last executing test programs: 28.649014992s ago: executing program 0 (id=342): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x3304, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000500b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r6, 0x2000000, 0x18, 0x0, &(0x7f0000000040)="0990ddc84839db92", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xcc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r8 = fanotify_init(0x0, 0x400) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r8, 0x1, 0x40001019, r7, 0x0) read$FUSE(r7, &(0x7f0000003fc0)={0x2020}, 0x1d34) 27.235160374s ago: executing program 0 (id=349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x20000080) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x103340, 0x0) mount(0x0, &(0x7f0000004a00)='./file1\x00', 0x0, 0x8007, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) 25.310581161s ago: executing program 0 (id=354): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1, 0x0, 0x3000000, @void, @value}, 0x20) socket$inet6(0xa, 0x3, 0xff) 23.882291457s ago: executing program 0 (id=358): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fdf, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000280)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) 21.935804249s ago: executing program 0 (id=363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000080ff00000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"], 0xfc}}, 0x0) 20.624350901s ago: executing program 0 (id=366): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES32=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x875, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xcc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r9 = fanotify_init(0x0, 0x400) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) 6.903259603s ago: executing program 4 (id=401): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth1_to_bond\x00', 0x0}) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000680), 0x3a1900, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x2000, r1}, 0x14) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200000000d103abaff2cc10a1c620b5fd68e18c6e4faa15171c8949002c8e68ceb3ecd2d1524e274f750be891b90f5beddda06bdc3e0882ac11b1ec2aa52801a93594d62771a4e954626edbfa8fa5e066b51f763726d570e65ac8135565a73b44c55d58a920ada9c6cb4a13c5e11dc830b227f87a208f4335c07ea9790938a6b9f4c77ca103b1abcd5cb55e3e94a2f022ae194c51a7dceb4d6ce28cf893350cc951a5d703968059abf932c8c048dbe80e11007de8ae659c160464b0443def7151296d129477a0582d0c41ee1a82ecdfa10781ce6a8f", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186200000f0000000000000000020000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x200, 0x8, &(0x7f00000000c0)=""/8, 0x41100, 0x4d, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000006c0)={0x100006, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x39, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r6, r7, 0xffffffffffffffff], 0x0, 0x10, 0xfaf, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f00000008c0)=@framed={{}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 5.958669454s ago: executing program 2 (id=405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xfffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x40, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x100000000, 0x800) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000140)={0x97a1, 0x1b, [{0xd, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0xd, 0x1}, {0x1, 0x1}, {0xf, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x1}, {0x8, 0x1}, {0x4, 0x1}, {0xe, 0x1}, {0xa}, {0x9}, {0x4}, {0xf, 0x1}, {0x2}, {0xe}, {0x3, 0x1}, {0xa, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}]}) 5.903919106s ago: executing program 4 (id=406): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = memfd_create(&(0x7f0000000000)='-\'#{\\\x00', 0x0) cachestat(r1, &(0x7f0000000040), 0x0, 0x2) r2 = timerfd_create(0x7, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f00000001c0)={[0xffff1000, 0x3000, 0xdddd0000, 0xd000], 0x7f, 0x81, 0x18}) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) io_uring_enter(0xffffffffffffffff, 0x2772, 0xa98d, 0xcc444838540641c2, 0x0, 0x3d) 5.782444276s ago: executing program 2 (id=407): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x22b14000) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x22b14000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000220000000a000100af4a831fea2a"], 0x20}}, 0x4000000) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0xfdef}}, 0x0) 5.565542874s ago: executing program 32 (id=366): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES32=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x875, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xcc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r9 = fanotify_init(0x0, 0x400) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) 5.523603229s ago: executing program 2 (id=409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000ac0)='./file0\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x40, 0x5, 0x98, {0x98, 0x23, "bc4b16c37d1d7bf3f0a64f9337ef269fb58ad9cf286a6fa1b34f5bc16de8cee5977f086d8a1163a614aaa5a8dbb0f1ce5bb76b54f06a62fc9e65215350c42d667e2599f67092e47aca3f54743b217c0dc3e826465723e710487b4000cc900e3aee6a37291dfaafbcb1953e42d06d31403afc7806d20a9a41dbbc977f587dfa2e12507eea11d7fe2a4cd6ea88912cec113394386b6819"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000780)={0x20, 0xf, 0x95, "1e2cfc0a0d2c49a917b59ca2e33b95f1e030e35fd3a71af922e3c8c9f6929432389e831a0e526cf54bce62a3b7f3c99c999c9c110a88af59ecc964fd1440a634a9fa739058aac6bc4b5ccec33d3ccecde9b1197bfe5d27b0f04de9eea1ccb8017b4883176df2055e87164367926793d2c7cc21da79b3b90af7df6eb530e52c4c9c5c1e30187d8d292666a0c2fbc214b1410d8d6021"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000900)={0x20, 0x81, 0x3, "d4e659"}, &(0x7f0000000940)={0x20, 0x82, 0x2, 'i\''}, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)={0x20, 0x84, 0x3, "d31c90"}, &(0x7f0000000a00)={0x20, 0x85, 0x3, "bea3ae"}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5.317969766s ago: executing program 4 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}]}, 0x50}}, 0x0) 5.207555542s ago: executing program 4 (id=411): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040a306210600000000000109022400"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x8}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x4, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, 0x0, 0x20000000, 0x2}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000012000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 5.127668964s ago: executing program 1 (id=412): chdir(&(0x7f0000000480)='./cgroup\x00') getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/46, 0x2e) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x100, 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2020) write(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) 4.597368499s ago: executing program 3 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = memfd_create(&(0x7f00000003c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb\x00\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6gmH\xbf\x9c\xd3\x94\x9a\x96\xe1n\x98\xb2\xdcq\xab\xd40\x86\xf5\xea\"\x9f\xd7\x01:\x1f\xfa\x04\xc6J\xe1|\xad\xef\xc2\xdf\x96\xe9|\xa4.\xa2\xdb?', 0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x2012, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x20000804) 4.596393196s ago: executing program 1 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x20000804) (fail_nth: 4) 4.204523209s ago: executing program 1 (id=415): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0x0) 3.347170001s ago: executing program 3 (id=416): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001040)={0x4, 0x2, 0x4, 0x0, 0x40}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r7, 0x541c, &(0x7f0000000200)={0x5, 0x8, 0x4, 0x4, 0x1b27}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r8, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x6ec, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x6ce, 0x96, 0x0, 0x1, [@generic="e9084a7fcda26262f04d1f7e6af680e537882b0d499bdf701a2da5642b62f3c0b5411559578a221ae2d02ec22c07c266df0e9a0463a2ceb8deacfd10ecf3a43ebbd7da3f33e9c958c760dfd26651be9655a8cbd7bf0c3e83bab369213e20b95aa2dfd46082a4d97a36af3b47beb863ae8defc2b1e13f59d93cffd42a49f20b53861f918860473eae6953e74e3977514bb793d57a08c78137fccfcc144cc138db591507ca40dda7384e84b35ff0e52ba241f5a0e548de620cecf55cb5ff8e5f5ec203582b930167f0890eea60885a3fdeb65d09d0b91cca3934dc984ba5be7a6280c78d39c3fcc9eeb6071dadbd75c497b96df9c4", @typed={0xb, 0xe7, 0x0, 0x0, @str='#&{(^@\x00'}, @nested={0x1a2, 0xe0, 0x0, 0x1, [@generic="3c2f7ad74ac189094a7d44e055a473f433df1107cc6e13a289e762b96d43b6aca928bfb2de2896d994d2128ac0b0abaa31da3b98783b9cead633882b8fe38c925e3f52c5eeb534c4eab1664744d8dcc35277a12df54a4ff7b54ffe9e00f63130767ceb4f496e4ae7be00859237b44fcde69238bcab097b2e91525c2527c6650372945acc17dd7ce062e9d791ac1640e97397655c562eac57c225ada8e161be3a209d578de221371992983616c0", @generic="98a1b3aa5a09a88b7e393cdf7444b1c800e06f0b8d186a9d9f63c800af803c734c99fb7f9791781e090e07fa3e1592fce35d965fb9b4d3f6d74f27d573856d3df83b10de813d313749d5f72530689094abe6f297dc2b605f9743c75e04567afd4899a59b251c0386692969a91a37db9c415eb0ab747c58c0c8b34ce7f954c58378fe70c992e10fabee89bc1bd43f7d4d0d93ca89b7f7a5936abb6b11569c2d2871cf5a806a52e097b8aa66a85c9d2f66e66c5a715bb87657ba1c2e0d39045ad4ff2e5a974c5a5b3e8cfdbb5c6c77e739963e5a999c7d6fccec28a705f1fe857141f54e0e36381b9c99", @typed={0x4, 0x112}, @nested={0x4, 0xed}]}, @nested={0x313, 0x12, 0x0, 0x1, [@generic="a84320dccaf1cfb5ee4d794938dd3ed7a2652cd67bbddd087ac0191a85e87f32f7825e4aab4ffc9b235e715fef4a8bbb6eb3615535122b2d9f186ea4e9c41ec8e1c68c76288c542f0022ac5fe41acf3027d11fd9f9c38fec3e1a76c6364fadb8d3da784b00e2d6a3df5185c035b42fdd1f0f864ba2bc033eed723ae3226b875eaeb00065bd2d888a37c3ab722252332ab8f3", @nested={0x4, 0x62}, @generic="41f45c2b14fd8bbc4dd0926245f87326e06e5a003e1dd59c51f0b104fcbee039bfe334ef109e877b0d18221913d2d7d3d438684500755337e87e91e4b194ba3dc36bfd054dff04d08f41d1eb5d641bc35fe796a2b4b910b3949dc3b97a7e4a23c5adf4292aaa78560af8151ea26004b7100ed7d57338f018951af1bf0ea405f41c5482c716ad0c6af3496434b17fe13eaedf4f4483f854305e5a5d7f0eb67d2cadf38846", @nested={0x4, 0x102}, @nested={0x4, 0x3c}, @generic="cef0a8e79bc57083a1fa731028b16610c2b6e73e31f2e38752fb20ec36dc34e357956de4b116e7d673773088ab2a6b75f400ecc58fe6fad65ce25df11acb6e9164ba2f5f8b178be436a9d6be05089303fd88cbc1447ac5547da7a6f3286dd3c1f6a3e8a2392f23b38a04cef116732a026d87731acf8e2379ccb95cbb8a652faddd5b8fca7accd3016c86aad415", @generic="0b14258fa402b5b0b4a8616ebfa8b757b7d6767bd63f51bee3c749b8ef72c2e7d515977d20eb8027e607e5cdf231ac5dfdf9a0347fdbc4fe1b3ee1171b8c33b55db23c2d38f11b84a26471778c2e27237f9479dd9b440ab53796bfc4a158f07ae80de039181dad2c19e1f51b3a06aff81c5e26c76b92480fb782bdefe65a135b6b0dc84a4dc89cec407f02edd042cbecf841e8dfc08f3d8fd64f97444ba83b242ee251dc97136b1ce99ea5cfa11acf553a12c9", @typed={0x8, 0xad, 0x0, 0x0, @pid=r5}, @generic="a7c59514d87ccfca52aa419f9cbdc5c637544a8544ae2e0975268108b2c07ac56f8e42bb6450574d6ef5e622cbd0f3e0a65544937e35d75200118547be1a3a1ed3d311b61e7ffeef59b05619ecd016b23c71f5320122edafcbdeb7e5d6d67e6e9480183969f36e81c80fd57ab210fb1faf6214fdef0b447e34d0cdd99dc5db395252265fa9"]}, @generic="a72a3e3f1b8973f4b349778c8c3e43f361743df9c4c6ea2b5c875bd36ec40bd28d2e424858a46febed3159a80ffcd36e349f41058100d018d8e1a669b8605f291ccd15de49f8aa734c5105f44bce37efc82f051336e307aef1a1cab6f1a15b904464dd0df669bba19b57522b27e9593b3a3ad1e2102a", @nested={0x9a, 0xc0, 0x0, 0x1, [@nested={0x4, 0x2a}, @typed={0x48, 0xc0, 0x0, 0x0, @binary="18c2584080627992859ee20a321e9996ee3d9f17eee6cfc64b4d5abb7608c6a64fc304465e5fedc63c0c2f70115f49fe70c7aa9117beb282fb7725719b93b124945ae364"}, @typed={0x8, 0xb0, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x19}, @typed={0x8, 0xce, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x113}, @generic="6bfe31f0f805446c5eca56bede23245b66dd6f2444d6760d79714a5bece4469f56b6296cce4db235bd59"]}]}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x1}]}, 0x6ec}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x0, 0xce) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x4c, r2, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x228c755bd72ca5cf}, 0x0) 2.950377406s ago: executing program 3 (id=417): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth1_to_bond\x00', 0x0}) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000680), 0x3a1900, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x2000, r1}, 0x14) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200000000d103abaff2cc10a1c620b5fd68e18c6e4faa15171c8949002c8e68ceb3ecd2d1524e274f750be891b90f5beddda06bdc3e0882ac11b1ec2aa52801a93594d62771a4e954626edbfa8fa5e066b51f763726d570e65ac8135565a73b44c55d58a920ada9c6cb4a13c5e11dc830b227f87a208f4335c07ea9790938a6b9f4c77ca103b1abcd5cb55e3e94a2f022ae194c51a7dceb4d6ce28cf893350cc951a5d703968059abf932c8c048dbe80e11007de8ae659c160464b0443def7151296d129477a0582d0c41ee1a82ecdfa10781ce6a8f", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186200000f0000000000000000020000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x200, 0x8, &(0x7f00000000c0)=""/8, 0x41100, 0x4d, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000006c0)={0x100006, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x39, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r6, r7, 0xffffffffffffffff], 0x0, 0x10, 0xfaf, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f00000008c0)=@framed={{}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 2.172057767s ago: executing program 1 (id=418): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.170533962s ago: executing program 2 (id=419): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000080)={0x16, 0x25, 0xc, 0xc, 0xa, 0x4, 0x0, 0x28}) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @mcast1, @private1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000600)={0x10, 0x21, 0x200, 0x70bd2c, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000001100)=[@rights={{0x10}}], 0x10, 0x20000000}, 0x4) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc208ae62, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00']) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x4, 'lblcr\x00', 0x1, 0x4, 0x3}, 0x2c) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x80, 0x0, 0x52, &(0x7f0000000a80)}}], 0x1, 0x0) 2.055608715s ago: executing program 4 (id=420): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0fd883178a0e86e01ed2e42d3d7c52bfc7ec7197ab02e459c5568a3d3f2710f73d7569b66a2bca9f1512e12d4ea979e6736cc8d7a3a0eca9fa2dcf186223764d934aaa15b88a80f34e736a4d85cb83d46f6dbded9947f91100935dca2be7fd9e026972b323250bc85f1bd10f40fd0558e82343ad5644710f79"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) open(0x0, 0x143c62, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0xc84c8, &(0x7f0000000300)='trans=rdma,') write$sysctl(r5, 0x0, 0x0) open(0x0, 0xec902, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r6) 2.031233238s ago: executing program 3 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000025000/0x1000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x140003, 0x0, [0x4e, 0x0, 0x1, 0x0, 0x0, 0x6, 0x7, 0x2000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 504.608093ms ago: executing program 3 (id=422): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x4004550d, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe000202b}) 407.624158ms ago: executing program 4 (id=423): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4e088163e2ac02d8", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2501000000140006006970766c616e3000000000000000000014000200200100000000000000000000000000002000070073797374656d5f753a6f626a6563745f723a626f6f745f743a73300008000500ac1414aa140006007866726d30000000000000000000000008000500e000000114000300ff0100000000000000000000000000011400020000000000000000000000ffffac1414bb"], 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ptrace(0x4206, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'xfrm0\x00', &(0x7f0000000180)=@ethtool_wolinfo={0x5, 0x0, 0x0, "0bbc84a2a4a0"}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x52}, &(0x7f00000001c0)=0x9c) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010001e0000000000000000000000000a40000000060a010400000000000000000206000000000000000001800b00010064796e7365740000180002000900010073797a30000000000800044000000000140000001100010000000000000000040000000a"], 0x68}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r8], 0x44}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) socket(0x28, 0x3, 0xdaef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="8127820000001a00000000000000000079d80e2b35495636325d352f549f5881badf24f483f6764c9f890617d9a4ff4b7619654ba75b4f0a4aaafdbfdddfeb5a520b6674e7df78ee48380b24f4beaf0b0a388c69f6e2925912e8acf88a3975e8850678339ebd8019fae264df3ef880cba9c779"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 376.142573ms ago: executing program 2 (id=424): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@empty, @multicast1, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x6, 0x7f, 0xffff, 0x0, 0x1, 0x40800001, r1}) (async) r2 = socket$packet(0x11, 0x1, 