last executing test programs: 56.921216108s ago: executing program 1 (id=224): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) 55.303257802s ago: executing program 1 (id=231): syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x11e, 0x81, 0x0, &(0x7f0000000040)=0x51524b5cd3c9275d) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (fail_nth: 9) 53.750820079s ago: executing program 1 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x92000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = socket$inet6(0x10, 0x2, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) getpeername$llc(r5, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0x9f4, 0x4, 0x23, 0x5, 0xb78]}, &(0x7f0000000000)=0x78) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff050024"], 0x58}}, 0x0) 52.233391741s ago: executing program 1 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x64e10, 0x16201}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}]}}}]}, 0x4c}}, 0x2) r3 = syz_io_uring_setup(0x7c04, &(0x7f00000000c0)={0x0, 0x7, 0x800}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xbe7b}}, './file0\x00'}) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000040)) socket(0xa, 0x3, 0x3a) mount$tmpfs(0x0, 0x0, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x0, &(0x7f0000000340)) 51.954589837s ago: executing program 1 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/235, 0xeb}], 0x1, 0xfffffc00, 0x9) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000440)=0x0) stat(&(0x7f0000000480)='./file1/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(r1, 0x0) read$FUSE(r8, &(0x7f0000006140)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1001, &(0x7f0000000380)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7b50f656}}, {@default_permissions}, {@default_permissions}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x35, 0x31, 0xbff0d7c57f955fcc, 0x37, 0x36, 0x54], 0x2d, [0x33, 0x37, 0x32, 0x39], 0x2d, [0x63, 0x35, 0x37, 0x65], 0x2d, [0x37, 0x66, 0x38, 0x61], 0x2d, [0x32, 0x31, 0x65, 0x7, 0x65, 0x63, 0x60, 0x37]}}}]}}) mount$9p_tcp(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', &(0x7f00000003c0), 0x2180800, &(0x7f0000000600)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@directio}, {@cache_fscache}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@ignoreqv}, {@access_uid={'access', 0x3d, r7}}, {@ignoreqv}, {@dfltgid={'dfltgid', 0x3d, r10}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'tmpfs\x00'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '&[f'}}]}}) 51.014613433s ago: executing program 1 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0xb, 0x1002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000380), 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="5000000010003b150000210000", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x2, 0x1}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$msr(r10, &(0x7f0000000400)=""/228, 0xe4) 35.552455697s ago: executing program 32 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0xb, 0x1002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000380), 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="5000000010003b150000210000", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x2, 0x1}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$msr(r10, &(0x7f0000000400)=""/228, 0xe4) 11.836381195s ago: executing program 3 (id=399): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xac24}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex(&(0x7f0000002500)=0x1, 0x6, 0x0, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r7, r7, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r7, 0x4, r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, r2, 0x0) get_robust_list(0x0, 0x0, 0xffffffffffffffff) 9.840525134s ago: executing program 2 (id=406): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = accept(r0, 0x0, &(0x7f0000000000)) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x200, 0x100) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000440)=""/1) 8.992036632s ago: executing program 2 (id=408): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090244000101000000090400001602020000052406"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100000004, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/snmp6\x00') read$FUSE(r0, &(0x7f0000007700)={0x2020}, 0x2020) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 8.346535048s ago: executing program 3 (id=411): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "48af39015c3b3931", "fa8131adcbf31f7ae106bd79d15dc96d2b038bdbb1db36da7df63bf87f8b3eb0", "b1c519fe", "4bf2ab68836171fc"}, 0x38) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x400000000000003, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x300000000000000, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) 7.379152666s ago: executing program 3 (id=414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0xb, 0x1002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="5000000010003b150000210000", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x2, 0x1}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$msr(r9, &(0x7f0000000400)=""/228, 0xe4) 6.417883149s ago: executing program 3 (id=415): sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x742b, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="00f20e0000007603"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.193149489s ago: executing program 5 (id=416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0x0) (rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) (async) sendmmsg$inet6(r6, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0xfe000000, @loopback, 0x43}, 0x1c, &(0x7f0000001940)}}], 0x2, 0x2408c041) (async, rerun: 64) sendmmsg(r6, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000004a80)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40080) (async, rerun: 64) splice(r6, 0x0, r5, 0x0, 0x800000020000149, 0x3) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) (async) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') close(r3) (async) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 5.863147058s ago: executing program 5 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201081, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5.800566251s ago: executing program 2 (id=419): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = dup(r0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x0, r1}) r3 = syz_io_uring_setup(0x36c1, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x3, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) 5.794482059s ago: executing program 5 (id=420): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYBLOB="7e061edb746cd22c227125d54a281ddb87a42fb6168851eae1820df65572ce6e086255039cd01e43fcc004f20a6fa07e3861e1c80f156282c3a71b9f4a7eb0e25e717c292a33c705a4d862d249f2a1b288a9ccdd629ee6afa8ad36daba5c47cd4b6c96e9a735489c217b4091da04e4fc8bd7b036c0d5606255129c3c70b1b88a3524c513997c630e7014aee59a6175001a4d3f1fcbcaf9e80d5db069dc587ca3da6e20ae7b983a395ff90e7b54479523e2ef58bc80981202c9316df4e9e02fae2b427b0efc0c61461dd8af7e77425b27390f5ee9eeb85af9c7abf9844df4a9a4302a9e7dcf134976e55cdfd85b", @ANYBLOB="01000000000000000000310000b4760005003500000000000a0001007770616e3100000005fc350000000000050033000300040005"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 5.740637137s ago: executing program 0 (id=421): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000}) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpid() r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x261, 0x4800003e, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 5.736510491s ago: executing program 2 (id=422): r0 = msgget$private(0x0, 0x214) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016b8ef0a1a7083"], 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) r6 = epoll_create(0x741) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000000)='B') setreuid(0x0, r2) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6151b89c68a27303afd0ef16b4380adbd3cfb71f867fed7ffafed3e6732265e5b61a0fbe2ba5cb47f098303e6076c563a458806e9f0557fe2c14d8b30455b7ef903a8b86c5d1097abef2efe59be2f2dc51e3d090ef6370c9f59d7833a5810160ca818f7e1995750700fd4c6469728b87089f7e39e07564700919352189e94657f63559ff37af047cbea8cf7952c3ad96824599fc750c5042eb6c87c24a27b3f1c28031bd4a057c25251617ff540948816c4926e609745d7c26da561c65574b75c6d988a0fc09130c0bbfd5a17b3afdfda57ab761c7791ff5a6f13fff72bbfbe0f2d7a435340ff380eebfc8b8047c85102dc682841622017f7f"], 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x2, r2, r3, 0x0, r3, 0x82, 0x2}, 0x0, 0x0, 0x3, 0x9c84, 0x1, 0x0, 0x0, 0x0, 0x1b}) msgctl$IPC_RMID(r0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x20080522, r7}, &(0x7f00000000c0)={0xbd0, 0x101, 0x7, 0x9, 0x7, 0x1}) 5.541366952s ago: executing program 5 (id=423): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='S', 0x1}], 0x1, 0x81, 0xe, 0x2) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x453, 0x0, 0x70bd27, 0x25dfdbfc, "0279", ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000800}, 0x20040800) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x1) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x1ec) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[], 0x1a8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(r6) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0xa, @raw_data="90ff6a499800f63d4e4d3132ad90968953512be0bc4d1279a4e526d4a966e2af1f190a7be845059dadf28fff37a684b14d00de6aa6608a7aa1067fecaaf5c8b8127ad271eeec733cdf379a9483c8d2d08a86f10ce5a039dceab39503c388d78da6318f8a23b5192dbbd6098ef14a70a9a1c4de833ef596d7c5609474519c4423dcf2888a582aa7deeea8be76ac45db324d163ee515cefe1c021ad5cb98359a384f6352d59346969240a7c6b62a4888bb799f38ba5066989794cd37c7c55f31afa32b7fdb752ee837"}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80000) recvmmsg$unix(r9, 0x0, 0x0, 0x0, 0x0) 4.194927369s ago: executing program 5 (id=424): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='S', 0x1}], 0x1, 0x81, 0xe, 0x2) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x453, 0x0, 0x70bd27, 0x25dfdbfc, "0279", ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000800}, 0x20040800) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x1) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x1ec) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[], 0x1a8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(r6) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0xa, @raw_data="90ff6a499800f63d4e4d3132ad90968953512be0bc4d1279a4e526d4a966e2af1f190a7be845059dadf28fff37a684b14d00de6aa6608a7aa1067fecaaf5c8b8127ad271eeec733cdf379a9483c8d2d08a86f10ce5a039dceab39503c388d78da6318f8a23b5192dbbd6098ef14a70a9a1c4de833ef596d7c5609474519c4423dcf2888a582aa7deeea8be76ac45db324d163ee515cefe1c021ad5cb98359a384f6352d59346969240a7c6b62a4888bb799f38ba5066989794cd37c7c55f31afa32b7fdb752ee837"}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80000) recvmmsg$unix(r9, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x1}}]}}]}}]}}, 0x0) 3.414226329s ago: executing program 4 (id=425): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0xfeffff0700000000, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 3.303932354s ago: executing program 4 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44090}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000010000000500010006"], 0x1c}}, 0x0) 3.284720656s ago: executing program 3 (id=427): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb2, 0x4c, 0x8d, 0x20, 0x5dc, 0x1, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x2, 0xee, 0x89, 0x98, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x15, 0x11, {0x11, 0x2e, "08867d39c35dce95f9add0b1c2f15d"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x14, 0x75, "03316698eea5cbe12718ce37198b9949cc51b6bf62b385772a4c6463c743c56ba94e2b01f79114671695f05c357bd9a90a17a24c293edd61dd61a1e373296aefe5207b3787c614bd60b6e15177e2994ecd1f4506af6a0861d5382cb24d2235356c58b233bf67f401ffb3695d8ce257f7789d28d316"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}}) 3.17723803s ago: executing program 4 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d40a0000", @ANYRES16=r1, @ANYBLOB="390229bd7000fcdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="c4005a80a8000380140003003f00a700fdff070001010800ffff0800290002004e541d380a1d082c4b400b56013e110e25523a1a38114b21353b4847382919504a2126111f00000014000300000008000300960007008c000900760214000500faff"], 0xad4}}, 0x0) 3.077120952s ago: executing program 4 (id=429): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) bind$ax25(r1, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null]}, 0x48) r2 = syz_open_dev$video4linux(&(0x7f00000002c0), 0xb, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x4, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev={0xac, 0x14, 0x14, 0x35}}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x43}}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0x200, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x38, 0x0, 0x0) syz_open_dev$loop(0x0, 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) r7 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000180), 0x2, &(0x7f0000000300)) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r2, 0x5451) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 2.640804163s ago: executing program 2 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000024c0)="c7442400a2000000c744240200000000c7442406000000000f011424440f20c03506000000440f22c0c74424000e000000c744240200000000c7442406000000000f0114242667640f01c80fc7680ab9bc090000b8252e2d50ba50c25a050f30266526660f3a611a05420f01b3809bd21165660f384064aad7b96b0300000f32", 0x80}], 0x1, 0x4e, 0x0, 0x0) accept4$ax25(r2, 0x0, &(0x7f0000000080), 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x16000000) 2.393232126s ago: executing program 2 (id=431): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00e7052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x1, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @string={0x4, 0x3, '>M'}}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x4, 0x0, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x88000001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000001340)={'syz0\x00', {0x5, 0x1ff, 0x8001, 0x3}, 0xe, [0x81, 0x857, 0x5, 0x1, 0x2, 0x10, 0x7, 0x9, 0x7, 0x8, 0x7fffffff, 0x100, 0x4, 0x6, 0xa36, 0x6, 0xffffffd5, 0x8, 0x7, 0x1, 0xb3, 0x1, 0x400, 0x8, 0x101, 0x3d76, 0x80000000, 0x8, 0x73db, 0x2, 0x1000, 0x367b, 0x7, 0x4, 0x0, 0x1, 0x5, 0x7, 0x2, 0x0, 0x6, 0x400, 0xbdd5, 0x0, 0x3, 0x9, 0x8, 0xfffff837, 0x800, 0x9d, 0xbe8, 0x5, 0xe, 0x5, 0x3, 0xf, 0xffff, 0x2, 0x3, 0x6, 0x3, 0x3, 0x5], [0x3, 0x6, 0x7f, 0x8, 0x1, 0x4, 0x800, 0xfffffffc, 0x2, 0xffff, 0x8, 0x7, 0x8001, 0x7, 0x7ff, 0xe7a, 0xf6c2, 0x7, 0xab95, 0x3, 0x3, 0xd4, 0x3, 0x3, 0x9, 0x10, 0x30, 0x8, 0x1, 0x0, 0xffff, 0x6, 0x47, 0x5, 0x5, 0x649, 0x90, 0x10000, 0x4, 0x3, 0x3, 0x9, 0x4, 0x9, 0x7fffffff, 0x7, 0x3, 0x3, 0x3, 0x9, 0x7fffffff, 0x6, 0x5, 0x9, 0x8eea, 0x0, 0x7, 0x9, 0x4, 0xffffffff, 0xe4, 0x6, 0x6, 0x7], [0x1, 0x0, 0x1, 0xffffffff, 0x6, 0xffff, 0x3, 0xe, 0x200, 0x7, 0x5, 0xfffffff7, 0x7fff, 0x1ff, 0x4, 0x2, 0x76ad3208, 0x1, 0xb900, 0x241, 0x4, 0x6, 0x0, 0xd, 0x2, 0x900000, 0x8, 0xafa, 0xfffffffd, 0x4, 0xe, 0x81, 0x8000, 0x6, 0x7f, 0xb, 0x5, 0x7, 0xfffff000, 0xa499, 0x8, 0x3, 0x40, 0xceb1, 0x20, 0x1, 0x7, 0x10000, 0xf, 0x2, 0x920, 0xe, 0x10001, 0x0, 0x8e4, 0xc3a4, 0x6, 0x80000000, 0xfffffff7, 0x2, 0x1695, 0x200, 0x2, 0x1], [0x2b9ca9ce, 0x9c4, 0x8, 0x0, 0x2, 0xd51, 0x1, 0x6, 0x0, 0x8001, 0x100, 0x5, 0x101, 0x9, 0x7fffffff, 0x1, 0x1, 0x6d, 0x4, 0x10001, 0x10000, 0x5, 0x1ff, 0x32, 0x80, 0x4, 0x273, 0xfffffff9, 0x8, 0x0, 0x3, 0xb, 0x4, 0xe, 0x6fd3, 0x1, 0x32bb2361, 0x6, 0x1c, 0xce, 0xf, 0xfffffff8, 0x4, 0xaba, 0x5, 0x7, 0xd47, 0xbc5d, 0x3, 0x9, 0xfffffff9, 0x7, 0x7, 0x80, 0x7fffffff, 0xffffffc6, 0x17, 0xc, 0x800, 0x0, 0x3, 0x3, 0x3, 0x7ff]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x3, 0x0, 0x80000, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffff402, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioprio_set$uid(0x3, 0x0, 0x2007) close(0x3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x3a, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.341131597s ago: executing program 0 (id=432): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x70, 0x4, 0xb, 0x9, 0xffffffff}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.161658366s ago: executing program 0 (id=433): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = dup(r0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x0, r1}) r3 = syz_io_uring_setup(0x36c1, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x3, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) 2.070550017s ago: executing program 0 (id=434): ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000340)=0x7, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000001c0)=0x9, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8000000000906, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x9, 0x2, 0x4, 0x1, 0x4, {0x0, 0xea60}, {0x3, 0x2, 0x40, 0x0, 0x1, 0x2, "82e7be6d"}, 0x18, 0x4, {&(0x7f0000000380)=[{0x80, 0x0, {}, 0x8}, {0x9c, 0x7, {}, 0x9}]}, 0x6}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 1.518592059s ago: executing program 0 (id=435): setgroups(0x24, 