab+0xc2/0x120 [ 108.158707][ T6736] __kmalloc_noprof+0xcb/0x510 [ 108.163620][ T6736] ? d_absolute_path+0x137/0x1b0 [ 108.168555][ T6736] ? rcu_is_watching+0x12/0xc0 [ 108.173322][ T6736] tomoyo_encode2+0x100/0x3e0 [ 108.178008][ T6736] tomoyo_encode+0x29/0x50 [ 108.182426][ T6736] tomoyo_realpath_from_path+0x19d/0x720 [ 108.188063][ T6736] tomoyo_path_number_perm+0x248/0x590 [ 108.193511][ T6736] ? tomoyo_path_number_perm+0x235/0x590 [ 108.199143][ T6736] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.205126][ T6736] ? __pfx_lock_release+0x10/0x10 [ 108.210134][ T6736] ? trace_lock_acquire+0x14e/0x1f0 [ 108.215324][ T6736] ? lock_acquire+0x2f/0xb0 [ 108.219811][ T6736] ? __fget_files+0x40/0x3a0 [ 108.224395][ T6736] ? __fget_files+0x206/0x3a0 [ 108.229059][ T6736] security_file_ioctl+0x9b/0x240 [ 108.234070][ T6736] __x64_sys_ioctl+0xb7/0x200 [ 108.238737][ T6736] do_syscall_64+0xcd/0x250 [ 108.243233][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.249112][ T6736] RIP: 0033:0x7fdfe8f85d29 [ 108.253510][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.273107][ T6736] RSP: 002b:00007fdfe9db3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.281507][ T6736] RAX: ffffffffffffffda RBX: 00007fdfe9176080 RCX: 00007fdfe8f85d29 [ 108.289462][ T6736] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 108.297419][ T6736] RBP: 00007fdfe9db3090 R08: 0000000000000000 R09: 0000000000000000 [ 108.305374][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.313332][ T6736] R13: 0000000000000000 R14: 00007fdfe9176080 R15: 00007ffff268e958 [ 108.321299][ T6736] [ 108.324433][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.342492][ T6736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.385089][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.395501][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.609387][ T5863] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 108.609489][ T5863] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 108.673555][ T5863] usb 1-1: USB disconnect, device number 3 [ 109.213564][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.223682][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.285361][ T5836] usb 4-1: USB disconnect, device number 2 [ 110.391157][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 111.911738][ T6730] syz.1.223: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 111.936143][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.1.223 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 111.946777][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 111.956841][ T6730] Call Trace: [ 111.960107][ T6730] [ 111.963027][ T6730] dump_stack_lvl+0x16c/0x1f0 [ 111.967695][ T6730] warn_alloc+0x24d/0x3a0 [ 111.972027][ T6730] ? __pfx_warn_alloc+0x10/0x10 [ 111.976898][ T6730] ? __get_vm_area_node+0x1b0/0x2f0 [ 111.982088][ T6730] ? __get_vm_area_node+0x1dc/0x2f0 [ 111.987296][ T6730] __vmalloc_node_range_noprof+0x1105/0x1530 [ 111.993292][ T6730] ? do_replace_finish+0xe7/0x22b0 [ 111.998474][ T6730] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.004836][ T6730] ? __get_vm_area_node+0x1b0/0x2f0 [ 112.010029][ T6730] ? __get_vm_area_node+0x1dc/0x2f0 [ 112.015243][ T6730] __vmalloc_node_range_noprof+0xd85/0x1530 [ 112.021124][ T6730] ? do_replace_finish+0xe7/0x22b0 [ 112.026223][ T6730] ? vmap_small_pages_range_noflush+0x7d2/0xd30 [ 112.032460][ T6730] ? do_replace_finish+0xe7/0x22b0 [ 112.037559][ T6730] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.043870][ T6730] ? __lock_acquire+0x15a9/0x3c40 [ 112.048883][ T6730] ? do_replace_finish+0xe7/0x22b0 [ 112.053983][ T6730] vmalloc_noprof+0x6b/0x90 [ 112.058476][ T6730] ? do_replace_finish+0xe7/0x22b0 [ 112.063574][ T6730] do_replace_finish+0xe7/0x22b0 [ 112.068496][ T6730] ? find_held_lock+0x2d/0x110 [ 112.073255][ T6730] ? find_held_lock+0x2d/0x110 [ 112.078011][ T6730] ? __pfx_do_replace_finish+0x10/0x10 [ 112.083455][ T6730] ? __pfx_lock_release+0x10/0x10 [ 112.088466][ T6730] ? do_raw_spin_unlock+0x172/0x230 [ 112.093652][ T6730] ? lock_acquire+0x2f/0xb0 [ 112.098141][ T6730] ? __might_fault+0xe3/0x190 [ 112.102806][ T6730] ? __might_fault+0xe3/0x190 [ 112.107478][ T6730] do_replace+0x351/0x500 [ 112.111794][ T6730] ? __pfx_do_replace+0x10/0x10 [ 112.116639][ T6730] ? bpf_lsm_capable+0x9/0x10 [ 112.121298][ T6730] ? security_capable+0x7e/0x260 [ 112.126222][ T6730] do_ebt_set_ctl+0x470/0x580 [ 112.130905][ T6730] ? sockopt_release_sock+0x52/0x60 [ 112.136093][ T6730] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 112.141280][ T6730] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 112.146646][ T6730] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 112.152616][ T6730] nf_setsockopt+0x8a/0xf0 [ 112.157023][ T6730] ip_setsockopt+0xcb/0xf0 [ 112.161456][ T6730] ipv6_setsockopt+0x155/0x170 [ 112.166296][ T6730] udpv6_setsockopt+0x7d/0xd0 [ 112.170989][ T6730] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 112.176908][ T6730] do_sock_setsockopt+0x222/0x480 [ 112.181925][ T6730] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 112.187458][ T6730] ? lock_acquire+0x2f/0xb0 [ 112.191963][ T6730] __sys_setsockopt+0x1a0/0x230 [ 112.196808][ T6730] __x64_sys_setsockopt+0xbd/0x160 [ 112.201909][ T6730] ? do_syscall_64+0x91/0x250 [ 112.206592][ T6730] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.211792][ T6730] do_syscall_64+0xcd/0x250 [ 112.216285][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.222170][ T6730] RIP: 0033:0x7f0824f85d29 [ 112.226571][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.246179][ T6730] RSP: 002b:00007f0825d3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.254578][ T6730] RAX: ffffffffffffffda RBX: 00007f0825176080 RCX: 00007f0824f85d29 [ 112.262536][ T6730] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 112.270494][ T6730] RBP: 00007f0825001aa8 R08: 00000000000003c0 R09: 0000000000000000 [ 112.278450][ T6730] R10: 0000000020000880 R11: 0000000000000246 R12: 0000000000000000 [ 112.286410][ T6730] R13: 0000000000000000 R14: 00007f0825176080 R15: 00007ffd77ae7ea8 [ 112.294374][ T6730] [ 112.299411][ T6730] Mem-Info: [ 112.303280][ T6730] active_anon:11314 inactive_anon:0 isolated_anon:0 [ 112.303280][ T6730] active_file:12684 inactive_file:38516 isolated_file:0 [ 112.303280][ T6730] unevictable:768 dirty:764 writeback:0 [ 112.303280][ T6730] slab_reclaimable:11049 slab_unreclaimable:102000 [ 112.303280][ T6730] mapped:32800 shmem:7140 pagetables:883 [ 112.303280][ T6730] sec_pagetables:0 bounce:0 [ 112.303280][ T6730] kernel_misc_reclaimable:0 [ 112.303280][ T6730] free:1252024 free_pcp:659 free_cma:0 [ 112.348598][ T6730] Node 0 active_anon:45256kB inactive_anon:0kB active_file:50736kB inactive_file:153992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131200kB dirty:3056kB writeback:0kB shmem:27024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11120kB pagetables:3532kB sec_pagetables:0kB all_unreclaimable? no [ 112.381730][ T6730] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 112.412329][ T6730] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.439484][ T6730] lowmem_reserve[]: 0 2459 2459 0 0 [ 112.444807][ T6730] Node 0 DMA32 free:1086548kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:45256kB inactive_anon:0kB active_file:50736kB inactive_file:153900kB unevictable:1536kB writepending:3056kB present:3129332kB managed:2547144kB mlocked:0kB bounce:0kB free_pcp:2716kB local_pcp:1624kB free_cma:0kB [ 112.475865][ T6730] lowmem_reserve[]: 0 0 0 0 0 [ 112.480598][ T6730] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 112.507823][ T6730] lowmem_reserve[]: 0 0 0 0 0 [ 112.513203][ T6730] Node 1 Normal free:3906040kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.542107][ T6730] lowmem_reserve[]: 0 0 0 0 0 [ 112.546929][ T6730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.547045][ T6730] Node 0 DMA32: 1*4kB (U) 0*8kB 10*16kB (ME) 23*32kB (UME) 325*64kB (UME) 46*128kB (UME) 40*256kB (UME) 19*512kB (M) 11*1024kB (UM) 4*2048kB (UM) 249*4096kB (M) = 1086916kB [ 112.547196][ T6730] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 112.547293][ T6730] Node 1 Normal: 220*4kB (UME) 61*8kB (UME) 36*16kB (UME) 189*32kB (UME) 87*64kB (UME) 20*128kB (UM) 11*256kB (UM) 10*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3906040kB [ 112.547449][ T6730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.547469][ T6730] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.547482][ T6730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.547497][ T6730] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.547511][ T6730] 58340 total pagecache pages [ 112.547518][ T6730] 0 pages in swap cache [ 112.547524][ T6730] Free swap = 124372kB [ 112.547530][ T6730] Total swap = 124996kB [ 112.547537][ T6730] 2097051 pages RAM [ 112.547542][ T6730] 0 pages HighMem/MovableOnly [ 112.547548][ T6730] 428607 pages reserved [ 112.547553][ T6730] 0 pages cma reserved [ 112.781391][ T29] audit: type=1400 audit(1734662431.936:360): avc: denied { listen } for pid=6785 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.781429][ T29] audit: type=1400 audit(1734662431.936:361): avc: denied { accept } for pid=6785 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.857888][ T6802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.909381][ T29] audit: type=1400 audit(1734662433.026:362): avc: denied { connect } for pid=6801 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 113.930954][ T29] audit: type=1400 audit(1734662433.026:363): avc: denied { name_connect } for pid=6801 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 113.954665][ T29] audit: type=1400 audit(1734662433.026:364): avc: denied { getopt } for pid=6801 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 114.830047][ T29] audit: type=1400 audit(1734662433.986:365): avc: denied { connect } for pid=6820 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.009822][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.652407][ T6827] qnx4: no qnx4 filesystem (no root dir). [ 115.661145][ T29] audit: type=1400 audit(1734662434.746:366): avc: denied { mounton } for pid=6822 comm="syz.4.250" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 115.711075][ T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 115.731282][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.748419][ T8] usb 4-1: config 1 has no interface number 1 [ 115.767765][ T8] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.881429][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 115.909861][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.933969][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.949736][ T8] usb 4-1: Product: syz [ 115.954071][ T8] usb 4-1: Manufacturer: Ѝ [ 115.958584][ T8] usb 4-1: SerialNumber: syz [ 116.296528][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.256'. [ 116.338751][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.347965][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.447783][ T29] audit: type=1400 audit(1734662435.606:367): avc: denied { create } for pid=6847 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.486547][ T8] usb 4-1: USB disconnect, device number 3 [ 116.488948][ T29] audit: type=1400 audit(1734662435.626:368): avc: denied { ioctl } for pid=6847 comm="syz.2.258" path="socket:[12454]" dev="sockfs" ino=12454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.561902][ T29] audit: type=1400 audit(1734662435.626:369): avc: denied { ioctl } for pid=6847 comm="syz.2.258" path="/dev/input/mouse0" dev="devtmpfs" ino=1016 ioctlcmd=0xaf02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.608667][ T6876] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.106227][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 118.106266][ T29] audit: type=1400 audit(1734662437.266:372): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 118.984621][ T6891] sg_write: data in/out 11/10 bytes for SCSI command 0xfd-- guessing data in; [ 118.984621][ T6891] program syz.1.274 not setting count and/or reply_len properly [ 119.511229][ T29] audit: type=1400 audit(1734662438.136:373): avc: denied { read write } for pid=6886 comm="syz.1.274" name="sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.586853][ T29] audit: type=1400 audit(1734662438.136:374): avc: denied { open } for pid=6886 comm="syz.1.274" path="/dev/sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.611207][ T29] audit: type=1400 audit(1734662438.456:375): avc: denied { getopt } for pid=6886 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.419922][ T29] audit: type=1326 audit(1734662440.576:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.4.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee9a985d29 code=0x0 [ 121.831177][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.104416][ T29] audit: type=1400 audit(1734662441.126:377): avc: denied { read } for pid=6920 comm="syz.2.284" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 122.142546][ T29] audit: type=1400 audit(1734662441.126:378): avc: denied { open } for pid=6920 comm="syz.2.284" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 122.553143][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.565340][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.582274][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.601142][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 122.610569][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.628705][ T8] usb 4-1: config 0 descriptor?? [ 122.662698][ T29] audit: type=1326 audit(1734662441.826:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 122.741566][ T6936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.726987][ T29] audit: type=1326 audit(1734662441.826:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727029][ T29] audit: type=1326 audit(1734662441.826:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727075][ T29] audit: type=1326 audit(1734662441.826:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727107][ T29] audit: type=1326 audit(1734662441.826:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727132][ T29] audit: type=1326 audit(1734662441.826:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727158][ T29] audit: type=1326 audit(1734662441.826:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727206][ T29] audit: type=1326 audit(1734662441.826:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727234][ T29] audit: type=1326 audit(1734662441.826:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727263][ T29] audit: type=1326 audit(1734662441.826:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.727292][ T29] audit: type=1326 audit(1734662441.826:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8097385d29 code=0x7ffc0000 [ 123.741621][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 123.744253][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 123.757752][ T8] usb 4-1: USB disconnect, device number 4 [ 123.865315][ T6941] netlink: 72 bytes leftover after parsing attributes in process `syz.3.289'. [ 124.277296][ T5862] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.526301][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.526327][ T5862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.528835][ T5862] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.528895][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.528946][ T5862] usb 2-1: SerialNumber: syz [ 