0x300) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000140)={"418d5e6c2d4b068cdef1495b10ef628ab130482ce2a5fac3a00867990ec080f8", r0, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"215019aee821c632924ef8ac6db6364cec2ebca0d37a08df194d59983cd746cb", r0}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/34, &(0x7f0000000200)=0x22) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240)=0xa, 0x4) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0)=0x80, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000300)) (async) getpeername$l2tp(r0, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x43, "bf93677dc295adddd3d2db2e7ae7c8b9d2972da95c31ad8f9003400af013ed4538b99e79125a83980639517c10feaea77373705fdb2af6759fc0a6fba19277b18fb623"}, &(0x7f0000000440)=0x4b) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={r4, 0xf11b}, &(0x7f00000004c0)=0x8) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r5) (async) sendto$rose(r3, &(0x7f00000005c0)="0dba25004e6dc7c05e54a8261903346938e297bf49c709c4f099f7ea49516b9cbf62275e3665cf0fc145c2da44130032f7e5f83d3dc8057fd3edafab14d0d7c726e35ad166bededed461d7ab7ad026d53221d088d48522238b710b1d103525ceb2bd8afb3b91dea47cb2e0049cbddc79cf7447941f1899ac811205f68c9d0dfb136d4498b3cf92f0039d35b9fc8d397af5bc99f9369b34ebe1b7c41a3af4d3a969423c218d42930a7f8e915a0a7afdf37bbb5d8c0766d1b7074cbc5d6701508e0b5d531c5a4b39bac04a50ab8e4bf830a0b0f3a84dce43f58eb490f60d4f5579", 0xe0, 0xc000, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000780)=@attr_other={0x0, 0x9, 0x3, &(0x7f0000000740)=0xc00000000000000}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000007c0)={0x11}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000800)=[r2], 0x1) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r5) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async) write$binfmt_script(r0, &(0x7f0000000980)={'#! ', './file0', [{0x20, '@-'}, {0x20, 'nfc\x00'}, {0x20, 'nfc\x00'}], 0xa, "782fcf4b61b1f0f58ff94d28c712413c28cc027bdf6d901687158dbb5dec28badee67cd01ac139c5e58cac979421a0c17ffc8d4f48b12457363a962afe97bdc528fa592b3a49af17862249258c534cb62679c46b96b0140f87bc6c3984013c670dd62dd2312bcdd8b849616a19cbbea3fed29c6326c2d331"}, 0x90) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, 0x0, 0x4000000) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r5) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x88c) (async) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000b80)=0x800) 154.194326ms ago: executing program 1 (id=425): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x800000, {0x0, 0x0, 0x0, r1, 0x8, 0x20001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x50}, 0x1, 0x2, 0x0, 0x4000}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) lseek(r3, 0x4, 0x1) r4 = dup(r2) ioctl$BLKRRPART(r4, 0x125f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}], &(0x7f00000001c0)=[0x5], 0x1}, 0x20) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r5, &(0x7f0000000100)='totmaps\x00') 35.402389ms ago: executing program 2 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x54, r1, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='numa_maps\x00') read$FUSE(r2, &(0x7f0000006280)={0x2020}, 0x2020) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/155, 0x9b}], 0x1, 0x0, 0x0) read$FUSE(r2, &(0x7f000000a300)={0x2020}, 0x2020) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4180) write$P9_RVERSION(r4, 0x0, 0x15) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x48, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xf0ba}}) io_uring_enter(r5, 0x5b67, 0x0, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08371b0c"], 0xb) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x418402, 0x1) 34.979693ms ago: executing program 3 (id=427): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "e0f493"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}]}]}, 0x50}}, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r2, 0x0, 0xd7cc5d556c3ede87) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1485544, &(0x7f00000001c0)) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000002200), 0x10) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) modify_ldt$write(0x1, &(0x7f0000000040)={0x81, 0x100000, 0xddf2bbd9eac040a5, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}}, 0x40000) 0s ago: executing program 1 (id=428): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x40000) kernel console output (not intermixed with test programs): a:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.715933][ T5905] loop9: detected capacity change from 0 to 8 [ 57.739007][ T5905] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 57.744615][ T5905] loop9: partition table partially beyond EOD, truncated [ 57.753010][ T5905] loop9: p1 size 81768186 extends beyond EOD, truncated [ 57.774181][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.035210][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.064330][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.076123][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.087544][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.101024][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.118221][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.137086][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.150877][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.160903][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.178745][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.228394][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.228418][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.228433][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.228442][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.228453][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.229352][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.265093][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.314769][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.324520][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.324614][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.324641][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.324668][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.493794][ T5832] Bluetooth: hci0: command tx timeout [ 58.733291][ T5832] Bluetooth: hci4: command tx timeout [ 58.733342][ T5832] Bluetooth: hci2: command tx timeout [ 58.733371][ T5832] Bluetooth: hci1: command tx timeout [ 58.733423][ T5832] Bluetooth: hci3: command tx timeout [ 58.759766][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.703958][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.199128][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.213159][ T5925] Zero length message leads to an empty skb [ 60.220341][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.322267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.375300][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 60.375317][ T29] audit: type=1400 audit(1734950132.050:155): avc: denied { create } for pid=5924 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.505580][ T29] audit: type=1400 audit(1734950132.050:156): avc: denied { setopt } for pid=5910 comm="syz.0.7" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.539669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.582865][ T5824] Bluetooth: hci0: command tx timeout [ 60.717892][ T29] audit: type=1400 audit(1734950132.090:157): avc: denied { read } for pid=5910 comm="syz.0.7" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.866991][ T5824] Bluetooth: hci3: command tx timeout [ 60.877652][ T5824] Bluetooth: hci1: command tx timeout [ 60.890745][ T5824] Bluetooth: hci2: command tx timeout [ 60.896856][ T5824] Bluetooth: hci4: command tx timeout [ 60.918140][ T29] audit: type=1400 audit(1734950132.090:158): avc: denied { open } for pid=5910 comm="syz.0.7" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.026637][ T29] audit: type=1400 audit(1734950132.090:159): avc: denied { ioctl } for pid=5910 comm="syz.0.7" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.052384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.082414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.142124][ T29] audit: type=1400 audit(1734950132.100:160): avc: denied { write } for pid=5924 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.203037][ T29] audit: type=1400 audit(1734950132.620:161): avc: denied { map_create } for pid=5907 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.238787][ T29] audit: type=1400 audit(1734950132.900:162): avc: denied { write } for pid=5935 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.354463][ T5937] hub 2-0:1.0: USB hub found [ 61.362686][ T5937] hub 2-0:1.0: 1 port detected [ 61.442391][ T29] audit: type=1400 audit(1734950132.990:163): avc: denied { write } for pid=5932 comm="syz.4.5" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.724872][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 61.741035][ T29] audit: type=1400 audit(1734950133.190:164): avc: denied { watch watch_reads } for pid=5932 comm="syz.4.5" path="/proc/3/net/udplite6" dev="proc" ino=4026533452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.838608][ T5942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 61.862790][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 61.996894][ T5945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13'. [ 62.082484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.091274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.178800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.252655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.489035][ T5957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 62.519358][ T5957] overlayfs: failed to resolve './file0': -2 [ 62.583552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.593213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.530156][ T5965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.220082][ T5967] loop9: detected capacity change from 0 to 8 [ 64.683315][ T5967] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 64.688681][ T5967] loop9: partition table partially beyond EOD, truncated [ 64.696005][ T5967] loop9: p1 size 81768186 extends beyond EOD, truncated [ 64.756240][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 65.186188][ T5976] hub 2-0:1.0: USB hub found [ 65.192255][ T5976] hub 2-0:1.0: 1 port detected [ 65.852676][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 65.852694][ T29] audit: type=1400 audit(1734950137.520:254): avc: denied { mount } for pid=5971 comm="syz.4.18" name="/" dev="autofs" ino=8673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 65.882789][ T29] audit: type=1400 audit(1734950137.540:255): avc: denied { read } for pid=5971 comm="syz.4.18" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.907274][ T29] audit: type=1400 audit(1734950137.540:256): avc: denied { open } for pid=5971 comm="syz.4.18" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.930734][ T29] audit: type=1400 audit(1734950137.550:257): avc: denied { ioctl } for pid=5971 comm="syz.4.18" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.176039][ T29] audit: type=1400 audit(1734950137.850:258): avc: denied { ioctl } for pid=5979 comm="syz.3.20" path="socket:[8677]" dev="sockfs" ino=8677 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.258561][ T29] audit: type=1400 audit(1734950137.910:259): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 66.441025][ T29] audit: type=1400 audit(1734950138.110:260): avc: denied { read } for pid=5979 comm="syz.3.20" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.083124][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.167913][ T29] audit: type=1400 audit(1734950138.110:261): avc: denied { open } for pid=5979 comm="syz.3.20" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.352159][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 67.374466][ T5930] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 67.393820][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.981512][ T5930] usb 1-1: config 0 descriptor?? [ 68.006540][ T29] audit: type=1400 audit(1734950139.270:262): avc: denied { ioctl } for pid=5992 comm="syz.4.23" path="socket:[7763]" dev="sockfs" ino=7763 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.202785][ T5930] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 68.235765][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.236201][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 68.236231][ T5930] usb 1-1: media controller created [ 68.266656][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.780102][ T29] audit: type=1400 audit(1734950140.450:263): avc: denied { execute } for pid=6003 comm="syz.2.26" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.380120][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 70.981184][ T5930] az6027: usb out operation failed. (-71) [ 70.990451][ T5930] stb0899_attach: Driver disabled by Kconfig [ 70.996817][ T5930] az6027: no front-end attached [ 70.996817][ T5930] [ 71.013657][ T5930] az6027: usb out operation failed. (-71) [ 71.019749][ T5930] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 71.033923][ T5930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 71.058485][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 71.058503][ T29] audit: type=1400 audit(1734950142.720:272): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=2734 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.089193][ T5930] dvb-usb: schedule remote query interval to 400 msecs. [ 71.097118][ T5930] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 71.126671][ T29] audit: type=1400 audit(1734950142.720:273): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2734 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.150233][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.158703][ T29] audit: type=1400 audit(1734950142.720:274): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2734 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.183660][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.405977][ T5930] usb 1-1: USB disconnect, device number 2 [ 72.712150][ T29] audit: type=1400 audit(1734950144.320:275): avc: denied { bind } for pid=6021 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.084924][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.085023][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.125497][ T6025] loop9: detected capacity change from 0 to 8 [ 73.129771][ T6025] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 73.129830][ T6025] loop9: partition table partially beyond EOD, truncated [ 73.130006][ T6025] loop9: p1 size 81768186 extends beyond EOD, truncated [ 73.201505][ T5930] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 73.268888][ T6027] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 73.834349][ T6038] loop9: detected capacity change from 0 to 8 [ 73.845237][ T6038] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 73.845372][ T6038] loop9: partition table partially beyond EOD, truncated [ 73.848779][ T6038] loop9: p1 size 81768186 extends beyond EOD, truncated [ 74.287309][ T6037] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 74.486887][ T6043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 74.882545][ T6050] loop9: detected capacity change from 0 to 8 [ 75.029659][ T6050] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 75.029805][ T6050] loop9: partition table partially beyond EOD, truncated [ 75.035409][ T6050] loop9: p1 size 81768186 extends beyond EOD, truncated [ 75.349811][ T6049] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 75.920141][ T6057] loop9: detected capacity change from 0 to 8 [ 75.966630][ T6057] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 75.972220][ T6057] loop9: partition table partially beyond EOD, truncated [ 75.985050][ T6057] loop9: p1 size 81768186 extends beyond EOD, truncated [ 76.367594][ T6056] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 76.592771][ T825] cfg80211: failed to load regulatory.db [ 76.662808][ T6066] loop9: detected capacity change from 0 to 8 [ 76.674584][ T6066] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 76.679965][ T6066] loop9: partition table partially beyond EOD, truncated [ 76.687638][ T6066] loop9: p1 size 81768186 extends beyond EOD, truncated [ 77.693717][ T6063] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 77.716738][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 78.357310][ T29] audit: type=1400 audit(1734950150.020:276): avc: denied { read append } for pid=6076 comm="syz.0.39" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.457768][ T6081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 79.510537][ T29] audit: type=1400 audit(1734950150.030:277): avc: denied { open } for pid=6076 comm="syz.0.39" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.433768][ T29] audit: type=1400 audit(1734950150.640:278): avc: denied { name_bind } for pid=6074 comm="syz.1.41" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.473717][ T29] audit: type=1400 audit(1734950152.090:279): avc: denied { ioctl } for pid=6085 comm="syz.4.43" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.211659][ T29] audit: type=1400 audit(1734950152.880:280): avc: denied { ioctl } for pid=6076 comm="syz.0.39" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.361297][ T29] audit: type=1400 audit(1734950152.880:281): avc: denied { connect } for pid=6076 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.430784][ T29] audit: type=1400 audit(1734950152.930:282): avc: denied { map } for pid=6085 comm="syz.4.43" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.519617][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.46'. [ 81.546644][ T6096] evm: overlay not supported [ 81.582534][ T29] audit: type=1400 audit(1734950153.190:283): avc: denied { create } for pid=6091 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 81.631033][ T29] audit: type=1400 audit(1734950153.210:284): avc: denied { mounton } for pid=6085 comm="syz.4.43" path="/9/bus/file1" dev="overlay" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.673427][ T29] audit: type=1400 audit(1734950153.340:285): avc: denied { set_context_mgr } for pid=6085 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 81.884187][ T6110] loop9: detected capacity change from 0 to 8 [ 81.919904][ T6110] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 81.925451][ T6110] loop9: partition table partially beyond EOD, truncated [ 81.933527][ T6110] loop9: p1 size 81768186 extends beyond EOD, truncated [ 82.340982][ T6109] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 82.470484][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 82.774120][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'. [ 83.653687][ T6127] loop9: detected capacity change from 0 to 8 [ 83.669197][ T6127] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 83.674732][ T6127] loop9: partition table partially beyond EOD, truncated [ 83.683245][ T6127] loop9: p1 size 81768186 extends beyond EOD, truncated [ 83.712137][ T825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.902110][ T825] usb 2-1: Using ep0 maxpacket: 32 [ 83.913703][ T825] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 84.145342][ T825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.158310][ T825] usb 2-1: config 0 descriptor?? [ 84.377154][ T825] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 84.403306][ T825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 84.413942][ T825] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 84.421143][ T825] usb 2-1: media controller created [ 84.447101][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 84.461006][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 84.506970][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 84.506987][ T29] audit: type=1400 audit(1734950156.180:287): avc: denied { create } for pid=6140 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.534126][ T29] audit: type=1400 audit(1734950156.210:288): avc: denied { write } for pid=6140 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.535283][ T825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.622306][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.53'. [ 85.277261][ T5867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.902123][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 85.911647][ T5867] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 85.925461][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.938045][ T5867] usb 4-1: Product: syz [ 85.942339][ T5867] usb 4-1: Manufacturer: syz [ 85.947206][ T5867] usb 4-1: SerialNumber: syz [ 85.961043][ T5867] usb 4-1: config 0 descriptor?? [ 85.974753][ T5867] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 86.245534][ T6157] loop9: detected capacity change from 0 to 8 [ 86.293957][ T5867] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 86.358496][ T6157] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 86.364030][ T6157] loop9: partition table partially beyond EOD, truncated [ 86.371309][ T6157] loop9: p1 size 81768186 extends beyond EOD, truncated [ 86.766219][ T6154] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 86.999497][ T5867] usb 4-1: USB disconnect, device number 2 [ 87.103340][ T6161] No control pipe specified [ 87.309517][ T6169] input: syz1 as /devices/virtual/input/input6 [ 87.329879][ T29] audit: type=1400 audit(1734950158.960:289): avc: denied { write } for pid=6167 comm="syz.0.61" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.352822][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.498493][ T825] az6027: usb out operation failed. (-71) [ 87.504528][ T825] stb0899_attach: Driver disabled by Kconfig [ 87.510609][ T825] az6027: no front-end attached [ 87.510609][ T825] [ 87.532611][ T825] az6027: usb out operation failed. (-71) [ 87.722180][ T29] audit: type=1400 audit(1734950159.210:290): avc: denied { create } for pid=6171 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.837012][ T6174] loop9: detected capacity change from 0 to 8 [ 87.846486][ T6174] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 87.852139][ T6174] loop9: partition table partially beyond EOD, truncated [ 87.859861][ T6174] loop9: p1 size 81768186 extends beyond EOD, truncated [ 87.950641][ T825] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 88.022999][ T29] audit: type=1400 audit(1734950159.240:291): avc: denied { setopt } for pid=6171 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.050537][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.63'. [ 88.068829][ T825] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 88.081535][ T825] dvb-usb: schedule remote query interval to 400 msecs. [ 88.097859][ T825] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 88.144240][ T29] audit: type=1400 audit(1734950159.740:292): avc: denied { bind } for pid=6171 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.174530][ T6173] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 88.185588][ T6168] udevd[6168]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 88.230748][ T825] usb 2-1: USB disconnect, device number 2 [ 88.292205][ T29] audit: type=1400 audit(1734950159.790:293): avc: denied { bind } for pid=6167 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.327555][ T29] audit: type=1400 audit(1734950159.790:294): avc: denied { mount } for pid=6167 comm="syz.0.61" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.348874][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.355129][ T29] audit: type=1400 audit(1734950159.880:295): avc: denied { map } for pid=6171 comm="syz.3.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.380517][ T29] audit: type=1400 audit(1734950159.880:296): avc: denied { read write } for pid=6171 comm="syz.3.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.404935][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.499257][ T825] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 88.798603][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.806518][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.046823][ T6195] VFS: could not find a valid V7 on nullb0. [ 89.242102][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.531373][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.019065][ T5869] usb 5-1: config 0 has no interfaces? [ 90.025282][ T5869] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 90.035597][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.042117][ T5867] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.100938][ T6206] tipc: Started in network mode [ 90.108354][ T6206] tipc: Node identity 4, cluster identity 4711 [ 90.117632][ T6206] tipc: Node number set to 4 [ 90.139570][ T5869] usb 5-1: config 0 descriptor?? [ 90.213558][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.227633][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.244632][ T5867] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.265024][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.287409][ T5867] usb 2-1: SerialNumber: syz [ 90.325095][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 90.325114][ T29] audit: type=1400 audit(1734950162.000:303): avc: denied { create } for pid=6209 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.766794][ T5867] usb 2-1: 0:2 : does not exist [ 90.812999][ T29] audit: type=1400 audit(1734950162.000:304): avc: denied { create } for pid=6209 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.832145][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.862868][ T29] audit: type=1400 audit(1734950162.000:305): avc: denied { ioctl } for pid=6209 comm="syz.0.72" path="socket:[8180]" dev="sockfs" ino=8180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.887860][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.950677][ T5867] usb 2-1: USB disconnect, device number 3 [ 91.145846][ T29] audit: type=1400 audit(1734950162.780:306): avc: denied { bind } for pid=6214 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.164958][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.172286][ T29] audit: type=1400 audit(1734950162.780:307): avc: denied { name_bind } for pid=6214 comm="syz.3.73" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 91.193995][ T29] audit: type=1400 audit(1734950162.780:308): avc: denied { node_bind } for pid=6214 comm="syz.3.73" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 91.216258][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.222708][ T29] audit: type=1400 audit(1734950162.780:309): avc: denied { setopt } for pid=6214 comm="syz.3.73" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.245187][ T29] audit: type=1400 audit(1734950162.790:310): avc: denied { write } for pid=6214 comm="syz.3.73" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.267434][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.274193][ T29] audit: type=1400 audit(1734950162.790:311): avc: denied { connect } for pid=6214 comm="syz.3.73" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.296680][ T29] audit: type=1400 audit(1734950162.790:312): avc: denied { name_connect } for pid=6214 comm="syz.3.73" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 91.318506][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.503156][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.572225][ T9] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 91.723570][ T9] usb 4-1: config 0 has no interfaces? [ 91.733217][ T9] usb 4-1: string descriptor 0 read error: -22 [ 91.755263][ T9] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 91.805391][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.883365][ T9] usb 4-1: config 0 descriptor?? [ 92.974604][ T6234] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 93.032607][ T51] usb 5-1: USB disconnect, device number 2 [ 93.873010][ T6247] loop9: detected capacity change from 0 to 8 [ 93.904391][ T6247] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 93.909833][ T6247] loop9: partition table partially beyond EOD, truncated [ 93.917853][ T6247] loop9: p1 size 81768186 extends beyond EOD, truncated [ 94.458299][ T5867] usb 4-1: USB disconnect, device number 3 [ 94.467633][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 94.822603][ T6261] loop9: detected capacity change from 0 to 8 [ 94.914406][ T6261] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 94.919903][ T6261] loop9: partition table partially beyond EOD, truncated [ 94.927902][ T6261] loop9: p1 size 81768186 extends beyond EOD, truncated [ 95.188660][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.263680][ T6260] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.443943][ T29] audit: type=1326 audit(1734950167.120:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6267 comm="syz.0.88" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2913185d29 code=0x7ffb0000 [ 95.575724][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 95.637975][ T6272] loop9: detected capacity change from 0 to 8 [ 95.716748][ T5867] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.882193][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 96.086843][ T6272] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 96.092275][ T6272] loop9: partition table partially beyond EOD, truncated [ 96.094860][ T6271] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 96.099498][ T6272] loop9: p1 size 81768186 extends beyond EOD, truncated [ 96.111457][ T5867] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 96.124096][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.180733][ T5867] usb 4-1: config 0 descriptor?? [ 96.238223][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 96.247418][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 96.266818][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 96.284834][ T9] usb 2-1: Product: syz [ 96.296826][ T9] usb 2-1: SerialNumber: syz [ 96.319898][ T9] usb 2-1: config 0 descriptor?? [ 96.338397][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 96.355882][ T9] usb 2-1: Detected FT2232C/D [ 96.401556][ T5867] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 96.418242][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.459913][ T5867] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 96.479627][ T5867] usb 4-1: media controller created [ 96.536283][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.655852][ T29] audit: type=1400 audit(1734950168.330:314): avc: denied { relabelfrom } for pid=6249 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.680527][ T29] audit: type=1400 audit(1734950168.360:315): avc: denied { relabelto } for pid=6249 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.842540][ T5868] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.846759][ T29] audit: type=1400 audit(1734950168.440:316): avc: denied { create } for pid=6249 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.869675][ T29] audit: type=1400 audit(1734950168.440:317): avc: denied { setopt } for pid=6249 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.848958][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.897111][ T5868] usb 5-1: config 0 has no interfaces? [ 97.909064][ T5868] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 97.945627][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.980151][ T5868] usb 5-1: config 0 descriptor?? [ 98.059597][ T6288] FAULT_INJECTION: forcing a failure. [ 98.059597][ T6288] name failslab, interval 1, probability 0, space 0, times 1 [ 98.093515][ T6288] CPU: 1 UID: 0 PID: 6288 Comm: syz.2.93 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 98.104069][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.114117][ T6288] Call Trace: [ 98.117379][ T6288] [ 98.120310][ T6288] dump_stack_lvl+0x16c/0x1f0 [ 98.125015][ T6288] should_fail_ex+0x497/0x5b0 [ 98.129700][ T6288] ? fs_reclaim_acquire+0xae/0x150 [ 98.134798][ T6288] should_failslab+0xc2/0x120 [ 98.139462][ T6288] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 98.144834][ T6288] ? alloc_file_pseudo+0x17d/0x210 [ 98.149953][ T6288] ? alloc_empty_file+0x73/0x1e0 [ 98.154890][ T6288] alloc_empty_file+0x73/0x1e0 [ 98.159648][ T6288] alloc_file_clone+0x5f/0x110 [ 98.164411][ T6288] create_pipe_files+0x412/0x850 [ 98.169331][ T6288] do_pipe2+0xb0/0x1d0 [ 98.173398][ T6288] ? __pfx_do_pipe2+0x10/0x10 [ 98.178069][ T6288] ? __pfx_ksys_write+0x10/0x10 [ 98.183552][ T6288] __x64_sys_pipe+0x33/0x50 [ 98.188043][ T6288] do_syscall_64+0xcd/0x250 [ 98.192538][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.198420][ T6288] RIP: 0033:0x7f892df85d29 [ 98.202824][ T6288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.222435][ T6288] RSP: 002b:00007f892ee7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 98.230871][ T6288] RAX: ffffffffffffffda RBX: 00007f892e175fa0 RCX: 00007f892df85d29 [ 98.238849][ T6288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 98.246857][ T6288] RBP: 00007f892ee7e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.254838][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.262921][ T6288] R13: 0000000000000000 R14: 00007f892e175fa0 R15: 00007ffebd5f8b28 [ 98.270922][ T6288] [ 98.276756][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 98.285142][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 98.296886][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 99.150225][ T5867] az6027: usb out operation failed. (-110) [ 99.157348][ T5867] stb0899_attach: Driver disabled by Kconfig [ 99.163483][ T5867] az6027: no front-end attached [ 99.163483][ T5867] [ 99.170889][ T9] usb 2-1: USB disconnect, device number 4 [ 99.183777][ T5867] az6027: usb out operation failed. (-32) [ 99.189678][ T5867] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 99.197809][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 99.591831][ T5867] dvb-usb: schedule remote query interval to 400 msecs. [ 99.599894][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 99.609559][ T5867] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 99.619628][ T9] ftdi_sio 2-1:0.0: device disconnected [ 100.350693][ T5867] usb 4-1: USB disconnect, device number 4 [ 100.410296][ T5867] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 100.607174][ T5930] usb 5-1: USB disconnect, device number 3 [ 100.973722][ T6305] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.986547][ T6305] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.294954][ T6318] loop9: detected capacity change from 0 to 8 [ 103.513689][ T6318] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 