0xffffffffffffffff) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x7fff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000850) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x11, 0x4, 0x0) syz_genetlink_get_family_id$devlink(0x0, r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) 1.449479144s ago: executing program 4 (id=436): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) socket$kcm(0x10, 0x8d80ae3734163dee, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b26, 0x0) inotify_init1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x81}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x200000000000000, 0x100}, 0x0, 0x0) 1.01835799s ago: executing program 5 (id=437): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000600)={0x1, 0x0, 0x7fff, 0x0, 0x5, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x1000000000000, 0x0, 0x0, 0xffffffff, 0xfffffffffffffffc}, 0x0, 0x0) 68.551752ms ago: executing program 3 (id=438): sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x742b, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="00f20e0000007603"], 0x0, 0x0, 0x0, 0x0}, 0x0) 68.139727ms ago: executing program 4 (id=439): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x6, 0x0) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x100000000000, 0x20, 0x0, 0x0, 0x8001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xa000000, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 0 (id=440): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) write$binfmt_script(r6, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f00000001c0)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0xa, 0x30, "0297e0a7df815a87fd6f59d369f41dd95bdcb7f8d0c2748652e231c4ef4206281ea67b40b5e1166b79fc7d74c0b3b4e8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x162, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x150, 0x1, 0x1, 0x8, 0xd0, 0x54, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x7, 0x24, 0x6, 0x0, 0x0, "9d21"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xefe7, 0xb9, 0x1}, [@dmm={0x7, 0x24, 0x14, 0xf2, 0x6}, @mdlm_detail={0x103, 0x24, 0x13, 0x0, "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"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x33}}, {{0x9, 0x5, 0x3, 0x2, 0x258, 0x3, 0x5, 0x2}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0x1, 0x10, 0x10, 0x6}, 0x3a, &(0x7f00000002c0)={0x5, 0xf, 0x3a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x60, 0xc, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ecaa6570c4f74140c8d3feee24779aa2"}, @ssp_cap={0x10, 0x10, 0xa, 0x58, 0x1, 0x9b, 0x1e000, 0x1, [0xff0000]}]}, 0x4, [{0x2a, &(0x7f0000000340)=@string={0x2a, 0x3, "7be23d558ea373682a0a3e38b50046d400d99de2903d80b3c6c260c61402ccb9e081c348efc0903e"}}, {0xa6, &(0x7f0000000380)=@string={0xa6, 0x3, "cc61ebfd2b47db263ed8295d5058df167e8fff9760dbdbc05759f6d1a7649f5db9ad43c96e3b3a70705cbea8c05aa6f3446579522468e670efb482dccc02d32ddf83521af2716a3acc2b38b206e437fe5056b965f1628b584e6ccab4786eb8ce52927d8d7500abaf00afde8e6f6a820735d1b9ba6d92521e5111d1bdbcf5daa887b1fe95a552c11256c34072e37bb70e2de18c622a177c72be31cbfd276824a76d9d3213"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x415}}, {0xa, &(0x7f0000000480)=@string={0xa, 0x3, "039421ead2e9840a"}}]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): ss=chr_file permissive=1 [ 100.494246][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.824357][ T29] audit: type=1400 audit(1732777299.923:338): avc: denied { bind } for pid=6443 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.843613][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.022412][ T29] audit: type=1400 audit(1732777299.923:339): avc: denied { listen } for pid=6443 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.060648][ T29] audit: type=1400 audit(1732777299.923:340): avc: denied { connect } for pid=6443 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.189821][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.206670][ T6488] FAULT_INJECTION: forcing a failure. [ 101.206670][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 101.219532][ T29] audit: type=1400 audit(1732777299.993:341): avc: denied { setopt } for pid=6443 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.248526][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.2.172 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 101.258792][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.268830][ T6488] Call Trace: [ 101.272100][ T6488] [ 101.275009][ T6488] dump_stack_lvl+0x16c/0x1f0 [ 101.279680][ T6488] should_fail_ex+0x497/0x5b0 [ 101.284337][ T6488] ? fs_reclaim_acquire+0xae/0x150 [ 101.289420][ T6488] should_failslab+0xc2/0x120 [ 101.294258][ T6488] __kmalloc_cache_noprof+0x68/0x410 [ 101.299518][ T6488] ? trace_kmalloc+0x2d/0xd0 [ 101.304083][ T6488] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 101.310646][ T6488] ? __pfx_free_modprobe_argv+0x10/0x10 [ 101.316167][ T6488] call_usermodehelper_setup+0x9a/0x340 [ 101.321703][ T6488] __request_module+0x3d6/0x6c0 [ 101.326527][ T6488] ? rtnl_newlink+0x12e7/0x1c50 [ 101.331365][ T6488] ? __pfx___request_module+0x10/0x10 [ 101.336710][ T6488] ? find_held_lock+0x2d/0x110 [ 101.341455][ T6488] ? lock_acquire+0x2f/0xb0 [ 101.345942][ T6488] ? rtnl_link_ops_get+0x35/0x2c0 [ 101.350947][ T6488] rtnl_newlink+0x12e7/0x1c50 [ 101.355594][ T6488] ? hlock_class+0x4e/0x130 [ 101.360072][ T6488] ? __lock_acquire+0xcc5/0x3c40 [ 101.364983][ T6488] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.369991][ T6488] ? __pfx___lock_acquire+0x10/0x10 [ 101.375297][ T6488] ? cred_has_capability.isra.0+0x192/0x2f0 [ 101.381172][ T6488] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 101.387389][ T6488] ? find_held_lock+0x2d/0x110 [ 101.392143][ T6488] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 101.397227][ T6488] ? __pfx_lock_release+0x10/0x10 [ 101.402227][ T6488] ? trace_lock_acquire+0x146/0x1e0 [ 101.407402][ T6488] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.412398][ T6488] rtnetlink_rcv_msg+0x95b/0xea0 [ 101.417312][ T6488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.422748][ T6488] netlink_rcv_skb+0x16b/0x440 [ 101.427499][ T6488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.432930][ T6488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.438198][ T6488] ? netlink_deliver_tap+0x1ae/0xd30 [ 101.443464][ T6488] netlink_unicast+0x53c/0x7f0 [ 101.448207][ T6488] ? __pfx_netlink_unicast+0x10/0x10 [ 101.453473][ T6488] netlink_sendmsg+0x8b8/0xd70 [ 101.458215][ T6488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.463481][ T6488] ____sys_sendmsg+0xaaf/0xc90 [ 101.468234][ T6488] ? copy_msghdr_from_user+0x10b/0x160 [ 101.473669][ T6488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.478937][ T6488] ___sys_sendmsg+0x135/0x1e0 [ 101.483601][ T6488] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.488775][ T6488] ? __pfx_lock_release+0x10/0x10 [ 101.493774][ T6488] ? trace_lock_acquire+0x146/0x1e0 [ 101.498967][ T6488] ? __fget_files+0x206/0x3a0 [ 101.503619][ T6488] __sys_sendmsg+0x16e/0x220 [ 101.508182][ T6488] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.513272][ T6488] do_syscall_64+0xcd/0x250 [ 101.517750][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.523619][ T6488] RIP: 0033:0x7f62e6780809 [ 101.528015][ T6488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.547608][ T6488] RSP: 002b:00007f62e7529058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.555992][ T6488] RAX: ffffffffffffffda RBX: 00007f62e6945fa0 RCX: 00007f62e6780809 [ 101.563934][ T6488] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 101.571876][ T6488] RBP: 00007f62e75290a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.579820][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.587774][ T6488] R13: 0000000000000000 R14: 00007f62e6945fa0 R15: 00007fff040e3928 [ 101.595736][ T6488] [ 101.648400][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.690823][ T5889] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 101.751934][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.762221][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.775212][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.785006][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.796295][ T25] usb 4-1: SerialNumber: syz [ 101.853639][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.864825][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.880085][ T5891] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.883151][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.901773][ T5889] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 101.920849][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.942418][ T5889] usb 2-1: config 0 descriptor?? [ 102.040392][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.061386][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.084401][ T5891] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 102.131527][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.154532][ T5891] usb 1-1: config 0 descriptor?? [ 102.235953][ T25] usb 4-1: 0:2 : does not exist [ 102.278091][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 102.330607][ T25] usb 4-1: USB disconnect, device number 8 [ 102.367713][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 102.384187][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 102.423920][ T5889] usb 2-1: USB disconnect, device number 13 [ 102.507253][ T6509] FAULT_INJECTION: forcing a failure. [ 102.507253][ T6509] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.523667][ T6509] CPU: 0 UID: 0 PID: 6509 Comm: syz.2.178 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 102.533915][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.543958][ T6509] Call Trace: [ 102.547221][ T6509] [ 102.550138][ T6509] dump_stack_lvl+0x16c/0x1f0 [ 102.554808][ T6509] should_fail_ex+0x497/0x5b0 [ 102.559475][ T6509] _copy_to_user+0x32/0xd0 [ 102.563880][ T6509] rawv6_getsockopt+0x370/0x490 [ 102.568721][ T6509] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 102.574078][ T6509] ? rep_movs_alternative+0x13/0x70 [ 102.579259][ T6509] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 102.585144][ T6509] do_sock_getsockopt+0x3fe/0x800 [ 102.590158][ T6509] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 102.595693][ T6509] ? lock_acquire+0x2f/0xb0 [ 102.600184][ T6509] ? __fget_files+0x40/0x3a0 [ 102.604775][ T6509] ? __fget_files+0x206/0x3a0 [ 102.609441][ T6509] __sys_getsockopt+0x12f/0x260 [ 102.614283][ T6509] __x64_sys_getsockopt+0xbd/0x160 [ 102.619380][ T6509] ? do_syscall_64+0x91/0x250 [ 102.624049][ T6509] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.629231][ T6509] do_syscall_64+0xcd/0x250 [ 102.633720][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.639600][ T6509] RIP: 0033:0x7f62e6780809 [ 102.643997][ T6509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.663587][ T6509] RSP: 002b:00007f62e7529058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 102.671988][ T6509] RAX: ffffffffffffffda RBX: 00007f62e6945fa0 RCX: 00007f62e6780809 [ 102.679940][ T6509] RDX: 0000000000000001 RSI: 000000000000003a RDI: 0000000000000003 [ 102.687895][ T6509] RBP: 00007f62e75290a0 R08: 0000000020000000 R09: 0000000000000000 [ 102.696023][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.703978][ T6509] R13: 0000000000000000 R14: 00007f62e6945fa0 R15: 00007fff040e3928 [ 102.711941][ T6509] [ 102.721160][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.744963][ T5891] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 102.907641][ T5891] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 102.915139][ T5891] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 102.924153][ T5891] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71 [ 102.952738][ T5891] usb 1-1: USB disconnect, device number 10 [ 104.564684][ T6533] IPVS: set_ctl: invalid protocol: 219 172.20.20.170:20004 [ 104.921578][ T6536] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 104.932032][ T6538] overlayfs: empty lowerdir [ 105.247369][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 105.247385][ T29] audit: type=1400 audit(1732777304.263:346): avc: denied { shutdown } for pid=6539 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.272999][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.399888][ T29] audit: type=1400 audit(1732777304.493:347): avc: denied { nlmsg_write } for pid=6544 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.560798][ T5889] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.573160][ T6552] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.701554][ T6557] FAULT_INJECTION: forcing a failure. [ 105.701554][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 105.714461][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.4.191 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 105.724696][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.734748][ T6557] Call Trace: [ 105.738019][ T6557] [ 105.740945][ T6557] dump_stack_lvl+0x16c/0x1f0 [ 105.745628][ T6557] should_fail_ex+0x497/0x5b0 [ 105.750309][ T6557] ? fs_reclaim_acquire+0xae/0x150 [ 105.755415][ T6557] should_failslab+0xc2/0x120 [ 105.760091][ T6557] __kmalloc_cache_node_noprof+0x6e/0x420 [ 105.765809][ T6557] ? __get_vm_area_node+0x101/0x2f0 [ 105.771004][ T6557] __get_vm_area_node+0x101/0x2f0 [ 105.776033][ T6557] __vmalloc_node_range_noprof+0x26a/0x1530 [ 105.781925][ T6557] ? kernel_clone+0xfd/0x960 [ 105.786523][ T6557] ? kernel_clone+0xfd/0x960 [ 105.791123][ T6557] ? __memcg_slab_post_alloc_hook+0x4fc/0x9b0 [ 105.797189][ T6557] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.803511][ T6557] ? rcu_is_watching+0x12/0xc0 [ 105.808277][ T6557] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 105.813655][ T6557] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 105.819722][ T6557] ? kernel_clone+0xfd/0x960 [ 105.824312][ T6557] copy_process+0x2f0a/0x8cc0 [ 105.828989][ T6557] ? kernel_clone+0xfd/0x960 [ 105.833685][ T6557] ? __pfx_copy_process+0x10/0x10 [ 105.838711][ T6557] ? find_held_lock+0x2d/0x110 [ 105.843480][ T6557] ? finish_task_switch.isra.0+0x212/0xcc0 [ 105.849284][ T6557] ? __pfx_lock_release+0x10/0x10 [ 105.854306][ T6557] ? rcu_is_watching+0x12/0xc0 [ 105.859083][ T6557] kernel_clone+0xfd/0x960 [ 105.863504][ T6557] ? __pfx_kernel_clone+0x10/0x10 [ 105.868526][ T6557] ? __schedule+0xe60/0x5ad0 [ 105.873141][ T6557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.879140][ T6557] __do_sys_clone+0xba/0x100 [ 105.883742][ T6557] ? __pfx___do_sys_clone+0x10/0x10 [ 105.888964][ T6557] do_syscall_64+0xcd/0x250 [ 105.893482][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.899387][ T6557] RIP: 0033:0x7f6f45980809 [ 105.903805][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.923398][ T6557] RSP: 002b:00007f6f46801008 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 105.931794][ T6557] RAX: ffffffffffffffda RBX: 00007f6f45b46160 RCX: 00007f6f45980809 [ 105.939745][ T6557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000a0320080 [ 105.947698][ T6557] RBP: 00007f6f468010a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.955650][ T6557] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 105.963603][ T6557] R13: 0000000000000000 R14: 00007f6f45b46160 R15: 00007ffc1533d7b8 [ 105.971568][ T6557] [ 105.974630][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.981216][ T6557] syz.4.191: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 105.996259][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: syz.4.191 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 106.006474][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.016512][ T6557] Call Trace: [ 106.019773][ T6557] [ 106.022694][ T6557] dump_stack_lvl+0x16c/0x1f0 [ 106.027360][ T6557] warn_alloc+0x24d/0x3a0 [ 106.031680][ T6557] ? __pfx_warn_alloc+0x10/0x10 [ 106.036516][ T6557] ? __kmalloc_cache_node_noprof+0x2ad/0x420 [ 106.042482][ T6557] ? __kasan_kmalloc+0x8a/0xb0 [ 106.047227][ T6557] ? __get_vm_area_node+0x1dc/0x2f0 [ 106.052414][ T6557] __vmalloc_node_range_noprof+0xd27/0x1530 [ 106.058300][ T6557] ? kernel_clone+0xfd/0x960 [ 106.062880][ T6557] ? __memcg_slab_post_alloc_hook+0x4fc/0x9b0 [ 106.068932][ T6557] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.075240][ T6557] ? rcu_is_watching+0x12/0xc0 [ 106.079990][ T6557] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 106.085348][ T6557] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 106.091400][ T6557] ? kernel_clone+0xfd/0x960 [ 106.095977][ T6557] copy_process+0x2f0a/0x8cc0 [ 106.100640][ T6557] ? kernel_clone+0xfd/0x960 [ 106.105229][ T6557] ? __pfx_copy_process+0x10/0x10 [ 106.110238][ T6557] ? find_held_lock+0x2d/0x110 [ 106.114991][ T6557] ? finish_task_switch.isra.0+0x212/0xcc0 [ 106.120779][ T6557] ? __pfx_lock_release+0x10/0x10 [ 106.125785][ T6557] ? rcu_is_watching+0x12/0xc0 [ 106.130547][ T6557] kernel_clone+0xfd/0x960 [ 106.134951][ T6557] ? __pfx_kernel_clone+0x10/0x10 [ 106.139963][ T6557] ? __schedule+0xe60/0x5ad0 [ 106.144546][ T6557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.150515][ T6557] __do_sys_clone+0xba/0x100 [ 106.155090][ T6557] ? __pfx___do_sys_clone+0x10/0x10 [ 106.160286][ T6557] do_syscall_64+0xcd/0x250 [ 106.164784][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.170660][ T6557] RIP: 0033:0x7f6f45980809 [ 