125.690616][ T5862] usb 2-1: 0:2 : does not exist [ 125.701364][ T5862] usb 2-1: USB disconnect, device number 6 [ 125.937541][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.332484][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.414415][ T6977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.969116][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.300'. [ 127.061028][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 127.078827][ T5869] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 127.096006][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.104806][ T5869] usb 5-1: Product: syz [ 127.109411][ T5869] usb 5-1: Manufacturer: syz [ 127.119129][ T5869] usb 5-1: SerialNumber: syz [ 127.169217][ T5869] usb 5-1: config 0 descriptor?? [ 127.177653][ T5869] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 128.321043][ T5836] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 128.331802][ T5869] gspca_sonixj: reg_w1 err -110 [ 128.336744][ T5869] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 129.196603][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 129.196619][ T29] audit: type=1400 audit(1734662448.356:473): avc: denied { setopt } for pid=6996 comm="syz.2.307" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.360387][ T29] audit: type=1400 audit(1734662448.396:474): avc: denied { module_request } for pid=6996 comm="syz.2.307" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 129.423972][ T5836] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 129.457459][ T5836] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 129.463145][ T5862] usb 5-1: USB disconnect, device number 3 [ 129.503600][ T5836] usb 2-1: config 0 has no interface number 0 [ 129.513697][ T29] audit: type=1400 audit(1734662448.666:475): avc: denied { read } for pid=7000 comm="syz.3.309" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.525034][ T5836] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.583162][ T29] audit: type=1400 audit(1734662448.666:476): avc: denied { open } for pid=7000 comm="syz.3.309" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.606955][ T29] audit: type=1400 audit(1734662448.676:477): avc: denied { ioctl } for pid=7000 comm="syz.3.309" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.631244][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.647182][ T29] audit: type=1400 audit(1734662448.706:478): avc: denied { read } for pid=7001 comm="syz.0.308" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.689642][ T29] audit: type=1400 audit(1734662448.706:479): avc: denied { open } for pid=7001 comm="syz.0.308" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.713413][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.824588][ T5836] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.858459][ T7008] binder: 7001:7008 ioctl 40489426 20000200 returned -22 [ 129.866811][ T5836] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 129.871222][ T29] audit: type=1400 audit(1734662448.886:480): avc: denied { ioctl } for pid=7001 comm="syz.0.308" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.100138][ T7008] binder_alloc: 7001: binder_alloc_buf, no vma [ 130.180995][ T5836] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 130.200389][ T29] audit: type=1400 audit(1734662448.906:481): avc: denied { set_context_mgr } for pid=7001 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.467438][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.467666][ T29] audit: type=1400 audit(1734662449.256:482): avc: denied { call } for pid=7001 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.553421][ T5836] usb 2-1: config 0 descriptor?? [ 130.555352][ T5836] usb 2-1: can't set config #0, error -71 [ 130.565752][ T5836] usb 2-1: USB disconnect, device number 7 [ 132.056817][ T5142] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 132.235047][ T7045] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.318'. [ 132.251525][ T7045] openvswitch: netlink: EtherType 50a is less than min 600 [ 132.916116][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.918296][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930098][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.039840][ T7057] FAULT_INJECTION: forcing a failure. [ 134.039840][ T7057] name failslab, interval 1, probability 0, space 0, times 0 [ 134.052783][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.0.322 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 134.063353][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 134.073385][ T7057] Call Trace: [ 134.076652][ T7057] [ 134.079561][ T7057] dump_stack_lvl+0x16c/0x1f0 [ 134.084218][ T7057] should_fail_ex+0x497/0x5b0 [ 134.088877][ T7057] should_failslab+0xc2/0x120 [ 134.093546][ T7057] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 134.098919][ T7057] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 134.105312][ T7057] ? __lock_acquire+0x15a9/0x3c40 [ 134.110314][ T7057] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 134.116552][ T7057] idr_get_free+0x528/0xa40 [ 134.121071][ T7057] idr_alloc_u32+0x191/0x2f0 [ 134.125743][ T7057] ? __pfx_idr_alloc_u32+0x10/0x10 [ 134.130842][ T7057] ? lock_acquire.part.0+0x11b/0x380 [ 134.136113][ T7057] idr_alloc_cyclic+0x10c/0x230 [ 134.140950][ T7057] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 134.146297][ T7057] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 134.151648][ T7057] ? lock_acquire+0x2f/0xb0 [ 134.156124][ T7057] ? bpf_link_prime+0x5c/0x4d0 [ 134.160864][ T7057] bpf_link_prime+0x7b/0x4d0 [ 134.165436][ T7057] bpf_raw_tp_link_attach+0x28e/0x5f0 [ 134.170783][ T7057] ? __pfx_lock_release+0x10/0x10 [ 134.175781][ T7057] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 134.181662][ T7057] ? lock_acquire+0x2f/0xb0 [ 134.186156][ T7057] ? __fget_files+0x40/0x3a0 [ 134.190762][ T7057] ? fput+0x67/0x440 [ 134.194661][ T7057] ? __bpf_prog_get+0xa0/0x290 [ 134.199410][ T7057] __sys_bpf+0x3a4/0x49c0 [ 134.203719][ T7057] ? __pfx_lock_release+0x10/0x10 [ 134.208718][ T7057] ? __pfx___sys_bpf+0x10/0x10 [ 134.213463][ T7057] ? vfs_write+0x306/0x1150 [ 134.217941][ T7057] ? __mutex_unlock_slowpath+0x164/0x690 [ 134.223560][ T7057] ? fput+0x67/0x440 [ 134.227518][ T7057] ? ksys_write+0x1ba/0x250 [ 134.231995][ T7057] ? __pfx_ksys_write+0x10/0x10 [ 134.236831][ T7057] __x64_sys_bpf+0x78/0xc0 [ 134.241227][ T7057] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.246402][ T7057] do_syscall_64+0xcd/0x250 [ 134.250914][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.256794][ T7057] RIP: 0033:0x7fdfe8f85d29 [ 134.261187][ T7057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.280794][ T7057] RSP: 002b:00007fdfe9dd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.289197][ T7057] RAX: ffffffffffffffda RBX: 00007fdfe9175fa0 RCX: 00007fdfe8f85d29 [ 134.297160][ T7057] RDX: 0000000000000018 RSI: 0000000020000200 RDI: 0000000000000011 [ 134.305117][ T7057] RBP: 00007fdfe9dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 134.313086][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.317524][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 134.317537][ T29] audit: type=1400 audit(1734662453.476:509): avc: denied { mounton } for pid=7058 comm="syz.4.324" path="/79/file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.321053][ T7057] R13: 0000000000000000 R14: 00007fdfe9175fa0 R15: 00007ffff268e958 [ 134.321102][ T7057] [ 134.390253][ T7059] 9pnet_fd: Insufficient options for proto=fd [ 134.932103][ T29] audit: type=1400 audit(1734662454.076:510): avc: denied { create } for pid=7066 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.951506][ T29] audit: type=1400 audit(1734662454.076:511): avc: denied { create } for pid=7066 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.971080][ T29] audit: type=1400 audit(1734662454.086:512): avc: denied { connect } for pid=7066 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.991894][ T29] audit: type=1400 audit(1734662454.156:513): avc: denied { write } for pid=7068 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.011118][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.020851][ T7059] fuse: Bad value for 'user_id' [ 135.025851][ T7059] fuse: Bad value for 'user_id' [ 135.068637][ T29] audit: type=1400 audit(1734662454.226:514): avc: denied { ioctl } for pid=7066 comm="syz.3.327" path="socket:[11923]" dev="sockfs" ino=11923 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.093270][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.100538][ T29] audit: type=1400 audit(1734662454.236:515): avc: denied { write } for pid=7066 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.128684][ T29] audit: type=1400 audit(1734662454.286:516): avc: denied { write } for pid=7068 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.141086][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.583195][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 135.590721][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 135.605294][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.620469][ T5863] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 135.666814][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.682746][ T29] audit: type=1400 audit(1734662454.846:517): avc: denied { create } for pid=7073 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 135.683467][ T5863] usb 3-1: Product: syz [ 135.722978][ T5863] usb 3-1: Manufacturer: syz [ 135.734458][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 135.757564][ T5863] usb 3-1: SerialNumber: syz [ 135.910059][ T5863] usb 3-1: config 0 descriptor?? [ 135.925439][ T5863] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 135.932611][ T29] audit: type=1400 audit(1734662455.086:518): avc: denied { create } for pid=7083 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.981909][ T5863] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 137.159280][ T5863] em28xx 3-1:0.0: unknown em28xx chip ID (214) [ 138.222561][ T5865] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.232211][ T5863] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 138.239502][ T5863] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 138.269403][ T5863] em28xx 3-1:0.0: No AC97 audio processor [ 138.298588][ T7119] : entered promiscuous mode [ 138.496644][ T5865] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 138.506938][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.516814][ T46] usb 3-1: USB disconnect, device number 3 [ 138.527563][ T46] em28xx 3-1:0.0: Disconnecting em28xx [ 138.533326][ T5865] usb 4-1: Product: syz [ 138.537596][ T5865] usb 4-1: Manufacturer: syz [ 138.604123][ T5865] usb 4-1: SerialNumber: syz [ 138.610060][ T46] em28xx 3-1:0.0: Freeing device [ 138.695708][ T5865] r8152-cfgselector 4-1: Unknown version 0x0000 [ 138.773782][ T5865] r8152-cfgselector 4-1: config 0 descriptor?? [ 138.922335][ T7132] vlan2: entered promiscuous mode [ 138.983188][ T7126] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 139.031153][ T7126] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 139.048760][ T7126] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 139.385642][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.475918][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.915450][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 139.915469][ T29] audit: type=1400 audit(1734662459.066:533): avc: denied { create } for pid=7148 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.971398][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 139.976526][ T29] audit: type=1400 audit(1734662459.126:534): avc: denied { create } for pid=7148 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.024074][ T29] audit: type=1400 audit(1734662459.126:535): avc: denied { write } for pid=7148 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.045475][ T7155] FAULT_INJECTION: forcing a failure. [ 140.045475][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.078888][ T7155] CPU: 1 UID: 0 PID: 7155 Comm: syz.2.353 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 140.089508][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 140.099544][ T7155] Call Trace: [ 140.102801][ T7155] [ 140.105711][ T7155] dump_stack_lvl+0x16c/0x1f0 [ 140.110367][ T7155] should_fail_ex+0x497/0x5b0 [ 140.115039][ T7155] _copy_from_iter+0x2a1/0x1560 [ 140.119873][ T7155] ? trace_lock_acquire+0x14e/0x1f0 [ 140.125056][ T7155] ? __alloc_skb+0x1fe/0x380 [ 140.129626][ T7155] ? __pfx__copy_from_iter+0x10/0x10 [ 140.134969][ T7155] ? __virt_addr_valid+0x1a4/0x590 [ 140.140092][ T7155] ? __virt_addr_valid+0x5e/0x590 [ 140.145100][ T7155] ? __phys_addr_symbol+0x30/0x80 [ 140.150100][ T7155] ? __check_object_size+0x488/0x710 [ 140.155451][ T7155] netlink_sendmsg+0x813/0xd70 [ 140.160195][ T7155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.165462][ T7155] ____sys_sendmsg+0xaaf/0xc90 [ 140.170203][ T7155] ? copy_msghdr_from_user+0x10b/0x160 [ 140.175635][ T7155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.180906][ T7155] ___sys_sendmsg+0x135/0x1e0 [ 140.185575][ T7155] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.190761][ T7155] ? __pfx_lock_release+0x10/0x10 [ 140.195762][ T7155] ? trace_lock_acquire+0x14e/0x1f0 [ 140.200945][ T7155] ? __fget_files+0x206/0x3a0 [ 140.205599][ T7155] __sys_sendmsg+0x16e/0x220 [ 140.210164][ T7155] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.215261][ T7155] do_syscall_64+0xcd/0x250 [ 140.219751][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.225625][ T7155] RIP: 0033:0x7f8097385d29 [ 140.230013][ T7155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.249610][ T7155] RSP: 002b:00007f8098296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.258010][ T7155] RAX: ffffffffffffffda RBX: 00007f8097575fa0 RCX: 00007f8097385d29 [ 140.265966][ T7155] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 140.273923][ T7155] RBP: 00007f8098296090 R08: 0000000000000000 R09: 0000000000000000 [ 140.281880][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.289835][ T7155] R13: 0000000000000000 R14: 00007f8097575fa0 R15: 00007ffff841bad8 [ 140.297804][ T7155] [ 140.305975][ T29] audit: type=1400 audit(1734662459.206:536): avc: denied { bind } for pid=7154 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.042441][ T25] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 141.043739][ T29] audit: type=1400 audit(1734662460.206:537): avc: denied { create } for pid=7168 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.173952][ T29] audit: type=1400 audit(1734662460.336:538): avc: denied { create } for pid=7168 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 141.225357][ T7177] capability: warning: `syz.2.357' uses 32-bit capabilities (legacy support in use) [ 141.234891][ T29] audit: type=1400 audit(1734662460.386:539): avc: denied { setopt } for pid=7168 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.255039][ T5865] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.317349][ T7181] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 141.355126][ T29] audit: type=1400 audit(1734662460.516:540): avc: denied { map } for pid=7180 comm="syz.0.359" path="socket:[13427]" dev="sockfs" ino=13427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 142.101092][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 142.110736][ T7188] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.119901][ T7188] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.128801][ T7188] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.137527][ T7188] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.157098][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.282561][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.282602][ T5865] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 142.282624][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.301142][ T5865] usb 5-1: config 0 descriptor?? [ 142.504778][ T29] audit: type=1400 audit(1734662461.666:541): avc: denied { create } for pid=7190 comm=2321200A scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.716210][ T29] audit: type=1400 audit(1734662461.876:542): avc: denied { mount } for pid=7195 comm="syz.3.362" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 142.738678][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.908675][ T5865] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 143.763571][ T5815] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 144.967128][ T25] usb 5-1: USB disconnect, device number 4 [ 145.111165][ T5142] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 145.351148][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 145.351164][ T29] audit: type=1400 audit(1734662464.506:552): avc: denied { ioctl } for pid=7226 comm="syz.1.372" path="socket:[13264]" dev="sockfs" ino=13264 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.405762][ T29] audit: type=1400 audit(1734662464.556:553): avc: denied { create } for pid=7230 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.073391][ T29] audit: type=1400 audit(1734662464.806:554): avc: denied { read write } for pid=7230 comm="syz.0.375" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 146.099010][ T29] audit: type=1400 audit(1734662464.816:555): avc: denied { open } for pid=7230 comm="syz.0.375" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 146.123533][ T29] audit: type=1400 audit(1734662464.816:556): avc: denied { ioctl } for pid=7230 comm="syz.0.375" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 146.148480][ T29] audit: type=1400 audit(1734662464.906:557): avc: denied { ioctl } for pid=7230 comm="syz.0.375" path="socket:[13274]" dev="sockfs" ino=13274 ioctlcmd=0x6200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.993248][ T29] audit: type=1400 audit(1734662466.096:558): avc: denied { read write } for pid=7231 comm="syz.4.374" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.018732][ T29] audit: type=1400 audit(1734662466.096:559): avc: denied { open } for pid=7231 comm="syz.4.374" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.042646][ T29] audit: type=1400 audit(1734662466.096:560): avc: denied { write } for pid=7231 comm="syz.4.374" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.131796][ T29] audit: type=1400 audit(1734662466.096:561): avc: denied { connect } for pid=7231 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.151164][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.299977][ T5822] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 147.482237][ T7261] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.997556][ T5822] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 148.007535][ T5822] Bluetooth: hci4: Injecting HCI hardware error event [ 148.016778][ T5822] Bluetooth: hci4: hardware error 0x00 [ 148.668565][ T5863] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.001205][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 149.025472][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.037710][ T5863] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 149.046039][ T5863] usb 5-1: config 7 has no interface number 0 [ 149.052213][ T5863] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 149.062250][ T5863] usb 5-1: config 7 interface 187 has no altsetting 0 [ 149.129498][ T5863] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 149.138914][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.149866][ T5863] usb 5-1: Product: syz [ 149.734026][ T5863] usb 5-1: Manufacturer: syz [ 149.738692][ T5863] usb 5-1: SerialNumber: syz [ 149.743564][ T7298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.395'. [ 149.948565][ T7279] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.241062][ T5822] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 150.462581][ T5863] usb 5-1: Cannot retrieve CPort count: -110 [ 150.469529][ T5863] usb 5-1: Cannot retrieve CPort count: -110 [ 150.476615][ T5863] es2_ap_driver 5-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 150.686411][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.261069][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 151.430099][ T25] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.438348][ T25] usb 3-1: config 0 has no interface number 0 [ 151.450135][ T25] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.461083][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.469113][ T25] usb 3-1: Product: syz [ 151.481144][ T25] usb 3-1: Manufacturer: syz [ 151.486334][ T25] usb 3-1: SerialNumber: syz [ 152.172429][ T25] usb 3-1: config 0 descriptor?? [ 152.204582][ T25] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.604504][ T5863] usb 5-1: USB disconnect, device number 5 [ 152.697579][ T7338] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.261645][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 153.261662][ T29] audit: type=1400 audit(1734662472.096:578): avc: denied { append } for pid=7296 comm="syz.2.395" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 153.263481][ T25] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.281735][ T29] audit: type=1400 audit(1734662472.106:579): avc: denied { mount } for pid=7296 comm="syz.2.395" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.332303][ T25] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 153.356159][ T29] audit: type=1400 audit(1734662472.116:580): avc: denied { execute } for pid=7296 comm="syz.2.395" path="/57/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.426550][ T29] audit: type=1400 audit(1734662472.556:581): avc: denied { setattr } for pid=7340 comm="syz.1.409" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 153.468432][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.469345][ T5863] usb 3-1: USB disconnect, device number 4 [ 153.500874][ T5863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.544017][ T29] audit: type=1400 audit(1734662472.706:582): avc: denied { write } for pid=7345 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.570354][ T7346] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 153.576807][ T7346] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 153.921291][ T5863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 153.953694][ T5863] quatech2 3-1:0.51: device disconnected [ 153.991011][ T29] audit: type=1400 audit(1734662473.136:583): avc: denied { bind } for pid=7350 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.076727][ T29] audit: type=1400 audit(1734662473.156:584): avc: denied { listen } for pid=7350 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.197521][ T29] audit: type=1400 audit(1734662473.196:585): avc: denied { connect } for pid=7350 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.217206][ T29] audit: type=1400 audit(1734662473.226:586): avc: denied { map } for pid=7353 comm="syz.3.415" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.245472][ T29] audit: type=1400 audit(1734662473.226:587): avc: denied { execute } for pid=7353 comm="syz.3.415" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.299917][ T7360] /dev/nullb0: Can't open blockdev [ 155.776491][ T7376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.910994][ T5862] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.041035][ T5862] usb 3-1: device descriptor read/64, error -71 [ 157.281066][ T5862] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.411012][ T5862] usb 3-1: device descriptor read/64, error -71 [ 157.522265][ T5862] usb usb3-port1: attempt power cycle [ 157.859624][ T7406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.300978][ T5862] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.323024][ T5862] usb 3-1: device descriptor read/8, error -71 [ 158.402700][ T7400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.837759][ T5863] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.873841][ T5863] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.907651][ T5863] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.941505][ T5863] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.948945][ T5863] rtc rtc0: __rtc_set_alarm: err=-22 [ 159.169146][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 159.169163][ T29] audit: type=1400 audit(1734662478.326:607): avc: denied { shutdown } for pid=7417 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.169602][ T5862] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.205681][ T29] audit: type=1400 audit(1734662478.376:608): avc: denied { setopt } for pid=7419 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 159.221437][ T5862] usb 3-1: device descriptor read/8, error -71 [ 159.287430][ T29] audit: type=1400 audit(1734662478.376:609): avc: denied { block_suspend } for pid=7417 comm="syz.1.433" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.394791][ T29] audit: type=1400 audit(1734662478.536:610): avc: denied { read } for pid=7425 comm="syz.0.435" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 159.418283][ T29] audit: type=1400 audit(1734662478.536:611): avc: denied { open } for pid=7425 comm="syz.0.435" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 159.435109][ T5862] usb usb3-port1: unable to enumerate USB device [ 159.492340][ T29] audit: type=1400 audit(1734662478.536:612): avc: denied { ioctl } for pid=7425 comm="syz.0.435" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 159.859636][ T7432] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 159.873004][ T29] audit: type=1400 audit(1734662479.006:613): avc: denied { create } for pid=7423 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.022533][ T29] audit: type=1400 audit(1734662479.016:614): avc: denied { connect } for pid=7423 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.079463][ T29] audit: type=1400 audit(1734662479.016:615): avc: denied { shutdown } for pid=7423 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.592647][ T5863] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 160.678423][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 160.761069][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 160.770621][ T5863] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=1f.cb [ 160.780269][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.788689][ T5863] usb 2-1: Product: syz [ 160.793914][ T5863] usb 2-1: Manufacturer: syz [ 160.798607][ T5863] usb 2-1: SerialNumber: syz [ 160.975704][ T5863] usb 2-1: config 0 descriptor?? [ 160.987798][ T5863] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 160.998395][ T5863] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 161.010447][ T5863] usb-storage 2-1:0.0: USB Mass Storage device detected [ 161.112825][ T7455] openvswitch: netlink: Tunnel attr 49 out of range max 16 [ 161.519976][ T5863] usb-storage 2-1:0.0: device ignored [ 161.727779][ T5863] usb 2-1: USB disconnect, device number 8 [ 161.965344][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 162.467417][ T5862] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.631064][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 162.649199][ T5862] usb 5-1: config index 0 descriptor too short (expected 7253, got 36) [ 162.671926][ T5862] usb 5-1: config 138 has too many interfaces: 233, using maximum allowed: 32 [ 162.698487][ T5862] usb 5-1: config 138 has an invalid descriptor of length 4, skipping remainder of the config [ 162.765010][ T5862] usb 5-1: config 138 has 1 interface, different from the descriptor's value: 233 [ 162.816075][ T5862] usb 5-1: config 138 has no interface number 0 [ 162.823164][ T5862] usb 5-1: config 138 interface 159 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.841824][ T5862] usb 5-1: config 138 interface 159 has no altsetting 0 [ 162.868095][ T5862] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=f0.de [ 162.940401][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.009226][ T5862] usb 5-1: Product: syz [ 163.044792][ T5862] usb 5-1: Manufacturer: syz [ 163.093091][ T5862] usb 5-1: SerialNumber: syz [ 163.531059][ T7484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'. [ 163.712273][ T29] audit: type=1400 audit(1734662482.876:616): avc: denied { sys_module } for pid=7485 comm="syz.2.452" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 164.128504][ T7493] CIFS: VFS: Malformed UNC in devname [ 164.390989][ T5836] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.561475][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 164.568430][ T5836] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 164.584769][ T5836] usb 2-1: config 0 has no interface number 0 [ 164.592778][ T5836] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.612660][ T5836] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 164.623645][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 164.639943][ T5836] usb 2-1: Product: syz [ 164.649471][ T5836] usb 2-1: SerialNumber: syz [ 164.659368][ T5836] usb 2-1: config 0 descriptor?? [ 164.672983][ T5836] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 164.686400][ T5836] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7 [ 164.707066][ T29] audit: type=1400 audit(1734662483.866:617): avc: denied { read } for pid=5176 comm="acpid" name="event4" dev="devtmpfs" ino=2817 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.719682][ T7504] syzkaller0: entered promiscuous mode [ 164.738343][ T7504] syzkaller0: entered allmulticast mode [ 164.744332][ T29] audit: type=1400 audit(1734662483.866:618): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2817 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.767767][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.802867][ T29] audit: type=1400 audit(1734662483.866:619): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2817 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.848364][ T5862] qmi_wwan 5-1:138.159: probe with driver qmi_wwan failed with error -22 [ 164.879277][ T5862] usb 5-1: USB disconnect, device number 6 [ 165.073807][ T29] audit: type=1400 audit(1734662484.236:620): avc: denied { create } for pid=7512 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 165.276590][ T5862] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.497607][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.506477][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.546056][ T29] audit: type=1400 audit(1734662484.706:621): avc: denied { create } for pid=7522 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.570018][ T29] audit: type=1400 audit(1734662484.706:622): avc: denied { getopt } for pid=7522 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.616501][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 165.623461][ T5862] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 165.631827][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.642824][ T5862] usb 5-1: config 0 has no interface number 0 [ 165.649253][ T5862] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.684049][ T5862] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 165.693848][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.727050][ T5862] usb 5-1: Product: syz [ 165.786793][ T29] audit: type=1400 audit(1734662484.926:623): avc: denied { setopt } for pid=7529 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.830559][ T5862] usb 5-1: Manufacturer: syz [ 165.857058][ T5862] usb 5-1: SerialNumber: syz [ 165.957246][ T5862] usb 5-1: config 0 descriptor?? [ 166.067543][ T5862] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 166.161704][ T29] audit: type=1400 audit(1734662485.326:624): avc: denied { setopt } for pid=7535 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.181012][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.240212][ T5862] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 166.248131][ T5862] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 166.410991][ T5863] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.592060][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 166.646271][ T5863] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 166.666809][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.675968][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.683997][ T5863] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.694178][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.710118][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.720487][ T5863] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.733523][ T5863] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.745916][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.926696][ T5862] usb 5-1: USB disconnect, device number 7 [ 166.998423][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'. [ 167.090944][ T5863] usb 3-1: usb_control_msg returned -32 [ 167.097570][ T5863] usbtmc 3-1:16.0: can't read capabilities [ 167.435198][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 167.442197][ C0] ------------[ cut here ]------------ [ 167.448049][ C0] URB ffff8880280e9a00 submitted while active [ 167.454664][ C0] WARNING: CPU: 0 PID: 7493 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 [ 167.464345][ C0] Modules linked in: [ 167.468252][ C0] CPU: 0 UID: 0 PID: 7493 Comm: syz.1.453 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 167.478855][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 167.488904][ C0] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 167.494545][ C0] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 1e 03 af fa c6 05 f7 d4 5c 09 01 90 48 c7 c7 40 1e 2e 8c 48 89 de e8 97 3c 6f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 167.514148][ C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00010086 [ 167.520205][ C0] RAX: 0000000000000000 RBX: ffff8880280e9a00 RCX: ffffc900021d1000 [ 167.528172][ C0] RDX: 0000000000040000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 167.536131][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 167.544091][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000083 [ 167.552047][ C0] R13: ffff88805e41a858 R14: 000000000000000f R15: 0000000000000000 [ 167.560011][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 167.568950][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.575523][ C0] CR2: 000000110c3fa0c5 CR3: 0000000012044000 CR4: 00000000003526f0 [ 167.583481][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.591437][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.599397][ C0] Call Trace: [ 167.602663][ C0] [ 167.605501][ C0] ? __warn+0xea/0x3c0 [ 167.609560][ C0] ? usb_submit_urb+0x14da/0x1730 [ 167.614580][ C0] ? report_bug+0x3c0/0x580 [ 167.619078][ C0] ? handle_bug+0x54/0xa0 [ 167.623400][ C0] ? exc_invalid_op+0x17/0x50 [ 167.628070][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 167.633099][ C0] ? __warn_printk+0x1a6/0x350 [ 167.637857][ C0] ? usb_submit_urb+0x14da/0x1730 [ 167.642875][ C0] ? usb_submit_urb+0x14d9/0x1730 [ 167.647891][ C0] ? lock_acquire+0x2f/0xb0 [ 167.652399][ C0] ? cm109_urb_irq_callback+0xed/0xb60 [ 167.657855][ C0] cm109_urb_irq_callback+0x2e7/0xb60 [ 167.663233][ C0] __usb_hcd_giveback_urb+0x389/0x6e0 [ 167.668611][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 167.673803][ C0] dummy_timer+0x17f7/0x3960 [ 167.678393][ C0] ? mark_lock+0xb5/0xc60 [ 167.682714][ C0] ? __pfx_lock_release+0x10/0x10 [ 167.687731][ C0] ? lock_acquire+0x2f/0xb0 [ 167.692225][ C0] ? debug_object_deactivate+0x13b/0x370 [ 167.697851][ C0] ? find_held_lock+0x2d/0x110 [ 167.702610][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 167.707975][ C0] ? __pfx_lock_release+0x10/0x10 [ 167.712988][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 167.717921][ C0] ? mark_held_locks+0x9f/0xe0 [ 167.722760][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 167.728560][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 167.733487][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 167.738685][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 167.744396][ C0] ? read_tsc+0x9/0x20 [ 167.748464][ C0] hrtimer_run_softirq+0x17d/0x350 [ 167.753569][ C0] handle_softirqs+0x213/0x8f0 [ 167.758327][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 167.763609][ C0] __irq_exit_rcu+0x109/0x170 [ 167.768278][ C0] irq_exit_rcu+0x9/0x30 [ 167.772510][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 167.778132][ C0] [ 167.781049][ C0] [ 167.783968][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.789944][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 167.796350][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 a2 4a f6 48 89 df e8 8e 21 4b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 06 3c f6 65 8b 05 a6 c2 d7 74 85 c0 74 16 5b [ 167.815948][ C0] RSP: 0018:ffffc90003237810 EFLAGS: 00000246 [ 167.822006][ C0] RAX: 0000000000000002 RBX: ffffffff8f4d2ae0 RCX: 1ffffffff2dd97aa [ 167.829964][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1eba0 [ 167.837921][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2dca1bf [ 167.845879][ C0] R10: ffffffff96e50dff R11: 0000000000000007 R12: 1ffff92000646f0a [ 167.853837][ C0] R13: ffff888028eb623c R14: ffff8881447ea900 R15: ffff8881447ea918 [ 167.861806][ C0] usb_hcd_poll_rh_status+0x572/0x7f0 [ 167.867186][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 167.873072][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 167.878872][ C0] dummy_pullup+0x212/0x270 [ 167.883367][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 167.888381][ C0] usb_gadget_disconnect_locked+0x13f/0x4f0 [ 167.894265][ C0] gadget_unbind_driver+0xd7/0x4e0 [ 167.899366][ C0] ? kernfs_remove_by_name_ns+0xe8/0x130 [ 167.904993][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 167.910704][ C0] device_remove+0xc8/0x170 [ 167.915221][ C0] device_release_driver_internal+0x44a/0x610 [ 167.921310][ C0] driver_detach+0xd8/0x1b0 [ 167.925818][ C0] ? __pfx_raw_release+0x10/0x10 [ 167.930748][ C0] bus_remove_driver+0x13b/0x2c0 [ 167.935682][ C0] driver_unregister+0x76/0xb0 [ 167.940437][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 167.946149][ C0] raw_release+0x1ae/0x2b0 [ 167.950557][ C0] __fput+0x3f8/0xb60 [ 167.954544][ C0] task_work_run+0x14e/0x250 [ 167.959125][ C0] ? __pfx_task_work_run+0x10/0x10 [ 167.964224][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 167.969419][ C0] do_exit+0xadd/0x2d70 [ 167.973573][ C0] ? get_signal+0x8f7/0x26c0 [ 167.978158][ C0] ? __pfx_do_exit+0x10/0x10 [ 167.982741][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 167.987769][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.993136][ C0] do_group_exit+0xd3/0x2a0 [ 167.997637][ C0] get_signal+0x24ed/0x26c0 [ 168.002138][ C0] ? __pfx_get_signal+0x10/0x10 [ 