103.519138][ T6318] loop9: partition table partially beyond EOD, truncated [ 103.727470][ T6318] loop9: p1 size 81768186 extends beyond EOD, truncated [ 103.745315][ T29] audit: type=1400 audit(1734950175.420:318): avc: denied { create } for pid=6326 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.746498][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.104'. [ 103.819973][ T6316] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 105.215996][ T6345] hub 2-0:1.0: USB hub found [ 105.220909][ T6345] hub 2-0:1.0: 1 port detected [ 107.103919][ T6355] hub 2-0:1.0: USB hub found [ 107.110296][ T6355] hub 2-0:1.0: 1 port detected [ 107.475752][ T5868] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.576587][ T6357] hub 2-0:1.0: USB hub found [ 107.583178][ T6357] hub 2-0:1.0: 1 port detected [ 108.688664][ T5868] usb 5-1: device not accepting address 4, error -71 [ 108.782236][ T6370] loop9: detected capacity change from 0 to 8 [ 108.819110][ T6370] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 108.824739][ T6370] loop9: partition table partially beyond EOD, truncated [ 108.835736][ T6370] loop9: p1 size 81768186 extends beyond EOD, truncated [ 109.140754][ T6369] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.274791][ T6349] udevd[6349]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 109.350800][ T6375] cgroup: release_agent respecified [ 109.366886][ T6375] cgroup: release_agent respecified [ 109.373134][ T6375] cgroup: release_agent respecified [ 109.378692][ T6375] cgroup: release_agent respecified [ 109.392711][ T6375] cgroup: release_agent respecified [ 109.398455][ T6375] cgroup: release_agent respecified [ 109.404489][ T6375] cgroup: release_agent respecified [ 109.486241][ T6375] cgroup: release_agent respecified [ 109.727757][ T6389] loop9: detected capacity change from 0 to 8 [ 110.160650][ T6388] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 110.418836][ T6389] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 110.424287][ T6389] loop9: partition table partially beyond EOD, truncated [ 110.431506][ T6389] loop9: p1 size 81768186 extends beyond EOD, truncated [ 110.604723][ T6349] udevd[6349]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 110.901082][ T6392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.119'. [ 110.982252][ T29] audit: type=1400 audit(1734950182.360:319): avc: denied { create } for pid=6391 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 111.019642][ T29] audit: type=1400 audit(1734950182.610:320): avc: denied { audit_write } for pid=6394 comm="syz.3.121" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.041219][ T29] audit: type=1400 audit(1734950182.610:321): avc: denied { watch watch_reads } for pid=6394 comm="syz.3.121" path="/20/file1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.064349][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.426391][ T9] libceph: connect (1)[c::]:6789 error -101 [ 111.433874][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 111.486181][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.493582][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.658237][ T6396] ceph: No mds server is up or the cluster is laggy [ 111.701894][ T9] libceph: connect (1)[c::]:6789 error -101 [ 111.730124][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 112.250372][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 113.171071][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 113.177863][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 113.814969][ T6434] loop9: detected capacity change from 0 to 8 [ 113.903348][ T6434] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 113.908818][ T6434] loop9: partition table partially beyond EOD, truncated [ 113.916607][ T6434] loop9: p1 size 81768186 extends beyond EOD, truncated [ 114.263153][ T29] audit: type=1400 audit(1734950185.930:322): avc: denied { create } for pid=6440 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.484559][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.692715][ T6433] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 114.754569][ T6349] udevd[6349]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 114.803480][ T5867] usb 4-1: device descriptor read/64, error -71 [ 114.824280][ T6449] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 114.832833][ T6449] netlink: 216 bytes leftover after parsing attributes in process `syz.0.132'. [ 114.889372][ T29] audit: type=1400 audit(1734950186.560:323): avc: denied { execute } for pid=6445 comm="syz.4.133" path="/30/cpu.stat" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.015851][ T29] audit: type=1400 audit(1734950186.690:324): avc: denied { write } for pid=6457 comm="syz.0.135" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 115.062108][ T5867] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.782254][ T5867] usb 4-1: device descriptor read/64, error -71 [ 116.257796][ T5867] usb usb4-port1: attempt power cycle [ 116.341576][ T6475] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.122139][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.130782][ T5930] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.138973][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.152526][ T5867] usb 4-1: device descriptor read/8, error -71 [ 117.272109][ T5897] usb 2-1: device descriptor read/64, error -71 [ 117.298784][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 117.314053][ T29] audit: type=1400 audit(1734950188.980:325): avc: denied { read } for pid=6486 comm="syz.3.144" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.337839][ T29] audit: type=1400 audit(1734950188.980:326): avc: denied { open } for pid=6486 comm="syz.3.144" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.337947][ T5930] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 117.370286][ T2149] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.377830][ T29] audit: type=1400 audit(1734950188.980:327): avc: denied { ioctl } for pid=6486 comm="syz.3.144" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.420245][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.443785][ T5930] usb 3-1: config 0 descriptor?? [ 117.457132][ T29] audit: type=1400 audit(1734950189.080:328): avc: denied { create } for pid=6486 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 117.650792][ T2149] usb 1-1: device descriptor read/64, error -71 [ 117.657664][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.775106][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 118.569617][ T5897] usb 2-1: device descriptor read/64, error -71 [ 118.623134][ T2149] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.682801][ T5897] usb usb2-port1: attempt power cycle [ 119.466058][ T2149] usb 1-1: device descriptor read/64, error -71 [ 119.649942][ T6502] input: syz1 as /devices/virtual/input/input9 [ 119.662309][ T2149] usb usb1-port1: attempt power cycle [ 119.731353][ T29] audit: type=1400 audit(1734950191.400:329): avc: denied { execute } for pid=6466 comm="syz.2.137" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=10471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 119.769586][ T29] audit: type=1400 audit(1734950191.430:330): avc: denied { ioctl } for pid=6466 comm="syz.2.137" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.625022][ T2149] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.710043][ T2149] usb 1-1: device descriptor read/8, error -71 [ 120.854821][ T5930] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 120.876863][ T5930] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 121.203764][ T5930] asix 3-1:0.0: probe with driver asix failed with error -71 [ 121.222087][ T5930] usb 3-1: USB disconnect, device number 2 [ 121.472275][ T29] audit: type=1400 audit(1734950192.990:331): avc: denied { setopt } for pid=6511 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.701889][ T29] audit: type=1400 audit(1734950192.990:332): avc: denied { ioctl } for pid=6511 comm="syz.3.150" path="socket:[9717]" dev="sockfs" ino=9717 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.739560][ T6516] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.905792][ T29] audit: type=1400 audit(1734950193.570:333): avc: denied { write } for pid=6529 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.953858][ T29] audit: type=1400 audit(1734950193.570:334): avc: denied { nlmsg_read } for pid=6529 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 122.262155][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.284996][ T825] IPVS: starting estimator thread 0... [ 122.324794][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 122.324811][ T29] audit: type=1800 audit(1734950194.000:336): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.155" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 122.355942][ T6522] loop9: detected capacity change from 0 to 8 [ 122.359091][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.377050][ T29] audit: type=1400 audit(1734950194.050:337): avc: denied { rename } for pid=5170 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.400756][ T5868] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.412700][ T6543] IPVS: using max 26 ests per chain, 62400 per kthread [ 122.421866][ T6522] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 122.422094][ T5867] usb 2-1: device descriptor read/64, error -71 [ 122.434905][ T29] audit: type=1400 audit(1734950194.050:338): avc: denied { unlink } for pid=5170 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.462127][ T6522] loop9: partition table partially beyond EOD, truncated [ 122.502385][ T6522] loop9: p1 size 81768186 extends beyond EOD, truncated [ 122.511483][ T29] audit: type=1400 audit(1734950194.050:339): avc: denied { create } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.587728][ T6542] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 122.632775][ T6349] udevd[6349]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 122.692133][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 122.710083][ T5868] usb 3-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 122.729766][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.832794][ T5868] usb 3-1: Product: syz [ 122.866641][ T5868] usb 3-1: Manufacturer: syz [ 122.958505][ T5868] usb 3-1: SerialNumber: syz [ 123.171946][ T5868] usb 3-1: config 0 descriptor?? [ 123.204638][ T5868] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 123.247269][ T5867] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.384057][ T29] audit: type=1400 audit(1734950195.050:340): avc: denied { read write } for pid=6552 comm="syz.4.162" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 123.407589][ T29] audit: type=1400 audit(1734950195.050:341): avc: denied { open } for pid=6552 comm="syz.4.162" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 123.432344][ T5867] usb 2-1: device descriptor read/64, error -71 [ 123.542642][ T5867] usb usb2-port1: attempt power cycle [ 123.882139][ T5867] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.902701][ T5867] usb 2-1: device descriptor read/8, error -71 [ 124.164857][ T6564] loop9: detected capacity change from 0 to 8 [ 124.171434][ T6564] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 124.176837][ T6564] loop9: partition table partially beyond EOD, truncated [ 124.184065][ T6564] loop9: p1 size 81768186 extends beyond EOD, truncated [ 124.212192][ T5867] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.233114][ T5867] usb 2-1: device descriptor read/8, error -71 [ 124.345163][ T5867] usb usb2-port1: unable to enumerate USB device [ 124.458328][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.168'. [ 124.462072][ T29] audit: type=1400 audit(1734950196.130:342): avc: denied { create } for pid=6567 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 124.732116][ T5867] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.789785][ T6563] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 125.017755][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 125.024403][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.034741][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.045697][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 125.057669][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.067768][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.081743][ T5867] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 125.102108][ T5867] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.110156][ T5867] usb 5-1: Manufacturer: syz [ 125.126795][ T5867] usb 5-1: config 0 descriptor?? [ 125.170148][ T6579] loop9: detected capacity change from 0 to 8 [ 125.204478][ T6579] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 125.209912][ T6579] loop9: partition table partially beyond EOD, truncated [ 125.219267][ T6579] loop9: p1 size 81768186 extends beyond EOD, truncated [ 125.311102][ T2149] usb 3-1: USB disconnect, device number 3 [ 125.792147][ T6576] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 126.237110][ T29] audit: type=1400 audit(1734950197.770:343): avc: denied { create } for pid=6587 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.259645][ T5867] rc_core: IR keymap rc-hauppauge not found [ 126.279718][ T29] audit: type=1400 audit(1734950197.770:344): avc: denied { write } for pid=6587 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.290216][ T5867] Registered IR keymap rc-empty [ 126.306873][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 126.369352][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.278664][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 127.301599][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 127.378030][ T6599] process 'syz.1.176' launched './file1' with NULL argv: empty string added [ 127.392047][ T29] audit: type=1400 audit(1734950199.060:345): avc: denied { execute_no_trans } for pid=6587 comm="syz.1.176" path="/36/file1" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.403279][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.423400][ T6596] netlink: 100 bytes leftover after parsing attributes in process `syz.1.176'. [ 127.430350][ T6613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6613 comm=syz.2.180 [ 127.454626][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.476554][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.512767][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.542204][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.582704][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.622298][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.647954][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.698545][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.858492][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.887682][ T5867] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 127.904882][ T5867] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 127.919396][ T5867] usb 5-1: USB disconnect, device number 6 [ 127.929989][ T5869] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.082265][ T5869] usb 3-1: device descriptor read/64, error -71 [ 128.333370][ T5869] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.852840][ T5869] usb 3-1: device descriptor read/64, error -71 [ 128.884674][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.893038][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.247414][ T5869] usb usb3-port1: attempt power cycle [ 129.570134][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.577648][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.594129][ T6629] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 130.182499][ T5869] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.214407][ T5869] usb 3-1: device descriptor read/8, error -71 [ 130.452086][ T5869] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.483521][ T5869] usb 3-1: device descriptor read/8, error -71 [ 130.971708][ T29] audit: type=1400 audit(1734950202.260:346): avc: denied { append } for pid=6648 comm="syz.4.193" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.996271][ T5869] usb usb3-port1: unable to enumerate USB device [ 131.052312][ T5930] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.077302][ T6653] pim6reg: entered allmulticast mode [ 131.205171][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.223840][ T5930] usb 1-1: config 0 has no interfaces? [ 131.229519][ T5930] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 131.239143][ T5897] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 131.247668][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.315554][ T5930] usb 1-1: config 0 descriptor?? [ 131.415476][ T5897] usb 4-1: config 0 has no interfaces? [ 131.426808][ T5897] usb 4-1: string descriptor 0 read error: -22 [ 131.433418][ T5897] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 131.458133][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.477317][ T5897] usb 4-1: config 0 descriptor?? [ 131.702101][ T5930] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 132.712073][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 132.719160][ T5930] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.730125][ T5930] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.741072][ T5930] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.754136][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.760784][ T5930] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 133.208376][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.215265][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.225405][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.285169][ T5930] usb 2-1: config 0 descriptor?? [ 133.299399][ T5868] usb 4-1: USB disconnect, device number 9 [ 133.529010][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.779440][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.200399][ T29] audit: type=1400 audit(1734950205.870:347): avc: denied { read } for pid=6670 comm="syz.1.195" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.205275][ T6672] warning: `syz.1.