106.175059][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.194649][ T6557] RSP: 002b:00007f6f46801008 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 106.203054][ T6557] RAX: ffffffffffffffda RBX: 00007f6f45b46160 RCX: 00007f6f45980809 [ 106.211007][ T6557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000a0320080 [ 106.218959][ T6557] RBP: 00007f6f468010a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.226912][ T6557] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 106.234865][ T6557] R13: 0000000000000000 R14: 00007f6f45b46160 R15: 00007ffc1533d7b8 [ 106.242827][ T6557] [ 106.246621][ T6557] Mem-Info: [ 106.249736][ T6557] active_anon:9553 inactive_anon:0 isolated_anon:0 [ 106.249736][ T6557] active_file:13389 inactive_file:38792 isolated_file:0 [ 106.249736][ T6557] unevictable:768 dirty:352 writeback:0 [ 106.249736][ T6557] slab_reclaimable:10967 slab_unreclaimable:99429 [ 106.249736][ T6557] mapped:34472 shmem:5911 pagetables:865 [ 106.249736][ T6557] sec_pagetables:0 bounce:0 [ 106.249736][ T6557] kernel_misc_reclaimable:0 [ 106.249736][ T6557] free:1320604 free_pcp:1853 free_cma:0 [ 106.295732][ T6557] Node 0 active_anon:40712kB inactive_anon:0kB active_file:53556kB inactive_file:155096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140388kB dirty:1408kB writeback:0kB shmem:24608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10988kB pagetables:3460kB sec_pagetables:0kB all_unreclaimable? no [ 106.328223][ T6557] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 106.358344][ T6557] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.385455][ T6557] lowmem_reserve[]: 0 2459 2459 0 0 [ 106.391054][ T6557] Node 0 DMA32 free:1346948kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:43112kB inactive_anon:0kB active_file:53556kB inactive_file:154996kB unevictable:1536kB writepending:1408kB present:3129332kB managed:2547164kB mlocked:0kB bounce:0kB free_pcp:14964kB local_pcp:2724kB free_cma:0kB [ 106.421933][ T6557] lowmem_reserve[]: 0 0 0 0 0 [ 106.426658][ T6557] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 106.453352][ T6557] lowmem_reserve[]: 0 0 0 0 0 [ 106.458071][ T6557] Node 1 Normal free:3908192kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 106.487001][ T6557] lowmem_reserve[]: 0 0 0 0 0 [ 106.492305][ T6557] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 106.505132][ T6557] Node 0 DMA32: 1*4kB (E) 208*8kB (UE) 273*16kB (UE) 206*32kB (UME) 225*64kB (UME) 66*128kB (UME) 38*256kB (UME) 15*512kB (UM) 11*1024kB (UM) 6*2048kB (UM) 313*4096kB (UME) = 1358484kB [ 106.523554][ T6557] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 106.535094][ T6557] Node 1 Normal: 220*4kB (UE) 68*8kB (UME) 33*16kB (UME) 196*32kB (UME) 93*64kB (UME) 26*128kB (UME) 14*256kB (UM) 12*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 945*4096kB (UM) = 3908192kB [ 106.553618][ T6557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.563199][ T6557] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.572547][ T6557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.582138][ T6557] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.591467][ T6557] 59327 total pagecache pages [ 106.596712][ T6557] 0 pages in swap cache [ 106.600917][ T6557] Free swap = 124716kB [ 106.605105][ T6557] Total swap = 124996kB [ 106.609281][ T6557] 2097051 pages RAM [ 106.613277][ T6557] 0 pages HighMem/MovableOnly [ 106.617942][ T6557] 428602 pages reserved [ 106.620000][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 106.622099][ T6557] 0 pages cma reserved [ 106.628279][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 106.642885][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.655366][ T5889] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.826879][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.834976][ T5889] usb 3-1: Product: syz [ 106.839139][ T5889] usb 3-1: Manufacturer: syz [ 106.843758][ T5889] usb 3-1: SerialNumber: syz [ 106.850603][ T5889] usb 3-1: config 0 descriptor?? [ 106.857927][ T5889] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.761850][ T5889] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 107.824275][ T6568] net_ratelimit: 5 callbacks suppressed [ 107.824293][ T6568] sctp: failed to load transform for md5: -2 [ 107.943172][ T29] audit: type=1400 audit(1732777306.273:348): avc: denied { listen } for pid=6563 comm="syz.4.196" lport=52131 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.223195][ T29] audit: type=1400 audit(1732777306.353:349): avc: denied { accept } for pid=6563 comm="syz.4.196" lport=52131 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.232050][ T5889] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 108.300304][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 108.334558][ T5889] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 108.362397][ T5889] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 108.386128][ T5889] em28xx 3-1:0.0: No AC97 audio processor [ 108.411975][ T5889] usb 3-1: USB disconnect, device number 6 [ 108.429552][ T5889] em28xx 3-1:0.0: Disconnecting em28xx [ 108.438254][ T5844] block nbd4: Receive control failed (result -22) [ 108.470497][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.483450][ T5889] em28xx 3-1:0.0: Freeing device [ 108.510138][ T6584] nbd4: detected capacity change from 0 to 20 [ 108.534006][ T5848] block nbd4: Dead connection, failed to find a fallback [ 108.562751][ T5848] block nbd4: shutting down sockets [ 108.574999][ T5848] blk_print_req_error: 25 callbacks suppressed [ 108.575012][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.598238][ T5848] buffer_io_error: 25 callbacks suppressed [ 108.598251][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.619037][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.629085][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.637086][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 108.648059][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.657667][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.666041][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 108.674889][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.690518][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.702843][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.712008][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.722106][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.729938][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.730091][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.753109][ T5918] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.763953][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.772384][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.785115][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.793953][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.806853][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.807718][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.827645][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.837583][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.848256][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.859627][ T5848] ldm_validate_partition_table(): Disk read failed. [ 108.868312][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.880880][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.888837][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.902312][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 108.912695][ T5848] Dev nbd4: unable to read RDB block 0 [ 108.918398][ T5848] nbd4: unable to read partition table [ 108.925823][ T5848] nbd4: partition table beyond EOD, truncated [ 108.930103][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 108.940058][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.952074][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.963965][ T5848] ldm_validate_partition_table(): Disk read failed. [ 108.971067][ T5848] Dev nbd4: unable to read RDB block 0 [ 108.976719][ T5918] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 108.986793][ T5848] nbd4: unable to read partition table [ 108.992699][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.001237][ T5848] nbd4: partition table beyond EOD, truncated [ 109.009342][ T5918] usb 5-1: config 0 descriptor?? [ 109.036013][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 109.050065][ T9] usbtmc 4-1:16.0: can't read capabilities [ 109.262222][ T6580] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 109.270969][ T25] usb 4-1: USB disconnect, device number 9 [ 109.433329][ T5918] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 109.441848][ T5918] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 109.449278][ T5918] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 109.457134][ T5918] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 109.465286][ T5918] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 109.488834][ T5918] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 109.496533][ T5918] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 109.560234][ T5918] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 109.568298][ T5918] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 109.638510][ T5918] usb 5-1: USB disconnect, device number 5 [ 109.780138][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 109.816633][ T6605] FAULT_INJECTION: forcing a failure. [ 109.816633][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 109.849736][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.0.206 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 109.860014][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.870080][ T6605] Call Trace: [ 109.873360][ T6605] [ 109.876293][ T6605] dump_stack_lvl+0x16c/0x1f0 [ 109.880978][ T6605] should_fail_ex+0x497/0x5b0 [ 109.885646][ T6605] ? fs_reclaim_acquire+0xae/0x150 [ 109.890741][ T6605] should_failslab+0xc2/0x120 [ 109.895407][ T6605] __kmalloc_cache_noprof+0x68/0x410 [ 109.900682][ T6605] rfkill_fop_open+0x1ad/0x750 [ 109.905433][ T6605] ? __pfx_rfkill_fop_open+0x10/0x10 [ 109.910759][ T6605] misc_open+0x35a/0x420 [ 109.914995][ T6605] ? __pfx_misc_open+0x10/0x10 [ 109.919745][ T6605] chrdev_open+0x237/0x6a0 [ 109.924148][ T6605] ? __pfx_chrdev_open+0x10/0x10 [ 109.929088][ T6605] do_dentry_open+0xf59/0x1ea0 [ 109.933842][ T6605] ? __pfx_chrdev_open+0x10/0x10 [ 109.938763][ T6605] ? inode_permission+0xdd/0x5f0 [ 109.943689][ T6605] vfs_open+0x82/0x3f0 [ 109.947751][ T6605] ? may_open+0x1f2/0x400 [ 109.952076][ T6605] path_openat+0x1e6a/0x2d60 [ 109.956662][ T6605] ? __pfx_path_openat+0x10/0x10 [ 109.961586][ T6605] ? __pfx___lock_acquire+0x10/0x10 [ 109.966769][ T6605] ? lock_acquire.part.0+0x11b/0x380 [ 109.972048][ T6605] ? find_held_lock+0x2d/0x110 [ 109.976808][ T6605] do_filp_open+0x20c/0x470 [ 109.981297][ T6605] ? __pfx_do_filp_open+0x10/0x10 [ 109.986303][ T6605] ? find_held_lock+0x2d/0x110 [ 109.991067][ T6605] ? alloc_fd+0x41f/0x760 [ 109.995384][ T6605] do_sys_openat2+0x17a/0x1e0 [ 110.000045][ T6605] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.005230][ T6605] ? __fget_files+0x206/0x3a0 [ 110.009892][ T6605] __x64_sys_openat+0x175/0x210 [ 110.014730][ T6605] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.020091][ T6605] ? ksys_write+0x1ba/0x250 [ 110.024591][ T6605] do_syscall_64+0xcd/0x250 [ 110.029083][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.034964][ T6605] RIP: 0033:0x7f4cb6b80809 [ 110.039361][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.058951][ T6605] RSP: 002b:00007f4cb78dd058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.067346][ T6605] RAX: ffffffffffffffda RBX: 00007f4cb6d45fa0 RCX: 00007f4cb6b80809 [ 110.075300][ T6605] RDX: 0000000000806000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 110.083254][ T6605] RBP: 00007f4cb78dd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.091208][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.099158][ T6605] R13: 0000000000000001 R14: 00007f4cb6d45fa0 R15: 00007ffc7ada00a8 [ 110.107123][ T6605] [ 110.110196][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.133820][ T9] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 110.142186][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 110.152799][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 110.161730][ T9] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 110.171999][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.194665][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 110.203786][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.211845][ T9] usb 2-1: Product: syz [ 110.216027][ T9] usb 2-1: Manufacturer: syz [ 110.220755][ T9] usb 2-1: SerialNumber: syz [ 110.238013][ T9] usb 2-1: config 0 descriptor?? [ 110.244183][ T6600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.360084][ T5890] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 110.776133][ T29] audit: type=1400 audit(1732777309.873:350): avc: denied { watch watch_reads } for pid=6617 comm="syz.4.211" path="/40" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.980410][ T5918] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.991118][ T9] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 110.999288][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 111.007990][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 111.015729][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 111.026174][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 111.035644][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 111.043353][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 111.051521][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 111.057089][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 111.065941][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 111.073675][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 111.083027][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 111.091935][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 111.100327][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 111.110359][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 111.121262][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.131518][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.140445][ T5890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.150329][ T5890] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 111.159358][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.183545][ T9] usb 2-1: USB disconnect, device number 14 [ 111.213890][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 111.230887][ T5890] hub 1-1:1.0: bad descriptor, ignoring hub [ 111.242620][ T5890] hub 1-1:1.0: probe with driver hub failed with error -5 [ 111.250269][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 111.255486][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 111.261163][ T5890] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 111.272816][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 111.283699][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.292628][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 111.306244][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 111.316315][ T9] keyspan 2-1:0.0: device disconnected [ 111.320270][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.323879][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.352305][ T5918] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.362752][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.380540][ T5918] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 111.400007][ T5918] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 111.415307][ T5918] usb 3-1: config 1 interface 1 has no altsetting 0 [ 111.424496][ T5918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.439792][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.453022][ T5918] usb 3-1: Product: syz [ 111.457330][ T5918] usb 3-1: Manufacturer: syz [ 111.463197][ T5918] usb 3-1: SerialNumber: syz [ 111.470655][ T29] audit: type=1400 audit(1732777310.573:351): avc: denied { create } for pid=6627 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.491530][ T5918] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 111.505854][ T29] audit: type=1400 audit(1732777310.603:352): avc: denied { getopt } for pid=6627 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.506076][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 111.526262][ T5890] usb 1-1: USB disconnect, device number 11 [ 111.716105][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 111.833771][ T5891] usb 3-1: USB disconnect, device number 7 [ 112.413073][ T29] audit: type=1400 audit(1732777311.513:353): avc: denied { write } for pid=6647 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.917517][ T6671] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 113.929505][ T29] audit: type=1400 audit(1732777313.023:354): avc: denied { relabelto } for pid=6670 comm="syz.0.227" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 113.956622][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.962830][ T29] audit: type=1400 audit(1732777313.023:355): avc: denied { associate } for pid=6670 comm="syz.0.227" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 113.990900][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.070135][ T29] audit: type=1400 audit(1732777313.153:356): avc: denied { create } for pid=6670 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.390305][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.576096][ T5891] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 114.648982][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.698661][ T5891] usb 5-1: config 0 descriptor?? [ 114.710490][ T5891] gspca_main: spca508-2.14.0 probing 8086:0110 [ 114.732142][ T6685] FAULT_INJECTION: forcing a failure. [ 114.732142][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.751561][ T6685] CPU: 1 UID: 0 PID: 6685 Comm: syz.1.231 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 114.761817][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.771856][ T6685] Call Trace: [ 114.775118][ T6685] [ 114.778034][ T6685] dump_stack_lvl+0x16c/0x1f0 [ 114.782701][ T6685] should_fail_ex+0x497/0x5b0 [ 114.787461][ T6685] _copy_from_iter+0x2a1/0x1560 [ 114.792296][ T6685] ? _copy_from_iter+0x15e/0x1560 [ 114.797301][ T6685] ? __pfx__copy_from_iter+0x10/0x10 [ 114.802568][ T6685] ? __pfx__copy_from_iter+0x10/0x10 [ 114.807833][ T6685] ? __virt_addr_valid+0x1a4/0x590 [ 114.812936][ T6685] copy_page_from_iter+0xa5/0x120 [ 114.817942][ T6685] skb_copy_datagram_from_iter+0x29b/0x710 [ 114.823745][ T6685] packet_sendmsg+0x21ac/0x5660 [ 114.828589][ T6685] ? sock_has_perm+0x25a/0x2f0 [ 114.833341][ T6685] ? __pfx_sock_has_perm+0x10/0x10 [ 114.838443][ T6685] ? __pfx_packet_sendmsg+0x10/0x10 [ 114.843636][ T6685] __sys_sendto+0x488/0x4f0 [ 114.848122][ T6685] ? __pfx___sys_sendto+0x10/0x10 [ 114.853142][ T6685] ? ksys_write+0x1ba/0x250 [ 114.857629][ T6685] ? __pfx_ksys_write+0x10/0x10 [ 114.862466][ T6685] __x64_sys_sendto+0xe0/0x1c0 [ 114.867210][ T6685] ? do_syscall_64+0x91/0x250 [ 114.871874][ T6685] ? lockdep_hardirqs_on+0x7c/0x110 [ 114.877062][ T6685] do_syscall_64+0xcd/0x250 [ 114.881555][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.887434][ T6685] RIP: 0033:0x7fb54b580809 [ 114.891832][ T6685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.911432][ T6685] RSP: 002b:00007fb54c3dd058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.919836][ T6685] RAX: ffffffffffffffda RBX: 00007fb54b745fa0 RCX: 00007fb54b580809 [ 114.927792][ T6685] RDX: 000000000001000a RSI: 0000000020000180 RDI: 0000000000000004 [ 114.935746][ T6685] RBP: 00007fb54c3dd0a0 R08: 0000000020000140 R09: 0000000000000014 [ 114.943703][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.951662][ T6685] R13: 0000000000000000 R14: 00007fb54b745fa0 R15: 00007fff23f04e68 [ 114.959628][ T6685] [ 114.962644][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.203926][ T6689] Mount JFS Failure: -22 [ 115.208319][ T6689] jfs_mount failed w/return code = -22 [ 115.348745][ T29] audit: type=1400 audit(1732777314.113:357): avc: denied { write } for pid=6688 comm="syz.2.233" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 115.352383][ T5891] gspca_spca508: reg_read err -110 [ 115.371690][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.477845][ T29] audit: type=1400 audit(1732777314.283:358): avc: denied { create } for pid=6688 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 115.507129][ T29] audit: type=1400 audit(1732777314.283:359): avc: denied { ioctl } for pid=6688 comm="syz.2.233" path="socket:[11812]" dev="sockfs" ino=11812 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.062117][ T29] audit: type=1400 audit(1732777315.163:360): avc: denied { mount } for pid=6676 comm="syz.4.228" name="/" dev="ramfs" ino=11814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.266634][ T29] audit: type=1400 audit(1732777315.363:361): avc: denied { create } for pid=6701 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.290234][ T5891] gspca_spca508: reg_read err -110 [ 116.312099][ T5891] gspca_spca508: reg_read err -71 [ 116.351293][ T29] audit: type=1400 audit(1732777315.363:362): avc: denied { connect } for pid=6701 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.378220][ T29] audit: type=1400 audit(1732777315.393:363): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.400098][ T5891] gspca_spca508: reg_read err -71 [ 116.479355][ T29] audit: type=1400 audit(1732777315.573:364): avc: denied { append } for pid=6713 comm="syz.2.239" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.480244][ T5891] gspca_spca508: reg_read err -71 [ 116.508940][ T6709] SELinux: failed to load policy [ 116.515018][ T6687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.230'. [ 116.620484][ T5891] gspca_spca508: reg write: error -71 [ 116.629360][ T5891] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 116.644755][ T5891] usb 5-1: USB disconnect, device number 7 [ 116.669528][ T29] audit: type=1400 audit(1732777315.603:365): avc: denied { load_policy } for pid=6705 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 116.689575][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.638503][ T29] audit: type=1400 audit(1732777315.753:366): avc: denied { create } for pid=6705 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.714619][ T29] audit: type=1400 audit(1732777316.803:367): avc: denied { search } for pid=5192 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.784125][ T6733] netlink: 2744 bytes leftover after parsing attributes in process `syz.2.245'. [ 117.856604][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.892180][ T29] audit: type=1400 audit(1732777316.993:368): avc: denied { write } for pid=6740 comm="syz.3.247" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.930114][ T29] audit: type=1400 audit(1732777316.993:369): avc: denied { open } for pid=6740 comm="syz.3.247" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.985895][ T6744] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 117.995771][ T6744] netlink: 'syz.3.247': attribute type 2 has an invalid length. [ 119.909403][ T6780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 119.975796][ T6780] binder: 6779:6780 ioctl c0306201 20000080 returned -14 [ 119.990107][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.139577][ T6786] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 120.147894][ T6786] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 120.156345][ T6786] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 120.242895][ T6789] loop6: detected capacity change from 0 to 1 [ 120.258464][ T6789] Dev loop6: unable to read RDB block 1 [ 120.265186][ T6789] loop6: unable to read partition table [ 120.272289][ T6789] loop6: partition table beyond EOD, truncated [ 120.278538][ T6789] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 120.278538][ T6789] ) failed (rc=-5) [ 120.642618][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 120.650288][ T5891] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.650579][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.670582][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.677184][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 120.694301][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.710485][ T9] usb 4-1: config 0 descriptor?? [ 120.800512][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 120.806978][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.825828][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 120.849698][ T5891] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 120.869482][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.885735][ T5891] usb 3-1: Product: syz [ 120.893386][ T5891] usb 3-1: Manufacturer: syz [ 120.912822][ T5891] usb 3-1: SerialNumber: syz [ 120.957081][ T5891] usb 3-1: config 0 descriptor?? [ 120.982288][ T5891] usb 3-1: no audio or video endpoints found [ 121.079148][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 121.079166][ T29] audit: type=1400 audit(1732777320.173:383): avc: denied { map } for pid=6793 comm="syz.0.265" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.116079][ T29] audit: type=1400 audit(1732777320.173:384): avc: denied { execute } for pid=6793 comm="syz.0.265" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.222395][ T6774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.152742][ T6774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.918487][ T9] logitech-djreceiver 0003:046D:C517.0010: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.3-1/input0 [ 123.041372][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.267'. [ 123.158000][ T9] usb 3-1: USB disconnect, device number 8 [ 123.200358][ T29] audit: type=1400 audit(1732777322.283:385): avc: denied { read } for pid=6808 comm="syz.0.268" path="socket:[11222]" dev="sockfs" ino=11222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.245451][ T6809] team0: entered promiscuous mode [ 123.254293][ T6809] team_slave_0: entered promiscuous mode [ 123.260619][ T6809] team_slave_1: entered promiscuous mode [ 123.274451][ T6809] team0: left promiscuous mode [ 123.279715][ T6809] team_slave_0: left promiscuous mode [ 123.286617][ T6809] team_slave_1: left promiscuous mode [ 123.925899][ T6819] vxcan1: entered promiscuous mode [ 124.425242][ T29] audit: type=1400 audit(1732777323.513:386): avc: denied { ioctl } for pid=6820 comm="syz.2.271" path="socket:[12166]" dev="sockfs" ino=12166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 124.532123][ T5890] usb 4-1: USB disconnect, device number 10 [ 125.180045][ T29] audit: type=1326 audit(1732777324.193:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.0.274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cb6b80809 code=0x0 [ 125.248714][ T29] audit: type=1400 audit(1732777324.263:388): avc: denied { bind } for pid=6830 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.325844][ T29] audit: type=1400 audit(1732777324.263:389): avc: denied { name_bind } for pid=6830 comm="syz.0.274" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 125.353896][ T29] audit: type=1400 audit(1732777324.263:390): avc: denied { node_bind } for pid=6830 comm="syz.0.274" saddr=fe80::b src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 125.807602][ T5844] block nbd4: Receive control failed (result -22) [ 125.880569][ T6848] nbd4: detected capacity change from 0 to 20 [ 125.960992][ T5931] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 126.019434][ T5841] block nbd4: Dead connection, failed to find a fallback [ 126.102344][ T5841] block nbd4: shutting down sockets [ 126.111306][ T5841] blk_print_req_error: 25 callbacks suppressed [ 126.111320][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.127383][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.135165][ T5841] buffer_io_error: 25 callbacks suppressed [ 126.135177][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.150297][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.174905][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.183068][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.195284][ T6857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.281'. [ 126.209598][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.225286][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.236041][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.247042][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.257577][ T5931] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 126.271162][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.280453][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 126.283253][ T5931] usb 1-1: config 0 descriptor?? [ 126.296741][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.333866][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.368329][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.383712][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.393075][ T5890] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 126.402829][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.410882][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.420152][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.433496][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.442094][ T5890] usb 5-1: config 0 descriptor?? [ 126.448397][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.461104][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.469307][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.478689][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.488326][ T5841] ldm_validate_partition_table(): Disk read failed. [ 126.512124][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.522064][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.537074][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.546610][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.555022][ T5841] Dev nbd4: unable to read RDB block 0 [ 126.567716][ T5841] nbd4: unable to read partition table [ 126.574099][ T5841] nbd4: partition table beyond EOD, truncated [ 126.604484][ T5841] ldm_validate_partition_table(): Disk read failed. [ 126.614597][ T5841] Dev nbd4: unable to read RDB block 0 [ 126.624564][ T5841] nbd4: unable to read partition table [ 126.633472][ T5841] nbd4: partition table beyond EOD, truncated [ 126.648101][ T5843] ldm_validate_partition_table(): Disk read failed. [ 126.657208][ T5843] Dev nbd4: unable to read RDB block 0 [ 126.666299][ T5843] nbd4: unable to read partition table [ 126.672678][ T5843] nbd4: partition table beyond EOD, truncated [ 126.691533][ T5843] ldm_validate_partition_table(): Disk read failed. [ 126.699645][ T5931] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 126.700862][ T5843] Dev nbd4: unable to read RDB block 0 [ 126.722436][ T5931] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 126.729289][ T5843] nbd4: unable to read partition table [ 126.745455][ T5931] hid-thrustmaster 0003:044F:B65D.0011: Wrong number of endpoints? [ 126.758776][ T5843] nbd4: partition table beyond EOD, truncated [ 126.892189][ T5890] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 126.904466][ T5890] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 126.925819][ T5890] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 126.948039][ C1] hid-thrustmaster 0003:044F:B65D.0011: Unknown packet type 0x0, unable to proceed further with wheel init [ 126.955785][ T5890] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 126.972393][ T5890] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 126.981529][ T5890] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 126.994397][ T5890] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 127.060348][ T5890] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf4 found [ 127.085753][ T5890] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf3 found [ 127.108760][ T5890] usb 5-1: USB disconnect, device number 8 [ 127.172657][ T9] usb 1-1: USB disconnect, device number 12 [ 127.414297][ T29] audit: type=1400 audit(1732777326.503:391): avc: denied { listen } for pid=6871 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 128.022402][ T6876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.288'. [ 128.392422][ T5931] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.540027][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.547591][ T5931] usb 5-1: device descriptor read/64, error -71 [ 128.710061][ T5890] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 128.752798][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.762035][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.770081][ T25] usb 3-1: Product: syz [ 128.774280][ T25] usb 3-1: Manufacturer: syz [ 128.778880][ T25] usb 3-1: SerialNumber: syz [ 128.870244][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 128.947064][ T5890] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=e2.de [ 128.991185][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.054738][ T5890] usb 1-1: Product: syz [ 129.088678][ T5890] usb 1-1: Manufacturer: syz [ 129.116624][ T5890] usb 1-1: SerialNumber: syz [ 129.230141][ T5890] usb 1-1: config 0 descriptor?? [ 129.305085][ T25] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 129.306918][ T5890] CoreChips 1-1:0.0: probe with driver CoreChips failed with error -22 [ 129.326025][ T5891] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 129.380110][ T5931] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.519747][ T5890] usb 1-1: USB disconnect, device number 13 [ 129.534534][ T5931] usb 5-1: device descriptor read/64, error -71 [ 129.673839][ T5931] usb usb5-port1: attempt power cycle [ 129.939132][ T6906] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.130124][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 130.150654][ T5931] usb 5-1: device descriptor read/8, error -71 [ 130.340054][ T5890] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.353161][ T5891] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 130.363043][ T5891] ath9k_htc: Failed to initialize the device [ 130.396634][ T5891] usb 3-1: ath9k_htc: USB layer deinitialized [ 130.430144][ T5931] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.461310][ T5931] usb 5-1: device descriptor read/8, error -71 [ 130.580475][ T5931] usb usb5-port1: unable to enumerate USB device [ 131.259166][ T6910] FAULT_INJECTION: forcing a failure. [ 131.259166][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 131.274471][ T6910] CPU: 1 UID: 0 PID: 6910 Comm: syz.4.297 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 131.284729][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.294786][ T6910] Call Trace: [ 131.298061][ T6910] [ 131.300990][ T6910] dump_stack_lvl+0x16c/0x1f0 [ 131.305679][ T6910] should_fail_ex+0x497/0x5b0 [ 131.310370][ T6910] ? fs_reclaim_acquire+0xae/0x150 [ 131.315486][ T6910] should_failslab+0xc2/0x120 [ 131.320173][ T6910] __kmalloc_noprof+0xcb/0x510 [ 131.324945][ T6910] ? d_absolute_path+0x137/0x1b0 [ 131.329888][ T6910] ? rcu_is_watching+0x12/0xc0 [ 131.334653][ T6910] tomoyo_encode2+0x100/0x3e0 [ 131.339334][ T6910] tomoyo_encode+0x29/0x50 [ 131.343756][ T6910] tomoyo_realpath_from_path+0x19d/0x720 [ 131.349405][ T6910] tomoyo_path_number_perm+0x248/0x590 [ 131.354859][ T6910] ? tomoyo_path_number_perm+0x235/0x590 [ 131.360481][ T6910] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.366479][ T6910] ? __pfx_lock_release+0x10/0x10 [ 131.371488][ T6910] ? trace_lock_acquire+0x146/0x1e0 [ 131.376681][ T6910] ? lock_acquire+0x2f/0xb0 [ 131.381191][ T6910] ? __fget_files+0x40/0x3a0 [ 131.385768][ T6910] ? __fget_files+0x206/0x3a0 [ 131.390432][ T6910] security_file_ioctl+0x9b/0x240 [ 131.395443][ T6910] __x64_sys_ioctl+0xb7/0x200 [ 131.400111][ T6910] do_syscall_64+0xcd/0x250 [ 131.404605][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.410489][ T6910] RIP: 0033:0x7f6f45980809 [ 131.414886][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.434477][ T6910] RSP: 002b:00007f6f46843058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.442875][ T6910] RAX: ffffffffffffffda RBX: 00007f6f45b45fa0 RCX: 00007f6f45980809 [ 131.450842][ T6910] RDX: 0000000000000000 RSI: 0000000000005609 RDI: 0000000000000003 [ 131.458796][ T6910] RBP: 00007f6f468430a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.466750][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.474705][ T6910] R13: 0000000000000000 R14: 00007f6f45b45fa0 R15: 00007ffc1533d7b8 [ 131.482691][ T6910] [ 131.516913][ T6910] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.534075][ T5931] usb 3-1: USB disconnect, device number 9 [ 131.710991][ T5890] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.722640][ T5890] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.732937][ T5890] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.742041][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.778879][ T6905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 131.789185][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.100688][ T5844] block nbd0: Receive control failed (result -22) [ 132.180442][ T6914] nbd0: detected capacity change from 0 to 20 [ 132.211663][ T5843] block nbd0: Dead connection, failed to find a fallback [ 132.348766][ T5890] usb 4-1: USB disconnect, device number 11 [ 132.378845][ T5843] block nbd0: shutting down sockets [ 132.422359][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.428707][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.571174][ T29] audit: type=1400 audit(1732777331.543:392): avc: denied { sqpoll } for pid=6904 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.622293][ T5843] blk_print_req_error: 60 callbacks suppressed [ 132.622308][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.127029][ T5891] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.128482][ T5843] buffer_io_error: 60 callbacks suppressed [ 133.128494][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.153237][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.162344][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.170167][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.299'. [ 133.180149][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.190211][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.198080][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.248388][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.271203][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.697512][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.757370][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.767980][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.814728][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.938002][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.950105][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.962266][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.970092][ T5843] ldm_validate_partition_table(): Disk read failed. [ 133.976707][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.988525][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.996465][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.007448][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 134.015433][ T5843] Dev nbd0: unable to read RDB block 0 [ 134.021235][ T5843] nbd0: unable to read partition table [ 134.026919][ T5843] nbd0: partition table beyond EOD, truncated [ 134.306901][ T6935] syz.3.304: attempt to access beyond end of device [ 134.306901][ T6935] nbd3: rw=2048, sector=2, nr_sectors = 2 limit=0 [ 134.320377][ T6935] hfsplus: unable to find HFS+ superblock [ 134.338508][ T5843] ldm_validate_partition_table(): Disk read failed. [ 134.346871][ T5843] Dev nbd0: unable to read RDB block 0 [ 134.352689][ T5843] nbd0: unable to read partition table [ 134.358501][ T5843] nbd0: partition table beyond EOD, truncated [ 134.460292][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 134.478750][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.511314][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.580133][ T5891] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 134.589203][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.612443][ T5891] usb 1-1: config 0 descriptor?? [ 134.795098][ T6939] blktrace: Concurrent blktraces are not allowed on loop6 [ 134.803361][ T6939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.306'. [ 134.827985][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 134.828915][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 134.832409][ T5891] usb 1-1: USB disconnect, device number 14 [ 135.397163][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.411614][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 135.421437][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.429479][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.438613][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.447735][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 135.455127][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.482524][ T29] audit: type=1400 audit(1732777334.563:393): avc: denied { mounton } for pid=6949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 136.397012][ T3883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.502185][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 136.670219][ T3883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.730149][ T5918] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 136.765792][ T3883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.795586][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.803722][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.838736][ T6949] bridge_slave_0: entered allmulticast mode [ 136.860087][ T5918] usb 5-1: device descriptor read/64, error -71 [ 137.145505][ T6976] sg_write: data in/out 4060/14 bytes for SCSI command 0x0-- guessing data in; [ 137.145505][ T6976] program syz.3.314 not setting count and/or reply_len properly [ 137.178706][ T6949] bridge_slave_0: entered promiscuous mode [ 137.266791][ T3883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.300951][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.308330][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.318101][ T6949] bridge_slave_1: entered allmulticast mode [ 137.325688][ T6949] bridge_slave_1: entered promiscuous mode [ 137.350753][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.370559][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.420078][ T5918] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 137.428760][ T29] audit: type=1400 audit(1732777336.523:394): avc: denied { search } for pid=5504 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.476039][ T6949] team0: Port device team_slave_0 added [ 137.485935][ T29] audit: type=1400 audit(1732777336.553:395): avc: denied { read } for pid=5504 comm="dhcpcd" name="n102" dev="tmpfs" ino=3314 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.512232][ T5931] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.529493][ T6949] team0: Port device team_slave_1 added [ 137.549146][ T55] Bluetooth: hci5: command tx timeout [ 137.560194][ T29] audit: type=1400 audit(1732777336.553:396): avc: denied { open } for pid=5504 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3314 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.565103][ T3883] bridge_slave_1: left promiscuous mode [ 137.583118][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.583274][ T29] audit: type=1400 audit(1732777336.553:397): avc: denied { getattr } for pid=5504 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3314 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.606431][ T3883] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.662996][ T3883] bridge_slave_0: left allmulticast mode [ 137.668667][ T3883] bridge_slave_0: left promiscuous mode [ 137.680030][ T5918] usb 5-1: device descriptor read/64, error -71 [ 137.692744][ T29] audit: type=1400 audit(1732777336.793:398): avc: denied { read } for pid=6983 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.715976][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 137.716039][ T3883] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.731279][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 137.754176][ T29] audit: type=1400 audit(1732777336.793:399): avc: denied { map } for pid=6980 comm="syz.3.316" path="pipe:[13510]" dev="pipefs" ino=13510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 137.759730][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 137.790489][ T5918] usb usb5-port1: attempt power cycle [ 137.814051][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.828818][ T5931] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.838355][ T29] audit: type=1400 audit(1732777336.823:400): avc: denied { open } for pid=6983 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.863292][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.863337][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.878328][ T5931] usb 3-1: config 0 descriptor?? [ 137.903265][ T29] audit: type=1400 audit(1732777336.823:401): avc: denied { getattr } for pid=6983 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.928487][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.030159][ T5844] block nbd0: Receive control failed (result -22) [ 138.138293][ T6987] blktrace: Concurrent blktraces are not allowed on loop6 [ 138.147807][ T6987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.317'. [ 138.170551][ T6994] nbd0: detected capacity change from 0 to 20 [ 138.183051][ T5848] block nbd0: Dead connection, failed to find a fallback [ 138.190223][ T5918] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 138.197889][ T5848] block nbd0: shutting down sockets [ 138.199721][ T29] audit: type=1400 audit(1732777337.293:402): avc: denied { write } for pid=6982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.226348][ T5848] blk_print_req_error: 25 callbacks suppressed [ 138.226363][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.238237][ T29] audit: type=1400 audit(1732777337.293:403): avc: denied { add_name } for pid=6982 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.250019][ T5918] usb 5-1: device descriptor read/8, error -71 [ 138.280033][ T5848] buffer_io_error: 25 callbacks suppressed [ 138.280046][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.286311][ T29] audit: type=1400 audit(1732777337.293:404): avc: denied { create } for pid=6982 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.304657][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.322652][ T29] audit: type=1400 audit(1732777337.293:405): avc: denied { write } for pid=6982 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=3331 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.357693][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.360207][ T5931] microsoft 0003:045E:07DA.0013: unknown main item tag 0x6 [ 138.373067][ T5887] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 138.386749][ T5931] microsoft 0003:045E:07DA.0013: unknown main item tag 0x6 [ 138.390962][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.404226][ T5931] microsoft 0003:045E:07DA.0013: unknown main item tag 0x6 [ 138.413767][ T5931] microsoft 0003:045E:07DA.0013: unknown main item tag 0x6 [ 138.415014][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.423496][ T5931] microsoft 0003:045E:07DA.0013: unknown main item tag 0x6 [ 138.437739][ T29] audit: type=1400 audit(1732777337.293:406): avc: denied { append } for pid=6982 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=3331 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.441051][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.461776][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.463878][ T5931] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 138.480517][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.488050][ T5931] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 138.503911][ T5931] microsoft 0003:045E:07DA.0013: no inputs found [ 138.506423][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.510400][ T5931] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 138.530247][ T5918] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 138.551934][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.571964][ T5918] usb 5-1: device descriptor read/8, error -71 [ 138.572248][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 138.578417][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.585658][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.601050][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.609687][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.629297][ T5887] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 138.629519][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.650041][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.657997][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.665473][ T5887] usb 1-1: config 0 descriptor?? [ 138.671857][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.683171][ T5918] usb usb5-port1: unable to enumerate USB device [ 138.685444][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.698878][ T5848] ldm_validate_partition_table(): Disk read failed. [ 138.706131][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.715534][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.723593][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.724277][ T3883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.732665][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.732923][ T5848] Dev nbd0: unable to read RDB block 0 [ 138.756946][ T5848] nbd0: unable to read partition table [ 138.762705][ T5848] nbd0: partition table beyond EOD, truncated [ 138.769218][ T3883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.779033][ T5848] ldm_validate_partition_table(): Disk read failed. [ 138.786182][ T5848] Dev nbd0: unable to read RDB block 0 [ 138.792154][ T5848] nbd0: unable to read partition table [ 138.797895][ T5848] nbd0: partition table beyond EOD, truncated [ 138.798761][ T3883] bond0 (unregistering): Released all slaves [ 138.858301][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.869252][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.910440][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.923045][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.934437][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.963586][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.166877][ T5887] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 139.236865][ T5887] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 139.284456][ T5887] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 139.300274][ T5887] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 139.312167][ T5887] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 139.322632][ T5887] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 139.357693][ T5887] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 139.385919][ T6949] hsr_slave_0: entered promiscuous mode [ 139.411307][ T6949] hsr_slave_1: entered promiscuous mode [ 139.429135][ T6949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.440257][ T5887] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found [ 139.450507][ T6949] Cannot create hsr debugfs directory [ 139.458389][ T5887] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found [ 139.499859][ T5887] usb 1-1: USB disconnect, device number 15 [ 139.506497][ T7004] vivid-000: ================= START STATUS ================= [ 139.514348][ T7004] vivid-000: Generate PTS: true [ 139.519319][ T7004] vivid-000: Generate SCR: true [ 139.524218][ T7004] tpg source WxH: 320x180 (R'G'B) [ 139.529234][ T7004] tpg field: 1 [ 139.532603][ T7004] tpg crop: 320x180@0x0 [ 139.536745][ T7004] tpg compose: 320x180@0x0 [ 139.541172][ T7004] tpg colorspace: 8 [ 139.544958][ T7004] tpg transfer function: 0/2 [ 139.549525][ T7004] tpg quantization: 