168.006982][ C0] ? irqentry_exit+0x3b/0x90 [ 168.011566][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.016764][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 168.022306][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 168.028460][ C0] ? __pfx___x64_sys_epoll_pwait2+0x10/0x10 [ 168.034354][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 168.039978][ C0] do_syscall_64+0xda/0x250 [ 168.044477][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.050363][ C0] RIP: 0033:0x7f0824f85d29 [ 168.054767][ C0] Code: Unable to access opcode bytes at 0x7f0824f85cff. [ 168.061769][ C0] RSP: 002b:00007f0825d5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b9 [ 168.070169][ C0] RAX: fffffffffffffffc RBX: 00007f0825175fa0 RCX: 00007f0824f85d29 [ 168.078133][ C0] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000006 [ 168.086097][ C0] RBP: 00007f0825001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 168.094054][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.102013][ C0] R13: 0000000000000000 R14: 00007f0825175fa0 R15: 00007ffd77ae7ea8 [ 168.109979][ C0] [ 168.112987][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.120250][ C0] CPU: 0 UID: 0 PID: 7493 Comm: syz.1.453 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 168.130818][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 168.140873][ C0] Call Trace: [ 168.144137][ C0] [ 168.146966][ C0] dump_stack_lvl+0x3d/0x1f0 [ 168.151549][ C0] panic+0x71d/0x800 [ 168.155439][ C0] ? __pfx_panic+0x10/0x10 [ 168.159847][ C0] ? show_trace_log_lvl+0x29d/0x3d0 [ 168.165042][ C0] ? usb_submit_urb+0x14da/0x1730 [ 168.170072][ C0] check_panic_on_warn+0xab/0xb0 [ 168.174996][ C0] __warn+0xf6/0x3c0 [ 168.178877][ C0] ? usb_submit_urb+0x14da/0x1730 [ 168.183898][ C0] report_bug+0x3c0/0x580 [ 168.188223][ C0] handle_bug+0x54/0xa0 [ 168.192372][ C0] exc_invalid_op+0x17/0x50 [ 168.196970][ C0] asm_exc_invalid_op+0x1a/0x20 [ 168.201816][ C0] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 168.207441][ C0] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 1e 03 af fa c6 05 f7 d4 5c 09 01 90 48 c7 c7 40 1e 2e 8c 48 89 de e8 97 3c 6f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 168.227133][ C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00010086 [ 168.233203][ C0] RAX: 0000000000000000 RBX: ffff8880280e9a00 RCX: ffffc900021d1000 [ 168.241160][ C0] RDX: 0000000000040000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 168.249129][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 168.257085][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000083 [ 168.265042][ C0] R13: ffff88805e41a858 R14: 000000000000000f R15: 0000000000000000 [ 168.273009][ C0] ? __warn_printk+0x1a6/0x350 [ 168.277775][ C0] ? usb_submit_urb+0x14d9/0x1730 [ 168.282794][ C0] ? lock_acquire+0x2f/0xb0 [ 168.287286][ C0] ? cm109_urb_irq_callback+0xed/0xb60 [ 168.292742][ C0] cm109_urb_irq_callback+0x2e7/0xb60 [ 168.298117][ C0] __usb_hcd_giveback_urb+0x389/0x6e0 [ 168.303485][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 168.308705][ C0] dummy_timer+0x17f7/0x3960 [ 168.313289][ C0] ? mark_lock+0xb5/0xc60 [ 168.317604][ C0] ? __pfx_lock_release+0x10/0x10 [ 168.322621][ C0] ? lock_acquire+0x2f/0xb0 [ 168.327109][ C0] ? debug_object_deactivate+0x13b/0x370 [ 168.332731][ C0] ? find_held_lock+0x2d/0x110 [ 168.337496][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 168.342862][ C0] ? __pfx_lock_release+0x10/0x10 [ 168.347878][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 168.352805][ C0] ? mark_held_locks+0x9f/0xe0 [ 168.357561][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 168.363360][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 168.368305][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 168.373503][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 168.379218][ C0] ? read_tsc+0x9/0x20 [ 168.383289][ C0] hrtimer_run_softirq+0x17d/0x350 [ 168.388397][ C0] handle_softirqs+0x213/0x8f0 [ 168.393156][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 168.398437][ C0] __irq_exit_rcu+0x109/0x170 [ 168.403106][ C0] irq_exit_rcu+0x9/0x30 [ 168.407340][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 168.412962][ C0] [ 168.415880][ C0] [ 168.418797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.424772][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 168.431177][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 a2 4a f6 48 89 df e8 8e 21 4b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 06 3c f6 65 8b 05 a6 c2 d7 74 85 c0 74 16 5b [ 168.450773][ C0] RSP: 0018:ffffc90003237810 EFLAGS: 00000246 [ 168.456915][ C0] RAX: 0000000000000002 RBX: ffffffff8f4d2ae0 RCX: 1ffffffff2dd97aa [ 168.464878][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1eba0 [ 168.472839][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2dca1bf [ 168.480800][ C0] R10: ffffffff96e50dff R11: 0000000000000007 R12: 1ffff92000646f0a [ 168.488762][ C0] R13: ffff888028eb623c R14: ffff8881447ea900 R15: ffff8881447ea918 [ 168.496735][ C0] usb_hcd_poll_rh_status+0x572/0x7f0 [ 168.502109][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 168.507992][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 168.513789][ C0] dummy_pullup+0x212/0x270 [ 168.518281][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 168.523296][ C0] usb_gadget_disconnect_locked+0x13f/0x4f0 [ 168.529181][ C0] gadget_unbind_driver+0xd7/0x4e0 [ 168.534281][ C0] ? kernfs_remove_by_name_ns+0xe8/0x130 [ 168.539903][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 168.545621][ C0] device_remove+0xc8/0x170 [ 168.550114][ C0] device_release_driver_internal+0x44a/0x610 [ 168.556187][ C0] driver_detach+0xd8/0x1b0 [ 168.560684][ C0] ? __pfx_raw_release+0x10/0x10 [ 168.565611][ C0] bus_remove_driver+0x13b/0x2c0 [ 168.570536][ C0] driver_unregister+0x76/0xb0 [ 168.575291][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 168.581000][ C0] raw_release+0x1ae/0x2b0 [ 168.585408][ C0] __fput+0x3f8/0xb60 [ 168.589385][ C0] task_work_run+0x14e/0x250 [ 168.593964][ C0] ? __pfx_task_work_run+0x10/0x10 [ 168.599064][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 168.604258][ C0] do_exit+0xadd/0x2d70 [ 168.608410][ C0] ? get_signal+0x8f7/0x26c0 [ 168.612990][ C0] ? __pfx_do_exit+0x10/0x10 [ 168.617576][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 168.622591][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 168.628043][ C0] do_group_exit+0xd3/0x2a0 [ 168.632540][ C0] get_signal+0x24ed/0x26c0 [ 168.637042][ C0] ? __pfx_get_signal+0x10/0x10 [ 168.641887][ C0] ? irqentry_exit+0x3b/0x90 [ 168.646468][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.651659][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 168.657200][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 168.663351][ C0] ? __pfx___x64_sys_epoll_pwait2+0x10/0x10 [ 168.669246][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 168.674871][ C0] do_syscall_64+0xda/0x250 [ 168.679367][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.685269][ C0] RIP: 0033:0x7f0824f85d29 [ 168.689676][ C0] Code: Unable to access opcode bytes at 0x7f0824f85cff. [ 168.696683][ C0] RSP: 002b:00007f0825d5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b9 [ 168.705084][ C0] RAX: fffffffffffffffc RBX: 00007f0825175fa0 RCX: 00007f0824f85d29 [ 168.713041][ C0] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000006 [ 168.720998][ C0] RBP: 00007f0825001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 168.728958][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.736913][ C0] R13: 0000000000000000 R14: 00007f0825175fa0 R15: 00007ffd77ae7ea8 [ 168.744879][ C0] [ 168.748093][ C0] Kernel Offset: disabled [ 168.752494][ C0] Rebooting in 86400 seconds..