last executing test programs: 51.598392834s ago: executing program 0 (id=915): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 51.403965658s ago: executing program 0 (id=917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f000073f000/0x1000)=nil, 0x1000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r9, 0x100, 0x1070bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf250100000008000100040000002c00048005000500010000000500038270de00000080000000000000050003008f00000005000300010000000800020002"], 0x50}}, 0x40c4) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001980)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) 48.335289453s ago: executing program 0 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40c5) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000100"], 0x8) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r7 = mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) mq_timedreceive(r7, 0x0, 0x0, 0x8, &(0x7f0000000380)={0x0, 0x3938700}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x5], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffee, 0x8000004], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) 46.075837652s ago: executing program 0 (id=929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 45.465025105s ago: executing program 0 (id=933): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=0xffffffffffffffff], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f0e74f73199e853e53be885bd058d45fca581ece89120ec82e821826f798f4f73d93c6c66b59e95a1728fd6314707d6bb9d7d3d2f0c59c681188f38bd2c188ef375a6bd88ae67d71d11b48a4473fdb5884f08eb2c9a6438af8ab7f815adcfc214dffdad0bcfb860a413b5ebdd1d0095204ad2e285e4917c5a2a06389958b50e005b80e3304e837f2a8e1cfc0d80b0db2ab7ef8b43f46ebe48030ed50eaca9b6992fd534ad009ad59d3c3727a9ad97431e712a9a7f8b92d251cda17"], 0x1c}}, 0x24000000) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYRES16=r5, @ANYRES16=r2, @ANYBLOB="56020cad3c30e6b43817e5e8ee25adaa04e9526c476c177c7786d95e49427cde5c86cd2aed3e809dcd296fe9eea334700908d54957b58d2115e53775e540f9bb044484949626e39f48643d05f19ded1f9e8e0d0d26b5f9e359708841d7d9e5d0fd21ffd1c84c9453214f84da057ad7936270224a7a3cacbc26f95f1879b6f22d04be2ceed634fcaa3f9492a30d22125993c48c5c3b9591f0e62add949f4fd0d7bdef153facfe19908b054e16a8fbddbfc3f4ca14dddaf1500f3618d1738f32260728f864"], 0xa) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x144, @empty, 0x77f}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x8003, 0x2, 0x2}) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfd}}, 0x0, 0x0, 0x318, 0x7, 0x24}, 0x9c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) pipe2(0x0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 43.343246113s ago: executing program 0 (id=935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f000073f000/0x1000)=nil, 0x1000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r9, 0x100, 0x1070bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf250100000008000100040000002c00048005000500010000000500038270de00000080000000000000050003008f00000005000300010000000800020002"], 0x50}}, 0x40c4) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001980)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) 28.026918879s ago: executing program 32 (id=935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f000073f000/0x1000)=nil, 0x1000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r9, 0x100, 0x1070bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf250100000008000100040000002c00048005000500010000000500038270de00000080000000000000050003008f00000005000300010000000800020002"], 0x50}}, 0x40c4) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001980)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) 27.892142802s ago: executing program 4 (id=969): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xc02, &(0x7f00000002c0)={0x0, 0xf488, 0x2000, 0x1, 0x269}, &(0x7f0000000000), &(0x7f00000000c0)) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000240)={0x0, 0xffffffff, 0x800, 0x3, 0x0, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x404002) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffdfd, 0x8, 0x8440000000000000}) close_range(r6, 0xffffffffffffffff, 0x0) 27.435005256s ago: executing program 4 (id=970): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x50a00, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x7ffff}) 27.190152459s ago: executing program 4 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000140)={'batadv_slave_1\x00'}) 27.183747446s ago: executing program 2 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket(0x400000000010, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000340)=@keyring) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001e00100029bd", @ANYRES32=r5, @ANYBLOB="00400000800400000c001980080b01000d000000", @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f300000000008001b000010000005002100"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0xc5) 26.090416093s ago: executing program 4 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setreuid(0xee01, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.93609719s ago: executing program 2 (id=976): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904", @ANYRES32=0x0], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x8991f000) fremovexattr(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[@ANYBLOB='s']) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f000052b000/0x4000)=nil, 0x4000}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 25.876820154s ago: executing program 1 (id=977): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000225bd70000000df250100000008000d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40044) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f0000000180)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) write$ppp(0xffffffffffffffff, &(0x7f0000000400)="0aa19f1557", 0x5) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) recvmmsg(r3, &(0x7f0000000840)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/149, 0x95}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000200)=""/34, 0x22}], 0x4, &(0x7f0000003000)=""/4096, 0x1000}, 0x83}, {{&(0x7f0000000740)=@in, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/16, 0x10}], 0x1}, 0x7}], 0x2, 0x40000103, 0x0) ioctl(r2, 0x2, &(0x7f0000000000)="25bfe02342a78fd0717d91e068ed51f068429f6fdaddfa5a394bde9fbe5fe82fdf1c5d1da38bf8cc57614407aeb9902fb4fca03a4159cc4b9406a96dc62cb78e2be1ecd3becb5689339a3e377e245df88a91b9e90c49cf2eb6e79aee8e3577d3cc98b73f7083fd8a2f956b155aa47fde91a945224eec475cbaabc3e3713a2de67ad16bceb0373930fc650edaa9") socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) gettid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x200, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x103000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r8, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000680)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1000f40000000000"], 0x10}}], 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x80000000) 25.181395441s ago: executing program 4 (id=980): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0xa, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0xba, 0x75, 0x99, 0x8, 0xa257, 0x2013, 0xe87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0xb0, 0x80, [{{0x9, 0x4, 0xff, 0x3, 0x0, 0xb9, 0x5c, 0xcf, 0x4}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_emit_ethernet(0x17c, &(0x7f0000000680)={@local, @empty, @void, {@generic={0x17, "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"}}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 23.326930837s ago: executing program 2 (id=982): socket$inet(0x2, 0x6, 0x200) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)="00214717a70700000000030640710a069d317e1bbbaaa672", 0x18}], 0x1, 0x295e, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x18, 0x8, 0x81, 0x6, 0x40000, 0x4, 0x6, 0x81, 0xffffff19}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x278900, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r2, 0x0, &(0x7f0000000080)=0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000000c0)="e8f3526ec245cad7eed54849c134c543299e9de301310b62683c0b642c59957beba2fc4fefbfb73e24eba5417a68e7c0f316d3af6b459da78f5ddef2c4885727e14382a5dd7b5db4", 0x0, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x138, 0x1a0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@rateest={{0x68}, {'veth1_vlan\x00', 'veth0\x00', 0x24, 0x3, 0x8, 0x2, 0x39, 0x80000001, {0x8001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}, @common=@icmp6={{0x28}, {0x0, "e1f6", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 22.293509879s ago: executing program 2 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket(0x400000000010, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000340)=@keyring) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001e00100029bd", @ANYRES32=r5, @ANYBLOB="00400000800400000c001980080b01000d000000", @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f300000000008001b000010000005002100"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0xc5) 22.085077268s ago: executing program 1 (id=986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 21.080149742s ago: executing program 3 (id=987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109103, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) r3 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r4 = syz_open_dev$video4linux(&(0x7f0000002d80), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0x80405600, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sched_getattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1a) getdents(r5, &(0x7f0000000140)=""/177, 0xb1) r6 = syz_open_dev$dri(0x0, 0x4, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 20.957842911s ago: executing program 2 (id=988): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd01}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = io_uring_setup(0x758a, &(0x7f0000000140)) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f00000002c0)=@other={'trylock', ' ', 'none'}, 0xd) sendmsg$sock(r4, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 20.736767919s ago: executing program 2 (id=989): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f000073f000/0x1000)=nil, 0x1000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r12) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r13, 0x100, 0x1070bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}}, 0x0) r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f00000000c0)=0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r18) sendmsg$NFC_CMD_DEV_UP(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r19, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r17], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250100000008000100040000002c00048005000500010000000500038270de00000080000000000000050003008f00000005000300010000000800020002"], 0x50}}, 0x40c4) r20 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r20, 0x0, 0x0) 20.455232156s ago: executing program 4 (id=990): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14008000ef02c0c1d2abed7c6e38c197b0c4188de5a0b25581bac5eda0026571d2c42943f151c45ecde9945b42312acf0683600bc3e61a74a7b32284d8bf9d9701869015c0fc79aa3580b89b2d55ce7bdfa1f65758643a7c1842b0d4c76631f3f70420", @ANYRES16=r3, @ANYBLOB="c94727bd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4) r4 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0x980915, 0xffffff7c}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r6, 0x0, 0xeffd) r7 = inotify_init1(0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200488c1}, 0x4080) recvmmsg(r8, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) close(r7) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 20.154389706s ago: executing program 1 (id=991): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4040084) 20.080564149s ago: executing program 1 (id=992): r0 = fanotify_init(0x10, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x1, r1, 0x0) r2 = fanotify_init(0x40, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x10300, 0x1) fanotify_mark(r2, 0x1, 0x48001012, r1, 0x0) r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x18, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000000)={0x0, 0x2, 0x4, "f8572d2c"}, 0x0, 0x0, 0x0, 0x0}) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x27, 0x800004, 0x3, 0x1b, 0x6, 0x0, 0x4, 0xdd, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) 19.240090798s ago: executing program 3 (id=993): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)={r5}) r6 = dup(0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000081000000080003", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e88000046003300203c0300080211000001080211000001080211000001350000400500080211000001000001002d1a720002ff010000000000000800001800000006000900000007000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 17.889043849s ago: executing program 3 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000140)={'batadv_slave_1\x00'}) 16.977605317s ago: executing program 1 (id=995): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) accept4(r1, &(0x7f0000004840)=@tipc, &(0x7f0000000200)=0x80, 0x80400) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a000000000000000008000000000000000c000a"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xd1, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$MSR(0x0, 0x5, 0x0) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="e9505d5b7946e1144d2f07116d74a8f0249047807cd7eccc45b29c07ffb43d7cd394cee606ec52e8d744887c9699175a80a8ec1ba90ca66eb692bc8c26de4fb9c12810f1c247a48c978dbb63614ea5ad5b28c6c13e7e91b71469b8b4185a84fc6accced20373f01ff1dfe3e3747299195f1ff82b4c393eb2fcbbcc76f45447978f072f9d0a2bf3567aecf1c0256efd32e0e72e1f7de72194ba8e31"], 0x6c}}, 0x4000094) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 16.967959131s ago: executing program 3 (id=996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000010000000006}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r4}) 16.635962759s ago: executing program 3 (id=997): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x7, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x0) fsopen(0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r3, &(0x7f0000000040)={0x2000000}, 0x0, 0x0) 16.391381415s ago: executing program 1 (id=998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setreuid(0xee01, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.682300074s ago: executing program 3 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40c5) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x0, 0x0) r7 = mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) mq_timedreceive(r7, 0x0, 0x0, 0x8, &(0x7f0000000380)={0x0, 0x3938700}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x5], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffee, 0x8000004], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) 5.496357864s ago: executing program 33 (id=989): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f000073f000/0x1000)=nil, 0x1000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r12) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r13, 0x100, 0x1070bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}}, 0x0) r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f00000000c0)=0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r18) sendmsg$NFC_CMD_DEV_UP(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r19, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r17], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250100000008000100040000002c00048005000500010000000500038270de00000080000000000000050003008f00000005000300010000000800020002"], 0x50}}, 0x40c4) r20 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r20, 0x0, 0x0) 4.507131524s ago: executing program 34 (id=990): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14008000ef02c0c1d2abed7c6e38c197b0c4188de5a0b25581bac5eda0026571d2c42943f151c45ecde9945b42312acf0683600bc3e61a74a7b32284d8bf9d9701869015c0fc79aa3580b89b2d55ce7bdfa1f65758643a7c1842b0d4c76631f3f70420", @ANYRES16=r3, @ANYBLOB="c94727bd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4) r4 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0x980915, 0xffffff7c}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r6, 0x0, 0xeffd) r7 = inotify_init1(0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200488c1}, 0x4080) recvmmsg(r8, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) close(r7) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 1.003493698s ago: executing program 35 (id=998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setreuid(0xee01, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 36 