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.225020][ T29] audit: type=1400 audit(1734950205.880:348): avc: denied { open } for pid=6670 comm="syz.1.195" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.333740][ T29] audit: type=1400 audit(1734950205.880:349): avc: denied { ioctl } for pid=6670 comm="syz.1.195" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.455215][ T5930] hid (null): unknown global tag 0xd [ 135.463658][ T5930] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x3 [ 135.471117][ T5930] hid-generic 0003:045E:05DA.0001: unknown main item tag 0xd [ 135.479003][ T5930] hid-generic 0003:045E:05DA.0001: unknown global tag 0xd [ 135.486625][ T5930] hid-generic 0003:045E:05DA.0001: item 0 0 1 13 parsing failed [ 135.494967][ T5930] hid-generic 0003:045E:05DA.0001: probe with driver hid-generic failed with error -22 [ 135.511601][ T5897] usb 1-1: USB disconnect, device number 7 [ 135.646095][ T29] audit: type=1400 audit(1734950205.880:350): avc: denied { write } for pid=6670 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 135.681315][ T6706] binder: 6704:6706 ioctl c0306201 0 returned -14 [ 135.858062][ T5897] usb 2-1: USB disconnect, device number 12 [ 136.882129][ T29] audit: type=1400 audit(1734950208.500:351): avc: denied { getopt } for pid=6716 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.252072][ T5898] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.265017][ T6733] overlayfs: failed to get inode (-116) [ 137.275991][ T6733] overlayfs: failed to get inode (-116) [ 138.507035][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 138.532165][ T29] audit: type=1400 audit(1734950210.200:352): avc: denied { read write } for pid=6745 comm="syz.1.211" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 138.556516][ T29] audit: type=1400 audit(1734950210.200:353): avc: denied { open } for pid=6745 comm="syz.1.211" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 138.581037][ T29] audit: type=1400 audit(1734950210.220:354): avc: denied { mount } for pid=6747 comm="syz.3.213" name="/" dev="ramfs" ino=10132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 138.642043][ T29] audit: type=1400 audit(1734950210.300:355): avc: denied { create } for pid=6747 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.661499][ T29] audit: type=1400 audit(1734950210.310:356): avc: denied { ioctl } for pid=6747 comm="syz.3.213" path="socket:[10141]" dev="sockfs" ino=10141 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.687544][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.712053][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.735611][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.745600][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.753851][ T5898] usb 3-1: Product: syz [ 138.758111][ T5898] usb 3-1: Manufacturer: syz [ 138.763636][ T5898] usb 3-1: SerialNumber: syz [ 138.771018][ T6756] binder: 6752:6756 ioctl c0306201 0 returned -14 [ 139.135694][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 139.848865][ T5898] usb 3-1: 0:2 : does not exist [ 140.153292][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 140.836441][ T6775] overlayfs: failed to get inode (-116) [ 140.842476][ T5898] usb 3-1: USB disconnect, device number 8 [ 140.862468][ T6775] overlayfs: failed to get inode (-116) [ 140.987492][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 140.987509][ T29] audit: type=1400 audit(1734950212.660:359): avc: denied { connect } for pid=6781 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.098814][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.224'. [ 141.112784][ T6349] udevd[6349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.202103][ T5868] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.355702][ T5868] usb 4-1: device descriptor read/64, error -71 [ 142.244641][ T5868] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.253375][ T29] audit: type=1400 audit(1734950213.430:360): avc: denied { read } for pid=6789 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.400022][ T29] audit: type=1400 audit(1734950213.660:361): avc: denied { write } for pid=6789 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.582368][ T5868] usb 4-1: device descriptor read/64, error -71 [ 142.720516][ T5868] usb usb4-port1: attempt power cycle [ 143.142790][ T5868] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.164928][ T5868] usb 4-1: device descriptor read/8, error -71 [ 143.742802][ T5898] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.882524][ T5868] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 143.902656][ T5868] usb 4-1: device descriptor read/8, error -71 [ 143.962674][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 143.973551][ T5898] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.992538][ T5898] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.003737][ T5898] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.017252][ T5868] usb usb4-port1: unable to enumerate USB device [ 144.025082][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.031947][ T5898] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 144.049598][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.091157][ T5898] usb 3-1: config 0 descriptor?? [ 144.163316][ T6833] overlayfs: failed to get inode (-116) [ 144.169510][ T6833] overlayfs: failed to get inode (-116) [ 144.400428][ T6815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.558082][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 144.615156][ T6835] loop9: detected capacity change from 0 to 8 [ 144.688694][ T6835] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 144.694418][ T6835] loop9: partition table partially beyond EOD, truncated [ 144.702381][ T6835] loop9: p1 size 81768186 extends beyond EOD, truncated [ 144.915819][ T6830] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 144.966828][ T6349] udevd[6349]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 144.991853][ T5898] usbhid 3-1:0.0: can't add hid device: -71 [ 144.999453][ T5898] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 145.018032][ T5898] usb 3-1: USB disconnect, device number 9 [ 145.732217][ T5897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 145.909950][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.245'. [ 145.930547][ T29] audit: type=1400 audit(1734950217.600:362): avc: denied { mounton } for pid=6856 comm="syz.2.246" path=2F33362FE91F7189591E9233614B dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 146.014140][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.032042][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.044847][ T5897] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.056854][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.068090][ T5897] usb 2-1: config 0 descriptor?? [ 146.083727][ T29] audit: type=1400 audit(1734950217.760:363): avc: denied { append } for pid=6856 comm="syz.2.246" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.101611][ T6859] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 146.107512][ T5898] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.123865][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 146.252088][ T5868] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.273685][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.288762][ T5898] usb 5-1: config 0 has no interfaces? [ 146.294590][ T5898] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 146.304003][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.315525][ T5898] usb 5-1: config 0 descriptor?? [ 146.412160][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 146.418698][ T5868] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 146.427050][ T5868] usb 1-1: config 0 has no interface number 0 [ 146.435012][ T5868] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 146.444441][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.453879][ T5868] usb 1-1: Product: syz [ 146.458087][ T5868] usb 1-1: Manufacturer: syz [ 146.464388][ T5868] usb 1-1: SerialNumber: syz [ 146.470425][ T5868] usb 1-1: config 0 descriptor?? [ 146.696526][ T5897] usb 2-1: language id specifier not provided by device, defaulting to English [ 146.784746][ T5868] radio-si470x 1-1:0.35: this is not a si470x device. [ 147.179671][ T5868] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 147.313676][ T5868] usb 1-1: USB disconnect, device number 8 [ 147.443883][ T6871] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.463531][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.493196][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.519512][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.538293][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.551333][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.564466][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.577292][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.590865][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.604218][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6871 comm=syz.2.250 [ 147.713841][ T6874] loop9: detected capacity change from 0 to 8 [ 147.723214][ T6874] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 147.728635][ T6874] loop9: partition table partially beyond EOD, truncated [ 147.736030][ T6874] loop9: p1 size 81768186 extends beyond EOD, truncated [ 147.876172][ T6876] FAULT_INJECTION: forcing a failure. [ 147.876172][ T6876] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 147.890001][ T6876] CPU: 0 UID: 0 PID: 6876 Comm: syz.2.251 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 147.900616][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.910669][ T6876] Call Trace: [ 147.913950][ T6876] [ 147.916871][ T6876] dump_stack_lvl+0x16c/0x1f0 [ 147.921538][ T6876] should_fail_ex+0x497/0x5b0 [ 147.926203][ T6876] _copy_to_user+0x32/0xd0 [ 147.930617][ T6876] simple_read_from_buffer+0xd0/0x160 [ 147.936000][ T6876] proc_fail_nth_read+0x198/0x270 [ 147.941040][ T6876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.946570][ T6876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.952101][ T6876] vfs_read+0x1df/0xbe0 [ 147.956243][ T6876] ? __fget_files+0x1fc/0x3a0 [ 147.960899][ T6876] ? __pfx___mutex_lock+0x10/0x10 [ 147.965909][ T6876] ? __pfx_vfs_read+0x10/0x10 [ 147.970582][ T6876] ? __fget_files+0x206/0x3a0 [ 147.975261][ T6876] ksys_read+0x12b/0x250 [ 147.979498][ T6876] ? __pfx_ksys_read+0x10/0x10 [ 147.984248][ T6876] do_syscall_64+0xcd/0x250 [ 147.988739][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.994626][ T6876] RIP: 0033:0x7f892df8473c [ 147.999041][ T6876] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 148.018640][ T6876] RSP: 002b:00007f892ee7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.027036][ T6876] RAX: ffffffffffffffda RBX: 00007f892e175fa0 RCX: 00007f892df8473c [ 148.034995][ T6876] RDX: 000000000000000f RSI: 00007f892ee7e0a0 RDI: 0000000000000004 [ 148.042949][ T6876] RBP: 00007f892ee7e090 R08: 0000000000000000 R09: 0000000000000000 [ 148.050907][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.058872][ T6876] R13: 0000000000000000 R14: 00007f892e175fa0 R15: 00007ffebd5f8b28 [ 148.066839][ T6876] [ 148.099194][ T5897] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 148.119003][ T5897] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 148.135520][ T5897] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 148.169910][ T5897] usb 2-1: USB disconnect, device number 13 [ 148.243213][ T6873] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 148.320537][ T6881] overlayfs: failed to get inode (-116) [ 148.340244][ T6881] overlayfs: failed to get inode (-116) [ 148.350032][ T6881] overlayfs: failed to get inode (-116) [ 148.364191][ T6881] overlayfs: failed to get inode (-116) [ 148.662202][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 149.173358][ T2149] usb 5-1: USB disconnect, device number 7 [ 149.252122][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 149.259039][ T5897] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.272349][ T5897] usb 2-1: config 0 has no interface number 0 [ 149.342848][ T5897] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.380560][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.402693][ T5897] usb 2-1: Product: syz [ 149.406936][ T5897] usb 2-1: Manufacturer: syz [ 149.411847][ T5897] usb 2-1: SerialNumber: syz [ 149.418030][ T29] audit: type=1400 audit(1734950221.070:364): avc: denied { setopt } for pid=6892 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.500541][ T29] audit: type=1400 audit(1734950221.070:365): avc: denied { shutdown } for pid=6892 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.047506][ T5897] usb 2-1: config 0 descriptor?? [ 150.055806][ T5897] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 150.062320][ T6899] fuse: Unknown parameter 'D' [ 150.095302][ T29] audit: type=1400 audit(1734950221.770:366): avc: denied { setattr } for pid=6898 comm="syz.4.260" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 150.111819][ T6902] netlink: 'syz.0.259': attribute type 5 has an invalid length. [ 150.134240][ T29] audit: type=1400 audit(1734950221.780:367): avc: denied { call } for pid=6898 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.272726][ T5897] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 150.315907][ T6906] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.316986][ T5897] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 150.862492][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 150.915480][ T5897] usb 2-1: USB disconnect, device number 14 [ 151.052775][ T6923] loop9: detected capacity change from 0 to 8 [ 151.064299][ T6923] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 151.069736][ T6923] loop9: partition table partially beyond EOD, truncated [ 151.076993][ T6923] loop9: p1 size 81768186 extends beyond EOD, truncated [ 151.162738][ T5897] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 151.232396][ T5897] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 151.301648][ T5897] quatech2 2-1:0.51: device disconnected [ 151.478127][ T29] audit: type=1400 audit(1734950223.150:368): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 151.621450][ T6920] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 151.751054][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 152.471780][ T6934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.269'. [ 152.783370][ T6945] overlayfs: failed to get inode (-116) [ 152.794130][ T6945] overlayfs: failed to get inode (-116) [ 153.139752][ T29] audit: type=1400 audit(1734950224.790:369): avc: denied { write } for pid=6948 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.246612][ T6949] omfs: Invalid superblock (0) [ 153.336724][ T6955] syz.0.275 uses obsolete (PF_INET,SOCK_PACKET) [ 153.350708][ T29] audit: type=1400 audit(1734950225.020:370): avc: denied { setopt } for pid=6954 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.396592][ T29] audit: type=1400 audit(1734950225.040:371): avc: denied { read } for pid=6954 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.850484][ T29] audit: type=1400 audit(1734950225.470:372): avc: denied { create } for pid=6954 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.079547][ T6966] loop9: detected capacity change from 0 to 8 [ 154.086595][ T6966] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 154.091893][ T6966] loop9: partition table partially beyond EOD, truncated [ 154.127704][ T6966] loop9: p1 size 81768186 extends beyond EOD, truncated [ 154.189692][ T2149] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 154.216216][ T29] audit: type=1400 audit(1734950225.890:373): avc: denied { read } for pid=6967 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.312196][ T5930] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.330326][ T6976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.283'. [ 154.351786][ T2149] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 154.362148][ T2149] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.375427][ T2149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.386889][ T2149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.398212][ T2149] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.411774][ T2149] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.422411][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.433062][ T2149] usb 