0/2 [ 139.553677][ T7004] tpg RGB range: 0/2 [ 139.557552][ T7004] vivid-000: ================== END STATUS ================== [ 139.620181][ T5844] Bluetooth: hci5: command tx timeout [ 140.597797][ T3883] hsr_slave_0: left promiscuous mode [ 140.624428][ T3883] hsr_slave_1: left promiscuous mode [ 140.632356][ T5889] usb 3-1: USB disconnect, device number 10 [ 140.784054][ T3883] veth1_macvtap: left promiscuous mode [ 140.789903][ T3883] veth0_macvtap: left promiscuous mode [ 140.831243][ T3883] veth1_vlan: left promiscuous mode [ 140.831760][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 140.851222][ T3883] veth0_vlan: left promiscuous mode [ 141.104293][ T7051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.327'. [ 141.133336][ T7050] blktrace: Concurrent blktraces are not allowed on loop6 [ 141.141250][ T7050] netlink: 48 bytes leftover after parsing attributes in process `syz.3.328'. [ 141.557803][ T3883] team0 (unregistering): Port device team_slave_1 removed [ 141.596400][ T3883] team0 (unregistering): Port device team_slave_0 removed [ 141.712528][ T5844] Bluetooth: hci5: command 0x040f tx timeout [ 142.000043][ T5889] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 142.205565][ T5889] usb 5-1: device descriptor read/64, error -71 [ 142.431250][ T5887] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.537223][ T6949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.566703][ T6949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.588833][ T6949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.604891][ T5887] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.624183][ T6949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.642386][ T5887] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.650080][ T5889] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 142.679162][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.686287][ T5887] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 142.695481][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.706498][ T5887] usb 1-1: config 0 descriptor?? [ 142.800094][ T5889] usb 5-1: device descriptor read/64, error -71 [ 142.890189][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.913982][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.932542][ T3883] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.939658][ T3883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.960316][ T5889] usb usb5-port1: attempt power cycle [ 142.965726][ T6949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.983897][ T6949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.040105][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 143.040121][ T29] audit: type=1400 audit(1732777342.113:411): avc: denied { create } for pid=7075 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.112948][ T3883] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.120075][ T3883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.143298][ T29] audit: type=1400 audit(1732777342.113:412): avc: denied { bind } for pid=7075 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.177694][ T5887] pantherlord 0003:0810:0002.0015: invalid report_size 46851 [ 143.205894][ T5887] pantherlord 0003:0810:0002.0015: item 0 2 1 7 parsing failed [ 143.215990][ T29] audit: type=1400 audit(1732777342.113:413): avc: denied { write } for pid=7075 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.244520][ T5887] pantherlord 0003:0810:0002.0015: parse failed [ 143.251249][ T5887] pantherlord 0003:0810:0002.0015: probe with driver pantherlord failed with error -22 [ 143.301273][ T5889] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 143.370861][ T5889] usb 5-1: device descriptor read/8, error -71 [ 143.403544][ T5887] usb 1-1: USB disconnect, device number 16 [ 143.475872][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.611285][ T5889] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 143.676833][ T5889] usb 5-1: device descriptor read/8, error -71 [ 143.822028][ T5889] usb usb5-port1: unable to enumerate USB device [ 143.842464][ T5844] Bluetooth: hci5: command 0x040f tx timeout [ 143.853808][ T6949] veth0_vlan: entered promiscuous mode [ 143.866894][ T6949] veth1_vlan: entered promiscuous mode [ 143.896440][ T6949] veth0_macvtap: entered promiscuous mode [ 143.915421][ T6949] veth1_macvtap: entered promiscuous mode [ 143.921297][ T5890] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 143.922501][ T7105] warning: `syz.3.336' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.949897][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.960742][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.991795][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.025355][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.036585][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.047432][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.061758][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.080851][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.091349][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.110193][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.135432][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.171138][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.185377][ T5890] usb 3-1: New USB device found, idVendor=4bfd, idProduct=e739, bcdDevice=2d.40 [ 144.300982][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.439836][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.448589][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.462629][ T5890] usb 3-1: Product: syz [ 144.466805][ T5890] usb 3-1: Manufacturer: syz [ 144.472032][ T5890] usb 3-1: SerialNumber: syz [ 144.479244][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.491950][ T5890] usb 3-1: config 0 descriptor?? [ 144.507041][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.519469][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.092056][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.102784][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.118606][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.142214][ T6949] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.151167][ T6949] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.160152][ T6949] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.169089][ T6949] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.278721][ T7125] bond1: entered promiscuous mode [ 145.283935][ T7125] bond1: entered allmulticast mode [ 145.289411][ T7125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.330180][ T7133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.340'. [ 145.369763][ T7125] bond1 (unregistering): Released all slaves [ 145.488898][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.529116][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.624689][ T29] audit: type=1400 audit(1732777344.713:414): avc: denied { setrlimit } for pid=7136 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 145.644170][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.650695][ T29] audit: type=1400 audit(1732777344.723:415): avc: denied { remount } for pid=7139 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.806891][ T6724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.891193][ T5891] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.913102][ T5844] Bluetooth: hci5: command 0x040f tx timeout [ 145.980577][ T6724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.133706][ T5891] usb 4-1: device descriptor read/64, error -71 [ 146.135062][ T29] audit: type=1400 audit(1732777345.233:416): avc: denied { mounton } for pid=7143 comm="syz.4.344" path="/69/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 146.162067][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.169689][ T7148] tmpfs: Bad value for 'mpol' [ 146.198221][ T29] audit: type=1400 audit(1732777345.243:417): avc: denied { mounton } for pid=6949 comm="syz-executor" path="/root/syzkaller.gsAmh1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 146.231633][ T7146] netlink: 32 bytes leftover after parsing attributes in process `syz.4.344'. [ 146.301268][ T7155] netlink: 'syz.0.345': attribute type 3 has an invalid length. [ 146.404879][ T5890] usb 3-1: USB disconnect, device number 11 [ 146.423524][ T5891] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.528041][ T7155] random: crng reseeded on system resumption [ 146.683693][ T5891] usb 4-1: device descriptor read/64, error -71 [ 146.880567][ T5891] usb usb4-port1: attempt power cycle [ 147.169833][ T7181] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 147.260083][ T5891] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 147.281585][ T5891] usb 4-1: device descriptor read/8, error -71 [ 147.294692][ T7184] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 147.427054][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.353'. [ 147.695174][ T5891] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 147.710471][ T5891] usb 4-1: device descriptor read/8, error -71 [ 147.751198][ T5887] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 147.810476][ T7206] loop6: detected capacity change from 0 to 1 [ 147.821347][ T5891] usb usb4-port1: unable to enumerate USB device [ 147.841298][ T7206] Dev loop6: unable to read RDB block 1 [ 147.841495][ T7206] loop6: unable to read partition table [ 147.842140][ T7206] loop6: partition table beyond EOD, truncated [ 147.842189][ T7206] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 147.842189][ T7206] ) failed (rc=-5) [ 148.099535][ T5887] usb 3-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 148.099623][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.099679][ T5887] usb 3-1: Product: syz [ 148.099733][ T5887] usb 3-1: Manufacturer: syz [ 148.099785][ T5887] usb 3-1: SerialNumber: syz [ 148.123724][ T5887] usb 3-1: config 0 descriptor?? [ 148.200826][ T5887] upd78f0730 3-1:0.0: upd78f0730 converter detected [ 148.238003][ T5887] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 148.336994][ T29] audit: type=1400 audit(1732777347.433:418): avc: denied { read } for pid=7177 comm="syz.2.350" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.502098][ T7211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.350'. [ 148.503814][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.503984][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.541257][ T29] audit: type=1400 audit(1732777347.433:419): avc: denied { open } for pid=7177 comm="syz.2.350" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.541298][ T29] audit: type=1400 audit(1732777347.603:420): avc: denied { write } for pid=7177 comm="syz.2.350" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 148.541329][ T29] audit: type=1400 audit(1732777347.603:421): avc: denied { ioctl } for pid=7177 comm="syz.2.350" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 148.621993][ T7215] capability: warning: `syz.5.357' uses deprecated v2 capabilities in a way that may be insecure [ 149.110244][ T5887] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 149.265691][ T5887] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 149.265778][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.282059][ T5887] usb 4-1: config 0 descriptor?? [ 149.788692][ T7242] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.363' sets config #0 [ 149.832614][ T7247] loop6: detected capacity change from 0 to 1 [ 149.840617][ T7247] Dev loop6: unable to read RDB block 1 [ 149.846225][ T7247] loop6: unable to read partition table [ 149.854276][ T7247] loop6: partition table beyond EOD, truncated [ 149.873734][ T7247] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 149.873734][ T7247] ) failed (rc=-5) [ 150.043958][ T29] audit: type=1400 audit(1732777349.143:422): avc: denied { sys_chroot } for pid=7252 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 150.064401][ T7254] syz.5.367[7254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.097236][ T29] audit: type=1400 audit(1732777349.143:423): avc: denied { setgid } for pid=7252 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 150.114609][ T25] usb 3-1: USB disconnect, device number 12 [ 150.129254][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.349754][ T25] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 150.359863][ T25] upd78f0730 3-1:0.0: device disconnected [ 150.372668][ T29] audit: type=1400 audit(1732777349.463:424): avc: denied { mounton } for pid=7219 comm="syz.3.359" path="/proc/227" dev="proc" ino=14427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 150.394673][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.483024][ T7270] loop6: detected capacity change from 0 to 1 [ 150.493831][ T7270] Dev loop6: unable to read RDB block 1 [ 150.499597][ T7270] loop6: unable to read partition table [ 150.506052][ T7270] loop6: partition table beyond EOD, truncated [ 150.512401][ T7270] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 150.512401][ T7270] ) failed (rc=-5) [ 150.902179][ T5887] pegasus 4-1:0.0: can't reset MAC [ 150.908157][ T5887] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 151.102372][ T5887] usb 4-1: USB disconnect, device number 16 [ 151.583554][ T7289] FAULT_INJECTION: forcing a failure. [ 151.583554][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 151.600969][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.4.375 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 151.611232][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.621292][ T7289] Call Trace: [ 151.624572][ T7289] [ 151.627503][ T7289] dump_stack_lvl+0x16c/0x1f0 [ 151.632192][ T7289] should_fail_ex+0x497/0x5b0 [ 151.636882][ T7289] ? fs_reclaim_acquire+0xae/0x150 [ 151.642002][ T7289] should_failslab+0xc2/0x120 [ 151.646686][ T7289] __kmalloc_cache_noprof+0x68/0x410 [ 151.651979][ T7289] ? kasan_save_track+0x14/0x30 [ 151.656839][ T7289] ovl_init_fs_context+0x11f/0x5d0 [ 151.661971][ T7289] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 151.667609][ T7289] alloc_fs_context+0x54a/0x9c0 [ 151.672481][ T7289] path_mount+0xb08/0x1f20 [ 151.676926][ T7289] ? kmem_cache_free+0x152/0x4c0 [ 151.681872][ T7289] ? __pfx_path_mount+0x10/0x10 [ 151.686733][ T7289] ? putname+0x13c/0x180 [ 151.690992][ T7289] __x64_sys_mount+0x294/0x320 [ 151.695767][ T7289] ? __pfx___x64_sys_mount+0x10/0x10 [ 151.701074][ T7289] do_syscall_64+0xcd/0x250 [ 151.705596][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.711501][ T7289] RIP: 0033:0x7f6f45980809 [ 151.715919][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.735533][ T7289] RSP: 002b:00007f6f46843058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.743953][ T7289] RAX: ffffffffffffffda RBX: 00007f6f45b45fa0 RCX: 00007f6f45980809 [ 151.752021][ T7289] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 151.759997][ T7289] RBP: 00007f6f468430a0 R08: 0000000020000400 R09: 0000000000000000 [ 151.767974][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.775948][ T7289] R13: 0000000000000000 R14: 00007f6f45b45fa0 R15: 00007ffc1533d7b8 [ 151.783942][ T7289] [ 151.809576][ T5891] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 151.999065][ T7302] program syz.5.