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40c5) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x0, 0x0) r7 = mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) mq_timedreceive(r7, 0x0, 0x0, 0x8, &(0x7f0000000380)={0x0, 0x3938700}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x5], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffee, 0x8000004], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) kernel console output (not intermixed with test programs): 475][ T5891] usb 4-1: device descriptor read/all, error -71 [ 151.195168][ T30] audit: type=1400 audit(1747104726.365:498): avc: denied { setopt } for pid=6806 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.425026][ T30] audit: type=1400 audit(1747104726.395:499): avc: denied { bind } for pid=6806 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.444439][ T30] audit: type=1400 audit(1747104726.395:500): avc: denied { append } for pid=6806 comm="syz.1.232" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.977786][ T30] audit: type=1400 audit(1747104726.395:501): avc: denied { ioctl } for pid=6806 comm="syz.1.232" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x227a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.205647][ T6821] fuse: Unknown parameter 'roo ' [ 152.801346][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 152.962680][ T6834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15644 sclass=netlink_route_socket pid=6834 comm=syz.3.241 [ 153.808438][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.130080][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.160532][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 154.341424][ T30] audit: type=1400 audit(1747104729.515:502): avc: denied { sqpoll } for pid=6830 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.360844][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.458900][ T24] usb 3-1: config 0 descriptor?? [ 154.498168][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 154.510449][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 154.582661][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 154.605578][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 154.622217][ T24] usb 3-1: media controller created [ 154.637178][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.953473][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 155.280151][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 155.350126][ T6855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.245'. [ 156.001245][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 156.024193][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 156.564797][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 156.730669][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 156.737050][ T5861] dvb-usb: error while querying for an remote control event. [ 156.769685][ T24] usb 3-1: USB disconnect, device number 2 [ 156.983881][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 158.348062][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 158.513342][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.611887][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.633008][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 158.643923][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.833126][ T9] usb 2-1: config 0 descriptor?? [ 158.904389][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 158.948812][ T6894] input: syz1 as /devices/virtual/input/input10 [ 159.041540][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 159.148063][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 159.158402][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 159.235282][ T9] usb 2-1: media controller created [ 159.248219][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.311335][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 159.317121][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 159.381219][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 159.434928][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 159.474153][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 159.731827][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 159.748445][ T5891] dvb-usb: error while querying for an remote control event. [ 159.997328][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 160.009590][ T5891] dvb-usb: error while querying for an remote control event. [ 160.397645][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 160.403759][ T5891] dvb-usb: error while querying for an remote control event. [ 160.942114][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 160.971481][ T5891] dvb-usb: error while querying for an remote control event. [ 161.258749][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 161.448118][ T5891] dvb-usb: error while querying for an remote control event. [ 161.700166][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 161.751769][ T5891] dvb-usb: error while querying for an remote control event. [ 162.254586][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 162.390820][ T5891] dvb-usb: error while querying for an remote control event. [ 162.406948][ T6916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.447219][ T24] usb 2-1: USB disconnect, device number 3 [ 162.487140][ T6925] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.262' resets device [ 162.628445][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 162.895441][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 163.028697][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 163.824206][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 163.946693][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 164.260003][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 164.269058][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 164.287292][ T6937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.264'. [ 164.297002][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 164.306297][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 164.337527][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 164.374818][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 164.402648][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 164.636465][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 165.215207][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 165.273265][ T6949] binder: 6948:6949 ioctl c0306201 2000000003c0 returned -14 [ 165.303182][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 165.387332][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 165.607766][ T9] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 165.738029][ T9] hid-generic 009C:0008:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 165.863701][ T6950] input: syz1 as /devices/virtual/input/input12 [ 166.447029][ T6962] fido_id[6962]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.467928][ T6968] QAT: Invalid ioctl 1075883590 [ 166.480111][ T6968] QAT: Invalid ioctl 1075883590 [ 166.551214][ T6974] QAT: Invalid ioctl 35123 [ 166.587511][ T6968] QAT: Invalid ioctl 1075883590 [ 166.593634][ T6968] QAT: Invalid ioctl 1075883590 [ 166.598767][ T6968] QAT: Invalid ioctl 1075883590 [ 166.608113][ T6968] QAT: Invalid ioctl 1075883590 [ 166.699025][ T6968] QAT: Invalid ioctl 1075883590 [ 166.709638][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.271'. [ 166.718720][ T6968] QAT: Invalid ioctl 1075883590 [ 166.718808][ T6968] QAT: Invalid ioctl 1075883590 [ 166.760031][ T911] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 167.201318][ T911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.211510][ T911] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.229004][ T911] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.238525][ T911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.274934][ T911] usb 2-1: config 0 descriptor?? [ 167.323027][ T911] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 167.340006][ T911] dvb-usb: bulk message failed: -22 (3/0) [ 167.381485][ T911] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.421196][ T911] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 167.465737][ T6981] fuse: Unknown parameter '00000000000000000000007' [ 167.509037][ T911] usb 2-1: media controller created [ 167.536479][ T911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.592576][ T911] dvb-usb: bulk message failed: -22 (6/0) [ 167.645453][ T911] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 167.745934][ T911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 167.810526][ T911] dvb-usb: schedule remote query interval to 150 msecs. [ 167.838392][ T911] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.866581][ T6989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.277'. [ 167.909569][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.277'. [ 167.990225][ T911] dvb-usb: bulk message failed: -22 (1/0) [ 168.202079][ T911] dvb-usb: error while querying for an remote control event. [ 168.381722][ T911] dvb-usb: bulk message failed: -22 (1/0) [ 168.398616][ T911] dvb-usb: error while querying for an remote control event. [ 168.570641][ T911] dvb-usb: bulk message failed: -22 (1/0) [ 168.576491][ T911] dvb-usb: error while querying for an remote control event. [ 169.432447][ T911] dvb-usb: bulk message failed: -22 (1/0) [ 169.447019][ T911] dvb-usb: error while querying for an remote control event. [ 169.762968][ T911] dvb-usb: bulk message failed: -22 (1/0) [ 169.782576][ T911] dvb-usb: error while querying for an remote control event. [ 169.858632][ T7005] binder: 7004:7005 ioctl c0306201 2000000003c0 returned -14 [ 170.129000][ T7013] input: syz1 as /devices/virtual/input/input14 [ 170.280868][ T911] dvb-usb: bulk message failed: -22 (1/0) [ 170.346773][ T911] dvb-usb: error while querying for an remote control event. [ 170.369840][ T9] usb 2-1: USB disconnect, device number 4 [ 170.463028][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 171.091689][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 171.099178][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 171.124875][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 171.133483][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 171.177653][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.269342][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.300123][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.347237][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.365558][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.385356][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.396793][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.404648][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.412392][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.419784][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.428771][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 173.472043][ T9] hid-generic 009C:0008:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 173.794484][ T5816] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 174.253592][ T7033] fido_id[7033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.908382][ T7044] binder: 7043:7044 ioctl c0306201 2000000003c0 returned -14 [ 175.624227][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 175.633536][ T7059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 175.642493][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 175.653408][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 177.165399][ T7065] binder: 7064:7065 ioctl c0306201 2000000003c0 returned -14 [ 177.292506][ T7068] input: syz1 as /devices/virtual/input/input15 [ 178.160344][ T5816] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 178.174706][ T5816] Bluetooth: hci4: Injecting HCI hardware error event [ 178.184427][ T5826] Bluetooth: hci4: hardware error 0x00 [ 178.589023][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 179.850586][ T92] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.886542][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 180.026156][ T92] usb 1-1: device descriptor read/64, error -32 [ 180.049772][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 180.058400][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 180.069801][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 180.193689][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 180.484236][ T5826] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 182.052803][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 182.230749][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 182.319319][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 182.330310][ T92] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.349729][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 182.357826][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 182.366297][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 182.515085][ T7096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.724174][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 182.752340][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 182.759796][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 183.108513][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 183.125997][ T5875] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 183.136355][ T5875] hid-generic 009C:0008:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 183.289985][ T5861] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 183.334987][ T7103] fido_id[7103]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.670154][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.691806][ T5861] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.710499][ T5861] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 184.733547][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.754591][ T5861] usb 5-1: config 0 descriptor?? [ 184.771738][ T5861] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 184.819630][ T5861] dvb-usb: bulk message failed: -22 (3/0) [ 185.003189][ T5861] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 185.077133][ T5861] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 185.125313][ T5861] usb 5-1: media controller created [ 185.141107][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.619676][ T5861] dvb-usb: bulk message failed: -22 (6/0) [ 185.627341][ T5861] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 185.653315][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 185.674830][ T5861] dvb-usb: schedule remote query interval to 150 msecs. [ 185.689955][ T5861] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 185.862535][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 185.868394][ T5861] dvb-usb: error while querying for an remote control event. [ 186.070015][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 186.075813][ T5861] dvb-usb: error while querying for an remote control event. [ 186.802027][ T5861] usb 5-1: USB disconnect, device number 7 [ 186.984572][ T5861] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 187.700221][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 187.709171][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.311'. [ 187.718312][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 187.727459][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 189.833000][ T7158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.307'. [ 189.842191][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 189.855897][ T7158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.307'. [ 189.865166][ T7158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.307'. [ 189.879995][ T5875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.630403][ T5875] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 190.646232][ T5875] usb 4-1: config 0 has no interface number 0 [ 191.493483][ T5875] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 191.502781][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.537727][ T5875] usb 4-1: config 0 descriptor?? [ 191.882684][ T5875] usb 4-1: can't set config #0, error -71 [ 191.906093][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 191.989755][ T5875] usb 4-1: USB disconnect, device number 6 [ 192.528167][ T7181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.324'. [ 192.734562][ T7181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'. [ 193.962039][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.968389][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.211001][ T7194] mkiss: ax0: crc mode is auto. [ 194.227203][ T30] audit: type=1400 audit(1747104769.405:503): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.316045][ T30] audit: type=1400 audit(1747104769.405:504): avc: denied { read } for pid=5480 