2-1: config 0 descriptor?? [ 154.441713][ T6978] overlay: Unknown parameter 'subj_user' [ 154.451479][ T29] audit: type=1400 audit(1734950226.120:374): avc: denied { map } for pid=6977 comm="syz.0.284" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 154.462084][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 154.475540][ T6962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.490348][ T5930] usb 5-1: too many configurations: 242, using maximum allowed: 8 [ 154.501650][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.518486][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.532203][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 154.554250][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.565776][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.577221][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.598295][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.617057][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.629145][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.648738][ T5930] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 154.660955][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 154.675997][ T5930] usb 5-1: Product: syz [ 154.680424][ T5930] usb 5-1: Manufacturer: syz [ 154.687192][ T5930] usb 5-1: SerialNumber: syz [ 154.699726][ T5930] usb 5-1: config 0 descriptor?? [ 154.706151][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 154.731059][ T5867] usb 3-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 154.746618][ T6965] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 154.832500][ T5867] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 154.842866][ T5867] usb 3-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 155.419572][ T5867] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 155.428880][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.449274][ T2149] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 155.459055][ T5867] usb 3-1: probing VID:PID(2201:012C) [ 155.471477][ T2149] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 155.486427][ T5867] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 155.496612][ T6970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.281'. [ 155.636858][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.699532][ T5867] vub300 3-1:63.0: probe with driver vub300 failed with error -22 [ 155.731111][ T5867] usb 3-1: USB disconnect, device number 10 [ 155.742716][ T29] audit: type=1400 audit(1734950227.310:375): avc: denied { getopt } for pid=6960 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.768773][ T2149] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 155.855499][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.873223][ T51] usb 2-1: USB disconnect, device number 15 [ 157.742681][ T29] audit: type=1400 audit(1734950229.420:376): avc: denied { ioctl } for pid=7002 comm="syz.1.292" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11725 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.197622][ T5898] usb 5-1: USB disconnect, device number 8 [ 158.242786][ T7015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.294'. [ 158.394815][ T7028] overlayfs: missing 'lowerdir' [ 158.531451][ T29] audit: type=1400 audit(1734950230.200:377): avc: denied { getopt } for pid=7022 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 159.042393][ T51] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 159.282230][ T51] usb 2-1: device descriptor read/64, error -71 [ 159.590366][ T51] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.742316][ T51] usb 2-1: device descriptor read/64, error -71 [ 160.147799][ T51] usb usb2-port1: attempt power cycle [ 160.722073][ T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 160.786847][ T51] usb 2-1: device descriptor read/8, error -71 [ 161.134714][ T51] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 161.745888][ T51] usb 2-1: device descriptor read/8, error -71 [ 161.874279][ T51] usb usb2-port1: unable to enumerate USB device [ 161.909208][ T7067] FAULT_INJECTION: forcing a failure. [ 161.909208][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 161.994676][ T7068] 9pnet: Could not find request transport: ρ [ 162.014723][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.0.309 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 162.025387][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.035466][ T7067] Call Trace: [ 162.038760][ T7067] [ 162.041697][ T7067] dump_stack_lvl+0x16c/0x1f0 [ 162.046400][ T7067] should_fail_ex+0x497/0x5b0 [ 162.051114][ T7067] ? fs_reclaim_acquire+0xae/0x150 [ 162.056258][ T7067] should_failslab+0xc2/0x120 [ 162.060958][ T7067] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 162.066368][ T7067] ? __pfx_map_id_range_down+0x10/0x10 [ 162.071862][ T7067] ? prepare_creds+0x2e/0x750 [ 162.076593][ T7067] prepare_creds+0x2e/0x750 [ 162.081113][ T7067] __sys_setreuid+0x101/0xaf0 [ 162.085829][ T7067] do_syscall_64+0xcd/0x250 [ 162.090378][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.096321][ T7067] RIP: 0033:0x7f2913185d29 [ 162.100756][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.120383][ T7067] RSP: 002b:00007f291402a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 162.128806][ T7067] RAX: ffffffffffffffda RBX: 00007f2913375fa0 RCX: 00007f2913185d29 [ 162.136770][ T7067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 162.144742][ T7067] RBP: 00007f291402a090 R08: 0000000000000000 R09: 0000000000000000 [ 162.152702][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.160662][ T7067] R13: 0000000000000000 R14: 00007f2913375fa0 R15: 00007ffeef07eaf8 [ 162.168631][ T7067] [ 162.338428][ T29] audit: type=1400 audit(1734950234.010:378): avc: denied { write } for pid=7082 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.702042][ T51] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 162.790332][ T5869] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.872100][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 162.884498][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.000199][ T51] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 163.211837][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 163.254095][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.291893][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.309039][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.318054][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 163.333886][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.347252][ T51] usb 2-1: config 0 descriptor?? [ 163.353479][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.504482][ T51] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 164.087658][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.100129][ T5869] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 164.124130][ T5869] usb 1-1: Manufacturer: syz [ 164.125839][ T5173] bcm5974 2-1:0.0: could not read from device [ 164.141812][ T5173] bcm5974 2-1:0.0: could not read from device [ 164.158795][ T51] usb 2-1: USB disconnect, device number 20 [ 164.162933][ T5173] bcm5974 2-1:0.0: could not read from device [ 164.165322][ T5869] usb 1-1: config 0 descriptor?? [ 164.203048][ T5173] bcm5974 2-1:0.0: could not read from device [ 164.228510][ T5173] bcm5974 2-1:0.0: could not read from device [ 164.294738][ T5810] bcm5974 2-1:0.0: could not read from device [ 164.312087][ T29] audit: type=1400 audit(1734950235.980:379): avc: denied { watch_mount } for pid=7103 comm="syz.2.320" path="/55" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.369077][ T29] audit: type=1400 audit(1734950236.010:380): avc: denied { read } for pid=7103 comm="syz.2.320" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 164.403050][ T29] audit: type=1400 audit(1734950236.010:381): avc: denied { open } for pid=7103 comm="syz.2.320" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 164.433010][ T29] audit: type=1400 audit(1734950236.010:382): avc: denied { ioctl } for pid=7103 comm="syz.2.320" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 164.775996][ T7111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.874534][ T7108] tipc: Started in network mode [ 164.900559][ T5810] udevd[5810]: Error opening device "/dev/input/event4": No such file or directory [ 164.910110][ T7108] tipc: Node identity 92799205f435, cluster identity 4711 [ 164.931883][ T7108] tipc: Enabled bearer , priority 0 [ 164.942621][ T5810] udevd[5810]: Unable to EVIOCGABS device "/dev/input/event4" [ 164.962284][ T5869] rc_core: IR keymap rc-hauppauge not found [ 165.058086][ T5810] udevd[5810]: Unable to EVIOCGABS device "/dev/input/event4" [ 165.062111][ T5869] Registered IR keymap rc-empty [ 165.067263][ T5810] udevd[5810]: Unable to EVIOCGABS device "/dev/input/event4" [ 165.078516][ T5810] udevd[5810]: Unable to EVIOCGABS device "/dev/input/event4" [ 165.112138][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.142399][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.162552][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 165.163840][ T7114] syzkaller0: entered promiscuous mode [ 165.225717][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 165.238108][ T7114] syzkaller0: entered allmulticast mode [ 165.254261][ T7114] tipc: Resetting bearer [ 165.275432][ T7120] ======================================================= [ 165.275432][ T7120] WARNING: The mand mount option has been deprecated and [ 165.275432][ T7120] and is ignored by this kernel. Remove the mand [ 165.275432][ T7120] option from the mount to silence this warning. [ 165.275432][ T7120] ======================================================= [ 165.340128][ T7107] tipc: Resetting bearer [ 165.340333][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.424539][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.450756][ T29] audit: type=1400 audit(1734950237.120:383): avc: denied { mount } for pid=7119 comm="syz.4.324" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.491590][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.545548][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.574510][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.582846][ T29] audit: type=1400 audit(1734950237.190:384): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.603640][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.654913][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.722102][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.935768][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.972114][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.002798][ T5869] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 166.012929][ T5869] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 166.043398][ T5867] tipc: Node number set to 1716294149 [ 166.093746][ T5869] usb 1-1: USB disconnect, device number 9 [ 166.274822][ T29] audit: type=1400 audit(1734950237.940:385): avc: denied { map } for pid=7132 comm="syz.3.326" path="socket:[11896]" dev="sockfs" ino=11896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.298059][ T29] audit: type=1400 audit(1734950237.940:386): avc: denied { read } for pid=7132 comm="syz.3.326" path="socket:[11896]" dev="sockfs" ino=11896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.427192][ T29] audit: type=1400 audit(1734950239.100:387): avc: denied { connect } for pid=7142 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.577726][ T29] audit: type=1400 audit(1734950239.240:388): avc: denied { execute } for pid=7142 comm="syz.3.330" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 167.832172][ T5869] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 167.994636][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 168.029904][ T5869] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 168.039157][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.067877][ T5869] usb 1-1: config 0 descriptor?? [ 168.293956][ T5869] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 168.316207][ T5869] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 168.325224][ T5869] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 168.618691][ T7107] tipc: Disabling bearer [ 168.913493][ T7149] ptm ptm9: ldisc open failed (-12), clearing slot 9 [ 169.653013][ T7157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.687652][ T7174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.338'. [ 173.205867][ T7190] input: syz1 as /devices/virtual/input/input16 [ 173.312170][ T29] audit: type=1400 audit(1734950244.970:389): avc: denied { remount } for pid=7191 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.331790][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.409022][ T29] audit: type=1400 audit(1734950245.040:390): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.513694][ T7199] hub 2-0:1.0: USB hub found [ 173.522223][ T7199] hub 2-0:1.0: 1 port detected [ 174.544345][ T7208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.558199][ T29] audit: type=1400 audit(1734950246.220:391): avc: denied { read } for pid=7207 comm="syz.3.347" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.580594][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.650514][ T29] audit: type=1400 audit(1734950246.220:392): avc: denied { open } for pid=7207 comm="syz.3.347" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.682050][ T29] audit: type=1400 audit(1734950246.220:393): avc: denied { ioctl } for pid=7207 comm="syz.3.347" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.717162][ T7217] overlayfs: failed to get inode (-116) [ 175.727077][ T7222] overlayfs: failed to get inode (-116) [ 175.743773][ T7217] overlayfs: failed to get inode (-116) [ 175.749746][ T7222] overlayfs: failed to get inode (-116) [ 176.120846][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 176.128179][ T5127] Bluetooth: hci1: command 0x0406 tx timeout [ 176.157417][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 176.198179][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 176.204636][ T5127] Bluetooth: hci4: command 0x0406 tx timeout [ 178.277677][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.285164][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.832293][ T7327] hub 2-0:1.0: USB hub found [ 180.992043][ T7327] hub 2-0:1.0: 1 port detected [ 181.112118][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 181.128182][ T29] audit: type=1400 audit(1734950252.800:394): avc: denied { bind } for pid=7321 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.165152][ T7316] syz.2.361 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 181.693381][ T29] audit: type=1400 audit(1734950253.280:395): avc: denied { write } for pid=7321 comm="syz.4.365" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 181.880778][ T29] audit: type=1400 audit(1734950253.480:396): avc: denied { write } for pid=7339 comm="syz.1.367" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.724064][ T7347] tty tty27: ldisc open failed (-12), clearing slot 26 [ 182.767424][ T5897] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 183.212104][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 183.738986][ T5897] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 183.748181][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.759751][ T5897] usb 2-1: config 0 descriptor?? [ 184.010327][ T5897] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 184.169690][ T7371] loop9: detected capacity change from 0 to 8 [ 184.297006][ T7371] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 184.302505][ T7371] loop9: partition table partially beyond EOD, truncated [ 184.309676][ T7371] loop9: p1 size 81768186 extends beyond EOD, truncated [ 185.083932][ T7370] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 185.926044][ T51] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.282133][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 186.289434][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 186.304490][ T51] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 186.304661][ T7388] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 186.316687][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.331036][ T51] usb 5-1: Product: syz [ 186.340221][ T51] usb 5-1: Manufacturer: syz [ 186.345340][ T51] usb 5-1: SerialNumber: syz [ 186.366080][ T51] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input17 [ 186.580973][ T5173] bcm5974 5-1:1.0: could not read from device [ 186.590418][ T6168] bcm5974 5-1:1.0: could not read from device [ 186.597595][ T5868] usb 5-1: USB disconnect, device number 9 [ 186.604790][ T5173] bcm5974 5-1:1.0: could not read from device [ 186.672684][ T51] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.822238][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 186.829946][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.840556][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.852542][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 186.863683][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.873583][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.887983][ T51] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 186.898708][ T51] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 186.907529][ T51] usb 3-1: Manufacturer: syz [ 186.931805][ T51] usb 3-1: config 0 descriptor?? [ 187.125996][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 187.642078][ T51] rc_core: IR keymap rc-hauppauge not found [ 187.648042][ T51] Registered IR keymap rc-empty [ 187.658592][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 187.682213][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 187.925900][ T51] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 187.947607][ T51] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 188.057686][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.082241][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.112415][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.132084][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.138135][ T7409] input: syz1 as /devices/virtual/input/input19 [ 188.152152][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.182180][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.202503][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.233163][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.252157][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.282170][ T51] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 188.312976][ T51] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 188.322208][ T51] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 188.339265][ T51] usb 3-1: USB disconnect, device number 11 [ 188.472108][ T5930] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.628417][ T5930] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 188.655966][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.672905][ T5930] usb 5-1: config 0 descriptor?? [ 188.679385][ T29] audit: type=1400 audit(1734950260.350:397): avc: denied { create } for pid=7412 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.699059][ T29] audit: type=1400 audit(1734950260.360:398): avc: denied { ioctl } for pid=7412 comm="syz.1.384" path="socket:[12227]" dev="sockfs" ino=12227 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.930591][ T5930] usb 5-1: string descriptor 0 read error: -71 [ 188.944672][ T5930] ldusb 5-1:0.0: Interrupt in endpoint not found [ 188.966479][ T5930] usb 5-1: USB disconnect, device number 10 [ 189.368184][ T7421] loop9: detected capacity change from 0 to 8 [ 189.406776][ T7421] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 189.413505][ T7421] loop9: partition table partially beyond EOD, truncated [ 189.446668][ T7421] loop9: p1 size 81768186 extends beyond EOD, truncated [ 189.711871][ T7417] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 190.163609][ T29] audit: type=1400 audit(1734950261.840:399): avc: denied { create } for pid=7426 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 190.189613][ T5868] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.528959][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.553907][ T5868] usb 3-1: config 0 has no interfaces? [ 190.609196][ T5868] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 190.619784][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.631304][ T5868] usb 3-1: config 0 descriptor?? [ 190.672291][ T5930] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 190.882228][ T5930] usb 5-1: Invalid ep0 maxpacket: 64 [ 190.918453][ T7439] overlayfs: failed to get inode (-116) [ 190.927646][ T7439] overlayfs: failed to get inode (-116) [ 190.937991][ T7439] overlayfs: failed to get inode (-116) [ 190.946847][ T7439] overlayfs: failed to get inode (-116) [ 190.956857][ T7439] binder: 7437:7439 ioctl 4018620d 0 returned -22 [ 191.022180][ T5930] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 191.767322][ T7445] FAULT_INJECTION: forcing a failure. [ 191.767322][ T7445] name failslab, interval 1, probability 0, space 0, times 0 [ 191.795252][ T7445] CPU: 1 UID: 0 PID: 7445 Comm: syz.3.392 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 191.805911][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.816001][ T7445] Call Trace: [ 191.819285][ T7445] [ 191.822218][ T7445] dump_stack_lvl+0x16c/0x1f0 [ 191.826916][ T7445] should_fail_ex+0x497/0x5b0 [ 191.831578][ T7445] ? fs_reclaim_acquire+0xae/0x150 [ 191.836683][ T7445] should_failslab+0xc2/0x120 [ 191.841353][ T7445] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 191.842082][ T5930] usb 5-1: device not accepting address 12, error -71 [ 191.847172][ T7445] ? __alloc_skb+0x2b1/0x380 [ 191.854308][ T5930] usb usb5-port1: attempt power cycle [ 191.858499][ T7445] __alloc_skb+0x2b1/0x380 [ 191.868279][ T7445] ? __pfx___alloc_skb+0x10/0x10 [ 191.873209][ T7445] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 191.879533][ T7445] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 191.886189][ T7445] netlink_alloc_large_skb+0x69/0x130 [ 191.891544][ T7445] netlink_sendmsg+0x689/0xd70 [ 191.896292][ T7445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.901574][ T7445] ____sys_sendmsg+0xaaf/0xc90 [ 191.906331][ T7445] ? copy_msghdr_from_user+0x10b/0x160 [ 191.911768][ T7445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.917037][ T7445] ___sys_sendmsg+0x135/0x1e0 [ 191.921702][ T7445] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.926905][ T7445] ? __pfx_lock_release+0x10/0x10 [ 191.931914][ T7445] ? trace_lock_acquire+0x14e/0x1f0 [ 191.937132][ T7445] ? __fget_files+0x206/0x3a0 [ 191.941808][ T7445] __sys_sendmsg+0x16e/0x220 [ 191.946377][ T7445] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.951484][ T7445] do_syscall_64+0xcd/0x250 [ 191.955972][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.961860][ T7445] RIP: 0033:0x7f6096185d29 [ 191.966252][ T7445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.985839][ T7445] RSP: 002b:00007f6096ee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.994232][ T7445] RAX: ffffffffffffffda RBX: 00007f6096375fa0 RCX: 00007f6096185d29 [ 192.002189][ T7445] RDX: 0000000020000804 RSI: 0000000020000300 RDI: 0000000000000003 [ 192.010178][ T7445] RBP: 00007f6096ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 192.018135][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.026098][ T7445] R13: 0000000000000000 R14: 00007f6096375fa0 R15: 00007ffe84e388a8 [ 192.034056][ T7445] [ 192.293231][ T7450] loop9: detected capacity change from 0 to 8 [ 192.304393][ T7450] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 192.309854][ T7450] loop9: partition table partially beyond EOD, truncated [ 192.317623][ T7450] loop9: p1 size 81768186 extends beyond EOD, truncated [ 192.406376][ T5867] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 192.703736][ T7449] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 192.787049][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 192.797281][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 192.809389][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 192.824503][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 192.834541][ T5867] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 192.850697][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.928813][ T5930] usb 3-1: USB disconnect, device number 12 [ 193.006876][ T5867] usb 4-1: config 0 descriptor?? [ 193.681296][ T7459] loop9: detected capacity change from 0 to 8 [ 193.706789][ T7459] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 193.712369][ T7459] loop9: partition table partially beyond EOD, truncated [ 193.720237][ T7459] loop9: p1 size 81768186 extends beyond EOD, truncated [ 194.043734][ T7457] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 194.052354][ T29] audit: type=1400 audit(1734950265.720:400): avc: denied { read } for pid=7447 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.149898][ T29] audit: type=1400 audit(1734950265.770:401): avc: denied { shutdown } for pid=7447 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.158638][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 194.169765][ T5867] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 194.188806][ T29] audit: type=1326 audit(1734950265.770:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6096185d29 code=0x7ffc0000 [ 194.220842][ T5867] hdpvr 4-1:0.0: device init failed [ 194.233003][ T5867] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 194.250465][ T5867] usb 4-1: USB disconnect, device number 14 [ 194.261638][ T29] audit: type=1326 audit(1734950265.770:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6096185d29 code=0x7ffc0000 [ 194.276042][ T7467] input: syz1 as /devices/virtual/input/input20 [ 194.290557][ T29] audit: type=1326 audit(1734950265.770:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6096185d29 code=0x7ffc0000 [ 194.327919][ T29] audit: type=1326 audit(1734950265.770:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6096185d29 code=0x7ffc0000 [ 194.364304][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.370637][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389579][ T29] audit: type=1326 audit(1734950265.770:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6096185d29 code=0x7ffc0000 [ 194.414045][ T29] audit: type=1326 audit(1734950265.770:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6096185d29 code=0x7ffc0000 [ 194.437791][ T29] audit: type=1326 audit(1734950265.770:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f6096185d29 code=0x7ffc0000 [ 194.462086][ T29] audit: type=1326 audit(1734950265.820:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6096185d29 code=0x7ffc0000 [ 194.539341][ T7469] kvm: emulating exchange as write [ 194.637290][ T7473] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.162704][ T5898] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 195.422299][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 195.434488][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.457507][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.501430][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 195.549885][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.561801][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.576444][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.585681][ T5898] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.593804][ T5898] usb 4-1: Manufacturer: syz [ 195.623071][ T5898] usb 4-1: config 0 descriptor?? [ 195.774739][ T7489] overlayfs: failed to get inode (-116) [ 195.780703][ T7489] overlayfs: failed to get inode (-116) [ 195.826261][ T7490] overlayfs: failed to get inode (-116) [ 195.862397][ T7490] overlayfs: failed to get inode (-116) [ 195.875839][ T7493] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 195.883885][ T7493] netlink: 224 bytes leftover after parsing attributes in process `syz.2.405'. [ 195.886077][ T7489] binder: 7487:7489 ioctl 4018620d 0 returned -22 [ 195.902032][ T5898] rc_core: IR keymap rc-hauppauge not found [ 195.908262][ T5898] Registered IR keymap rc-empty [ 195.914375][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.945430][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.985047][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 196.001641][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 196.033616][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.072268][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.110345][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.142204][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.179042][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.222112][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.252301][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.282638][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.315929][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.342820][ T5898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.364647][ T5898] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 196.377669][ T5898] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 196.458387][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.470200][ T5898] usb 4-1: USB disconnect, device number 15 [ 196.476756][ T51] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 196.484602][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.493888][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.505360][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.514987][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 196.524596][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.644862][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.657845][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.671306][ T51] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 196.680540][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.700235][ T51] usb 3-1: config 0 descriptor?? [ 196.729904][ T51] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 196.832385][ T5930] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.154167][ T7519] FAULT_INJECTION: forcing a failure. [ 197.154167][ T7519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.174682][ T7519] CPU: 1 UID: 0 PID: 7519 Comm: syz.1.414 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 197.185334][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.195407][ T7519] Call Trace: [ 197.198706][ T7519] [ 197.201650][ T7519] dump_stack_lvl+0x16c/0x1f0 [ 197.206365][ T7519] should_fail_ex+0x497/0x5b0 [ 197.211078][ T7519] _copy_from_iter+0x2a1/0x1560 [ 197.215960][ T7519] ? trace_lock_acquire+0x14e/0x1f0 [ 197.218233][ T7508] chnl_net:caif_netlink_parms(): no params data found [ 197.221170][ T7519] ? __alloc_skb+0x1fe/0x380 [ 197.221206][ T7519] ? __pfx__copy_from_iter+0x10/0x10 [ 197.237880][ T7519] ? __virt_addr_valid+0x1a4/0x590 [ 197.243066][ T7519] ? __virt_addr_valid+0x5e/0x590 [ 197.248130][ T7519] ? __phys_addr_symbol+0x30/0x80 [ 197.253201][ T7519] ? __check_object_size+0x488/0x710 [ 197.258523][ T7519] netlink_sendmsg+0x813/0xd70 [ 197.259005][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.263316][ T7519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.263363][ T7519] ____sys_sendmsg+0xaaf/0xc90 [ 197.263386][ T7519] ? copy_msghdr_from_user+0x10b/0x160 [ 197.263404][ T7519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.263436][ T7519] ___sys_sendmsg+0x135/0x1e0 [ 197.263454][ T7519] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.277616][ T5930] usb 5-1: config 0 has no interfaces? [ 197.278773][ T7519] ? __pfx_lock_release+0x10/0x10 [ 197.284558][ T5930] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 197.288967][ T7519] ? trace_lock_acquire+0x14e/0x1f0 [ 197.289013][ T7519] ? __fget_files+0x206/0x3a0 [ 197.298137][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.298944][ T7519] __sys_sendmsg+0x16e/0x220 [ 197.306911][ T5930] usb 5-1: config 0 descriptor?? [ 197.309546][ T7519] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.309590][ T7519] do_syscall_64+0xcd/0x250 [ 197.360560][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.366447][ T7519] RIP: 0033:0x7f4c2e185d29 [ 197.370844][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.390453][ T7519] RSP: 002b:00007f4c2f010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.398870][ T7519] RAX: ffffffffffffffda RBX: 00007f4c2e375fa0 RCX: 00007f4c2e185d29 [ 197.406836][ T7519] RDX: 0000000020000804 RSI: 0000000020000300 RDI: 0000000000000003 [ 197.414804][ T7519] RBP: 00007f4c2f010090 R08: 0000000000000000 R09: 0000000000000000 [ 197.422774][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.430728][ T7519] R13: 0000000000000000 R14: 00007f4c2e375fa0 R15: 00007ffd456217f8 [ 197.438708][ T7519] [ 197.495821][ T7527] mmap: syz.3.413 (7527) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 197.496297][ T7508] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.524601][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.533384][ T7508] bridge_slave_0: entered allmulticast mode [ 197.540356][ T7508] bridge_slave_0: entered promiscuous mode [ 197.548200][ T7508] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.556116][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.563465][ T7508] bridge_slave_1: entered allmulticast mode [ 197.573574][ T7508] bridge_slave_1: entered promiscuous mode [ 197.608125][ T7508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.743991][ T7508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.441755][ T7508] team0: Port device team_slave_0 added [ 198.478946][ T7535] netlink: 1736 bytes leftover after parsing attributes in process `syz.3.416'. [ 198.578479][ T54] Bluetooth: hci5: command tx timeout [ 198.659032][ T7508] team0: Port device team_slave_1 added [ 198.710525][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.732779][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.758932][ T7508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.772055][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.779120][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.805673][ T7508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.955931][ T7508] hsr_slave_0: entered promiscuous mode [ 198.977588][ T7508] hsr_slave_1: entered promiscuous mode [ 198.994820][ T7508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.003981][ T7508] Cannot create hsr debugfs directory [ 199.259380][ T7508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.289307][ T7508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.317079][ T7508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.339718][ T7508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.430795][ T5866] usb 3-1: USB disconnect, device number 13 [ 199.719034][ T7508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.768984][ T7508] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.775500][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.775604][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.849815][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.849873][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.028546][ T7554] 9pnet_fd: Insufficient options for proto=fd [ 200.031605][ T5867] IPVS: starting estimator thread 0... [ 200.062146][ T5868] usb 5-1: USB disconnect, device number 14 [ 200.163304][ T7557] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 200.185263][ T7555] IPVS: using max 27 ests per chain, 64800 per kthread [ 200.695206][ T7560] syz.4.420 (7560): drop_caches: 2 [ 200.826280][ T7557] syz.4.420 (7557): drop_caches: 2 [ 200.828255][ T7557] syz.4.420 (7557): drop_caches: 2 [ 200.857678][ T54] Bluetooth: hci5: command tx timeout [ 201.028008][ T7508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.402777][ T7569] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 201.444035][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 201.444056][ T29] audit: type=1400 audit(1734950273.110:429): avc: denied { block_suspend } for pid=7565 comm="syz.3.422" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.736256][ T7508] veth0_vlan: entered promiscuous mode [ 201.758258][ T29] audit: type=1400 audit(1734950273.360:430): avc: denied { write } for pid=7579 comm="syz.1.425" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.815964][ T7508] veth1_vlan: entered promiscuous mode [ 201.846836][ T7583] Bluetooth: MGMT ver 1.23 [ 201.853358][ T29] audit: type=1400 audit(1734950273.520:431): avc: denied { write } for pid=7581 comm="syz.1.428" path="socket:[14114]" dev="sockfs" ino=14114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.887938][ T7568] [ 201.890320][ T7568] ============================================ [ 201.896479][ T7568] WARNING: possible recursive locking detected [ 201.902640][ T7568] 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 Not tainted [ 201.909758][ T7568] -------------------------------------------- [ 201.915917][ T7568] syz.4.423/7568 is trying to acquire lock: [ 201.921881][ T7568] ffff888068c48078 (&hdev->lock){+.