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.157414][ T7314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.193222][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 152.595842][ T5891] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 152.606694][ T5891] usb 1-1: config 0 has no interface number 0 [ 152.617985][ T5891] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=da.65 [ 152.630162][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.638309][ T5891] usb 1-1: Product: syz [ 152.642680][ T5891] usb 1-1: Manufacturer: syz [ 152.647295][ T5891] usb 1-1: SerialNumber: syz [ 152.653273][ T5891] usb 1-1: config 0 descriptor?? [ 152.700062][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.826153][ T7320] netlink: 2548 bytes leftover after parsing attributes in process `syz.5.382'. [ 152.838684][ T7320] netlink: 80 bytes leftover after parsing attributes in process `syz.5.382'. [ 152.848206][ T1552] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 152.861626][ T5891] peak_usb 1-1:0.19 can0: unable to request usb[type=0 value=1] err=-71 [ 152.873527][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 152.875871][ T5891] peak_usb 1-1:0.19: unable to read PCAN-USB Pro firmware info (err -71) [ 152.890259][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.900498][ T9] usb 3-1: Product: syz [ 152.904657][ T9] usb 3-1: Manufacturer: syz [ 152.910958][ T9] usb 3-1: SerialNumber: syz [ 152.919059][ T9] usb 3-1: config 0 descriptor?? [ 152.926743][ T9] ch341 3-1:0.0: ch341-uart converter detected [ 152.970899][ T5891] peak_usb 1-1:0.19: probe with driver peak_usb failed with error -71 [ 153.001812][ T1552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.007710][ T7325] syz.5.383: attempt to access beyond end of device [ 153.007710][ T7325] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 153.011775][ T1552] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 153.025245][ T29] audit: type=1400 audit(1732777352.103:425): avc: denied { mounton } for pid=7323 comm="syz.5.383" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 153.062757][ T5891] usb 1-1: USB disconnect, device number 17 [ 153.096192][ T1552] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 153.108887][ T1552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.120285][ T5890] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 153.121927][ T1552] usb 4-1: config 0 descriptor?? [ 153.266516][ T7327] Illegal XDP return value 4294966772 on prog (id 71) dev syz_tun, expect packet loss! [ 153.309808][ T29] audit: type=1400 audit(1732777352.383:426): avc: denied { mount } for pid=7306 comm="syz.2.378" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 153.499791][ T5890] usb 5-1: device descriptor read/64, error -71 [ 153.584233][ T9] usb 3-1: failed to receive control message: -71 [ 153.590853][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 153.617368][ T9] usb 3-1: USB disconnect, device number 13 [ 153.624113][ T9] ch341 3-1:0.0: device disconnected [ 153.715312][ T1552] lenovo 0003:17EF:60EE.0016: unknown main item tag 0x0 [ 153.724519][ T1552] lenovo 0003:17EF:60EE.0016: unknown main item tag 0x0 [ 153.735426][ T1552] lenovo 0003:17EF:60EE.0016: item fetching failed at offset 2/5 [ 153.751243][ T1552] lenovo 0003:17EF:60EE.0016: hid_parse failed [ 153.757786][ T1552] lenovo 0003:17EF:60EE.0016: probe with driver lenovo failed with error -22 [ 153.792358][ T5890] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 153.935291][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 153.935307][ T5890] usb 5-1: device descriptor read/64, error -71 [ 153.972581][ T1552] IPVS: starting estimator thread 0... [ 154.040287][ T5890] usb usb5-port1: attempt power cycle [ 154.080168][ T7338] IPVS: using max 27 ests per chain, 64800 per kthread [ 154.867393][ T7348] FAULT_INJECTION: forcing a failure. [ 154.867393][ T7348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.880705][ T7348] CPU: 0 UID: 0 PID: 7348 Comm: syz.2.387 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 154.890938][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.900967][ T7348] Call Trace: [ 154.904234][ T7348] [ 154.907140][ T7348] dump_stack_lvl+0x16c/0x1f0 [ 154.911818][ T7348] should_fail_ex+0x497/0x5b0 [ 154.916478][ T7348] _copy_to_user+0x32/0xd0 [ 154.920869][ T7348] pagemap_read+0x536/0x880 [ 154.925357][ T7348] ? __pfx_pagemap_read+0x10/0x10 [ 154.930376][ T7348] ? rw_verify_area+0x18d/0x700 [ 154.935204][ T7348] ? rw_verify_area+0x1d2/0x700 [ 154.940042][ T7348] ? __pfx_pagemap_read+0x10/0x10 [ 154.945065][ T7348] vfs_read+0x1df/0xbe0 [ 154.949197][ T7348] ? __pfx_vfs_read+0x10/0x10 [ 154.953849][ T7348] ? irqentry_exit+0x3b/0x90 [ 154.958427][ T7348] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.963617][ T7348] __x64_sys_pread64+0x1f6/0x250 [ 154.968529][ T7348] ? __pfx___x64_sys_pread64+0x10/0x10 [ 154.973966][ T7348] do_syscall_64+0xcd/0x250 [ 154.978450][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.984321][ T7348] RIP: 0033:0x7f62e6780809 [ 154.988709][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.008291][ T7348] RSP: 002b:00007f62e7508058 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 155.016689][ T7348] RAX: ffffffffffffffda RBX: 00007f62e6946080 RCX: 00007f62e6780809 [ 155.024658][ T7348] RDX: 0000000000019000 RSI: 000000002001a240 RDI: 0000000000000004 [ 155.032607][ T7348] RBP: 00007f62e75080a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.040557][ T7348] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000002 [ 155.048502][ T7348] R13: 0000000000000000 R14: 00007f62e6946080 R15: 00007fff040e3928 [ 155.056454][ T7348] [ 155.059480][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.130529][ T5890] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 155.303380][ T9] usb 4-1: USB disconnect, device number 17 [ 155.348345][ T5890] usb 5-1: device descriptor read/8, error -71 [ 155.485866][ T7353] fuse: Unknown parameter 'rootmodelZ! [ 155.485866][ T7353] &R>{' [ 155.744968][ T5890] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 155.907414][ T5890] usb 5-1: device descriptor read/8, error -71 [ 156.183920][ T5890] usb usb5-port1: unable to enumerate USB device [ 156.201665][ T1552] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 156.213760][ T7365] trusted_key: encrypted_key: insufficient parameters specified [ 156.218781][ T29] audit: type=1400 audit(1732777355.313:427): avc: denied { write } for pid=5192 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.402848][ T29] audit: type=1400 audit(1732777355.313:428): avc: denied { remove_name } for pid=5192 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.425376][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.431462][ T1552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.431491][ T1552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.431514][ T1552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.443429][ T29] audit: type=1400 audit(1732777355.313:429): avc: denied { add_name } for pid=5192 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.600037][ T1552] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 156.609109][ T1552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.619231][ T1552] usb 3-1: config 0 descriptor?? [ 156.689384][ T7371] loop6: detected capacity change from 0 to 1 [ 157.145136][ T7371] Dev loop6: unable to read RDB block 1 [ 157.150776][ T7371] loop6: unable to read partition table [ 157.156548][ T7371] loop6: partition table beyond EOD, truncated [ 157.162770][ T7371] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 157.162770][ T7371] ) failed (rc=-5) [ 157.319501][ T29] audit: type=1400 audit(1732777356.413:430): avc: denied { connect } for pid=7376 comm="syz.0.396" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.339807][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.356748][ T7379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.396'. [ 157.377028][ T7379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.396'. [ 157.642990][ T1552] pantherlord 0003:0810:0002.0017: invalid report_size 46851 [ 157.679987][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 157.710113][ T7388] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.719058][ T7388] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.727834][ T7388] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.736612][ T7388] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.746758][ T7388] vxlan0: entered promiscuous mode [ 157.930470][ T1552] pantherlord 0003:0810:0002.0017: item 0 2 1 7 parsing failed [ 158.029793][ T29] audit: type=1400 audit(1732777357.123:431): avc: denied { ioctl } for pid=7376 comm="syz.0.396" path="socket:[14673]" dev="sockfs" ino=14673 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 158.064022][ T1552] pantherlord 0003:0810:0002.0017: parse failed [ 158.070428][ T1552] pantherlord 0003:0810:0002.0017: probe with driver pantherlord failed with error -22 [ 158.315568][ T1552] usb 3-1: USB disconnect, device number 14 [ 158.324319][ T7395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.398'. [ 158.509701][ T5889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.603875][ T7405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.401'. [ 158.920004][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 158.926945][ T5889] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 158.963047][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 158.968235][ T7412] netlink: 6 bytes leftover after parsing attributes in process `syz.2.403'. [ 159.081137][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.106523][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.124822][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.138743][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.152034][ T7417] openvswitch: netlink: Duplicate key (type 32). [ 159.159187][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.176540][ T29] audit: type=1400 audit(1732777358.273:432): avc: denied { execute } for pid=7415 comm="syz.0.404" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 159.290024][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.430930][ T5889] usb 4-1: GET_CAPABILITIES returned 0 [ 159.436737][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 159.570115][ T5918] usb 6-1: device descriptor read/64, error -71 [ 159.870662][ T5918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.993802][ T29] audit: type=1400 audit(1732777359.083:433): avc: denied { getopt } for pid=7391 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.096130][ T29] audit: type=1400 audit(1732777359.193:434): avc: denied { map } for pid=7391 comm="syz.3.399" path="socket:[15626]" dev="sockfs" ino=15626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.100035][ T5918] usb 6-1: device descriptor read/64, error -71 [ 160.189190][ T29] audit: type=1400 audit(1732777359.193:435): avc: denied { accept } for pid=7391 comm="syz.3.399" path="socket:[15626]" dev="sockfs" ino=15626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.402441][ T5918] usb usb6-port1: attempt power cycle [ 160.740085][ T5918] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.880089][ T5918] usb 6-1: device descriptor read/8, error -71 [ 160.984218][ T5889] usb 4-1: USB disconnect, device number 18 [ 161.007524][ T29] audit: type=1400 audit(1732777359.503:436): avc: denied { accept } for pid=7427 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.137209][ T5918] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.226223][ T5918] usb 6-1: device descriptor read/8, error -71 [ 161.366343][ T5918] usb usb6-port1: unable to enumerate USB device [ 161.480229][ T1552] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.655416][ T1552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.682610][ T1552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.703410][ T1552] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.722804][ T1552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.736750][ T1552] usb 1-1: config 0 descriptor?? [ 161.911797][ T25] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 162.199897][ T1552] hid (null): bogus close delimiter [ 162.303662][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.314123][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 162.361570][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.375583][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.398093][ T25] usb 3-1: SerialNumber: syz [ 162.403704][ T1552] usb 1-1: language id specifier not provided by device, defaulting to English [ 162.439441][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.5.412'. [ 162.439667][ T25] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 162.463578][ T25] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 162.471324][ T25] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 162.883913][ T7452] mmap: syz.2.408 (7452) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.931286][ T7469] blktrace: Concurrent blktraces are not allowed on loop6 [ 162.939216][ T7469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.414'. [ 163.031280][ T1552] uclogic 0003:256C:006D.0018: interface is invalid, ignoring [ 163.216807][ T5918] usb 3-1: USB disconnect, device number 15 [ 163.514673][ T29] audit: type=1400 audit(1732777362.613:437): avc: denied { ioctl } for pid=7439 comm="syz.0.409" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.555961][ T5887] usb 1-1: USB disconnect, device number 18 [ 163.838101][ T7490] netlink: 'syz.4.417': attribute type 10 has an invalid length. [ 163.846643][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.855574][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.871472][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.879639][ T7490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.887272][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.894391][ T7490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.935369][ T7490] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 163.941677][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 163.953263][ T7494] bridge_slave_1: left allmulticast mode [ 163.958922][ T7494] bridge_slave_1: left promiscuous mode [ 163.965308][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.973808][ T7494] bridge_slave_0: left allmulticast mode [ 163.979429][ T7494] bridge_slave_0: left promiscuous mode [ 163.985509][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.993399][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 164.027280][ T29] audit: type=1400 audit(1732777363.123:438): avc: denied { write } for pid=7488 comm="syz.4.417" path="socket:[14789]" dev="sockfs" ino=14789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.086305][ T7494] bond0: (slave bridge0): Releasing backup interface [ 164.135962][ T29] audit: type=1400 audit(1732777363.233:439): avc: denied { read } for pid=7498 comm="syz.2.419" path="socket:[14804]" dev="sockfs" ino=14804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.151164][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.180227][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.224151][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.240091][ T9] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 164.260764][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.444305][ T9] usb 4-1: config 0 descriptor?? [ 165.363916][ T7517] loop6: detected capacity change from 0 to 1 [ 165.512662][ T7517] Dev loop6: unable to read RDB block 1 [ 165.518280][ T7517] loop6: unable to read partition table [ 165.524145][ T7517] loop6: partition table beyond EOD, truncated [ 165.531316][ T7517] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 165.531316][ T7517] ) failed (rc=-5) [ 165.554884][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 165.730224][ T25] usb 3-1: device descriptor read/64, error -71 [ 165.739396][ T5887] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 165.760739][ T9] pantherlord 0003:0810:0002.0019: invalid report_size 46851 [ 165.768150][ T9] pantherlord 0003:0810:0002.0019: item 0 2 1 7 parsing failed [ 165.776325][ T9] pantherlord 0003:0810:0002.0019: parse failed [ 165.782915][ T9] pantherlord 0003:0810:0002.0019: probe with driver pantherlord failed with error -22 [ 166.010053][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 166.016242][ T9] usb 4-1: USB disconnect, device number 19 [ 166.022408][ T5887] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 166.031328][ T5887] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.041885][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.052748][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.064172][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.078841][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.091232][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.110127][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 166.127774][ T7541] loop6: detected capacity change from 0 to 1 [ 166.266573][ T7541] Dev loop6: unable to read RDB block 1 [ 166.272549][ T7541] loop6: unable to read partition table [ 166.278988][ T7541] loop6: partition table beyond EOD, truncated [ 166.285310][ T7541] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 166.285310][ T7541] ) failed (rc=-5) [ 166.304537][ T25] usb 3-1: device descriptor read/64, error -71 [ 166.516847][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.526296][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.528852][ T5931] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 166.548524][ T25] usb usb3-port1: attempt power cycle [ 166.558615][ T5887] usb 1-1: usb_control_msg returned -32 [ 166.565413][ T5887] usbtmc 1-1:16.0: can't read capabilities [ 166.768521][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 166.769561][ T7557] netlink: 2548 bytes leftover after parsing attributes in process `syz.4.428'. [ 166.778895][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.793594][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 166.807534][ T5931] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 166.817647][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.825706][ T7557] netlink: 60 bytes leftover after parsing attributes in process `syz.4.428'. [ 166.838011][ T5931] usb 6-1: Product: syz [ 166.846658][ T5931] usb 6-1: Manufacturer: syz [ 166.851456][ T5931] usb 6-1: SerialNumber: syz [ 166.865745][ T5931] usb 6-1: config 0 descriptor?? [ 166.874735][ T5931] usb 6-1: no audio or video endpoints found [ 166.900157][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 166.920708][ T25] usb 3-1: device descriptor read/8, error -71 [ 166.938109][ T29] audit: type=1400 audit(1732777366.033:440): avc: denied { bind } for pid=7562 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 166.950153][ T5889] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 167.008059][ T29] audit: type=1400 audit(1732777366.103:441): avc: denied { mount } for pid=7562 comm="syz.4.429" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.150135][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 167.156658][ T5889] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 167.169072][ T5889] usb 4-1: config 0 has no interface number 0 [ 167.177433][ T5889] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 167.191340][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.193861][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.207129][ T5889] usb 4-1: Product: syz [ 167.211418][ T5889] usb 4-1: Manufacturer: syz [ 167.216189][ T5889] usb 4-1: SerialNumber: syz [ 167.226824][ T25] usb 3-1: device descriptor read/8, error -71 [ 167.227291][ T5889] usb 4-1: config 0 descriptor?? [ 167.239680][ T5889] ums-jumpshot 4-1:0.16: USB Mass Storage device detected [ 167.267605][ T5889] ums-jumpshot 4-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 167.277884][ T5889] scsi host1: usb-storage 4-1:0.16 [ 167.280704][ T5891] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 167.340612][ T25] usb usb3-port1: unable to enumerate USB device [ 167.441572][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 167.451016][ T5891] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 167.464036][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.472594][ T5891] usb 5-1: Product: syz [ 167.476814][ T5891] usb 5-1: Manufacturer: syz [ 167.486731][ T5891] usb 5-1: SerialNumber: syz [ 167.500520][ T5891] usb 5-1: config 0 descriptor?? [ 167.615912][ T5889] usb 1-1: USB disconnect, device number 19 [ 167.680108][ T29] audit: type=1400 audit(1732777366.773:442): avc: denied { listen } for pid=7603 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.766396][ T5891] usb 5-1: USB disconnect, device number 25 [ 167.870117][ T5918] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.163580][ T5918] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.210059][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.219130][ T5918] usb 3-1: config 1 has no interface number 0 [ 168.255011][ T5918] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.270210][ T5918] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 168.358806][ T1093] scsi 1:0:0:0: Direct-Access Lexar Jumpshot USB CF 0001 PQ: 0 ANSI: 0 CCS [ 168.383275][ T5918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.394831][ T1093] scsi 1:0:0:1: Direct-Access Lexar Jumpshot USB CF 0001 PQ: 0 ANSI: 0 CCS [ 168.404256][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.422763][ T5918] usb 3-1: Product: syz [ 168.428241][ T5918] usb 3-1: Manufacturer: syz [ 168.456104][ T1093] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 168.474707][ T5918] usb 3-1: SerialNumber: syz [ 168.488862][ T1093] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 168.607675][ T7584] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 168.891293][ T5890] usb 6-1: USB disconnect, device number 6 [ 169.772061][ T7599] input: syz0 as /devices/virtual/input/input17 [ 169.840102][ T5891] usb 4-1: USB disconnect, device number 20 [ 169.845792][ T29] audit: type=1400 audit(1732777368.283:443): avc: denied { accept } for pid=7626 comm="syz.5.