comm="dhcpcd" name="n100" dev="tmpfs" ino=3337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.879277][ T30] audit: type=1400 audit(1747104769.405:505): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.903443][ T30] audit: type=1400 audit(1747104769.405:506): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.007271][ T5875] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 195.414617][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 195.436569][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.450504][ T5875] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.470266][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.496720][ T5875] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 195.550930][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.560678][ T5875] usb 4-1: Product: syz [ 195.568754][ T5875] usb 4-1: Manufacturer: syz [ 195.623434][ T5875] usb 4-1: SerialNumber: syz [ 195.900941][ T5875] usb 4-1: config 0 descriptor?? [ 195.948138][ T5875] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 196.132052][ T5875] snd_usb_toneport 4-1:0.0: set_interface failed [ 196.171778][ T5875] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 196.198556][ T5875] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 196.228324][ T5875] usb 4-1: USB disconnect, device number 7 [ 197.140998][ T30] audit: type=1400 audit(1747104772.295:507): avc: denied { create } for pid=7238 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 197.196900][ T30] audit: type=1400 audit(1747104772.295:508): avc: denied { ioctl } for pid=7238 comm="syz.0.336" path="socket:[13390]" dev="sockfs" ino=13390 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.082699][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.337'. [ 198.094560][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 198.720846][ T7255] 9pnet_fd: Insufficient options for proto=fd [ 198.942517][ T7250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.141157][ T7286] input: syz1 as /devices/virtual/input/input17 [ 203.126975][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 205.706633][ T7330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.963111][ T7347] input: syz1 as /devices/virtual/input/input18 [ 208.338420][ T7340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.466383][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 209.533891][ T30] audit: type=1400 audit(1747104784.685:509): avc: denied { getopt } for pid=7360 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.199469][ T7383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.930441][ T911] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 212.131689][ T911] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 212.211836][ T911] usb 2-1: config 0 has no interface number 0 [ 212.223483][ T911] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 212.244227][ T911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.268173][ T911] usb 2-1: config 0 descriptor?? [ 212.976935][ T92] usb 2-1: USB disconnect, device number 5 [ 214.450796][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 215.191419][ T7423] 9pnet_fd: Insufficient options for proto=fd [ 216.150340][ T7409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.141798][ T7437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.510338][ T5826] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 218.519472][ T5826] Bluetooth: hci1: Injecting HCI hardware error event [ 218.527920][ T5826] Bluetooth: hci1: hardware error 0x00 [ 220.877217][ T5826] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 222.928171][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.398'. [ 222.937188][ T7498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.398'. [ 222.946164][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.398'. [ 222.955250][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.398'. [ 223.937278][ T7504] binder: 7502:7504 ioctl c0306201 2000000003c0 returned -14 [ 225.645793][ T92] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 226.735007][ T7536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.942722][ T92] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 226.980308][ T92] usb 2-1: config 0 has no interface number 0 [ 227.004237][ T92] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 227.016034][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.027274][ T92] usb 2-1: config 0 descriptor?? [ 227.734959][ T5875] usb 2-1: USB disconnect, device number 6 [ 228.390004][ T5861] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 229.616029][ T5861] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 229.677919][ T5861] usb 3-1: config 0 has no interface number 0 [ 229.767364][ T5861] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 229.779958][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.811379][ T5861] usb 3-1: config 0 descriptor?? [ 230.585958][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 230.795954][ T7597] binder: 7596:7597 ioctl c0306201 2000000003c0 returned -14 [ 230.814897][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 231.103722][ T7573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.307066][ T9] usb 3-1: USB disconnect, device number 3 [ 233.682442][ T7633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.753005][ T5861] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 234.433770][ T5861] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 234.444491][ T5861] usb 5-1: config 0 has no interface number 0 [ 234.453314][ T5861] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 234.463114][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.537882][ T5861] usb 5-1: config 0 descriptor?? [ 237.054523][ T9] usb 5-1: USB disconnect, device number 8 [ 237.147841][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 239.410718][ T52] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 239.588541][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.625844][ T52] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 240.225203][ T52] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 240.678923][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.720233][ T52] usb 5-1: config 0 descriptor?? [ 241.089542][ T52] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 241.120515][ T52] dvb-usb: bulk message failed: -22 (3/0) [ 241.146793][ T52] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 241.917821][ T52] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 241.979295][ T52] usb 5-1: media controller created [ 241.995323][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.053529][ T52] dvb-usb: bulk message failed: -22 (6/0) [ 243.054741][ T52] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 243.741712][ T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 243.824360][ T52] dvb-usb: schedule remote query interval to 150 msecs. [ 243.888894][ T52] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 243.939747][ T52] usb 5-1: USB disconnect, device number 9 [ 244.044224][ T52] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 246.356104][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'. [ 247.260502][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 247.416012][ T7797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.527224][ T92] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 247.853458][ T92] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.861898][ T92] usb 4-1: not running at top speed; connect to a high speed hub [ 248.870462][ T92] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 248.889252][ T92] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 249.614880][ T92] usb 4-1: config 129 descriptor has 1 excess byte, ignoring [ 249.625021][ T92] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 249.634520][ T92] usb 4-1: config 129 has no interface number 0 [ 249.641309][ T92] usb 4-1: config 129 has no interface number 1 [ 249.647709][ T92] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 249.665409][ T92] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 249.686878][ T92] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 249.941793][ T7813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.020347][ T92] usb 4-1: config 129 interface 135 has no altsetting 0 [ 250.099320][ T92] usb 4-1: config 129 interface 5 has no altsetting 0 [ 250.127749][ T92] usb 4-1: string descriptor 0 read error: -22 [ 250.142495][ T92] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 250.219454][ T7819] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 250.480237][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.580561][ T92] usb 4-1: can't set config #129, error -71 [ 250.604988][ T92] usb 4-1: USB disconnect, device number 8 [ 252.629033][ T7837] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.473' resets device [ 252.759459][ T7844] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.475' resets device [ 254.126076][ T30] audit: type=1400 audit(1747104829.285:510): avc: denied { create } for pid=7864 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.837074][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.480'. [ 255.393434][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.412486][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.747860][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 255.890131][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 256.396330][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.972619][ T5890] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 257.588626][ T5890] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.642593][ T5890] usb 1-1: config 0 has no interface number 0 [ 257.673951][ T5890] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 257.706673][ T5890] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.731805][ T5890] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.865030][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.908616][ T5890] usb 1-1: config 0 descriptor?? [ 257.924087][ T5890] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 258.174475][ T7886] iowarrior 1-1:0.1: Error -90 while submitting URB [ 258.247051][ T30] audit: type=1400 audit(1747104833.415:511): avc: denied { block_suspend } for pid=7907 comm="syz.1.488" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 259.550307][ T5861] usb 1-1: USB disconnect, device number 8 [ 260.004630][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.491'. [ 261.261260][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 261.400133][ T7954] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.110342][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.504'. [ 263.153415][ T30] audit: type=1400 audit(1747104838.315:512): avc: denied { getopt } for pid=7981 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.256508][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 266.265750][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.512'. [ 266.274765][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 266.283810][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 267.141961][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.514'. [ 270.239611][ T7296] Bluetooth: (null): Invalid header checksum [ 270.256750][ T7296] Bluetooth: (null): Invalid header checksum [ 270.277720][ T7296] Bluetooth: (null): Invalid header checksum [ 270.307041][ T7296] Bluetooth: (null): Invalid header checksum [ 270.327936][ T7296] Bluetooth: (null): Invalid header checksum [ 270.361396][ T7296] Bluetooth: (null): Invalid header checksum [ 270.378403][ T7296] Bluetooth: (null): Invalid header checksum [ 270.440361][ T7296] Bluetooth: (null): Invalid header checksum [ 270.483832][ T7296] Bluetooth: (null): Invalid header checksum [ 270.483920][ T7296] Bluetooth: (null): Invalid header checksum [ 270.483994][ T7296] Bluetooth: (null): Invalid header checksum [ 270.747963][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.521'. [ 270.757334][ T8070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 270.766426][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.521'. [ 270.778300][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.521'. [ 271.094704][ T13] Bluetooth: (null): Invalid header checksum [ 271.227351][ T13] Bluetooth: (null): Invalid header checksum [ 271.390026][ T13] Bluetooth: (null): Invalid header checksum [ 271.435139][ T13] Bluetooth: (null): Invalid header checksum [ 271.540205][ T13] Bluetooth: (null): Invalid header checksum [ 271.554204][ T13] Bluetooth: (null): Invalid header checksum [ 271.564645][ T13] Bluetooth: (null): Invalid header checksum [ 271.570943][ T13] Bluetooth: (null): Invalid header checksum [ 271.576960][ T13] Bluetooth: (null): Invalid header checksum [ 271.583228][ T13] Bluetooth: (null): Invalid header checksum [ 271.722883][ T12] Bluetooth: (null): Invalid header checksum [ 271.759893][ T30] audit: type=1400 audit(1747104846.925:513): avc: denied { write } for pid=8041 comm="syz.4.519" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 272.209602][ T8061] random: crng reseeded on system resumption [ 272.220024][ T1139] Bluetooth: (null): Invalid header checksum [ 272.226093][ T1139] Bluetooth: (null): Invalid header checksum [ 272.255871][ T1139] Bluetooth: (null): Invalid header checksum [ 272.390092][ T1139] Bluetooth: (null): Invalid header checksum [ 272.501324][ T1139] Bluetooth: (null): Invalid header checksum [ 272.526587][ T1139] Bluetooth: (null): Invalid header checksum [ 272.548010][ T1139] Bluetooth: (null): Invalid header checksum [ 272.662674][ T7296] Bluetooth: (null): Invalid header checksum [ 272.807416][ T7296] Bluetooth: (null): Invalid header checksum [ 272.930046][ T7296] Bluetooth: (null): Invalid header checksum [ 273.095061][ T8080] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 273.118614][ T8089] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 274.554277][ T8120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.527'. [ 274.563281][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.527'. [ 274.572590][ T8120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.527'. [ 274.581888][ T8120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.527'. [ 274.993888][ T8127] Bluetooth: MGMT ver 1.23 [ 275.133421][ T8132] CIFS: VFS: Malformed UNC in devname [ 275.145403][ T30] audit: type=1400 audit(1747104850.285:514): avc: denied { getopt } for pid=8125 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.185116][ T30] audit: type=1400 audit(1747104850.285:515): avc: denied { ioctl } for pid=8125 comm="syz.1.532" path="socket:[16374]" dev="sockfs" ino=16374 ioctlcmd=0x5101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 278.419270][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 278.429540][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 278.439236][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 278.448321][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 278.645426][ T8183] 9pnet_fd: Insufficient options for proto=fd [ 279.265360][ T8175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.720133][ T92] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 280.197731][ T92] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 280.214914][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.249003][ T92] usb 1-1: config 0 descriptor?? [ 280.613780][ T92] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 280.623196][ T92] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 280.692729][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 280.905988][ T30] audit: type=1400 audit(1747104856.075:516): avc: denied { name_connect } for pid=8185 comm="syz.0.541" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 282.331991][ T92] [drm:udl_init] *ERROR* Selecting channel failed [ 282.703690][ T92] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 282.729971][ T92] [drm] Initialized udl on minor 2 [ 283.697919][ T92] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 283.709449][ T92] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 283.710259][ T30] audit: type=1400 audit(1747104857.995:517): avc: denied { bind } for pid=8231 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 283.718570][ T5890] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 283.747035][ T92] usb 1-1: USB disconnect, device number 9 [ 283.756857][ T5890] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 283.794056][ T30] audit: type=1400 audit(1747104857.995:518): avc: denied { setopt } for pid=8231 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 283.813591][ T30] audit: type=1400 audit(1747104857.995:519): avc: denied { accept } for pid=8231 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 283.847268][ T30] audit: type=1400 audit(1747104858.005:520): avc: denied { read } for pid=8231 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 283.934924][ T30] audit: type=1400 audit(1747104858.005:521): avc: denied { write } for pid=8231 comm="syz.1.554" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.438943][ T8259] 9pnet_fd: Insufficient options for proto=fd [ 284.985155][ T8246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.226594][ T8291] netlink: 'syz.3.566': attribute type 7 has an invalid length. [ 288.234358][ T8291] netlink: 140 bytes leftover after parsing attributes in process `syz.3.566'. [ 288.868164][ T30] audit: type=1400 audit(1747104863.395:522): avc: denied { read } for pid=8290 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.920233][ T52] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 289.293464][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.343286][ T52] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 289.370307][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.694025][ T8303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.721021][ T52] usb 4-1: config 0 descriptor?? [ 289.765227][ T52] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 290.709417][ T8325] 9pnet_fd: Insufficient options for proto=fd [ 291.121617][ T8343] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 291.128378][ T8343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.137829][ T8343] vhci_hcd vhci_hcd.0: Device attached [ 291.971487][ T8344] vhci_hcd: connection closed [ 291.991341][ T7296] vhci_hcd: stop threads [ 292.011880][ T7296] vhci_hcd: release socket [ 292.022076][ T5890] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 292.022382][ T7296] vhci_hcd: disconnect device [ 292.030409][ T92] usb 4-1: USB disconnect, device number 9 [ 292.225700][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.708232][ T8355] trusted_key: encrypted_key: insufficient parameters specified [ 294.738383][ T30] audit: type=1400 audit(1747104869.905:523): avc: denied { write } for pid=8374 comm="syz.1.583" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 294.799406][ T30] audit: type=1400 audit(1747104869.905:524): avc: denied { open } for pid=8374 comm="syz.1.583" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 294.840650][ T30] audit: type=1400 audit(1747104869.905:525): avc: denied { ioctl } for pid=8374 comm="syz.1.583" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 294.977900][ T30] audit: type=1400 audit(1747104870.085:526): avc: denied { load_policy } for pid=8374 comm="syz.1.583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 295.750211][ T52] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 295.811517][ T8375] SELinux: failed to load policy [ 295.912489][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.924251][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.934433][ T52] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.948512][ T52] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.958038][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.974138][ T52] usb 1-1: config 0 descriptor?? [ 296.585077][ T8377] bpq0: entered promiscuous mode [ 297.397161][ T5890] vhci_hcd: vhci_device speed not set [ 298.559900][ T8414] trusted_key: encrypted_key: insufficient parameters specified [ 298.939736][ T8412] 9pnet_fd: Insufficient options for proto=fd [ 298.951217][ T52] usbhid 1-1:0.0: can't add hid device: -71 [ 298.977101][ T52] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 299.016552][ T52] usb 1-1: USB disconnect, device number 10 [ 299.165616][ T8409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.462699][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.597'. [ 299.471800][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.597'. [ 299.480798][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.597'. [ 299.490304][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.597'. [ 301.573094][ T30] audit: type=1400 audit(1747104876.565:527): avc: denied { write } for pid=8448 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 301.638997][ T30] audit: type=1400 audit(1747104876.565:528): avc: denied { read } for pid=8448 comm="syz.1.603" path="socket:[18110]" dev="sockfs" ino=18110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 301.870263][ T52] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 302.451023][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.484812][ T52] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 302.547924][ T52] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 302.584876][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.614431][ T52] usb 5-1: config 0 descriptor?? [ 302.633066][ T52] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 302.666110][ T52] dvb-usb: bulk message failed: -22 (3/0) [ 302.704752][ T52] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 302.872617][ T52] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 302.890829][ T52] usb 5-1: media controller created [ 302.897293][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.920852][ T52] dvb-usb: bulk message failed: -22 (6/0) [ 302.927071][ T52] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 302.982272][ T8478] trusted_key: encrypted_key: insufficient parameters specified [ 303.192935][ T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 303.378260][ T52] dvb-usb: schedule remote query interval to 150 msecs. [ 303.404594][ T52] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 303.561421][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 303.569972][ T5861] dvb-usb: error while querying for an remote control event. [ 303.809957][ T52] dvb-usb: bulk message failed: -22 (1/0) [ 303.840326][ T5890] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 304.047812][ T8493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.611'. [ 304.056848][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 304.066225][ T8493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.611'. [ 304.075321][ T8493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.611'. [ 304.168607][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 304.773130][ T52] dvb-usb: error while querying for an remote control event. [ 304.990906][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 304.996712][ T5861] dvb-usb: error while querying for an remote control event. [ 305.181025][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 305.186878][ T5861] dvb-usb: error while querying for an remote control event. [ 305.790088][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 305.845471][ T5861] dvb-usb: error while querying for an remote control event. [ 306.044180][ T5890] usb 4-1: config 2 has an invalid interface number: 4 but max is 0 [ 306.058293][ T5890] usb 4-1: config 2 has no interface number 0 [ 306.064690][ T5890] usb 4-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.087367][ T5890] usb 4-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 306.100252][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 306.105987][ T5861] dvb-usb: error while querying for an remote control event. [ 306.113447][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.123981][ T5890] usb 4-1: Product: syz [ 306.129634][ T5890] usb 4-1: Manufacturer: syz [ 306.135216][ T5890] usb 4-1: SerialNumber: syz [ 306.163382][ T5905] usb 5-1: USB disconnect, device number 10 [ 306.166589][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.427123][ T30] audit: type=1400 audit(1747104881.595:529): avc: denied { write } for pid=8499 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 306.490856][ T5905] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 306.846097][ T5890] snd-usb-audio 4-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 307.024902][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.042313][ T5890] usb 4-1: USB disconnect, device number 10 [ 313.021881][ T8593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.071625][ T8619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.638'. [ 316.080894][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.638'. [ 316.089763][ T8619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.638'. [ 316.098816][ T8619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.638'. [ 316.838960][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.845354][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.158848][ T30] audit: type=1400 audit(1747104892.325:530): avc: denied { kexec_image_load } for pid=8627 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 317.315759][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 321.559104][ T8680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.158291][ T5875] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 324.463097][ T5875] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 324.482802][ T5875] usb 3-1: config 0 has no interface number 0 [ 324.608891][ T5875] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 324.620302][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.800127][ T30] audit: type=1400 audit(1747104899.895:531): avc: denied { mount } for pid=8723 comm="syz.1.659" name="/" dev="rpc_pipefs" ino=19435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 325.115358][ T5875] usb 3-1: config 0 descriptor?? [ 325.368971][ T8735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.808883][ T8743] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 326.636318][ T9] usb 3-1: USB disconnect, device number 4 [ 327.241455][ T8766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.518995][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 327.661049][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 328.277455][ T30] audit: type=1400 audit(1747104903.445:532): avc: denied { bind } for pid=8781 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 328.362592][ T30] audit: type=1400 audit(1747104903.445:533): avc: denied { node_bind } for pid=8781 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 328.610562][ T8794] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.675' resets device [ 329.797259][ T8808] FAULT_INJECTION: forcing a failure. [ 329.797259][ T8808] name failslab, interval 1, probability 0, space 0, times 0 [ 329.809958][ T8808] CPU: 0 UID: 0 PID: 8808 Comm: syz.0.677 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) [ 329.809973][ T8808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.809980][ T8808] Call Trace: [ 329.809983][ T8808] [ 329.809988][ T8808] dump_stack_lvl+0x16c/0x1f0 [ 329.810006][ T8808] should_fail_ex+0x512/0x640 [ 329.810020][ T8808] ? __kmalloc_noprof+0xbf/0x510 [ 329.810032][ T8808] ? do_sys_poll+0x24a/0xe00 [ 329.810048][ T8808] should_failslab+0xc2/0x120 [ 329.810059][ T8808] __kmalloc_noprof+0xd2/0x510 [ 329.810071][ T8808] do_sys_poll+0x24a/0xe00 [ 329.810087][ T8808] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.810103][ T8808] ? kernel_text_address+0x8d/0x100 [ 329.810115][ T8808] ? __kernel_text_address+0xd/0x40 [ 329.810128][ T8808] ? __pfx_do_sys_poll+0x10/0x10 [ 329.810154][ T8808] ? find_held_lock+0x2b/0x80 [ 329.810190][ T8808] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 329.810207][ T8808] ? set_user_sigmask+0x21b/0x2b0 [ 329.810219][ T8808] ? __pfx_set_user_sigmask+0x10/0x10 [ 329.810231][ T8808] ? __fget_files+0x20e/0x3c0 [ 329.810242][ T8808] __x64_sys_ppoll+0x254/0x2d0 [ 329.810259][ T8808] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 329.810274][ T8808] ? ksys_write+0x1b9/0x240 [ 329.810289][ T8808] ? __pfx_ksys_write+0x10/0x10 [ 329.810309][ T8808] do_syscall_64+0xcd/0x260 [ 329.810324][ T8808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.810335][ T8808] RIP: 0033:0x7f6ac738e969 [ 329.810343][ T8808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.810354][ T8808] RSP: 002b:00007f6ac8147038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 329.810364][ T8808] RAX: ffffffffffffffda RBX: 00007f6ac75b5fa0 RCX: 00007f6ac738e969 [ 329.810371][ T8808] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 329.810377][ T8808] RBP: 00007f6ac8147090 R08: 0000000000000000 R09: 0000000000000000 [ 329.810383][ T8808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.810389][ T8808] R13: 0000000000000000 R14: 00007f6ac75b5fa0 R15: 00007ffe41842a58 [ 329.810401][ T8808] [ 331.819466][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 332.578904][ T30] audit: type=1400 audit(1747104907.745:534): avc: denied { create } for pid=8848 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.802821][ T30] audit: type=1400 audit(1747104907.975:535): avc: denied { map } for pid=8856 comm="syz.3.690" path="socket:[20767]" dev="sockfs" ino=20767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.835204][ T30] audit: type=1400 audit(1747104907.975:536): avc: denied { accept } for pid=8856 comm="syz.3.690" path="socket:[20767]" dev="sockfs" ino=20767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.908456][ T8859] overlay: Unknown parameter 'obj_role' [ 332.947952][ T8860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.689'. [ 332.957337][ T8860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 332.966460][ T8860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.689'. [ 332.975632][ T8860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.689'. [ 333.830549][ T92] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 334.462738][ T92] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.481103][ T92] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.498855][ T92] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 334.528906][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.703889][ T92] usb 3-1: config 0 descriptor?? [ 334.729147][ T92] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 334.755830][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 334.780762][ T92] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 334.812093][ T92] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 334.829398][ T92] usb 3-1: media controller created [ 334.859077][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.882911][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 334.901116][ T92] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 334.912157][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 334.959774][ T92] dvb-usb: schedule remote query interval to 150 msecs. [ 334.992427][ T92] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 335.301361][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 335.318345][ T92] dvb-usb: error while querying for an remote control event. [ 335.363520][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 335.599953][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 335.605862][ T92] dvb-usb: error while querying for an remote control event. [ 336.234622][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 336.243736][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 336.433533][ T9] dvb-usb: error while querying for an remote control event. [ 336.570210][ T92] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 336.609945][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 336.619126][ T9] dvb-usb: error while querying for an remote control event. [ 336.662451][ T52] usb 3-1: USB disconnect, device number 5 [ 336.685350][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 336.731114][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.746308][ T52] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 336.867201][ T92] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 336.877905][ T92] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 336.887387][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.903430][ T92] usb 5-1: config 0 descriptor?? [ 337.369224][ T92] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 337.376400][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 337.421010][ T92] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 337.489785][ T92] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 337.523366][ T92] usb 5-1: media controller created [ 337.543914][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.705284][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 338.625299][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 338.727646][ T92] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 338.978210][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 339.018490][ T92] dvb-usb: schedule remote query interval to 150 msecs. [ 339.028969][ T92] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 339.182385][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 339.476075][ T92] dvb-usb: error while querying for an remote control event. [ 339.757241][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 339.881983][ T92] dvb-usb: error while querying for an remote control event. [ 