+.}-{4:4}, at: mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 201.932147][ T7568] [ 201.932147][ T7568] but task is already holding lock: [ 201.939495][ T7568] ffff888068c48078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 201.948710][ T7568] [ 201.948710][ T7568] other info that might help us debug this: [ 201.956755][ T7568] Possible unsafe locking scenario: [ 201.956755][ T7568] [ 201.964191][ T7568] CPU0 [ 201.967454][ T7568] ---- [ 201.970715][ T7568] lock(&hdev->lock); [ 201.974797][ T7568] lock(&hdev->lock); [ 201.978851][ T7568] [ 201.978851][ T7568] *** DEADLOCK *** [ 201.978851][ T7568] [ 201.986977][ T7568] May be due to missing lock nesting notation [ 201.986977][ T7568] [ 201.995280][ T7568] 3 locks held by syz.4.423/7568: [ 202.000284][ T7568] #0: ffff888068c48d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 202.009852][ T7568] #1: ffff888068c48078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 202.019504][ T7568] #2: ffff888068c48690 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}, at: hci_cmd_sync_dequeue+0x50/0x1f0 [ 202.030391][ T7568] [ 202.030391][ T7568] stack backtrace: [ 202.036263][ T7568] CPU: 1 UID: 0 PID: 7568 Comm: syz.4.423 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 202.046833][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.056879][ T7568] Call Trace: [ 202.060143][ T7568] [ 202.063066][ T7568] dump_stack_lvl+0x116/0x1f0 [ 202.067739][ T7568] print_deadlock_bug+0x2e3/0x410 [ 202.072752][ T7568] __lock_acquire+0x2117/0x3c40 [ 202.077591][ T7568] ? __pfx___lock_acquire+0x10/0x10 [ 202.082776][ T7568] ? lockdep_unlock+0x11a/0x290 [ 202.087616][ T7568] ? __lock_acquire+0x2077/0x3c40 [ 202.092631][ T7568] lock_acquire.part.0+0x11b/0x380 [ 202.097733][ T7568] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 202.104056][ T7568] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 202.109687][ T7568] ? rcu_is_watching+0x12/0xc0 [ 202.114444][ T7568] ? trace_lock_acquire+0x14e/0x1f0 [ 202.119633][ T7568] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 202.125953][ T7568] ? lock_acquire+0x2f/0xb0 [ 202.130443][ T7568] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 202.136765][ T7568] __mutex_lock+0x19b/0xa60 [ 202.141260][ T7568] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 202.147579][ T7568] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 202.153917][ T7568] ? __pfx___mutex_lock+0x10/0x10 [ 202.158934][ T7568] ? rcu_is_watching+0x12/0xc0 [ 202.163698][ T7568] ? trace_contention_end+0xee/0x140 [ 202.168973][ T7568] ? hci_cmd_sync_dequeue+0x50/0x1f0 [ 202.174279][ T7568] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 202.180631][ T7568] mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 202.186799][ T7568] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 202.193556][ T7568] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 202.200307][ T7568] _hci_cmd_sync_cancel_entry.constprop.0+0x6c/0x1d0 [ 202.206977][ T7568] hci_cmd_sync_dequeue+0x178/0x1f0 [ 202.212173][ T7568] cmd_complete_rsp+0x46/0x1e0 [ 202.216925][ T7568] mgmt_pending_foreach+0xdf/0x140 [ 202.222031][ T7568] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 202.227393][ T7568] __mgmt_power_off+0x12a/0x2c0 [ 202.232231][ T7568] ? __pfx___mgmt_power_off+0x10/0x10 [ 202.237587][ T7568] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.243558][ T7568] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.248745][ T7568] ? 0xffffffff81000000 [ 202.252883][ T7568] hci_dev_close_sync+0xcbb/0x11a0 [ 202.257989][ T7568] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 202.263533][ T7568] hci_dev_do_close+0x2e/0x90 [ 202.268203][ T7568] hci_dev_close+0x183/0x1e0 [ 202.272786][ T7568] hci_sock_ioctl+0x2b5/0x7d0 [ 202.277470][ T7568] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 202.282660][ T7568] sock_do_ioctl+0x116/0x280 [ 202.287239][ T7568] ? __pfx_sock_do_ioctl+0x10/0x10 [ 202.292342][ T7568] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 202.298833][ T7568] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 202.305324][ T7568] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 202.312164][ T7568] sock_ioctl+0x228/0x6c0 [ 202.316482][ T7568] ? __pfx_sock_ioctl+0x10/0x10 [ 202.321325][ T7568] ? selinux_file_ioctl+0x180/0x270 [ 202.326510][ T7568] ? selinux_file_ioctl+0xb4/0x270 [ 202.331611][ T7568] ? __pfx_sock_ioctl+0x10/0x10 [ 202.336451][ T7568] __x64_sys_ioctl+0x190/0x200 [ 202.341207][ T7568] do_syscall_64+0xcd/0x250 [ 202.345702][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.351585][ T7568] RIP: 0033:0x7fce98985d29 [ 202.355985][ T7568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.375585][ T7568] RSP: 002b:00007fce99732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.383984][ T7568] RAX: ffffffffffffffda RBX: 00007fce98b75fa0 RCX: 00007fce98985d29 [ 202.391944][ T7568] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000e [ 202.399905][ T7568] RBP: 00007fce98a01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 202.407864][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.415819][ T7568] R13: 0000000000000000 R14: 00007fce98b75fa0 R15: 00007ffefc6c2228 [ 202.423781][ T7568] [ 202.428362][ T7508] veth0_macvtap: entered promiscuous mode [ 202.436685][ T7508] veth1_macvtap: entered promiscuous mode [ 202.449041][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.459570][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.469760][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.474745][ T7588] 9pnet_fd: Insufficient options for proto=fd [ 202.480496][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.507900][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.518445][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.528315][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.538828][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.548680][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.559215][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 202.570318][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.579611][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.590167][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.590620][ T5823] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 202.600027][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.617241][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.627101][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.637592][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.647534][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.658049][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.667912][ T7508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.678775][ T7508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.689688][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.698516][ T7508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.707331][ T7508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.716088][ T7508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.724861][ T7508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.752473][ T29] audit: type=1400 audit(1734950274.140:432): avc: denied { sqpoll } for pid=7586 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 202.896691][ T5823] Bluetooth: hci5: command tx timeout [ 203.014856][ T7303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.096123][ T7303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.174261][ T7303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.244838][ T7303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.335886][ T7303] bridge_slave_1: left allmulticast mode [ 203.341560][ T7303] bridge_slave_1: left promiscuous mode [ 203.348282][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.356632][ T7303] bridge_slave_0: left allmulticast mode [ 203.362520][ T7303] bridge_slave_0: left promiscuous mode [ 203.368140][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.545489][ T7303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.554979][ T7303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.564452][ T7303] bond0 (unregistering): Released all slaves [ 203.574502][ T29] audit: type=1400 audit(1734950275.250:433): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.596553][ T29] audit: type=1400 audit(1734950275.250:434): avc: denied { read } for pid=5482 comm="dhcpcd" name="n100" dev="tmpfs" ino=3828 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.621403][ T29] audit: type=1400 audit(1734950275.250:435): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3828 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.654542][ T29] audit: type=1400 audit(1734950275.250:436): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3828 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.679545][ T29] audit: type=1400 audit(1734950275.330:437): avc: denied { read } for pid=7598 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.706666][ T29] audit: type=1400 audit(1734950275.330:438): avc: denied { open } for pid=7598 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.820526][ T7303] hsr_slave_0: left promiscuous mode [ 203.826477][ T7303] hsr_slave_1: left promiscuous mode [ 203.832453][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.839855][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.847698][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.856488][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.865709][ T7303] veth1_macvtap: left promiscuous mode [ 203.871194][ T7303] veth0_macvtap: left promiscuous mode [ 203.876932][ T7303] veth1_vlan: left promiscuous mode [ 203.882196][ T7303] veth0_vlan: left promiscuous mode [ 203.957801][ T7303] team0 (unregistering): Port device team_slave_1 removed [ 203.978450][ T7303] team0 (unregistering): Port device team_slave_0 removed [ 204.297880][ T7303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.346745][ T7303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.407019][ T7303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.445821][ T7303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.529255][ T7303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.597972][ T7303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.648328][ T7303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.713441][ T7303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.778546][ T7303] bridge_slave_1: left allmulticast mode [ 204.785046][ T7303] bridge_slave_1: left promiscuous mode [ 204.790728][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.800392][ T7303] bridge_slave_0: left allmulticast mode [ 204.807174][ T7303] bridge_slave_0: left promiscuous mode [ 204.813760][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.823967][ T7303] bridge_slave_1: left allmulticast mode [ 204.829639][ T7303] bridge_slave_1: left promiscuous mode [ 204.835979][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.847558][ T7303] bridge_slave_0: left allmulticast mode [ 204.853686][ T7303] bridge_slave_0: left promiscuous mode [ 204.859345][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.105056][ T7303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.115027][ T7303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.124302][ T7303] bond0 (unregistering): Released all slaves [ 205.134774][ T7303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.144580][ T7303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.153893][ T7303] bond0 (unregistering): Released all slaves [ 205.213405][ T7303] tipc: Left network mode [ 205.227752][ T7303] tipc: Left network mode [ 205.479921][ T7303] hsr_slave_0: left promiscuous mode [ 205.485597][ T7303] hsr_slave_1: left promiscuous mode [ 205.491158][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.499655][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.507714][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.515196][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.524829][ T7303] hsr_slave_0: left promiscuous mode [ 205.530373][ T7303] hsr_slave_1: left promiscuous mode [ 205.536142][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.543789][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.551233][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.558660][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.567417][ T7303] veth1_macvtap: left promiscuous mode [ 205.572953][ T7303] veth0_macvtap: left promiscuous mode [ 205.578453][ T7303] veth1_vlan: left promiscuous mode [ 205.583739][ T7303] veth0_vlan: left promiscuous mode [ 205.589343][ T7303] veth1_macvtap: left promiscuous mode [ 205.594855][ T7303] veth0_macvtap: left promiscuous mode [ 205.600337][ T7303] veth1_vlan: left promiscuous mode [ 205.605729][ T7303] veth0_vlan: left promiscuous mode [ 205.713911][ T7303] team0 (unregistering): Port device team_slave_1 removed [ 205.735960][ T7303] team0 (unregistering): Port device team_slave_0 removed [ 205.864495][ T7303] team0 (unregistering): Port device team_slave_1 removed [ 205.885032][ T7303] team0 (unregistering): Port device team_slave_0 removed [ 206.323339][ T7303] IPVS: stop unused estimator thread 0... [ 206.377016][ T7303] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.425035][ T7303] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.475390][ T7303] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.516461][ T7303] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.604447][ T7303] bridge_slave_1: left allmulticast mode [ 206.610195][ T7303] bridge_slave_1: left promiscuous mode [ 206.616728][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.625607][ T7303] bridge_slave_0: left allmulticast mode [ 206.631263][ T7303] bridge_slave_0: left promiscuous mode [ 206.637724][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.738828][ T7303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.748785][ T7303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.758326][ T7303] bond0 (unregistering): Released all slaves [ 206.820426][ T7303] hsr_slave_0: left promiscuous mode [ 206.826815][ T7303] hsr_slave_1: left promiscuous mode [ 206.834286][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.841707][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.854199][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.861628][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.871064][ T7303] veth1_macvtap: left promiscuous mode [ 206.878165][ T7303] veth0_macvtap: left promiscuous mode [ 206.883860][ T7303] veth1_vlan: left promiscuous mode [ 206.889136][ T7303] veth0_vlan: left promiscuous mode [ 206.977930][ T7303] team0 (unregistering): Port device team_slave_1 removed [ 206.998646][ T7303] team0 (unregistering): Port device team_slave_0 removed