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.940965][ T6053] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 169.960244][ T3883] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 169.966639][ T6053] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 169.973086][ T3883] sd 1:0:0:0: [sdb] Sense not available. [ 169.982986][ T29] audit: type=1400 audit(1732777369.083:444): avc: denied { read } for pid=5195 comm="acpid" name="js0" dev="devtmpfs" ino=2938 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.987513][ T3883] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 170.017250][ T3883] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 170.023420][ T3883] sd 1:0:0:0: [sdb] Write Protect is off [ 170.029280][ T3883] sd 1:0:0:0: [sdb] Asking for cache data failed [ 170.035761][ T3883] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 170.035920][ T6053] sd 1:0:0:1: [sdc] Sense not available. [ 170.044174][ T3883] [ 170.050705][ T3883] ====================================================== [ 170.057705][ T3883] WARNING: possible circular locking dependency detected [ 170.064707][ T3883] 6.12.0-syzkaller-10296-gaaf20f870da0 #0 Not tainted [ 170.071539][ T3883] ------------------------------------------------------ [ 170.078540][ T3883] kworker/u8:7/3883 is trying to acquire lock: [ 170.084672][ T3883] ffff88802916cd90 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 170.094232][ T3883] [ 170.094232][ T3883] but task is already holding lock: [ 170.101574][ T3883] ffff88802916c558 (&q->q_usage_counter(queue)#52){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 170.112084][ T3883] [ 170.112084][ T3883] which lock already depends on the new lock. [ 170.112084][ T3883] [ 170.122461][ T3883] [ 170.122461][ T3883] the existing dependency chain (in reverse order) is: [ 170.131543][ T3883] [ 170.131543][ T3883] -> #5 (&q->q_usage_counter(queue)#52){++++}-{0:0}: [ 170.140384][ T3883] blk_queue_enter+0x50f/0x640 [ 170.145645][ T3883] blk_mq_alloc_request+0x59b/0x950 [ 170.151346][ T3883] scsi_execute_cmd+0x1eb/0xf40 [ 170.156699][ T3883] read_capacity_10+0x1d4/0x6d0 [ 170.162054][ T3883] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 170.168363][ T3883] sd_probe+0x904/0x1000 [ 170.173108][ T3883] really_probe+0x23e/0xa90 [ 170.178116][ T3883] __driver_probe_device+0x1de/0x440 [ 170.183907][ T3883] driver_probe_device+0x4c/0x1b0 [ 170.189433][ T3883] __device_attach_driver+0x1df/0x310 [ 170.195306][ T3883] bus_for_each_drv+0x157/0x1e0 [ 170.200653][ T3883] __device_attach_async_helper+0x1d3/0x290 [ 170.207045][ T3883] async_run_entry_fn+0x9c/0x530 [ 170.212486][ T3883] process_one_work+0x9c5/0x1ba0 [ 170.217922][ T3883] worker_thread+0x6c8/0xf00 [ 170.223007][ T3883] kthread+0x2c1/0x3a0 [ 170.227579][ T3883] ret_from_fork+0x45/0x80 [ 170.232491][ T3883] ret_from_fork_asm+0x1a/0x30 [ 170.237758][ T3883] [ 170.237758][ T3883] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 170.245377][ T3883] __mutex_lock+0x19b/0xa60 [ 170.250383][ T3883] __nbd_set_size+0x2c0/0x730 [ 170.255564][ T3883] nbd_start_device+0x8fd/0xd70 [ 170.260916][ T3883] nbd_ioctl+0x21a/0xfd0 [ 170.265658][ T3883] blkdev_ioctl+0x276/0x6d0 [ 170.270658][ T3883] __x64_sys_ioctl+0x190/0x200 [ 170.275925][ T3883] do_syscall_64+0xcd/0x250 [ 170.280933][ T3883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.287329][ T3883] [ 170.287329][ T3883] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 170.295909][ T3883] blk_mq_submit_bio+0x1fb6/0x24c0 [ 170.301524][ T3883] __submit_bio+0x384/0x540 [ 170.306524][ T3883] submit_bio_noacct_nocheck+0x698/0xd70 [ 170.312656][ T3883] submit_bio_noacct+0x93a/0x1e20 [ 170.318179][ T3883] block_read_full_folio+0x812/0xa50 [ 170.323963][ T3883] filemap_read_folio+0xc6/0x2a0 [ 170.329400][ T3883] filemap_get_pages+0x155f/0x1be0 [ 170.335025][ T3883] filemap_read+0x3ca/0xd70 [ 170.340026][ T3883] blkdev_read_iter+0x187/0x480 [ 170.345378][ T3883] vfs_read+0x87f/0xbe0 [ 170.350033][ T3883] ksys_read+0x12b/0x250 [ 170.354772][ T3883] do_syscall_64+0xcd/0x250 [ 170.359779][ T3883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.366175][ T3883] [ 170.366175][ T3883] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 170.374670][ T3883] down_read+0x9a/0x330 [ 170.379330][ T3883] filemap_fault+0x2e0/0x2820 [ 170.384525][ T3883] __do_fault+0x10a/0x490 [ 170.389357][ T3883] do_pte_missing+0xec2/0x3e70 [ 170.394626][ T3883] __handle_mm_fault+0x103c/0x2a40 [ 170.400237][ T3883] handle_mm_fault+0x3fa/0xaa0 [ 170.405593][ T3883] do_user_addr_fault+0x7a3/0x13f0 [ 170.411204][ T3883] exc_page_fault+0x5c/0xc0 [ 170.416211][ T3883] asm_exc_page_fault+0x26/0x30 [ 170.421566][ T3883] strncpy_from_user+0x14a/0x2d0 [ 170.427005][ T3883] getname_flags.part.0+0x8f/0x550 [ 170.432631][ T3883] getname+0x8d/0xe0 [ 170.437027][ T3883] do_sys_openat2+0x104/0x1e0 [ 170.442205][ T3883] __x64_sys_openat+0x175/0x210 [ 170.447556][ T3883] do_syscall_64+0xcd/0x250 [ 170.452563][ T3883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.458960][ T3883] [ 170.458960][ T3883] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 170.466491][ T3883] __might_fault+0x11b/0x190 [ 170.471596][ T3883] _copy_from_user+0x29/0xd0 [ 170.476683][ T3883] __blk_trace_setup+0xa8/0x180 [ 170.482035][ T3883] blk_trace_ioctl+0x163/0x290 [ 170.487296][ T3883] blkdev_ioctl+0x109/0x6d0 [ 170.492296][ T3883] __x64_sys_ioctl+0x190/0x200 [ 170.497563][ T3883] do_syscall_64+0xcd/0x250 [ 170.502568][ T3883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.508964][ T3883] [ 170.508964][ T3883] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 170.516756][ T3883] __lock_acquire+0x249e/0x3c40 [ 170.522105][ T3883] lock_acquire.part.0+0x11b/0x380 [ 170.527715][ T3883] __mutex_lock+0x19b/0xa60 [ 170.532722][ T3883] blk_mq_init_sched+0x42b/0x640 [ 170.538163][ T3883] elevator_init_mq+0x2cd/0x420 [ 170.543515][ T3883] add_disk_fwnode+0x113/0x1300 [ 170.548863][ T3883] sd_probe+0xa86/0x1000 [ 170.553609][ T3883] really_probe+0x23e/0xa90 [ 170.558620][ T3883] __driver_probe_device+0x1de/0x440 [ 170.564407][ T3883] driver_probe_device+0x4c/0x1b0 [ 170.569931][ T3883] __device_attach_driver+0x1df/0x310 [ 170.575803][ T3883] bus_for_each_drv+0x157/0x1e0 [ 170.581151][ T3883] __device_attach_async_helper+0x1d3/0x290 [ 170.587545][ T3883] async_run_entry_fn+0x9c/0x530 [ 170.592985][ T3883] process_one_work+0x9c5/0x1ba0 [ 170.598421][ T3883] worker_thread+0x6c8/0xf00 [ 170.603512][ T3883] kthread+0x2c1/0x3a0 [ 170.608084][ T3883] ret_from_fork+0x45/0x80 [ 170.612997][ T3883] ret_from_fork_asm+0x1a/0x30 [ 170.618266][ T3883] [ 170.618266][ T3883] other info that might help us debug this: [ 170.618266][ T3883] [ 170.628470][ T3883] Chain exists of: [ 170.628470][ T3883] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#52 [ 170.628470][ T3883] [ 170.642901][ T3883] Possible unsafe locking scenario: [ 170.642901][ T3883] [ 170.650334][ T3883] CPU0 CPU1 [ 170.655681][ T3883] ---- ---- [ 170.661028][ T3883] lock(&q->q_usage_counter(queue)#52); [ 170.666654][ T3883] lock(&q->limits_lock); [ 170.673573][ T3883] lock(&q->q_usage_counter(queue)#52); [ 170.681709][ T3883] lock(&q->debugfs_mutex); [ 170.686280][ T3883] [ 170.686280][ T3883] *** DEADLOCK *** [ 170.686280][ T3883] [ 170.694398][ T3883] 4 locks held by kworker/u8:7/3883: [ 170.699672][ T3883] #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 170.710008][ T3883] #1: ffffc9000ccc7d80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 170.721213][ T3883] #2: ffff88805b75e378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 170.731554][ T3883] #3: ffff88802916c558 (&q->q_usage_counter(queue)#52){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 170.742500][ T3883] [ 170.742500][ T3883] stack backtrace: [ 170.748364][ T3883] CPU: 0 UID: 0 PID: 3883 Comm: kworker/u8:7 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 170.758839][ T3883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.768874][ T3883] Workqueue: async async_run_entry_fn [ 170.774241][ T3883] Call Trace: [ 170.777500][ T3883] [ 170.780411][ T3883] dump_stack_lvl+0x116/0x1f0 [ 170.785072][ T3883] print_circular_bug+0x419/0x5d0 [ 170.790076][ T3883] check_noncircular+0x31a/0x400 [ 170.794993][ T3883] ? __pfx_check_noncircular+0x10/0x10 [ 170.800453][ T3883] ? lockdep_lock+0xc6/0x200 [ 170.805029][ T3883] ? __pfx_lockdep_lock+0x10/0x10 [ 170.810037][ T3883] __lock_acquire+0x249e/0x3c40 [ 170.814889][ T3883] ? __pfx___lock_acquire+0x10/0x10 [ 170.820069][ T3883] lock_acquire.part.0+0x11b/0x380 [ 170.825160][ T3883] ? blk_mq_init_sched+0x42b/0x640 [ 170.830259][ T3883] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 170.835871][ T3883] ? rcu_is_watching+0x12/0xc0 [ 170.840626][ T3883] ? trace_lock_acquire+0x146/0x1e0 [ 170.845806][ T3883] ? blk_mq_init_sched+0x42b/0x640 [ 170.850903][ T3883] ? lock_acquire+0x2f/0xb0 [ 170.855383][ T3883] ? blk_mq_init_sched+0x42b/0x640 [ 170.860478][ T3883] __mutex_lock+0x19b/0xa60 [ 170.864965][ T3883] ? blk_mq_init_sched+0x42b/0x640 [ 170.870062][ T3883] ? blk_mq_init_sched+0x42b/0x640 [ 170.875156][ T3883] ? __pfx___mutex_lock+0x10/0x10 [ 170.880166][ T3883] ? blk_queue_flag_set+0x29/0x40 [ 170.885176][ T3883] ? blk_mq_init_sched+0x42b/0x640 [ 170.890271][ T3883] blk_mq_init_sched+0x42b/0x640 [ 170.895193][ T3883] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 170.900649][ T3883] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 170.906619][ T3883] ? lock_acquire+0x2f/0xb0 [ 170.911104][ T3883] ? add_disk_fwnode+0x113/0x1300 [ 170.916115][ T3883] elevator_init_mq+0x2cd/0x420 [ 170.920957][ T3883] ? add_disk_fwnode+0x113/0x1300 [ 170.925972][ T3883] add_disk_fwnode+0x113/0x1300 [ 170.930810][ T3883] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.935993][ T3883] sd_probe+0xa86/0x1000 [ 170.940225][ T3883] ? __pfx_sd_probe+0x10/0x10 [ 170.944886][ T3883] really_probe+0x23e/0xa90 [ 170.949374][ T3883] __driver_probe_device+0x1de/0x440 [ 170.954642][ T3883] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 170.960432][ T3883] driver_probe_device+0x4c/0x1b0 [ 170.965442][ T3883] __device_attach_driver+0x1df/0x310 [ 170.970799][ T3883] ? __pfx___device_attach_driver+0x10/0x10 [ 170.976672][ T3883] bus_for_each_drv+0x157/0x1e0 [ 170.981501][ T3883] ? __pfx_bus_for_each_drv+0x10/0x10 [ 170.986864][ T3883] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.992044][ T3883] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 170.997834][ T3883] ? __pfx___device_attach_async_helper+0x10/0x10 [ 171.004236][ T3883] __device_attach_async_helper+0x1d3/0x290 [ 171.010136][ T3883] ? __pfx___device_attach_async_helper+0x10/0x10 [ 171.016542][ T3883] ? ktime_get+0x206/0x300 [ 171.020957][ T3883] ? read_tsc+0x9/0x20 [ 171.025015][ T3883] ? ktime_get+0x1ac/0x300 [ 171.029426][ T3883] async_run_entry_fn+0x9c/0x530 [ 171.034361][ T3883] process_one_work+0x9c5/0x1ba0 [ 171.039298][ T3883] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 171.044924][ T3883] ? __pfx_process_one_work+0x10/0x10 [ 171.050308][ T3883] ? rcu_is_watching+0x12/0xc0 [ 171.055064][ T3883] ? assign_work+0x1a0/0x250 [ 171.059635][ T3883] worker_thread+0x6c8/0xf00 [ 171.064208][ T3883] ? __kthread_parkme+0x148/0x220 [ 171.069216][ T3883] ? __pfx_worker_thread+0x10/0x10 [ 171.074307][ T3883] kthread+0x2c1/0x3a0 [ 171.078376][ T3883] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.083554][ T3883] ? __pfx_kthread+0x10/0x10 [ 171.088125][ T3883] ret_from_fork+0x45/0x80 [ 171.092532][ T3883] ? __pfx_kthread+0x10/0x10 [ 171.097106][ T3883] ret_from_fork_asm+0x1a/0x30 [ 171.101869][ T3883] [ 171.114015][ T29] audit: type=1400 audit(1732777369.083:445): avc: denied { open } for pid=5195 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2938 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.145302][ T6053] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 171.152422][ T6053] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 171.158307][ T29] audit: type=1400 audit(1732777369.083:446): avc: denied { ioctl } for pid=5195 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2938 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.160022][ T6053] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 171.182987][ T29] audit: type=1400 audit(1732777369.123:447): avc: denied { shutdown } for pid=7634 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 171.204358][ T3883] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 171.222220][ T6053] sd 1:0:0:1: [sdc] Asking for cache data failed [ 171.230205][ T6053] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 171.251775][ T5918] cdc_ncm 3-1:1.1: bind() failure [ 171.255598][ T6053] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 171.263037][ T5918] usb 3-1: USB disconnect, device number 20 [ 171.295880][ T5856] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 171.360049][ T5931] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 171.521198][ T5931] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 171.530263][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.538975][ T5931] usb 1-1: config 0 descriptor?? [ 171.545290][ T5931] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 171.720002][ T5891] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 171.755737][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 171.891207][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.902222][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.912022][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.918626][ T5891] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 171.928215][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.937001][ T5891] usb 4-1: config 0 descriptor?? [ 172.230676][ T7638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.239364][ T7638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.347224][ T5891] pantherlord 0003:0810:0002.001A: invalid report_size 46851 [ 172.354752][ T5891] pantherlord 0003:0810:0002.001A: item 0 2 1 7 parsing failed [ 172.362759][ T5891] pantherlord 0003:0810:0002.001A: parse failed [ 172.369110][ T5891] pantherlord 0003:0810:0002.001A: probe with driver pantherlord failed with error -22 [ 172.636279][ T5891] usb 4-1: USB disconnect, device number 21 [ 172.683987][ T5856] udevd[5856]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 172.689125][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 172.840767][ T7639] udevd[7639]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 172.842045][ T6856] udevd[6856]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 173.060237][ T5931] gspca_cpia1: usb_control_msg 01, error -110 [ 173.066396][ T5931] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 174.132976][ T5890] usb 1-1: USB disconnect, device number 20