340.110170][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 340.628664][ T92] dvb-usb: error while querying for an remote control event. [ 341.100358][ T92] dvb-usb: bulk message failed: -22 (1/0) [ 341.106139][ T92] dvb-usb: error while querying for an remote control event. [ 341.236480][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 341.307955][ T52] usb 5-1: USB disconnect, device number 11 [ 341.335934][ T52] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 342.019592][ T8981] 9pnet_fd: Insufficient options for proto=fd [ 342.717449][ T8961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.450075][ T52] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 343.457915][ T30] audit: type=1400 audit(1747104918.625:537): avc: denied { create } for pid=9002 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 343.656278][ T30] audit: type=1400 audit(1747104918.625:538): avc: denied { bind } for pid=9002 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 343.889980][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.903024][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.927989][ T52] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 344.037925][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.415353][ T52] usb 4-1: config 0 descriptor?? [ 344.459389][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 345.054821][ T92] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 345.190700][ T911] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 345.223990][ T92] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 345.232311][ T92] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.244866][ T92] usb 3-1: config 0 has no interface number 0 [ 345.252730][ T92] usb 3-1: config 0 interface 117 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.266209][ T92] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.281750][ T52] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 345.333845][ T92] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 345.353445][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.363393][ T52] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 345.371745][ T52] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 345.379593][ T92] usb 3-1: Product: syz [ 345.382485][ T52] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 345.399808][ T911] usb 1-1: Using ep0 maxpacket: 8 [ 345.402979][ T92] usb 3-1: Manufacturer: syz [ 345.420487][ T911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.434256][ T911] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 345.439393][ T92] usb 3-1: SerialNumber: syz [ 345.445582][ T911] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 345.462186][ T911] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.471889][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.472817][ T92] usb 3-1: config 0 descriptor?? [ 345.481375][ T911] usb 1-1: Product: syz [ 345.490461][ T52] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 345.500117][ T911] usb 1-1: Manufacturer: syz [ 345.504740][ T911] usb 1-1: SerialNumber: syz [ 345.522250][ T52] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 345.529680][ T52] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 345.537272][ T52] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 345.604781][ T52] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 345.910937][ T911] cdc_ncm 1-1:1.0: bind() failure [ 345.918154][ T911] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 345.934274][ T911] cdc_ncm 1-1:1.1: bind() failure [ 345.968037][ T911] usb 1-1: USB disconnect, device number 11 [ 346.078348][ T9000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.092665][ T9000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.772839][ T30] audit: type=1400 audit(1747104921.925:539): avc: denied { read } for pid=9013 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 346.940906][ T5861] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 348.466520][ T9068] 9pnet_fd: Insufficient options for proto=fd [ 348.558772][ T5905] usb 4-1: USB disconnect, device number 11 [ 348.583284][ T5905] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 348.638815][ T9057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.689991][ T92] usb 3-1: USB disconnect, device number 6 [ 348.954241][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 349.760197][ T92] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 349.767881][ T5875] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 349.960066][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 349.968045][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 349.974141][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 350.010172][ T5875] usb 2-1: too many configurations: 107, using maximum allowed: 8 [ 350.020600][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.067069][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 350.429485][ T30] audit: type=1400 audit(1747104925.405:540): avc: denied { append } for pid=9085 comm="syz.0.739" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.466311][ T92] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.516758][ T5875] usb 2-1: can't read configurations, error -61 [ 350.535537][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 350.558317][ T92] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 350.571258][ T92] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 350.580547][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.599678][ T92] usb 3-1: config 0 descriptor?? [ 350.612070][ T9076] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 350.660465][ T5875] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 351.140584][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 351.155720][ T5875] usb 2-1: too many configurations: 107, using maximum allowed: 8 [ 351.166562][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 351.174495][ T5875] usb 2-1: can't read configurations, error -61 [ 351.181636][ T5875] usb usb2-port1: attempt power cycle [ 351.821336][ T5875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 351.873952][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 351.881758][ T5875] usb 2-1: device descriptor read/8, error -32 [ 352.671974][ T5816] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 352.932212][ T30] audit: type=1400 audit(1747104927.325:541): avc: denied { create } for pid=9120 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 353.084672][ T30] audit: type=1400 audit(1747104927.325:542): avc: denied { ioctl } for pid=9120 comm="syz.1.744" path="socket:[21245]" dev="sockfs" ino=21245 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 353.143052][ T30] audit: type=1400 audit(1747104927.335:543): avc: denied { create } for pid=9120 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.210039][ T30] audit: type=1400 audit(1747104927.335:544): avc: denied { bind } for pid=9120 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.254357][ T30] audit: type=1326 audit(1747104927.335:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.1.744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f181278e969 code=0x0 [ 353.316754][ T30] audit: type=1400 audit(1747104928.255:546): avc: denied { cmd } for pid=9126 comm="syz.3.745" path="socket:[21251]" dev="sockfs" ino=21251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 353.398176][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 353.446091][ T30] audit: type=1400 audit(1747104928.365:547): avc: denied { read } for pid=9132 comm="syz.3.748" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 353.521806][ T30] audit: type=1400 audit(1747104928.365:548): avc: denied { open } for pid=9132 comm="syz.3.748" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 353.660079][ T9140] lo speed is unknown, defaulting to 1000 [ 353.667283][ T9140] lo speed is unknown, defaulting to 1000 [ 353.678669][ T30] audit: type=1400 audit(1747104928.675:549): avc: denied { execute } for pid=9135 comm="syz.1.750" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 353.680304][ T9140] lo speed is unknown, defaulting to 1000 [ 353.762412][ T9140] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 353.880915][ T9140] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 354.285378][ T9140] lo speed is unknown, defaulting to 1000 [ 354.319372][ T9140] lo speed is unknown, defaulting to 1000 [ 354.332143][ T5861] usb 3-1: USB disconnect, device number 7 [ 354.427578][ T9140] lo speed is unknown, defaulting to 1000 [ 354.482499][ T9140] lo speed is unknown, defaulting to 1000 [ 354.489651][ T9140] lo speed is unknown, defaulting to 1000 [ 354.979997][ T8201] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 355.023618][ T3006] Bluetooth: hci5: Frame reassembly failed (-84) [ 355.042809][ T9152] 9pnet_fd: Insufficient options for proto=fd [ 355.903147][ T9143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.002571][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 357.581790][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 357.610095][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 357.610128][ T30] audit: type=1400 audit(1747104932.765:552): avc: denied { read } for pid=9185 comm="syz.1.759" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 357.810464][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 357.817144][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.844582][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 357.867596][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.885476][ T5875] usb 4-1: Product: syz [ 357.890962][ T5875] usb 4-1: Manufacturer: syz [ 357.895586][ T5875] usb 4-1: SerialNumber: syz [ 357.990883][ T5875] usb 4-1: config 0 descriptor?? [ 358.016458][ T30] audit: type=1400 audit(1747104933.165:553): avc: denied { read } for pid=9201 comm="syz.2.764" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 358.041226][ T5875] hub 4-1:0.0: bad descriptor, ignoring hub [ 358.063831][ T9203] netlink: 'syz.2.764': attribute type 21 has an invalid length. [ 358.069646][ T30] audit: type=1400 audit(1747104933.165:554): avc: denied { open } for pid=9201 comm="syz.2.764" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 358.103155][ T5875] hub 4-1:0.0: probe with driver hub failed with error -5 [ 358.110425][ T9203] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 358.439222][ T30] audit: type=1400 audit(1747104933.605:555): avc: denied { ioctl } for pid=9201 comm="syz.2.764" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 358.601798][ T92] usb 4-1: USB disconnect, device number 12 [ 358.974102][ T9232] netlink: 'syz.0.768': attribute type 4 has an invalid length. [ 359.553295][ T9232] syz.0.768 (9232) used greatest stack depth: 20616 bytes left [ 360.810435][ T30] audit: type=1400 audit(1747104935.975:556): avc: denied { name_bind } for pid=9249 comm="syz.4.774" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 361.080005][ T52] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 361.310551][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.452710][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.584553][ T52] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 361.682093][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.941026][ T52] usb 4-1: config 0 descriptor?? [ 361.952554][ T52] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 361.964124][ T30] audit: type=1400 audit(1747104937.135:557): avc: denied { listen } for pid=9258 comm="syz.4.778" lport=46282 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 361.990669][ T52] dvb-usb: bulk message failed: -22 (3/0) [ 362.068828][ T52] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 362.868246][ T9262] sctp: failed to load transform for md5: -2 [ 362.918358][ T30] audit: type=1400 audit(1747104937.205:558): avc: denied { accept } for pid=9258 comm="syz.4.778" lport=46282 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.986050][ T52] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 362.993753][ T52] usb 4-1: media controller created [ 363.003394][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.024651][ T52] dvb-usb: bulk message failed: -22 (6/0) [ 363.055294][ T52] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 363.113745][ T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 363.186836][ T52] dvb-usb: schedule remote query interval to 150 msecs. [ 363.189588][ T30] audit: type=1400 audit(1747104938.355:559): avc: denied { append } for pid=9276 comm="syz.4.779" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 363.220116][ T52] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 363.380941][ T52] dvb-usb: bulk message failed: -22 (1/0) [ 363.391535][ T52] dvb-usb: error while querying for an remote control event. [ 363.586751][ T52] dvb-usb: bulk message failed: -22 (1/0) [ 364.160951][ T52] dvb-usb: error while querying for an remote control event. [ 364.356273][ T5905] dvb-usb: bulk message failed: -22 (1/0) [ 364.416354][ T5905] dvb-usb: error while querying for an remote control event. [ 364.690274][ T5905] dvb-usb: bulk message failed: -22 (1/0) [ 365.555551][ T5905] dvb-usb: error while querying for an remote control event. [ 366.337938][ T92] usb 4-1: USB disconnect, device number 13 [ 366.438099][ T92] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 366.771678][ T9311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.783'. [ 366.784840][ T9311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.783'. [ 366.793988][ T9311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.783'. [ 366.822983][ T9311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.783'. [ 367.564701][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.785'. [ 367.573705][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.785'. [ 367.582788][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.785'. [ 367.591825][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.785'. [ 368.791365][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 368.929289][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 369.770593][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 369.940295][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.016987][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.069520][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.142407][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.403481][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.432929][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.470111][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.498536][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 370.519951][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.573644][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 370.580711][ T9329] ceph: No mds server is up or the cluster is laggy [ 370.633543][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.651581][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.669398][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.683571][ T5875] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 370.958776][ T92] libceph: connect (1)[c::]:6789 error -101 [ 370.970029][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 371.008963][ T5875] hid-generic 009C:0008:0003.0009: hidraw0: HID v0.05 Device [syz1] on syz0 [ 371.458942][ T9338] fido_id[9338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 371.602304][ T30] audit: type=1400 audit(1747104946.775:560): avc: denied { connect } for pid=9341 comm="syz.4.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 371.642353][ T30] audit: type=1400 audit(1747104946.795:561): avc: denied { write } for pid=9344 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.120025][ T92] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 372.373234][ T92] usb 5-1: config index 0 descriptor too short (expected 292, got 36) [ 372.382928][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.413486][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.471752][ T92] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 372.505399][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.526820][ T92] usb 5-1: config 0 descriptor?? [ 372.700057][ T5890] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 372.855349][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 372.863346][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 372.883507][ T5890] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 372.898668][ T5890] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=25.94 [ 372.909796][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.921375][ T5890] usb 3-1: Product: syz [ 372.925638][ T5890] usb 3-1: Manufacturer: syz [ 372.930984][ T5890] usb 3-1: SerialNumber: syz [ 373.531072][ T92] kone 0003:1E7D:2CED.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 373.618067][ T5890] usb 3-1: USB disconnect, device number 8 [ 374.369757][ T9379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'. [ 374.390124][ T9379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.799'. [ 374.399295][ T9379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'. [ 374.408563][ T9379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'. [ 374.733752][ T5890] usb 5-1: USB disconnect, device number 12 [ 374.924826][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 374.999598][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 375.137019][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 375.204842][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.304580][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.463007][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.479968][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.743400][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.832639][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.840182][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.847582][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.855329][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.862946][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.870439][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.877851][ T92] hid-generic 009C:0008:0003.000B: unknown main item tag 0x0 [ 376.902485][ T92] hid-generic 009C:0008:0003.000B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 378.089729][ T9400] fido_id[9400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 378.197022][ T5890] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 378.290771][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.297217][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.359973][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 378.555047][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 378.576136][ T5890] usb 2-1: config 4 has an invalid interface number: 255 but max is 0 [ 378.596196][ T5890] usb 2-1: config 4 has no interface number 0 [ 378.616453][ T5890] usb 2-1: config 4 interface 255 has no altsetting 0 [ 378.633522][ T5890] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 378.644989][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.673079][ T5890] usb 2-1: Product: syz [ 378.687094][ T5890] usb 2-1: Manufacturer: syz [ 378.693686][ T5890] usb 2-1: SerialNumber: syz [ 379.491423][ T9420] 9pnet_fd: Insufficient options for proto=fd [ 379.725370][ T9419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.921263][ T30] audit: type=1400 audit(1747104955.095:562): avc: denied { write } for pid=9424 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 380.206086][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 381.667247][ T5890] usb 2-1: USB disconnect, device number 11 [ 383.394785][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 383.543808][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 384.291763][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 384.299207][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 384.307634][ T30] audit: type=1400 audit(1747104959.155:563): avc: denied { ioctl } for pid=9452 comm="syz.0.819" path="socket:[22841]" dev="sockfs" ino=22841 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 384.366592][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 384.405689][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 384.442071][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.041270][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.193285][ T9466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.238997][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.424493][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.446787][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.457816][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.481442][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.523049][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.542488][ T5861] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 385.598488][ T5861] hid-generic 009C:0008:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 386.200604][ T30] audit: type=1400 audit(1747104960.945:564): avc: denied { connect } for pid=9469 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 386.248075][ T9471] fido_id[9471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 386.455990][ T9479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 386.466162][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.824'. [ 386.476197][ T9479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 386.485310][ T9479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 386.802132][ T30] audit: type=1400 audit(1747104961.025:565): avc: denied { write } for pid=9469 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 388.262846][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 388.481000][ T30] audit: type=1400 audit(1747104963.645:566): avc: denied { create } for pid=9499 comm="syz.4.830" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 388.536553][ T30] audit: type=1400 audit(1747104963.645:567): avc: denied { link } for pid=9499 comm="syz.4.830" name="#b" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 388.629798][ T30] audit: type=1400 audit(1747104963.645:568): avc: denied { rename } for pid=9499 comm="syz.4.830" name="#c" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 388.760910][ T911] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 389.890721][ T911] usb 4-1: Using ep0 maxpacket: 8 [ 389.909200][ T911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 389.918274][ T911] usb 4-1: config 4 has an invalid interface number: 255 but max is 0 [ 389.926625][ T911] usb 4-1: config 4 has no interface number 0 [ 390.124155][ T911] usb 4-1: config 4 interface 255 has no altsetting 0 [ 390.264038][ T911] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 390.380128][ T911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.388172][ T911] usb 4-1: Product: syz [ 390.395184][ T911] usb 4-1: Manufacturer: syz [ 390.399805][ T911] usb 4-1: SerialNumber: syz [ 390.748799][ T30] audit: type=1400 audit(1747104965.905:569): avc: denied { read } for pid=9515 comm="syz.1.835" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 391.177108][ T9520] block device autoloading is deprecated and will be removed. [ 391.193598][ T30] audit: type=1400 audit(1747104965.905:570): avc: denied { open } for pid=9515 comm="syz.1.835" path="/165/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 392.651190][ T911] usb 4-1: USB disconnect, device number 14 [ 393.370014][ T9536] trusted_key: encrypted_key: key user:syz not found [ 393.847052][ T30] audit: type=1400 audit(1747104969.015:571): avc: denied { write } for pid=9537 comm="syz.2.840" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 394.275895][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 394.304187][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 394.623739][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 395.664150][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 395.697774][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 395.738093][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 395.758949][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 395.790655][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 395.793344][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 395.833398][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 395.844260][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 395.891176][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 396.694922][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 396.703080][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 396.711030][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 396.718726][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 396.735515][ T911] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 396.744443][ T911] hid-generic 009C:0008:0003.000D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 397.193785][ T9566] fido_id[9566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 399.062070][ T911] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 399.069919][ T5861] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 399.290204][ T5861] usb 5-1: device descriptor read/64, error -71 [ 399.296885][ T911] usb 3-1: Using ep0 maxpacket: 8 [ 399.326708][ T911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 399.346880][ T911] usb 3-1: config 4 has an invalid interface number: 255 but max is 0 [ 399.357748][ T911] usb 3-1: config 4 has no interface number 0 [ 399.370477][ T911] usb 3-1: config 4 interface 255 has no altsetting 0 [ 399.379428][ T911] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 399.392401][ T911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.410048][ T911] usb 3-1: Product: syz [ 399.414353][ T911] usb 3-1: Manufacturer: syz [ 399.418948][ T911] usb 3-1: SerialNumber: syz [ 399.638772][ T5861] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 399.789067][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 399.809044][ T5861] usb 5-1: device descriptor read/64, error -71 [ 400.338734][ T5861] usb usb5-port1: attempt power cycle [ 400.726823][ T5861] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 400.773303][ T5861] usb 5-1: device descriptor read/8, error -71 [ 401.005861][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 401.031935][ T5861] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 401.060705][ T5861] usb 5-1: device descriptor read/8, error -71 [ 401.170438][ T5861] usb usb5-port1: unable to enumerate USB device [ 401.218280][ T9603] veth0_to_hsr: entered promiscuous mode [ 401.294613][ T9603] veth0_to_hsr: left promiscuous mode [ 401.796833][ T5890] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 401.837083][ T911] usb 3-1: USB disconnect, device number 9 [ 401.969405][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.454577][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.465115][ T5890] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 402.474719][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.487752][ T5890] usb 2-1: config 0 descriptor?? [ 402.511390][ T9617] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.857' resets device [ 403.827462][ T5890] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 403.834976][ T5890] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 403.853068][ T5890] steelseries 0003:1038:12B6.000E: unknown main item tag 0x6 [ 403.861739][ T5890] steelseries 0003:1038:12B6.000E: item fetching failed at offset 4/7 [ 403.972290][ T5890] steelseries 0003:1038:12B6.000E: probe with driver steelseries failed with error -22 [ 404.152400][ T5890] usb 2-1: USB disconnect, device number 12 [ 405.433276][ T9654] bridge0: port 3(batadv0) entered blocking state [ 405.440254][ T9654] bridge0: port 3(batadv0) entered disabled state [ 405.447426][ T9654] batadv0: entered allmulticast mode [ 405.459618][ T9654] batadv0: entered promiscuous mode [ 405.466596][ T9654] bridge0: port 3(batadv0) entered blocking state [ 405.473116][ T9654] bridge0: port 3(batadv0) entered forwarding state [ 405.489999][ T9654] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 405.694539][ T30] audit: type=1400 audit(1747104980.595:572): avc: granted { setsecparam } for pid=9650 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 405.724077][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 406.296518][ T7296] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 406.306311][ T7296] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 406.531243][ T9664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'. [ 406.549997][ T9664] netlink: 'syz.4.871': attribute type 7 has an invalid length. [ 406.558075][ T9664] netlink: 'syz.4.871': attribute type 8 has an invalid length. [ 406.580080][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 406.651224][ T30] audit: type=1400 audit(1747104981.825:573): avc: denied { shutdown } for pid=9669 comm="syz.3.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 406.680901][ T9664] erspan0: entered promiscuous mode [ 406.687437][ T9664] gretap0: entered promiscuous mode [ 406.697764][ T9664] erspan0: left promiscuous mode [ 406.980265][ T9664] gretap0: left promiscuous mode [ 407.008701][ T9675] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.872' resets device [ 407.518298][ T30] audit: type=1400 audit(1747104982.655:574): avc: denied { setopt } for pid=9680 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 407.885152][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.033054][ T30] audit: type=1400 audit(1747104984.205:575): avc: denied { setopt } for pid=9684 comm="syz.2.875" lport=50775 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 409.183600][ T9710] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.881' resets device [ 410.221889][ T30] audit: type=1400 audit(1747104985.195:576): avc: denied { ioctl } for pid=9713 comm="syz.3.882" path="socket:[23715]" dev="sockfs" ino=23715 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 412.771844][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 413.713922][ T9778] veth0_vlan: entered allmulticast mode [ 413.961233][ T911] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 413.965104][ T9778] veth0_vlan: left promiscuous mode [ 413.981870][ T9778] veth0_vlan: entered promiscuous mode [ 414.151452][ T9781] all: renamed from lo (while UP) [ 414.167400][ T911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.199123][ T911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.220528][ T911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.308381][ T911] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.349240][ T911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.437565][ T9786] trusted_key: syz.1.897 sent an empty control message without MSG_MORE. [ 414.521491][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 414.714773][ T5890] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 414.739149][ T5890] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 414.806716][ T5890] usb 3-1: config 220 has no interface number 2 [ 414.860723][ T5890] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 414.922757][ T5890] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 415.072126][ T5890] usb 3-1: config 220 interface 0 has no altsetting 0 [ 415.079103][ T5890] usb 3-1: config 220 interface 76 has no altsetting 0 [ 415.090515][ T5890] usb 3-1: config 220 interface 1 has no altsetting 0 [ 415.104379][ T5890] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 415.851033][ T911] usb 4-1: config 0 descriptor?? [ 415.872681][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.900375][ T5890] usb 3-1: Product: syz [ 415.904594][ T5890] usb 3-1: Manufacturer: syz [ 415.909187][ T5890] usb 3-1: SerialNumber: syz [ 416.628471][ T5890] usb 3-1: selecting invalid altsetting 0 [ 416.645414][ T5890] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 416.670373][ T5890] usb 3-1: No valid video chain found. [ 416.688043][ T5890] usb 3-1: selecting invalid altsetting 0 [ 416.721854][ T5890] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 416.796113][ T911] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 416.848401][ T911] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 416.945759][ T5890] usb 3-1: USB disconnect, device number 10 [ 416.959413][ T9803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.902'. [ 416.982360][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 417.031287][ T9803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.902'. [ 417.041613][ T9803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.902'. [ 418.414735][ T30] audit: type=1400 audit(1747104993.325:577): avc: denied { map } for pid=9820 comm="syz.1.906" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 418.891969][ T911] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 420.329956][ T911] usb 4-1: device descriptor read/64, error -71 [ 420.570038][ T911] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 420.769951][ T911] usb 4-1: device descriptor read/64, error -71 [ 421.040155][ T911] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 421.076325][ T911] usb 4-1: device descriptor read/8, error -71 [ 421.346490][ T911] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 421.374351][ T911] usb 4-1: device descriptor read/8, error -71 [ 421.491018][ T52] usb 4-1: USB disconnect, device number 15 [ 421.760072][ T52] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 421.929980][ T52] usb 4-1: device descriptor read/64, error -71 [ 422.085617][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 422.264345][ T9861] netlink: 56 bytes leftover after parsing attributes in process `syz.2.916'. [ 422.996667][ T9861] netlink: 244 bytes leftover after parsing attributes in process `syz.2.916'. [ 424.196611][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 428.160066][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 429.240300][ T9] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 429.253385][ T9] usb 5-1: config 0 has no interface number 0 [ 429.289564][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 429.309914][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.352735][ T9] usb 5-1: config 0 descriptor?? [ 429.896159][ T9961] can: request_module (can-proto-0) failed. [ 430.708447][ T9983] input: syz0 as /devices/virtual/input/input25 [ 430.946208][ T30] audit: type=1400 audit(1747105006.115:578): avc: denied { read } for pid=9990 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.030064][ T9991] trusted_key: encrypted_key: key user:syz not found [ 431.560779][ T30] audit: type=1400 audit(1747105006.145:579): avc: denied { open } for pid=9990 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.620283][ T5875] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 431.680493][ T911] usb 5-1: USB disconnect, device number 17 [ 431.689714][ T30] audit: type=1400 audit(1747105006.145:580): avc: denied { getattr } for pid=9990 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.980251][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 431.992869][ T5875] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 432.080667][ T5875] usb 3-1: config 0 has no interface number 0 [ 432.126606][ T5875] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 432.182444][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.207424][ T5875] usb 3-1: Product: syz [ 432.228434][ T5875] usb 3-1: Manufacturer: syz [ 432.248744][ T5875] usb 3-1: SerialNumber: syz [ 432.295865][ T5875] usb 3-1: config 0 descriptor?? [ 432.383075][ T9962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.393923][ T5875] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 432.665083][ T9983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.751219][ T9983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.782700][ T30] audit: type=1400 audit(1747105007.945:581): avc: denied { read } for pid=9982 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 432.788167][ T5875] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 432.817560][ T30] audit: type=1400 audit(1747105007.945:582): avc: denied { write } for pid=9985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.878675][ T30] audit: type=1400 audit(1747105007.945:583): avc: denied { add_name } for pid=9985 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.890519][ T5875] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 432.932888][T10018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.974355][ T30] audit: type=1400 audit(1747105007.975:584): avc: denied { create } for pid=9985 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 433.073147][ T30] audit: type=1400 audit(1747105007.975:585): avc: denied { write } for pid=9985 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=5545 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 433.215929][ T30] audit: type=1400 audit(1747105007.975:586): avc: denied { append } for pid=9985 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5545 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 433.310922][ T30] audit: type=1400 audit(1747105008.285:587): avc: denied { remove_name } for pid=10019 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5545 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.394618][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 433.407868][ T5891] usb 3-1: USB disconnect, device number 11 [ 433.424218][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 433.450997][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 433.508511][ T5891] quatech2 3-1:0.51: device disconnected [ 433.780103][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 434.233559][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 434.250461][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 434.898678][T10038] trusted_key: encrypted_key: key user:syz not found [ 436.053317][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 436.053357][ T30] audit: type=1326 audit(1747105011.175:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 436.100061][ T30] audit: type=1326 audit(1747105011.175:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 436.131542][T10004] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 436.322221][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 436.628405][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 436.693131][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 436.699513][ T30] audit: type=1326 audit(1747105011.175:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 436.747850][ T30] audit: type=1326 audit(1747105011.175:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 436.772309][ T30] audit: type=1326 audit(1747105011.175:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 436.796267][T10004] usb 2-1: Using ep0 maxpacket: 8 [ 436.802662][ T30] audit: type=1326 audit(1747105011.175:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 436.832228][ T30] audit: type=1326 audit(1747105011.175:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 436.867307][T10004] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 436.886270][T10004] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.914711][T10004] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.924775][ T30] audit: type=1326 audit(1747105011.175:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 436.954875][T10004] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.965950][T10004] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.012170][ T30] audit: type=1326 audit(1747105011.175:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 437.052031][T10004] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.065653][T10004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.074230][ T30] audit: type=1326 audit(1747105011.175:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 437.187263][T10061] XFS (nullb0): Invalid superblock magic number [ 437.308575][T10004] usb 2-1: GET_CAPABILITIES returned 0 [ 437.316649][T10004] usbtmc 2-1:16.0: can't read capabilities [ 437.519056][T10045] FAULT_INJECTION: forcing a failure. [ 437.519056][T10045] name failslab, interval 1, probability 0, space 0, times 0 [ 437.542550][T10045] CPU: 1 UID: 0 PID: 10045 Comm: syz.1.949 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) [ 437.542580][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.542590][T10045] Call Trace: [ 437.542596][T10045] [ 437.542603][T10045] dump_stack_lvl+0x16c/0x1f0 [ 437.542632][T10045] should_fail_ex+0x512/0x640 [ 437.542661][T10045] ? fs_reclaim_acquire+0xae/0x150 [ 437.542688][T10045] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 437.542714][T10045] should_failslab+0xc2/0x120 [ 437.542733][T10045] __kmalloc_noprof+0xd2/0x510 [ 437.542757][T10045] tomoyo_realpath_from_path+0xc2/0x6e0 [ 437.542786][T10045] ? tomoyo_profile+0x47/0x60 [ 437.542807][T10045] tomoyo_path_number_perm+0x245/0x580 [ 437.542828][T10045] ? tomoyo_path_number_perm+0x237/0x580 [ 437.542853][T10045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 437.542876][T10045] ? find_held_lock+0x2b/0x80 [ 437.542926][T10045] ? find_held_lock+0x2b/0x80 [ 437.542946][T10045] ? hook_file_ioctl_common+0x145/0x410 [ 437.542970][T10045] ? __fget_files+0x20e/0x3c0 [ 437.542993][T10045] security_file_ioctl+0x9b/0x240 [ 437.543020][T10045] __x64_sys_ioctl+0xb7/0x200 [ 437.543047][T10045] do_syscall_64+0xcd/0x260 [ 437.543075][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.543093][T10045] RIP: 0033:0x7f181278e969 [ 437.543107][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.543124][T10045] RSP: 002b:00007f181368f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.543142][T10045] RAX: ffffffffffffffda RBX: 00007f18129b5fa0 RCX: 00007f181278e969 [ 437.543153][T10045] RDX: 0000000000000000 RSI: 0000000040015b13 RDI: 0000000000000004 [ 437.543162][T10045] RBP: 00007f181368f090 R08: 0000000000000000 R09: 0000000000000000 [ 437.543173][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.543182][T10045] R13: 0000000000000000 R14: 00007f18129b5fa0 R15: 00007ffc4ec87f48 [ 437.543207][T10045] [ 437.543215][T10045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.815323][ T52] usb 2-1: USB disconnect, device number 13 [ 439.722433][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.728778][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.610331][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 440.658466][T10004] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 440.863099][T10004] usb 4-1: Using ep0 maxpacket: 8 [ 440.915600][T10004] usb 4-1: unable to get BOS descriptor or descriptor too short [ 441.004701][T10004] usb 4-1: config 4 has an invalid interface number: 255 but max is 0 [ 441.086576][T10004] usb 4-1: config 4 has no interface number 0 [ 441.171966][T10004] usb 4-1: config 4 interface 255 has no altsetting 0 [ 441.269610][T10004] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 441.529690][T10129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.537059][T10004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.236598][T10004] usb 4-1: Product: syz [ 442.272715][T10004] usb 4-1: Manufacturer: syz [ 442.280104][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 442.280113][ T30] audit: type=1326 audit(1747105016.805:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 442.326272][T10004] usb 4-1: SerialNumber: syz [ 442.347912][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.963'. [ 442.382872][ T30] audit: type=1326 audit(1747105016.805:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 442.480015][ T30] audit: type=1326 audit(1747105016.805:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 442.535294][ T30] audit: type=1326 audit(1747105016.805:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 442.570284][ T30] audit: type=1326 audit(1747105016.815:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 442.601080][ T30] audit: type=1326 audit(1747105016.815:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 442.734551][ T30] audit: type=1326 audit(1747105016.815:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 442.762574][T10145] /dev/nullb0: Can't open blockdev [ 442.848303][T10150] netlink: 152 bytes leftover after parsing attributes in process `syz.1.965'. [ 443.676044][ T30] audit: type=1326 audit(1747105016.815:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 443.719046][ T30] audit: type=1326 audit(1747105016.815:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 443.755526][ T30] audit: type=1326 audit(1747105016.815:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181278e969 code=0x7ffc0000 [ 444.921776][T10004] usb 4-1: USB disconnect, device number 18 [ 447.019109][ T5891] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 447.040023][ T5905] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 447.153127][T10207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.978'. [ 447.200028][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 447.201584][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.213760][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.231800][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.247827][ T5891] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 447.253024][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 447.270532][ T5891] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 447.271679][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 447.280567][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.291019][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.311649][ T5891] usb 3-1: config 0 descriptor?? [ 447.322459][ T5891] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 447.329129][ T5891] dvb-usb: bulk message failed: -22 (3/0) [ 447.335763][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 447.350460][ T5905] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 447.421091][ T5891] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 447.511236][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.979'. [ 447.520518][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.979'. [ 447.529442][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.979'. [ 447.538663][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.979'. [ 447.559742][ T5891] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 447.632170][ T5891] usb 3-1: media controller created [ 447.717935][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.868117][ T5891] dvb-usb: bulk message failed: -22 (6/0) [ 447.958235][ T5891] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 448.075446][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 448.247764][ T5891] dvb-usb: schedule remote query interval to 150 msecs. [ 448.248983][ T5905] usb 2-1: Manufacturer: syz [ 448.262337][ T5905] usb 2-1: config 0 descriptor?? [ 448.279257][ T5891] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 448.330208][ T5875] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 448.400423][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 448.400439][ T30] audit: type=1400 audit(1747105023.565:683): avc: denied { map } for pid=10216 comm="syz.3.981" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.430513][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 448.436290][ T5891] dvb-usb: error while querying for an remote control event. [ 448.447808][ T30] audit: type=1400 audit(1747105023.565:684): avc: denied { execute } for pid=10216 comm="syz.3.981" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.490052][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 448.497117][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 448.516103][ T5875] usb 5-1: config 4 has an invalid interface number: 255 but max is 0 [ 448.533130][ T5875] usb 5-1: config 4 has no interface number 0 [ 448.540160][ T5875] usb 5-1: config 4 interface 255 has no altsetting 0 [ 448.549144][ T5875] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 448.562091][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.585180][ T5875] usb 5-1: Product: syz [ 448.589417][ T5875] usb 5-1: Manufacturer: syz [ 448.597003][ T5875] usb 5-1: SerialNumber: syz [ 448.601863][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 448.607829][ T5891] dvb-usb: error while querying for an remote control event. [ 448.636650][T10217] netlink: 43 bytes leftover after parsing attributes in process `syz.3.981'. [ 448.652363][ T5905] rc_core: IR keymap rc-hauppauge not found [ 448.658619][ T5905] Registered IR keymap rc-empty [ 448.664169][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.672259][ T5891] usb 3-1: USB disconnect, device number 12 [ 448.690802][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.695032][ T5891] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 448.714872][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 448.729517][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 448.744567][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.779984][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.800043][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.819946][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.839955][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.860011][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.879975][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.900069][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.919943][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.952152][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.983797][ T5905] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 449.003715][ T5905] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 449.204480][ T5905] usb 2-1: USB disconnect, device number 14 [ 449.373909][ T30] audit: type=1400 audit(1747105024.535:685): avc: denied { create } for pid=10225 comm="syz.2.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 450.535628][ T30] audit: type=1400 audit(1747105025.705:686): avc: denied { create } for pid=10233 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 450.870582][T10239] overlayfs: failed to resolve './file1': -2 [ 450.942228][T10240] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 451.469942][ T30] audit: type=1326 audit(1747105025.895:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 451.544451][ T30] audit: type=1326 audit(1747105025.895:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 451.653651][ T30] audit: type=1326 audit(1747105025.895:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 451.710147][ T30] audit: type=1326 audit(1747105025.895:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 451.739287][ T30] audit: type=1326 audit(1747105025.895:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 451.754326][T10247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.988'. [ 451.768469][ T30] audit: type=1326 audit(1747105025.895:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bc4d8e969 code=0x7ffc0000 [ 452.131017][ T5875] usb 5-1: USB disconnect, device number 18 [ 452.244820][T10258] netlink: 'syz.2.989': attribute type 5 has an invalid length. [ 452.529236][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.991'. [ 453.546706][T10271] 9pnet_fd: Insufficient options for proto=fd [ 454.236614][T10268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.728716][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 455.728734][ T30] audit: type=1400 audit(1747105030.895:722): avc: denied { name_connect } for pid=10278 comm="syz.1.995" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 455.767665][T10279] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 501.162017][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.168330][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.593874][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.600742][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.830034][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 588.837556][ T31] Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 [ 588.845265][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.854154][ T31] task:kworker/0:0 state:D stack:23064 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 588.868558][ T31] Workqueue: events rfkill_op_handler [ 588.874035][ T31] Call Trace: [ 588.877306][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 588.880309][ T31] __schedule+0x116f/0x5de0 [ 588.884945][ T31] ? __pfx___schedule+0x10/0x10 [ 588.890398][ T31] ? find_held_lock+0x2b/0x80 [ 588.895110][ T31] ? schedule+0x2d7/0x3a0 [ 588.901817][ T31] schedule+0xe7/0x3a0 [ 588.929926][ T31] schedule_preempt_disabled+0x13/0x30 [ 588.935443][ T31] __mutex_lock+0x6c7/0xb90 [ 588.961459][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 588.966125][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 588.971614][ T31] ? kfree+0x2b6/0x4d0 [ 588.975703][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 588.980872][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 588.985478][ T31] ? mark_held_locks+0x49/0x80 [ 588.990457][ T31] nfc_dev_down+0x2d/0x2e0 [ 588.994881][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 589.000220][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 589.005946][ T31] rfkill_set_block+0x1fe/0x550 [ 589.010963][ T31] rfkill_epo+0x8e/0x1d0 [ 589.015206][ T31] rfkill_op_handler+0x262/0x280 [ 589.020244][ T31] process_one_work+0x9cf/0x1b70 [ 589.025198][ T31] ? __pfx_process_one_work+0x10/0x10 [ 589.030896][ T31] ? assign_work+0x1a0/0x250 [ 589.035496][ T31] worker_thread+0x6c8/0xf10 [ 589.040159][ T31] ? __pfx_worker_thread+0x10/0x10 [ 589.045264][ T31] kthread+0x3c2/0x780 [ 589.049311][ T31] ? __pfx_kthread+0x10/0x10 [ 589.053929][ T31] ? __pfx_kthread+0x10/0x10 [ 589.058512][ T31] ? __pfx_kthread+0x10/0x10 [ 589.063425][ T31] ? __pfx_kthread+0x10/0x10 [ 589.068029][ T31] ? rcu_is_watching+0x12/0xc0 [ 589.072954][ T31] ? __pfx_kthread+0x10/0x10 [ 589.077715][ T31] ret_from_fork+0x45/0x80 [ 589.082180][ T31] ? __pfx_kthread+0x10/0x10 [ 589.086766][ T31] ret_from_fork_asm+0x1a/0x30 [ 589.091800][ T31] [ 589.094898][ T31] INFO: task kworker/0:5:5890 blocked for more than 143 seconds. [ 589.102687][ T31] Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 [ 589.110379][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.119050][ T31] task:kworker/0:5 state:D stack:23048 pid:5890 tgid:5890 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 589.131454][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 589.138152][ T31] Call Trace: [ 589.141480][ T31] [ 589.144427][ T31] __schedule+0x116f/0x5de0 [ 589.148915][ T31] ? find_held_lock+0x2b/0x80 [ 589.153651][ T31] ? __pfx___schedule+0x10/0x10 [ 589.158514][ T31] ? find_held_lock+0x2b/0x80 [ 589.163431][ T31] ? schedule+0x2d7/0x3a0 [ 589.167749][ T31] schedule+0xe7/0x3a0 [ 589.171860][ T31] schedule_preempt_disabled+0x13/0x30 [ 589.177316][ T31] __mutex_lock+0x6c7/0xb90 [ 589.181874][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 589.186816][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 589.193393][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 589.198405][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 589.204250][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 589.210646][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 589.216811][ T31] process_one_work+0x9cf/0x1b70 [ 589.222034][ T31] ? __pfx_process_one_work+0x10/0x10 [ 589.227406][ T31] ? assign_work+0x1a0/0x250 [ 589.232026][ T31] worker_thread+0x6c8/0xf10 [ 589.236614][ T31] ? __kthread_parkme+0x19e/0x250 [ 589.241819][ T31] ? __pfx_worker_thread+0x10/0x10 [ 589.246944][ T31] kthread+0x3c2/0x780 [ 589.251338][ T31] ? __pfx_kthread+0x10/0x10 [ 589.255934][ T31] ? __pfx_kthread+0x10/0x10 [ 589.260584][ T31] ? __pfx_kthread+0x10/0x10 [ 589.265165][ T31] ? __pfx_kthread+0x10/0x10 [ 589.269746][ T31] ? rcu_is_watching+0x12/0xc0 [ 589.274567][ T31] ? __pfx_kthread+0x10/0x10 [ 589.279146][ T31] ret_from_fork+0x45/0x80 [ 589.283846][ T31] ? __pfx_kthread+0x10/0x10 [ 589.288418][ T31] ret_from_fork_asm+0x1a/0x30 [ 589.293240][ T31] [ 589.296262][ T31] INFO: task syz.0.935:9958 blocked for more than 143 seconds. [ 589.305748][ T31] Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 [ 589.313573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.322253][ T31] task:syz.0.935 state:D stack:24760 pid:9958 tgid:9958 ppid:5812 task_flags:0x400040 flags:0x00004006 [ 589.334208][ T31] Call Trace: [ 589.337484][ T31] [ 589.340675][ T31] __schedule+0x116f/0x5de0 [ 589.345179][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 589.350311][ T31] ? __pfx___schedule+0x10/0x10 [ 589.355167][ T31] ? find_held_lock+0x2b/0x80 [ 589.359873][ T31] ? schedule+0x2d7/0x3a0 [ 589.364237][ T31] schedule+0xe7/0x3a0 [ 589.368311][ T31] schedule_preempt_disabled+0x13/0x30 [ 589.374066][ T31] __mutex_lock+0x6c7/0xb90 [ 589.378597][ T31] ? rfkill_unregister+0xec/0x2c0 [ 589.383639][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 589.388651][ T31] ? device_del+0x6b6/0x9f0 [ 589.393187][ T31] ? __pfx_device_del+0x10/0x10 [ 589.398034][ T31] ? rfkill_unregister+0xec/0x2c0 [ 589.403358][ T31] rfkill_unregister+0xec/0x2c0 [ 589.408217][ T31] nfc_unregister_device+0x94/0x330 [ 589.413468][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 589.419195][ T31] virtual_ncidev_close+0x4b/0xa0 [ 589.424272][ T31] __fput+0x3ff/0xb70 [ 589.428255][ T31] task_work_run+0x150/0x240 [ 589.433109][ T31] ? __pfx_task_work_run+0x10/0x10 [ 589.438201][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 589.443932][ T31] ? rcu_is_watching+0x12/0xc0 [ 589.448695][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 589.454373][ T31] do_syscall_64+0xda/0x260 [ 589.458879][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.465087][ T31] RIP: 0033:0x7f6ac738e969 [ 589.469491][ T31] RSP: 002b:00007ffe41842bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 589.477964][ T31] RAX: 0000000000000000 RBX: 00007f6ac75b7ba0 RCX: 00007f6ac738e969 [ 589.485973][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 589.494281][ T31] RBP: 00007f6ac75b7ba0 R08: 0000000000001af0 R09: 0000001d41842eaf [ 589.502285][ T31] R10: 00007f6ac75b7ac0 R11: 0000000000000246 R12: 0000000000069280 [ 589.510326][ T31] R13: 00007f6ac75b6320 R14: ffffffffffffffff R15: 00007ffe41842cd0 [ 589.518320][ T31] [ 589.521675][ T31] [ 589.521675][ T31] Showing all locks held in the system: [ 589.529378][ T31] 4 locks held by kworker/0:0/9: [ 589.536728][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 589.547206][ T31] #1: ffffc900000e7d18 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 589.557823][ T31] #2: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 589.567346][ T31] #3: ffff888031ceb100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 589.576432][ T31] 1 lock held by khungtaskd/31: [ 589.581518][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 589.591419][ T31] 2 locks held by kworker/u8:9/5060: [ 589.596707][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 589.606711][ T31] #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 589.618334][ T31] 2 locks held by getty/5573: [ 589.623032][ T31] #0: ffff88803297a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 589.632829][ T31] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 589.643242][ T31] 3 locks held by kworker/0:5/5890: [ 589.648434][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 589.658945][ T31] #1: ffffc9000546fd18 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 589.672046][ T31] #2: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 589.683599][ T31] 2 locks held by kworker/u8:11/7296: [ 589.688961][ T31] #0: ffff888147682148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 589.699630][ T31] #1: ffffc9000e2e7d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 589.711345][ T31] 2 locks held by syz.0.935/9958: [ 589.716366][ T31] #0: ffff888031ceb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 589.726257][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 589.736407][ T31] 2 locks held by syz-executor/10191: [ 589.742053][ T31] #0: ffff88804649d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 589.751527][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 589.761501][ T31] 3 locks held by syz.2.989/10252: [ 589.766597][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.775306][ T31] #1: ffff88807ff4f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 589.784913][ T31] #2: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 589.795020][ T31] 1 lock held by syz.2.989/10256: [ 589.800297][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.808788][ T31] 1 lock held by syz.2.989/10257: [ 589.813855][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.822331][ T31] 1 lock held by syz.4.990/10260: [ 589.827330][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.836045][ T31] 1 lock held by syz.1.998/10287: [ 589.841108][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.849575][ T31] 1 lock held by syz.3.999/10293: [ 589.854629][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.863266][ T31] 1 lock held by syz-executor/10296: [ 589.868533][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.877038][ T31] 1 lock held by syz-executor/10298: [ 589.882347][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.891150][ T31] 1 lock held by syz-executor/10300: [ 589.896434][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.905020][ T31] 1 lock held by syz-executor/10302: [ 589.910330][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.918783][ T31] 1 lock held by syz-executor/10308: [ 589.924325][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.932841][ T31] 1 lock held by syz-executor/10310: [ 589.938119][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.946621][ T31] 1 lock held by syz-executor/10312: [ 589.952628][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.962551][ T31] 1 lock held by syz-executor/10314: [ 589.967830][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.976315][ T31] 1 lock held by syz-executor/10316: [ 589.981905][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 589.990420][ T31] 1 lock held by syz-executor/10322: [ 589.995694][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 590.004153][ T31] 1 lock held by syz-executor/10324: [ 590.009427][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 590.018224][ T31] 1 lock held by syz-executor/10326: [ 590.023557][ T31] #0: ffffffff8f0e1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 590.032129][ T31] [ 590.034444][ T31] ============================================= [ 590.034444][ T31] [ 590.043145][ T31] NMI backtrace for cpu 0 [ 590.043158][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) [ 590.043178][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.043188][ T31] Call Trace: [ 590.043194][ T31] [ 590.043200][ T31] dump_stack_lvl+0x116/0x1f0 [ 590.043229][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 590.043249][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 590.043268][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 590.043290][ T31] watchdog+0xf70/0x12c0 [ 590.043313][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.043328][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.043351][ T31] ? __kthread_parkme+0x19e/0x250 [ 590.043379][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.043396][ T31] kthread+0x3c2/0x780 [ 590.043414][ T31] ? __pfx_kthread+0x10/0x10 [ 590.043429][ T31] ? __pfx_kthread+0x10/0x10 [ 590.043444][ T31] ? __pfx_kthread+0x10/0x10 [ 590.043461][ T31] ? __pfx_kthread+0x10/0x10 [ 590.043476][ T31] ? rcu_is_watching+0x12/0xc0 [ 590.043498][ T31] ? __pfx_kthread+0x10/0x10 [ 590.043515][ T31] ret_from_fork+0x45/0x80 [ 590.043532][ T31] ? __pfx_kthread+0x10/0x10 [ 590.043549][ T31] ret_from_fork_asm+0x1a/0x30 [ 590.043594][ T31] [ 590.043601][ T31] Sending NMI from CPU 0 to CPUs 1: [ 590.175780][ C1] NMI backtrace for cpu 1 [ 590.175798][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) [ 590.175822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.175831][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 590.175854][ C1] Code: 05 62 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 ef 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 590.175868][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 590.175880][ C1] RAX: 00000000025a8643 RBX: 0000000000000001 RCX: ffffffff8b6d0419 [ 590.175888][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe2848 RDI: ffffffff8bf48920 [ 590.175897][ C1] RBP: ffffed1003b5b488 R08: 0000000000000001 R09: ffffed10170a65bd [ 590.175905][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 590.175913][ C1] R13: ffff88801dada440 R14: ffffffff9084ff10 R15: 0000000000000000 [ 590.175922][ C1] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 590.175936][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.175945][ C1] CR2: 000055c63d30ab48 CR3: 000000000e180000 CR4: 00000000003526f0 [ 590.175953][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 590.175960][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 590.175969][ C1] Call Trace: [ 590.175974][ C1] [ 590.175979][ C1] default_idle+0x13/0x20 [ 590.175998][ C1] default_idle_call+0x6d/0xb0 [ 590.176009][ C1] do_idle+0x391/0x510 [ 590.176028][ C1] ? __pfx_do_idle+0x10/0x10 [ 590.176043][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 590.176063][ C1] cpu_startup_entry+0x4f/0x60 [ 590.176078][ C1] start_secondary+0x21d/0x2b0 [ 590.176091][ C1] ? __pfx_start_secondary+0x10/0x10 [ 590.176105][ C1] common_startup_64+0x13e/0x148 [ 590.176125][ C1] [ 590.176810][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 590.371485][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) [ 590.383276][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.393316][ T31] Call Trace: [ 590.396580][ T31] [ 590.399499][ T31] dump_stack_lvl+0x3d/0x1f0 [ 590.404085][ T31] panic+0x71c/0x800 [ 590.407974][ T31] ? __pfx_panic+0x10/0x10 [ 590.412382][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 590.417742][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 590.423707][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 590.429065][ T31] ? watchdog+0xdda/0x12c0 [ 590.433489][ T31] ? watchdog+0xdcd/0x12c0 [ 590.437891][ T31] watchdog+0xdeb/0x12c0 [ 590.442122][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.446783][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.451972][ T31] ? __kthread_parkme+0x19e/0x250 [ 590.456998][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.461684][ T31] kthread+0x3c2/0x780 [ 590.465741][ T31] ? __pfx_kthread+0x10/0x10 [ 590.470314][ T31] ? __pfx_kthread+0x10/0x10 [ 590.474885][ T31] ? __pfx_kthread+0x10/0x10 [ 590.479458][ T31] ? __pfx_kthread+0x10/0x10 [ 590.484035][ T31] ? rcu_is_watching+0x12/0xc0 [ 590.488787][ T31] ? __pfx_kthread+0x10/0x10 [ 590.493363][ T31] ret_from_fork+0x45/0x80 [ 590.497782][ T31] ? __pfx_kthread+0x10/0x10 [ 590.502357][ T31] ret_from_fork_asm+0x1a/0x30 [ 590.507122][ T31] [ 590.510349][ T31] Kernel Offset: disabled [ 590.514654][ T31] Rebooting in 86400 seconds..